智能变电站二次系统通信规约安全增强

doi:10.11959/j.issn.1000-0801.2015389

摘要/Abstract

摘要：

摘要：随着IEC6150标准智能变电站和智能电网的广泛应用，变电站站内二次系统通信安全成为不容忽视的问题。结合IEC62351标准，以变电站站内为整体，从身份认证、加密通信、防重放攻击、密钥分配等方面研究变电站通信规约MMS、GOOSE/SMV的安全增强技术，并探讨加密后报文的分析技术，采用开源软件针对嵌入式系统定制改造，并结合试点装置运行情况，分析规约安全增强的设备通信性能。

关键词: 智能变电站, 二次系统, 规约安全增强

Abstract:

With the wide application of smart substation communication protocol IEC6150 and Smart Grid,IEC61850 safety issue has become a problem can't be ignored.Combined with IEC62351,in the internal of substation as a whole,from authentication,encrypted communications,anti-replay attack,key distribution,the communication protocol security enhancement with in side of the substation which included MMS,GOOSE and SMV protocol was studied.Encrypted packet analysis technology was discussed.Combined with the test equipment run conditions,the performance caused by protocol security enhancement equipment was analyzed.

Key words: smart substation, secondary system, protocol security enhancement

汪晨,邵志鹏,黄秀丽. 智能变电站二次系统通信规约安全增强[J]. 电信科学, 2015, 31(Z1): 209-216.

Chen WANG,Zhipeng SHAO,Xiuli HUANG. Protocol security enhancement on secondary system of smart substation[J]. Telecommunications Science, 2015, 31(Z1): 209-216.

图/表 15

图1

图2

图3

图4

图5

图6

图7

图8

图9

图10

图11

图12

表1

表2

表3

参考文献 17

[1]	IEC61850.Communication Networks and Systems in Substation[S]. 2004.
[2]	辛耀中，王永福，任雁铭 . 中国IEC 61850研发及互操作试验情况综述[J]. 电力系统自动化， 2007，31（12）:1-6. XIN Y Z , WANG Y F , REN Y M . Survery on research,development and interoperability test of IEC 61850 in China[J]. Proceeding of thAutomation of Electric Power Systems, 2007，31（12）:1-6.
[3]	熊浩清，杨红旗，李会涛 . 智能变电站发展前景分析[J]. 河南电力， 2011（3）. XIONG H Q , YANG H Q , LI H T . Analysis of development future of smart substation[J]. Henan Power, 2001（3）.
[4]	刘振亚 . 建设坚强智能电网支撑又好又快发展[J]. 电网与清洁能源， 2009,25（9）:1-3. LIU Z Y . Build strong smart grid as pillar of sound and rapid development[J]. Power System and Clean Energy, 2009,25（9）:1-3.
[5]	肖世杰 . 构建中国智能电网技术思考[J]. 电力系统自动化， 2009，33（9）:1-4. XIAO S J . Consideration of technology for constructing Chinese smart grid[J]. Automation of Electric Power Systems, 2009，33（9）:1-4.
[6]	余贻鑫，栾文鹏 . 智能电网[J]. 电网与清洁能源， 2009,25（1）:7-11. YU Y X , LUAN W P . Smart grid[J]. Power System and Clean Energy, 2009,25（1）:7-11.
[7]	陈来军，梅生伟，陈颖 . 智能电网信息安全及其对电力系统生存性的影响[J]. 控制理论与应用， 2012,29（2）:240-244. CHEN L J , MEI S W , CHEN Y . Smart grid information security and its influence on power system survivability[J]. Control Theory & Applications, 2012,29（2）:240-244.
[8]	陈涛，王旭 . 智能电网信息安全风险分析与思考[J]. 电力信息与通信技术， 2012,10（12）:97-100. CHEN T , WANG X . Smart grid information security risk analysis and reflection[J]. Electric Power Information Technology, 2012,10（12）:97-100.
[9]	莫峻，谭建成 . 基于 IEC61850的变电站网络安全分析[J]. 电力系统通信， 2009，30（198）:12-16. MO J , TAN J C . Research on network security in substations based on IEC 61850[J]. Telecommunications for Electric Power System, 2009，30（198）:12-16.
[10]	盛兆勇 . IEC61850安全性分析及解决方案研究[D]. 青岛：中国海洋大学， 2013. SHENG Z Y . Research on security and solutions of IEC 61850[D]. Qingdao:Ocean University of China, 2013.
[11]	IEC 62351:data and cCommunication security[S]. 2005.
[12]	IEC 62351-6:Security for IEC 61850[S]. 2005.
[13]	IECTC57 security standards for the power systemˊs information infrastructure-beyond simple encryption[EB/OL].[ 2015-09-10]. .
[14]	梁峰，丁杰 . 基于IEC62351的变电站通信安全技术的研究[J]. 电力系统自动化， 2007,31（增刊）:157-261. LIANG F , DING J . Research on substation communication secure technologies based on IEC 62351 standard[J]. Automation of Electric Power Systems, 2007,31（Sup）:157-261.
[15]	丁杰，奚后玮，陈爱民，等. 基于IEC62351安全体系的变电站自动化系统[J]. 电网技术， 2006,30（增刊）:345-348. DING J , XI H W , CHEN A L , et al. Research on substation automation system based on IEC 62351 security standards[J]. Power System Technology, 2006,30（Sup）:345-348.
[16]	龙林德，李晶，刘莉莉 . 基于IEC 62351的变电站自动化系统通信安全的研究[J]. 长沙通信职业技术学院学报， 2010，9（3）:1-6. LONG L D , LI J , LIU L L . Research on communication security of substation automation system based on IEC 62351[J]. Journal of Changsha Telecommunications and Technology Vocational College, 2010,9（3）:1-6.
[17]	Zabbix：the enterprise-class open source network monitoring solution[EB/OL].[ 2015-09-29]. .

耗时	改造前/μs	改造后/μs
发送接口最大耗时	1 563,1 618,1 495	3 391,3 574,3 508
接收接口最大耗时	786,805,729	152 368,158 201,173 001

密钥长度/bit	HMAC_SHA256/μs		HMAC_SHA1/μs
密钥长度/bit	签名	解签	签名	解签
80	111	54	57	26
800	128	68	65	33

密钥长度/bit	RSA-SHA256/ms		RSA-SHA1/ms
密钥长度/bit	签名	解签	签名	解签
1 024	28	14	22	9
2 048	36	18	29	15