A power internet of things terminal control instruction encryption and decryption system and method

Abstract

The application discloses a kind of power internet of things terminal control instruction encryption and decryption system and method, comprising: power internet of things master station sends security parameter to the encryption and decryption system;The encryption and decryption system is based on the security parameter and power internet of things key management system generates the private key of the power internet of things terminal based on the ID of power internet of things terminal;Power internet of things master station uses the private key of the power internet of things terminal to encrypt control instruction, obtains ciphertext information and sends to edge internet of things agent;Edge internet of things agent set uses the public key Pubk of the encryption and decryption system to decrypt ciphertext information, obtains control instruction and is transferred to the power internet of things terminal by local channel.The control instruction issued by power internet of things master station is decrypted by edge internet of things agent to assist power internet of things terminal, overcome the defect that complex encryption protection is difficult due to the limitation of the computing resources, power supply, cost and volume of power internet of things terminal, improve the security between master station and power internet of things terminal.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of power internet of things data encryption, and particularly relates to a power internet of things terminal control instruction encryption and decryption system and method. BACKGROUND

[0002] With the continuous development of extensive perception, interconnection of all things and data sharing, the threat brought by information security has increased in both depth and breadth. The control instruction of the power internet of things master station needs to be encrypted for transmission to ensure the compliance and correctness of the instruction. Due to the limitation of computing resources, power supply, cost and volume of a large number of sensors in the extensive power internet of things, it is difficult to perform complex encryption protection, for example, 2G SIM card, RFID tag and other devices, which are difficult to run high-strength password algorithms, resulting in poor security between the master station and each terminal. SUMMARY

[0003] In order to solve the above-mentioned deficiencies in the prior art, the present application provides a power internet of things terminal control instruction encryption and decryption system, comprising: a power internet of things master station, an encryption and decryption system, a power internet of things key management system and an edge internet of things agent set.

[0004] The power internet of things master station is configured to send a security parameter to the encryption and decryption system.

[0005] The encryption and decryption system is configured to obtain a public key Pubk and a master key Msk of the encryption and decryption system based on the security parameter using a super singular elliptic curve, and send the public key Pubk of the encryption and decryption system to the edge internet of things agent and the master key Msk to the power internet of things key management system.

[0006] The power internet of things key management system is configured to generate a private key of the power internet of things terminal based on the ID of the power internet of things terminal and the master key Msk of the encryption and decryption system, and send the private key to the power internet of things master station.

[0007] The power internet of things master station is further configured to encrypt the control instruction using the private key of the power internet of things terminal, obtain ciphertext information and send the ciphertext information to the edge internet of things agent.

[0008] The edge internet of things agent set is configured to decrypt the ciphertext information using the public key Pubk of the encryption and decryption system, obtain the control instruction and transmit the control instruction to the power internet of things terminal through a local channel.

[0009] Further, the power internet of things key management system is specifically configured to:

[0010] Generate the public key of the power internet of things terminal based on the ID of the power internet of things terminal by performing an Extract algorithm.

[0011] generate the private key of the power internet of things terminal based on the master key Msk of the encryption and decryption system and the public key of the power internet of things terminal, and send the private key to the power internet of things master station.

[0012] Further, the private key of the power internet of things terminal is calculated as follows:

[0013] S k = Msk·P k

[0014] In the formula, S k is the private key of the power internet of things terminal; Msk is the master key of the encryption and decryption system; P k is the public key of the power internet of things terminal.

[0015] In the formula, the public key P k of the power internet of things terminal is calculated as follows:

[0016] P k = H1(ID)

[0017] In the formula, H1(·) is the first one-way function of the system parameter in the encryption and decryption system, and ID is the ID of the power internet of things terminal.

[0018] Preferably, the power internet of things master station is specifically used for:

[0019] encrypting a message m containing a power internet of things terminal control instruction using the private key of the power internet of things terminal to obtain ciphertext c;

[0020] randomly selecting a coefficient set of an interpolation polynomial to construct a t-1 order polynomial;

[0021] calculating a sub-key of an edge internet of things agent using the t-1 order polynomial;

[0022] sending ciphertext information composed of the ciphertext c and the sub-key of the edge internet of things agent to the edge internet of things agent.

[0023] Further, the t-1 order polynomial is as follows:

[0024]

[0025] In the formula, F(x) is the t-1 order polynomial; S k is the private key of the power internet of things terminal; a j is the coefficient set of the interpolation polynomial; x j is the j-th power of the interpolation polynomial; and t is the number of the selected edge internet of things agent.

[0026] Preferably, the edge internet of things agent set is specifically used for:

[0027] Any t edge IoT agents including the edge IoT agent containing the forwarding control instruction form a decryption group;

[0028] The sub-key in the ciphertext information of each member in the decryption group is calculated by using the public key Pubk of the encryption and decryption system, to obtain a decryption operator;

[0029] The ciphertext in the ciphertext information is decrypted based on the decryption operator, to obtain the control instruction sent by the power IoT master station to the power IoT terminal.

[0030] Further, the decryption operator is calculated according to the following formula:

[0031]

[0032] In the formula, k is the decryption operator, Φ is the member set in the decryption group, j is the member number in the decryption group, SP i is the sub-key of the edge IoT agent, and i is the number of the edge IoT agent; is a bilinear mapping in the encryption and decryption system parameter, Pubk is the public key of the encryption and decryption system, is a Lagrange coefficient.

[0033] In a second aspect, based on the same inventive concept, the present application also provides a method for implementing an encryption and decryption system for control instructions of a power IoT terminal, comprising:

[0034] The power IoT master station sends security parameters to the encryption and decryption system;

[0035] The encryption and decryption system obtains the public key Pubk and the master key Msk of the encryption and decryption system based on the security parameters by using a super singular elliptic curve, and sends the public key Pubk of the encryption and decryption system to the edge IoT agent and the master key Msk to the power IoT key management system;

[0036] The power IoT key management system generates the private key of the power IoT terminal based on the ID of the power IoT terminal and the master key Msk of the encryption and decryption system, and sends it to the power IoT master station;

[0037] The power IoT master station also encrypts the control instruction by using the private key of the power IoT terminal, to obtain the ciphertext information and send it to the edge IoT agent;

[0038] The edge IoT agent set decrypts the ciphertext information by using the public key Pubk of the encryption and decryption system, to obtain the control instruction and transmit it to the power IoT terminal through a local channel.

[0039] In a third aspect, the present application also provides a storage device, wherein a plurality of program codes are stored, the program codes being adapted to be loaded and run by a processor to execute the encryption and decryption method of the power internet of things terminal control instruction.

[0040] In a fourth aspect, the present application also provides a control device comprising a processor and a storage device, wherein the storage device is adapted to store a plurality of program codes, the program codes being adapted to be loaded and run by the processor to execute the encryption and decryption method of the power internet of things terminal control instruction.

[0041] Compared with the prior art, the present application has the following beneficial effects:

[0042] The technical solution provided by the present application is that the power internet of things master station sends a security parameter to the encryption and decryption system;

[0043] The encryption and decryption system obtains a public key Pubk and a master key Msk of the encryption and decryption system based on the security parameter using a super-singular elliptic curve, and sends the public key Pubk of the encryption and decryption system to the edge internet of things agent and the master key Msk to the power internet of things key management system; the power internet of things key management system generates a private key of the power internet of things terminal based on the ID of the power internet of things terminal and the master key Msk of the encryption and decryption system, and sends the private key to the power internet of things master station; the power internet of things master station also encrypts the control instruction using the private key of the power internet of things terminal, obtains ciphertext information, and sends the ciphertext information to the edge internet of things agent; the edge internet of things agent set decrypts the ciphertext information using the public key Pubk of the encryption and decryption system, obtains the control instruction, and transmits the control instruction to the power internet of things terminal through a local channel. The present application realizes that the edge internet of things agent assists the power internet of things terminal in decrypting the control instruction issued by the power internet of things master station, not only reduces the decryption workload based on the computing resources of the edge internet of things agent, but also further enhances the security of the system through multi-party secure computing of multiple edge internet of things agents. BRIEF DESCRIPTION OF DRAWINGS

[0044] Figure 1 FIG. 1 is a schematic diagram of the encryption and decryption system of the power internet of things terminal control instruction in the embodiment of the present application;

[0045] Figure 2 FIG. 2 is an interaction flowchart of the encryption and decryption system of the power internet of things terminal control instruction in the embodiment of the present application;

[0046] Figure 3 FIG. 3 is a deployment topology diagram of the power internet of things in the embodiment of the present application;

[0047] Figure 4 FIG. 4 is an interaction flowchart of the encryption and decryption method in the embodiment of the present application. DETAILED DESCRIPTION

[0048] For better understanding of the present application, the content of the present application is further described below in conjunction with the drawings and examples of the specification.

[0049] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be described clearly and completely in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0050] In view of the weak security problem between the existing master station and the terminal, the embodiment designs a power Internet of Things terminal control instruction encryption and decryption system, which can realize decryption of the control instruction of the master station assisted by the edge Internet of Things agent. The advantages are that the decryption workload is reduced based on the computing resources of the edge Internet of Things agent, and the security of the system is further enhanced through multi-party security calculation of multiple edge Internet of Things agents.

[0051] As shown in Figure 1 The power Internet of Things terminal control instruction encryption and decryption system provided by the embodiment includes a power Internet of Things master station, an encryption and decryption system, a power Internet of Things key management system and an edge Internet of Things agent set.

[0052] The power Internet of Things master station is configured to send a security parameter to the encryption and decryption system.

[0053] The encryption and decryption system is configured to obtain a public key Pubk and a master key Msk of the encryption and decryption system based on the security parameter and a super singular elliptic curve, and send the public key Pubk of the encryption and decryption system to the edge Internet of Things agent and send the master key Msk to the power Internet of Things key management system.

[0054] The power Internet of Things key management system is configured to generate a private key of the power Internet of Things terminal based on the ID of the power Internet of Things terminal and the master key Msk of the encryption and decryption system, and send the private key to the power Internet of Things master station.

[0055] The power Internet of Things master station is further configured to encrypt a control instruction using the private key of the power Internet of Things terminal, obtain ciphertext information and send the ciphertext information to the edge Internet of Things agent.

[0056] The edge Internet of Things agent set is configured to decrypt the ciphertext information using the public key Pubk of the encryption and decryption system, obtain the control instruction and transmit the control instruction to the power Internet of Things terminal through a local channel.

[0057] As shown in Figure 2 The interaction process in the power Internet of Things terminal control instruction encryption and decryption system is specifically shown.

[0058] The embodiment helps the edge IoT agent to assist the power IoT terminal to decrypt the control instruction issued by the power IoT network master station, overcomes the defects that the power IoT terminal is difficult to perform complex encryption protection due to the limitations of computing resources, power supply, cost and volume of the power IoT terminal, and improves the security between the master station and the power IoT terminal.

[0059] In the embodiment, the power IoT key management system is specifically used for:

[0060] generating the public key of the power IoT terminal based on the ID of the power IoT terminal by performing an Extract algorithm;

[0061] generating the private key of the power IoT terminal based on the master key Msk of the encryption and decryption system and the public key of the power IoT terminal, and sending the private key to the power IoT network master station.

[0062] In a specific implementation, the private key of the power IoT terminal is calculated as follows:

[0063] S k =Msk·P k

[0064] In the formula, S k is the private key of the power IoT terminal; Msk is the master key of the encryption and decryption system; P k is the public key of the power IoT terminal.

[0065] In the formula, the public key P k of the power IoT terminal is calculated as follows:

[0066] P k =H1(ID)

[0067] In the formula, H1(·) is the first one-way function of the system parameter in the encryption and decryption system, and ID is the ID of the power IoT terminal.

[0068] In a specific implementation, the power IoT network master station is specifically used for:

[0069] encrypting a message m containing a power IoT terminal control instruction using the private key of the power IoT terminal to obtain ciphertext c;

[0070] randomly selecting a coefficient set of an interpolation polynomial to construct a t-1 order polynomial;

[0071] calculating a sub-key of the edge IoT agent by using the t-1 order polynomial;

[0072] sending ciphertext information composed of the ciphertext c and the sub-key of the edge IoT agent to the edge IoT agent.

[0073] In this embodiment, the t-1 order polynomial is as shown in the following formula:

[0074]

[0075] In the formula, F(x) is a t-1 order polynomial; S k is a private key of the power internet of things terminal; a j is a coefficient set of the interpolation polynomial; x j is a j-th power of the interpolation polynomial; and t is an arbitrarily selected number of edge internet of things agents.

[0076] In a specific implementation, the edge internet of things agent set is specifically used for:

[0077] Any t edge internet of things agents including the edge internet of things agent containing the forwarding control instruction form a decryption group.

[0078] The sub-key in the ciphertext information of each member in the decryption group is calculated by using the public key Pubk of the encryption and decryption system to obtain a decryption operator.

[0079] The ciphertext in the ciphertext information is decrypted based on the decryption operator to obtain the control instruction sent by the power internet of things master station to the power internet of things terminal.

[0080] In this embodiment, the decryption operator is calculated according to the following formula:

[0081]

[0082] In the formula, k is the decryption operator, Φ is a member set in the decryption group, j is a member number in the decryption group, SP i is a sub-key of the edge internet of things agent, i is a number of the edge internet of things agent, is a bilinear mapping in the encryption and decryption system parameter, Pubk is a public key of the encryption and decryption system, is a Lagrange coefficient.

[0083] Based on the same inventive concept, the embodiment also provides a method of the encryption and decryption system of the power internet of things terminal control instruction based on the above, as shown in Figure 3 and Figure 4 The power internet of things master station encrypts the control information by using the public key of the power internet of things terminal, the edge internet of things agent runs a secret sharing algorithm according to the security parameter to obtain the decryption right corresponding to the power internet of things terminal, thereby decrypting the control instruction and transmitting the control instruction to the power internet of things terminal through a secure local channel.

[0084] The IoT terminal interacts with the main station through an edge IoT agent. There are reliable and secure channels between edge IoT agents and between the edge IoT agent and the main station. The control commands sent by the main station to the terminal are decrypted by the edge IoT agent, and then the control commands are sent out through the local secure channel between the edge IoT agent and the terminal, which improves the security of information transmission.

[0085] In this embodiment, the encryption method includes three processes: initialization, encryption, and decryption.

[0086] In this embodiment, the power Internet of Things (IoT) master station runs the initialization process. The initialization process takes a security parameter λ as input and outputs the public key Pubk and master key Msk of the encryption / decryption system. The process includes the following steps:

[0087] Step 1: Let the control command length be l. The master station randomly selects a large prime number p with a length of λ bits, selects the hypersingular elliptic curve E / GF(p), generates a q-order subgroup (G,+) on E / GF(p) and its generator P, and performs a bilinear mapping.

[0088] Step 2: Select one-way hash functions H1, H2, and H3;

[0089]

[0090] Step 3: Select Master Key The computing system's public key is Pubk = Msk·P. The main site publicly releases the encryption and decryption system's parameters, including: G, q, P, and bilinear mappings. One-way functions H1, H2, H3, and the system public key Pubk.

[0091] In this embodiment, the encryption process includes the following steps:

[0092] Step 1: Key Generation. The power IoT key management system uses the master key MSk of the encryption / decryption system to execute the Extract algorithm to generate the public key P of the power IoT terminal corresponding to the unique identifier ID of the power IoT terminal. k =H1(ID) and the private key S of the power IoT terminal k =Msk·P k .

[0093] Step 2: The power IoT master station uses S k The message m containing terminal control instructions is encrypted to obtain ciphertext c.

[0094] Step 3: The power IoT master station randomly selects the set of coefficients {a} of the interpolation polynomial. j |a j ∈G *; j = 1, 2, …, t-1; a t-1 ≠0}, construct a t-1 order polynomial:

[0095]

[0096] Step four: the power Internet of Things master station calculates the edge Internet of Things agent P i sub-key SP i = F(i), 1≤i≤n; n is the total number of edge Internet of Things agents;

[0097] Step five: the power Internet of Things master station sends {c, SP i} to the edge Internet of Things agent P i (1≤i≤n).

[0098] In this embodiment, the decryption process includes the following steps:

[0099] Step one: any t members in the edge Internet of Things agent form a decryption group, and the authorized subset formed by the t members is Φ, and the edge Internet of Things agent that forwards the control instruction is included in the decryption group; the group decryption can prevent bypass attack or replay attack and improve security;

[0100] Step two: after obtaining the t sub-keys, P i calculates as follows:

[0101]

[0102] wherein, is the Lagrange coefficient, which is defined as: set

[0103] Thus, the decryption operator k is obtained, and according to the identity-based encryption (IBE) algorithm, the plaintext wherein c is the ciphertext, H2(k) is the second one-way function in the system parameter, and k is the decryption operator.

[0104] The edge Internet of Things agent P i sends the control instruction to the corresponding power Internet of Things terminal through a local secure channel for execution.

[0105] Those skilled in the art can understand that all or part of the processes in the method of the above-mentioned embodiment of the present application can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by a processor. The computer program includes computer program code, which can be in the form of source code, object code, executable file, or some intermediate form, etc. The computer readable medium can include any entity or device, medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory, random access memory, electrical carrier signal, telecommunication signal, and software distribution medium, etc. that can carry the computer program code. It should be noted that the contents of the computer readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction, for example, in some jurisdictions, according to legislation and patent practice, the computer readable medium does not include electrical carrier signals and telecommunication signals.

[0106] Further, the present application also provides a storage device. In an embodiment of the storage device according to the present application, the storage device can be configured to store a program of the method of the power internet of things terminal control instruction encryption and decryption system, which can be loaded and run by the processor to implement the method of the power internet of things terminal control instruction encryption and decryption system. For the convenience of description, only the parts related to the embodiments of the present application are shown, and the specific technical details not disclosed are referred to the method part of the embodiments of the present application. The storage device can be a storage device device formed by various electronic devices, and optionally, the storage in the embodiments of the present application is a non-transitory computer readable storage medium.

[0107] Further, the present application also provides a control device. In an embodiment of the control device according to the present application, the control device includes a processor and a storage device, and the storage device can be configured to store a program of the method of the power internet of things terminal control instruction encryption and decryption system, and the processor can be configured to execute the program in the storage device, which includes but is not limited to the program of the method of the power internet of things terminal control instruction encryption and decryption system. For the convenience of description, only the parts related to the embodiments of the present application are shown, and the specific technical details not disclosed are referred to the method part of the embodiments of the present application. The control device can be a control device device formed by various electronic devices.

[0108] Those skilled in the art will appreciate that embodiments of the application can be devised for a method, a system, or a computer program product. Accordingly, the present application can be embodied in the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application can take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, etc.) embodying computer readable program code.

[0109] The present application is described in reference to the flowchart illustrations and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0110] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0111] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0112] Finally, it should be noted that the above-mentioned embodiments are merely intended for describing the technical solutions of the present application, but not for limiting it. Although the present application has been described in detail with reference to the above-mentioned embodiments, those skilled in the art should understand that the technical solutions of the present application can still be modified or equivalent replaced without departing from the spirit and scope of the present application, and any modification or equivalent replacement should be covered in the protection scope of the claims of the present application.

Claims

1. A power Internet of Things terminal control instruction encryption and decryption system, characterized in that, The application relates to a power internet of things (IoT) key management system and an edge IoT agent set. The power IoT master station is used for sending a security parameter to the encryption and decryption system. Msk The encryption and decryption system is used for obtaining a public key Pubk and a master key of the encryption and decryption system based on the security parameter and a super-singular elliptic curve Msk The public key Pubk of the encryption and decryption system is sent to the edge Internet of Things agent set, and the master key is sent to the power Internet of Things key management system The power IoT master station is further used for encrypting a control instruction by using a private key of the power IoT terminal, obtaining ciphertext information and sending the ciphertext information to the edge IoT agent set. ​ The power IoT key management system is used to manage the encryption and decryption system based on the ID of the power IoT terminal and the master key of the encryption and decryption system. Generate the private key of the power IoT terminal and send it to the power IoT master station; The edge IoT agent set is used for decrypting the ciphertext information by using a public key Pubk of the encryption and decryption system, obtaining a control instruction and transmitting the control instruction to the power IoT terminal through a local channel. The power IoT key management system is specifically used for:

2. The system of claim 1, wherein, generating a public key of the power IoT terminal by executing an Extract algorithm based on an ID of the power IoT terminal; calculating the private key of the power IoT terminal according to the following formula: Master key based on encryption and decryption system and the public key of the power internet of things terminal, generate a private key of the power internet of things terminal, and send to the power internet of things master station.

3. The system of claim 2, wherein, The power IoT master station is specifically used for: In the formula: is a private key of the power internet of things terminal; is a master key of the encryption and decryption system; is a public key of the power internet of things terminal; The public key of the power internet of things terminal is calculated according to the following formula: In the formula, is a first one-way function of a system parameter in the encryption and decryption system, is an ID of the power internet of things terminal.

4. The system of claim 1, wherein, encrypting a message m containing a power IoT terminal control instruction by using the private key of the power IoT terminal, obtaining ciphertext c; randomly selecting a coefficient set of an interpolation polynomial to construct a t-1 order polynomial; calculating a sub-key of the edge IoT agent by using the t-1 order polynomial; sending ciphertext information composed of the ciphertext c and the sub-key of the edge IoT agent to the edge IoT agent. The t-1 order polynomial is shown in the following formula:

5. The system of claim 4, wherein, The edge IoT agent set is specifically used for: In the formula, is a t-1 order polynomial; is a private key of the power internet of things terminal; is a coefficient set of the interpolation polynomial; is a j power of the interpolation polynomial; is an arbitrary selected number of edge internet of things agents.

6. The system of claim 4, wherein, composing a decryption group by using any t edge IoT agents including the edge IoT agent containing a forwarding control instruction; calculating a decryption operator by using the public key Pubk of the encryption and decryption system in the sub-key in the ciphertext information of each member in the decryption group; decrypting the ciphertext in the ciphertext information based on the decryption operator, obtaining a control instruction sent by the power IoT master station to the power IoT terminal. The decryption operator is calculated according to the following formula:

7. The system of claim 6, wherein, The application relates to a power internet of things (IoT) key management system and an edge IoT agent set. In the formula: is a decryption operator, is a member set in the decryption group, is a member number in the decryption group, is a sub-key of the edge Internet of Things agent, is a number of the edge Internet of Things agent; is a bilinear mapping in the encryption and decryption system parameter, Pubk is a public key of the encryption and decryption system, is a Lagrange coefficient. 8.A method for encrypting and decrypting a power internet of things terminal control instruction based on the system according to any one of claims 1-7, characterized in that, The power IoT master station is used for sending a security parameter to the encryption and decryption system. Msk The encryption / decryption system uses hypersingular elliptic curves to obtain the public key Pubk and master key of the encryption / decryption system based on the security parameters. Msk The public key Pubk of the encryption / decryption system is sent to the edge IoT agent set, and the master key is sent to the encryption / decryption system. The power IoT master station is further used for encrypting a control instruction by using a private key of the power IoT terminal, obtaining ciphertext information and sending the ciphertext information to the edge IoT agent set. Send to the power IoT key management system; The power internet of things key management system is based on the ID of a power internet of things terminal and a main key of the encryption and decryption system A private key of the power internet of things terminal is generated and sent to the power internet of things master station. The edge IoT agent set is used for decrypting the ciphertext information by using a public key Pubk of the encryption and decryption system, obtaining a control instruction and transmitting the control instruction to the power IoT terminal through a local channel. The program code is adapted to be loaded and run by the processor to execute the method in claim 8.

9. A control device comprising a processor and a storage device, the storage device being adapted to store a plurality of program codes, characterized in that, ​

Images