Smart Grid Wireless Communication Data Encryption Transmission Scheme Based on Dynamic Key

doi:10.3969/j.issn.1671-1122.2019.12.002

Abstract

Abstract:

Aiming at the characteristics of wireless communication in smart grid SCADA system, this paper designed a data encryption scheme based on dynamic key. The dynamic key generation algorithm is an improvement of the dynamic key generation scheme proposed by SAXENA et al. The purpose of controlling the update frequency of the shared key is finally realized by monitoring the transmission of the application layer data and setting the frequency of generating the dynamic key. In the communication process, the Hash value of the additional transmitted random number sequence is used as the dynamic key to further update the shared key. The CTR mode is used for data encryption and decryption, and the symmetric cryptographic algorithm and the exclusive OR operation are used to reduce the communication overhead of the scheme. Experiments show that this scheme can resist multiple security attacks such as long-term eavesdropping attacks, malicious injection attacks, and replay attacks, and analyzes them correctly and costly. At the same time, it solved the problem of pre-existing key synchronization and universality to ensure the security and self-healing of the system.

Key words: smart grid, wireless communication, SCADA, dynamic key, shared key

CLC Number:

TP309

Meihong LI, Xiaochen QI, Qianqian WU. Smart Grid Wireless Communication Data Encryption Transmission Scheme Based on Dynamic Key[J]. Netinfo Security, 2019, 19(12): 10-21.

Figures/Tables 15

References 20

[1]	GAO Tao, DENG Ling.Survey on Smart Grid and Its Development at Home and Abroad[J]. Northeast Electric Power Technology, 2012, 33(2): 5-10.
[2]	LIU Qian.Design and Imlpemention of Secure Distributed Network Protocol for SCADA System[D]. Xi’an: Xidian University, 2017.
	刘茜. 面向SCADA系统安全分布式网络协议的设计与实现[D].西安:西安电子科技大学,2017.
[3]	XIAO Sheng, GONG Weibo. Wireless Network Security Using Randomness[EB/OL]. .
[4]	ZHANG Jianhua, HASANDKA A, WEI Jin, et al. Hybrid Communication Architectures for Distributed Smart Grid Applications[EB/OL]. , 2018-4-9.
[5]	SAXENA N, GRIJALVA S.Dynamic Secrets and Secret Keys Based Scheme for Securing Last Mile Smart Grid Wireless Communication[J]. IEEE Transactions on Industrial Informatics, 2017, 13(3): 1482-1491.
[6]	YAN Shuang.The Research and Implemention of Security Mechanism for Smart Grid DNP3[D]. Changsha: National University of Defense Technology, 2016.
	闫爽. 智能电网DNP3协议安全机制研究与实现[D].长沙:国防科学技术大学,2016.
[7]	YAN Shaobin.Analysis of M-states Stop-and-Wait ARQ Protocol[D]. Beijing: Beijing Jiaotong University, 2009.
	闫绍彬. 对M种状态停止等待ARQ协议的分析[D].北京:北京交通大学,2009.
[8]	BELLARE M, DESAI A, JokiPii E, et al. A Concrete Security Treetment of Symmetric Encryption[C]//IEEE. 38th Annual Symposium on Foundations of Computer Science, October 20-22, 1997, Miami Beach, FL, USA. New Jersey: IEEE, 1997: 1-32.
[9]	ZHOU Qian, QIN Xiaolin, DING Youwei.Hash-based Contextual Privacy Preservation in Wireless Sensor Networks[J]. Journal of Nanjing University of Science and Technology, 2017, 41(6): 753-759.
	周倩,秦小麟,丁有伟.无线传感器网络中基于哈希函数的上下文隐私保护[J].南京理工大学学报(自然科学版),2017,41(6):753-759.
[10]	ZHANG Dawei, SHAO Yinghai, ZUO Lei.Pseudo Random Number Generation Algorithm Based on Linear Congruence Method[J]. Journal of Liaodong University: Natural Sciences, 2018, 25(3): 201-206.
	张大伟,邵英海,左垒.基于线性同余法的伪随机数产生算法[J].辽东学院学报(自然科学版),2018,25(3):201-206.
[11]	ECHEVERRIA P, MARISA L V.High Performance FPGA-oriented Mersenne Twister Uniform Random Number Generator[J]. Journal of Signal Processing Systems for Signal, Image, and Video Technology, 2013, 71(2): 105-109.
[12]	LEE M Y.On the Durbin-Watson Statistic Based on a Z-test in Large Samples[J]. International Journal of Computational Economics and Econometrics, 2016, 6(1): 114-121.
[13]	MATSUMOTO M, NISHIMURA T.Mersenne Twister: A 623-Dimensionally Equidistributed Uniform Pseudo-Random Number Generator[J]. ACM Transactions on Modeling and Computer Simulation: A Publication of the Association for Computing Machinery, 1998, 23(1): 3-30.
[14]	LIU Ting, LIU Yang, MAO Yashan, et al.A Dynamic Secret-based Encryption Scheme for Smart Grid Wireless Communication[J]. IEEE Transactions on Smart Grid, 2014, 5(3): 1175-1182.
[15]	GUSTAVUS J. Data Encryption Standard[EB/OL]. , 2019-5-24.
[16]	RIVEST R L, SHAMIR A, ADLEMAN L.A Method for Obtaining Digital Signatures and Public-key Cryptosystems[J]. Communications of the ACM, 1983, 26(1): 96-99.
[17]	HE Mingxing, LIN Hao.Implementation of the Advanced Encryption Standard(AES)[J]. Application Research of Computers, 2002(12): 63-65.
[18]	MAO Wenbo.Modern Cryptography: Theory and Practice[M]. WANG Jihong, WU Qianhong. Beijing: Publishing House of Electronics Industry, 2004.
	MAO Wenbo.现代密码理论与实践[M].王继红,伍前红,译.北京:电子工业出版社,2004.
[19]	RICHARD Spillman.Clssial and Contemporary Cryptology[M]. Beijing: Tsinghua University Press. 2005.
	RICHARD Spillman.经典密码学与现代密码学[M].北京:清华大学出版社.2005.
[20]	LI Zhimin.Design and Analysis of The Hash Functions[D]. Beijing: Beijing University of Posts and Telecommunications, 2009.
	李志敏. 哈希函数设计与分析[D].北京:北京邮电大学,2009.

参数	描述
F()	数据加解密函数
SN	主站设备
CN	从站设备
DS	动态密钥
SK	共享密钥
CT	密文
PT	明文,通常指测量值等信息
id_cn	从站设备标识符
Str	主站设备和从站设备的安全共享初始值
h()	单向哈希函数
E()	对称密码算法

组号	均值	标准差
1	1969819471.69	1239435578.882
2	2047920003.68	1329678041.0091
3	2187216598.44	1273763704.0216
4	2105560471.31	1139708764.0567
5	2139772842.11	1211137659.5703
6	2029205991.4	1236946250.1248
7	1890509205.75	1222092447.2377
8	2038292762.02	1332333892.945
9	2192560510.94	1279633148.2906
10	2104964707.38	1189347360.2849

请求次数	重传请求次数	N= 4		N=8		N=16		N=32
请求次数	重传请求次数	理论	实际	理论	实际	理论	实际	理论	实际
10000	623	2344	2344	1172	1172	586	586	293	293
20000	1312	4672	4672	2336	2336	1168	1168	584	584
30000	1944	7014	7014	3507	3507	1753	1753	876	876
40000	2704	9324	9324	4662	4662	2331	2331	1165	1165
50000	3265	11684	11684	5842	5842	2921	2921	1461	1461
60000	3756	14061	14061	7030	7030	3515	3515	1757	1757
70000	4382	16404	16404	8202	8202	4101	4101	2050	2050
80000	5032	18742	18742	9371	9371	4685	4685	2342	2342
90000	5787	21053	21053	10526	10526	5263	5263	2631	2631
100000	6570	23357	23357	11678	11678	5839	5839	2919	2919

比较项目	本文方案	LIU^[14]等人方案	SAXENA^[5]等人方案
监听对象	应用层数据	数据链路层	数据链路层
适用通信协议	NDP3、Modbus	Modbus	NDP3
密钥更新周期	N	阈值Ψ	每次通信
是否存在弱密钥	否	是	否
是否依赖于网络环境	否	是	是
抵抗中间人攻击	√	√	√
抵抗选择明文攻击	√	×	√
前向安全性	√	×	√
抵抗重放攻击	√	√	√
抵抗窃听攻击	√	√	√
算法	AES、XOR、SHA256	AES、MD2、XOR	DES、XOR、SHA128

	本文方案
	CN	SN
动态密钥	4T_SE+T_h	4T_SD+T_h
数据加密	5T_XOR+4T_hmac	5T_XOR+4T_hmac
总开销	4T_SE+T_h+5T_XOR+4T_hmac	4T_SD+T_h+5T_XOR+4T_hmac
更新次数	1	1
	文献[5]
	CN	SN
动态密钥	4T_SE+nT_parse+4T_h	4T_SD+nT_parse+4T_h
数据加密	4T_XOR	4T_XOR
总开销	4T_SE+nT_parse+4T_h+4T_XOR	4T_SD+nT_parse+4T_h+4T_XOR
更新次数	4	4
	文献[13]
	CN	SN
动态密钥	4T_SE+nT_parse+T_h	4T_SD+nT_parse+T_h
数据加密	4T_XOR	4T_XOR
总开销	4T_SE+nT_parse₊+T_h+4T_XOR	4T_SD+nT_parse+T_h+4T_XOR
更新次数	1	1