Information security protection method and system for gravity energy storage monitoring system

Abstract

The invention discloses an information security protection method and system for a gravity energy storage monitoring system, and the method comprises the steps: collecting the monitoring data and external access information of the gravity energy storage system, carrying out the preprocessing, and storing the data and information to an information management module; calculating and analyzing the preprocessed monitoring data of the gravity energy storage system by using a safety evaluation algorithm, and storing a result to an information management module; calculating and analyzing external access information of the gravity energy storage system by using a trust evaluation algorithm, and storing a result to an information management module; and a monitoring evaluation result and an access evaluation result are extracted from the information management module, and a gravity energy storage system execution instruction is generated. According to the invention, the safe and stable operation of the system is guaranteed by evaluating the monitoring data; external access information is evaluated, abnormal access behaviors are intercepted, and it is guaranteed that the system is not invaded by the outside; comprehensive safety monitoring and access management of the gravity energy storage monitoring system are realized, and information safety guarantee is provided for safe and stable operation of the gravity energy storage monitoring system.

Description

Technical Field

[0001] The present invention relates to the field of information security protection, and in particular to an information security protection method and system for a gravity energy storage monitoring system. Background Art

[0002] With the continuous growth of global energy demand and the improvement of renewable energy utilization, energy storage technology has become one of the important means to solve the imbalance between energy supply and demand and improve energy utilization efficiency. As a new type of energy storage method, gravity energy storage technology converts electrical energy into potential energy storage. It has the advantages of large energy storage capacity, long service life, and environmental friendliness, and has received widespread attention and research. The basic principle of the gravity energy storage system is to use the traction motor to drive the mass block to rise and convert electrical energy into potential energy storage of the mass block. When energy needs to be released, the mass block falls to drive the traction motor to work, converting the potential energy back into electrical energy output, thereby realizing energy storage and release.

[0003] The gravity energy storage monitoring system mainly monitors the operating status of the system in real time through sensors, data acquisition terminals and communication networks, and centrally manages and dispatches the system through the control center. While this centralized monitoring mode improves the operating efficiency of the system, it also faces severe information security challenges.

[0004] At present, since the gravity energy storage system is still in its infancy, an information security protection method and system for the gravity energy storage monitoring system has not yet been established. The existing information security protection methods are only targeted at specific systems and cannot be directly applied to the gravity energy storage system. Therefore, there is an urgent need for an information security protection method and system for the gravity energy storage monitoring system. Summary of the invention

[0005] In view of the problem that existing information security protection methods and systems for gravity energy storage monitoring systems are lacking, the present invention proposes an information security protection method and system for gravity energy storage monitoring systems.

[0006] The technical solution of the present invention is as follows:

[0007] In a first aspect, an embodiment of the present invention provides an information security protection method for a gravity energy storage monitoring system, which comprises:

[0008] Collect the monitoring data of the gravity energy storage system and external access information, pre-process the acquired information, and store it in the information management module;

[0009] Extracting the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, calculating and analyzing using the safety assessment algorithm, generating monitoring assessment results, and storing the analysis results in the information management module;

[0010] Extract external access information of the gravity energy storage system from the information management module by running the security access module, calculate and analyze using the trust evaluation algorithm, generate access evaluation results, and store the analysis results in the information management module;

[0011] The monitoring evaluation results and access evaluation results are extracted from the information management module by running the security management module, and the execution instructions of the gravity energy storage system are generated.

[0012] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the information management module includes the following steps:

[0013] On-site collection of gravity energy storage system monitoring data and external access information;

[0014] Store gravity energy storage system monitoring data in the security log and store external access information in the historical access record database;

[0015] Preprocessing the monitoring data of the gravity energy storage system includes: calculating the hash value H(m) of the monitoring data m; signing the hash value H(m) with a private key to obtain a signature σ;

[0016] Storage monitoring and evaluation results generated by the monitoring management module;

[0017] storing access assessment results generated by the security access module;

[0018] The gravity energy storage system execution instructions generated by the storage safety management module.

[0019] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the monitoring management module includes the following steps:

[0020] Extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module;

[0021] Use the security assessment algorithm to calculate and analyze the pre-processed data to generate monitoring assessment results;

[0022] The calculation and analysis steps of the safety assessment algorithm are as follows:

[0023] Use the public key to verify the signature σ and hash value H(m);

[0024] Extract the feature vector x of the preprocessed data, use the trained isolation forest model to perform anomaly detection, and output the monitoring evaluation results;

[0025] The specific formula of the isolation forest model is as follows:

[0026]

[0027] Where s(x,n) is the abnormal score of the monitoring data, h i (x i ) is the path length of the ith data point, H(i) is the ith harmonic number;

[0028] The monitoring and evaluation results are stored in the information management module so that they can be retrieved by the security management module.

[0029] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the security access module includes the following steps:

[0030] Extracting external access information of the gravity energy storage system from the information management module by running the security access module;

[0031] Use trust evaluation algorithms to calculate and analyze external access information and generate access evaluation results;

[0032] The calculation and analysis steps of the trust evaluation algorithm are as follows:

[0033] The reputation score R of the external access entity is calculated based on historical behavior records. The specific formula is:

[0034]

[0035] Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions;

[0036] Define the basic probability of the source historical access record database as m1, define the basic probability of the source security log as m2, and combine the evidence of the two sources to obtain the comprehensive trust. The specific formula is:

[0037]

[0038] Among them, m(A) is the basic probability assignment after combination, m1(B) and m2(C) are the basic probability assignments of information source 1 and information source 2 to access information B and C respectively;

[0039] Combining the reputation score and the evidence combination results, we get the access evaluation result T, which is as follows:

[0040] T=f(R i ,m(A))

[0041] Among them, f is the mapping function, which transforms the reputation score R i Combined with the comprehensive trust m(A), the access evaluation result T is obtained;

[0042] The access assessment results are stored in the information management module so that the security management module can extract them.

[0043] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the security management module includes the following steps:

[0044] Extract monitoring assessment results and access assessment results from the information management module by running the security management module;

[0045] If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed;

[0046] If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted;

[0047] If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions;

[0048] If the access assessment result is abnormal, the external access entity is denied access to the gravity energy storage monitoring system and execution of instructions;

[0049] The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

[0050] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the gravity energy storage system monitoring data includes slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoisting motor data, gantry crane travel motor data, gantry crane hoisting wire rope data, transformer data, and mass block data.

[0051] In a second aspect, an embodiment of the present invention provides an information security protection system for a gravity energy storage monitoring system, which includes:

[0052] The information management module includes on-site collection of gravity energy storage system monitoring data and external access information, storage of gravity energy storage system monitoring data in a security log, storage of external access information in a historical access record database, preprocessing of gravity energy storage system monitoring data, storage of monitoring evaluation results generated by the monitoring management module, storage of access evaluation results generated by the security access module, and storage of gravity energy storage system execution instructions generated by the security management module;

[0053] The monitoring management module extracts the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, verifies the digital signature and hash value of the monitoring data by using the public key, extracts the feature vector x of the monitoring data, performs anomaly detection by using the trained isolation forest model, generates monitoring evaluation results, and stores the analysis results in the information management module;

[0054] A security access module is used to extract external access information of the gravity energy storage system from the information management module by running the security access module, and calculate the reputation score of the external access entity based on the historical behavior records, combine the evidence of the source historical access record database and the source security log to obtain a comprehensive trust, generate access evaluation results, and store the analysis results in the information management module;

[0055] The safety management module extracts the monitoring evaluation results and the access evaluation results from the information management module by running the safety management module, and generates execution instructions for the gravity energy storage system.

[0056] Compared with the prior art, the technical solution of the present invention has the following beneficial effects:

[0057] The present invention proposes an information security protection method for a gravity energy storage monitoring system. By evaluating the monitoring data, the safe and stable operation of the system is guaranteed; by evaluating the external access information, abnormal access behavior is intercepted to protect the system from external intrusion; by monitoring the evaluation results and accessing the evaluation results, comprehensive security monitoring and access management of the gravity energy storage monitoring system are realized, providing information security protection for the safe and stable operation of the gravity energy storage monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0059] Figure 1 A schematic diagram of an information security protection method for a gravity energy storage monitoring system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0060] In order to more clearly understand the above-mentioned objectives, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0061] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.

[0062] For easier understanding, see Figure 1 The present invention provides an embodiment of an information security protection method for a gravity energy storage monitoring system, comprising:

[0063] S1: Collect the monitoring data of the gravity energy storage system and external access information, pre-process the acquired information, and store it in the information management module.

[0064] Specifically, the gravity energy storage system monitoring data includes slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoisting motor data, gantry crane travel motor data, gantry crane hoisting wire rope data, transformer data, and mass block data.

[0065] Specifically, the monitoring data of the gravity energy storage system is preprocessed, including calculating the hash value H(m) of the monitoring data m; and signing the hash value H(m) with a private key to obtain a signature σ.

[0066] S2: Extract the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, and evaluate it using the safety assessment algorithm.

[0067] Specifically, the monitoring management module includes the following steps: extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module;

[0068] Use the security assessment algorithm to calculate and analyze the pre-processed data to generate monitoring assessment results;

[0069] The calculation and analysis steps of the safety assessment algorithm are as follows:

[0070] Use the public key to verify the signature σ and hash value H(m);

[0071] Extract the feature vector x of the monitoring data, use the trained isolation forest model to perform anomaly detection, and output the monitoring evaluation results;

[0072] The specific formula of the isolation forest model is as follows:

[0073]

[0074] Where s(x,n) is the abnormal score of the monitoring data, h i (x i) is the path length of the ith data point, H(i) is the ith harmonic number;

[0075] The monitoring and evaluation results are stored in the information management module so that they can be retrieved by the security management module.

[0076] S3: Extract external access information of the gravity energy storage system from the information management module by running the security access module and evaluate it using the trust evaluation algorithm.

[0077] Specifically, the security access module includes the following steps: extracting external access information of the gravity energy storage system from the information management module by running the security access module;

[0078] Use trust evaluation algorithms to calculate and analyze external access information and generate access evaluation results;

[0079] The calculation and analysis steps of the trust evaluation algorithm are as follows: the reputation score R of the external access entity is calculated based on the historical behavior records, and the formula is as follows:

[0080]

[0081] Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions;

[0082] Define the basic probability of the source historical access record database as m1, define the basic probability of the source security log as m2, and combine the evidence of the two sources to obtain the comprehensive trust. The specific formula is:

[0083]

[0084] Among them, m(A) is the basic probability assignment after combination, m1(B) and m2(C) are the basic probability assignments of information source 1 and information source 2 to access information B and C respectively;

[0085] Combining the reputation score and the evidence combination results, we get the access evaluation result T, which is as follows:

[0086] T=f(R i ,m(A))

[0087] Among them, f is the mapping function, which transforms the reputation score R i Combined with the comprehensive trust m(A), the access evaluation result T is obtained;

[0088] The access assessment results are stored in the information management module so that the security management module can extract them.

[0089] S4: Extract monitoring evaluation results and access evaluation results from the information management module by running the security management module, and issue execution instructions to the gravity energy storage monitoring system.

[0090] Specifically, the security management module includes the following steps:

[0091] Extract monitoring assessment results and access assessment results from the information management module by running the security management module;

[0092] If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed;

[0093] If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted;

[0094] If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions;

[0095] If the access assessment result is abnormal, the external access entity is denied access to the gravity energy storage monitoring system and execution of instructions;

[0096] The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

[0097] Furthermore, the present embodiment also provides an information security protection system for a gravity energy storage monitoring system, including: an information management module, including on-site collection of gravity energy storage system monitoring data and external access information, storage of gravity energy storage system monitoring data in a security log, storage of external access information in a historical access record database, preprocessing of gravity energy storage system monitoring data, storage of monitoring evaluation results generated by a monitoring management module, storage of access evaluation results generated by a security access module, and storage of gravity energy storage system execution instructions generated by a security management module; a monitoring management module, extracting preprocessed gravity energy storage system monitoring data from an information management module by running the monitoring management module, and using a public key to verify the digital signature of the monitoring data and hash value, extract the feature vector x of the monitoring data, use the trained isolation forest model to perform anomaly detection, generate monitoring evaluation results, and store the analysis results in the information management module; a security access module is used to extract external access information of the gravity energy storage system from the information management module by running the security access module, and calculate the reputation score of the external access entity according to the historical behavior records, combine the evidence of the source historical access record database and the source security log to obtain a comprehensive trust, generate access evaluation results, and store the analysis results in the information management module; the security management module extracts the monitoring evaluation results and access evaluation results from the information management module by running the security management module, and generates execution instructions for the gravity energy storage system.

[0098] In summary, the present invention establishes an information security management data foundation by collecting monitoring data and external access information of the gravity energy storage system; ensures the safe and stable operation of the system through monitoring security assessment of the monitoring data; intercepts abnormal access behaviors through trust assessment of external access information to protect the system from external intrusion; and realizes comprehensive security monitoring and access management of the gravity energy storage monitoring system through monitoring assessment results and access assessment results, providing information security protection for the safe and stable operation of the gravity energy storage monitoring system.

Claims

1. An information security protection method for a gravity energy storage monitoring system, Features: include, Collect the monitoring data of the gravity energy storage system and external access information, pre-process the acquired information, and store it in the information management module; Extracting the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, calculating and analyzing using the safety assessment algorithm, generating monitoring assessment results, and storing the analysis results in the information management module; Extract external access information of the gravity energy storage system from the information management module by running the security access module, calculate and analyze using the trust evaluation algorithm, generate access evaluation results, and store the analysis results in the information management module; The monitoring evaluation results and access evaluation results are extracted from the information management module by running the security management module, and the execution instructions of the gravity energy storage system are generated.

2. The information security protection method for a gravity energy storage monitoring system according to claim 1, Features: The information management module includes the following steps: On-site collection of gravity energy storage system monitoring data and external access information; Store gravity energy storage system monitoring data in the security log and store external access information in the historical access record database; Preprocessing the monitoring data of the gravity energy storage system includes: calculating the hash value H(m) of the monitoring data m; signing the hash value H(m) with a private key to obtain a signature σ; Storage monitoring and evaluation results generated by the monitoring management module; storing access assessment results generated by the security access module; The gravity energy storage system execution instructions generated by the storage safety management module.

3. The information security protection method for a gravity energy storage monitoring system according to claim 2, Features: The monitoring management module includes the following steps: Extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module; Use the security assessment algorithm to calculate and analyze the pre-processed data to generate monitoring assessment results; The calculation and analysis steps of the safety assessment algorithm are as follows: Use the public key to verify the signature σ and hash value H(m); Extract the feature vector x of the preprocessed data, use the trained isolation forest model to perform anomaly detection, and output the monitoring evaluation results; The specific formula of the isolation forest model is as follows: Where s(x, n) is the abnormal score of the monitoring data, h i (x i ) is the path length of the ith data point, H(i) is the ith harmonic number; The monitoring and evaluation results are stored in the information management module so that they can be retrieved by the security management module.

4. The information security protection method for a gravity energy storage monitoring system according to claim 3, Features: The security access module comprises the following steps: Extracting external access information of the gravity energy storage system from the information management module by running the security access module; Use trust evaluation algorithms to calculate and analyze external access information and generate access evaluation results; The calculation and analysis steps of the trust evaluation algorithm are as follows: The reputation score R of the external access entity is calculated based on historical behavior records. The specific formula is: Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions; Define the basic probability of the source historical access record database as m 1 , define the basic probability m of the source security log 2 , combining the evidence from the two sources to obtain the comprehensive trust, the specific formula is: Among them, m(A) is the basic probability assignment after combination, m 1 (B), m 2 (C) Assigning basic probabilities of accessing information B and C to source 1 and source 2 respectively; Combining the reputation score and the evidence combination results, we get the access evaluation result T, which is as follows: T=f(R i ,m(A)) Among them, f is the mapping function, which transforms the reputation score R i Combined with the comprehensive trust m(A), the access evaluation result T is obtained; The access assessment results are stored in the information management module so that the security management module can extract them.

5. The information security protection method for a gravity energy storage monitoring system according to claim 4, Features: The security management module includes the following steps: Extract monitoring assessment results and access assessment results from the information management module by running the security management module; If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed; If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted; If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions; If the access assessment result is abnormal, the external access entity is denied access to the gravity energy storage monitoring system and execution of instructions; The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

6. The information security protection method for a gravity energy storage monitoring system according to claim 5, Features: The gravity energy storage system monitoring data includes slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoisting motor data, gantry crane travel motor data, gantry crane hoisting wire rope data, transformer data, and mass block data.

7. An information security protection system for a gravity energy storage monitoring system, based on the information security protection method for a gravity energy storage monitoring system according to any one of claims 1 to 6, Features: include, An information management module is used to collect the monitoring data of the gravity energy storage system and external access information, store the monitoring data of the gravity energy storage system in a security log, store the external access information in a historical access record database, pre-process the monitoring data of the gravity energy storage system, store the monitoring evaluation results generated by the monitoring management module, store the access evaluation results generated by the security access module, and store the execution instructions of the gravity energy storage system generated by the security management module; The monitoring management module is used to extract the pre-processed gravity energy storage system monitoring data from the information management module, verify the digital signature and hash value of the monitoring data using the public key, extract the feature vector x of the monitoring data, perform anomaly detection using the trained isolation forest model, generate monitoring evaluation results, and store the analysis results in the information management module; The security access module is used to extract the external access information of the gravity energy storage system from the information management module, calculate the reputation score of the external access entity based on the historical behavior records, combine the evidence of the source historical access record database and the source security log to obtain the comprehensive trust, generate the access evaluation result, and store the analysis result in the information management module; The security management module is used to generate execution instructions for the gravity energy storage system by extracting monitoring evaluation results and access evaluation results from the information management module.

Images