变电站自动化信息交换安全认证体系

分析了基于IEC61850体系的变电站自动化信息交换体系结构,基于数字证书和代理多重签名体制,提出一种实用与发展并重的变电站自动化信息交换安全认证体系。在变电站智能电子设备(IED)或变电站通信控制器中集成密码计算模块,采用普通的或代理的数字签名模式,实现信息交换过程中控制中心与变电站IED身份和信息完整性的认证。该安全认证体系符合IEC61850标准体系,密码计算采用国家密码管理委员会办公室指定的密码技术。

A Security Authentication System of Substation Automation Information Exchange

The structure of a substation automation information exchange system based on IEC 61850 architecture is analyzed. A practical and expandable security authentication system of substation automation information exchange is presented on the digital certificate and proxy multi-signature system. The cryptography computation module is integrated with the intelligent electric device (IED) or communication controller of substation. The general or proxy digital signature is adopted so that the authentication of identity and information integrity is implemented in the process of information exchange between the IED and the control center. The security authentication system is in conformity with the IEC 61850 standard system and the cryptography technique designated by the National Cipher Management Committee Office is adopted in cryptography computation.