Method and device for preventing replay attack of nuclear power plant instrument and control system
A technology for instrument control systems and replay attacks, which is applied in general control systems, control/adjustment systems, instruments, etc., can solve the problems that the encrypted data of the clock module is easy to be cracked, so as to reduce overhead, prevent replay attacks, and improve the communication process. safe effect
Active Publication Date: 2021-07-16
CHINA TECHENERGY +1
View PDF5 Cites 2 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0013] In order to solve the technical problems of high requirements on the clock module or easy decryption of encrypted data in the existing implementation methods of preventing replay attacks, the present invention provides a method and device for preventing replay attacks of the instrument and control system of nuclear power plants. Each task requires Re-requesting the authorization code can effectively prevent replay attacks and reduce the overhead of system resources. There is no need to save historical authorization codes and clock synchronization function modules
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment
[0062] Such as figure 1 As shown, on the one hand, this embodiment provides a method for preventing replay attacks of an instrument and control system of a nuclear power plant, the method comprising:
[0063] S110. The sending terminal generates a new authorization code each time it receives a communication task request from the receiving terminal;
[0064] S120. The receiving terminal receives the new authorization code, and feeds back the operation instruction and the authorization code corresponding to the operation instruction to the sending terminal; wherein, the authorization code corresponding to the operation instruction is the new authorization code or is obtained based on the new authorization code Authorization code;
[0065] S130. After receiving the operation instruction from the receiving terminal, the sending terminal judges whether the authorization code corresponding to the operation instruction complies with the corresponding first predetermined rule; if not...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention belongs to the technical field of nuclear power plant instrument control systems. In order to solve the technical problems of high requirements on clock modules or encrypted data that are easy to be cracked in the existing anti-replay attack implementation methods, the invention provides a nuclear power plant instrument control system to prevent replay attacks. The attack method and device, wherein, each time the sending terminal receives a communication task request from the receiving terminal, a new authorization code is generated; the receiving terminal receives the new authorization code, and combines the operation instruction and the authorization code corresponding to the operation instruction Feedback to the sending terminal; after receiving the operation instruction from the receiving terminal, the sending terminal judges whether the authorization code corresponding to the operation instruction complies with the corresponding first predetermined rule; if not, refuses to execute the operation instruction. Therefore, each task needs to re-request the authorization code, which can effectively prevent replay attacks, reduce the overhead of system resources, and do not need to save historical authorization codes or clock synchronization function modules.
Description
technical field [0001] The invention relates to the technical field of nuclear power plant instrument control systems, in particular to a method and device for preventing replay attacks of nuclear power plant instrument control systems. Background technique [0002] Many communication links in the instrument and control system of nuclear power plants have high security requirements. A very important technical indicator is the need to prevent replay attacks; Send a packet that has been received by the destination host to achieve the purpose of deceiving the system. It is mainly used in the identity authentication process and destroys the correctness of authentication. [0003] In order to solve the technical problems of replay attacks in the prior art, the following technical solutions are usually adopted: [0004] 1. Adding random numbers during communication: The advantage of this method is that the two sides of the authentication do not need time synchronization, and both...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G05B19/042
CPCG05B19/0423G05B2219/24215
Inventor 张敏玲马建新史雄伟李宏丹陈银杰陈乃奎王成刘松谢逸钦
Owner CHINA TECHENERGY