电力市场网上交易系统的安全设计与实现

提出了一种利用MQ服务器,SSH中间件和防火墙在互联网上构筑“安全隧道”的方案,它属于系统结构层的安全技术,对应用程序没有任何要求,应用程序不必意识到“安全隧道”的存在,使整个系统在保证安全的前提下,具有更高的通用性、灵活性和可维护性。任何加密方法都不能保证在网上传递的信息绝对不被窃听或篡改,对此提出了一种解决方案,使一次交易作业的若干信息连成一个整体,杜绝了伪装成发送方(或接收方)的攻击行为,使整个网上交易系统的安全性能真正达到了“银行级”的安全水平。实验结果表明,本文所提出的安全设计方案完全能够满足电力市场对安全性和的实时性要求。

Security Design and Realization of the Internet Trading System in Electricity Market

A security architecture,called "Security Channel",has been proposed using MQ server,SSH Client/Server and Firewall,to enhance the security performance of the internet trading system in the electricity market.This architecture has no influence on the trading applications,making the system more flexible and easy for maintenance.Another solution to avoid mimic attacks from internet has also been proposed,which organizes all of the messages in one trade as one transaction.These solutions increased the security performance of the electricity market to achieve the "Bank Level".These security architecture and solutions have been realized with pure Java in a prototype system,and the effectiveness and correctness are verified.