面向能源电力区块链的跨域身份控制模型

doi:10.11930/j.issn.1004-9649.202209017

中国电力 ›› 2023, Vol. 56 ›› Issue (5): 209-216.DOI: 10.11930/j.issn.1004-9649.202209017

• 信息与通信 • 上一篇

面向能源电力区块链的跨域身份控制模型

杨珂^1,2, 王栋^1,3, 李达^1,3, 钱晓雨⁴, 李军⁴

1. 国网数字科技控股有限公司, 北京 100053;
2. 国网区块链科技(北京)有限公司, 北京 100053;
3. 国家电网有限公司区块链技术实验室, 北京 100053;
4. 北京信息科技大学, 北京 100192

收稿日期:2022-09-07 修回日期:2023-03-03 出版日期:2023-05-28 发布日期:2023-05-27
作者简介:杨珂(1990-),男,博士,工程师,从事网络安全与区块链研究,E-mail:yangke@sgdt.sgcc.com.cn;王栋(1985-),男,硕士,高级工程师,从事信息安全与区块链研究,E-mail:wangdong@sgdt.sgcc.com.cn;李达(1991-),男,通信作者,硕士,工程师,从事电力系统自动化与能源区块链研究,E-mail:lida@sgdt.sgcc.com.cn;钱晓雨(1997-),女,硕士研究生,从事网络安全与区块链研究,E-mail:qxiaoyu228@163.com
基金资助:
国家电网有限公司科技项目（5700-202158411A-0-0-00）。

A Cross-Domain Identity Control Model for Electric Blockchain

YANG Ke^1,2, WANG Dong^1,3, LI Da^1,3, QIAN Xiaoyu⁴, LI Jun⁴

1. State Grid Digital Technology Holding Co., Ltd., Beijing 100053, China;
2. State Grid Blockchain Technology (Beijing) Co., Ltd., Beijing 100053, China;
3. Blockchain Technology Laboratory of State Grid Corporation of China, Beijing 100053, China;
4. Beijing Information Science and Technology University, Beijing 100192, China

Received:2022-09-07 Revised:2023-03-03 Online:2023-05-28 Published:2023-05-27
Supported by:
This work is supported by Science and Technology Project of SGCC (No.5700-202158411A-0-0-00).

摘要/Abstract

摘要： 针对各类场景业务终端访问不同信任域节点时的跨域身份认证问题，结合区块链与身份认证技术，提出一种面向能源电力场景支持终端灵活跨域认证的区块链可监管可信身份管理模型。首先，建立基于区块链的新型可信身份认证基础架构，电力场景下首次采用哈希值校验的方式完成认证，解决外域终端的可信高效接入问题。其次，为避免恶意终端接入同步节点数据，基于对证书体系的分级分类和能源电力区块链网络，设计终端的认证机制与交易策略，实现终端的可信动态接入与读写交易的权限分离管理。最后，在保证安全性与证书有效性的同时，与已有区块链跨域认证方案相比的结果表明，所提模型能够提升能源电力场景下的终端跨域认证效率。

关键词: 区块链技术, 身份标识技术, 可控匿名认证, 可信接入, 权限管理

Abstract: There would be serious cross-domain authentication issue when business terminals access different trust domain nodes in various scenarios. In this regard, a supervisable and trusted identity management blockchain model is proposed in this paper, so as to support flexible cross-domain authentication of terminals by combining blockchain and identity authentication technology. Firstly, a novel blockchain-based trusted identity authentication infrastructure is established, and the authentication is completed by means of hash value verification, where the problem of trusted and efficient access to terminals in the outer domain could be solved. Secondly, to avoid malicious terminals accessing synchronous node data, the authentication mechanism and transaction strategy of terminals are designed based on the hierarchical classification of the certificate the energy and electricity blockchain network. Then credible and dynamic access of terminals and the separation of authority management of read and write transactions could be accomplished. Finally, while ensuring security and certificate validity, the efficiency of terminal cross-domain authentication could be improved compared with existing blockchain cross-domain authentication solutions.

Key words: blockchain technology, identification technology, controlled anonymous authentication, trusted access, permission management

杨珂, 王栋, 李达, 钱晓雨, 李军. 面向能源电力区块链的跨域身份控制模型[J]. 中国电力, 2023, 56(5): 209-216.

YANG Ke, WANG Dong, LI Da, QIAN Xiaoyu, LI Jun. A Cross-Domain Identity Control Model for Electric Blockchain[J]. Electric Power, 2023, 56(5): 209-216.

导出引用管理器 EndNote|Ris|BibTeX

链接本文: https://www.electricpower.com.cn/CN/10.11930/j.issn.1004-9649.202209017

https://www.electricpower.com.cn/CN/Y2023/V56/I5/209

参考文献

[1] 杨珂, 玄佳兴, 王焕娟, 等. 区块链技术在能源电力行业的研究及业务应用综述[J]. 电力建设, 2020, 41(11): 1–15
YANG Ke, XUAN Jiaxing, WANG Huanjuan, et al. Overview on research and business applications of blockchain technology in energy and power industry[J]. Electric Power Construction, 2020, 41(11): 1–15
[2] 林璟锵, 荆继武, 张琼露, 等. PKI技术的近年研究综述[J]. 密码学报, 2015, 2(6): 487–496
LIN Jingqiang, JING Jiwu, ZHANG Qionglu, et al. Recent advances in PKI technologies[J]. Journal of Cryptologic Research, 2015, 2(6): 487–496
[3] 崔久强, 吕尧, 王虎. 基于区块链的数字身份发展现状[J]. 网络空间安全, 2020, 11(6): 25–29
CUI Jiuqiang, LV Yao, WANG Hu. The development of blockchain-aided digital identity[J]. Cyberspace Security, 2020, 11(6): 25–29
[4] 冯运波, 任金强, 杨义先. 传统PKI与桥CA认证体系[J]. 电信科学, 2002, 18(1): 21–24
FENG Yunbo, REN Jinqiang, YANG Yixian. Traditional PKI and bridge certification authority[J]. Telecommunications Science, 2002, 18(1): 21–24
[5] 张亮, 刘百祥, 张如意, 等. 区块链技术综述[J]. 计算机工程, 2019, 45(5): 1–12
ZHANG Liang, LIU Baixiang, ZHANG Ruyi, et al. Overview of blockchain technology[J]. Computer Engineering, 2019, 45(5): 1–12
[6] 贺海武, 延安, 陈泽华. 基于区块链的智能合约技术与应用综述[J]. 计算机研究与发展, 2018, 55(11): 2452–2466
HE Haiwu, YAN An, CHEN Zehua. Survey of smart contract technology and application based on blockchain[J]. Journal of Computer Research and Development, 2018, 55(11): 2452–2466
[7] 刘敖迪, 杜学绘, 王娜, 等. 区块链技术及其在信息安全领域的研究进展[J]. 软件学报, 2018, 29(7): 2092–2115
LIU Aodi, DU Xuehui, WANG Na, et al. Research progress of blockchain technology and its application in information security[J]. Journal of Software, 2018, 29(7): 2092–2115
[8] 周致成, 李立新, 李作辉. 基于区块链技术的高效跨域认证方案[J]. 计算机应用, 2018, 38(2): 316–320, 326
ZHOU Zhicheng, LI Lixin, LI Zuohui. Efficient cross-domain authentication scheme based on blockchain technology[J]. Journal of Computer Applications, 2018, 38(2): 316–320, 326
[9] 马晓婷, 马文平, 刘小雪. 基于区块链技术的跨域认证方案[J]. 电子学报, 2018, 46(11): 2571–2579
MA Xiaoting, MA Wenping, LIU Xiaoxue. A cross domain authentication scheme based on blockchain technology[J]. Acta Electronica Sinica, 2018, 46(11): 2571–2579
[10] LANDROCK P. PKI, past, present and future[C]//IEE Seminar on Quantum Cryptography: Secure Communications. London, UK. IEE, 2005.
[11] LI M C, REN Y Z, WANG Z H, et al. A new modified bridge certification authority PKI trust model[C]//2006 First International Symposium on Pervasive Computing and Applications. Urumqi, China. IEEE, 2007: 23–26.
[12] FROMKNECHT C, VELICANU D. CertCoin: a NameCoin based decentralized authentication system[R]. Technical Report, 6.857 Class Project, Massachusetts Institute of Technology, 2014.
[13] GUO S Y, HU X, ZHOU Z Q, et al. Trust access authentication in vehicular network based on blockchain[J]. China Communications, 2019, 16(6): 18–30.
[14] WANG X Y, GAO F, ZHANG J, et al. Cross-domain authentication mechanism for power terminals based on blockchain and credibility evaluation[C]//2020 5 th International Conference on Computer and Communication Systems (ICCCS). Shanghai, China. IEEE, 2020.
[15] 徐健, 陈志德, 龚平, 等. 基于区块链网络的医疗记录安全储存访问方案[J]. 计算机应用, 2019, 39(5): 1500–1506
XU Jian, CHEN Zhide, GONG Ping, et al. Secure storage and access scheme for medical records based on blockchain[J]. Journal of Computer Applications, 2019, 39(5): 1500–1506
[16] AXON L, GOLDSMITH M. PB-PKI: a privacy-aware blockchain-based PKI[C]//Proceedings of the 14 th International Joint Conference on e-Business and Telecommunications. Madrid, Spain. SCITEPRESS - Science and Technology Publications, 2017.
[17] 田雨扬, 卢锦玲, 赵洪山, 等. 基于联盟区块链的直购电交易模型[J]. 电力系统保护与控制, 2022, 50(8): 139–148
TIAN Yuyang, LU Jinling, ZHAO Hongshan, et al. Direct purchase electricity transaction model based on a consortium chain[J]. Power System Protection and Control, 2022, 50(8): 139–148
[18] 刘杨, 刘天羽. 基于区块链和动态定价模型的微电网P2P能源交易[J]. 智慧电力, 2022, 50(3): 30–36
LIU Yang, LIU Tianyu. P2P energy trading in microgrid based on blockchain and dynamic pricing model[J]. Smart Power, 2022, 50(3): 30–36
[19] 赵保华, 王志皓, 陈连栋, 等. 电力物联网可信树形批量认证机制[J]. 中国电力, 2022, 55(5): 149–157
ZHAO Baohua, WANG Zhihao, CHEN Liandong, et al. A trusted batch authentication mechanism based on tree for power Internet of Things[J]. Electric Power, 2022, 55(5): 149–157
[20] 赖业宁, 封科, 于同伟, 等. 基于DHT和区块链技术的电网安全稳定控制终端分布式认证[J]. 中国电力, 2022, 55(4): 44–53
LAI Yening, FENG Ke, YU Tongwei, et al. Distributed authentication of power grid safety and stability control terminals based on DHT and blockchain[J]. Electric Power, 2022, 55(4): 44–53
[21] 王栋, 杨珂, 王瑜, 等. 基于区块链的联盟信任分布式认证在电力行业的应用探索[J]. 电力系统自动化, 2022, 46(8): 1–10
WANG Dong, YANG Ke, WANG Yu, et al. Application exploration of blockchain-based distributed authentication wtih alliance trust in power industry[J]. Automation of Electric Power Systems, 2022, 46(8): 1–10
[22] 李达, 杨珂, 王栋, 等. “十四五”区块链应用在能源领域规划之展望[J]. 中国能源, 2021, 43(12): 14–22, 73
LI Da, YANG Ke, WANG Dong, et al. Prospects for the application of block chain in the energy field during the “14 th five-year” plan[J]. Energy of China, 2021, 43(12): 14–22, 73
[23] 赵丙镇, 王栋, 钱雪, 等. 基于区块链的电力物联网信任网关设计与实现[J]. 中国电力, 2021, 54(7): 192–197
ZHAO Bingzhen, WANG Dong, QIAN Xue, et al. Design and implementation of blockchain-based trust gateway for power Internet of Things[J]. Electric Power, 2021, 54(7): 192–197
[24] 陶梦林, 王致杰, 付晓琳, 等. 基于区块链的电动汽车充电桩共享平台策略[J]. 电力科学与技术学报, 2022, 37(4): 143–151
TAO Menglin, WANG Zhijie, FU Xiaolin, et al. Research on sharing platform of EV charging piles based on block chain[J]. Journal of Electric Power Science and Technology, 2022, 37(4): 143–151
[25] 罗鸿轩, 金鑫, 钱斌, 等. 基于区块链的台区智能终端与智能电表安全防护方法[J]. 南方电网技术, 2021, 15(4): 50–58
LUO Hongxuan, JIN Xin, QIAN Bin, et al. Security protection method of smart terminal and smart meter of station area based on blockchain[J]. Southern Power System Technology, 2021, 15(4): 50–58

面向能源电力区块链的跨域身份控制模型

A Cross-Domain Identity Control Model for Electric Blockchain

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 2

编辑推荐

Metrics

[1]	周蠡, 熊川羽, 柯方超, 李智威, 张洪, 陈然, 刘万方, 喻亚洲, 任丽琴. 基于区块链和禀赋效应的主动配电网经济运行方法[J]. 中国电力, 2023, 56(12): 58-68.
[2]	赵丙镇, 李达, 王栋, 郭庆雷, 俞果. 能源电力区块链技术标准体系研究[J]. 中国电力, 2022, 55(10): 191-200.

模态框（Modal）标题

面向能源电力区块链的跨域身份控制模型

A Cross-Domain Identity Control Model for Electric Blockchain

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 2

编辑推荐

Metrics