Research on the Network Architecture of Secure Power Wireless Local Area Network Based on WAPI and SDN
Main Article Content
Abstract
In smart-grid WLANs, a terminal is not fully secured once it has merely passed wireless access authentication. The more difficult part is how the authentication result is carried forward into service isolation, forwarding control, bandwidth allocation, and security operation. In many conventional WLAN deployments, these functions are configured in separate systems, so terminals for distribution automation, electricity information collection, inspection robots, and other power services may still depend on similar access and management policies. This separation also makes burst traffic and O&M fault tracing harder to handle. To deal with this coupling problem, this study designs a secure power WLAN architecture that combines Wireless Local Area Network Authentication and Privacy Infrastructure (WAPI) with Software-Defined Networking (SDN). WAPI provides public-key-based two-way authentication, while SDN supplies centralized control through control-forwarding separation. In the architecture, the SDN controller manages WAPI servers, AP rules, and network resources together. Security domains and service domains are isolated by VLANs, and OpenFlow-supported WAPI-APs are used in the data layer to keep authenticated access, encrypted transmission, and flexible forwarding under the same control logic. A security-resource linkage module maps WAPI authentication results to SDN resource policies, so trusted power terminals can obtain service-specific access permissions and bandwidth guarantees. For typical power scenarios, differentiated WAPI policies and a “detection-alarm-disposal” monitoring loop are also introduced. The experimental results show end-to-end latency below 5 ms, throughput above 93%, and packet loss below 7%; unauthorized access alarms are reduced by 94.8% after WAPI-based protection is enabled. These results suggest that using WAPI authentication semantics as an input to SDN policy control can improve both access security and operational manageability in power WLANs.
Downloads
Article Details
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
References
T. Zang, S. Wang, Z. Wang, C. Li, Y. Liu, Y. Xiao, et al., “Integrated planning and operation dispatching of source-grid-load-storage in a new power system: A coupled socio-cyber-physical perspective,” Energies, vol. 17, no. 12, Art. no. 3013, 2024.
S. A. H. Mohsan and H. Amjad, “A comprehensive survey on hybrid wireless networks: Practical considerations, challenges, applications and research directions,” Opt. Quantum Electron., vol. 53, no. 9, Art. no. 523, 2021.
U. A. Bukar and M. Othman, “Architectural design, improvement, and challenges of distributed software-defined wireless sensor networks,” Wireless Pers. Commun., vol. 122, no. 3, pp. 2395–2439, 2022.
S. Yang, K.-W. Lao, H. Hui, and Y. Chen, “A robustness-enhanced frequency regulation scheme for power system against multiple cyber and physical emergency events,” Appl. Energy, vol. 350, Art. no. 121725, 2023.
J. Zhou, B. Xu, Z. Fang, X. Zheng, R. Tang, and H. Haroglu, “Operations and maintenance digital built asset management,” in Digital Built Asset Management, ch. 7. Cheltenham, U.K.: Edward Elgar Publishing, 2024, pp. 161–189.
A. Karanveer, Reliability Engineering in Cloud Computing: Strategies, Metrics, and Performance Assessment. 2023.
N. S. Shaji and R. Muthalagu, “Survey on security aspects of distributed software-defined networking controllers in an enterprise SD-WLAN,” Digital Commun. Netw., vol. 10, no. 6, pp. 1716–1731, 2024.
Y. Andgelie, “The SDN based WLAN resilience enhancement for smart grid,” J. ICT Syst., vol. 3, no. 1, pp. 1–11, 2025.
F. Lopez-Gomez, R. Marin-Lopez, O. Canovas, G. Lopez-Millan, and F. Pereniguez-Garcia, “SDN-AAA: Towards the standard management of AAA infrastructures,” J. Netw. Comput. Appl., vol. 236, Art. no. 104114, 2025.
G. Hollósi, D. Ficzere, D. Varga, and P. Havinga, Eds., “Generative AI for low-level NETCONF configuration in network management based on YANG models,” in Proc. 20th Int. Conf. Netw. Service Manage. (CNSM), 2024.
A. Amllou, A. Abane, M. Merzouki, L. Ait Ouchegou, Z. Maasqoui, and A. Battou, Eds., “Automated network programmability using OpenConfig YANG models and NETCONF protocol,” in Proc. 20th ACS/IEEE Int. Conf. Comput. Syst. Appl. (AICCSA), 2023.
E. Batista, B. Alencar, E. Silva, J. Canário, R. A. Rios, S. Dustdar, et al., “A new intelligent scheduler to improve reactive OpenFlow communication in SDN-based IoT data streams,” Discover Internet Things, vol. 4, no. 1, Art. no. 15, 2024.
P. Zhang, Y. Yang, Y. Zheng, and Y. Sun, “Multiplexed Internet of Things data transmission and visualization utilizing Wireless LAN Authentication and Privacy Infrastructure protocol in smart factories,” Sensors, vol. 25, no. 10, Art. no. 3134, 2025.
D. Kulikowski, K. Zia, O. Chiumento, and P. Havinga, Eds., “Towards robust slice control in SDN enabled WiFi based IoT networks,” in Proc. 20th Int. Conf. Design Reliable Commun. Netw. (DRCN), 2024.
B. Sousa and C. Gonçalves, “FedAAA-SDN: Federated authentication, authorization and accounting in SDN controllers,” Comput. Netw., vol. 239, Art. no. 110130, 2024.
M. F. Guato Burgos, J. Morato, and F. P. Vizcaino Imacaña, “A review of smart grid anomaly detection approaches pertaining to artificial intelligence,” Appl. Sci., vol. 14, no. 3, Art. no. 1194, 2024.