电力物联网双层网格抗捕获攻击密钥分配算法

Key management method against capture attack in power internet of things based on double-layer grid model

摘要:

针对电力物联网智能终端有限的存储、计算和通信资源，现有运行管理算法大多偏重于降低节点功耗，导致终端安全抗捕获的性能受限。为在保障电力物联网终端节点运行性能的同时提升抗物理捕获攻击能力，提出一种轻量级密钥管理方案。通过集中器节点部署增加管控中央区域，形成了一种新型的双层网格部署模型。基于新结构提出一种双阶段的密钥信息分配算法。各阶段根据各子区域节点数目设置Blom矩阵空间的安全阈值，大幅提高了电力信息网络连通性和抗捕获性能。仿真结果证明，当被捕获终端比例为5.5%时，该方案对应的通信链路失效概率较t-UKP和SPECC方案最大降低63%和68%。

Abstract:

Considering the limited storage, computing, and communication resources of smart terminals of the power Internet of Things, most of the existing operation management algorithms focus on reducing power consumption of nodes, which limits the security and anti-capture performance of terminals. For ensuring the performance of terminal nodes in the power Internet of Things, while improving the ability to resist physical capture attack, a lightweight key management scheme is proposed. Firstly, the central control area is increased through the deployment of concentrator nodes, forming a new two-tier grid deployment model. Then based on the new structure, a two-stage key information distribution algorithm is proposed. In each stage, the security threshold of the Blom matrix space is set according to the number of nodes in each sub-area, and greatly improves the connectivity and anti-capture performance of the cyber network. The simulation proves that when the proportion of captured terminals is 5.5%, the failure probability of communication link in the proposed scheme can be reduced by 63% and 68%, respectively, compared with those of the t-UKP scheme and the SPECC scheme.