A power data security distribution method, device and system based on data characteristics

Abstract

A power data security distribution method, device and system, characterized in that the method comprises the following steps: step 1, collecting the distribution characteristics of the original power data, and generating a false record set based on the distribution characteristics; step 2, adding the false record set to the power data to be sent to obtain encrypted power data, and encrypting the false record set using an encryption algorithm; step 3, merging the encrypted power data, the encrypted false record set and the public key in the encryption algorithm, and sending to the block chain power data processing system. The method fully considers the particularity of power data and reasonably encrypts based on the particularity, so that the encryption and decryption method is more reasonable and efficient, and under the premise of reducing the complexity of the encryption process and reducing the operation amount, the safety of the power data is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of power system data processing, and more particularly, to a power data security distribution method, device and system based on data characteristics. BACKGROUND

[0002] As a representative of new generation information technology, blockchain will provide strong support in the upgrading process of the power system and provide full life cycle services for the new power system. In the process of building a new power system, blockchain can combine its own characteristics with the characteristics and challenges of the new power system to form a well-matched solution and promote the transformation and upgrading of the power system.

[0003] This technology does not require a traditional centralized structure, but through encryption algorithms, consensus mechanisms, timestamps and other technical means, it realizes point-to-point transactions, coordination and cooperation in a distributed system without relying on a credit center, thereby avoiding the problems of data security, coordination efficiency and risk control that exist in centralized institutions. This technology also has the characteristics of distributed peer-to-peer, data block chain association, non-forgery and tamper-proofing, transparency and trustworthiness, and high reliability, which naturally matches the decentralized nature of the new power system. Through the consensus mechanism, smart contracts and other blockchain technologies, the system can solve the problems caused by the large number of system participants and the diversification of data information in the construction of the new power system, which is gradually distributed. Through the decentralized trust system and data sharing system built by system participants, collaboration between parties is achieved, and a more efficient collaboration method is achieved.

[0004] However, after combining the data transmission and networking mode of the power system with the blockchain technology, there are still problems such as increased data security risks and significantly reduced data reliability. During the transmission of power data on the blockchain, the data is vulnerable to theft, attack and tampering by malicious nodes through collusion.

[0005] Further, since the power grid architecture in the power system is very large, the power data of the new power system has the characteristics of larger data volume and higher real-time requirements of power electronic devices or transaction systems compared to many other fields. Under this premise, during the data transmission and processing process, it is necessary to solve the problems of not too high encryption complexity, not too many computing resource consumption, overcome the impact of watermark embedding on data usability, and ensure security to prevent collusion attacks. However, there is no similar blockchain technology in the prior art that can solve the above problems at the same time.

[0006] Therefore, in order to ensure the security and reliability of power data, the present application provides a power data security distribution method, device and system based on data characteristics. SUMMARY

[0007] In order to solve the problems in the prior art, the present application provides a power data security distribution method, device and system based on data characteristics, which generates a false data set by collecting the distribution characteristics of original power data, and encrypts the power data to be sent through the false record set, so as to realize the secure transmission of power data.

[0008] The present application adopts the following technical solutions.

[0009] In the first aspect of the present application, a power data security distribution method based on data characteristics is provided, which comprises the following steps: step 1, collecting the distribution characteristics of original power data, and generating a false record set based on the distribution characteristics; step 2, adding the false record set to the power data to be sent to obtain encrypted power data, and encrypting the false record set by using an encryption algorithm; step 3, merging the encrypted power data, the encrypted false record set and the public key in the encryption algorithm, and sending them to a block chain power data processing system.

[0010] Preferably, the method for obtaining the distribution characteristics is to calculate the original power data to obtain the central tendency, dispersion tendency and distribution form of the original power data.

[0011] Preferably, data indicators representing one or more of the central tendency, dispersion tendency and distribution form are collected; and the multiple data indicators are combined to obtain the false record set.

[0012] Preferably, the method for obtaining the encrypted power data comprises: step 2.1, converting the power data to be sent into a matrix graph and performing frequency domain transformation to obtain a frequency domain graph of the power data to be sent; step 2.2, adding the encoded false record set to the frequency domain graph; and step 2.3, performing inverse frequency domain transformation on the frequency domain graph with the encoding to obtain the encrypted power data.

[0013] Preferably, in the encryption method of the false record set, the public key is , and the private key is ; wherein , and are constants, and satisfy , and are coprime numbers, ; in the above formula, and are two prime numbers which are not equal.

[0014] Preferably, the method further includes receiving and decrypting the power data that has been sent to the blockchain power data processing system; wherein the decryption process includes: step 3.1, obtaining the public key in the encryption algorithm of the sent power data, and using the public key to decrypt the encrypted fake record set to obtain the fake record set; step 3.2, encoding the fake record set and performing a difference operation with the frequency domain transformation of the encrypted power data to obtain a frequency domain diagram; step 3.3, performing an inverse frequency domain transformation on the frequency domain diagram to recover the power data to be sent.

[0015] Preferably, the original power data includes power data to be sent from the current data distribution terminal and power data from other data distribution terminals in the blockchain network.

[0016] A second aspect of the present invention relates to a power data secure distribution device based on data features. The device is used to implement a power data secure distribution method as described in the first aspect of the present invention. The device includes a data feature extraction module, a data encryption module, and a data distribution module. The feature extraction module is used to collect the distribution features of the original power data and generate a set of false records based on the distribution features. The data encryption module is used to add the set of false records to the power data to be sent to obtain encrypted power data, and simultaneously encrypt the set of false records using an encryption algorithm. The data distribution module is used to merge the encrypted power data, the encrypted set of false records, and the public key from the encryption algorithm, and then send them to a blockchain power data processing system.

[0017] Preferably, the device can also be used to achieve secure data reception; and the device further includes a data receiving module and a data decryption module; wherein, the data decryption module is used to obtain the public key in the encryption algorithm of the transmitted power data, and use the public key to decrypt the encrypted fake record set to obtain the fake record set; at the same time, the module encodes the fake record set and performs a difference operation with the frequency domain transformation of the encrypted power data to obtain a frequency domain diagram; and after performing an inverse frequency domain transformation on the frequency domain diagram, the power data to be transmitted is recovered.

[0018] A third aspect of this invention relates to a secure power data distribution system based on data characteristics. The system is used to implement a secure power data distribution method as described in the first aspect of this invention. Furthermore, the system is a blockchain system, including a secure data distribution device, a secure data receiving device, and a cloud server. The secure data distribution device receives a set of fake records generated by the cloud server and transmits power data based on this fake dataset. The cloud server receives the power data from the secure distribution device and forwards it to the corresponding secure data receiving device. The secure data receiving device receives and decrypts the power data.

[0019] The beneficial effects of this invention are that, compared with the prior art, the power data secure distribution method, apparatus, and system of this invention can collect the distribution characteristics of the original power data to generate a fake dataset, and encrypt the power data to be sent using the fake record set, thereby achieving secure transmission of power data. This invention fully considers the special characteristics of power data and performs reasonable encryption based on these characteristics, making the encryption and decryption methods more reasonable and efficient. While reducing the complexity of the encryption process and the amount of computation, it ensures the security of power data.

[0020] The beneficial effects of the present invention also include:

[0021] 1. The spoof record set used in this invention possesses characteristics related to the original power data. Therefore, upon receiving this transmitted power data, the spoof record set can be used to further verify the received power data, detecting errors or data tampering during transmission. Furthermore, based on the content of the spoof record set, the severity of data errors or tampering can be determined, and based on this severity, a reasonable choice can be made between repairing the data or re-requesting and receiving the same data content.

[0022] 2. The encryption method for the power data itself in this invention is relatively simple and computationally inefficient. Therefore, after this layer of encryption, other encryption algorithms can be used to further encrypt the data or channel during actual transmission, thus ensuring the security of the power data at multiple levels. Furthermore, if some power data is tampered with during transmission, the encryption steps in this invention can effectively uncover the tampered data during data recovery, allowing for the repair or retransmission of the corresponding data, saving significant channel resources.

[0023] 3. The method of this invention can generate a set of fake records that conform to the distribution characteristics of the original power data as a digital watermark. In this way, the method of this invention can solve the problems of excessive encryption complexity and excessive computational resource consumption, overcome and reduce the impact of watermark embedding on data availability, and also ensure security. Attached Figure Description

[0024] Figure 1 This is a flowchart illustrating the steps of a secure power data distribution method according to the present invention.

[0025] Figure 2 This is a schematic diagram of the structure of a power data security distribution device based on data characteristics according to the present invention;

[0026] Figure 3This is a schematic diagram of the architecture of a power data security distribution system based on data characteristics in this invention. Detailed Implementation

[0027] The present application will be further described below with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solutions of the present invention, and should not be construed as limiting the scope of protection of the present application.

[0028] Figure 1 This is a schematic diagram illustrating the steps of a secure power data distribution method according to the present invention. Figure 1 As shown, the first aspect of the present invention relates to a method for secure distribution of power data, the method comprising steps 1 to 3.

[0029] Step 1: Collect the distribution characteristics of the raw power data and generate a fake record set based on the distribution characteristics.

[0030] First, in order to achieve encrypted transmission of the power data to be sent in this invention, the basic characteristics of power data are fully considered, and relevant content is extracted from the power data itself as the basis for encryption based on these characteristics.

[0031] It is understood that the raw power data in this invention can be information containing switching and analog signals at various locations within the power grid. This data differs significantly from ordinary data transmitted in typical networks. These data possess unique characteristics; for example, switching data only includes binary data of 0s and 1s. Analog data, under conditions of long-term power grid stability, exhibits a strong normal distribution.

[0032] Furthermore, these data also exhibit strong correlations. For example, analog signal data collected by a device at a certain location at the current moment may overlap with analog signal data collected by another device at the next moment. In response to these characteristics of power data, this invention collects data distribution characteristic parameters to encrypt the data.

[0033] Preferably, the method for obtaining distribution characteristics is to perform calculations on the original power data to obtain the central tendency, dispersion trend and distribution pattern of the original power data.

[0034] It is understandable that the collection of distribution characteristics of raw power data can include three aspects: central tendency, dispersion, and distribution pattern. Specifically, according to existing technologies, data indicators characterizing the central tendency of data typically include the mode, median, numerical mean, harmonic mean, geometric mean, etc. In this invention, one or more of these data indicators can be used to express the central tendency of the data itself.

[0035] In addition, data indicators that characterize dispersion include variance, standard deviation, range, mean deviation, coefficient of variation, etc. You can also consider using indicators such as the ratio of disparities and interquartile range to characterize data trends based on the characteristics of the data itself.

[0036] Third, indicators such as skewness and positive / negative kurtosis can also be used to characterize the distribution pattern of data.

[0037] Preferably, data indicators are collected to characterize one or more of the central tendency, dispersion, and distribution pattern; multiple data indicators are combined to obtain a spurious record set.

[0038] It is understood that the method in this invention can consider using one or more of the aforementioned data indicators in combination to generate a fake record set. The fake record set can be generated as a vector or matrix diagram composed of multiple data indicators, etc.

[0039] Step 2: Add the fake record set to the power data to be sent to obtain encrypted power data, and at the same time encrypt the fake record set using an encryption algorithm.

[0040] It is understandable that various methods can be used to encrypt power data in this invention. All encryption methods can utilize the spoof record set generated in step 1. After generating the spoof record set, in one embodiment of this invention, the content of the spoof record set is encoded and added to the power data converted into a matrix diagram, thereby realizing the processing of the power data. This processing can also be referred to as encryption in this application. Since this processing method is relatively simple, it can be further encrypted using other methods during actual transmission, thereby further enhancing the data's security level.

[0041] Preferably, the method for obtaining encrypted power data includes: step 2.1, converting the power data to be sent into a matrix diagram and then performing a frequency domain transformation to obtain a frequency domain diagram of the power data to be sent; step 2.2, encoding the fake record set and adding it to the frequency domain diagram; step 2.3, performing an inverse frequency domain transformation on the frequency domain diagram with added encoding to obtain encrypted power data.

[0042] Understandably, in this invention, power data can be converted into binary code and arranged sequentially into a data matrix to generate a matrix diagram. To incorporate a set of spoofed records, the generated matrix diagram undergoes a frequency domain transformation. After the transformation, a set of spoofed records that meets the requirements and has been encoded is added. Then, the power data is obtained by performing an inverse frequency-time domain transformation. The resulting power data is then encrypted power data.

[0043] In addition, for the convenience of the decryption process at the power data receiving end, the present invention also needs to transmit the fake record set to the other end. In order to ensure the security of the fake record set itself, the present invention considers encrypting the fake record set before transmission.

[0044] Asymmetric encryption. Key pair generation and use. Preferred parameter settings: In the encryption method for spoofed record sets, the public key is... The private key is ;in, , and It is a constant and satisfies , and They are coprime numbers. In the above formula, and They are two distinct prime numbers.

[0045] Using the above method, spoofed record sets can be encrypted. Because a public and private key are generated, the spoofed record set can be encrypted locally using the private key before transmission. The receiving device can then use the public key to decrypt the spoofed record set.

[0046] Step 3: After merging the encrypted power data, the encrypted fake record set, and the public key in the encryption algorithm, send them to the blockchain power data processing system.

[0047] After the encryption process is completed, the method of the present invention can send out the corresponding data content. After being forwarded by the cloud server, the receiving device can receive the corresponding content and decrypt it.

[0048] Preferably, the method further includes receiving and decrypting the power data that has been sent to the blockchain power data processing system; wherein, the decryption process includes: step 3.1, obtaining the public key in the encryption algorithm of the sent power data, and using the public key to decrypt the encrypted fake record set to obtain the fake record set; step 3.2, encoding the fake record set and performing a difference operation with the frequency domain transformation of the encrypted power data to obtain a frequency domain graph; difference operation step 3.3, performing an inverse frequency domain transformation on the frequency domain graph to recover the power data to be sent.

[0049] In the method of this invention, in order to decrypt the fake record set first, the public key generated by the encryption algorithm needs to be sent along with the data during the data transmission process. Therefore, the fake record set can be decrypted using this public key. Then, the obtained fake record set is encoded in the same way and subtracted from the encrypted power data after frequency domain transformation to obtain the frequency domain diagram of the power data to be sent. After undergoing inverse frequency-time domain transformation, the power data can be obtained.

[0050] Preferably, the original power data includes power data to be sent from the current data distribution terminal and power data from other data distribution terminals in the blockchain network.

[0051] It is understood that in this invention, a cloud server may be used as the main encryption module to generate a fake record set. Then, the contents of the fake record set are sent to a data security distribution device, and the encryption-related unit in the device is responsible for the auxiliary encryption process, thereby achieving encryption of the data to be sent.

[0052] Figure 2 This is a schematic diagram illustrating the structure of a power data security distribution device based on data characteristics, as described in this invention. Figure 2 As shown, in a second aspect, the present invention relates to a power data secure distribution device based on data features, wherein the device is used to implement a power data secure distribution method as described in the first aspect of the present invention; and the device includes a data feature extraction module, a data encryption module, and a data distribution module; wherein the feature extraction module is used to collect the distribution features of the original power data and generate a fake record set based on the distribution features; the data encryption module is used to add the fake record set to the power data to be sent to obtain encrypted power data, and simultaneously encrypt the fake record set using an encryption algorithm; the data distribution module is used to merge the encrypted power data, the encrypted fake record set, and the public key in the encryption algorithm, and then send them to a blockchain power data processing system.

[0053] Preferably, the device can also be used to achieve secure data reception; and the device further includes a data receiving module and a data decryption module; wherein, the data decryption module is used to obtain the public key in the encryption algorithm of the transmitted power data, and use the public key to decrypt the encrypted fake record set to obtain the fake record set; at the same time, the module encodes the fake record set and performs a difference operation with the frequency domain transformation of the encrypted power data to obtain a frequency domain diagram; and after performing an inverse frequency domain transformation on the frequency domain diagram, the power data to be transmitted is recovered.

[0054] It is understood that the power data security distribution device of this invention, in order to realize the various functions in the methods provided in the embodiments of this application above, may include hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should readily recognize that, in conjunction with the algorithm steps of the examples described in connection with the embodiments disclosed herein, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0055] This application embodiment can divide the device of the present invention into functional modules according to the above method examples. For example, each function can be divided into its own functional modules, or two or more functions can be integrated into one processing module. The integrated modules can be implemented in hardware or as software functional modules. It should be noted that the module division in this application embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0056] Specifically, the device of the present invention includes at least one processor, a bus system, and at least one communication interface. The processor may be a central processing unit (CPU), or it may be replaced by a field-programmable gate array (FPGA), an application-specific integrated circuit (ASIC), or other hardware, or the FPGA or other hardware and the CPU may work together as a processor.

[0057] The memory can be read-only memory (ROM) or other types of static storage devices capable of storing static information and instructions, random access memory (RAM) or other types of dynamic storage devices capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed discs, laser discs, optical discs, universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited to these. The memory can exist independently and be connected to the processor via a bus. The memory can also be integrated with the processor.

[0058] The hard drive can be a mechanical hard drive or a solid-state drive (SSD), etc. The interface card can be a host bus adapter (HBA), a redundant array of independent disks (RID), an expander card, or a network interface controller (NIC), etc., and this embodiment of the invention is not limited to any particular type. The interface card in the hard drive module communicates with the hard drive. The storage node communicates with the interface card of the hard drive module to access the hard drive in the hard drive module.

[0059] The hard drive interface can be Serial Attached Small Computer System Interface (SAS), Serial Advanced Technology Attachment (SATA), or Peripheral Component Interconnect Express (PCIe), etc.

[0060] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented using software programs, implementation can be, in whole or in part, in the form of a computer program product. This computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, computer instructions can be transmitted from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device containing one or more servers, data centers, etc., that can be integrated with the medium. The available media can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media (e.g., solid-state disks (SSDs)).

[0061] Figure 3This is a schematic diagram of the architecture of a power data security distribution system based on data characteristics, as described in this invention. Figure 3 As shown, in a third aspect, the present invention relates to a secure power data distribution system based on data characteristics, wherein the system is used to implement a secure power data distribution method as described in the first aspect of the present invention; and the system is a blockchain system, including a secure data distribution device, a secure data receiving device, and a cloud server; the secure data distribution device receives a set of fake records generated by the cloud server and transmits power data based on the fake dataset; the cloud server receives the power data from the secure distribution device and forwards it to the corresponding secure data receiving device; the secure data receiving device receives and decrypts the power data.

[0062] The beneficial effects of this invention are that, compared with the prior art, the power data secure distribution method, apparatus, and system of this invention can collect the distribution characteristics of the original power data to generate a fake dataset, and encrypt the power data to be sent using the fake record set, thereby achieving secure transmission of power data. This invention fully considers the special characteristics of power data and performs reasonable encryption based on these characteristics, making the encryption and decryption methods more reasonable and efficient. While reducing the complexity of the encryption process and the amount of computation, it ensures the security of power data.

[0063] The applicant of this invention has provided a detailed description of the embodiments of the invention in conjunction with the accompanying drawings. However, those skilled in the art should understand that the above embodiments are merely preferred embodiments of the invention. The detailed description is only intended to help readers better understand the spirit of the invention and is not intended to limit the scope of protection of the invention. On the contrary, any improvements or modifications made based on the inventive spirit of the invention should fall within the scope of protection of the invention.

Claims

1. A method for secure distribution of power data based on data characteristics, characterized in that, The method includes the following steps: Step 1: Collect the distribution characteristics of the raw power data and generate a fake record set based on the distribution characteristics; the method for obtaining the distribution characteristics is as follows: calculate the raw power data to obtain the central tendency, dispersion trend and distribution pattern of the raw power data; collect data indicators to characterize one or more of the central tendency, dispersion trend and distribution pattern; combine multiple data indicators to obtain the fake record set; Step 2: Add the fake record set to the power data to be sent to obtain encrypted power data, and simultaneously encrypt the fake record set using an encryption algorithm; the method for obtaining the encrypted power data includes: Step 2.1: After converting the power data to be transmitted into a matrix diagram, perform frequency domain transformation to obtain the frequency domain diagram of the power data to be transmitted; Step 2.2: Encode the spurious record set and add it to the power data frequency domain diagram; Step 2.3: After performing an inverse frequency domain transformation on the frequency domain graph of the coded power data, the encrypted power data is obtained; Step 3: After merging the encrypted power data, the encrypted fake record set, and the public key in the encryption algorithm, send them to the blockchain power data processing system.

2. The method for secure power data distribution based on data characteristics as described in claim 1, characterized in that: In the encryption algorithm of the fake record set, the public key is... The private key is ; in, , and It is a constant and satisfies , and They are coprime numbers. ; In the above formula, and They are two distinct prime numbers.

3. The method for secure power data distribution based on data characteristics as described in claim 2, characterized in that: The method also includes receiving and decrypting the power data that has been sent to the blockchain power data processing system; The decryption process includes: Step 3.1: Obtain the public key of the encryption algorithm in the sent power data, and use the public key to decrypt the encrypted fake record set to obtain the fake record set; Step 3.2: Encode the fake record set and perform a difference operation with the frequency domain transformation of the encrypted power data to obtain the frequency domain map of the power data; Step 3.3: After performing an inverse frequency domain transformation on the frequency domain graph of the power data, the power data to be transmitted is recovered.

4. The method for secure distribution of power data based on data characteristics as described in claim 3, characterized in that: The raw power data includes the power data to be sent in the current data distribution terminal and the power data in other data distribution terminals in the blockchain network.

5. A power data security distribution device based on data characteristics, characterized in that: The device is used to implement the power data security distribution method based on data characteristics as described in any one of claims 1-4; and, The device includes a data feature extraction module, a data encryption module, and a data distribution module; wherein... The data feature extraction module is used to collect the distribution characteristics of the raw power data and generate a set of false records based on the distribution characteristics; The data encryption module is used to add the fake record set to the power data to be sent to obtain encrypted power data, and at the same time, to encrypt the fake record set using an encryption algorithm; The data distribution module is used to merge the encrypted power data, the encrypted fake record set, and the public key in the encryption algorithm and send them to the blockchain power data processing system.

6. A power data security distribution device based on data characteristics as described in claim 5, characterized in that: The device can also be used to achieve secure data reception; and... The device further includes a data receiving module and a data decryption module; wherein... The data decryption module is used to obtain the public key in the encryption algorithm of the sent power data, and use the public key to decrypt the encrypted fake record set to obtain the fake record set; at the same time, the module encodes the fake record set and performs a difference operation with the frequency domain transformation of the encrypted power data to obtain the power data frequency domain diagram; and after performing an inverse frequency domain transformation on the power data frequency domain diagram, the power data to be sent is recovered.

7. A power data secure distribution system based on data characteristics, characterized in that: The system is used to implement the power data security distribution method based on data characteristics as described in any one of claims 1-4; and, The system is a blockchain system, which includes a secure data distribution device, a secure data receiving device, and a cloud server; The data security distribution device receives a set of fake records generated by the cloud server and sends the power data based on the set of fake records. The cloud server receives power data from the secure distribution device and then forwards it to the corresponding data security receiving device. The data security receiving device receives and decrypts power data.

Images