Security access system of novel power business terminal based on SDP

Abstract

The invention discloses an SDP-based novel power service terminal security access system, which comprises the following steps of: 1, sending an SPA data packet to an SDP controller, and signing by using an SM9 algorithm; 2, the SDP controller performs signature verification processing on the received SPA data packet, and notifies the terminal to establish TCP connection after the signature verification is passed; 3, after the TCP connection is established, sending access request information; 4, judging whether the terminal completes SPA authorization or not, for the authorized terminal, generating a session identifier IDS by using the random number R1 in the SPA packet of the terminal, and meanwhile, sending identity information IDIH of the access terminal and the session identifier IDS of the access request to the gateway side by the SDP controller; 5, the terminal establishes TCP connection with the port of the corresponding gateway according to the service information ServiceList in the access response data packet, and completes identity authentication; and 6, forming a session key by using the identity information IDIH of the access terminal, and establishing a bidirectional encryption tunnel. According to the method, the attack success rate is obviously reduced, the calculation and communication pressure is obviously reduced, and the communication security is guaranteed.

Description

technical field [0001] The invention relates to an SDP-based safety access system for a new type of power service terminal, belonging to the technical field of safety access of power service terminals. Background technique [0002] With the continuous development of our society, various types of distributed energy resources, electric vehicles, etc. are connected in large quantities, terminals and users are more generalized, network access is diversified, and a large number of business types and heterogeneous business models have formed. The huge business network and the requirement of intelligent interaction make the network boundary more blurred, the ubiquitous connection of massive terminals and the access of various terminals, the self-protection of the terminal, the identification and authentication of the terminal, and the access control of the terminal during business interaction, etc. put forward a greater demand. [0003] At present, the security access system of th...

AI Technical Summary

Problems solved by technology

[0004] (1) The traditional border security concept adopts the method of connecting first and then authenticating, so that the service port is open to the outside world, so malicious users or attackers will use network vulnerabilities to launch network attacks;

[0005] (2) Since the border security devices are deployed on the network border, there is a lack of data from the terminal side and the resource side, and there is no linkage between them. The security analysis of threats is not comprehensive enough, and it is easy to cause illegal terminal access and legitimate terminals to be blocked. Misappropriation, malicious unauthorized access to legitimate terminals

Images