Journal of South China University of Technology (Natural Science Edition) ›› 2016, Vol. 44 ›› Issue (4): 63-70.doi: 10.3969/j.issn.1000-565X.2016.04.010

• Power & Electrical Engineering • Previous Articles     Next Articles

Encryption and Decryption Methods of GOOSE Packets Based on Domain Implication

WANG Zhi-dong1,2 WANG Gang1 XU Zhi-heng1 TONG Jin-fang1 SHI Quan1 ZHU Ge-lan1   

  1. 1.School of Electric Power,South China University of Technology,Guangzhou 510640,Guangdong,China; 2.School of Electrical Engineering,Guangzhou College of South China University of Technology,Guangzhou 510800,Guangdong,China
  • Received:2015-05-14 Revised:2016-01-29 Online:2016-04-25 Published:2016-04-12
  • Contact: 朱革兰(1968-) ，女，博士，助理研究员，主要从事电力系统及自动化研究． E-mail:glzhu1@scut.edu.cn
  • About author:王智东(1980-) ，男，博士生，主要从事电力通信及其信息安全研究． E-mail: zdwang@ scut． edu． cn
  • Supported by:
    Supported by the National Natural Science Foundation of China( 51477057)

PDF

287

Abstract: Although IEC62351 suggests no encryption algorithm for GOOSE and other real-time packets due to the huge time consumption of encryption algorithms,many practical power projects still encrypt GOOSE packets to strengthen the security of network information.In this paper,the classical Rijndael symmetric encryption algorithm is adopted as an example to analyze such factors affecting the time consumption of GOOSE packets encryption as the secret key length,the packet length and the packet mode.Then,in order to reduce the time consumption without weakening the packet confidentiality,a GOOSE encryption method based on critical information is proposed with the combination of packet domain implication.Moreover,GOOSE messages such as StNum,SqNum and T,which possess time synchronization functions，are used to prevent replay attacks,and the CRC verification code in GOOSE packets is used to ensure the integrity of the message.Finally,the time-consuming characteristics of the proposed GOOSE encryption and decryption algorithms are tested on an embedded platform,and the results show that the proposed method meets the real-time requirements of power systems well.

Key words: GOOSE packet, symmetric encryption, integrity, real-time performance

CLC Number: