KNXnet/IP协议安全性分析与改进

KNXnet/IP协议作为欧洲安装总线(EIB)协议的扩展应用，提高了EIB系统的传输速率并满足了智能管理的需求，但分析表明以IP网络作为骨干网的KNXnet/IP协议在安全性要求较高的应用领域内面临严重的威胁。在分析现有IP网络安全机制及嵌入式系统特点的基础上，提出适用于EIB系统的安全加密通信协议，该安全协议以非对称加密算法为基础，使用自定义的密钥交换协议管理密钥集，设备之间使用对称加密算法通信，具有对原协议架构改动较小、提供数据透明传输的特点，协议的原型实现证明了其可行性和安全性。

Security analysis and improvement of KNXnet/IP protocol

As the extended application of European Installation Bus (EIB) protocol, KNXnet/IP protocol increases the transmission speed of EIB system and fulfills the requirement of intelligent management. But the security of KNXnet/IP protocol is heavily threatened in the security critical environment. A security protocol was proposed after analyzing the security mechanism of IP network and embedded system. The security protocol used self defined key sets distribution protocol based on asymmetric cryptography algorithm and used symmetric cryptography algorithm for communication. It provides transparent data transmission and only needs very few changes of the primary architecture. The implementation proves the feasibility and security of the security approach.