Electricity usage information communication method, device and terminal based on HPLC

Abstract

The present invention provides a method, device and terminal for communicating power information based on HPLC, the method comprising: when an HPLC carrier communication channel between a concentrator communication node and a collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of a locally stored authentication center to authenticate the digital certificate of the other party; if the concentrator communication node and the collector communication node both authenticate the digital certificate of the other party, the concentrator communication node and the collector communication node respectively perform key generation processing according to the digital certificate of the other party to obtain a communication key; the concentrator communication node and the collector communication node communicate power information through the communication key. The present invention can standardize the security protection work of the power information communication system, improve the information security protection capability of the power information collection system, and ensure the safe and stable operation of the power grid.

Description

Technical Field

[0001] The present invention relates to the technical field of electric power communication, and in particular to an electric power information communication method, device and terminal based on HPLC. Background Art

[0002] HPLC (High Power Line Communication) technology has been widely used in the power consumption information collection business of low-voltage public transformer substations of power grid companies. The supported power grid business has expanded from marketing and measurement to equipment operation and inspection, and is an important communication support for the power Internet of Things.

[0003] With the popularization of network security awareness, the industry has generally recognized the importance of information security issues in the field of electricity consumption information collection. At present, there is an urgent need for a security protection method for HPLC-based electricity consumption information communication systems. Summary of the invention

[0004] The embodiment of the present invention provides a method, device and terminal for communicating power consumption information based on HPLC, so as to solve the problem of insecure communication existing in the power consumption information collection system.

[0005] In a first aspect, the present invention provides an HPLC-based power information communication method, which is applied to an HPLC-based power information communication system, the HPLC-based power information communication system comprising a concentrator communication node and a collector communication node, and the HPLC-based power information communication method comprises:

[0006] When the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party;

[0007] If the concentrator communication node and the collector communication node both authenticate each other's digital certificates, the concentrator communication node and the collector communication node perform key generation processing according to each other's digital certificates to obtain a communication key;

[0008] The concentrator communication node and the collector communication node communicate power usage information through the communication key.

[0009] In a possible implementation, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, including:

[0010] The concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node uses the root certificate of the authentication center stored locally to verify the signature of the digital certificate of the concentrator communication node. If the signature is correct, the digital certificate of the concentrator communication node is authenticated, otherwise the digital certificate of the concentrator communication node is not authenticated;

[0011] The collector communication node sends its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated, otherwise the digital certificate of the collector communication node is not authenticated.

[0012] In a possible implementation, the concentrator communication node and the collector communication node respectively perform key generation processing according to each other's digital certificates to obtain a communication key, including:

[0013] The concentrator communication node encrypts the first random number using the public key in the digital certificate of the collector communication node, and sends the encrypted ciphertext to the collector communication node; the collector communication node encrypts the second random number using the public key in the digital certificate of the concentrator communication node, and sends the encrypted ciphertext to the concentrator communication node;

[0014] The concentrator communication node uses its own private key to decrypt the received ciphertext to obtain a second random number; the collector communication node uses its own private key to decrypt the received ciphertext to obtain a first random number;

[0015] The concentrator communication node determines the key corresponding to the second random number as the communication key, and the collector communication node determines the key corresponding to the first random number as the communication key; wherein the keys corresponding to the second random number and the first random number are the same.

[0016] In a possible implementation, the concentrator communication node and the collector communication node communicate power usage information through a communication key, including:

[0017] The collector communication node sends the power consumption data encrypted in advance with the communication key to the concentrator communication node;

[0018] The concentrator communication node uses the communication key to decrypt the power consumption data.

[0019] In a possible implementation, the electricity usage data includes at least prepayment data, metering data, remote control information or electricity usage monitoring information.

[0020] In a possible implementation, the HPLC-based power consumption information communication system further includes an HPLC communication node authentication center;

[0021] Before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, the method further includes:

[0022] The concentrator communication node and the collector communication node send digital certificate application information to the HPLC communication node authentication center;

[0023] The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively to generate the digital certificate of the concentrator communication node and the digital certificate of the collector communication node;

[0024] The communication node authentication center sends the generated digital certificate of the concentrator communication node to the concentrator communication node, and sends the digital certificate of the collector communication node to the collector communication node.

[0025] In a possible implementation, the communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively, including:

[0026] The communication node authentication center uses the private key of the pre-generated public-private key pair to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively.

[0027] In a possible implementation, before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, the method further includes:

[0028] The communication node authentication center uses the private key in the public-private key pair to issue a digital certificate for the public key in the public-private key pair, and identifies the issued digital certificate as the root certificate of the communication node authentication center.

[0029] In a second aspect, an embodiment of the present invention provides an HPLC-based power consumption information communication system, the HPLC-based power consumption information communication system includes a concentrator communication node and a collector communication node;

[0030] The concentrator communication node and the collector communication node are respectively used to authenticate the other party's digital certificate using the root certificate of the authentication center stored locally when the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established;

[0031] The concentrator communication node and the collector communication node are respectively used to perform key generation processing according to the digital certificate of the other party to obtain a communication key when the concentrator communication node and the collector communication node both authenticate each other's digital certificate;

[0032] The concentrator communication node and the collector communication node are respectively used to communicate power usage information through communication keys.

[0033] In a possible implementation, the concentrator communication node and the collector communication node are respectively used to authenticate the other party's digital certificate using the root certificate of the authentication center stored locally, including:

[0034] The concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node uses the root certificate of the authentication center stored locally to verify the signature of the digital certificate of the concentrator communication node. If the signature is correct, the digital certificate of the concentrator communication node is authenticated, otherwise the digital certificate of the concentrator communication node is not authenticated;

[0035] The collector communication node sends its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated, otherwise the digital certificate of the collector communication node is not authenticated.

[0036] In a possible implementation, the concentrator communication node is further used to encrypt the first random number using the public key in the digital certificate of the collector communication node, and send the encrypted ciphertext to the collector communication node; the collector communication node is further used to encrypt the second random number using the public key in the digital certificate of the concentrator communication node, and send the encrypted ciphertext to the concentrator communication node;

[0037] The concentrator communication node is also used to decrypt the received ciphertext using its own private key to obtain a second random number; the collector communication node decrypts the received ciphertext using its own private key to obtain a first random number;

[0038] The concentrator communication node is also used to determine the key corresponding to the second random number as the communication key, and the collector communication node determines the key corresponding to the first random number as the communication key; wherein the keys corresponding to the second random number and the first random number are the same.

[0039] In a possible implementation, the concentrator communication node and the collector communication node are respectively used to communicate power usage information through a communication key, including:

[0040] The collector communication node is also used to send the power consumption data encrypted in advance with the communication key to the concentrator communication node;

[0041] The concentrator communication node is also used to decrypt the power usage data using the communication key.

[0042] In a possible implementation, the electricity usage data includes at least prepaid data, metering data, remote control information or electricity usage monitoring information.

[0043] In a possible implementation, the HPLC-based power information communication system further includes an HPLC communication node authentication center; before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the other party's digital certificate, the concentrator communication node and the collector communication node are also used to send digital certificate application information to the HPLC communication node authentication center;

[0044] The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively to generate the digital certificate of the concentrator communication node and the digital certificate of the collector communication node;

[0045] The communication node authentication center sends the generated digital certificate of the concentrator communication node to the concentrator communication node, and sends the digital certificate of the collector communication node to the collector communication node.

[0046] In a possible implementation, the concentrator communication node and the collector communication node are further used to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively, including:

[0047] The communication node authentication center uses the private key of the pre-generated public-private key pair to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively.

[0048] In one possible implementation, before the concentrator communication node and the collector communication node respectively use the locally stored root certificate of the authentication center to authenticate each other's digital certificate, the communication node authentication center uses the private key in the public-private key pair to issue a digital certificate for the public key in the public-private key pair, and identifies the issued digital certificate as the root certificate of the communication node authentication center.

[0049] In a third aspect, an embodiment of the present invention provides a terminal, comprising a memory and a processor, the memory being used to store a computer program, the processor being used to call and run the computer program stored in the memory, characterized in that the steps of the method described in the first aspect or any possible implementation method of the first aspect are implemented.

[0050] The embodiment of the present invention provides a method, device, and terminal for communicating power information based on HPLC. When the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party; if the concentrator communication node and the collector communication node both authenticate the digital certificate of the other party, the concentrator communication node and the collector communication node respectively perform key generation processing according to the digital certificate of the other party to obtain a communication key; the concentrator communication node and the collector communication node communicate power information through the communication key. In this way, a power information communication mechanism based on HPLC is provided, which can reduce the risk of power data being stolen and improve the security protection level of the power collection system of the power grid company. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0052] Figure 1 It is a flow chart of an implementation method of an electricity information communication method based on HPLC provided in an embodiment of the present invention;

[0053] Figure 2 It is a schematic diagram of information nodes and communication channels in a low-voltage public transformer area power consumption information collection system provided by an embodiment of the present invention;

[0054] Figure 3 It is a schematic diagram of a mutual authentication process between a concentrator communication node and a collector communication node provided by an embodiment of the present invention;

[0055] Figure 4 It is a schematic diagram of a communication encryption process between a concentrator communication node and a collector communication node provided by an embodiment of the present invention;

[0056] Figure 5 It is a schematic diagram of an HPLC communication node authentication center sending a signed digital certificate to a concentrator communication node and a collector communication node provided by an embodiment of the present invention;

[0057] Figure 6 is a schematic diagram of a terminal provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0058] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present invention. However, it should be clear to those skilled in the art that the present invention may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present invention.

[0059] In order to make the purpose, technical solutions and advantages of the present invention more clear, specific embodiments will be described below in conjunction with the accompanying drawings.

[0060] The electricity consumption information collection system is an important part of the construction of smart grids. The electricity consumption information collection system can timely and accurately grasp the user's electricity consumption information, and electricity consumption information involves the interests of thousands of households. HPLC has been widely used in the electricity consumption information collection business of low-voltage public transformers of power grid companies. The supported power grid business has expanded from marketing and measurement to equipment operation and inspection, and is an important communication support for the power Internet of Things. With the popularization of network security awareness, the industry has generally recognized the importance of information security issues in the field of electricity consumption information collection, and there is an urgent need for a security protection method for HPLC-based electricity communication systems. For example, the electricity consumption information communication system can be an electricity consumption information collection system.

[0061] In order to solve the existing problems, the embodiments of the present invention provide a method, device and terminal for communicating power information based on HPLC. The power information communication method based on HPLC provided by the embodiments of the present invention is first introduced below.

[0062] The executor of the HPLC-based electricity consumption information communication method may be an HPLC-based electricity consumption information collection device, which may be any electronic device with relevant processing capabilities, such as a dedicated transformer collection terminal, a centralized meter reading terminal, a distributed energy monitoring terminal, etc., and the embodiments of the present invention do not make specific limitations.

[0063] In order to facilitate understanding of the HPLC-based power consumption information communication method provided by an embodiment of the present invention, the technical concept is introduced below.

[0064] At present, in one possible implementation, the electricity consumption information collection system may include four types of information nodes and three types of communication channels. The four types of information nodes are: electric energy meter, local slave communication module (STA) in the electric energy meter, local master communication module (CCO) in the concentrator, concentrator, etc. Information is generated, transferred and stored between these four types of information nodes.

[0065] The three types of communication channels are: the serial communication channel between the energy meter and the HPLC slave communication module (STA), the HPLC carrier communication channel, and the serial communication channel between the HPLC master communication module CCO and the concentrator. Information is transmitted in these three communication channels. The data processing of power consumption information in the four types of information nodes and three types of communication channels includes: creation, storage, collection, transmission, and transfer. The characteristics of the data processing of power consumption information in HPLC are analyzed.

[0066] Specifically, the serial communication channels in the electric energy meter and the concentrator are both inside the equipment, and the equipment has protection measures to prevent physical intrusion, so the security risk of the two serial channels is relatively low; the information transmitted by the HPLC communication system is the business data between the concentrator and the electric energy meter, so the security requirements are mainly analyzed for the electricity consumption data in the electric energy meter. Prepaid data and remote control information have strong integrity and non-repudiation requirements. The safeguards for such security requirements can only be carried out in the application process of the end-to-end transaction parties. In the process of creating and applying transaction data, the integrity and non-repudiation are guaranteed by mechanisms such as information summary and digital signature to prevent various threats such as tampering, counterfeiting, and denial. The communication channel cannot be targeted for protection. Therefore, the security protection mechanism of the HPLC carrier communication system of the present invention does not consider the security requirements of integrity and non-repudiation of business data. What the HPLC communication system needs to consider is the security requirements related to confidentiality and availability in various data of the electric energy meter. The analysis determines that the present invention is designed based on the confidentiality of the HPLC communication system, the authenticity of the communication node, and the maintainability.

[0067] Figure 1 The implementation flow chart of the power consumption information communication method based on HPLC provided in the embodiment of the present invention is described in detail as follows:

[0068] Step 110: When the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party.

[0069] In some embodiments, the HPLC-based power information communication method can be applied to a HPLC-based power information communication system, which includes a concentrator communication node and a collector communication node. Specifically, the concentrator communication node can be a local communication module in the concentrator, the collector can be an electric energy meter, and the collector communication node can be a local communication module in the electric energy meter.

[0070] In one possible implementation, when the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the concentrator communication node. If the signature is correct, the digital certificate of the concentrator communication node is authenticated; otherwise, the digital certificate of the concentrator communication node is not authenticated.

[0071] The collector communication node sends its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated, otherwise the digital certificate of the collector communication node is not authenticated.

[0072] In a possible implementation, the HPLC-based power information communication system further includes an HPLC communication node authentication center; before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the other party's digital certificate, the concentrator communication node and the collector communication node send digital certificate application information to the HPLC communication node authentication center;

[0073] The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively to generate the digital certificate of the concentrator communication node and the digital certificate of the collector communication node;

[0074] The communication node authentication center sends the generated digital certificate of the concentrator communication node to the concentrator communication node, and sends the digital certificate of the collector communication node to the collector communication node.

[0075] In one possible implementation, after the concentrator communication node receives the digital certificate of the concentrator communication node, it burns the digital certificate of the concentrator communication node and the root certificate of the authentication center into the chip for storage; after the collector communication node receives the digital certificate of the collector communication node, it burns the digital certificate of the collector communication node and the root certificate of the authentication center into the chip for storage.

[0076] In a possible implementation, the communication node authentication center uses the private key of a pre-generated public-private key pair to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively.

[0077] In a possible implementation, the communication node authentication center uses the private key in the public-private key pair to issue a digital certificate for the public key in the public-private key pair, and determines the issued digital certificate as the root certificate of the communication node authentication center.

[0078] In a possible implementation, the HPLC communication node authentication center publishes the root certificate of the authentication center to each HPLC chip manufacturer.

[0079] In a possible implementation, the digital certificate application information of the concentrator communication node is the public key and other chip information of the concentrator communication node, and the digital certificate application information of the collector communication node is the public key and other chip information of the collector communication node.

[0080] In a possible implementation, the information of the digital certificate includes: chip ID (manufacturer, serial number), product detection version information, public key information, and digital signature information of the HPLC communication node authentication center.

[0081] Step 120: If the concentrator communication node and the collector communication node both authenticate each other's digital certificates, the concentrator communication node and the collector communication node respectively perform key generation processing according to each other's digital certificates to obtain a communication key.

[0082] In a possible implementation, the concentrator communication node encrypts the first random number using the public key in the digital certificate of the collector communication node, and sends the encrypted ciphertext to the collector communication node; the collector communication node encrypts the second random number using the public key in the digital certificate of the concentrator communication node, and sends the encrypted ciphertext to the concentrator communication node;

[0083] The concentrator communication node uses its own private key to decrypt the received ciphertext to obtain a second random number; the collector communication node uses its own private key to decrypt the received ciphertext to obtain a first random number;

[0084] The concentrator communication node determines the key corresponding to the second random number as the communication key, and the collector communication node determines the key corresponding to the first random number as the communication key; wherein the keys corresponding to the second random number and the first random number are the same.

[0085] Step 130: The concentrator communication node and the collector communication node communicate power usage information through a communication key.

[0086] In some embodiments, the collector communication node sends the power usage data encrypted in advance with the communication key to the concentrator communication node; the concentrator communication node decrypts the power usage data with the communication key.

[0087] Specifically, electricity consumption data includes: prepaid data, metering data, remote control information and electricity consumption monitoring information.

[0088] In one possible implementation, when it is necessary to monitor and maintain the communication channel on site, the concentrator sets the concentrator communication node to enter the listening mode. After receiving the access from the authenticated collector communication node, the concentrator communication node directly uses the public key of the collector communication node to encrypt a public key without the need for communication key encryption. The key is consistent throughout the entire area. At this time, the collector communication node performs a channel monitoring operation. After the monitoring is completed, the concentrator sets the concentrator communication node to exit the listening mode and end the monitoring operation.

[0089] In a possible implementation, the HPLC-based power consumption information communication method is tested for safety requirements compliance.

[0090] Specifically, the electricity consumption data is encrypted through the communication key, so that the encrypted communication between the concentrator communication node and the collector communication node is realized, meeting the security requirements of confidentiality; the concentrator communication node and the collector communication node respectively use the root certificate of the locally stored authentication center to authenticate each other's digital certificate, avoiding the access of non-authenticated communication nodes, meeting the security requirements of the authenticity of the communication nodes; through the setting of the listening mode of the concentrator communication node and the use of a unified key, the communication node that has passed the authentication can monitor the communication channel, meeting the security requirements of maintainability.

[0091] In order to facilitate understanding of the power consumption information communication method based on HPLC provided in an embodiment of the present invention, a schematic diagram of information nodes and communication channels in a low-voltage public transformer area power consumption information collection system is provided below. Figure 2 As shown, the corresponding processing process can refer to the above corresponding processing, which will not be repeated here.

[0092] In order to facilitate understanding of the HPLC-based power consumption information communication method provided in the embodiment of the present invention, a schematic diagram of a mutual authentication process between a concentrator communication node and a collector communication node is provided below. Figure 3 As shown, the concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node sends its own digital certificate to the concentrator communication node.

[0093] In order to facilitate understanding of the HPLC-based power consumption information communication method provided in an embodiment of the present invention, a schematic diagram of the communication encryption process between the concentrator communication node and the collector communication node is provided below. Figure 4 As shown, the corresponding processing process can refer to the above corresponding processing, which will not be repeated here.

[0094] In an embodiment of the present invention, a method for communicating power information based on HPLC is provided, which can improve the security protection capability of the power information communication system based on HPLC. First, when the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party; after the concentrator communication node and the collector communication node are authenticated, the concentrator communication node and the collector communication node respectively perform key generation processing according to the digital certificate of the other party to obtain a communication key; the concentrator communication node and the collector communication node communicate power information through the communication key. In this way, a method for communicating power information based on HPLC is provided, which can improve the security and reliability of power data and reduce the risk of power data being stolen.

[0095] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0096] The following is an embodiment of the device of the present invention. For details not described in detail, reference may be made to the corresponding method embodiments described above.

[0097] The power consumption information communication system based on HPLC provided in the embodiment of the present invention is described in detail as follows:

[0098] The power consumption information communication system based on HPLC includes a concentrator communication node and a collector communication node;

[0099] The concentrator communication node and the collector communication node are respectively used to authenticate the other party's digital certificate using the root certificate of the authentication center stored locally when the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established;

[0100] The concentrator communication node and the collector communication node are respectively used to perform key generation processing according to the digital certificate of the other party to obtain a communication key when the concentrator communication node and the collector communication node both authenticate each other's digital certificate;

[0101] The concentrator communication node and the collector communication node are respectively used to communicate power usage information through communication keys.

[0102] In a possible implementation, the concentrator communication node and the collector communication node are respectively used to authenticate the other party's digital certificate using the root certificate of the authentication center stored locally, including:

[0103] The concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node uses the root certificate of the authentication center stored locally to verify the signature of the digital certificate of the concentrator communication node. If the signature is correct, the digital certificate of the concentrator communication node is authenticated, otherwise the digital certificate of the concentrator communication node is not authenticated;

[0104] The collector communication node sends its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated, otherwise the digital certificate of the collector communication node is not authenticated.

[0105] In a possible implementation, the concentrator communication node is further used to encrypt the first random number using the public key in the digital certificate of the collector communication node, and send the encrypted ciphertext to the collector communication node; the collector communication node is further used to encrypt the second random number using the public key in the digital certificate of the concentrator communication node, and send the encrypted ciphertext to the concentrator communication node;

[0106] The concentrator communication node is also used to decrypt the received ciphertext using its own private key to obtain a second random number; the collector communication node decrypts the received ciphertext using its own private key to obtain a first random number;

[0107] The concentrator communication node is also used to determine the key corresponding to the second random number as the communication key, and the collector communication node determines the key corresponding to the first random number as the communication key; wherein the keys corresponding to the second random number and the first random number are the same.

[0108] In a possible implementation, the concentrator communication node and the collector communication node are respectively used to communicate power usage information through a communication key, including:

[0109] The collector communication node is also used to send the power consumption data encrypted in advance with the communication key to the concentrator communication node;

[0110] The concentrator communication node is also used to decrypt the power usage data using the communication key.

[0111] In one possible implementation, the electricity usage data includes at least prepayment data, metering data, remote control information, or electricity usage monitoring information;

[0112] In a possible implementation, the HPLC-based power information communication system further includes an HPLC communication node authentication center; before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the other party's digital certificate, the concentrator communication node and the collector communication node are also used to send digital certificate application information to the HPLC communication node authentication center;

[0113] The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively to generate the digital certificate of the concentrator communication node and the digital certificate of the collector communication node;

[0114] The communication node authentication center sends the generated digital certificate of the concentrator communication node to the concentrator communication node, and sends the digital certificate of the collector communication node to the collector communication node.

[0115] In a possible implementation, the concentrator communication node and the collector communication node are further used to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively, including:

[0116] The communication node authentication center is also used to use the private key in the pre-generated public-private key pair to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively.

[0117] In one possible implementation, before the concentrator communication node and the collector communication node respectively use the locally stored root certificate of the authentication center to authenticate each other's digital certificate, the communication node authentication center uses the private key in the public-private key pair to issue a digital certificate for the public key in the public-private key pair, and identifies the issued digital certificate as the root certificate of the communication node authentication center.

[0118] In a possible implementation, the HPLC communication node authentication center publishes the root certificate of the authentication center to each HPLC chip manufacturer.

[0119] In a possible implementation, the digital certificate application information of the concentrator communication node is the public key and other chip information of the concentrator communication node, and the digital certificate application information of the collector communication node is the public key and other chip information of the collector communication node.

[0120] In a possible implementation, the information of the digital certificate includes: chip ID (manufacturer, serial number), product detection version information, public key information, and digital signature information of the HPLC communication node authentication center.

[0121] In one possible implementation, the concentrator communication node is also used to burn the digital certificate of the concentrator communication node and the root certificate of the authentication center into the chip for storage after receiving the digital certificate of the concentrator communication node; the collector communication node is also used to burn the digital certificate of the collector communication node and the root certificate of the authentication center into the chip for storage after the collector communication node receives the digital certificate of the collector communication node.

[0122] In one possible implementation, when it is necessary to monitor and maintain the communication channel on site, the concentrator sets the concentrator communication node to enter the listening mode. The concentrator communication node is also used to encrypt a public key directly with the public key of the collector communication node without the need for communication key encryption after receiving the access of the authenticated collector communication node. The key is consistent in the entire area. At this time, the collector communication node performs a channel monitoring operation. After the monitoring is completed, the concentrator sets the concentrator communication node to exit the listening mode and end the monitoring operation.

[0123] In a possible implementation, the HPLC-based power consumption information communication method is tested for safety requirements compliance.

[0124] Specifically, the electricity consumption data is encrypted through the communication key, so that the encrypted communication between the concentrator communication node and the collector communication node is realized, meeting the security requirements of confidentiality; the concentrator communication node and the collector communication node respectively use the root certificate of the locally stored authentication center to authenticate each other's digital certificate, avoiding the access of non-authenticated communication nodes, meeting the security requirements of the authenticity of the communication nodes; through the setting of the listening mode of the concentrator communication node and the use of a unified key, the communication node that has passed the authentication can monitor the communication channel, meeting the security requirements of maintainability.

[0125] In order to facilitate understanding of the HPLC-based power consumption information communication method provided in the embodiment of the present invention, a schematic diagram of an HPLC communication node authentication center sending a signed digital certificate to a concentrator communication node and a collector communication node is provided below. Figure 5 As shown, the corresponding processing process can refer to the above corresponding processing, which will not be repeated here.

[0126] The information interaction process of the HPLC communication system was modeled, and the characteristics of various information nodes, communication channels and data processing operations in the system were analyzed, providing a basis for the subsequent information security demand analysis; then, based on the information security demand characteristics of business data in communication, the information security protection goals were obtained; a clear division of labor and goals for specific communication channel security requirements were made for the HPLC communication system; finally, according to the specific information security demand goals, a power consumption information communication method based on HPLC was proposed.

[0127] In an embodiment of the present invention, a power consumption information communication system based on HPLC is provided, which can improve the security protection capability of the power consumption information communication system based on HPLC, and can ensure the security and reliability of power consumption data and reduce the risk of power consumption data being stolen.

[0128] Figure 6 is a schematic diagram of a terminal provided by an embodiment of the present invention. Figure 6 As shown, the terminal 6 of this embodiment includes: a processor 60, a memory 61, and a computer program 62 stored in the memory 61 and executable on the processor 60. When the processor 61 executes the computer program 63, the steps in the above-mentioned various embodiments of the power consumption information communication method based on HPLC are implemented, for example Figure 1 Steps 110 to 130 are shown.

[0129] Exemplarily, the computer program 62 may be divided into one or more modules, one or more modules are stored in the memory 61, and are executed by the processor 60 to implement the present invention. The one or more modules may be a series of computer program instruction segments that can implement specific functions, and the instruction segments are used to describe the execution process of the computer program 62 in the terminal 6. For example, the computer program 62 may be divided into Figure 1 The units 110 to 130 are shown in FIG.

[0130] The terminal 6 may include, but is not limited to, a processor 60 and a memory 61. Those skilled in the art will appreciate that Figure 6 It is only an example of terminal 6 and does not constitute a limitation on terminal 6. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the terminal may also include input and output devices, network access devices, buses, etc.

[0131] The processor 60 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0132] The memory 61 may be an internal storage unit of the terminal 6, such as a hard disk or memory of the terminal 6. The memory 61 may also be an external storage device of the terminal 6, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the terminal 6. Further, the memory 61 may also include both an internal storage unit of the terminal 6 and an external storage device. The memory 61 is used to store computer programs and other programs and data required by the terminal. The memory 61 may also be used to temporarily store data that has been output or is to be output.

[0133] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0134] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0135] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0136] In the embodiments provided by the present invention, it should be understood that the disclosed devices / terminals and methods can be implemented in other ways. For example, the device / terminal embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0137] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0138] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0139] If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by the processor, the steps of the above-mentioned various HPLC-based power information communication method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal and software distribution medium, etc.

[0140] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention.

Claims

1. A method for communicating power information based on HPLC, characterized in that: The method is applied to an HPLC-based power consumption information communication system, wherein the HPLC-based power consumption information communication system includes a concentrator communication node and a collector communication node, and the method includes: When the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established, the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party; if the concentrator communication node and the collector communication node both authenticate the digital certificate of the other party, the concentrator communication node and the collector communication node respectively perform key generation processing according to the digital certificate of the other party to obtain a communication key; the concentrator communication node and the collector communication node communicate power usage information through the communication key; The concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, including: The concentrator communication node sends its own digital certificate to the collector communication node; the collector communication node verifies the signature of the digital certificate of the concentrator communication node using the root certificate of the authentication center stored locally, and if the signature is correct, the digital certificate of the concentrator communication node is authenticated, otherwise the digital certificate of the concentrator communication node is not authenticated; The collector communication node sends its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated; otherwise, the digital certificate of the collector communication node is not authenticated.

2. The method for communicating power information based on HPLC according to claim 1, characterized in that: The concentrator communication node and the collector communication node respectively perform key generation processing according to each other's digital certificates to obtain a communication key, including: The concentrator communication node encrypts the first random number using the public key in the digital certificate of the collector communication node, and sends the encrypted ciphertext to the collector communication node; the collector communication node encrypts the second random number using the public key in the digital certificate of the concentrator communication node, and sends the encrypted ciphertext to the concentrator communication node; The concentrator communication node uses its own private key to decrypt the received ciphertext to obtain the second random number; the collector communication node uses its own private key to decrypt the received ciphertext to obtain the first random number; The concentrator communication node determines the key corresponding to the second random number as the communication key, and the collector communication node determines the key corresponding to the first random number as the communication key; wherein the keys corresponding to the second random number and the first random number are the same.

3. The method for communicating power information based on HPLC according to claim 1, characterized in that: The concentrator communication node and the collector communication node communicate power usage information through the communication key, including: The collector communication node sends the power consumption data encrypted in advance using the communication key to the concentrator communication node; The concentrator communication node decrypts the power usage data using the communication key.

4. The method for communicating power information based on HPLC according to claim 3, characterized in that: The electricity usage data at least includes prepayment data, metering data, remote control information or electricity usage monitoring information.

5. The method for communicating power information based on HPLC according to claim 1, characterized in that: The HPLC-based electricity information communication system also includes an HPLC communication node authentication center; Before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, the method further includes: The concentrator communication node and the collector communication node send digital certificate application information to the HPLC communication node authentication center; The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively to generate the digital certificate of the concentrator communication node and the digital certificate of the collector communication node; The communication node authentication center sends the generated digital certificate of the concentrator communication node to the concentrator communication node, and sends the digital certificate of the collector communication node to the collector communication node.

6. The method for communicating power information based on HPLC according to claim 5, characterized in that: The communication node authentication center signs the digital certificate application information of the concentrator communication node and the collector communication node respectively, including: The communication node authentication center uses the private key of the pre-generated public-private key pair to sign the digital certificate application information of the concentrator communication node and the collector communication node respectively.

7. The method for communicating power information based on HPLC according to claim 6, characterized in that: Before the concentrator communication node and the collector communication node respectively use the root certificate of the authentication center stored locally to authenticate the digital certificate of the other party, the method further includes: The communication node authentication center uses the private key in the public-private key pair to issue a digital certificate for the public key in the public-private key pair, and determines the issued digital certificate as the root certificate of the communication node authentication center.

8. An electricity information communication system based on HPLC, characterized in that: The HPLC-based power consumption information communication system includes a concentrator communication node and a collector communication node; The concentrator communication node and the collector communication node are respectively used to authenticate the other party's digital certificate using the root certificate of the locally stored authentication center when the HPLC carrier communication channel between the concentrator communication node and the collector communication node is established; The concentrator communication node and the collector communication node are respectively used to perform key generation processing according to the digital certificate of the other party to obtain a communication key when both the concentrator communication node and the collector communication node have authenticated the digital certificate of the other party; The concentrator communication node and the collector communication node are respectively further used to communicate power usage information through the communication key; The concentrator communication node is used to send its own digital certificate to the collector communication node; the collector communication node is used to verify the signature of the digital certificate of the concentrator communication node using the root certificate of the authentication center stored locally, and if the signature is correct, the digital certificate of the concentrator communication node is authenticated, otherwise the digital certificate of the concentrator communication node is not authenticated; The collector communication node is used to send its own digital certificate to the concentrator communication node; the concentrator communication node uses the root certificate of the locally stored authentication center to verify the signature of the digital certificate of the collector communication node. If the signature is correct, the digital certificate of the collector communication node is authenticated, otherwise the digital certificate of the collector communication node is not authenticated.

9. A terminal comprising a memory and a processor, wherein the memory is used to store a computer program, and the processor is used to call and run the computer program stored in the memory, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

Images