| 引用本文: | 刘念,张建华,段斌.基于XML Security的变电站远程配置安全机制设计[J].电力自动化设备,2009,(2): |
| .Design of security mechanism for substation remote configuration based on XML Security[J].Electric Power Automation Equipment,2009,(2): |
|
|
| 摘要: |
| 在分析变电站智能电子设备远程配置的底层安全机制如IP层协议安全结构(IPSec)、安全套接层协议(SSL)等方法局限性的基础上,提出了一种基于可扩展标记语言安全(XML Security)的变电站远程配置安全机制.该机制定义了变电站配置描述语言(SCL)的安全扩展,通过XML数字签名实现配置文档的完整性和通信双方实体的身份认证;通过XML加密实现对配置文档的多粒度安全保护.为验证安全机制的有效性,设计了远程安全配置仿真系统.对变电站实例配置文件的安全处理结果显示,该方法能有效满足SCL配置过程中的安全需求. |
| 关键词: 变电站自动化 远程配置 信息安全 XML 安全 智能电子设备 |
| DOI： |
| 分类号:TM63;TM76 |
| 基金项目:国家自然科学基金? |
|
| Design of security mechanism for substation remote configuration based on XML Security |
|
LIU Nian~1 ZHANG Jianhua~1 DUAN Bin~2
|
| Abstract: |
| Based on the limitation analysis of security mechanisms at bottom layer for the remote configura- tion of substation IEDs(Intelligent Electronic Devices),such as IPSec(Security architecture for IP network) and SSL(Secure Socket Layer),a security communication mechanism based on XML(eXtensible Markup Language)Security is presented.An extended schema for SCL(Substation Configuration description Lan- guage)security is defined.The integrality of SCL files and the authentication of both communication ends are gu... |
| Key words: substation automation remote configuration information security XML Security IED |
