Advanced connectivity in substations brings along cybersecurity considerations. Especially, the use of standardized data objects and message structures stipulated by IEC 61850 makes them much more vulnerable to unauthorized access and manipulation. In order to tackle these vulnerabilities, different methods are investigated by researchers all over the world. An important aspect of such efforts is the real-time performance consideration since power systems are bound by the rules of physics and all control/communication tasks need to be completed in a certain time frame. Security schemes for substation communication have been proposed in the recent literature. However, they must be improved to ensure a full security solution. Recently published IEC 62351 standard aims to fill this gap. Node authentication is vital for substation communication networks based on IEC 61850 to mitigate a variety of attacks such as man-in-the-middle (MITM) attack. This short communication presents a node authentication mechanism based on transport layer security (TLS) with certificates to address this knowledge gap. It also investigates the real-time performance by implementing the proposed scheme with Python.

中文翻译：

---

智能变电站通信网络中IEC 61850 MMS消息的改进安全方案

变电站中的高级连接带来了网络安全方面的考虑。特别是，使用IEC 61850规定的标准化数据对象和消息结构使它们更容易受到未经授权的访问和操纵。为了解决这些漏洞，全世界的研究人员研究了不同的方法。这种努力的一个重要方面是实时性能考量，因为电力系统受物理规则的约束，并且所有控制/通信任务都需要在特定时间范围内完成。在最近的文献中已经提出了用于变电站通信的安全方案。但是，必须对其进行改进以确保完整的安全解决方案。最近发布的IEC 62351标准旨在填补这一空白。节点身份验证对于基于IEC 61850的变电站通信网络至关重要，它可以缓解各种攻击，例如中间人（MITM）攻击。这种简短的通信提出了一种基于带有证书的传输层安全性（TLS）的节点身份验证机制，以解决这一知识空白。它还通过使用Python实现建议的方案来研究实时性能。