A data security processing method, 5G terminal device and system for a nuclear power plant

Abstract

The present invention relates to the field of nuclear power plant communication technology, and provides a data security processing method, a 5G terminal, and a system for a nuclear power plant. Among them, a data security processing method for a nuclear power plant applied to a 5G encryption terminal includes: establishing a communication connection with a detection device to obtain monitoring data; encrypting the monitoring data using a data encryption method; sending the encrypted data to a 5G decryption terminal, and the 5G decryption terminal is used to decrypt the received encrypted data using a data decryption method corresponding to the data encryption method to obtain the monitoring data, and to send the decrypted monitoring data to a data terminal. In the data transmission of the nuclear power plant in the present invention, the entire process is completed by the security chips of two node terminals deployed on the detection device side and the data terminal side, realizing transparent operation and the state where users are unaware. At the same time, the communication rate of the node terminal is above 400 Kps, supporting fast response, and being able to perfectly adapt to the requirements of fast data transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of nuclear power plant communication, and particularly to a data security processing method, a 5G terminal, and a system for a nuclear power plant. Background Art

[0002] 5G technology refers to the fifth-generation mobile communication technology. 5G is a new generation of broadband mobile communication technology with the characteristics of high speed, low latency, and large connection, and is a network infrastructure for realizing the interconnection of humans, machines, and things.

[0003] At present, most nuclear power plants hope to apply 5G technology to meet the characteristics of "low latency, high reliability, and high efficiency", and at the same time, it can also meet the development trend of nuclear power plants towards digitalization and wirelessization. However, the security of data transmission in nuclear power plants is extremely important. If key data is attacked and stolen by a third party, it will cause immeasurable harm to the entire nuclear power plant and even the country. Summary of the Invention

[0004] The purpose of the present invention is to provide a data security processing method, a 5G terminal, and a system for a nuclear power plant to solve the problem of low security of data transmission in nuclear power plants.

[0005] To achieve the above-mentioned invention purpose, the technical solution adopted by the present invention is a data security processing method for a nuclear power plant. This method is applied to a 5G encryption terminal and includes:

[0006] Establish a communication connection with a detection device and obtain the monitoring data monitored by the detection device;

[0007] Encrypt the monitoring data using a data encryption method to obtain encrypted data;

[0008] Send the encrypted data to a 5G decryption terminal, where the 5G decryption terminal is used to decrypt the received encrypted data using a data decryption method corresponding to the data encryption method to obtain the monitoring data, and is used to send the decrypted monitoring data to a data terminal.

[0009] Preferably, the data encryption method includes:

[0010] Obtain a key K: Generate the key K using an asymmetric encryption algorithm;

[0011] Encryption: Use the AES encryption algorithm to encrypt the data information, and the processing formula is as follows:

[0012] C = E(K, P), where P is the plaintext, K is the key, C is the ciphertext, and E is the AES encryption function;

[0013] The data decryption method includes: Use the AES decryption algorithm to decrypt the ciphertext C, and the processing formula is as follows:

[0014] P = D(K, C), where D is the AES decryption function.

[0015] Preferably, the AES encryption algorithm uses AES-128, where the key length is 128 bits and the number of encryption rounds is 10 rounds.

[0016] Preferably, after encrypting the monitoring data, a digital signature is performed on the encrypted data, and the digital signature includes:

[0017] Using the SHA encoding method for the encrypted data to generate a 128-bit original digital digest;

[0018] Using the private key to encrypt the original digital digest again to form a digital signature;

[0019] Sending the public key and the encrypted original digital digest to the 5G decryption terminal. Among them, the 5G decryption terminal is used to decrypt the encrypted original digital digest with the received public key, and to generate a new digital digest again for the received encrypted data using the SHA encoding method, and at the same time compare the new digital digest and the original digital digest.

[0020] The present invention also provides a data security processing method for a nuclear power plant. This method is applied to a 5G decryption terminal, and is characterized by including:

[0021] Receiving the encrypted data generated by the 5G encryption terminal using a data encryption method to encrypt the received monitoring data;

[0022] Using a data decryption method corresponding to the data encryption method to decrypt the encrypted data to obtain the monitoring data;

[0023] Sending the decrypted monitoring data to the data terminal.

[0024] Preferably, it further includes:

[0025] Receiving the encrypted original digital digest obtained by the 5G encryption terminal using the private key to encrypt the 128-bit original digital digest generated by the SHA encoding method for the encrypted data, and the public key corresponding to the encrypted original digital digest;

[0026] Using the public key to decrypt the encrypted original digital digest to obtain the original digital digest;

[0027] Using the SHA encoding method to generate a new digital digest again for the received encrypted data;

[0028] Judging whether the original digital digest and the new digital digest are consistent. If they are consistent, the data transmission is normal. If they are not consistent, the data transmission is abnormal.

[0029] The present invention also provides a 5G encryption terminal for data security processing in a nuclear power plant, characterized by comprising:

[0030] A first network unit: configured to establish a communication connection with a detection device and obtain monitoring data monitored by the detection device;

[0031] A first security unit: configured to encrypt the monitoring data using a data encryption method to obtain encrypted data;

[0032] A signature encryption unit: configured to perform a digital signature on the encrypted data to obtain an original digital digest, and perform encryption processing on the original digital digest again using a private key;

[0033] A first 5G baseband unit: configured to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest.

[0034] A transmitting antenna unit: configured to transmit the encrypted data, the encrypted original digital digest, and the public key that have been modulated and demodulated by the first 5G baseband unit.

[0035] Preferably, the first security unit uses an 8051 security chip.

[0036] The present invention also provides a 5G decryption terminal for data security processing in a nuclear power plant, comprising:

[0037] A receiving antenna unit: configured to receive the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest.

[0038] A second 5G baseband unit: configured to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key received by the receiving antenna unit;

[0039] A second security unit: configured to decrypt the encrypted data after modulation and demodulation using a data decryption method corresponding to the data encryption method to obtain monitoring data;

[0040] A signature decryption unit: configured to generate a new digital digest again for the encrypted data after modulation and demodulation using the SHA encoding method, and decrypt the encrypted original digital digest using the public key to obtain the original digital digest, and compare whether the original digital digest and the new digital digest are consistent.

[0041] A second network unit: configured to establish a communication connection with a data terminal and send the decrypted monitoring data to the data terminal.

[0042] The present invention also provides a data security processing system for a nuclear power plant, comprising:

[0043] A detection device: configured to monitor a nuclear power plant to obtain monitoring data;

[0044] Data terminal: used to display monitoring data;

[0045] A 5G encryption terminal arranged on the side of the detection device, the terminal includes:

[0046] The first network unit: used to establish a communication connection with the detection device and obtain the monitoring data monitored by the detection device;

[0047] The first security unit: used to encrypt the monitoring data using a data encryption method to obtain encrypted data;

[0048] The signature encryption unit: used to perform a digital signature on the encrypted data to obtain the original digital digest, and perform encryption processing on the original digital digest again using the private key;

[0049] The first 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest.

[0050] The transmitting antenna unit: used to transmit the encrypted data, the encrypted original digital digest, and the public key after modulation and demodulation by the first 5G baseband unit;

[0051] A 5G decryption terminal arranged on the side of the data terminal, the terminal includes:

[0052] The receiving antenna unit: used to receive the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest sent by the transmitting antenna unit.

[0053] The second 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key received by the receiving antenna unit;

[0054] The second security unit: used to decrypt the encrypted data after modulation and demodulation using a data decryption method corresponding to the data encryption method to obtain the monitoring data;

[0055] The signature decryption unit: used to generate a new digital digest again for the encrypted data after modulation and demodulation using the SHA coding method, and decrypt the encrypted original digital digest using the public key to obtain the original digital digest, and compare whether the original digital digest and the new digital digest are consistent.

[0056] The second network unit: used to establish a communication connection with the data terminal and send the decrypted monitoring data to the data terminal.

[0057] The beneficial effects of the present invention are mainly reflected in:

[0058] 1. The 5G communication encryption inside the nuclear power plant of the present invention writes the AES algorithm and digital signature into the security module. The whole process is completed by the security chips of two node end machines on the deployment detection device side and the data terminal side, realizing transparent operation and the state where users are unaware. At the same time, the communication rate of the node end machine is above 400 Kps, supporting fast response and being able to perfectly adapt to the requirements of fast data transmission.

[0059] 2. The independent 5G communication terminal provided by the present invention does not need to rely on the operator's base station, has low deployment cost and high efficiency, and also continues the characteristics of low latency, high efficiency and high reliability of the 5G network.

[0060] 3. The two node end machines of the present invention can be directly deployed in the existing nuclear power plants, with a wide application range, simple and reliable deployment. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] Figure 1 is a schematic diagram of the system architecture of a data security processing method for a nuclear power plant according to an embodiment of the present invention;

[0062] Figure 2 is a flowchart of a data security processing method for a nuclear power plant according to an embodiment of the present invention;

[0063] Figure 3 is a civilization grouping matrix diagram according to an embodiment of the present invention;

[0064] Figure 4 is a diagram of the AES decryption process according to an embodiment of the present invention;

[0065] Figure 5 is a flowchart of a data security processing method for a nuclear power plant according to another embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0066] The following will describe in detail the specific embodiments of the embodiments of the present invention with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only used to illustrate and explain the embodiments of the present invention, and are not used to limit the embodiments of the present invention.

[0067] See Figure 1The figure shows a schematic diagram of the system architecture of a data security processing method for a nuclear power plant applying an embodiment of the present invention. The environment to which this system applies can be data transmission in a nuclear power plant, and can also be applicable to industries that attach great importance to data security, such as the military industry, finance, and banking. This system includes a detection device, a data terminal, as well as a 5G decryption terminal and a 5G encryption terminal. Among them, the 5G encryption terminal is directly deployed on the side of the detection device, and the 5G decryption terminal is directly deployed on the side of the data terminal; in this embodiment, the detection device can be various sensors, such as a temperature sensor, a humidity sensor, etc., for monitoring environmental information; it can also be the reaction data of the reactor of the nuclear power plant, the operation data of related equipment (such as main pumps, pressurizers, generator sets, etc.). The detection device can be a certain monitoring instrument, or a set of monitoring systems composed of multiple detection devices; and the data terminal is mainly used to display the monitoring data, and can include but is not limited to devices such as mobile phones, tablets, desktop computers, servers, workstations, etc. Continuing to combine Figure 1 To elaborate on the specific working principle of this system architecture, first, the detection device collects relevant monitoring data, and the monitoring data is sent to the 5G encryption terminal for encryption processing. The encrypted data is then directly sent by the 5G encryption terminal to the 5G decryption terminal. The 5G decryption terminal decrypts the encrypted data to obtain the original monitoring data, and the 5G decryption terminal then sends the decrypted monitoring data to the data terminal, where the management personnel can view the relevant monitoring data; in this embodiment, the circuit structures of the 5G decryption terminal and the 5G encryption terminal are the same, one is used for encryption operations, and the other is used for decryption operations.

[0068] In this embodiment, 5G communication transmission is adopted between the 5G decryption terminal and the 5G encryption terminal, and the data transmission has the characteristics of low latency, high efficiency, and high reliability.

[0069] And in this embodiment, the 5G encryption terminal is directly deployed on the side of the detection device, and the 5G decryption terminal is directly deployed on the side of the data terminal, which is convenient for directly transforming the existing communication system. The deployment is simple and convenient, and the application range is wide. Secondly, the 5G decryption terminal and the 5G encryption terminal are independent communication methods, without relying on the operator's base station, belonging to point-to-point communication between networks, which greatly improves data security.

[0070] See Figure 2 The figure shows a flowchart of a data security processing method for a nuclear power plant applying an embodiment of the present invention. This method includes the following steps:

[0071] Step 10: The 5G encryption terminal establishes a communication connection with the detection device and obtains the monitoring data monitored by the detection device. In this embodiment, the 5G encryption terminal and the detection device can be connected wirelessly or by a wired connection such as a network cable or a communication cable. The monitoring data mainly includes the above-mentioned reaction data, operation data, etc.;

[0072] Step 20: The 5G encryption terminal encrypts the monitoring data using a data encryption method to obtain encrypted data. The encryption process is as follows:

[0073] Step 201: Obtain the key K: Generate the key K using an asymmetric encryption algorithm; in this embodiment, the encryption and decryption keys are the same. The key is negotiated between the recipient (5G decryption terminal) and the sender (5G encryption terminal), but it cannot be directly transmitted over the network, otherwise the key will be leaked;

[0074] Step 202: Encryption: Use the AES encryption algorithm to encrypt the data information. The processing formula is as follows:

[0075] C = E(K, P), where P is the plaintext (data without encryption), K is the key, C is the ciphertext, and E is the AES encryption function. That is, by taking the plaintext P and the key K as the parameters of the encryption function as input, the encryption function E will output the ciphertext C; in this embodiment, the AES encryption algorithm uses AES-128, where the key length is 128 bits and the number of encryption rounds is 10 rounds; that is, in the encryption function E, a round function will be executed, and this round function will be executed 10 times. The operations performed in the first 9 executions of this round function are the same, only the 10th time is different. That is, a plaintext block will be encrypted 10 rounds. The core of AES is to implement all the operations in one round.

[0076] The processing unit of AES is a byte. The 128-bit input plaintext block P and the input key K are both divided into 16 bytes, denoted as P = P0 P1...P15 and K = K0 K1...K15 respectively. For example, the plaintext block is P = abcdefghijklmnop, where the character a corresponds to P0 and p corresponds to P15. Generally, the plaintext block is described by a square matrix in bytes, called the state matrix. In each round of the algorithm, the content of the state matrix changes continuously, and the final result is output as the ciphertext. The arrangement order of the bytes in this matrix is from top to bottom and from left to right in sequence, as Figure 3 shown.

[0077] The overall structure of AES is as Figure 4As shown, where W[0,3] refers to a 128-bit key composed of W[0], W[1], W[2], and W[3] in series. The round functions from the 1st round to the 9th round of encryption are the same, including 4 operations: substitution byte, shift row, mix column, and add round key. The mix column operation is not performed in the last round of iteration. Additionally, before the first round of iteration, an XOR encryption operation is performed on the plaintext and the original key.

[0078] Step 30: The 5G encryption terminal sends the encrypted data to the 5G decryption terminal. The 5G decryption terminal is used to decrypt the received encrypted data using the data decryption method corresponding to the data encryption method to obtain the monitoring data, and to send the decrypted monitoring data to the data terminal.

[0079] The specific decryption process is as follows: The ciphertext C is decrypted using the AES decryption algorithm, and the processing formula is as follows:

[0080] P = D(K, C), where D is the AES decryption function. That is, when the ciphertext C and the key K are input as parameters of the decryption function, the decryption function will output the plaintext P.

[0081] In Figure 4 shows the AES decryption process. The decryption process is still 10 rounds, and each round of operation is the inverse operation of the encryption operation. Since the 4 round operations of AES are all reversible, therefore, one round of the decryption operation is to sequentially perform inverse shift row, inverse substitution byte, add round key, and inverse mix column. Similar to the encryption operation, the inverse mix column is not performed in the last round. Before the first round of decryption, a key encryption operation is performed once.

[0082] As a further optimization, in this embodiment, in order to improve the data integrity again, on the basis of the AES encryption algorithm, the encrypted data stream is digitally signed. The functions of the signature are twofold. First, the fact of signing is difficult to deny, thus determining the fact that the entire data stream has been signed. Second, the signature is not easily forged, thus determining that the data stream has not been tampered with or intercepted. In this way, the digital signature can be used to prevent electronic information from being forged or the data being modified by someone.

[0083] Specifically, it includes the following steps:

[0084] Step 10.1: The 5G encryption terminal generates a 128-bit original digital digest for the encrypted data using the SHA encoding method;

[0085] Step 10.2: The 5G encryption terminal encrypts the original digital digest again using the private key to form a digital signature;

[0086] Step 10.3: Send the public key and the encrypted original digital digest to the 5G decryption terminal.

[0087] The decryption process of the digital signature is executed in the 5G decryption terminal, including the following steps:

[0088] Step 30.1: The 5G decryption terminal uses the private key to encrypt the original digital digest of 128 bits generated by the SHA encoding method for the encrypted data to obtain the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest;

[0089] Step 30.2: The 5G decryption terminal uses the public key to decrypt the encrypted original digital digest to obtain the original digital digest;

[0090] Step 30.3: The 5G decryption terminal uses the SHA encoding method to generate a new digital digest for the received encrypted data again;

[0091] Step 30.4: The 5G decryption terminal determines whether the original digital digest and the new digital digest are consistent. If they are consistent, the data transmission is normal. If they are inconsistent, the data transmission is abnormal.

[0092] The embodiment of the present invention also provides a 5G encryption terminal for data security processing of a nuclear power plant. The terminal includes:

[0093] The first network unit: used to establish a communication connection with the detection device and obtain the monitoring data monitored by the detection device;

[0094] The first security unit: used to encrypt the monitoring data by using a data encryption method to obtain encrypted data;

[0095] The signature encryption unit: used to perform a digital signature on the encrypted data to obtain the original digital digest, and perform an encryption process on the original digital digest again by using the private key;

[0096] The first 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest.

[0097] The transmitting antenna unit: used to transmit the encrypted data, the encrypted original digital digest, and the public key after being modulated and demodulated by the first 5G baseband unit. The specific details and benefits of the 5G encryption terminal are the same as those of the above-mentioned data security processing method for a nuclear power plant, and will not be elaborated here.

[0098] Secondly, the first security unit in this embodiment and the second security unit in the next embodiment both use the 8051 security chip, and the security chip has the following functions:

[0099] 1. Support the AES / DES algorithm;

[0100] 2. Support the embedding of user-defined algorithms;

[0101] 3. Enhanced 8051 security kernel;

[0102] 4. Bus encryption with a metal shielding protection layer;

[0103] 5. Chip anti-tampering design;

[0104] 6. Both programs and data are encrypted and stored. At the same time, to meet the communication requirements of special scenarios.

[0105] Secondly, to meet the communication requirements of special scenarios, the chip also meets the following functions:

[0106] 1. Cpu kernel: Enhanced 8051;

[0107] 2. 4KV electrostatic protection;

[0108] 3. Operating voltage: 1.62V - 5.5V;

[0109] 4. Ambient temperature: -40°C - 105°C;

[0110] 5. Program space: 32KB program storage area, 4KB NVM data storage area, 3KB RAM;

[0111] 6. Communication rate: 400Kps.

[0112] See Figure 5 The following shows a flowchart of a data security processing method for a nuclear power plant according to another embodiment of the present invention. The method includes the following steps:

[0113] Step 11: The 5G decryption terminal receives the encrypted data generated by the 5G encryption terminal using the data encryption method to encrypt the received monitoring data; in this embodiment, the encryption process of the monitoring data is executed in the 5G encryption terminal; the encryption process is as follows:

[0114] Step 201: Obtain the key K: Use the asymmetric encryption algorithm to generate the key K; in this embodiment, the encryption key and the decryption key are the same. The key is negotiated between the receiver (5G decryption terminal) and the sender (5G encryption terminal), but it cannot be directly transmitted over the network, otherwise the key will be leaked;

[0115] Step 202: Encryption: Use the AES encryption algorithm to encrypt the data information. The processing formula is as follows:

[0116] C = E(K, P), where P is the plaintext (data that has not been encrypted), K is the key, C is the ciphertext, and E is the AES encryption function. That is, by taking the plaintext P and the key K as the input parameters of the encryption function, the encryption function E will output the ciphertext C. In this embodiment, the AES encryption algorithm uses AES-128, where the key length is 128 bits and the number of encryption rounds is 10 rounds. That is, in the encryption function E, a round function will be executed, and this round function will be executed 10 times. The operations performed in the first 9 executions of this round function are the same, and only the 10th time is different. That is to say, a plaintext block will be encrypted for 10 rounds. The core of AES is to implement all the operations in one round.

[0117] The processing unit of AES is a byte. The 128-bit input plaintext block P and the input key K are both divided into 16 bytes, denoted as P = P0 P1…P15 and K = K0 K1…K15 respectively. For example, if the plaintext block is P = abcdefghijklmnop, where the character a corresponds to P0 and p corresponds to P15. Generally, the plaintext block is described by a square matrix in bytes, called the state matrix. In each round of the algorithm, the content of the state matrix changes continuously, and the final result is output as the ciphertext. The arrangement order of the bytes in this matrix is from top to bottom and from left to right in sequence, as Figure 3 shown.

[0118] The overall structure of AES is as Figure 4 shown, where W[0,3] refers to the 128-bit key composed of the concatenation of W[0], W[1], W[2], and W[3]. The round functions in the 1st to 9th rounds of encryption are the same, including 4 operations: substitution bytes, shift rows, mix columns, and add round key. The column mixing is not performed in the last round of iteration. In addition, before the first round of iteration, an XOR encryption operation is first performed on the plaintext and the original key.

[0119] Step 21: The 5G decryption terminal uses the data decryption method corresponding to the data encryption method to decrypt the encrypted data to obtain the monitoring data. Specifically, the decryption process in this embodiment is as follows:

[0120] The ciphertext C is decrypted using the AES decryption algorithm, and the processing formula is as follows:

[0121] P = D(K, C), where D is the AES decryption function. That is, by taking the ciphertext C and the key K as the input parameters of the decryption function, the decryption function will output the plaintext P.

[0122] In Figure 4The AES decryption process is shown in [Figure 0]. The decryption process is still 10 rounds, and the operation in each round is the inverse operation of the encryption operation. Since the four-round operations of AES are all reversible, one round of the decryption operation is to sequentially perform inverse shift rows, inverse substitution bytes, add round key, and inverse mix columns. Similar to the encryption operation, the inverse mix columns are not performed in the last round. Before the first round of decryption, a key encryption operation is performed once.

[0123] Step 31: The 5G decryption terminal sends the decrypted monitoring data to the data terminal. In this embodiment, the 5G decryption terminal and the data terminal can be connected wirelessly, or can be connected by wire using a network cable or a communication cable.

[0124] As a further optimization, in this embodiment, in order to improve the integrity of the data again, on the basis of the AES encryption algorithm, the encrypted data stream is digitally signed. The role of the signature has two points. One is that the fact of the signature is difficult to deny, thus determining the fact that the entire data stream has been signed; the other is that the signature is not easily forged, thus determining that the data stream has not been tampered with or intercepted. In this way, the digital signature can be used to prevent electronic information from being forged or the data being modified easily.

[0125] In this embodiment, the formation of the digital signature and the encryption process are executed in the 5G encryption terminal, and the decryption verification process of the digital signature is completed in the 5G decryption terminal.

[0126] Then the formation of the digital signature and the encryption process include the following steps:

[0127] Step 10.1: The 5G encryption terminal uses the SHA encoding method to generate a 128-bit original digital digest for the encrypted data;

[0128] Step 10.2: The 5G encryption terminal uses the private key to encrypt the original digital digest again to form a digital signature;

[0129] Step 10.3: Send the public key and the encrypted original digital digest to the 5G decryption terminal.

[0130] Then the decryption verification process for the digital signature includes the following steps:

[0131] Step 30.1: The 5G decryption terminal uses the private key to encrypt the encrypted original digital digest obtained by using the SHA encoding method to generate a 128-bit original digital digest for the encrypted data, and the public key corresponding to the encrypted original digital digest;

[0132] Step 30.2: The 5G decryption terminal uses the public key to decrypt the encrypted original digital digest to obtain the original digital digest;

[0133] Step 30.3: The 5G decryption terminal uses the SHA encoding method to generate a new digital digest for the received encrypted data again;

[0134] Step 30.4: The 5G decryption terminal determines whether the original digital digest and the new digital digest are the same. If they are the same, the data transmission is normal; if they are different, the data transmission is abnormal.

[0135] An embodiment of the present invention also provides a 5G decryption terminal for data security processing in a nuclear power plant. The terminal includes:

[0136] A receiving antenna unit: used to receive encrypted data, the original encrypted digital digest, and the public key corresponding to the original encrypted digital digest.

[0137] A second 5G baseband unit: used to modulate and demodulate the encrypted data, the original encrypted digital digest, and the public key received by the receiving antenna unit;

[0138] A second security unit: used to decrypt the modulated and demodulated encrypted data using a data decryption method corresponding to the data encryption method to obtain monitoring data;

[0139] A signature decryption unit: used to generate a new digital digest for the modulated and demodulated encrypted data again using the SHA encoding method, and decrypt the original encrypted digital digest using the public key to obtain the original digital digest, and compare whether the original digital digest and the new digital digest are the same.

[0140] A second network unit: used to establish a communication connection with a data terminal and send the decrypted monitoring data to the data terminal.

[0141] The specific details and benefits of the 5G decryption terminal are the same as those of the above-mentioned data security processing method for a nuclear power plant, and will not be elaborated here.

[0142] An embodiment of the present invention also provides a data security processing system for a nuclear power plant: The system includes:

[0143] A detection device: used to monitor the nuclear power plant to obtain monitoring data;

[0144] A data terminal: used to display the monitoring data;

[0145] A 5G encryption terminal arranged on the side of the detection device. The terminal includes:

[0146] A first network unit: used to establish a communication connection with the detection device and obtain the monitoring data monitored by the detection device;

[0147] A first security unit: used to encrypt the monitoring data using a data encryption method to obtain encrypted data;

[0148] Signature encryption unit: used to perform digital signature on the encrypted data to obtain the original digital digest, and perform encryption processing on the original digital digest again using the private key;

[0149] First 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest.

[0150] Transmitting antenna unit: used to transmit the encrypted data, the encrypted original digital digest, and the public key after modulation and demodulation by the first 5G baseband unit;

[0151] 5G decryption terminal arranged on the data terminal side, and this terminal includes:

[0152] Receiving antenna unit: used to receive the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest sent by the transmitting antenna unit.

[0153] Second 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key received by the receiving antenna unit;

[0154] Second security unit: used to decrypt the encrypted data after modulation and demodulation using the data decryption method corresponding to the data encryption method to obtain the monitoring data;

[0155] Signature decryption unit: used to generate a new digital digest again for the encrypted data after modulation and demodulation using the SHA coding method, and decrypt the encrypted original digital digest using the public key to obtain the original digital digest, and compare whether the original digital digest and the new digital digest are the same.

[0156] Second network unit: used to establish a communication connection with the data terminal and send the decrypted monitoring data to the data terminal.

[0157] The specific details and benefits of this system are the same as those of the above-mentioned data security processing method for a nuclear power plant, and will not be elaborated here.

[0158] The optional implementation manners of the embodiments of the present invention have been described in detail above in conjunction with the drawings. However, the embodiments of the present invention are not limited to the specific details in the above implementation manners. Within the technical concept scope of the embodiments of the present invention, various simple modifications can be made to the technical solutions of the embodiments of the present invention, and these simple modifications all belong to the protection scope of the embodiments of the present invention.

[0159] In addition, it should be noted that, in the case of no contradiction, the various specific technical features described in the above specific implementation manners can be combined in any suitable manner. To avoid unnecessary repetition, the embodiments of the present invention will not separately describe various possible combination manners.

[0160] Those skilled in the art can understand that all or part of the steps in implementing the methods of the above embodiments can be completed by instructing relevant hardware through a program. The program is stored in a storage medium, including several instructions to enable a (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the methods in the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs.

[0161] In addition, any combination can be made among the various different implementation manners of the embodiments of the present invention, as long as it does not violate the idea of the embodiments of the present invention, and it should also be regarded as the content disclosed by the embodiments of the present invention.

Claims

1. A data security processing system for a nuclear power plant, characterized in that: Including: Detection device: used to monitor a nuclear power plant and obtain monitoring data; Data terminal: used to display the monitoring data; A 5G encryption terminal arranged on the side of the detection device, the terminal includes: First network unit: used to establish a communication connection with the detection device and obtain the monitoring data monitored by the detection device; First security unit: used to encrypt the monitoring data using a data encryption method to obtain encrypted data; Signature encryption unit: used to perform a digital signature on the encrypted data to obtain the original digital digest, and perform an encryption process on the original digital digest again using a private key; First 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest; Transmitting antenna unit: used to transmit the encrypted data, the encrypted original digital digest, and the public key after modulation and demodulation by the first 5G baseband unit; A 5G decryption terminal arranged on the side of the data terminal, the terminal includes: Receiving antenna unit: used to receive the encrypted data, the encrypted original digital digest, and the public key corresponding to the encrypted original digital digest sent by the transmitting antenna unit; Second 5G baseband unit: used to modulate and demodulate the encrypted data, the encrypted original digital digest, and the public key received by the receiving antenna unit; Second security unit: used to decrypt the encrypted data after modulation and demodulation using a data decryption method corresponding to the data encryption method to obtain the monitoring data; Signature decryption unit: used to generate a new digital digest again for the encrypted data after modulation and demodulation using the SHA coding method, and decrypt the encrypted original digital digest using the public key to obtain the original digital digest, and compare whether the original digital digest and the new digital digest are consistent; Second network unit: used to establish a communication connection with the data terminal and send the decrypted monitoring data to the data terminal.

Images