★ 许艾 北京四方继保工程技术有限公司

★ 刘刚，徐延明，李维 北京四方继保自动化股份有限公司

摘要：近两年，为了提高关键设备软硬件自主可控的比例，电网公司加大了对电力基础设施的投资，目标是解决现有智能变电站存在的软硬件非国产、核心技术非自主可控、关键元器件严重依赖国外的现状。本文主要论述三方面的内容，第一，调度主站到网关机通信基于国密算法安全组件与数字证书技术实现双向安全认证；第二，在变电站内，监控主机与测控、保护设备基于自主可控协议进行安全通信；第三，采用自主可控协议与数字证书相结合的方式实现应用层的双向身份认证与传输层数据加密。通过采用自主可控协议与国产密码技术，基本解决了调度到变电站及变电站内通信系统方面的安全隐患。

关键词：SM2；自主可控；变电站安全；身份认证；安全可信

Abstract: In the past two years, in order to increase the proportion of independent controllable key equipment software and hardware, the power grid companies have increased their investment in power infrastructure. The goal is to solve the existing smart substations that have non-domestic software and hardware, and core technologies that are not independent and controllable. Components rely heavily on the status quo abroad. This article mainly discusses three aspects. First, the communication between the dispatching master station and the gateway machine is based on the national secret algorithm security component and digital certificate technology to achieve two-way security authentication. Secondly, in the substation, the monitoring host communicates with the measurement and control and protection equipment safely based on the autonomous and controllable protocol. Thirdly, the combination of autonomous and controllable protocol and digital certificate is used to achieve application layer two-way identity authentication and transport layer data encryption. By using of independent controllable protocols and domestic cryptographic technology, the hidden dangers of dispatching to the substation and the communication system in the substation are basically solved.

Key words: SM2; Autonomous and controllable; Substation security; Identity authentication; Safe and reliable

在线预览：电力监控系统通信安全技术研究与应用.pdf

摘自《自动化博览》2022年1月刊暨《工业控制系统信息安全专刊（第八辑）》