一种基于GCM的智能变电站报文安全传输方法

摘要

Due to the adoption of Ethernet architecture, new requirement of information security is presented for smart substation based on IEC 61850 standard. Manufacturing message specification (MMS), sample measured value (SMV) and generic object oriented substation event (GOOSE), are common messages used in smart substations, whether these messages can be transmitted secretly is extremely important for the security of entire substation system. If each message uses a mode of authentication encryption algorithm, that may increase the burden of network equipments and affect their inter-operability. A message security mechanism and the message format for the secure transmission of smart substation messages based on GCM (Galois/counter mode) are designed. Taking GOOSE message as an example, the secure message transmission algorithm design, and its time cost based on GCM are analyzed. Finally, advantage analysis of secure message transmission method based on GCM for smart substation is carried. With the analysis, it is concluded that the common message authentication encryption algorithm based on GCM is adopted for different security requirements of messages and secure transmission of different messages is achieved through choosing different algorithm modes. That can improve security of smart substation information and network performance.%由于采用以太网进行架构,因此,基于IEC 61850标准的智能变电站对信息安全提出了新的要求.制造报文规范(MMS)、采样测量值(SMV)、通用面向对象的变电站事件(GOOSE)是智能变电站常用的3种报文,其能否安全传输对整个变电站的安全至关重要.考虑到采用一种报文对应一种认证和加密算法的方式势必增加网络设备负担、影响其互操作性,文中设计了智能变电站中的报文安全机制,并进行了基于GCM(伽罗华/计数器模式)加密认证算法的智能变电站报文安全传输的报文格式设计；以GOOSE报文为例进行了基于GCM的算法设计和时间开销分析；最后,进行了基于GCM的智能变电站报文安全传输方法的优点分析.通过分析可以看出,针对不同报文的安全需求采用基于GCM的报文通用认证和加密算法,并通过选择不同的算法模式实现不同报文的安全传输,可提高智能变电站的报文信息安全和网络性能.