스마트미터와 데이터 집중 장치간 인증 및 암호화 통신을 위한 Cortex M3 기반 경량 보안 프로토콜
Cortex M3 Based Lightweight Security Protocol for Authentication and Encrypt Communication between Smart Meters and Data Concentrate Unit
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
기존 스마트그리드 기기 인증 체계는 DCU와 검침 FEP 및 MDMS에 집중되어 있으며 스마트미터에 대한인증체계는 확립되지 않은 상황이다. 현재 몇몇 암호칩이 개발되었지만, 낮은 강도의 단순 암호화 수준에 머물러 있어 PKI 인증체계를 완성하기에는 어려움이 있다. 스마트그리드는 기존 전력망과 달리 개방형 양방향통신을 기반으로 함에 따라 정보보안 취약성이 높아지면서 사고 위험 증가하고 있다. 하지만 스마트미터에는PKI가 적용되기 어려워, 조작한 패킷을 보내 운영시스템에 거짓 정보 전송으로 시스템 정지 등의 사고가 발생할 가능성 존재한다. 하드웨어 제약사항이 많은 스마트미터에 기존 PKI 인증서를 발급할 경우 인증 및 인증서 갱신이 어렵기 때문에 스마트미터의 열악한 성능(Non-IP 네트워크, 프로세서, 메모리 및 저장소 공간등)에서도 작동 가능한 초 경량 암호 인증 프로토콜을 설계 구현하였다. 실험 결과 Cortex-M3 환경에서도 경량 암호 인증 프로토콜을 빠른 시간 내에 수행 할 수 있었으며, 앞으로 스마트그리드 산업에서의 더 안전한보안성을 갖춘 인증 시스템을 마련하는데 도움을 줄 수 있을 것으로 기대한다.
Abstract
The existing smart grid device authentication system is concentrated on DCU, meter reading FEP and MDMS, and the authentication system for smart meters is not established. Although some cryptographic chips have been developed at present, it is difficult to complete the PKI authentication scheme because it is at the low level of simple encryption. Unlike existing power grids, smart grids are based on open two-way communication, increasing the risk of accidents as information security vulnerabilities increase. However, PKI is difficult to apply to smart meters, and there is a possibility of accidents such as system shutdown by sending manipulated packets and sending false information to the operating system. Issuing an existing PKI certificate to smart meters with high hardware constraints makes authentication and certificate renewal difficult, so an ultra-lightweight password authentication protocol that can operate even on the poor performance of smart meters (such as non-IP networks, processors, memory, and storage space) was designed and implemented. As a result of the experiment, lightweight cryptographic authentication protocol was able to be executed quickly in the Cortex-M3 environment, and it is expected that it will help to prepare a more secure authentication system in the smart grid industry.
참고문헌 (14)
- Joshitta, R. Shantha Mary, "Device authentication mechanism for IoT enabled healthcare system", Algorithms, Methodology, Models and Applications in Emerging Technologies (ICAMMAET), 2017 International Conference on, pp.1~6 (2017)
- Vaidya, Binod, "Device authentication mechanism for Smart Energy Home Area Networks", Consumer Electronics (ICCE), 2011 IEEE International Conference on, pp.787~788 (2011)
- Young-Sam Kim, "Device Authentication Protocol for Smart Grid Systems Using Homomorphic Hash", Journal of Communications and Networks, 14(6), pp.606~613 (2012), 한국통신학회
- Zhao, Shushan, "PKI-based authentication mechanisms in grid systems", 2007International Conference on Networking, Architecture, and Storage (NAS 2007) (2007), IEEE
- H. Khurana, "Smart-grid security issues", IEEE Security & Privacy Magazine, 8(1), pp.81~85 (2010), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- Patrick McDaniel, "Security and Privacy Challenges in the Smart Grid", IEEE Security & Privacy Magazine, 7(3), pp.75~77 (2009), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- Metke, Anthony R., "Smart grid security technology", 2010Innovative Smart Grid Technologies (ISGT) (2010), IEEE
- Fadi Aloul, "Smart Grid Security: Threats, Vulnerabilities and Solutions", International Journal of Smart Grid and Clean Energy, 1(1), pp.1~6 (2012), Engineering and Technology Publishing[DOI]
- Schroeppel, Richard, "International Workshop on Cryptographic Hardware and Embedded Systems" (2002), Springer
- Luca, Florian, "Elliptic curves with low embedding degree", Journal of Cryptology, 19(4), pp.553~562 (2006)[DOI]
- Lin, Ying, "Serial Communication Based on RS485 Bus between PC and Multisinglechip System", Machinery &Electronics, 1 (2006)
- "Stronger key derivation via sequential memory-hard functions" (2009)[URL]
- Chen, Lily, "Recommendation for key derivation using pseudorandom functions" (2008), National Institute of Standards and Technology
- Kwon, Daesung, "New block cipher:ARIA", International Conference on Information Security and Cryptology (2003), Springer