【作者】 张阔；

【导师】 邵作之；

【作者基本信息】 华北电力大学(北京) ， 计算机系统结构， 2016， 硕士

【摘要】 近年来,随着网络技术和计算机技术的高速发展,各个领域已经步入信息化时代。对于电力系统而言,可以通过网络技术将分散在各地的电力相关信息采集后传入国网内部,这使得电力上的一些自动采集传输类业务应用得以推广,例如缴费平台、电压采集、环境检测等,但是外部数据传入内网会带来一定的安全隐患,因此数据的安全传输成为面临的首要问题。目前有很多标准的安全传输协议,例如SSL、IPSec等,它们在数据传输前的协商过程过于复杂,需要交互大量的报文,而且报文本身的冗余数据量也非常大,因此在无线网络信号不稳定的情况下很容易出现传输问题；另外,这类安全协议使用的RSA公钥加密算法,而不是电力系统要求采用的商密算法。除此之外,也存在一些为了满足特定业务临时设计的协议,这类协议应用面较窄。因此设计一种针对电力业务的并且适用于多种应用的安全传输协议已经成为亟待解决的问题。基于上述背景,本文研究并实现了一种面向业务应用的可配置安全传输协议。本课题的主要研究成果如下：(1)讨论了几类加密算法的应用场景,具体研究了商密算法的原理,对比了RSA算法、SM2算法的区别。(2)研究了几种大并发通信模型,分别是TCP并发服务器模型、I/0复用服务器模型的select模型和epoll模型以及底层支持select epoll等I/0模型的libevent框架,并总结了它们的特点。(3)基于上面研究的技术,对安全传输协议进行了整体的设计,分为密钥协商和数据传送,整个内容包括通信流程和报文格式。该协议下层同时支持TCP协议和UDP协议。考虑到无线网络的稳定性与带宽,密钥协商和通信过程的报文都是轻量级的,不会过度占用信道。(4)基于上面的设计,将整个安全传输协议用C语言实现。实现了协议中出现的商密算法；针对已研究的几种并发模型,对比它们的优缺点,选择合适的模型应用到安全传输协议的实现中。更多还原

【Abstract】 In recent years, with the rapid development of network technology and computer technology all areas have entered the information age. For power systems, it can be achieved by network technology that power-related information which is collected throughout the province is transferred to State Grid. This makes some business applications of automatic collection and transmission to promote, such as payment platforms, voltage acquisition, environmental monitoring and so on. However external data into internal network will bring some security risks. There are many standards of secure transmission protocols, such as SSL, IPSec, etc. Their consultation process before data transmission require a lot of interaction packets, and the amount of redundant information of the package of transferring data is very large, so in the case of instable wireless network transmission problems often occur. Besides, There are some protocols designed temporarily to meet specific business applications. Such protocols are not widely available. It has become a problem which urgently needs to be solved to design a secure transmission protocol for business applications, this paper researches and achieves a configurable secure transmission protocol for business applications. The main results of this project are as follows:(1) Discuss several types of scenes where encryption algorithm is used, study the principles of commercial secret algorithm and compare the difference between RSA algorithm, SM2 algorithm.(2) Research several high concurrency communication model, which is TCP concurrency server model and I/O multiplexing server model, and libevent frame which support I/O multiplexing such as epoll model and select model etc., conclude their feature.(3) Based on the above technology research. design secure transmission protocols which is represented by key negotiation and data transfer. The protocol supports both TCP and UDP protocols. Key negotiation and communication process packets are so lightweight as not to overly busy channel.(4) Implement secure transmission protocol using C language, implement commercial secret algorithm in the protocol. Compare the advantages and disadvantages of several concurrency models and select the appropriate model to achieve the secure transfer protocol.更多还原