基于SM2密码算法的电力数据安全接入方法

Security access method for power data based on SM2 cryptographic

为了保证电力数据的机密性、真实性和完整性,该文提出了一种新的电力数据安全接入方法。设计了一个基于SM2椭圆曲线数字签名算法和SM4分组密码算法的混合密码系统。异构边缘设备采集的数据被加密、签名,在经身份认证后由聚合节点转发到控制中心。每个边缘设备需约1.5 ms的计算开销,用来定期收集终端的电力数据并汇报给聚合节点,并执行1次SM4对称加密操作和1次SM2数字签名操作。该文方法生成公私钥仅需约3 ms。在相同安全级别下,在生成公私钥的计算开销方面,SM2的计算开销远小于RSA。通过安全性分析和仿真实验证明了该文方法可以防御多种面向电力数据的网络攻击,具备较高的传输效率。

In order to ensure the confidentiality,authenticity and integrity of power data,a security access method of power data is proposed here.A hybrid cryptosystem based on SM2 elliptic curve digital signature algorithm and SM4 block cipher algorithm is designed.The data collected by heterogeneous edge devices are encrypted and signed,and then forwarded to the control center by the aggregation node after authentication.Each edge device requires about 1.5 ms of computing overhead,which is used to periodically collect terminal power data and report it to the aggregation node,and perform one SM4 symmetric encryption operation and one SM2 digital signature operation.This method only takes about 3 ms to generate public and private keys.At the same security level,SM2 has much less computational overhead than Rivest-Shamir-Adleman(RSA)in generating public and private keys.Security analysis and simulation experiments show that this method can defend against various network attacks facing power data,and has high transmission efficiency.