高级检索

安全增强型WAPI与动态公钥ECC协同的变电站远程核容通信策略

Security-Enhanced WAPI and Dynamic Public Key ECC Collaborative Communication Strategy for Substation Remote Capacity Verification

  • 摘要: 随着智能电网建设的推进,变电站直流系统串联蓄电池远程核容成为运维数字化转型的关键方向,但多系统交互过程中面临通信延迟、数据泄露、设备认证漏洞等安全隐患。针对这些问题,结合电力物联网技术发展现状,提出基于WAPI(无线局域网鉴别与保密基础结构)与改进椭圆曲线加密(ECC)的远程核容通信技术及安全策略。该方案设计融合新型无线传感器与边缘网关的物联架构,通过优化WAPI身份认证流程强化链路安全,改进ECC算法引入时间戳动态生成公钥以适配多维度数据加密需求。采用Dolev-Yao威胁模型评估安全性,通过形式化与非形式化分析证明方案可有效抵抗多种攻击。实验结果表明,提出的优化WAPI+改进ECC方案,在计算、通信和存储3个核心开销维度上仅为传统WAPI+传统ECC方案的60.1%、33.0%和17.2%,为传统WAPI+RSA公钥加密算法方案的44.9%、44.8%和62.5%,充分体现了本方案在边缘计算场景下的高效性与轻量级优势。

     

    Abstract: With the advancement of smart grid construction, remote capacity verification of series-connected batteries in substation DC systems has become a key direction for the digital transformation of operation and maintenance. However, the multi-system interaction process faces potential security risks such as communication latency, data leakage, and device authentication vulnerabilities. To address these issues, combined with the current development status of the power Internet of Things technology, this paper proposes a remote capacity verification communication technology and security strategy based on the wireless LAN authentication and privacy infrastructure (WAPI) and improved elliptic curve cryptography (ECC).The proposed scheme is designed with an IoT architecture integrating novel wireless sensors and edge gateways. It strengthens link security by optimizing the WAPI identity authentication process, and improves the ECC algorithm by introducing timestamps to dynamically generate public keys, so as to meet the requirements of multidimensional data encryption. The Dolev-Yao threat model is adopted to evaluate the security, and both formal and informal analyses prove that the scheme can effectively resist various types of attacks.Experimental results show that the optimized WAPI + improved ECC scheme proposed in this paper only accounts for 60.1%, 33.0% and 17.2% of the traditional WAPI + traditional ECC scheme in three core overhead dimensions, namely computing, communication and storage overhead. Compared with the traditional WAPI + RSA public-key encryption algorithm scheme, the overheads of the proposed scheme are 44.9%, 44.8% and 62.5% respectively. These results fully demonstrate the high efficiency and lightweight advantages of the proposed scheme in edge computing scenarios.

     

/

返回文章
返回