Safety exchange method for MMS specification application layer

Abstract

The invention discloses a safety exchange method for an MMS specification application layer. When an intelligent substation device uses MMS message communication, the MMS application layer safety reinforcing exchange method enables both MMS protocol communication sides to perform identity authentication at the application through carrying out safety improvement on the MMS application layer and controls the access authority of an MMS client through using role-based access based on the authentication. The safety exchange method for the MMS specification application layer includes steps that 1) starting an MMS association authorization function, and extending authorization data structure; 2) through extending the authorization data structure, using a public encryption algorithm to carry out identity authorization on the association process of the MMS application layer, and at the same time, performing relay attack protection; 3) using a role-based access control technology to construct the access control relationship between the MMS client and MMS service, after passing the association authentication, allowing an MMS server to use a configured access control relation table to carry out fine-grained access control on the MMS client, if the MMS client meets the demand, allowing the MMS client to access the corresponding service, otherwise, refusing to provide service.

Description

technical field [0001] The invention relates to the field of power information communication security, in particular to an MMS application layer reinforcement security interaction method based on the MMS protocol. Background technique [0002] MMS (Manufacturing Message Specification) is a communication message specification for industrial control systems defined by the ISO / IEC9506 standard. MMS regulates the communication behavior of smart sensors, smart electronic devices, and smart control devices with communication capabilities in the industrial field, enabling interoperability between devices from different manufacturers, and making system integration simple and convenient. [0003] DL / T 860 (equivalent to the international standard IEC 61850) is the national standard for intelligent substation communication protocols, which proposes a set of public communication standards for substations. Through a series of standardization of equipment, IEDs (Intelligent Electronic De...

AI Technical Summary

Problems solved by technology

[0005] However, when the DL / T 860 standard was proposed, it only paid attention to the shared communication between IEDs, but did not pay attention to the security in the communication process. As a result, once the substation is invaded, and there are no protective measures inside the substation, the consequences will be very difficult. to imagine

Images