关键词: KNX/EIB协议, IP骨干网安全, 嵌入式网络, 密钥集管理, 椭圆曲线加密算法

Abstract: As the extended application of European Installation Bus (EIB) protocol, KNXnet/IP protocol increases the transmission speed of EIB system and fulfills the requirement of intelligent management. But the security of KNXnet/IP protocol is heavily threatened in the securitycritical environment. A security protocol was proposed after analyzing the security mechanism of IP network and embedded system. The security protocol used selfdefined key sets distribution protocol based on asymmetric cryptography algorithm and used symmetric cryptography algorithm for communication. It provides transparent data transmission and only needs very few changes of the primary architecture. The implementation proves the feasibility and security of the security approach.

Key words: KNX/EIB protocol, security of IP backbone, embedded network, key sets management, Elliptic Curve Cryptography (ECC) algorithm