Security authentication system and method for smart power terminal

Abstract

The invention provides a security authentication system and method for a smart power terminal. The system comprises a security detection server, a power server, an online monitoring server and an address registration server. The method comprises the following steps that: firstly, the address registration server performs uniqueness detection on the terminal, and generates a registration serial number and transmits the generated registration serial number to the security detection server if the terminal is legal; the security detection server judges whether terminal key object information is matched with power service permission allocation request information of the terminal or not, and generates unique terminal identity authentication information; and the terminal performs authentication and registration on the power server to obtain corresponding services. The system and the method provided by the invention are flexible and effective. Reliable authentication of software is realized without hardware authentication. Meanwhile, the terminal identity authentication information is protected from being stolen. A security detection method which is more efficient and economical than an existing hardware authentication method is provided for the power terminal, so that secure and efficient running of a smart power grid into which an Internet technology is introduced is ensured.

Description

technical field [0001] The invention relates to the field of network security and security access, in particular to an intelligent power terminal security authentication system and method. Background technique [0002] With the construction of a strong smart grid in the country, Internet technology has been widely used in the generation, transmission, transformation, distribution, utilization and dispatching of smart grids. The introduction of Internet technology into the smart grid will effectively integrate power system infrastructure resources and communication facility resources, promote advanced information and communication systems to serve the operation of the power system, improve the level of power grid informatization, and improve the utilization efficiency of existing power system infrastructure. It provides important technical support for the transmission, transmission, transformation, distribution, and utilization of the power grid. However, while Internet tech...

AI Technical Summary

Problems solved by technology

The problem with the above method is that the platform user’s EK is fixed, and when he / she conducts the above agreement with different verifiers multiple times, the transaction records can be linked by a third party (linkable), thus failing to protect the platform user’s privacy

After the platform obtains this signature, it can send it to a third-party verifier. The verifier verifies whether the AIK is legal according to the public key of the privacy CA. The signature of the legitimate AIK to the PCR is regarded as the legal signature of the TPM. The fatal flaw of the PrivacyCA scheme is: It must ensure that PrivaCyCA is credible, and must also have high responsiveness, so its application will surely become the bottleneck of trusted platform verification

TCG defined the TPM specification version 1.2 and proposed the direct anonymous authentication (direct anonymous attestation, referred to as DAA) protocol [15]. This protocol not only realizes TPM chip authentication, but also guarantees the anonymity of the authentication, and the verifier cannot obtain the unique label of the chip. But The protocol is very complicated, including 4 zero-knowledge proofs, and the amount of calculation is very large, including a large number of calculations, and the efficiency is low

[0006] However, due to the large number of smart power devices and the limited computing power of the devices themselves, it is necessary to provide a flexible and complete terminal access control mechanism

Images