基于国密的工控低算力设备身份认证与群组认证方案OA

Industrial control network systems are regarded as critical components of modern industrial production,characterized by high real-time performance,high reliability,and resource constraints.They are widely used in key sectors such as manufacturing,energy,and transportation.However,their security issues have become increasingly prominent,especially in Modbus-based communication systems.In this protocol,data are transmitted in plaintext without encryption or authentication mechanisms.Once access to the bus is obtained by attackers,data theft,tam-pering,or replay attacks can be easily executed,seriously threatening the normal operation of communication de-vices and even endangering industrial operations and personnel safety.To address the issues of limited node re-sources,insufficient bus bandwidth,and urgent security requirements in industrial control networks,a lightweight node identity authentication and group authentication scheme based on Chinese commercial cryptographic algo-rithms was proposed.In this scheme,full advantage was taken of the widespread applicability of the Modbus com-munication protocol.By utilizing lightweight operations such as hash functions and symmetric encryption,subscrip-tion group identity authentication and session key negotiation based on node ID were implemented.Performance analysis showed that it outperformed existing solutions in terms of both computational and communication over-head.Moreover,it could be integrated into existing industrial control systems with minimal changes to the current Modbus bus hardware.Additionally,the security of the scheme was thoroughly verified using the formal verifica-tion tool Scyther,and it was demonstrated that the scheme met security objectives such as bidirectional authentica-tion,key negotiation,and resistance to replay attacks,effectively defending against various network attacks.