Construction of power grid data security protection system based on commercial cryptography technology

As the core means to ensure data security, commercial cryptography can effectively resist threats such as data leakage, tampering and illegal access through encryption, authentication, signature and other functions. This paper proposes to build a power grid data security protection system based on commercial cryptography, adopting a layered defense model. From the data acquisition layer to the destruction layer, terminal identity authentication is realized through SM2 algorithm, SM4-GCM encryption tunnel is combined with SM3 integrity check to ensure data transmission, SM9 attribute-based encryption technology is used for hierarchical storage, a trusted execution environment is built based on SGX technology to ensure data processing security, and SM4-CTR mode is used to overwrite data to ensure data destruction security. At the same time, key technical modules such as dynamic key management module, real-time data encryption module and security policy module are designed, and the performance is improved through parallel encryption processing technology and FPGA hardware acceleration scheme. The security verification adopts three-level verification system, including algorithm level, system level and business level verification. The results show that the system is excellent in performance, anti-attack ability and compliance, which can meet the security requirements of power grid data in the whole life cycle and provide an effective solution for power grid data security protection.