Lightweight end-to-end secure communication authentication method based on identification password

Abstract

The invention provides a lightweight end-to-end secure communication authentication method based on an identification password. According to the method, the digital signature algorithm based on the identity label is integrated into the SSL / TLS handshake protocol and is applied to the industrial control system, so that the authentication process of the digital signature algorithm based on the identity label between the engineer station and the terminal equipment is completed. Meanwhile, when the terminal equipment is connected with the engineer station for the first time, identity authentication can be carried out in a challenge / response-based mode, so that the correctness of the identity of the engineer station is ensured. And while identity authentication is carried out, the two parties also realize exchange of symmetric encryption keys. The engineer station takes the identity label of the engineer station as the public key of the engineer station, a public key certificate is not needed any more, the complexity of public key certificate management and maintenance is greatly reduced, the industrial control system added with the authentication function can effectively block unauthorized access of illegal users to the industrial control system, terminal equipment is prevented from being invaded, and sensitive resources of the system are protected.

Description

technical field [0001] The invention belongs to the field of information security of industrial control systems, and specifically relates to a light-weight end-to-end secure communication authentication method based on identification codes applied to industrial control systems. Background technique [0002] With the rapid development of information and Internet technology and their continuous extension and penetration into various industries, the field of industrial control is gradually opening up. This aspect has brought challenges and threats, and dangerous factors such as viruses and Trojan horses are spreading in industrial control systems. In recent years, vicious incidents of attacks on industrial control systems have emerged one after another. From the "Stuxnet" incident at the Iranian nuclear power plant in 2010 to the "Onion Dog" incident in the Asian energy industry in 2016, it shows that the tentacles of cyber security threats have really begun to spread to the in...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the problems such as the imperfect access authentication mechanism in the industrial control system proposed in the background technology, the present invention proposes a lightweight end-to-end secure communication authentication method based on identification passwords, which reduces the computing resources in the authentication process and improves Improve authentication efficiency, effectively block unauthorized access to industrial control systems by illegal users, prevent terminal devices from being invaded, and protect sensitive resources of the system

Images