电动汽车充电桩-后台服务管理中心信息安全防护方案设计与实现

为提高分布式电动汽车充电桩的信息安全防护能力，保障充电桩与后台服务管理中心之间传输数据的机密性、完整性与真实性，分析了充电桩信息安全威胁与信息安全需求，采用高级加密标准（advanced encryption standard，AES）和HMAC-SHA256算法，设计了基于认证加密的充电桩-后台服务管理中心信息安全防护方案；基于STM32F407ZGT6芯片和嵌入式操作系统μC/OS-III，搭建了充电桩通信模拟平台；制定了充电桩-后台服务管理中心通信应用层协议，设计了充电桩-后台服务管理中心信息安全防护方案；测试了不同类型数据在明文传输、加密传输、认证传输、认证加密传输4种安全情形下的报文传输时间，量化了充电桩-后台服务管理中心信息安全防护方案的实施对充电桩通信实时性的影响。测试结果表明，所设计信息安全防护方案可满足充电桩与后台服务管理中心之间通信的机密性、完整性、真实性和实时性要求。

Design and Implementation of Information Security Protection Scheme of Electric Vehicle Charging Pile-Background Service Management Center

In order to improve the capability of information security protection of the charging pile and guarantee the confidentiality， integrity and authenticity of data transmitted between charging pile and background service management center， this paper analyses the information security threat and security requirements of the charging pile and designs an information security protection scheme of charging pile-background service management center on the basis of authentication and encryption by means of using AES algorithm and HMAC-SHA256 algorithm. On the basis of STM32F407ZGT6 and embedded operating system μC/OS-III， a simulation platform of charging pile communication is built. Then， the application layer communication protocol has been formulated to implement the information security protection scheme of charging pile-background service management center. Finally， the transmission time of four security cases （plaintext transmission， encrypted transmission， authentication transmission and authentication encryption transmission） is measured and the effect of information security protection scheme on real-time transmission is quantified. The results show that the information security protection scheme designed can meet the confidentiality， integrity， authenticity and real-time requirements of communication between the charging pile and background service management center.