基于国密算法的电网AMI数据安全防护技术

Data Security Protection Technology for Grid AMI Based on National Secret Algorithm

随着电力系统智能化的快速发展,大量智能终端采集设备接入电力系统.为了有效提升电网高级量测体系(advanced metering infrastructure,AMI)中设备的安全防护能力,以电力系统费控二次系统为例,提出一种适用于电网AMI环境下的数据安全防护技术,通过引入数字证书实现电网数据传输过程中的双向身份认证.考虑电网AMI环境,在采集终端计算能力不足的前提下攫取数据的主要信息,得到基于改进SM2的密钥交换协议,并对其进行了具体的安全性能分析、开销分析和效率测试.结果表明,该技术具有较强的安全性和稳定性,在满足电网AMI数据传输安全的基础上,能够有效降低通信信息交换的开销耗损,并能同时满足多个终端的通信需求,有助于提升电网AMI的数据传输安全水平.

With the rapid development of power system intelligence,a large number of intelligent terminal collection devices are connected to the power system.In order to effectively improve the security protection capability of devices in grid AMI,this paper took the secondary system of power system fee control as an example,proposed a data security protection technology applicable to the grid AMI environment,realized two-way identity authentication in the process of grid data transmission by introducing digital certificates,seized the main information of data under the premise of the insufficient computing power of collection terminals in the grid AMI environment,and obtained a key exchange protocol based on the improved SM2 key exchange protocol was analyzed and tested for specific security performance,overhead analysis and efficiency.The results showed that the technology had strong security and stability,can effectively reduce the overhead consumption of communication information exchange on the basis of satisfying the data transmission security of grid AMI,and can meet the communication needs of multiple terminals simultaneously,which helped to improve the data transmission security level of grid AMI.