摘要
核安保系统作为核电站的安全防线,其安全性和可靠性对整个核电站的安全至关重要,亟需就核安保系统开展深层次的网络安全防御应用,在本体安全的基础上通过国密算法、密码技术形成核安保系统的最后一道保护屏障。通过对密码相关标准的研究,结合核安保系统密码安全应用需求的分析,形成了以SM4、SM2和SM3等国密算法为核心的核安保系统商用密码解决方案。相关商用密码解决方案已在多个核电站核安保系统中得到成功应用,实现了核安保系统对核心数据的完整性、机密性、真实性、不可否认性等多层次安全维度的保护,极大提升了核安保系统安全防护能力,保障了系统自身安全性。核电站工控系统密码应用尚处于发展前期,仍未得到大范围部署应用。相关商用密码解决方案对核电站其他工控系统的商用密码应用具有深层次的借鉴意义。
As the safety line of defense of nuclear power plant,the safety and reliability of nuclear security system is crucial to the safety of the whole nuclear power plant,and there is an urgent need to carry out a deep⁃level network security defense application of the nuclear security system,and to form the last protection barrier of the nuclear security system through the state secret algorithms and cryptography on the basis of the ontological security.Through the research of passwords standards and the analysis of passwords security application requirements for nuclear security systems,commercial passwords solutions for nuclear security systems have been formed with state secret algorithms such as SM4,SM2 and SM3 as the core.The relevant commercial passwords solutions have been successfully applied in the nuclear security systems of many nuclear power plants,realizing the protection of core data integrity,confidentiality,authenticity,non⁃repudiation,and other multi⁃level security dimensions of the nuclear security system,which greatly improves the security protection capability of the nuclear security system and guarantees the security of the system itself.Password application for industrial control system of nuclear power plant is still in the early stage of development and has not yet been deployed in a wide range of applications.The related commercial password solution is of great significance to the application of commercial passwords in other industrial control systems of nuclear power plants.
作者
姚红云
褚瑞
李红霞
刘元
吴治国
张智柏
张宏亮
YAO Hongyun;CHU Rui;LI Hongxia;LIU Yuan;WU Zhiguo;ZHANG Zhibai;ZHANG Hongliang(Shanghai CGN Engineering Science&Technology Co,.Ltd,.Shanghai 200241,China)
出处
《自动化仪表》
CAS
2023年第S01期268-271,276,共5页
Process Automation Instrumentation
关键词
商用密码
工控系统
密码安全
保护屏障
网络安全防御
本体安全
国密算法
安全防护能力
Nuclear power plants
Nuclear security systems
Commercial passwords
State secret algorithms
Cybersecurity
Encryption
Authentication
Security summaries
