【摘要】：隨著配電網(wǎng)工程中信息化技術(shù)的逐步深入,信息安全問(wèn)題逐漸凸顯。目前,配電終端與配電網(wǎng)數(shù)據(jù)交互中主要采用基于SM2算法的單向身份認(rèn)證技術(shù),且大部分?jǐn)?shù)據(jù)交互以明文方式進(jìn)行。因此,如何保證終端設(shè)備與配電網(wǎng)數(shù)據(jù)交互的安全性,已經(jīng)成為配電網(wǎng)建設(shè)過(guò)程中迫切需要解決的問(wèn)題。實(shí)現(xiàn)配電終端與配電網(wǎng)安全數(shù)據(jù)交互需要解決兩方面問(wèn)題:一是配電終端自身安全;二是數(shù)據(jù)通信通道安全。終端自身安全保證了接入源的安全,數(shù)據(jù)通信通道安全保證了通信數(shù)據(jù)的保密性和完整性。本文以配電業(yè)務(wù)為準(zhǔn)則,融合國(guó)密密碼算法技術(shù)、高并發(fā)通信架構(gòu)技術(shù)、PF_RING的零拷貝和高速數(shù)據(jù)包截獲技術(shù),設(shè)計(jì)了安全通信協(xié)議、基于異步完全事件觸發(fā)的多進(jìn)程通信架構(gòu)以及基于PF_RING和Libnet技術(shù)的數(shù)據(jù)包解析和組裝模型,實(shí)現(xiàn)了一款高并發(fā)快速數(shù)據(jù)包解析組裝的網(wǎng)關(guān)系統(tǒng),并且分別從配電終端、通信通道和網(wǎng)關(guān)自身等方面給出了對(duì)應(yīng)的安全加固方法,為配電網(wǎng)的設(shè)備接入提供雙向身份認(rèn)證、通信數(shù)據(jù)加密、高效數(shù)據(jù)交互等防護(hù)措施,保證了配電網(wǎng)數(shù)據(jù)交互的安全性。最終分別對(duì)網(wǎng)關(guān)進(jìn)行了性能測(cè)試、配電業(yè)務(wù)數(shù)據(jù)流測(cè)試以及配電業(yè)務(wù)的并發(fā)測(cè)試,驗(yàn)證了系統(tǒng)整體設(shè)計(jì)的合理性和可靠性,并且在并發(fā)量與負(fù)載均衡方面也取得了很好的效果。
[Abstract]:With the development of information technology in distribution network engineering, the problem of information security is becoming more and more important. At present, unidirectional authentication technology based on SM2 algorithm is mainly used in the data interaction between distribution terminal and distribution network, and most of the data interaction takes place in clear text. Therefore, how to ensure the security of data interaction between terminal equipment and distribution network has become an urgent problem in the construction of distribution network. Two problems need to be solved to realize the security data interaction between the distribution terminal and the distribution network: one is the security of the distribution terminal itself; the other is the security of the data communication channel. The security of the terminal itself ensures the security of the access source, and the security of the data communication channel ensures the confidentiality and integrity of the communication data. In this paper, a secure communication protocol is designed based on distribution service, fusion of cryptographic algorithm technology, high concurrent communication architecture, zero copy of PF_RING and high speed packet capture. The architecture of multi-process communication based on asynchronous complete event trigger and the packet parsing and assembling model based on PF_RING and Libnet technology are used to realize a gateway system with high concurrency and fast packet parsing and assembling, and it is separated from distribution terminal. The corresponding security reinforcement methods are given in communication channels and gateways themselves, which can provide bidirectional identity authentication, communication data encryption and high efficiency data exchange for equipment access in distribution network, so as to ensure the security of distribution network data interaction. Finally, the gateway performance test, distribution service data flow test and distribution service concurrency test are carried out, which verify the rationality and reliability of the overall design of the system, and achieve good results in concurrent quantity and load balancing.
【學(xué)位授予單位】：華北電力大學(xué)(北京)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類號(hào)】：TM727;TP309

【參考文獻(xiàn)】

相關(guān)期刊論文 前6條

1 吳克河;崔文超;何健平;;電力企業(yè)移動(dòng)安全接入平臺(tái)[J];計(jì)算機(jī)系統(tǒng)應(yīng)用;2014年07期

2 梁明剛;陳西曲;;Linux下基于epoll+線程池高并發(fā)服務(wù)器實(shí)現(xiàn)研究[J];武漢工業(yè)學(xué)院學(xué)報(bào);2012年03期

3 ;2009特高壓輸電技術(shù)國(guó)際會(huì)議紀(jì)要[J];國(guó)家電網(wǎng);2009年06期

4 張宇雷;黃皓;;基于網(wǎng)絡(luò)處理器的零拷貝技術(shù)[J];計(jì)算機(jī)應(yīng)用研究;2007年01期

5 王佰玲,方濱興,云曉春;零拷貝報(bào)文捕獲平臺(tái)的研究與實(shí)現(xiàn)[J];計(jì)算機(jī)學(xué)報(bào);2005年01期

6 徐林,張德運(yùn),孫欽東,張曉彤;基于NAPI的數(shù)據(jù)包捕獲技術(shù)研究[J];計(jì)算機(jī)工程與應(yīng)用;2004年26期

相關(guān)碩士學(xué)位論文 前3條

1 陳曉;電力企業(yè)信息系統(tǒng)中統(tǒng)一身份認(rèn)證與訪問(wèn)控制應(yīng)用研究[D];華北電力大學(xué);2013年

2 祝劍鋒;可信密碼模塊授權(quán)協(xié)議的研究和實(shí)現(xiàn)[D];北京工業(yè)大學(xué);2011年

3 王小峰;面向TOE的快速報(bào)文傳輸研究與實(shí)現(xiàn)[D];國(guó)防科學(xué)技術(shù)大學(xué);2006年

，

本文編號(hào)：2360559