Wireless and Wired Integrated Access Control for Substations Based on WAPI and TLSec

In the wireless and wired integrated network of substations, simple passwords are set for each device and user. The communication between devices is controlled by setting simple passwords. However, passwords are easy to be guessed, stolen or cracked, resulting in low access control accuracy. Therefore, wireless and wired integrated access control for substations based on WAPI and TLSec is studied. The overall architecture is based on the principle of “integration and complementarity, layered defense”, and a layered access control architecture is constructed. The wireless side uses the WAPI (Wireless LAN Authentication and Privacy Infrastructure) protocol to strongly authenticate mobile terminal devices; the wired side uses the TLSec (Transport Layer Security) protocol to ensure the communication security of fixed devices. In terms of user identity and authority allocation, a weight-based synthesis method is used to perform multi-attribute identity authentication and assign user role permissions. The management key is dynamically negotiated by the WAPI/TLSec protocol, and a complex encryption and decryption algorithm is designed with the help of blockchain. The system provides reliable and secure protection for various types of access to substations. The experimental results show that in the wireless and wired integrated access control experiment of substations, the access control method based on WAPI and TLSec performs best in terms of both data access intrusion interception rate and data leakage reduction rate. It can quickly reduce the intrusion rate to an extremely low level and maintain it stably. When the number of data leakage is 100, the reduction rate is as high as $94.2 \%$, which verifies its feasibility and superiority in substation network security protection.