Smart grid data access control scheme based on blockchain

The smart grid communication parties need to process the data by the trusted central node, which will lead to security issues such as single-point attacks and data tampering. This paper proposes a smart grid data access control scheme based on blockchain, the user completes the registration of the smart meter by three encryptions. After the registration is completed, the registration information will be uploaded to the blockchain. In the data access phase, the verification center verifies the user's data access request, the database will accept the user's request for data if the verification is passed, and that will be broadcasted on the entire network and uploaded to the blockchain. The security of the scheme is analyzed by using a random oracle model. Analysis shows that this scheme can resist public key replacement attacks and malicious key generation center (KGC) attacks. Compared with the existing scheme, this scheme can more effectively resist more types of attacks. It shows that the smart grid data access control scheme proposed in this paper is safe, reliable and efficient.     

基于关联分析的智能电网数据传输冗余动态校验系统

电网数据在传输过程中会出现重复传输同一个数据和保留多个相同数据副本等现象,影响电网管理人员对电网运行状态调整的速度,为提高电力系统动态校验智能电网数据传输冗余准确率,提升动态校验速度,提出了基于关联分析的智能电网数据传输冗余动态校验系统.硬件设计方面,在前人对系统硬件设计的基础上,设计系统硬件框架,数据采集模块和合并单...     

智能电网中的主动立体防御体系应用场景研究

智能电网是“电力流、信息流、业务流”的融合和统一。随着智能电网建设的不断深入,面临的挑战越来越严峻．特别是面临的安全问题。主动立体防御体系是解决安全问题的重要手段之一,对该防御体系应用场景进行深入的研究,将有助于更好地理解并利用该防御体系从而提高智能电网的安全系数。     

基于Hadoop的智能电网状态监测数据存储研究

智能电网需要收集海量设备状态监测数据,这对数据存储与查询提出了更高的要求。为处理这些海量数据,设计并实现了基于Hadoop技术的数据存储系统,包括Hadoop集群、存储客户端和查询客户端。通过基准测试、存储结果验证和查询性能分析,验证了该系统具有分布式海量存储及高效查询的优势,适合智能电网环境下设备状态监测数据的存储。     

智能电网中基于MQTT协议的ABAC访问控制方案

在智能电网环境中,电力运营商和消费者通过智能电表进行大量高精度的用电数据的实时监测,用户机密数据持续暴露于未经授权的访问,在这种传统通信模式下,智能电表对家庭用户能源消耗的细粒度测量造成了严重的隐私安全问题,而现有的静态访问控制方法并不满足智能电网环境基于上下文的动态访问特性。针对此问题,提出一种基于物联网通信协议（MQTT协议）的访问控制方案,通过在MQTT协议中对树型结构的主题列表设计基于ABAC访问控制模型的动态上下文授权策略,并在WSO2系统使用XACML策略语言实现了提出的访问控制方案。性能评估结果表明,该方案能在较低的通信开销内支持动态的访问控制,以解决智能电网中用户的用电信息未经授权而泄露的隐私安全问题。     

智能电网工业系统通信控制协议的安全研究简

随着智能电网应用的深入,智能电网中工业系统通信控制协议所存在的安全隐患日显突出,如何提升和完善工业系统通信控制协议的安全性是智能电网信息安全中亟待解决的关键问题之一。本文首先分析了当前智能电网中主流和常见工业系统通信控制协议的安全问题和安全风险,提出了针对这类工业系统通信控制协议的安全防护建议。     

智能电网隐私保护工程分析与相关对策

保护电力消费者的数据和隐私对于智能电网来说是至关重要的。纵观全球,目前的智能电网往往趋于关注隐私安全的需要,隐私仅仅作为智能电网的一个特性存在。为了填补隐私保护在智能电网中的空白,同时帮助智能电网工程师分析隐私威胁、选择合适的策略即隐私保护技术最后达到解决智能电网系统开发阶段的隐私问题的目的,描述了相应的方法框架和指导规则,对现有的隐私保护技术进行了详细的总结,讨论了其应用的环境,并阐述了隐私实施过程中面对的潜在挑战。     

基于Paillier算法的智能电网数据聚合与激励方案

针对智能电网数据聚合和激励存在的隐私泄露问题,基于Paillier算法设计智能电网数据聚合和激励方案。采用超递增序列构造多维数据,并利用同态Paillier密码技术加密结构化数据。在云计算中心直接对用户与电网管理中心之间的密文数据进行聚合,添加与密钥相关的哈希运算消息认证码防止密文数据被篡改,并由电网管理中心解密后获得原始数据的聚合结果。此外,通过引入区块链和环签名实现高效匿名的光伏发电奖励和电网管理中心与用户之间的双向匿名,利用批验证算法降低计算成本。分析结果表明,在保障数据完整性和用户匿名性前提下,该方案可实现高效安全的智能电网数据聚合和激励。     

A survey on cyber attacks against nonlinear state estimation in power systems of ubiquitous cities

It is well-known that critical infrastructures would be targets for cyber attacks. In this paper, we focus on the power systems (i.e. smart grids) in ubiquitous cities, where every meter is linked to an information network through wireless networking. In a smart grid system, information from smart meters would be used to perform a state estimation in real time to maintain the stability of the system. A wrong estimation may lead to disastrous consequences (e.g. suspension of electricity supply or a big financial loss). Unfortunately, quite a number of recent results showed that attacks on this estimation process are feasible by manipulating readings of only a few meters. In this paper, we focus on nonlinear state estimation which is a more realistic model and widely employed in a real power grid environment. We category cyber attacks against nonlinear state estimation, and review the mechanisms behind. State-of-the-art security measures to detect these attacks are discussed via sensor protection. Hope that the community would be able to come up with a secure system architecture for ubiquitous cities.     

Security system architecture for data integrity based on a virtual smart meter overlay in a smart grid system

As an efficient and intelligent system for managing and monitoring electricity usage, the “smart grid” has many useful applications. It supports energy producers and energy consumers efficiently by supporting the estimation and provision of the proper amount of electricity at the proper time. The most serious threat to a smart grid system may be when information is altered or forged by attackers; the system could malfunction and could collapse. In some cases, the attackers could waste system resources on purpose and this could lead to disastrous results. In this paper, we propose security system architecture to provide the secure and reliable smart grid service. It includes a data authentication process to verify the aggregated data and virtual network management to detect a compromised area or node. It detects a false data injection attack and further prevents a denial of service attack efficiently with less overhead for the individual devices comprising the smart grid system.     

基于贝叶斯序贯博弈模型的智能电网信息物理安全分析

智能电网是利用信息技术优化从供应者到消费者的电力传输和配电网络.作为一种信息物理系统（Cyber-physical system，CPS），智能电网由物理设备和负责数据计算与通信的网络组成.智能电网的诸多安全问题会出现在通信网络和物理设备这两个层面，例如注入坏数据和收集客户隐私信息的网络攻击，攻击电网物理设备的物理攻击等.本文主要研究了智能电网的系统管理员（防护者）如何确定攻击者类型，从而选择最优防护策略的问题.提出了一种贝叶斯序贯博弈模型以确定攻击者的类型，根据序贯博弈树得到博弈双方的均衡策略.首先，对类型不确定的攻击者和防护者构建静态贝叶斯博弈模型，通过海萨尼转换将不完全信息博弈转换成完全信息博弈，得到贝叶斯纳什均衡解，进而确定攻击者的类型.其次，考虑攻击者和防护者之间的序贯博弈模型，它能够有效地帮助防护者进行决策分析.通过逆向归纳法分别对两种类型的攻击者和防护者之间的博弈树进行分析，得到博弈树的均衡路径，进而得到攻击者的最优攻击策略和防护者的最优防护策略.分析表明，贝叶斯序贯博弈模型能够使防护者确定攻击者的类型，并且选择最优防护策略，从而为涉及智能电网信息安全的相关研究提供参考.     

智能电网无线网络中的安全问题综述

随着智能电网的发展,智能电网中的安全问题日益突出,严重威胁智能电网的安全稳定运行.本文在对智能电网总体结构和网络结构分析的基础上,总结了智能电网中可能存在的安全问题,并简要分析了智能电网中的黑客攻击、DoS攻击、恶意代码感染等攻击方法及其应对措施.     

智能电网中的数据聚合方案分类研究

智能电网中其安全的通信架构是保证电网安全、稳定运行的基础,隐私保护的数据聚合是保证机密性、提高效率的有效途径。对最近面向智能电网通信系统的数据聚合的五种功能类型的方案进行了总结和分析。在聚合阶段,大部分的方案在系统架构上基本相差不大,不过在聚合方法的选取上,则各自有不同的考虑。诸如Paillier加密体制和ElGamal加密体制,是两种较为常规的加密体制,差分隐私、双线性对技术和数据签名技术也在一些文章中得到应用。通过安全性分析证明,这些方案不仅具有隐私保护、消息的认证性和完整性验证等功能;而且通过对这些方案进行性能比较分析,所述的方案在计算开销和用户的访问控制方面及通信开销都各有优势,对于智能电网多维数据的收集和云端的访问控制提供了更多的参考依据。     

智能电网ICS系统信息安全研究简

智能电网的应用改变了原有电网的网络通信结构和应用模式,如何全面的保障新形式下电网ICS系统的信息安全是一个必须深入探讨和研究并亟待解决的关键问题之一。本文首先剖析了智能电网中ICS系统与传统IT的区别,在分析ICS系统所面临的信息安全漏洞后提出了针对以上信息安全威胁的安全防护建议。     

基于智能卡的RSA数字签名算法

数字签名是目前保证网络通信安全的一种可靠而重要的技术手段.本文提出一种基于智能卡的RSA数字签名算法,利用智能卡提供的COS(Card Operaiing System)操作系统的Verify命令,并编写相关配套软件实现RSA数字签名及其验证,成功地将智能卡应用到PKI中.同时分析了应用智能卡实现RSA数字签名及验证的安全性以及相关方面的一些关键问题.     

智能电网中的若干数学与控制科学问题及其展望

从智能电网的内涵和工程需求出发, 归纳和提炼智能电网建设和发展所面临的若干基础 科学问题,包括预测、储能、控制、调度、运筹及 评估等6项关键技术及其所共有的工程博弈论研究. 这些基础问题分别属于数学、控制科学或二者的交叉, 它们的解决不仅是实现智能电网的前提,更能促使数学及控 制科学产生新的学科增长点,因而具有重要的理论和工程研究价值.     

智能电网隐私保护技术的分析研究

融合各种新兴的技术,智能电网的出现给电力系统带来了很大的变革。但和所有新兴事物一样,智能电网也将面临新的风险,尤其是用户侧的风险。面对智能电网用户侧风险,如何保护用户隐私权,是亟待解决的问题,也是文中研究的重点。首先分析了智能电网带来的风险,尤其是用户侧面临的风险;接着,介绍了智能电网隐私保护,对智能电网隐私保护特点进行了详细的解读;最后,结合电力系统,对我国智能电网隐私保护进行了思考,对未来的工作给出了建议。     

A New Roadmapping Technique for Creatively Managing the Emerging Smart Grid

The ‘Smart grid’ has been described as the ‘Energy Internet’, combining energy technology with information technology. The promise of the smart grid is to upgrade ageing energy infrastructure through the use of emerging technology. The resultant smart grid would improve efficiency, the ability to use alternative energy sources, responsiveness and security of the system. The need for creating a smarter grid is clear. Yet the traditional tool used by policy and other decision makers to rapidly advance technology product platforms, the technology roadmap, is proving ineffective due to the unique regulatory and market structure challenges of the smart grid. If the smart grid is important and its development constricted, then there is cause for concern. Today, most smart grid development teams are focusing their roadmapping efforts at the local and national levels. Yet regional roadmapping efforts can create higher quality and better integrated outcomes. A more advanced roadmapping technique is required for the effective and efficient management of the emerging smart grid technology product platform. Here, a case study approach utilizing the Pacific Northwest smart grid regional planning effort is utilized to generate an improved technology roadmapping technique, one that addresses the needs of emerging multi‐root technology‐based products like the smart grid. This roadmapping technique is designed to more effectively include the market structure and regulatory challenges inherent in the smart grid. The new roadmapping model integrates multiple technology, business and policy concerns.