综合智慧能源 ›› 2025, Vol. 47 ›› Issue (11): 96-105.doi: 10.3969/j.issn.2097-0706.2025.11.009

• 电力数据安全 • 上一篇    

数智化电网下充电桩网络安全挑战与防护研究

李卓群1(), 金渊1(), 彭凤伟2(), 章翔宇2(), 戴罕奇1(), 张暹1(), 袁小溪1, 龚钢军2,*()   

  1. 1.国网北京市电力公司电力科学研究院,北京 100075
    2.华北电力大学 北京市能源电力信息安全工程技术研究中心,北京 102206
  • 收稿日期:2025-02-18 修回日期:2025-04-15 出版日期:2025-04-28
  • 通讯作者: *龚钢军(1976),男,教授,博士,从事电力信息安全方面的研究,gong@ncepu.edu.cn
  • 作者简介:李卓群(1994),女,工程师,硕士,从事智能用电、电动汽车充放电等方面的研究,lizhuoqun0809@126.com
    金渊(1987),男,高级工程师,硕士,从事用电与能效方面的研究,18600105056@163.com
    彭凤伟(1998),男,硕士生,从事信息安全方面的研究,2567745437@qq.com
    章翔宇(1999),男,硕士生,从事信息安全方面的研究,zz15805236101@163.com
    戴罕奇(1984),男,正高级工程师,博士,从事电力系统方面的研究,daihanqi@bj.sgcc.com.cn
    张暹(1971),男,高级工程师,硕士,从事电力系统方面的研究,zhangxian@bj.sgcc.com.cn
    袁小溪(1993),女,高级工程师,硕士,从事电动汽车充放电方面的研究,yuanxiaoxi@bj.com.cn
  • 基金资助:
    国网北京市电力公司科技项目(52022323000X)

Research on cybersecurity challenges and protection of charging piles in digital and intelligent power grids

LI Zhuoqun1(), JIN Yuan1(), PENG Fengwei2(), ZHANG Xiangyu2(), DAI Hanqi1(), ZHANG Xian1(), YUAN Xiaoxi1, GONG Gangjun2,*()   

  1. 1. Electric Power Science Research Institute of State Grid Beijing Electric Power Company,Beijing 100075,China
    2. Beijing Engineering Research Center of Energy and Electric Power Information Security,North China Electric Power University,Beijing 102206,China
  • Received:2025-02-18 Revised:2025-04-15 Published:2025-04-28
  • Supported by:
    Science and Technology Project of State Grid Beijing Electric Power Company(52022323000X)

摘要:

随着能源互联网与新一代信息技术的深度融合,数智化电网成为电力系统转型升级的核心方向。在国家政策和市场需求的双重驱动下,我国充电基础设施建设迅速发展,预计到2025年将新增大量充换电站和充电桩。然而,数智化电网下充电桩的广泛应用也带来了网络安全问题。从充电桩的边界安全、通信协议、操作系统漏洞等方面探讨了充电桩网络安全的挑战,并分析了静态符号执行、代码审计和模糊测试等漏洞挖掘技术对充电桩网络安全带来的影响。展望了数智化电网下充电桩网络安全的未来发展趋势,并强调了遵循国家法律法规和标准,实施有效网络安全防护措施的重要性。

关键词: 充电桩, 网络安全, 漏洞挖掘, 防护策略, 安全态势, 边界安全, 通信协议, 数智化电网, 能源互联网

Abstract:

With the deep integration of energy internet and new-generation information technologies, digital and intelligent power grids have become a core direction for the transformation and upgrading of power systems. Driven by both national policies and market demands, the construction of charging infrastructure in China is developing rapidly, with significant increases in charging and battery swapping stations, as well as charging piles, projected by 2025. However, the extensive application of charging piles in digital and intelligent power grids brings cybersecurity issues. The cybersecurity challenges of charging piles are discussed from the aspects of boundary security, communication protocols, and operating system vulnerabilities. Furthermore, the effects of vulnerability mining methods such as static symbolic execution, code auditing, and fuzz testing on the cybersecurity of charging piles are analyzed. Future trends of charging pile cybersecurity in digital and intelligent power grids are forecasted. Additionally, the importance of complying with national laws, regulations, and standards and implementing effective measures for cybersecurity protection is emphasized.

Key words: charging pile, cybersecurity, vulnerability mining, protection strategy, security posture, boundary security, communication protocol, digital and intelligent power grids, energy internet

中图分类号: