基于口令的变电站数据与通信安全认证

依据电力系统数据与通信安全标准IEC62351，研究既能满足认证安全需求，又能保证最小的计算和传输开销，基于口令的变电站数据与通信安全认证方法。比较了几种国际上先进的安全口令技术，分析了IEC61850标准中智能电子设备（IED）访问安全模型，提出采用安全远程口令（sRP）协议实现IED访问应用关联时的安全认证。最后，以变电站自动化IED间的身份鉴别为例，介绍了SRP协议的改进方法和具体的认证过程。研究结果对在变电站自动化系统中实施IEC62351标准具有参考意义。

Authentication of Substation Automation Data and Communication Security Based on Password

According to the data and communication security standard IEC 62351 in power systems, a password authentication method for data and communication security in substations is investigated, which can not only satisfy the authentication demand for substation communication security, but also ensure minimum calculation workload and transport expenses. By comparing a few international top password techniques and analyzing the access security model for the IED in IEC 61850, this paper presents the security remote password (SRP) protocol to utilize the authentication when the application association of IEDs is set up in substation automation. Finally, the authentication between IEDs is taken as an example, the improved SRP is introduced and the concrete authentication process between IEDs is designed. The research results are of significance as a reference to implementing IEC 62351 standards in substation automation.