Time-based one-time password method and system suitable for PLC

Abstract

The invention discloses a time-based one-time password method suitable for a PLC, to-be-verified equipment, verification equipment and an identity verification system. The method comprises the following steps of enabling an attestation party to execute the steps of: A1, acquiring a verification key; A2, establishing a password chain containing a plurality of nodes, storing the password value of the head node, and sending the password value of the tail node to a verification party; a3, generating a first one-time password by using the verification key, the end time of the password chain and thecurrent time, and sending the first one-time password to the verification party; enabling a verification party to execute the following steps: B1, setting a dynamic verification point and recording the latest identity verification time; b2, receiving the first one-time password, recording the receiving time, if time verification is passed and the value of the second one-time password is equal tothe value of the current verification point, determining that verification succeeds, and updating the verification point and the latest identity verification time. According to the method, high-efficiency and high-security verification of the PLC identity is realized, PLC firmware does not need to be changed, and memory occupation is reduced.

Description

technical field [0001] The invention relates to the field of information security, in particular to a time-based one-time password method suitable for PLC, equipment to be authenticated, authentication equipment and an identity authentication system. Background technique [0002] Because traditional cyber physical systems (CPS for short) have no security measures, CPS has suffered some large-scale attacks in recent years. CPS, as the unity of computing process and physical process, is a next-generation intelligent system integrating computing, communication and control. The main target of the attacker's attack. [0003] A firewall can be used in the CPS to ensure secure communication and access control between the Supervisory Control And Data Acquisition (SCADA) and the PLC, but the firewall cannot perform direct identity authentication for a specific PLC, and the existing PLC does not have any identity-related confidential information, so the data acquisition and monitori...

AI Technical Summary

Problems solved by technology

However, since ST does not provide bottom-level optimization, and many commercial PLCs (such as Rockwell) do not provide the shift function required for the implementation of cryptographic algorithms, programs based on ST are slower than other languages.