基于零信任的配电边缘物联网智能终端多因子信任评估方法

MULTI-FACTOR TRUST ASSESSMENT APPROACH BASED ON ZERO-TRUST FOR DISTRIBUTION IOT TERMINAL EQUIPMENT

  • 摘要: 智能电网的普及与边缘计算的引入使得传统网络边界体系防御力度不足,大量终端的接入造成暴露面增加。提出配电物联网“云-边-端”部署架构,构建零信任引擎在配电边缘物联网中的部署方式。提出信任驱动的配电边缘物联网终端信任评估方法,其中引入SM9设计智能终端身份认证过程,利用时间退化因子、异常行为惩罚因子与身份认证因子,通过信息熵加权计算物联网终端信任值,可应用于访问控制的动态评估。实验表明,配电边缘物联网终端信任评估方法能够有效用于评估物联网终端的信任趋势,识别终端异常行为,加强配电物联网终端认证的安全性。

     

    Abstract: The popularity of smart grids and the edge computing make the traditional network boundary system inadequate in defense, and a large number of terminals involved in the system increases the exposure. The "cloud-edge-end" architecture and the zero-trust engine are proposed for power distribution IoT. Based on SM9, a smart terminal authentication process was illustrated, and a trust assessment approach for smart terminals was proposed with the time degradation factor, the anomalous behavior penalty factor and the authentication factor. The trust value of IoT terminals was calculated through information entropy weighting, which could be applied to the dynamic evaluation of access control. The experiments demonstrate that the proposed authentication and trust assessment scheme can effectively implement the trust assessment, identify abnormal terminal behavior and strengthen the security of authentication of distribution IoT terminals.

     

/

返回文章
返回