论文部分内容阅读
针对电力远程拨号系统的安全防护需求,对其相关安全隐患进行了分析,并设计和实现了基于数字证书认证的电力安全拨号认证系统,分析了其技术特点。该系统可对拨号客户端和拨号网关进行数字证书互验及客户端可信接入,对传输数据进行加密、签名,避免敏感信息泄漏及篡改,并可进行细粒度访问控制和用户行为审计,有效地解决了电力远程拨号系统相关安全隐患,对电力二次系统安全防护具有重要意义。
According to the demand of security protection of power remote dialing system, the related security risks are analyzed, and the power security dial-in authentication system based on digital certificate authentication is designed and implemented. The technical characteristics are analyzed. The system can dial-up client and dial-up gateway digital certificate mutual authentication and client trusted access, the transmission data encryption and signature, to avoid leakage and tampering of sensitive information, and fine-grained access control and user behavior audit, Effectively solves the security risks related to the power remote dialing system and is of great significance to the safety protection of the secondary power system.