面向配电网分布式控制的轻量级身份认证技术

提出基于一次性签名（OTS）的轻量级身份认证算法.考虑到常规一次性签名算法存储开销巨大，结合配电网分布式控制的特点对一次性签名的参数进行优化，设计可扩展为认证多个终端的密钥管理方案.在计算机和嵌入式平台上实现该算法并进行相关的实验.嵌入式平台实验结果表明：该算法实用高效，可以满足配电网分布式控制对于关键报文传输性能的要求，解决了配电网分布式控制的身份认证存在数据传输实时性要求高、终端计算能力有限、传统数字签名算法计算开销大等问题.
Abstract: A lightweight authentication algorithm utilizing one-time signature (OTS) was proposed. The parameters of OTS were optimized combined with the mechanism of the distributed control of distribution networks to significantly reduce the storage cost and design a key management scheme that can be applied to multi-terminal authentication. The proposed algorithm was verified both on the PC and embedded platform. Results show that the algorithm is efficient and satisfies the time-critical requirements of data transmission. The algorithm has achieved balance between security and overhead of the distributed control in power distribution networks.