信息安全研究 ›› 2023, Vol. 9 ›› Issue (9): 851-.

• 学术论文 • 上一篇    下一篇

工业互联网商用密码应用研究

彭浩楠唐明环查奇文王伟忠王聪   

  1. (中国工业互联网研究院北京100102)
  • 出版日期:2023-09-17 发布日期:2023-10-04
  • 通讯作者: 王聪 硕士,高级工程师,中国工业互联网研究院安全研究所所长.主要研究方向为工业互联网安全、商用密码应用安全. wangcong@chinaaii.com
  • 作者简介:彭浩楠 博士,高级工程师.主要研究方向为工业互联网安全、车联网安全、商用密码应用安全. penghaonan@chinaaii.com 唐明环 硕士,工程师.主要研究方向为基础通信网络安全、工业互联网安全、商用密码应用安全. tangminghuan@chinaaii.com 查奇文 博士,高级工程师.主要研究方向为工业互联网安全、商用密码应用安全. zhaqiwen@chinaaii.com 王伟忠 博士,高级工程师.主要研究方向为工业互联网安全、商用密码应用安全. wangweizhong@chinaaii.com 王聪 硕士,高级工程师,中国工业互联网研究院安全研究所所长.主要研究方向为工业互联网安全、商用密码应用安全. wangcong@chinaaii.com

Research on Commercial Cryptography Application to Industrial Internet

  • Online:2023-09-17 Published:2023-10-04

摘要: 作为第4次工业革命的重要基石,工业互联网是新一代信息通信技术融合赋能工业经济的重要综合信息基础设施与应用模式.工业互联网设备复杂、协议私有、数据海量及工业特性严格等特点为工业互联网整个环节带来不可避免的安全风险.因此,如何利用商用密码技术为工业互联网内植安全免疫基因成为当前的研究热点.从工业互联网安全风险切入,分析了工业互联网的密码应用需求,进而研究了工业互联网商用密码典型应用场景的密码应用方案,最后为商用密码在工业互联网的应用推广提出了建议.研究成果为工业互联网商用密码应用实践提供参考借鉴,有望解决工业互联网安全问题.

关键词: 工业互联网, 安全风险, 商用密码应用, 工业控制系统, 标识解析系统, 工业互联网平台

Abstract: As a pivotal foundation of the fourth industrial revolution, the Industrial Internet is attributed as an essential integrated information infrastructure and application paradigm which empowers and facilitates the industrial economy with the latest generation of information and communication technology. The complexity of Industrial Internet devices, private protocols, massive data, and strict industrial characteristics bring inevitable and complex security risks to all aspects of the Industrial Internet. Therefore, how to draw on commercial cryptography technology to implant secure immune genes into the Industrial Internet has become a current research hotspot. This paper starts from the security risks of the Industrial Internet, analyzes the commercial cryptography application requirements of the Industrial Internet, thereby studies the commercial cryptography scheme of typical application scenarios in the Industrial Internet, and finally proposes some proposals for the application and promotion of the commercial cryptography in the Industrial Internet. The research results provide a theoretical guidance and reference for the application practice of commercial cryptography in Industrial Internet scenarios, and are expected to solve the key problems of the Industrial Internet security.

Key words: Industrial Internet, security risks, commercial cryptography application, industrial control system, identifier resolution system, Industrial Internet platform