A method and system for secure interaction of AR glasses with power metering devices

Abstract

This invention discloses a secure interaction method and system for AR glasses and power metering devices, belonging to the field of communication security technology. It utilizes a dual-link collaborative communication mechanism between AR glasses and a mobile terminal, employing a dual-link communication and encryption mechanism that combines Bluetooth and WiFi in parallel. For different data types and real-time requirements, it dynamically selects and switches the optimal combination of encryption algorithms. While ensuring absolute security isolation within the power intranet, it achieves real-time, secure, and efficient interaction between external network AR devices and internal network metering devices. This effectively solves the core pain points of existing technologies, such as single encryption methods, broken link switching, insufficient performance adaptation, weak key management, and inadequate internal and external network security isolation, achieving a balance between security, real-time performance, reliability, and ease of use.

Description

Technical Field

[0001] This invention belongs to the field of communication security technology, specifically relating to a secure interaction method and system for AR glasses and power metering devices. Background Technology

[0002] Currently, State Grid's on-site operations generally use a mobile phone + back clip method to interact with power metering devices. The mobile phone can automatically read meter data, advance business processes, create customer files, and access collected information. At the same time, the secure communication module in the back clip provides a secure channel for data interaction between internal and external networks, reducing the time required for on-site operations. This method improves operational efficiency and data accuracy to a certain extent.

[0003] However, the combination of mobile phone and back clip also has some drawbacks: First, the traditional "mobile phone + back clip" interaction method is relatively fragmented, requiring frequent switching between holding the phone and the back clip, which cannot free up the hands; second, it requires repeatedly looking down at the screen during on-site operations, posing a safety hazard; third, the data presentation method is mainly limited to two-dimensional, and cannot be integrated with physical devices in real time for AR virtual-real fusion display; fourth, in complex power scenarios, retrieving drawings requires manual searching, resulting in low information acquisition efficiency, and the back clip has a single function, making it difficult to meet the needs of multi-tasking, parallel and complex environment operations.

[0004] AR glasses typically function as a mobile computing and virtual reality display device, connecting to the enterprise's external network or the internet via common wireless communication methods such as Wi-Fi, cellular networks (4G / 5G), and WIFI; essentially, they are "external network devices." In contrast, power metering devices, their associated acquisition terminals and concentrators, and even the entire power information intranet, constitute a "closed intranet environment" requiring extremely high security and isolation. Data interaction between these two systems faces severe and unique security architectural challenges.

[0005] Therefore, there is an urgent need for a power safety interaction architecture and method for AR smart glasses innovation, which can legally, in a controlled and minimal manner empower authorized AR glasses to access and interact while ensuring the absolute security isolation of the power intranet, enabling them to securely obtain necessary data and guide operations, while strictly preventing any form of power data leakage or network attack infiltration. Summary of the Invention

[0006] The purpose of this invention is to provide a secure interaction method and system for AR glasses and power metering devices, so as to solve the problem of secure interaction between AR glasses as an external network device and the internal network environment where the power metering device is located.

[0007] To achieve the above objectives, the present invention adopts the following technical solution: A secure interaction method for AR glasses and power metering devices includes the following steps: A dual-link wireless collaborative communication link is established between AR glasses and a mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. The AR glasses and mobile terminal exchange device hardware identity features and temporary public keys for encryption, and perform dual authentication based on the device hardware identity features and the file information in the intranet system database; After authentication, a seed key is generated based on the device hardware identity features and dynamic token value, and a control key and a data key are derived through a key derivation function. The control key is used for data encryption of the Bluetooth link, and the data key is used for data encryption of the WiFi link. The AR glasses are used to send interactive task instructions to the power metering device and transmit them to the mobile terminal via dual-link wireless cooperative communication. The mobile terminal then forwards the interactive task instructions to the clip-on device. The mobile terminal transmits encrypted interactive task commands, which take into account the power communication protocol, to the power metering device via a back clip device. The AR glasses receive the response data from the power metering device and perform data integrity verification. After temporarily storing and encrypting the response data, they are synchronized to the mobile terminal for storage.

[0008] Furthermore, the device hardware identity features include the mobile terminal IMEI number and the AR glasses SN number, and the temporary public key is generated based on the ECC secp256r1 curve.

[0009] Furthermore, the controlled class data of the Bluetooth link is encrypted with SM4 and transmitted in BLE data packet format; The video data on the WiFi link is encrypted in segments and transmitted in packets.

[0010] Furthermore, the controlled data includes instructions, parameters, status, and business information, with a data size ≤ 1MB; The video data includes video streams and 3D model information, with a data size of ≥1MB.

[0011] Furthermore, when the AR glasses and the mobile terminal are out of communication range or the user actively disconnects, a communication termination process is triggered, and both parties simultaneously send a key destruction command.

[0012] Furthermore, the dual-link wireless collaborative communication between the AR glasses and the mobile terminal also includes link quality monitoring, including collecting dual-link Bluetooth RSSI values, WiFi packet loss rate and latency parameters. When the Bluetooth RSSI value or WiFi packet loss rate is ≥5%, a breakpoint resume mechanism is triggered.

[0013] Furthermore, safety certification is performed on the back clamp device and the power metering device; The safety certification of the power metering device includes infrared certification and identity authentication of the power metering device.

[0014] Furthermore, the AR glasses encrypt the temporarily stored response data using AES-256 encryption. The key is randomly generated by the AR glasses chip, and the collected timestamp is used to encrypt the response data to generate encrypted data blocks.

[0015] Furthermore, the AR glasses synchronize the encrypted data block, AR glasses SN number and timestamp to the operating terminal mobile phone, and the synchronization data frame carries a CRC32 check code; After receiving the data, the work terminal first verifies the CRC32. If the data is confirmed to be unaltered, it temporarily stores it in the work terminal's local secure storage area and returns a synchronization success frame. If synchronization fails, a retransmission mechanism is triggered.

[0016] Secondly, a secure interaction system for AR glasses and power metering devices is provided, including: Dual-link communication module: used to establish a dual-link wireless collaborative communication link between AR glasses and mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. Identity authentication module: used to encrypt the hardware identity features of the AR glasses and the mobile terminal with a temporary public key, and to perform dual identity authentication based on the hardware identity features of the device and the file information in the intranet system database; Encryption module: After successful authentication, it generates a seed key based on the device hardware identity characteristics and dynamic token value, and derives a control key and a data key through a key derivation function. The control key is used for data encryption of the Bluetooth link, and the data key is used for data encryption of the WiFi link. Command issuing module: used to issue interactive task commands for the power metering device using the AR glasses and transmit them to the mobile terminal via dual-link wireless collaborative communication with encryption; the mobile terminal forwards the interactive task commands to the clip-on device. Command transmission module: used by the mobile terminal to encrypt and transmit interactive task commands that take into account the power communication protocol to the power metering device via a back clip device; Receiving module: Used by the AR glasses to receive response data from the power metering device and perform data integrity verification, and to temporarily encrypt and synchronize the response data to the mobile terminal storage.

[0017] Compared with the prior art, the present invention has the following beneficial technical effects: This invention provides a secure interaction method between AR glasses and power metering devices. Through a dual-link collaborative communication mechanism between the AR glasses and the mobile terminal, it achieves real-time, secure, and efficient interaction between external network AR devices and internal network metering devices while ensuring absolute security isolation within the power intranet. This effectively solves the core pain points of existing technologies, such as single encryption methods, broken link switching, insufficient performance adaptation, weak key management, and inadequate internal and external network security isolation. It achieves a balance between security, real-time performance, reliability, and ease of use. Specific functions and effects are as follows: 1) Significantly improved efficiency and accuracy of on-site measurement operations: The application of AR glasses for real-time interaction with measurement devices significantly enhances the intuitiveness and convenience of operation, and optimizes the on-site operation experience.

[0018] 2) Construct an end-to-end dynamic protection system: Through technologies such as dynamic key management and link quality monitoring, the risk of leakage caused by static keys or long-term valid keys is fundamentally avoided, while solving the problem of secure data interaction between external network devices and metering devices.

[0019] 3) Facilitating the intelligent upgrading of the power grid: It provides a feasible technical path for the safe implementation of "artificial intelligence +" in power field operations, promotes the transformation of traditional operation and maintenance mode to intelligence, visualization and interactivity, and is an important technical support for building a new power system and improving the quality and efficiency of power supply services.

[0020] This invention designs a dual-link communication and encryption mechanism that allows Bluetooth and WiFi to operate in parallel. It dynamically selects and switches the optimal combination of encryption algorithms to address different data types and real-time requirements. On one hand, the Bluetooth and WiFi dual links are dynamically scheduled according to data type, ensuring high-security transmission of controlled data such as instructions and parameters while also satisfying the smooth presentation of high-bandwidth data such as video streams and 3D models. This completely solves the security risks of fragmented operation and the need to repeatedly look down at the screen in the traditional "phone + clip" mode. On the other hand, based on the device hardware identity characteristics and a multi-level authentication and dynamic key management mechanism using dynamic tokens, an end-to-end dynamic protection system is constructed from the mobile application layer to the metering device layer. This effectively avoids the risk of key interception during transmission and fundamentally solves the security architecture challenges faced when external network devices interact with internal network metering devices. Simultaneously, combined with link quality monitoring, breakpoint resumption, local data encryption storage, and edge synchronization mechanisms, it significantly improves the reliability, data integrity, and operational efficiency of multi-task parallel operation in complex power scenarios, providing a feasible technical path for the intelligent and visual transformation of power grid field operations. Attached Figure Description

[0021] Figure 1 This is a flowchart of a secure interaction method between AR glasses and a power metering device according to an embodiment of the present invention; Figure 2 A flowchart illustrating the safe interaction process between AR glasses and an electricity metering device; Figure 3 This is a schematic diagram of the overall technical roadmap; Figure 4 This is a schematic diagram of a dual-link collaborative wireless encrypted secure communication method. Figure 5 This is a schematic diagram of the homepage of a real-time interactive edge application based on AR glasses. Figure 6 This is the homepage image based on the "AR + clip" operation function; Figure 7 This is a schematic diagram of the electricity meter reading function based on "AR + back clip"; Figure 8 This is a first schematic diagram of the real-time interactive terminal function based on AR glasses; Figure 9 This is a second schematic diagram of the real-time interactive terminal function based on AR glasses; Figure 10 This is a third schematic diagram of the real-time interactive edge function based on AR glasses. Detailed Implementation

[0022] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0023] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0024] It should be noted that the terms "first" and "second" in the specification and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be used interchangeably where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0025] Definitions: Electricity metering device: An electricity metering device is a measuring instrument used to measure and record the amount of electricity generated, supplied (mutually supplied) electricity, plant power consumption, line loss electricity, and user power consumption. It consists of an electricity meter (active and reactive electricity meter, maximum demand meter, multi-rate electricity meter, etc.), metering transformers (including voltage transformers and current transformers), and secondary connecting wires.

[0026] AR glasses (Augmented Reality Glasses): These are smart wearable devices that combine the real world and the virtual world by using technologies such as augmented reality, audio-visual fusion, and waveguide lenses to collect data from real-world scenes through cameras and sensors.

[0027] The present invention will now be described in further detail with reference to the accompanying drawings: like Figure 1 As shown, a secure interaction method for AR glasses and power metering devices includes the following steps: Step 1: Establish a dual-link wireless collaborative communication link between the AR glasses and the mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. Specifically, such as Figure 4 As shown, a dual-link connection is established. The AR glasses and the mobile terminal are quickly paired via Bluetooth, triggering the simultaneous activation of both Bluetooth and WiFi links. The Bluetooth link establishes a controlled connection (commands, parameters, business data), while the WiFi link establishes a non-core data video connection.

[0028] Dual-link coordinated transmission includes: 1) Bluetooth link: Controlled data is encrypted with SM4 and transmitted in BLE data packet format; 2) WiFi Link: Video data uses "segmented encryption + packet transmission". Each data segment (1MB) is encrypted using a selected algorithm, and a link identifier and sequence number are appended. It is transmitted via WiFi 6 technology. The receiving end verifies the HMAC value using the integrity verification key Kv. If the verification fails, the link quality monitoring module is triggered to re-evaluate, and the encryption algorithm is switched synchronously or a link switch is initiated.

[0029] AR communication data is classified using data splitting: Controlled data (instructions, parameters, status, business information): data size ≤ 1MB, high priority, high security requirements, transmitted via Bluetooth link; Video data (video streams, 3D models): data size ≥ 1MB, high bandwidth requirements, low security requirements, transmitted via WiFi link.

[0030] Step 2: The AR glasses and mobile terminal exchange device hardware identity features and temporary public keys for encryption, and perform dual authentication based on the device hardware identity features and the file information in the intranet system database. Among them, the device hardware identity features include the mobile terminal IMEI number and the AR glasses SN number, and the temporary public key is generated based on the ECCsecp256r1 curve.

[0031] The mobile terminal uses the SM2 algorithm, employing a combination of temporary public key and digital signature for verification. It also compares the identity features of the AR glasses and the mobile terminal (mobile terminal IMEI number, AR glasses SN number) with the "one terminal, one pair of glasses" profile in the internal network system database. Successful dual verification completes identity authentication. Figure 4 As shown.

[0032] Step 3: After successful authentication, a seed key is generated based on the device hardware identity features and dynamic token value. A control key and a data key are then derived through a key derivation function. The control key is used for data encryption on the Bluetooth link, and the data key is used for data encryption on the WiFi link. The key management module generates a seed key based on hardware identity (IMEI number of the operating terminal mobile phone, SN number of the AR glasses), the dynamic token value of the iGuowang account, and a timestamp. It then derives two types of 128-bit SM4 keys through a key derivation function based on SM3 hashing (HKDF-SM3); 1) Control key Kc: used for encrypting Bluetooth link control information; 2) Data key... Used for WiFi link data encryption. After completing SM2 two-way authentication, the sender uses the receiver's SM2 public key to encrypt Kc, The Kc ciphertext is encrypted separately and transmitted via Bluetooth. The encrypted message is transmitted via a WiFi link. The receiver uses its own SM2 private key to decrypt and obtain the corresponding key. After transmission is complete, both parties synchronize the key index, and the seed key is immediately destroyed.

[0033] When the AR glasses and the mobile phone go out of communication range or the user actively disconnects, the communication termination process is triggered; both parties simultaneously send a key destruction command, and the hardware encryption chip immediately clears the Kc from memory. The seed key and destruction log are stored in the secure partition after being signed with SM2; when both links are disconnected at the same time, the Bluetooth and WiFi modules return to their initial state to avoid residual security risks.

[0034] Based on data type and real-time requirements, dual links are dynamically scheduled for data transmission, and link quality is monitored in real time. When link quality falls below a threshold, interrupted transmission resumes or link switching is triggered. Link quality monitoring specifically includes: By collecting real-time parameters such as dual-link Bluetooth RSSI value, WiFi packet loss rate, and latency, when the quality of a link falls below a threshold (Bluetooth RSSIm or WiFi packet loss rate ≥5%), the link quality monitoring module immediately triggers the breakpoint resumption mechanism. When the Bluetooth link is abnormal, the Bluetooth resumption mechanism is automatically triggered. If it fails three times in a row, the system will provide real-time feedback to the user to prompt manual intervention due to the Bluetooth abnormality. When the link is restored, the system will automatically switch back to the original link mode, regenerate the key and synchronize it, and the old key will immediately become invalid.

[0035] Step 4: Use AR glasses to send interactive task instructions to the power metering device and transmit them to the mobile terminal via dual-link wireless collaborative communication. The mobile terminal then forwards the interactive task instructions to the clip-on device. Step 5: The mobile terminal transmits encrypted interactive task instructions, which take into account the power communication protocol, to the power metering device via a back clip device. Step six: The AR glasses receive the response data from the power metering device and perform data integrity verification. The response data is temporarily encrypted and then synchronized to the mobile terminal for storage.

[0036] In a preferred embodiment of the present invention, a secure interaction method for AR glasses and power metering devices is provided, the overall technical approach being as follows: Figure 3 As shown: The iGuowang platform APP is deployed and installed on the mobile phone to enable the deployment and application of AR micro-application functions. At the same time, the back clip APP control SDK is installed on the mobile phone, and command interaction between the mobile phone and the back clip device is realized through encrypted Bluetooth communication. The AR glasses, as an external display device of the mobile phone, present the functions of the AR micro-application in a virtual reality combination. At the same time, a dual-link collaborative secure encrypted communication method is used to realize the dual-link connection between the AR glasses and the mobile phone at the operation terminal. Finally, through the secure interaction method between the AR glasses and the metering device, communication commands are sent to call the back clip APP control SDK. By controlling the infrared module of the back clip hardware device to communicate with the infrared module of the metering device, secure data and command interaction between the back clip hardware device and the metering device is realized.

[0037] This embodiment also provides a method for safe interaction between AR glasses and a metering device, using the reading of electricity meter data through AR glasses as a typical scenario, to illustrate the safe interaction process between AR glasses and the metering device, as shown in the schematic diagram. Figure 2 As shown, the details are as follows: (1) AR glasses micro-application, obtains communication protocol and energy meter file information to be set, calls back clip APP control SDK, passes parameters according to interface definition, starts operation permission authentication task, and sends authentication request frame message; (2) Authentication task data parsing to determine whether security authentication has been completed. If the back clip APP has not been authenticated within a short period of the day, back clip identity security authentication is required. This involves verifying the validity of the back clip through operations such as back clip APP key distribution, identity authentication, and initial encryption processing. If so, proceed to the next step and perform meter reading. (3) Determine whether the electricity meter control authentication has been completed. If not, proceed with the electricity meter operation control authorization authentication process. If yes, continue to the next step and perform the meter reading operation. (4) Electricity meter operation permission authentication process, realize the acquisition of electricity meter permissions, generate electricity meter permissions through interaction with the encryption machine, including infrared authentication permissions and identity authentication permissions, supporting 645 protocol and 698 protocol; complete infrared interaction authentication with electricity meter; complete identity authentication with electricity meter, of which 645 protocol is used for identity authentication and 698 protocol is used for key negotiation; (5) Initiate the meter reading task, transmit the meter communication address, meter number, MAC address, parameter type and meter reading data through the infrared module between the back clip hardware and the meter, and use the 645 protocol or 698 protocol for encrypted data transmission and parameter distribution. (6) Data frame reception preprocessing, reassemble the fragmented data (sorted according to fragment identifier), and verify data integrity after completion; if there is packet loss (a fragment is not received within a timeout period of 500ms), a retransmission request frame (instruction code 0x02, carrying the missing fragment sequence number) is sent, and the energy meter retransmits only the corresponding missing fragment through the back clip hardware and the back clip APP control SDK. (7) Data parsing and processing: extract the timestamp and data body from the data frame, and parse the data of each data item in the data body according to the collection item identifier; (8) After receiving the confirmation feedback and completing the preprocessing, the AR glasses assemble the confirmation frame [frame header 0xAA + AR device ID + instruction code 0x03 (identifying the confirmation of receipt) + reception status (1 byte, 0x00 indicates success, 0x01 indicates data error) + checksum + frame tail 0x55], and the AR glasses send the confirmation frame to the electricity meter; after the electricity meter receives the confirmation frame, if the status is 0x01, it triggers the data retransmission mechanism, and retransmits a maximum of 3 times with an interval of 1000ms; (9) Local data temporary storage encryption processing: AR glasses encrypt the temporary storage data with AES-256. The key is randomly generated by the AR glasses chip. The pre-processed valid data and the collection timestamp are encrypted to generate encrypted data blocks. (10) Internal synchronization of edge nodes: The AR glasses synchronize the encrypted data block, AR glasses SN number and timestamp to the work terminal mobile phone through the Bluetooth 5.3 module. The synchronization data frame carries the CRC32 check code. After receiving the data, the work terminal mobile phone first checks the CRC32. After confirming that the data has not been tampered with, it temporarily stores it in the local secure storage area of ​​the work terminal mobile phone and returns a synchronization success frame. If the synchronization fails (verification fails or transmission timeout), the retransmission mechanism is triggered (up to 3 retransmissions with an interval of 1000ms).

[0038] The present invention also provides a secure interaction system for AR glasses and power metering devices, comprising: Dual-link communication module: used to establish a dual-link wireless collaborative communication link between AR glasses and mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. Identity authentication module: used to encrypt the hardware identity features of the AR glasses and the mobile terminal with a temporary public key, and to perform dual identity authentication based on the hardware identity features of the device and the file information in the intranet system database; Encryption module: After successful authentication, it generates a seed key based on the device hardware identity characteristics and dynamic token value, and derives a control key and a data key through a key derivation function. The control key is used for data encryption of the Bluetooth link, and the data key is used for data encryption of the WiFi link. Command issuing module: used to issue interactive task commands for the power metering device using the AR glasses and transmit them to the mobile terminal via dual-link wireless collaborative communication with encryption; the mobile terminal forwards the interactive task commands to the clip-on device. Command transmission module: used by the mobile terminal to encrypt and transmit interactive task commands that take into account the power communication protocol to the power metering device via a back clip device; Receiving module: Used by the AR glasses to receive response data from the power metering device, perform data integrity verification, temporarily store and encrypt the response data, and then synchronize it to the mobile terminal storage. The technical solution of this invention has been practically applied, as detailed below. Figures 5-10 As shown, where, Figure 5 This is the homepage image of the power metering line loss operation function based on AR glasses. It is aimed at the transformer area manager user and provides access to functions such as transformer area list, high loss, negative loss, supervision order, abnormal order, verification order, abnormal user, and line loss processing function. Figure 6 This provides an entry diagram for the interaction and safe operation functions between AR glasses and power metering devices, offering operations such as reading and clock synchronization for power metering devices (electricity meters, data acquisition terminals) based on "AR + clip-on". Figure 7This is a schematic diagram of the AR glasses-based meter reading function interface, which realizes the barcode scanning, asset verification, and meter reading operations of the electricity meter based on "AR + back clip". Figure 8 This is a schematic diagram of the AR glasses-based metering device abnormal user query function interface. The AR glasses can be used to query the details of all metering device abnormal users under the employee's management, and the abnormal user processing operation can be accessed from the list. Figure 9 This is a schematic diagram of the user power consumption query function based on AR glasses. Users can use AR glasses to query the user's daily power consumption over the past month. Figure 10 This is a schematic diagram of the user load query function interface based on AR glasses. Users can use AR glasses to query the load curve of a user at 15-minute intervals over a past 24 hours.

[0039] In summary, this invention innovatively proposes a method for real-time interaction and end-side safety operation based on AR glasses and power metering devices, specifically including two technical innovations: 1) A dual-link collaborative wireless encrypted secure communication method for "AR glasses + mobile phone" is proposed. A dual-link communication and encryption mechanism with Bluetooth and WiFi working in parallel is designed. The optimal combination of encryption algorithms is dynamically selected and switched according to different data types and real-time requirements. The session key is generated by using the device identity features such as the mobile phone IMEI number and AR glasses SN number of the terminal and the real-time feature value of the current communication link. The key is then verified and distributed through an implicit channel established by Bluetooth. This effectively avoids the risk of key interception during transmission and achieves lightweight and high-strength dynamic management of the key. 2) A secure interaction method based on AR smart glasses and metering devices is proposed. Through multi-level authentication, reliable transmission, edge encryption and edge collaboration, a closed-loop secure operation system is constructed from the mobile application layer to the metering device layer, covering the entire process of authentication, transmission, processing and storage, to ensure the confidentiality, integrity and availability of data interaction between external AR devices and internal metering devices.

[0040] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit its protection scope. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that after reading the present invention, they can still make various changes, modifications or equivalent substitutions to the specific implementation of the invention, but these changes, modifications or equivalent substitutions are all within the protection scope of the present invention.

Claims

1. A method for secure interaction of AR glasses with a power metering device, characterized in that, Includes the following steps: A dual-link wireless collaborative communication link is established between AR glasses and a mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. The AR glasses and mobile terminal exchange device hardware identity features and temporary public keys for encryption, and perform dual authentication based on the device hardware identity features and the file information in the intranet system database; After authentication, a seed key is generated based on the device hardware identity features and dynamic token value, and a control key and a data key are derived through a key derivation function. The control key is used for data encryption of the Bluetooth link, and the data key is used for data encryption of the WiFi link. The AR glasses are used to send interactive task instructions to the power metering device and transmit them to the mobile terminal via dual-link wireless cooperative communication. The mobile terminal then forwards the interactive task instructions to the clip-on device. The mobile terminal transmits encrypted interactive task commands, which take into account the power communication protocol, to the power metering device via a back clip device. The AR glasses receive the response data from the power metering device and perform data integrity verification. After temporarily storing and encrypting the response data, they are synchronized to the mobile terminal for storage.

2. The method for secure interaction of AR glasses with power metering device according to claim 1, wherein, The device hardware identity features include the mobile terminal IMEI number and the AR glasses SN number, and the temporary public key is generated based on the ECCsecp256r1 curve.

3. The method for secure interaction of AR glasses with power metering device according to claim 1, wherein, The controlled data of the Bluetooth link is encrypted with SM4 and transmitted in BLE data packet format; The video data on the WiFi link is encrypted in segments and transmitted in packets.

4. A secure interaction method for AR glasses and power metering devices according to claim 1 or 3, characterized in that, The controlled data includes instructions, parameters, status, and business information, with a data size ≤ 1MB; The video data includes video streams and 3D model information, with a data size of ≥1MB.

5. A secure interaction method for AR glasses and power metering devices according to claim 1, characterized in that, When the AR glasses and the mobile terminal are out of communication range or the user actively disconnects, a communication termination process is triggered, and both parties simultaneously send a key destruction command.

6. A secure interaction method for AR glasses and power metering devices according to claim 1, characterized in that, The dual-link wireless collaborative communication between the AR glasses and the mobile terminal also includes link quality monitoring, including collecting dual-link Bluetooth RSSI values, WiFi packet loss rate and latency parameters. When the Bluetooth RSSI value or WiFi packet loss rate is ≥5%, the breakpoint resume mechanism is triggered.

7. A secure interaction method for AR glasses and power metering devices according to claim 1, characterized in that, Safety certification shall be performed on the back clamp device and the power metering device. The safety certification of the power metering device includes infrared certification and identity authentication of the power metering device.

8. A secure interaction method for AR glasses and power metering devices according to claim 1, characterized in that, The AR glasses encrypt the temporarily stored response data using AES-256 encryption. The key is randomly generated by the AR glasses chip. The collected timestamp is used to encrypt the response data, generating an encrypted data block.

9. A secure interaction method for AR glasses and power metering devices according to claim 1, characterized in that, The AR glasses synchronize the encrypted data block, AR glasses SN number and timestamp to the operating terminal mobile phone, and the synchronization data frame carries a CRC32 check code. After receiving the data, the work terminal first verifies the CRC32. If the data is confirmed to be unaltered, it temporarily stores it in the work terminal's local secure storage area and returns a synchronization success frame. If synchronization fails, a retransmission mechanism is triggered.

10. A secure interaction system for AR glasses and power metering devices, characterized in that, A secure interaction method for AR glasses and a power metering device according to any one of claims 1-7 includes: Dual-link communication module: used to establish a dual-link wireless collaborative communication link between AR glasses and mobile terminal. The dual-link wireless collaborative communication link includes a Bluetooth link for transmitting controlled data and a WiFi link for transmitting video data. Identity authentication module: used to encrypt the hardware identity features of the AR glasses and the mobile terminal with a temporary public key, and to perform dual identity authentication based on the hardware identity features of the device and the file information in the intranet system database; Encryption module: After successful authentication, it generates a seed key based on the device hardware identity characteristics and dynamic token value, and derives a control key and a data key through a key derivation function. The control key is used for data encryption of the Bluetooth link, and the data key is used for data encryption of the WiFi link. Command issuing module: used to issue interactive task commands for the power metering device using the AR glasses and transmit them to the mobile terminal via dual-link wireless collaborative communication with encryption; the mobile terminal forwards the interactive task commands to the clip-on device. Command transmission module: used by the mobile terminal to encrypt and transmit interactive task commands that take into account the power communication protocol to the power metering device via a back clip device; Receiving module: Used by the AR glasses to receive response data from the power metering device and perform data integrity verification, and to temporarily encrypt and synchronize the response data to the mobile terminal storage.

Images