OPC UA (OPC Unified Architecture) key exchange method based on chaotic RSA encryption

Abstract

The invention provides an OPC UA (OPC Unified Architecture) key exchange method based on chaotic RSA encryption, and relates to industrial data communication and information security. The method is mainly used for securely exchanging key information between an OPC UA client and a server in order to complete a conversion process from asymmetric encryption to symmetric encryption. According to the method, a large prime number meeting requirement is generated according to the pseudo randomness of a chaotic sequence in order to replace a step of generating a prime number in traditional RSA. Through the establishment of a security channel between the OPC UA client and the server, a security mechanism of current communication is negotiated, and then key exchange is carried out. Through generation of the large prime number by the principle of chaos in the method, the encryption efficiency between OPC UA systems is increased. Moreover, the security of a key in an exchange process is ensured through design of a strict authentication and communication flow; symmetric encryption communication between OPC UA is realized; and the security and timeliness required in an industrial information exchange system are realized.

Description

technical field [0001] The invention relates to the field of industrial data communication, and belongs to the aspect of information security, in particular to an OPC UA secret key exchange method based on chaotic RSA encryption. Background technique [0002] The OPC Foundation released a new OPC UA (OPC Unified Architecture) unified architecture specification in 2008. Compared with the traditional OPC technology, the unified architecture proposes a unified object and architecture definition of the enterprise manufacturing model, based on the complete service-oriented (SOA), and migrates the original platform based on DCOM technology to the framework based on Web Service technology . The focus is on solving the problem of cross-firewall communication in current manufacturing systems. At the same time, the new unified architecture also clearly stipulates security specifications, emphasizing the importance of security in industrial network communications. [0003] Since most...

AI Technical Summary

Problems solved by technology

RSA is one of the widely used asymmetric encryption algorithms. The security of this algorithm is based on the fact that it is very difficult to factorize large numbers. The system randomly generates two large prime numbers for each encryption. To ensure security, the length of the key must be at least More than 1024 bits, which consumes a lot of system resources and is insufficient for industrial systems that are very sensitive to real-time

Moreover, when using asymmetric encryption, each entity needs a pair of secret keys (public key, private key), then N pairs of entities need 2N secret keys to communicate. In the OPC UA system, multiple clients often request at the same time In the case of the server, this requires the system to provide a large amount of computing resources, and it will take a lot of time for embedded devices or controllers that do not have high computing performance.

Images