Research And Application Of Security Authentication For Industrial Control System Based On Lightweight Cryptography

With the rapid development of the Internet of Things,informatization and industrialization are deeply integrated.More and more network and information technology are being applied to the Industrial Control System(ICS).While promoting the rapid development of the industry,also exposing more ICS security problems.Study found that ICS transmission of instructions is very short,not the implementation of security in the process of transmission,data and instructions are transmitted in plaintext,lacking of effective security authentication security strategy,and ICS calculation,storage,communications,and other resources are relatively limited,how to in limited environment protection ICS instructions and data interactive security become an important research topic.As an effective technical science to solve information security problems,cryptography plays an important role in information encryption and identity authentication.Lightweight cryptography is a new cryptosystem which protecting resource-constrained devices and according to the requirements of application environment,with high efficiency,low energy consumption,fast running speed and easy achievement.Under the background of ICS security,this paper first studies public key cryptography algorithm RSA,symmetric cryptographic algorithm AES and important cryptography tool Hash function,introduces and analyzes lightweight ALE algorithm and LHash function.On this basis,combined with the requirements of ICS application environment,a security authentication scheme of ICS based on lightweight cryptography is proposed to achieve identity authentication and message authentication within ICS,a simulation environment is built to test and verify the feasibility and efficiency of the scheme.The specific work is as follows:(1)This paper chooses(i)Lightweight encryption and authentication algorithm ALE which based on AES,compared with AES algorithm,ALE occupies less resources and has better comprehensive performance of hardware and software;(ii)The lightweight Hash function LHash,compared with other lightweight Hash function,LHash has advantages in hardware and software performance and implementation overhead,only minimum 817 GE implementation is required.(2)According to the ICS model and security requirements,the device security registration protocol and bidirectional authentication protocol are designed using lightweight cryptographic algorithms in the industrial control system.The ICS component security registration login and bidirectional key transmission are realized,generating session keys.(3)The message encryption and authentication protocol between ICS components is designed using lightweight cryptographic algorithms,which realizes the security authentication of industrial control system instructions.(4)The abstract ICS model and designed security authentication protocol are simulated to test and verify the correctness and efficiency of the protocol,by analyzing the experimental data,the message authentication efficiency of LHash and ALE is compared.