面向IEC 61869-9采样值通信的轻量级后量子安全框架
A Lightweight and Post-Quantum Secure Framework for IEC 61869-9 Sampled Value Communication
浏览论文内容
中文总结 AI 辅助
本文针对IEC 61869-9采样值通信的安全难题，提出结合轻量级Chaskey-12认证与后量子ML-KEM密钥建立的安全框架，经实验验证其性能优异，可用于资源受限的数字变电站设备。
中文摘要 AI 辅助
保护IEC 61869-9采样值（SV）通信极具挑战性，因为过程总线通信必须满足严格的实时约束，同时支持标准化的高速发布配置文件。本文提出了一种经实验验证的安全框架，该框架将面向操作SV流量的轻量级逐帧认证与具备后量子能力的密钥建立协议相结合。对于消息完整性，所提方法采用字段选择性认证，使用优化的Chaskey-12算法以降低每个数据包的计算开销；对于信任建立，本文引入了基于ML-KEM的成对认证与密钥建立流程。该成对协议在量子随机预言机模型下进行了分析，并在Dolev-Yao对抗模型下通过AVISPA工具完成了验证。研究人员在双节点过程总线测试台上实现了基于C语言的发布/订阅原型，使用HMAC-256、AES-GMAC-128、Blake-2s、Chaskey-12及编译器优化的Chaskey-12实现，针对8种IEC 61869-9 SV数据包配置文件开展了性能评估。结果表明，优化后的Chaskey-12在SV数据包上的延迟比HMAC低约90%。该安全框架是用于保护资源受限数字变电站设备上IEC 61869-9 SV流量的实用且可扩展的候选方案。
英文摘要
Securing IEC 61869-9 Sampled Values (SV) is challenging because process-bus communication must satisfy stringent real-time constraints while supporting standardized high-rate publication profiles. This paper presents an experimentally validated security framework that combines lightweight per-frame authentication for operational SV traffic with post-quantum-capable key establishment protocol. For message integrity, the proposed method applies field-selective authentication employing optimized Chaskey-12 to reduce per-packet computational overhead. For trust establishment, the paper introduces an ML-KEM-based pairwise authentication and key-establishment procedure. The pairwise protocol is analyzed in the Quantum Random Oracle Model and is also verified with AVISPA tool under the Dolev-Yao adversarial model. A C-based publisher/subscriber prototype is implemented on a two-node process-bus testbed. Performance is evaluated across the eight IEC 61869-9 SV packet profiles using HMAC-256, AES-GMAC-128, Blake-2s, Chaskey-12, and a compiler-optimized Chaskey-12 implementations. These results indicate that optimized Chaskey-12 achieves ~90% lower latency than HMAC on SV packets. The proposed security framework is a practical and scalable candidate for protecting IEC 61869-9 SV traffic on resource-constrained digital-substation devices.
