Signal processing method and device of transformer substation, electronic equipment and storage medium

Abstract

The invention discloses a signal processing method and device for a transformer substation, electronic equipment and a storage medium, and is applied to the transformer substation. The method comprises the following steps: in response to a received request for transmitting a to-be-transmitted signal of a transformer substation, performing identity verification on the transformer substation and a master station based on an identity label of the transformer substation and an identity label of the master station; determining a session key for data transmission between the master station and the transformer substation based on the first random number corresponding to the transformer substation and the second random number corresponding to the master station under the condition that the identity verification of the transformer substation and the master station is passed; generating session information based on the session key and the to-be-transmitted signal; and sending the session information to the master station, and receiving a verification result sent by the master station, the verification result being used for representing whether the to-be-transmitted signal satisfies a preset standard. According to the invention, the technical problem of low safety of transformer station signal processing in the prior art is solved.

Description

Technical Field

[0001] The present invention relates to the fields of power systems and signal processing, and in particular to a signal processing method, device, electronic equipment and storage medium for a substation. Background Art

[0002] With the rapid development of smart grids, substations play an increasingly important role in power systems. The accurate transmission and acceptance of substation signals are directly related to the safe and stable operation of smart grids. Specifically, during the operation of substations, the transmission of substation signals involves real-time monitoring and remote control of important information such as voltage, current, and power in smart grids. Therefore, it is necessary to ensure the confidentiality, integrity, and authenticity of substation signals during transmission, effectively prevent tampering and forgery, avoid threats to the normal operation of smart grids, and ensure the operation and maintenance efficiency of substations.

[0003] Traditional substation signal processing mainly relies on manual operation, which has the defect of low security, making substation signals vulnerable to network attacks, interfering with the operation of the substation, and even causing the erroneous issuance of control instructions, affecting the normal operation of the smart grid.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] The embodiments of the present invention provide a signal processing method, device, electronic device and storage medium for a substation, so as to at least solve the technical problem of low security of substation signal processing in the related art.

[0006] According to one aspect of an embodiment of the present invention, a signal processing method for a substation is provided, which is applied to the substation, comprising: in response to receiving a request for transmitting a signal to be transmitted of the substation, authenticating the substation and the master station based on an identity identifier of the substation and an identity identifier of the master station; in a case where the identity identities of the substation and the master station are passed, determining a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station; generating session information based on the session key and the signal to be transmitted; sending the session information to the master station, and receiving a verification result sent by the master station, wherein the verification result is used to characterize whether the signal to be transmitted meets a preset standard.

[0007] Optionally, identity authentication of the substation and the main station includes: sending first information to the main station, wherein the first information is used to authenticate the identity between the substation and the main station, the first information includes: a first identity identifier of the substation, initial verification information, a timestamp, and the first verification information, the first identity identifier is the identity identifier of the substation in the current session, the initial verification information is the verification information assigned to the substation by the control background during the initialization phase through the identity identifier and the initial random number of the substation, the identity identifier of the substation is assigned to the substation by the control background during the initialization phase, and the initial random number is the random number of the substation determined by the control background during the initialization phase; receiving second information sent by the main station, wherein the second information is generated and sent to the substation when the main station successfully verifies the first information, and the second information includes: a first identity mark, second data to be decrypted, and second verification information; in response to successfully receiving the second information and passing the verification of the second information, determining that the identity authentication of the substation and the main station is passed.

[0008] Optionally, before sending the first information to the master station, the method also includes: selecting a first random number from a preset database and obtaining a timestamp, wherein the timestamp is used to represent the timestamp of the substation receiving a request to transmit the substation's signal to be transmitted; performing an XOR operation on the substation's identity and the first random number to obtain first data to be decrypted; obtaining first verification information based on initial verification information, the master station's identity and the first random number; obtaining a first identity based on the first data to be decrypted and the timestamp; and summarizing the initial verification information, the timestamp, the first verification information and the first identity to obtain the first information.

[0009] Optionally, the second data to be decrypted is obtained by the main station based on the first data to be decrypted and the second random number, the first data to be decrypted is obtained by the main station based on the first identity in the first information, the second random number is obtained by the main station from a preset database when the first identity is successfully verified, the second verification information is obtained by the main station based on the first random number, the second random number, the identity of the substation and the third data to be decrypted, and the third data to be decrypted is obtained by the main station based on the identity of the substation and the second random number.

[0010] Optionally, in response to the main station successfully verifying the timestamp and the first identity, it is determined that the main station successfully verifies the first information, and the main station obtains the second data to be decrypted, the third data to be decrypted and the second verification information.

[0011] Optionally, the verification result of the first identity identifier is obtained by the main station based on the decrypted first random number, the first decrypted data and the decrypted first identity identifier, wherein, in response to the decrypted first random number being equal to the first random number, and the first decrypted data being equal to the first data to be decrypted, and the decrypted first identity identifier being equal to the first identity identifier, the verification result of the first identity identifier is determined to be passed, and in response to the decrypted first random number not being equal to the first random number, or the first decrypted data not being equal to the first data to be decrypted, or the decrypted first identity identifier not being equal to the first identity identifier, the verification result of the first identity identifier is determined to be failed.

[0012] Optionally, verifying the second information includes: obtaining a decrypted second random number based on the second data to be decrypted; verifying the second verification information based on the decrypted second random number; and determining that the verification of the second information is successful in response to the second verification information being verified successfully.

[0013] Optionally, the second verification information is verified based on the decrypted second random number, including: obtaining the decrypted second random number based on a first preset formula; obtaining third decrypted data based on the decrypted second random number and a preset function; performing an XOR operation on the first random number and the decrypted second random number to obtain a first operation result; splicing the first operation result and the identity of the substation to obtain a first splicing result; performing an XOR operation on the first splicing result and the third decrypted data to obtain the decrypted second verification information; in response to the decrypted second verification information being equal to the second verification information, determining that the verification of the second verification information is passed; in response to the decrypted second verification information being not equal to the second verification information, determining that the verification of the second verification information is not passed.

[0014] Optionally, based on the first random number corresponding to the substation and the second random number corresponding to the master station, a session key for data transmission between the master station and the substation is determined, including: decrypting the first data to be decrypted to obtain first decrypted data; performing an XOR operation on the first decrypted data and the identity of the substation to obtain a second operation result; performing a hash operation on the second operation result to obtain a first hash result; concatenating the first hash result, the first random number and the second random number to obtain a second concatenated result; and performing a hash operation on the second concatenated result to obtain the session key.

[0015] Optionally, session information is generated based on the session key and the signal to be transmitted, including: using a preset encryption algorithm to encrypt the signal to be transmitted to obtain a ciphertext; performing a hash operation on the ciphertext and the session key to obtain a second hash result; and constructing session information based on the ciphertext and the second hash result.

[0016] Optionally, the verification result is obtained by the master station decrypting the ciphertext based on the session key and then verifying the decrypted signal to be transmitted. In response to the decrypted signal to be transmitted being complete and the state of the decrypted signal to be transmitted meeting the preset state, the verification result is determined to be that the decrypted signal to be transmitted meets the preset standard. In response to the decrypted signal to be transmitted being incomplete or the state of the decrypted signal to be transmitted not meeting the preset state, the verification result is determined to be that the decrypted signal to be transmitted does not meet the preset standard.

[0017] According to another aspect of an embodiment of the present invention, a signal processing device for a substation is also provided, which is applied to a substation and includes: a verification module, for authenticating the substation and the master station based on an identity identifier of the substation and an identity identifier of the master station in response to receiving a request for transmitting a signal to be transmitted of the substation; a determination module, for determining a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station when the identities of the substation and the master station are passed; a generation module, for generating session information based on the session key and the signal to be transmitted; a sending module, for sending the session information to the master station and receiving a verification result sent by the master station, wherein the verification result is used to characterize whether the signal to be transmitted meets a preset standard.

[0018] According to another aspect of an embodiment of the present invention, there is further provided an electronic device, comprising: a memory storing an executable program; and a processor for running the program, wherein the method in each embodiment of the present invention is executed when the program is running.

[0019] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided. The computer-readable storage medium includes a stored executable program, wherein when the executable program is running, the device where the computer-readable storage medium is located is controlled to execute the methods in various embodiments of the present invention.

[0020] According to another aspect of an embodiment of the present invention, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0021] According to another aspect of an embodiment of the present invention, a computer program product is provided, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0022] According to another aspect of the embodiments of the present invention, a computer program is further provided. When the computer program is executed by a processor, the methods in the embodiments of the present invention are implemented.

[0023] In an embodiment of the present invention, in response to receiving a request for transmitting a signal to be transmitted of a substation, based on the identity of the substation and the identity of the master station, the substation and the master station are authenticated; when the identity authentication of the substation and the master station is passed, based on the first random number corresponding to the substation and the second random number corresponding to the master station, a session key for data transmission between the master station and the substation is determined; based on the session key and the signal to be transmitted, session information is generated; the session information is sent to the master station, and a verification result sent by the master station is received, wherein the verification result is used to characterize whether the signal to be transmitted meets a preset standard. It is easy to notice that the security of substation signal processing is ensured by using the double encryption method of the identity identifier and the random number. First, the reliability of the identities of both parties in the session is ensured by the identity identifier. After the identity authentication is passed, the signal to be transmitted is encrypted by the random number to obtain the randomly generated session information, so as to avoid the signal to be transmitted from being forged or tampered with, and the security of the signal to be transmitted during the transmission process can also be ensured. The signal to be transmitted after transmission is verified to ensure the integrity and consistency of data transmission, and achieve the purpose of safe processing, thereby achieving the technical effect of improving the security and reliability of substation signal processing, and thus solving the technical problem of low security of substation signal processing in the related technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0025] Figure 1 is a flow chart of a signal processing method for a substation according to an embodiment of the present invention;

[0026] Figure 2 is a flow chart of an optional signal processing method for a substation according to an embodiment of the present invention;

[0027] Figure 3 is a schematic diagram of an optional substation signal transmission method according to an embodiment of the present invention;

[0028] Figure 4 is a flow chart of an optional substation signal verification method according to an embodiment of the present invention;

[0029] Figure 5 is a schematic diagram of a signal processing device for a substation according to an embodiment of the present invention. DETAILED DESCRIPTION

[0030] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0031] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0032] According to an embodiment of the present invention, an embodiment of a signal processing method for a substation is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0033] Figure 1 is a flow chart of a signal processing method for a substation according to an embodiment of the present invention. Figure 1 As shown, the method is applied to a substation and includes the following steps:

[0034] Step S102 , in response to receiving a request for transmitting a signal to be transmitted of the substation, based on an identity identifier of the substation and an identity identifier of the master station, identity verification is performed on the substation and the master station.

[0035] The above-mentioned substation can be an electrical device that converts voltage in the smart grid system. Substations can be used for power transmission and distribution. According to the different functions of substations, substations can be divided into step-up substations and step-down substations. During the operation of the substation, the substation signals involve information such as voltage, current, and power. Therefore, it is necessary to ensure the confidentiality, integrity, and authenticity of these signals during transmission to avoid signal tampering and forgery, and prevent threats to the normal operation of the smart grid.

[0036] The above-mentioned master station can be an electric power device that monitors and processes data in the smart grid system. The master station can be used to receive and process the signals to be transmitted from the substation. The master station can also verify the signals to be transmitted to determine whether the signals to be transmitted meet the preset standards to ensure the normal operation of the substation. According to different functions, the master station can be divided into a dispatching master station and a monitoring master station.

[0037] In the smart grid, signals are transmitted between the substation and the master station through the network. The substation is responsible for collecting and uploading data such as the operating status, fault information, and measurement data of the power equipment, and generating signals to transmit to the master station. The master station receives these signals for analysis and decision-making to achieve monitoring and management of the smart grid. In order to ensure the security and reliability of signal transmission, the master station and the substation can first be authenticated, and the transmitted signal can be processed after the authentication is passed.

[0038] The above-mentioned signals to be transmitted can be used to characterize the signals transmitted between the substation and the main station. The signals to be transmitted may include but are not limited to: status signals, measurement signals, control signals, protection signals, and communication signals. The content of the signals to be transmitted can be determined as needed and is not limited here. The signals to be transmitted make it convenient for operation and maintenance personnel to understand the operation status of the substation and ensure the safe and stable operation of the substation. Therefore, it is necessary to ensure the safe transmission and processing of the signals to be transmitted, which plays an important role in ensuring the normal operation of the smart grid system, improving operation and maintenance efficiency, and preventing malicious attacks. The signals to be transmitted can be used to monitor the operating status of the substation, control the operation of power equipment, etc.

[0039] The above-mentioned identity identifier can be used to uniquely characterize the device identifier of the power equipment. The identity identifier can be used to authenticate the power equipment during the signal processing process to ensure the source and destination of the signal to be transmitted. The identity identifier can be determined by a unique resource locator, device information or digital certificate, or it can be assigned to the substation by the control background. During the signal processing process, the identity identifier can also be combined with a random number, timestamp, etc. to determine the data that the substation needs to transmit.

[0040] The above-mentioned identity authentication may refer to the process of verifying the power equipment involved in the signal to be transmitted. By verifying the identity of the substation and the master station, it is possible to ensure that the source of the signal to be transmitted is reliable, providing a basis for the stable operation of the smart grid system. First, the identity authentication of the substation and the master station is determined to ensure the identity of both parties in the conversation and prevent counterfeit devices from accessing the smart grid. In addition, identity authentication can also facilitate key exchange between the two parties in the conversation. After the identity authentication of the substation and the master station is passed, the data transmitted between the substation and the master station is transmitted to ensure the security of data transmission.

[0041] In an optional embodiment, after receiving a request to transmit a signal to be transmitted, the substation authenticates the substation and the master station. First, the identity of the substation and the master station can be determined. Optionally, the identity of the substation and the master station can be searched in a device database. The identity of the substation and the master station can also be generated by a unique identifier such as a universal unique identifier or a global unique identifier. Then, based on the identity of the substation and the master station, the identity of the substation and the master station is authenticated. Optionally, the identity authentication can be performed by a digital certificate, or by a symmetric key.

[0042] In another optional embodiment, after receiving the signal requesting transmission, the substation sends first information to the master station, and the first information may be composed of an identity identifier, a timestamp, and a random number, etc., so that the master station can verify the first information. After successfully verifying the first information, the master station sends second information to the substation, and the second information may be composed of an identity identifier, a timestamp, and a random number, etc., so that the substation can verify the second information. After the substation successfully verifies the second information, it is determined that the identity verification of the substation and the master station is successful.

[0043] Step S104, when the identity authentication of the substation and the master station is passed, a session key for data transmission between the master station and the substation is determined based on a first random number corresponding to the substation and a second random number corresponding to the master station.

[0044] The first random number may be a random number corresponding to the substation. The session key may be determined using the first random number corresponding to the substation to improve the confidentiality of the session key.

[0045] The second random number may be a random number corresponding to the master station. The second random number corresponding to the master station may be used to determine the session key to improve the confidentiality of the session key.

[0046] The above session key can be determined based on a random number. Due to the unpredictability of random numbers, the complexity of the session key can be increased, thereby improving the security of the session. Combining the first random number corresponding to the substation and the second random number corresponding to the master station, it is ensured that the session key is dynamically generated, which increases the security of data transmission, prevents data from being illegally intercepted and cracked, and provides protection for the operation of the smart power system. The session key ensures the security of substation data transmission.

[0047] In an optional embodiment, after the identity authentication of the substation and the master station is passed, the session key for data transmission between the substation and the master station is determined. First, a first random number corresponding to the substation and a second random number corresponding to the master station can be generated. Optionally, the random number of the substation and the random number of the master station can be generated respectively by a random number generator. The random number of the substation and the random number of the master station can also be generated respectively by a microsecond timestamp. Then, based on the first random number corresponding to the substation and the second random number corresponding to the master station, the session key for data transmission between the master station and the substation is determined. Optionally, the session key can be calculated based on the first random number, the second random number and the public key, and the first random number, the second random number can be combined with the identity of the substation and the identity of the master station to generate the session key.

[0048] Step S106: Generate session information based on the session key and the signal to be transmitted.

[0049] The above-mentioned session information can be used to characterize the information exchanged between the substation and the master station. The session information can be generated based on the session key and the signal to be transmitted. The session information can include the signal to be transmitted. The session information can be used for data transmission between the substation and the master station to safely transmit the signal to be transmitted from the substation to the master station. Through the session information, the security of the transmission of the signal to be transmitted is ensured to prevent the signal to be transmitted from being tampered with or forged.

[0050] In an optional embodiment, the session key may be encrypted to obtain an encrypted session key. Optionally, the session key may be encrypted by a digital certificate or a preset encryption algorithm. The encrypted session key is further used to obtain an encrypted signal to be transmitted, thereby constructing session information based on the encrypted session key and the encrypted signal to be transmitted, thereby achieving double encryption of the session information, ensuring the confidentiality of the session information, and improving the security of the signal to be transmitted.

[0051] In another optional embodiment, the signal to be transmitted may be encrypted to obtain ciphertext, and the ciphertext and the session key may be further hashed, and the obtained hash result and the ciphertext may be used to construct the session information. Encryption by a preset encryption algorithm and hashing may be used to further ensure the confidentiality of the session information, thereby improving the security of the signal to be transmitted.

[0052] Step S108, sending session information to the master station, and receiving the verification result sent by the master station.

[0053] The verification result is used to indicate whether the signal to be transmitted meets the preset standard.

[0054] The above preset standards can be used to characterize whether the signal to be transmitted of the substation has passed the verification. The preset standards involve the equipment status, data processing and transmission, functions, etc. of the substation. Through the preset standards, it can be judged whether the substation can operate normally and stably.

[0055] The above verification results can be used to characterize whether the signal to be transmitted meets the preset standard. After the session information is sent to the master station, the master station can verify the signal to be transmitted to ensure that the received signal to be transmitted meets the integrity and consistency verification. Through the verification results, errors in the data transmission process can be discovered and corrected in a timely manner, ensuring the integrity and accuracy of data transmission and the effectiveness of substation signal processing. Through the verification results, the status of the substation can also be monitored for timely maintenance and processing.

[0056] In an optional embodiment, after the substation sends the session information to the master station, since the session information carries the signal to be transmitted, after the master station obtains the signal to be transmitted according to the session information, the master station can verify the signal to be transmitted, determine whether the signal to be transmitted meets the preset standard, and generate a verification result and send it to the substation to ensure the integrity and consistency of the signal to be transmitted, and also facilitate timely maintenance when the signal to be transmitted does not meet the preset standard. Optionally, the integrity of the signal to be transmitted can be checked by a cyclic redundancy check or a parity check, the consistency of the signal to be transmitted can be checked by a longitudinal redundancy check, and the integrity and consistency of the signal to be transmitted can be detected by a hash check or a message authentication code.

[0057] In an embodiment of the present invention, in response to receiving a request for transmitting a signal to be transmitted of a substation, based on the identity of the substation and the identity of the master station, the substation and the master station are authenticated; when the identity authentication of the substation and the master station is passed, based on the first random number corresponding to the substation and the second random number corresponding to the master station, a session key for data transmission between the master station and the substation is determined; based on the session key and the signal to be transmitted, session information is generated; the session information is sent to the master station, and a verification result sent by the master station is received, wherein the verification result is used to characterize whether the signal to be transmitted meets a preset standard. It is easy to notice that the security of substation signal processing is ensured by using the double encryption method of the identity identifier and the random number. First, the reliability of the identities of both parties in the session is ensured by the identity identifier. After the identity authentication is passed, the signal to be transmitted is encrypted by the random number to obtain the randomly generated session information, so as to avoid the signal to be transmitted from being forged or tampered with, and the security of the signal to be transmitted during the transmission process can also be ensured. The signal to be transmitted after transmission is verified to ensure the integrity and consistency of data transmission, and achieve the purpose of safe processing, thereby achieving the technical effect of improving the security and reliability of substation signal processing, and thus solving the technical problem of low security of substation signal processing in the related technology.

[0058] Optionally, identity authentication of the substation and the main station includes: sending first information to the main station, wherein the first information is used to authenticate the identity between the substation and the main station, the first information includes: a first identity identifier of the substation, initial verification information, a timestamp, and the first verification information, the first identity identifier is the identity identifier of the substation in the current session, the initial verification information is the verification information assigned to the substation by the control background during the initialization phase through the identity identifier and the initial random number of the substation, the identity identifier of the substation is assigned to the substation by the control background during the initialization phase, and the initial random number is the random number of the substation determined by the control background during the initialization phase; receiving second information sent by the main station, wherein the second information is generated and sent to the substation when the main station successfully verifies the first information, and the second information includes: a first identity mark, second data to be decrypted, and second verification information; in response to successfully receiving the second information and passing the verification of the second information, determining that the identity authentication of the substation and the main station is passed.

[0059] The first information can be used to verify the identity between the substation and the master station. The first information can include but is not limited to: the first identity of the substation, initial verification information, timestamp and first verification information, which are not limited here and can be determined as needed.

[0060] The above-mentioned first identity identifier can be the identity identifier of the substation in the current session. During the substation signal transmission process, when the substation and the main station have multiple conversations, it is necessary to authenticate the current conversation. Therefore, when performing identity authentication, the first identity identifier of the substation is determined. The first identity identifier can be the identity identifier of the substation in the current session, so that the identities of both parties in the current conversation are verified using the first information.

[0061] The above-mentioned initial verification information may be verification information assigned to the substation by the control background in the initialization phase through the identity of the substation and the initial random number. The initial verification information may be obtained by performing a hash function calculation on the control background, and the result of performing an XOR operation on the identity of the substation and the initial random number is calculated by the hash function.

[0062] The above-mentioned second information can be used to indicate that the first information has been verified. The second information can be generated and sent to the substation when the master station verifies the first information. The second information may include the first identity mark, the second data to be decrypted, and the second verification information, which is not limited here, and the content of the second information can be determined as needed. The second information can ensure that the identity authentication is passed, so as to facilitate subsequent signal processing.

[0063] In an optional embodiment, the substation sends a first message to the master station, and the first message carries a first identity mark, a timestamp, and multiple verification information of the substation. After receiving the first message, the master station verifies the first message, and after the verification is passed, sends a second message to the substation, and the second message carries a first identity mark, second data to be decrypted, and second verification information, so that the substation verifies the second message. Through double identity authentication, the authenticity of the identities of both parties in communication is ensured, the accuracy and security of identity authentication are improved, and identity impersonation and signal tampering are effectively prevented.

[0064] Optionally, before sending the first information to the master station, the method also includes: selecting a first random number from a preset database and obtaining a timestamp, wherein the timestamp is used to represent the timestamp of the substation receiving a request to transmit the substation's signal to be transmitted; performing an XOR operation on the substation's identity and the first random number to obtain first data to be decrypted; obtaining first verification information based on initial verification information, the master station's identity and the first random number; obtaining a first identity based on the first data to be decrypted and the timestamp; and summarizing the initial verification information, the timestamp, the first verification information and the first identity to obtain the first information.

[0065] In an optional embodiment, before identity authentication, the first information can be generated by the substation's identity, a first random number, and a timestamp. Specifically, after the substation obtains the first random number and the timestamp, the substation performs an XOR operation on the substation's identity and the first random number to obtain the first data to be decrypted, so as to encrypt the substation's identity. Further, based on the first data to be decrypted and the timestamp, the first identity of the substation in the current session is obtained. And based on the initial verification information, the master station's identity and the first random number, the first verification information is obtained. The first information is calculated by the initial verification information, the timestamp, the first identity and the first verification information. The timestamp is introduced when generating the first information, which increases the timeliness verification of signal transmission and further improves the security of signal processing.

[0066] Optionally, the second data to be decrypted is obtained by the main station based on the first data to be decrypted and the second random number, the first data to be decrypted is obtained by the main station based on the first identity in the first information, the second random number is obtained by the main station from a preset database when the first identity is successfully verified, the second verification information is obtained by the main station based on the first random number, the second random number, the identity of the substation and the third data to be decrypted, and the third data to be decrypted is obtained by the main station based on the identity of the substation and the second random number.

[0067] In an optional embodiment, after the master station verifies the first information sent by the substation, it obtains a second random number to determine the second data to be decrypted by the second random number and the first data to be decrypted, and determines the third data to be decrypted by the second random number and the identity of the substation. Further, the second verification information is determined by the first random number, the second random number, the identity of the substation, and the third data to be decrypted. In this way, the master station encrypts the first data to be decrypted and the identity of the substation by random numbers, thereby improving the randomness and security of identity authentication.

[0068] Optionally, in response to the main station successfully verifying the timestamp and the first identity, it is determined that the main station successfully verifies the first information, and the main station obtains the second data to be decrypted, the third data to be decrypted and the second verification information.

[0069] In an optional embodiment, since the first information includes the first identity and the timestamp, the master station can verify the first identity and the timestamp after receiving the first information. The first identity is used to verify the identity of the substation in the current conversation, and the timestamp is used to ensure the freshness of the conversation, which is also convenient for subsequent tracking and fault analysis and location.

[0070] Optionally, the verification result of the first identity identifier is obtained by the main station based on the decrypted first random number, the first decrypted data and the decrypted first identity identifier, wherein, in response to the decrypted first random number being equal to the first random number, and the first decrypted data being equal to the first data to be decrypted, and the decrypted first identity identifier being equal to the first identity identifier, the verification result of the first identity identifier is determined to be passed, and in response to the decrypted first random number not being equal to the first random number, or the first decrypted data not being equal to the first data to be decrypted, or the decrypted first identity identifier not being equal to the first identity identifier, the verification result of the first identity identifier is determined to be failed.

[0071] In an optional embodiment, since the first identity identifier is obtained through the operation of the first random number, the verification of the first identity identifier can be determined by the main station based on the decrypted first random number, the first decrypted data and the decrypted first identity identifier. Specifically, the decrypted first random number can be compared with the first random number, the first decrypted data can be compared with the first data to be decrypted, and the decrypted first identity identifier can be compared with the first identity identifier. When the decrypted first random number is equal to the first random number, the first decrypted data is equal to the first data to be decrypted, and the decrypted first identity identifier is equal to the first identity identifier, it is determined that the first identity identifier verification is passed. Optionally, the comparison can be performed through a hash function. The comparison can also be performed through a first comparison model, and the first comparison model can be one of the following: random forest, support vector machine, decision tree model, which is not limited here, and the content of the first comparison model can be determined as needed. Through comparative verification, the accuracy and security of identity authentication are improved.

[0072] Optionally, verifying the second information includes: obtaining a decrypted second random number based on the second data to be decrypted; verifying the second verification information based on the decrypted second random number; and determining that the verification of the second information is successful in response to the second verification information being verified successfully.

[0073] In an optional embodiment, after receiving the second information sent by the master station, the substation verifies the second information. Since the second information includes the first identity mark, the second data to be decrypted and the second verification information, the second data to be decrypted can be first decrypted to obtain the second random number, and then the second verification information can be verified based on the decrypted second random number. When the second verification information is verified, it indicates that the second information has passed the verification, that is, the substation identity corresponding to the first identity mark in the second information is safe, and the signal can be further processed by the substation.

[0074] Optionally, the second verification information is verified based on the decrypted second random number, including: obtaining the decrypted second random number based on a first preset formula; obtaining third decrypted data based on the decrypted second random number and a preset function; performing an XOR operation on the first random number and the decrypted second random number to obtain a first operation result; splicing the first operation result and the identity of the substation to obtain a first splicing result; performing an XOR operation on the first splicing result and the third decrypted data to obtain the decrypted second verification information; in response to the decrypted second verification information being equal to the second verification information, determining that the verification of the second verification information is passed; in response to the decrypted second verification information being not equal to the second verification information, determining that the verification of the second verification information is not passed.

[0075] Optionally, the first preset formula is as follows:

[0076]

[0077] In the formula, r′ m is the second random number after decryption, a is the first data to be decrypted, is an XOR operation, and γ is the second data to be decrypted.

[0078] After obtaining the decrypted second random number through the first preset formula, the second random number can be operated through a preset function to obtain the decrypted third decrypted data. Optionally, the preset function can be a hash function, which is not limited here and can be determined as needed.

[0079] The first random number and the decrypted second random number can be XORed to obtain a first operation result, and the first operation result and the identity of the substation can be further spliced ​​to obtain a first splicing result, so as to perform an XOR operation on the first splicing result and the third decrypted data to obtain the decrypted second verification information, thereby comparing the decrypted second verification information with the second verification information. Optionally, the comparison can be performed through a hash function. The comparison can also be performed through a second comparison model, and the second comparison model can be one of the following: random forest, support vector machine, decision tree model, which is not limited here, and the content of the second comparison model can be determined as needed. Through comparative verification, the accuracy and security of identity authentication are improved.

[0080] Optionally, based on the first random number corresponding to the substation and the second random number corresponding to the master station, a session key for data transmission between the master station and the substation is determined, including: decrypting the first data to be decrypted to obtain first decrypted data; performing an XOR operation on the first decrypted data and the identity of the substation to obtain a second operation result; performing a hash operation on the second operation result to obtain a first hash result; concatenating the first hash result, the first random number and the second random number to obtain a second concatenated result; and performing a hash operation on the second concatenated result to obtain the session key.

[0081] In an optional embodiment, the substation negotiates a session key with the master station. First, the first data to be decrypted may be decrypted to obtain the first decrypted data, and then the first decrypted data and the identity of the substation may be XORed to obtain the second operation result. Then, the second operation result may be hashed to obtain the first hash result, and the first hash result, the first random number and the second random number may be concatenated to obtain the second concatenated result, and then the second concatenated result may be hashed to obtain the session key. This process dynamically generates the session key through the first random number and the second random number, thereby increasing the security of the session and preventing the substation signal from being illegally intercepted and cracked.

[0082] Optionally, session information is generated based on the session key and the signal to be transmitted, including: using a preset encryption algorithm to encrypt the signal to be transmitted to obtain a ciphertext; performing a hash operation on the ciphertext and the session key to obtain a second hash result; and constructing session information based on the ciphertext and the second hash result.

[0083] In an optional embodiment, a preset encryption algorithm may be used to encrypt the signal to be transmitted to obtain a ciphertext. Optionally, the preset encryption algorithm may be one of the following: a symmetric encryption algorithm, an asymmetric encryption algorithm, and a stream encryption algorithm, which are not limited here and may be determined as needed. Then, the second hash result and the ciphertext obtained by performing a hash operation on the ciphertext and the session key are used to construct the session information. This process improves the encryption of the session information by combining the preset encryption algorithm and the hash operation.

[0084] Optionally, the verification result is obtained by the master station decrypting the ciphertext based on the session key and then verifying the decrypted signal to be transmitted. In response to the decrypted signal to be transmitted being complete and the state of the decrypted signal to be transmitted meeting the preset state, the verification result is determined to be that the decrypted signal to be transmitted meets the preset standard. In response to the decrypted signal to be transmitted being incomplete or the state of the decrypted signal to be transmitted not meeting the preset state, the verification result is determined to be that the decrypted signal to be transmitted does not meet the preset standard.

[0085] In an optional embodiment, after receiving the session information, the master station decrypts the ciphertext by the session key to obtain the decrypted signal to be transmitted, verifies the decrypted signal to be transmitted, and verifies whether the decrypted signal to be transmitted meets the preset standard. Optionally, the following method can be used to verify whether the decrypted signal to be transmitted meets the preset standard: it can be verified whether the decrypted signal to be transmitted is complete, and it can be verified whether the state of the decrypted signal to be transmitted meets the preset state. When the decrypted signal to be transmitted is complete and the state of the decrypted signal to be transmitted meets the preset state, the verification result is that the decrypted signal to be transmitted meets the preset standard, and the verification result is transmitted to the substation. When the decrypted signal to be transmitted is incomplete, or the state of the decrypted signal to be transmitted does not meet the preset state, the verification result is that the decrypted signal to be transmitted does not meet the preset standard, and the verification result is transmitted to the substation. Through the feedback of the verification result, errors in the processing of the signal to be transmitted can be discovered and corrected in time, the integrity and accuracy of the substation signal processing are guaranteed, and the stable and normal operation of the substation can be ensured.

[0086] Figure 2 is a flow chart of a signal processing method for a substation according to an embodiment of the present invention. Figure 2 As shown, the method includes:

[0087] Step S202, initialization phase. The control background allocates the substation identity and selects a random number for the substation, and the control background also allocates the master station identity for the master station. Then the control background calculates the verification information of the substation through the random number and the substation identity. The substation stores the substation identity, the master station identity, and the verification information of the substation, and the master station stores the substation identity, the master station identity, and the random number for subsequent identity authentication and signal processing.

[0088] Step S204, identity authentication and session key negotiation phase. The substation generates a session message by combining the timestamp, the current random number and the verification information of the substation, and sends the session message to the master station. The master station performs verification based on the session message, and when the session message is verified, calculates the session key and returns the verification message. After receiving the verification message, the substation verifies the verification message, and calculates the session key after the verification message is verified, so as to facilitate the subsequent transmission of the substation signal through the session key.

[0089] Step S206, substation signal transmission stage. The substation uses the session key to encrypt the substation signal and transmits it to the master station. The master station receives the encrypted substation signal and can decrypt the encrypted substation signal based on the session key to obtain the decrypted substation signal, thereby completing the transmission of the substation signal.

[0090] Step S208, substation signal verification stage. After the master station obtains the decrypted substation signal, it verifies the decrypted substation signal and the substation signal before decryption to obtain the verification result, and returns the verification result to the control background, so that when the decrypted substation signal fails to pass the verification, the alarm is promptly notified to the staff to handle it.

[0091] Figure 3 is a schematic diagram of an optional substation signal transmission method according to an embodiment of the present invention, such as Figure 3 As shown, substation signal transmission is performed between the substation and the master station. The substation sends a session message to the master station. After receiving the session message, the master station verifies the session message and calculates the session key after the session message is verified. The master station sends a verification message to the substation. The substation verifies the verification message and calculates the session key after the verification message is verified, so that the substation and the master station can transmit substation signals based on the session key.

[0092] Figure 4 is a flow chart of an optional substation signal verification method according to an embodiment of the present invention, such as Figure 4 As shown, the method includes:

[0093] Step S402: decrypting the substation signal. The substation signal is encrypted during transmission. After receiving the encrypted substation signal, the decrypted substation signal can be obtained through a decryption algorithm.

[0094] Step S404: Integrity check of substation signal: Integrity check is performed on the decrypted substation signal.

[0095] Step S406: Substation signal status check: Perform status check on the decrypted substation signal.

[0096] Step S408, based on the integrity check and the status check, determine the verification result. When both the integrity check and the status check pass the verification, determine that the substation signal meets the preset standard. When either the integrity check or the status check fails to pass the verification, determine that the substation signal does not meet the preset standard, and prompt the operator to perform maintenance in time.

[0097] According to another aspect of an embodiment of the present invention, a signal processing device for a substation is also provided, which can execute the signal processing method for a substation provided in the above embodiment. The specific implementation method and preferred application scenario are the same as those in the above embodiment and will not be repeated here.

[0098] Figure 5 is a schematic diagram of a signal processing device for a substation according to an embodiment of the present invention. Figure 5 As shown, the device is applied to a substation, and includes: a verification module 50, for authenticating the substation and the master station based on the identity of the substation and the identity of the master station in response to receiving a request for transmitting a signal to be transmitted of the substation; a determination module 52, for determining a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station when the identity authentication of the substation and the master station is passed; a generation module 54, for generating session information based on the session key and the signal to be transmitted; a sending module 56, for sending the session information to the master station, and receiving a verification result sent by the master station, wherein the verification result is used to characterize whether the signal to be transmitted meets a preset standard.

[0099] Optionally, the verification module is also used to send a first message to the main station, wherein the first information is used to verify the identity between the substation and the main station, and the first information includes: a first identity identifier of the substation, initial verification information, a timestamp, and the first verification information, the first identity identifier is the identity identifier of the substation in the current session, the initial verification information is the verification information assigned to the substation by the control background during the initialization phase through the identity identifier and the initial random number of the substation, the identity identifier of the substation is assigned to the substation by the control background during the initialization phase, and the initial random number is the random number of the substation determined by the control background during the initialization phase; receiving second information sent by the main station, wherein the second information is generated and sent to the substation when the main station verifies the first information successfully, and the second information includes: a first identity mark, second data to be decrypted, and second verification information; in response to successfully receiving the second information and verifying the second information successfully, determining that the identity authentication of the substation and the main station is passed.

[0100] Optionally, the verification module is also used to select a first random number from a preset database and obtain a timestamp, wherein the timestamp is used to represent the timestamp of the substation receiving a request to transmit the substation's signal to be transmitted; perform an XOR operation on the substation's identity and the first random number to obtain first data to be decrypted; obtain first verification information based on initial verification information, the master station's identity and the first random number; obtain a first identity based on the first data to be decrypted and the timestamp; and obtain the first information by summarizing the initial verification information, the timestamp, the first verification information and the first identity.

[0101] Optionally, the second data to be decrypted is obtained by the main station based on the first data to be decrypted and the second random number, the first data to be decrypted is obtained by the main station based on the first identity in the first information, the second random number is obtained by the main station from a preset database when the first identity is successfully verified, the second verification information is obtained by the main station based on the first random number, the second random number, the identity of the substation and the third data to be decrypted, and the third data to be decrypted is obtained by the main station based on the identity of the substation and the second random number.

[0102] Optionally, the verification module is also used to determine that the main station has successfully verified the first information in response to the main station successfully verifying the timestamp and the first identity identifier, and the main station obtains the second data to be decrypted, the third data to be decrypted and the second verification information.

[0103] Optionally, the verification result of the first identity identifier is obtained by the main station based on the decrypted first random number, the first decrypted data and the decrypted first identity identifier.

[0104] The above-mentioned verification module is also used to determine that the verification result of the first identity identifier is passed in response to the first random number after decryption being equal to the first random number, the first decrypted data being equal to the first data to be decrypted, and the first identity identifier after decryption being equal to the first identity identifier, and to determine that the verification result of the first identity identifier is failed in response to the first random number after decryption being not equal to the first random number, or the first decrypted data being not equal to the first data to be decrypted, or the first identity identifier after decryption being not equal to the first identity identifier.

[0105] Optionally, the verification module is further used to obtain a decrypted second random number based on the second data to be decrypted; verify the second verification information based on the decrypted second random number; and determine that the verification of the second information is successful in response to the second verification information being verified successfully.

[0106] Optionally, the verification module is also used to obtain a decrypted second random number based on a first preset formula; obtain a decrypted third decrypted data based on the decrypted second random number and a preset function; perform an XOR operation on the first random number and the decrypted second random number to obtain a first operation result; splice the first operation result and the identity of the substation to obtain a first splicing result; perform an XOR operation on the first splicing result and the third decrypted data to obtain decrypted second verification information; in response to the decrypted second verification information being equal to the second verification information, determine that the verification of the second verification information is passed; in response to the decrypted second verification information being not equal to the second verification information, determine that the verification of the second verification information is not passed.

[0107] Optionally, the determination module is also used to decrypt the first data to be decrypted to obtain first decrypted data; perform an XOR operation on the first decrypted data and the identity of the substation to obtain a second operation result; perform a hash operation on the second operation result to obtain a first hash result; concatenate the first hash result, the first random number and the second random number to obtain a second concatenation result; perform a hash operation on the second concatenation result to obtain a session key.

[0108] Optionally, the generation module is further used to encrypt the transmission signal using a preset encryption algorithm to obtain a ciphertext; perform a hash operation on the ciphertext and the session key to obtain a second hash result; and construct session information based on the ciphertext and the second hash result.

[0109] Optionally, the verification result is obtained by the master station decrypting the ciphertext based on the session key and then verifying the decrypted signal to be transmitted.

[0110] The above-mentioned sending module is also used to determine that the verification result is that the decrypted signal to be transmitted meets the preset standard in response to the decrypted signal to be transmitted being complete and the state of the decrypted signal to be transmitted meeting the preset state, and to determine that the verification result is that the decrypted signal to be transmitted does not meet the preset standard in response to the decrypted signal to be transmitted being incomplete or the state of the decrypted signal to be transmitted not meeting the preset state.

[0111] The embodiment of the present application also provides an electronic device, including: a memory storing an executable program; a processor for running the program, wherein the method in each embodiment of the present invention is executed when the program is running. The embodiment of the present application also provides a computer-readable storage medium, the computer-readable storage medium includes a stored executable program, wherein when the executable program is running, the device where the computer-readable storage medium is located is controlled to execute the method in each embodiment of the present invention.

[0112] An embodiment of the present application further provides a computer program product, including a computer program, which implements the methods in various embodiments of the present invention when executed by a processor.

[0113] An embodiment of the present application further provides a computer program product, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium is used to store a computer program, and when the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0114] The embodiments of the present application further provide a computer program, which implements the methods in the above-mentioned embodiments of the present invention when executed by a processor.

[0115] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0116] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0117] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0118] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0119] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0120] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0121] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A signal processing method for a substation, applied to the substation, characterized in that: include: In response to receiving a request for transmitting a signal to be transmitted of the substation, based on an identity identifier of the substation and an identity identifier of the master station, identity verification is performed on the substation and the master station; In the case where the identity authentication of the substation and the master station is passed, determining a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station; generating session information based on the session key and the signal to be transmitted; The session information is sent to the master station, and a verification result sent by the master station is received, wherein the verification result is used to indicate whether the signal to be transmitted meets a preset standard.

2. The method according to claim 1, characterized in that: Authentication of the substation and the master station includes: Sending first information to the master station, wherein the first information is used to verify the identity between the substation and the master station, and the first information includes: a first identity identifier of the substation, initial verification information, a timestamp, and first verification information, the first identity identifier is the identity identifier of the substation in the current session, the initial verification information is the verification information assigned to the substation by the control background during the initialization stage through the identity identifier and the initial random number of the substation, the identity identifier of the substation is assigned to the substation by the control background during the initialization stage, and the initial random number is the random number of the substation determined by the control background during the initialization stage; receiving second information sent by the master station, wherein the second information is generated and sent to the substation when the master station verifies the first information, and the second information includes: the first identity mark, second data to be decrypted and second verification information; In response to successfully receiving the second information and verifying the second information, it is determined that the identity authentication of the substation and the master station is passed.

3. The method according to claim 2, characterized in that Before sending the first information to the master station, the method further includes: Selecting the first random number in a preset database and obtaining a timestamp, wherein the timestamp is used to represent a timestamp when the substation receives a request for transmitting a signal to be transmitted by the substation; Performing an XOR operation on the identity of the substation and the first random number to obtain first data to be decrypted; Obtaining the first verification information based on the initial verification information, the identity of the master station and the first random number; Obtaining the first identity based on the first data to be decrypted and the timestamp; The initial verification information, the timestamp, the first verification information, and the first identity identifier are aggregated to obtain the first information.

4. The method according to claim 2, characterized in that: The second data to be decrypted is obtained by the main station based on the first data to be decrypted and the second random number, the first data to be decrypted is obtained by the main station based on the first identity in the first information, the second random number is obtained by the main station from a preset database when the first identity is successfully verified, the second verification information is obtained by the main station based on the first random number, the second random number, the identity of the substation and the third data to be decrypted, and the third data to be decrypted is obtained by the main station based on the identity of the substation and the second random number.

5. The method according to claim 2, characterized in that: In response to the main station successfully verifying the timestamp and the first identity, it is determined that the main station successfully verifies the first information, and the main station obtains the second data to be decrypted, the third data to be decrypted and the second verification information.

6. The method according to claim 5, characterized in that The verification result of the first identity identifier is obtained by the main station based on the decrypted first random number, the first decrypted data and the decrypted first identity identifier, wherein, in response to the decrypted first random number being equal to the first random number, the first decrypted data being equal to the first data to be decrypted, and the decrypted first identity identifier being equal to the first identity identifier, the verification result of the first identity identifier is determined to be passed, and in response to the decrypted first random number not being equal to the first random number, or the first decrypted data not being equal to the first data to be decrypted, or the decrypted first identity identifier not being equal to the first identity identifier, the verification result of the first identity identifier is determined to be failed.

7. The method according to claim 2, characterized in that Verifying the second information includes: Obtaining a decrypted second random number based on the second data to be decrypted; Verifying the second verification information based on the decrypted second random number; In response to the second verification information being verified successfully, it is determined that the verification of the second information is successful.

8. The method according to claim 7, characterized in that Verifying the second verification information based on the decrypted second random number includes: Obtaining a decrypted second random number based on the first preset formula; Obtaining third decrypted data based on the decrypted second random number and a preset function; Performing an XOR operation on the first random number and the decrypted second random number to obtain a first operation result; Concatenating the first operation result and the identity of the substation to obtain a first concatenated result; Performing an XOR operation on the first concatenation result and the third decrypted data to obtain decrypted second verification information; In response to the decrypted second verification information being equal to the second verification information, determining that verification of the second verification information is passed; In response to the decrypted second verification information not being equal to the second verification information, it is determined that verification of the second verification information fails.

9. The method according to claim 1, characterized in that: Determining a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station includes: Decrypting the first data to be decrypted to obtain first decrypted data; Performing an XOR operation on the first decrypted data and the identity of the substation to obtain a second operation result; Performing a hash operation on the second operation result to obtain a first hash result; Concatenate the first hash result, the first random number, and the second random number to obtain a second concatenation result; Perform a hash operation on the second concatenation result to obtain the session key.

10. A signal processing device for a substation, applied to the substation, characterized in that: include: A verification module, configured to, in response to receiving a request for transmitting a signal to be transmitted of the substation, authenticate the identities of the substation and the master station based on the identity of the substation and the identity of the master station; A determination module, configured to determine, when the identity authentication of the substation and the master station is passed, a session key for data transmission between the master station and the substation based on a first random number corresponding to the substation and a second random number corresponding to the master station; A generating module, generating session information based on the session key and the signal to be transmitted; The sending module is used to send session information to the master station and receive a verification result sent by the master station, wherein the verification result is used to indicate whether the signal to be transmitted meets a preset standard.

Images