Communication message security interaction method and device for distribution automation system

Abstract

The invention provides a communication message security interaction method and a device of a distribution automation system. After completing two-way identity authentication between a distribution master station and a distribution terminal, a main distribution station obtains distribution terminal information from the distribution terminal. The main distribution station judges whether that distribution terminal is the first identity authentication according to the version number of the symmetrical key of the distribution terminal, if not, the message exchange between the distribution terminaland the main distribution station is carried out; otherwise, after the symmetric key of the distribution terminal is updated, message exchange between the distribution terminal and the distribution master station is performed. The scheme makes up for the shortcomings that the distribution master station can not identify the distribution terminal in the distribution automation system security protection system, and the confidentiality and integrity of the communication message can not be guaranteed, and improves the security protection level of the vertical communication between the distribution master station and the distribution terminal in the distribution automation system. At that same time, the problem that the remote control / parameter set message has the hidden trouble of the replayattack and the like are sol.

Description

technical field [0001] The invention relates to a safety protection method and device, in particular to a communication message safety interaction method and device for a power distribution automation system. Background technique [0002] As a necessary means to improve the reliability of power supply and an important tool to improve distribution network management, distribution automation plays an important role in improving the reliability and quality of power supply, improving the efficiency of distribution network operation and inspection, reducing the difficulty of on-site operation and fault finding by operation and maintenance personnel, and improving the quality of distribution network. Power grid operation and maintenance management and control capabilities have played an important role. In recent years, the National Development and Reform Commission, the National Energy Administration and other competent departments have increased the key supervision and control of...

AI Technical Summary

Problems solved by technology

[0009] Aiming at the problems that the distribution master station cannot identify the identity of the distribution terminal in the security protection system of the existing distribution automation system, the confidentiality and integrity of the communication message cannot be guaranteed, and there are potential security risks of replay attacks in the remote control / parameter setting message, etc. , the present invention proposes a communication message security interaction method and device for a power distribution automation system, which adopts a two-way authentication technology based on a digital certificate to realize identity authentication between a power distribution master station and a power distribution terminal, and utilizes symmetric encryption and message authentication code (MAC ) to ensure the confidentiality and integrity of the communication message, and at the same time introduce random numbers into the digital signature to enhance the anti-replay attack capability, thereby improving the security protection level of the vertical communication between the distribution master station and the distribution terminal of the distribution automation system

Images