基于国密的工控低算力设备身份认证与群组认证方案

孙军军; 李昕泽; 李伟; 李焕; 杨澜; 曹进

doi:10.11959/j.issn.2096-109x.AQ25225

您当前的位置：

首页 >

文章列表页 >

基于国密的工控低算力设备身份认证与群组认证方案

学术论文 | 更新时间：2026-05-11

- 基于国密的工控低算力设备身份认证与群组认证方案
- An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography
- 网络与信息安全学报 2026年12卷第2期页码：169-182
- 作者机构：
  
  1.新疆油田公司数智技术公司，新疆克拉玛依 834000
  2.西安电子科技大学，陕西西安 710126
- 作者简介：
  
  [ "孙军军（1968- ），男，博士，新疆油田公司数智技术公司高级工程师，主要研究方向为网络与信息安全。" ]
  [ "李昕泽（2004- ），男，西安电子科技大学博士生，主要研究方向为网络与信息安全。" ]
  [ "李伟（1987- ），男，硕士，新疆油田公司数智技术公司高级工程师，主要研究方向为网络安全、工控安全。" ]
  [ "李焕（1992- ），女，新疆油田公司数智技术公司工程师，主要研究方向为网络安全。" ]
  [ "杨澜（1999- ），女，新疆油田公司数智技术公司助理工程师，主要研究方向为工控安全与网络安全。" ]
  [ "曹进（1985- ），男，博士，西安电子科技大学教授，主要研究方向为网络与信息安全。" ]
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.AQ25225
  中图分类号： TP393
- 收稿：2025-08-26，
  
  修回：2026-03-19，
  
  录用：2026-03-20，
  
  纸质出版：2026-04-25
- 稿件说明：
移动端阅览
孙军军, 李昕泽, 李伟, 等. 基于国密的工控低算力设备身份认证与群组认证方案[J]. 网络与信息安全学报, 2026, 12(2): 169-182.

Sun Junjun, Li Xinze, Li Wei, et al. An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography[J]. Chinese Journal of Network and Information Security, 2026, 12(2): 169-182.
孙军军, 李昕泽, 李伟, 等. 基于国密的工控低算力设备身份认证与群组认证方案[J]. 网络与信息安全学报, 2026, 12(2): 169-182. DOI： 10.11959/j.issn.2096-109x.AQ25225.

Sun Junjun, Li Xinze, Li Wei, et al. An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography[J]. Chinese Journal of Network and Information Security, 2026, 12(2): 169-182. DOI： 10.11959/j.issn.2096-109x.AQ25225.

摘要

工业控制网络系统是现代工业生产的重要组成部分，具有高实时性、高可靠性和资源受限等特点，广泛应用于制造业、能源、交通等关键领域。然而，其安全性问题日益突显，尤其是基于Modbus总线的通信系统，该协议采用明文传输，缺乏加密或认证机制，导致攻击者一旦获得总线访问权限，便能轻易实施数据窃取、篡改或重放攻击，严重威胁通信设备的正常运行，甚至危及产业及人员安全。针对工业控制网络中节点资源受限、总线带宽不足以及安全需求迫切等问题，基于中国商用密码算法提出了一种轻量化的节点身份认证及群组认证方案，充分利用了Modbus通信协议的广泛适用性，通过哈希运算和对称加密等轻量化操作，实现了基于节点ID的订阅群组身份认证和会话密钥协商。性能分析表明，在计算开销和通信开销方面均优于现有方案，并可基于现有Modbus总线硬件设备，以较小的改动集成到现有工业控制系统中。此外，通过形式化验证工具Scyther对方案的安全性进行了全面验证，证明其能够满足双向认证、密钥协商和抗重放攻击等安全目标，有效抵御多种网络攻击。

Abstract

Industrial control network systems are regarded as critical components of modern industrial production

characterized by high real-time performance

high reliability

and resource constraints. They are widely used in key sectors such as manufacturing

energy

and transportation. However

their security issues have become increasingly prominent

especially in Modbus-based communication systems. In this protocol

data are transmitted in plaintext without encryption or authentication mechanisms. Once access to the bus is obtained by attackers

data theft

tampering

or replay attacks can be easily executed

seriously threatening the normal operation of communication devices and even endangering industrial operations and personnel safety.To address the issues of limited node resources

insufficient bus bandwidth

and urgent security requirements in industrial control networks

a lightweight node identity authentication and group authentication scheme based on Chinese commercial cryptographic algorithms was proposed. In this scheme

full advantage was taken of the widespread applicability of the Modbus communication protocol. By utilizing lightweight operations such as hash functions and symmetric encryption

subscription group identity authentication and session key negotiation based on node ID were implemented. Performance analysis showed that it outperformed existing solutions in terms of both computational and communication overhead. Moreover

it could be integrated into existing industrial control systems with minimal changes to the current Modbus bus hardware.Additionally

the security of the scheme was thoroughly verified using the formal verification tool Scyther

and it was demonstrated that the scheme met security objectives such as bidirectional authentication

key negotiation

and resistance to replay attacks

effectively defending against various network attacks.

关键词

Keywords

references

Modbus Organization . MO DBUS Application protocol specification v1.163 [S ] .

梁涛 . 基于国密的工业物联网安全通信协议研究 [D ] . 哈尔滨 : 哈尔滨工程大学 , 2024 .

Liang T . Research on security communication protocol of industrial IoT based on national encryption standards [D ] . Harbin : Harbin Engineering University , 2024 .

吴毅 , 冯涛 , 柳春岩 , 等 . 基于工业物联网的分层多设备认证密钥协商协议 [J ] . 网络与信息安全学报 , 2025 , 11 ( 4 ): 86 - 106 .

Wu Y , Feng T , Liu C Y , et al . Hierarchical multi-device authentication and key agreement protocol for industrial IoT [J ] . Chinese Journal of Network and Information Security , 2025 , 11 ( 4 ): 86 - 106 .

Shahzad A , Lee M , Lee Y K , et al . Real time Modbus transmissions and cryptography security designs and enhancements of protocol sensitive information [J ] . Symmetry , 2015 , 7 ( 3 ): 1176 - 1210 .

Nardone R , Rodríguez R J , Marrone S . Formal security assessment of Modbus protocol [C ] // Proceedings of the 2016 11th International Conference for Internet Technology and Secured Transactions (ICITST) . Piscataway : IEEE Press , 2016 : 142 - 147 .

Rajesh L , Satyanarayana P . Vulnerability analysis and enhancement of security of communication protocol in industrial control systems [J ] . Helix , 2019 , 9 ( 4 ): 5122 - 5127 .

You W Z , Ge H B . Design and implementation of modbus protocol for intelligent building security [C ] // Proceedings of the 2019 IEEE 19th International Conference on Communication Technology (ICCT) . Piscataway : IEEE Press , 2019 : 420 - 423 .

Martins T , Oliveira S V G . Enhanced Modbus/TCP security protocol: Authentication and authorization functions supported [J ] . Sensors , 2022 , 22 ( 20 ): 8024 .

Figueroa-Lorenzo S , Añorga Benito J , Arrizabalaga S . Modbus access control system based on SSI over hyperledger fabric blockchain [J ] . Sensors , 2021 , 21 ( 16 ): 5438 .

Gamess E , Smith B , Francia G . Performance evaluation of modbus TCP in normal operation and under a distributed denial of service attack [J ] . International Journal of Computer Networks & Communications , 2020 , 12 ( 2 ): 1 - 21 .

Phillips B , Gamess E , Krishnaprasad S . An evaluation of machine learning-based anomaly detection in a SCADA system using the modbus protocol [C ] // Proceedings of the 2020 ACM Southeast Conference . New York : ACM Press , 2020 : 188 - 196 .

Hayes G , El-Khatib K . Securing modbus transactions using hash-based message authentication codes and stream transmission control protocol [C ] // Proceedings of the 2013 Third International Conference on Communications and Information Technology (ICCIT) . Piscataway : IEEE Press , 2013 : 179 - 184 .

Keliris A , Maniatakos M . Remote field device fingerprinting using device-specific modbus information [C ] // Proceedings of the 2016 IEEE 59th International Midwest Symposium on Circuits and Systems (MWSCAS) . Piscataway : IEEE Press , 2016 : 1 - 4 .

Pricop E , Fattahi J , Parashiv N , et al . Method for authentication of sensors connected on Modbus TCP [C ] // Proceedings of the 2017 4th International Conference on Control, Decision and Information Technologies (CoDIT) . Piscataway : IEEE Press , 2017 : 679 - 683 .

Luo X , Li Y . Security enhancement mechanism of Modbus TCP protocol [J ] . DEStech Transactions on Computer Science and Engineering , 2019 : 10 .

Figueroa-Lorenzo S , Añorga J , Arrizabalaga S . A role-based access control model in modbus SCADA systems. a centralized model approach [J ] . Sensors , 2019 , 19 ( 20 ): 4455 .

Bernieri G , Cecconello S , Conti M , et al . TAMBUS: a novel authentication method through covert channels for securing industrial networks [J ] . Computer Networks , 2020 , 183 : 107583 .

李环 . 基于祖冲之算法的Modbus TCP协议安全通信研究 [D ] . 武汉 : 华中科技大学 , 2024 .

Li H . Security communication research on Modbus TCP protocol based on Zu Chongzhi algorithm [D ] . Wuhan : Huazhong University of Science and Technology , 2024 .

Liao G Y , Chen Y J , Lu W C , et al . Toward authenticat ing the master in the modbus protocol [J ] . IEEE Transactions on Power Delivery , 2008 , 23 ( 4 ): 2628 - 2629 .

Katulić F , Sumina D , Groš S , et al . Protecting modbus/TCP-based industrial automation and control systems using message authentication codes [J ] . IEEE Access , 2023 , 11 : 47007 - 47023 .

Alsabbagh W , Amogbonjaye S , Urrego D , et al . A stealthy false command injection attack on modbus based SCADA systems [C ] // Proceedings of the 2023 IEEE 20th Consumer Communications & Networking Conference (CCNC) . Piscataway : IEEE Press , 2023 : 1 - 9 .

Guo C X , Cui Y B , Wang C . Research on trusted Modbus/TCP protocol of SCADA system based on digital envelope technology [C ] // Proc SPIE 12641 , International Conference on Cryptography, Network Security, and Communication Technology (CNSCT 2023).Bellingham : SPIE , 2023 , 12641 : 206 - 217 .

王英州 , 张耀方 , 徐有方 , 等 . 工业控制系统物理层报警量关联算法 [J ] . 网络与信息安全学报 , 2025 , 11 ( 1 ): 178 - 188 .

Wang Y Z , Zhang Y F , Xu Y F , et al . Physical layer alarm correlation algorithm for industrial control system [J ] . Chinese Journal of Network and Information Security , 2025 , 11 ( 1 ): 178 - 188 .

王红敏 , 魏强 , 王兰敏 . 工业控制系统安全风险传播机理研究 [J ] . 网络与信息安全学报 , 2025 , 11 ( 4 ): 107 - 116 .

Wang H M , Wei Q , Wang L M . Research on the mechanism of industrial control system security risk propagation [J ] . Chinese Journal of Network and Information Security , 2025 , 11 ( 4 ): 107 - 116 .

Yi F M , Zhang L , Yang S M , et al . A security-enhanced modbus TCP protocol and authorized access mechanism [C ] // Proceedings of the 2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC) . Piscataway : IEEE Press , 2021 : 61 - 67 .

Wang Y , Wang L , Song N N , et al . Certificateless authentication application of the Modbus protocol in industrial control systems [C ] // Proceedings of the 2022 IEEE International Conference on Advances in Electrical Engineering and Computer Applications (AEECA) . Piscataway : IEEE Press , 2022 : 1308 - 1314 .

Liu Z C , Liang T , Wang W S , et al . Design and implementation of a lightweight security-enhanced scheme for modbus TCP protocol [J ] . Security and Communication Networks , 2023 , 2023 : 5486566 .

Luo X , Li Y Z . Research and implementation of modbus TCP security enhancement protocol [J ] . Journal of Physics: Conference Series , 2019 , 1213 ( 5 ): 052058 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于区块链的跨数据中心匿名可监管身份认证方案

边缘计算环境下轻量级终端跨域认证协议

新的基于鼠标行为的持续身份认证方法

基于SEIPQR模型的工控蠕虫防御策略

交叉口场景下基于区块链技术的匿名车辆身份认证方案