A Method and Device for Industrial Control Identity Authentication Using National Secret Algorithm

Abstract

An industrial control identity authentication method and device applying a national secret algorithm, relating to the field of industrial control security. The present invention consists of an identity authentication and authorization management server including a TCM security chip, an operating system, an identity authentication and authorization management system, an industrial firewall, an external network interface, an internal network interface and BIOS, and a national secret serial port identity including a CPU, a secure memory, and a chip operating system. Authentication terminal composition. The present invention realizes the credible operation of the identity authentication and authorization management server, the read-only access terminal, the configuration modification terminal, the different authority authorization of the security management terminal and three kinds of national secret serial port identity authentication terminals through the combined application of the national secret algorithm SM1, SM2 and SM3 The implementation method of accessing the authority of the industrial control system through the extranet. The present invention can effectively and strictly manage the boundary between the industrial control system and the external network to meet the safety needs of the industrial control system in my country. The present invention has the characteristics of safety, reliability, rapid promotion, easy maintenance, low operating cost and universal application.

Description

technical field [0001] The invention relates to the field of industrial control security, in particular to solve the border security problem of connecting an industrial control system integrated with high-speed industrial Ethernet ring network and automation platform software with external networks and other systems. Background technique [0002] The Ministry of Industry and Information Technology of the People's Republic of China issued the "Notice on Strengthening Information Security Management of Industrial Control Systems" in October 2011. The "Notice" pointed out that data acquisition and monitoring SCADA, distributed control system DCS, process control system PCS, and Industrial control systems such as programmable logic controller PLC and remote terminal RTU are widely used in the fields of industry, energy, transportation, water conservancy and municipal administration to control the operation of production equipment. Once there is a loophole in the information secu...

AI Technical Summary

Problems solved by technology

Although TCG is a non-profit organization and the technology of TPM is also open, international giants such as Microsoft, Intel, and IBM still master the core technology, so security equipment using TPM standards will pose a huge threat to national information security

Images