智能变电站应用层数据加密安全防护策略研究

摘要

Currently, protocol IEC61850 is widely used in smart substations .The feature of openness stay hidden defects in the information security .This paper transformed the field in the application layer protocol which based on IEC 61850 mapping to MMS, GOOSE, SV and designed an encryption and authentication mechanism using the Public Key Infrastructure ( PKI) theory in the application layer protocol transmission .This method ensures the confidentiality , integrity, non-repudiation of protocol IEC61850 in transmission .The experiment proved the feasibility and effectiveness using message after transformation .%目前智能变电站普遍使用IEC61850协议进行数据传输,其开放性的特点使其在信息安全方面留下隐患. 本文针对IEC61850映射到MMS,GOOSE,SV的应用层协议部分的字段进行改造,利用公钥基础设施( PKI)理论设计一种高效的应用层加密认证机制. 该方法保证了IEC61850协议传输时的机密性、完整性、不可抵赖性. 利用改造后的报文进行实验,证明了该方法的可行性与有效性.