一种低压台区本地HPLC+RF双模自组织通信网络身份认证方法

低压台区“源网荷储”友好互动带来用户侧智能控制设备、传感器接入需求,迫切需要面向本地HPLC+RF自组织网络技术体制,设计针对外部设备接入的安全高效身份认证方法。文中提出一种适应自组织网络的、去中心化的安全认证方案,通过台区边设备、可信代理、端设备建立本地认证链,相比现采集终端到主站的集中式认证方式,该方案可以有效降低因本地自组网网络层级加深而不断增长的安全交互开销,同时有效抵御本地自组织网络多级中继节点被挟持、流量嗅探等网络攻击。通过模拟低压台区本地自组织网络不同中继深度、不同规模外部设备接入多种场景,仿真计算获得外部设备接入台区本地通信网络安全认证交互所消耗通信资源定量分析结果,通过对比集中式认证方式,文中所提认证方案的平均资源消耗量可降低25%,且随着网络拓扑与终端规模的增长,通信资源节省效果更加明显。

A local HPLC+RF dual-mode communication AD hoc network identity authentication method in low voltage station area

As the construction of new power system, increasing demand for "Source-Network-Load- Storage" friendly interaction gives rise to a large number of intelligent control devices and sensors are connected to low-voltage distribution network. At present, a local self-organizing communication network can be constructed by HPLC and micro-power RF dual-mode communication, which allows flexible accesses of these intelligent terminals. When applying the local dual-mode Adhoc communication network to the low-voltage distribution network, the network security protection should be dedicatedly designed synchronously to address the security issues, such as network attack on low-voltage intelligent terminals, access of untrusted external terminals, gradually unacceptable delay and network resources consumption of current centralized identity authentication method. To address above issues, this work proposed a decentralized authentication scheme for low-voltage distribution AdHoc network. The local authentication chain is established among the edge device, trusted AdHoc network agent and end device waiting for accessing. Compared to the traditional centralized authentication between master station and end device waiting for accessing. The proposed decentralized authentication scheme can effectively reduce the local security interaction overhead when the tiers of the local AdHoc network is growing. Based on the security analysis, the proposed method can effectively reduce the delay and resource consumption during authentication process, and realize the security protection of the whole process of the Storage" multi-service intelligent terminals accessing the local dual-mode AdHoc communication network.