孙军军 1李昕泽 2李伟 1李焕 1杨澜 1曹进2
作者信息
- 1. 新疆油田公司数智技术公司,新疆 克拉玛依 834000
- 2. 西安电子科技大学,陕西 西安 710126
- 折叠
摘要
Abstract
Industrial control network systems are regarded as critical components of modern industrial production,characterized by high real-time performance,high reliability,and resource constraints.They are widely used in key sectors such as manufacturing,energy,and transportation.However,their security issues have become increasingly prominent,especially in Modbus-based communication systems.In this protocol,data are transmitted in plaintext without encryption or authentication mechanisms.Once access to the bus is obtained by attackers,data theft,tam-pering,or replay attacks can be easily executed,seriously threatening the normal operation of communication de-vices and even endangering industrial operations and personnel safety.To address the issues of limited node re-sources,insufficient bus bandwidth,and urgent security requirements in industrial control networks,a lightweight node identity authentication and group authentication scheme based on Chinese commercial cryptographic algo-rithms was proposed.In this scheme,full advantage was taken of the widespread applicability of the Modbus com-munication protocol.By utilizing lightweight operations such as hash functions and symmetric encryption,subscrip-tion group identity authentication and session key negotiation based on node ID were implemented.Performance analysis showed that it outperformed existing solutions in terms of both computational and communication over-head.Moreover,it could be integrated into existing industrial control systems with minimal changes to the current Modbus bus hardware.Additionally,the security of the scheme was thoroughly verified using the formal verifica-tion tool Scyther,and it was demonstrated that the scheme met security objectives such as bidirectional authentica-tion,key negotiation,and resistance to replay attacks,effectively defending against various network attacks.关键词
身份认证/群组认证/工业控制网络/Modbus总线Key words
identity authentication/group authentication/industrial control network/Modbus bus分类
信息技术与安全科学
