Load management terminal encryption communication method and system

Abstract

The invention discloses a load management terminal encryption communication method and system, and relates to the technical field of power load management terminal communication security, and the method comprises the steps: replacing a terminal communication pin through an encryption module, and completing the interface adaptation between a terminal and a master station and the initialization of a data encryption function; an encryption channel is dynamically established based on a national secret algorithm, secret key issuing and authentication are completed through a master station, and the confidentiality of two-way communication is optimized; and carrying out encryption transmission and integrity verification on the data packet, detecting a communication state, and triggering abnormal recovery or encryption channel reconstruction operation. According to the method provided by the invention, through the modular encryption design, large-scale replacement of the existing load management terminal is avoided, and the cost of encryption function upgrading is reduced; the automatic interface identification and encryption protocol loading function greatly reduces the complexity of manual configuration, so that the deployment of terminal encryption upgrading is more convenient and efficient.

Description

Technical Field

[0001] The present invention relates to the field of power load management terminal communication security technology, and in particular to a load management terminal encryption communication method and system. Background Art

[0002] With the continuous development of modern power systems, load management terminals (LMTs), as an important part of smart grids, play a key role in power load monitoring, regulation and management. Traditional load management terminals interact with the main station through communication modules to realize the collection, transmission and control of power consumption information. However, with the increasing requirements of power systems for network security and data integrity, traditional communication modules are vulnerable to security threats (such as data tampering and information leakage) during data transmission due to the lack of efficient encryption and authentication mechanisms. In recent years, countries have introduced mandatory encryption standards to improve the confidentiality of data transmission. However, a large number of existing load management terminals cannot directly meet these encryption requirements due to the lack of suitable encryption modules, resulting in a significant gap between the security performance of existing equipment and the development needs of modern power grids.

[0003] The existing load management terminal encryption communication technology mainly relies on the communication module natively integrated in the terminal, which is difficult to flexibly adapt to the security upgrade requirements. Most of the existing terminals are not equipped with dedicated security encryption chips, which makes it impossible to effectively prevent data tampering or theft during data transmission. The existing upgrade plan usually requires replacing the entire terminal equipment, which is costly and has a long implementation cycle. The existing technology has deficiencies in encryption channel establishment and key management, and cannot meet the requirements of modern power systems for dynamic key updates and two-way authentication, increasing the risk of key leakage. The existing technology does not provide sufficient support for data packet integrity verification and abnormal recovery. When communication is interrupted or fails, it is impossible to quickly detect and repair the communication link, affecting the stability and reliability of the system. Summary of the invention

[0004] In view of the above-mentioned problems, the present invention is proposed.

[0005] Therefore, the technical problems solved by the present invention are: the existing load management terminal communication method has the problem of insufficient data transmission security, high encryption function upgrade cost and lack of flexibility, imperfect key management and communication link stability, and how to achieve a low-cost, high-security and high-reliability load management terminal encryption communication method through modular encryption design.

[0006] To solve the above technical problems, the present invention provides the following technical solutions: a load management terminal encryption communication method, comprising replacing the terminal communication pin with an encryption module to complete the interface adaptation and data encryption function initialization between the terminal and the main station; dynamically establishing an encryption channel based on the national secret algorithm, completing key issuance and authentication through the main station, and optimizing the confidentiality of two-way communication; encrypting and transmitting data packets and performing integrity verification, detecting the communication status, and triggering abnormal recovery or reconstruction of the encryption channel operation.

[0007] As a preferred solution of the load management terminal encryption communication method described in the present invention, wherein: the replacement of the terminal communication pin by the encryption module includes using an embedded or external encryption module to replace the pin of the existing communication module of the terminal, using different communication interfaces, including UART, RS485 and Ethernet, the encryption module identifies the terminal communication interface type through the automatic detection function, and initializes the communication rate, baud rate and protocol parameters to complete the interface adaptation. After the encryption module is set up, the data encryption protocol and the configuration of the supported network format are automatically loaded to the terminal, including automatic selection of LTE_FDD, LTE_TDD, WCDMA and GSM networks.

[0008] As a preferred scheme of the load management terminal encryption communication method described in the present invention, wherein: the completion of the interface adaptation and data encryption function initialization between the terminal and the main station includes remotely configuring the main station IP address, port, heartbeat cycle and username and password through the host computer after the terminal and the encryption module complete the physical connection, and the encryption module has a preset status indicator light inside to display the terminal interface adaptation and encryption function initialization status, a red light indicates initialization failure, a green light indicates successful interface adaptation, and a flashing yellow light indicates that initialization is in progress. The encryption module supports a local reset function to reload the initial parameters through a reset operation.

[0009] As a preferred scheme of the load management terminal encryption communication method described in the present invention, wherein: the establishment of an encrypted channel includes the master station sending initial keys in batches to the encryption module through the platform device, and the national secret SM4 symmetric encryption algorithm is adopted in the key sending process. During the encryption channel establishment process, the encryption module verifies the digital signature and random challenge response of the master station, and performs channel identity authentication. After the key transmission is completed, the encryption module uses a dynamic key rotation mechanism to regularly update the session key in the channel.

[0010] As a preferred solution of the load management terminal encryption communication method described in the present invention, wherein: the key issuance and authentication completed by the master station includes that after the key issuance is completed, the encryption module stores the key in a security chip that complies with the national encryption standard to prevent key leakage due to external attacks. During the key update process, the master station transmits the new key to the encryption module through the VPN tunnel, the module verifies the transmitted data and replaces the old key. If illegal disassembly or module damage is detected, the encryption module deletes the key and related sensitive data through the hardware self-destruction mechanism to ensure key security.

[0011] As a preferred solution of the load management terminal encryption communication method described in the present invention, the encrypted transmission and integrity verification of the data packet include: before data transmission, the encryption module segments the data and encrypts each segment of data separately, and attaches a serial number to each segment of data so that the main station can reassemble it after receiving it. The encryption module performs an integrity check on the transmitted data packet. If an erroneous data packet is found, it is discarded and requested to be resent. In a high concurrency scenario, the encryption module uses hardware pipeline encryption technology to simultaneously process multi-channel data transmission.

[0012] As a preferred solution of the load management terminal encryption communication method described in the present invention, wherein: the triggering of abnormal recovery or reconstruction of the encryption channel operation includes that when a communication abnormality occurs, the encryption module automatically attempts to switch to a backup network format, or restores communication by rebuilding the encryption channel. After multiple recovery failures, the encryption module sends a detailed fault report to the master station, and the report content includes the module status, fault type and number of reconstruction attempts. After successful recovery, the encryption module reloads the latest communication parameters and sends a status signal of successful channel reconstruction to the master station.

[0013] Another object of the present invention is to provide a load management terminal encryption communication system, which can dynamically establish an encryption channel based on the national encryption algorithm, complete key issuance and authentication through the master station, optimize the confidentiality of two-way communication, and solve the current load management terminal communication technology containing encryption functions with high upgrade costs and lack of flexibility.

[0014] As a preferred solution of the load management terminal encryption communication system described in the present invention, it includes: an initialization module, an encryption authentication module, and an abnormality monitoring module; the initialization module is used to replace the terminal communication pin through the encryption module to complete the interface adaptation and data encryption function initialization between the terminal and the main station; the encryption authentication module is used to dynamically establish an encryption channel based on the national secret algorithm, complete the key issuance and authentication through the main station, and optimize the confidentiality of two-way communication; the abnormality monitoring module is used to encrypt and transmit data packets and perform integrity verification, detect the communication status, and trigger abnormal recovery or reconstruction of the encryption channel operation.

[0015] A computer device includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement a step of a load management terminal encryption communication method.

[0016] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a load management terminal encryption communication method.

[0017] Beneficial effects of the present invention: The load management terminal encryption communication method provided by the present invention avoids large-scale replacement of existing load management terminals through modular encryption design, and reduces the cost of upgrading encryption functions; the dynamic key management and encryption channel construction mechanism based on the national secret algorithm comprehensively optimizes the two-way communication security between the terminal and the main station, and effectively prevents data tampering and leakage; through segmented encryption, integrity verification and communication abnormality recovery functions, the stability of data transmission is ensured, and flexible adaptation capabilities are provided in complex communication environments. The automatic interface identification and encryption protocol loading functions greatly reduce the complexity of manual configuration, making the deployment of terminal encryption upgrades more convenient and efficient. The present invention achieves better results in terms of cost, efficiency and reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0019] Figure 1 An overall flow chart of a load management terminal encryption communication method provided for the first embodiment of the present invention.

[0020] Figure 2 An overall flow chart of a load management terminal encryption communication system provided for the third embodiment of the present invention. DETAILED DESCRIPTION

[0021] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0022] Example 1, reference Figure 1 , as an embodiment of the present invention, provides a load management terminal encryption communication method, comprising:

[0023] S1: Replace the terminal communication pins with the encryption module to complete the interface adaptation and data encryption function initialization between the terminal and the main station.

[0024] Furthermore, replacing the terminal communication pins through the encryption module includes using an embedded or external encryption module to replace the pins of the existing communication module of the terminal, and using different communication interfaces, including UART, RS485 and Ethernet. The encryption module identifies the terminal communication interface type through the automatic detection function, and initializes the communication rate, baud rate and protocol parameters to complete the interface adaptation. After the encryption module is set up, it automatically loads the data encryption protocol and the configuration of the supported network format to the terminal, including automatic selection of LTE_FDD, LTE_TDD, WCDMA and GSM networks.

[0025] It should be noted that the completion of the interface adaptation and data encryption function initialization between the terminal and the main station includes remotely configuring the main station IP address, port, heartbeat cycle and username and password through the host computer after the terminal and the encryption module are physically connected. The encryption module has a preset status indicator to display the terminal interface adaptation and encryption function initialization status. The red light indicates initialization failure, the green light indicates successful interface adaptation, and the flashing yellow light indicates initialization in progress. The encryption module supports local reset function to reload the initial parameters through the reset operation.

[0026] It should also be noted that an embedded or external encryption module is used to replace the pins of the existing communication module, supporting multiple communication interfaces such as UART, RS485 and Ethernet. The module identifies the type of communication interface through the automatic detection function, initializes the communication rate, baud rate and protocol parameters, and automatically loads the data encryption protocol and supported network standards (such as LTE_FDD, LTE_TDD, WCDMA and GSM), thereby realizing the interface adaptation between the terminal and the main station and the initialization of the data encryption function. The communication security performance can be upgraded without large-scale replacement of terminal equipment. The modular design reduces the upgrade cost, improves the adaptation flexibility, and adapts to the diversity and complexity of the existing load management terminals. In addition, the module supports automatic network selection and encryption protocol loading, reduces manual intervention, and improves deployment efficiency.

[0027] S2: Dynamically establish an encrypted channel based on the national encryption algorithm, complete key distribution and authentication through the master station, and optimize the confidentiality of two-way communication.

[0028] Furthermore, establishing an encryption channel includes the master station sending initial keys in batches to the encryption module through the platform device. The national secret SM4 symmetric encryption algorithm is used in the key sending process. During the encryption channel establishment process, the encryption module verifies the digital signature and random challenge response of the master station and performs channel identity authentication. After the key transmission is completed, the encryption module uses a dynamic key rotation mechanism to regularly update the session key in the channel.

[0029] It should be noted that the key distribution and authentication are completed through the master station. After the key distribution is completed, the encryption module stores the key in a security chip that meets the national encryption standards to prevent key leakage due to external attacks. During the key update process, the master station transmits the new key to the encryption module through the VPN tunnel. The module verifies the transmitted data and replaces the old key. If illegal disassembly or module damage is detected, the encryption module deletes the key and related sensitive data through the hardware self-destruction mechanism to ensure key security.

[0030] It should also be noted that the national secret SM4 symmetric encryption algorithm is used, and the master station sends initial keys in batches to the encryption module through the platform equipment, and completes identity authentication processes such as random challenge response. Subsequently, the session keys in the channel are regularly updated through the dynamic key rotation mechanism, and the secure encryption channel construction and key management between the terminal and the master station are realized, ensuring the confidentiality and integrity of data transmission. The dynamic key update mechanism can prevent security risks caused by long-term non-replacement of keys. The random challenge response mechanism enhances the channel's anti-attack capability, effectively improves the security of the communication link, and enhances the security and credibility of communication between the load management terminal and the master station, solving the problem that static key management in the existing technology is easily cracked. At the same time, through the dynamic update mechanism, the risk of key leakage is further reduced, and the confidentiality of two-way communication is optimized.

[0031] S3: Encrypt transmission and integrity check of data packets, detect communication status, and trigger abnormal recovery or reconstruction of encryption channel operations.

[0032] Furthermore, the encrypted transmission and integrity check of the data packets include the encryption module segmenting the data and encrypting each segment separately before data transmission, attaching a serial number to each segment so that the master station can reassemble it after receiving it, and the encryption module performing integrity check on the transmitted data packet. If an erroneous data packet is found, it is discarded and requested to be resent. In high-concurrency scenarios, the encryption module uses hardware pipeline encryption technology to simultaneously handle multiple data transmissions.

[0033] It should be noted that triggering abnormal recovery or rebuilding the encryption channel operation includes when a communication abnormality occurs, the encryption module automatically attempts to switch to the backup network format, or restores communication by rebuilding the encryption channel. After multiple recovery failures, the encryption module sends a detailed fault report to the master station. The report content includes the module status, fault type and number of reconstruction attempts. After successful recovery, the encryption module reloads the latest communication parameters and sends a status signal of successful channel reconstruction to the master station.

[0034] It should also be noted that before data transmission, the data is segmented and each segment is encrypted separately, and a serial number is attached so that the main station can reassemble it after receiving it. The encryption module performs an integrity check on each data packet. If an erroneous data packet is found, it is discarded and the transmission is requested again. When communication is abnormal, the module automatically switches to the backup network format or rebuilds the encryption channel, and sends a fault report to the main station after multiple recovery failures, thereby realizing the secure transmission and integrity check of encrypted data packets, as well as the rapid recovery and fault notification functions after communication abnormalities. Segmented encryption improves the efficiency of large data packet transmission, and the integrity check ensures the authenticity and reliability of the data. The abnormal recovery mechanism reduces the impact of communication interruptions on system operation, and the fault reporting function provides a basis for system maintenance and diagnosis, enhances the security and stability of data transmission, and solves the problem of data loss caused by communication interruptions in the prior art. In addition, the abnormal recovery and reconstruction mechanism shortens the recovery time of communication failures and improves the overall reliability and availability of the system.

[0035] Embodiment 2 is an embodiment of the present invention, which provides a load management terminal encryption communication method. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through economic benefit calculation and simulation experiments.

[0036] First, 50 load management terminals are configured in 10 groups. Each group of terminals is installed with different forms of encryption modules (embedded or external). The encryption module connects to the physical interface of the terminal through the automatic detection function, identifies the terminal interface type, and initializes the communication rate and baud rate to complete the interface adaptation. All terminals are remotely configured through the host computer, including the master station IP address, communication port, heartbeat cycle, user name and password. The status indicator of the encryption module displays the interface adaptation and encryption function initialization status respectively. After completing the physical connection between the terminal and the encryption module, the communication parameters between the terminal and the master station are configured through the host computer. After the interface adaptation is successful, the green light is on, and if the adaptation fails, the red light is on. All modules reload the initialization parameters through the reset function to ensure successful adaptation. The adaptation success rate of the 10 groups of equipment is recorded in the data table. The initial keys are sent in batches to the encryption module through the main station equipment, using the SM4 symmetric encryption algorithm. During the key transmission process, the encryption module verifies the digital signature and random challenge response of the main station, completes identity authentication, and records the key transmission time. The established encryption channel is regularly updated through a dynamic key rotation mechanism. Each group of terminals transmits 100 simulated data packets to the main station, which contain sensor data, load status, and control instructions. The encryption module performs segmented encryption and integrity verification on each data packet, and attaches a serial number to facilitate the main station to reorganize the data. If an erroneous data packet is found, a retransmission is requested immediately. Under the conditions of simulated communication abnormalities (such as signal loss and network switching), the encryption module automatically switches to the backup network or attempts to rebuild the encryption channel. If the recovery fails, the encryption module sends a fault report to the main station, including the module status, fault type, and number of reconstruction attempts.

[0037] The encryption module transmits the key through the SM4 encryption algorithm, with an average transmission time of about 12.5ms and high stability (standard deviation is less than 1ms). The prior art does not use a dedicated encryption chip or a dynamic key update mechanism, and the key transmission speed and security are poor. The dynamic key rotation mechanism of the present invention improves the anti-attack capability of the communication, and the success rate of the data packet integrity check is above 99%, proving that the segmented encryption and error data packet retransmission mechanisms can significantly improve the reliability of data transmission. Compared with the high bit error rate in the prior art, the design of the present invention can better ensure the accuracy of data transmission. In the simulation test of communication interruption, the average communication recovery time of the encryption module is 35ms, and the channel reconstruction success rate is as high as above 98%. The prior art often has a long-term communication interruption problem during network switching, and the present invention effectively solves this problem through the backup network switching and fast channel reconstruction functions. Compared with the prior art, the present invention can realize the encryption upgrade of the load management terminal at a lower cost, and at the same time has significant improvements in communication security, data transmission reliability and abnormal recovery capability.

[0038] Example 3, reference Figure 2, as an embodiment of the present invention, provides a load management terminal encryption communication system, including an initialization module, an encryption authentication module, and an abnormality monitoring module.

[0039] The initialization module is used to replace the terminal communication pin through the encryption module to complete the interface adaptation and data encryption function initialization between the terminal and the main station; the encryption authentication module is used to dynamically establish an encryption channel based on the national encryption algorithm, complete the key issuance and authentication through the main station, and optimize the confidentiality of two-way communication; the abnormal monitoring module is used to encrypt the transmission and integrity verification of data packets, detect the communication status, and trigger abnormal recovery or reconstruction of the encryption channel operation.

[0040] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0041] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0042] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering, or processing in another suitable manner as necessary, and then stored in a computer memory.

[0043] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc. It should be noted that the above embodiments are only used to illustrate the technical solution of the present invention and are not limited. Although the present invention is described in detail with reference to the preferred embodiments, it should be understood by those skilled in the art that the technical solution of the present invention can be modified or replaced by equivalents without departing from the spirit and scope of the technical solution of the present invention, which should be included in the scope of the claims of the present invention.

[0044] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A load management terminal encryption communication method, characterized in that: include: The terminal communication pins are replaced by encryption modules to complete the interface adaptation and data encryption function initialization between the terminal and the main station; Dynamically establish an encrypted channel based on the national secret algorithm, complete key distribution and authentication through the master station, and optimize the confidentiality of two-way communication; Encrypt data packets for transmission and integrity verification, detect communication status, and trigger abnormal recovery or rebuild encryption channel operations.

2. The load management terminal encryption communication method according to claim 1, characterized in that: The method of replacing the terminal communication pins with an encryption module includes replacing the pins of the existing communication module of the terminal with an embedded or external encryption module, and using different communication interfaces, including UART, RS485 and Ethernet. The encryption module identifies the terminal communication interface type through an automatic detection function, and initializes the communication rate, baud rate and protocol parameters to complete the interface adaptation. After the encryption module is set up, the data encryption protocol and the configuration of the supported network format are automatically loaded to the terminal, including automatic selection of LTE_FDD, LTE_TDD, WCDMA and GSM networks.

3. The load management terminal encryption communication method according to claim 2, characterized in that: The completion of the interface adaptation and data encryption function initialization between the terminal and the main station includes remotely configuring the main station IP address, port, heartbeat cycle and username and password through the host computer after the terminal and the encryption module are physically connected. The encryption module has a preset status indicator light inside to display the terminal interface adaptation and encryption function initialization status. The red light indicates initialization failure, the green light indicates successful interface adaptation, and the flashing yellow light indicates that initialization is in progress. The encryption module supports a local reset function to reload the initial parameters through a reset operation.

4. The load management terminal encryption communication method according to claim 3, characterized in that: The establishment of the encryption channel includes the main station sending initial keys in batches to the encryption module through the platform device. The national secret SM4 symmetric encryption algorithm is used in the key sending process. During the encryption channel establishment process, the encryption module verifies the digital signature and random challenge response of the main station, and performs channel identity authentication. After the key transmission is completed, the encryption module uses a dynamic key rotation mechanism to regularly update the session key in the channel.

5. The load management terminal encryption communication method according to claim 4, characterized in that: The key issuance and authentication completed through the master station includes that after the key issuance is completed, the encryption module stores the key in a security chip that meets the national encryption standard to prevent key leakage due to external attacks. During the key update process, the master station transmits the new key to the encryption module through the VPN tunnel. The module verifies the transmitted data and replaces the old key. If illegal disassembly or module damage is detected, the encryption module deletes the key and related sensitive data through the hardware self-destruction mechanism to ensure key security.

6. The load management terminal encryption communication method according to claim 5, characterized in that: The encrypted transmission and integrity check of the data packet include that before data transmission, the encryption module segments the data and encrypts each segment of data separately, attaches a serial number to each segment of data so that the main station can reassemble it after receiving it, and the encryption module performs an integrity check on the transmitted data packet. If an erroneous data packet is found, it is discarded and requested to be resent. In a high-concurrency scenario, the encryption module uses hardware pipeline encryption technology to simultaneously process multi-channel data transmission.

7. The load management terminal encryption communication method according to claim 6, characterized in that: The operation of triggering abnormal recovery or rebuilding the encrypted channel includes that when a communication abnormality occurs, the encryption module automatically attempts to switch to a backup network format, or restores communication by rebuilding the encrypted channel. After multiple recovery failures, the encryption module sends a detailed fault report to the main station. The report content includes the module status, fault type and number of reconstruction attempts. After successful recovery, the encryption module reloads the latest communication parameters and sends a status signal of successful channel reconstruction to the main station.

8. A system using the load management terminal encryption communication method according to any one of claims 1 to 7, characterized in that: Including initialization module, encryption authentication module, and abnormality monitoring module; The initialization module is used to replace the terminal communication pin through the encryption module to complete the interface adaptation between the terminal and the main station and the initialization of the data encryption function; The encryption authentication module is used to dynamically establish an encryption channel based on the national encryption algorithm, complete key issuance and authentication through the master station, and optimize the confidentiality of two-way communication; The abnormality monitoring module is used to encrypt transmission and integrity check of data packets, detect communication status, and trigger abnormal recovery or reconstruction of encrypted channel operations.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the load management terminal encryption communication method described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the load management terminal encryption communication method described in any one of claims 1 to 7 are implemented.

Images