基于多阶段传输的智能变电站安全通信策略

Security Communication Strategy for Smart Substation Based on Multi-stage Transmission

以太网技术的应用促进了智能变电站信息共享的发展,但信息的传输面临着诸多风险,基于IEC 62351标准的智能变电站对信息传输安全提出了新的要求。目前,智能变电站通信报文存在非法窃取、篡改、拒绝服务、抵赖和重放攻击等安全威胁,针对此问题,文中提出了一种基于多阶段传输的安全通信策略。该策略通过双序列函数实现通信主体身份的双向认证,利用双序列函数产生的随机因子校验报文的新鲜性,结合数字签名算法检验报文的完整性和解决主体的抵赖威胁。进一步地,以D2-1型变电站星形和环形网络下两种母线故障场景为例,对所提策略的延时进行定量计算和OPNET仿真验证,得到了两种网络结构下安全报文进行多阶段传输的端对端通信延时。仿真结果表明,所提通信策略在满足智能变电站通信实时性要求的同时有效提高了通信报文的安全性。

The application of Ethernet technology has promoted the development of information sharing in smart substations,but the transmission of information faces many risks.Smart substations based on the IEC 62351 standard have new requirements for the security of information transmission.At present,there are security threats such as illegal theft,tampering,denial of service,denial and replay attacks on communication messages in smart substations.To solve this problem,a security communication strategy based on multi-stage transmission is proposed.The strategy realizes the two-way authentication of the identity of the communication subject through the double sequence function,uses the random factor generated by the double sequence function to check the freshness of the message,and combines the digital signature algorithm to verify the integrity of the message and solve the subject’s denial threat.Furthermore,the delay of the proposed strategy is quantitatively calculated and validated by the OPNET simulation in two cases that the bus faults occur in the star network and ring network in the D2-1-type substation,and the end-to-end communication delays of the multi-stage transmission of secure messages in the two network structures are obtained.The simulation results show that the proposed communication strategy can effectively improve the security of communication messages while meeting the real-time communication requirements in smart substations.