Security Protection Scheme of Power IoT Based on SDP

doi:10.3969/j.issn.1671-1122.2022.02.004

Abstract

Abstract:

The rapid development of the IoT and the ubiquitous connection and intelligent interaction of a large number of heterogeneous terminals have made the network boundaries of the power IoT blurred, and the network structure is more complex, and the security risk points and exposed areas have increased significantly. This paper abandoned the traditional security mechanism of connection before authentication and put forward a kind of security protection scheme for the power IoT with the zero trust security mechanism, while applying the SPA to effectively solve the problems of identity authentication, resource hiding, and access control of power IoT terminals. Finally, the scheme was compared and analyzed from security and communication performance. The results show that the proposed scheme can effectively resist multiple types of network attacks, and save computing and communication resources, and effectively solve the problems of identify authentication existing in the power IoT.

Key words: power IoT, SDP, SPA, secure access, identity authentication

CLC Number:

TP309

WU Kehe, CHENG Rui, JIANG Xiaochen, ZHANG Jiyu. Security Protection Scheme of Power IoT Based on SDP[J]. Netinfo Security, 2022, 22(2): 32-38.

Figures/Tables 7

References 14

[1]	State Grid Corporation of China. Ubiquitous Electricity Internet of Things White Paper 2019[EB/OL]. http://www.lianmenhu.com/blockchain-14145-1, 2019-10-16.
	中国人民共和国国家电网有限公司. 泛在电力物联网白皮书2019[EB/OL]. http://www.lianmenhu.com/blockchain-14145-1, 2019-10-16.
[2]	ZHAO Mengmeng, TANG Pingzhou, SUN Kun. Development and Prospect of Ubiquitous Power Internet of Things[J]. Journal of North China Electric Power University, 2020, 47(5):63-74.
	赵萌萌, 唐平舟, 孙堃. 泛在电力物联网发展与展望[J]. 华北电力大学学报, 2020, 47(5):63-74.
[3]	LIU Lin, QI Bing, LI Shan. Demand and Development Trend of Power Communication Network for New Business of Power Internet of Things[J]. Power Grid Technology, 2020, 44(8):3114-3128.
	刘林, 祁兵, 李姗. 面向电力物联网新业务的电力通信网需求及发展趋势[J]. 电网技术, 2020, 44(8):3114-3128.
[4]	KIMANI K, ODUOL V, LANGAT K. Cyber Security Challenges for IoT-based Smart Grid Networks[J]. International Journal of Critical Infrastructure Protection, 2019, 25(6):36-49. doi: 10.1016/j.ijcip.2019.01.001 URL
[5]	SHRESTHA M, JOHANSEN C, NOLL J, et al. A Methodology for Security Classification Applied to Smart Grid Infrastructures[EB/OL]. https://www.sciencedirect.com/science/article/pii/S1874548220300068, 2021-01-11.
[6]	SU Sheng, WANG Gan, LIU Liang, et al. Review on Security of Power Internet of Things Terminals[EB/OL]. https://doi.org/10.13336/j.1003-6520.hve.20210150, 2021-04-20.
	苏盛, 汪干, 刘亮, 等. 电力物联网终端安全防护研究综述[EB/OL]. https://doi.org/10.13336/j.1003-6520.hve.20210150, 2021-04-20.
[7]	WU Kehe, CHENG Rui, ZHENG Bihuang, et al. Research on Security Communication Protocol of Power Internet of Things[J]. Netinfo Security, 2021, 21(9):8-15.
	吴克河, 程瑞, 郑碧煌, 等. 电力物联网安全通信协议研究[J]. 信息网络安全, 2021, 21(9):8-15.
[8]	Q/GDW11118-2013 Specification for Information Security Access of Voltage Monitoringdevices Based on Wireless APN Virtual Private Network[S]. Beijing: China National Standard Press, 2014.
	Q/GDW11118-2013 基于无线APN虚拟专网的电压监测装置信息安全接入规范[S]. 北京: 中国标准出版社, 2014.
[9]	CUI Wenchao, CHENG Rui, WU Kehe, et al. A Certificateless Authenticated Key Agreement Scheme for the Power IoT[EB/OL]. https://www.mdpi.com/1996-1073/14/19/6317, 2021-05-11.
[10]	LIANG Xiaobing, CEN Wei, FU Yilun, et al. Design of Secure Access Authentication Device Applied to Power Internet of Things[J]. Science Technology and Engineering, 2021, 21(31):13374-13380.
	梁晓兵, 岑炜, 付义伦, 等. 适用于电力物联网的安全接入认证装置设计[J]. 科学技术与工程, 2021, 21(31):13374-13380.
[11]	LIU Tao, MA Yue, JIANG Hefang, et al. Research on Power Frid Security Protection Architecture Based on Zero Trust[J]. Electric Power Information and Communication Technology, 2021, 19(7):25-32.
	刘涛, 马越, 姜和芳, 等. 基于零信任的电网安全防护架构研究[J]. 电力信息与通信技术, 2021, 19(7):25-32.
[12]	ZHANG Xiaojian, CHEN Liandong, FAN Jie, et al. Power IoT Security Protection Architecture Based on Zero Trust Framework[EB/OL]. https://ieeexplore.ieee.org/document/9357607, 2021-02-25.
[13]	LIU Yuan, SUN Chen, ZHANG Yanling. A Zero Trust Network Research Based on Overlay Technology[J]. Netinfo Security, 2020, 20(10):83-91.
	刘远, 孙晨, 张嫣玲. 基于Overlay技术的零信任网络研究[J]. 信息网络安全, 2020, 20(10):83-91.
[14]	MA Jing, XU Yonggang, ZENG Ming, et al. Research on the Ubiquitous Electric Power Internet of Things Based on the Zero Trust Security Mechanism[J]. Network Security Technology & Application, 2020(1):117-119
	马靖, 许勇刚, 增明, 等. 基于零信任框架的泛在电力物联网安全防护研究[J]. 网络安全技术与应用, 2020(1):117-119

[1]	WU Kehe, CHENG Rui, ZHENG Bihuang, CUI Wenchao. Research on Security Communication Protocol of Power Internet of Things [J]. Netinfo Security, 2021, 21(9): 8-15.
[2]	SHEN Zhuowei, GAO Peng, XU Xinyu. Design of DDS Secure Communication Middleware Based on Security Negotiation [J]. Netinfo Security, 2021, 21(6): 19-25.
[3]	WANG Jian, ZHAO Manli, CHEN Zhihao, SHI Bo. An Authentication Scheme for Conditional Privacy Preserving Based on Pseudonym in Intelligent Transportation [J]. Netinfo Security, 2021, 21(4): 49-61.
[4]	YU Kechen, GUO Li, YAO Mengmeng. The Generation of Black Box Adversarial Sample Based on Spatial and Energy Dimension [J]. Netinfo Security, 2021, 21(3): 72-78.
[5]	DU Ye, WANG Zimeng, LI Meihong. Industrial Control Intrusion Detection Method Based on Optimized Kernel Extreme Learning Machine [J]. Netinfo Security, 2021, 21(2): 1-9.
[6]	TU Guoqing, YANG Yanhao, LIU Shubo. Vulnerability Analysis of Geohash Code Against k-nearest Neighbor Attack [J]. Netinfo Security, 2021, 21(2): 10-15.
[7]	KANG Wenjie, ZHAO Wei, LIU Xuchong, SU Xin. Adjoint Relation Mining Model of Key Personnel Based on Discrete Trajectory [J]. Netinfo Security, 2021, 21(12): 31-37.
[8]	LI Tong, ZHOU Xiaoming, REN Shuai, XU Jian. Light-weight Mutual Authentication Protocol for Mobile Edge Computing [J]. Netinfo Security, 2021, 21(11): 58-64.
[9]	XIAO Shuai, ZHANG Hanlin, XIAN Hequn, CHEN Fei. A Password Authentication Key Agreement Protocol for IoT Devices [J]. Netinfo Security, 2021, 21(10): 83-89.
[10]	ZHOU Zhining, WANG Binjun, ZHAI Yiming, TONG Xin. Spam Filtering Model Based on ALBERT Dynamic Word Vector [J]. Netinfo Security, 2020, 20(9): 107-111.
[11]	LIU Xiaofen, CHEN Xiaofeng, LIAN Guiren, LIN Song. Authenticated Multiparty Quantum Secret Sharing Protocol with d-level Single Particle [J]. Netinfo Security, 2020, 20(3): 51-55.
[12]	YAO Mengmeng, TANG Li, LING Yongxing, XIAO Weidong. Formal Analysis of Security Protocol Based on Strand Space [J]. Netinfo Security, 2020, 20(2): 30-36.
[13]	ZHAO Guofeng, ZHOU Wentao, XU Chuan, XU Lei. A Secure Identity Authentication Scheme for Space-ground Integrated Network Based on Bilinear Pairing [J]. Netinfo Security, 2020, 20(12): 33-39.
[14]	GUO Qiquan, ZHANG Haixia. Technology System for Security Protection of Critical Information Infrastructures [J]. Netinfo Security, 2020, 20(11): 1-9.
[15]	LIU Lijuan, LI Zhihui, ZHI Danli. A Multi-party Quantum Key Distribution Protocol with Quantum Identity Authentication [J]. Netinfo Security, 2020, 20(11): 59-66.