Five-defense management machine authorization communication method and device based on 4G cellular network

Abstract

The present invention discloses a five-defense management machine authorization communication method and device based on 4G cellular network, which belongs to the field of five-defense microcomputers in power systems. The present invention can open up the data connection channel between the digital communication of the smart unlocking key management machine and the SMS authorization of the authorized approver through the Internet of Things five-defense management machine authorization management server communication module based on 4G cellular network + point-to-point SMS, when the operator's SMS phone card or data traffic Internet of Things card cannot meet the original smart unlocking key management machine data communication and management personnel SMS authorization mechanism, and support the effective operation of the five-defense management authorization system of the power grid, with the characteristics of advanced functions, simple operation and convenient maintenance, rich in pioneering and innovative, and has broad application prospects in the power system.

Description

Technical Field

[0001] The present invention relates to the field of five-defense of microcomputers in power systems, and in particular to a method and device for authorized communication of a five-defense management machine based on a 4G cellular network. Background Art

[0002] The widespread application of the microcomputer five-defense system has made the management of its auxiliary equipment - unlocking keys - a part of substation safety management. Due to the universal unlocking nature of unlocking keys, they must be strictly authorized and monitored in management. The intelligent unlocking key management machine can manage electric unlocking keys, mechanical unlocking keys, intelligent unlocking keys, step-by-step keys, etc. It solves the problems of arbitrary use of emergency unlocking keys and incomplete records from a technical level.

[0003] The existing smart unlocking key management machine is equipped with an ordinary mobile phone SIM card, and the point-to-point SMS authorization mode is enabled. When applying for authorization, a point-to-point application SMS is sent to the authorization approval number, and the authorization approval number authorizes the operation through a point-to-point SMS authorization reply. Since the operator manages the SIM card with SMS and voice call functions in real name, and limits one person to one card and five numbers, the key management has encountered the embarrassing situation that no one can authenticate and open the card. The large number of smart unlocking key management machines can only use the Internet of Things card to solve this problem, but the Internet of Things card does not support sending point-to-point SMS to authorized mobile phones, and it is impossible to remotely authorize the smart unlocking key of the substation five-defense management machine through SMS. Therefore, the authorization management efficiency of the smart unlocking key of the substation five-defense management machine is low, and the security cannot be reliably guaranteed. Summary of the invention

[0004] The purpose of the present invention is to provide a five-defense management machine authorization communication method and device based on 4G cellular network. Without changing the existing SMS remote authorization mechanism, a smart unlocking key network authorization communication device with a simple structure based on the Internet of Things + point-to-point mobile phone text messages is provided. By integrating the core capabilities of the operator's Internet of Things, the network authorization capability of the five-defense smart unlocking key management machine based on the Internet of Things communication is realized.

[0005] The object of the present invention is achieved through the following technical solution, comprising the following steps:

[0006] The five-defense management machine authorization communication method based on 4G cellular network includes:

[0007] The communication module of the smart unlocking key management machine selects network authorization and sends an authorization application to the remote authorization communication management system of the IoT five-defense management machine through the 4G communication module;

[0008] The MQTT message server receives the authorization request from the smart unlocking key management machine, authenticates the identity of the smart unlocking key management machine and decrypts the data, and forwards the decrypted request data to the communication module;

[0009] The communication module receives the authorization request message forwarded from the MQTT message server, parses and processes the data, and verifies the device number. After the device number verification passes, the authorization request is forwarded to the authorization module;

[0010] The authorization module matches the authorized approver according to the device number, constructs the SMS access code, and calls the SMS module to send the authorization application SMS to the matched authorized approver;

[0011] The SMS module decodes the authorization approval SMS replied by the authorized approver, and sends the decoded source and destination numbers and SMS content to the authorization module;

[0012] The authorization module verifies the approval SMS, parses the device number, and matches the corresponding authorization application. After a successful match, it constructs an authorization response message and sends it to the communication module.

[0013] The communication module signs the device number and sends the signature data and authorization approval message to the MQTT server;

[0014] The MQTT message server re-encapsulates and encrypts the authorization approval message and sends it to the smart unlocking key management machine through the cellular network;

[0015] The smart unlocking key management machine decrypts the authorization approval message and verifies the device number signature. After the verification is passed, the control operation is performed according to the authorization instruction.

[0016] More specifically, the IoT five-defense management machine remote authorization communication management system includes an MQTT message server, a communication module, an authorization module, and a text message module.

[0017] More specifically, the SMS access code includes an industry gateway access number and a device number.

[0018] More specifically, the SMS module sends the authorization application SMS including establishing a TCP connection with an industry SMS gateway, sending the authorization application SMS to an authorized approver through the industry SMS gateway, and receiving a status report of the sending of the authorization application SMS.

[0019] More specifically, the smart unlocking key management machine can configure the MQTT server address, port number, user name, password, SSL / TLS, and can subscribe to the MQTT protocol topic.

[0020] The five-defense management machine authorization communication device based on 4G cellular network includes:

[0021] The smart unlocking key management machine applies for authorization from the remote authorization communication management system of the IoT five-defense management machine through the 4G cellular network, and controls the door opening according to the authorization approval result;

[0022] 4G communication module, used to connect the smart unlocking key management machine to the 4G network;

[0023] MQTT message server, used for data communication and transmission between the authorization management server communication module and the smart unlocking key management machine;

[0024] The authorization management server communication module is used for data transmission between the MQTT message server and the authorization module of the authorization management server;

[0025] The authorization module of the authorization management server is used for data transmission between the communication module and the SMS module;

[0026] The SMS module of the authorization management server connects to the industry gateway to send authorization application SMS to the authorizer and approver and receive authorization approval SMS from the authorizer and approver;

[0027] The authorized communication device Web management module provides information query and operation parameter setting functions for each module of the authorized communication device.

[0028] More specifically, the data communication and transmission between the authorization management server communication module and the smart unlocking key management machine establishes a transmission dedicated network through the Internet of Things platform at the network layer, and in terms of data transmission, the MQTT+JSON protocol is adopted.

[0029] More specifically, the MQTT protocol message carries a digital signature of the device number using the MD5 algorithm. After receiving the MQTT message, the server first verifies the signature and then performs further processing to ensure that the authorization request is not forged.

[0030] More specifically, the MQTT message server is MQTT server software developed based on the MQTT protocol.

[0031] More specifically, the authorized communication device Web management module:

[0032] Information query includes: online status query of smart unlocking key management machine, authorization application record query, and SMS log query;

[0033] The operation parameter settings include: smart unlocking key management machine device number setting, authorized approver setting, smart unlocking key management machine and authorized person binding setting, industry SMS gateway parameter configuration, and smart unlocking key management machine management authority setting.

[0034] More specifically, the smart unlocking key management machine has an authorized multi-tasking mode, which matches the corresponding smart unlocking key management machine authorization application according to the mobile phone number of the reply SMS and the SMS access code with the device number, thereby realizing the multi-tasking mode of authorization application.

[0035] More specifically, when the same smart unlocking key management device corresponds to multiple authorization approval numbers, the number that responds first is confirmed as the authorizer.

[0036] Compared with the prior art, the beneficial effects are:

[0037] The present invention can, when the operator's SMS phone card or data traffic Internet of Things card cannot meet the original smart unlocking key management machine data communication and management personnel SMS authorization mechanism, open up the data connection channel between the smart unlocking key management machine digital communication and the authorized approver SMS authorization through the Internet of Things five-defense management machine authorization management server communication module based on 4G cellular network + point-to-point SMS, support the effective operation of the power grid's authorization support system, has the characteristics of advanced functions, simple operation and convenient maintenance, is full of pioneering and innovative, and has broad development prospects and promotion value in the power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0039] Figure 1 : Flowchart of the authorization communication method of the five-defense management machine based on 4G cellular network.

[0040] Figure 2 : Diagram of the authorized communication device of the five-defense management machine based on 4G cellular network. DETAILED DESCRIPTION

[0041] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0042] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0043] Embodiment 1 Authorization communication method of five-defense management machine based on 4G cellular network

[0044] The communication method flow is as follows (such as Figure 1 shown):

[0045] S101: The communication module of the smart unlocking key management machine is started, initialized and network authorization is selected;

[0046] S102-103: The smart key management sends an MQTT+JSON protocol authorization application to the remote authorization communication management system of the IoT five-defense management machine through the 4G communication module;

[0047] S104: The MQTT message server receives the authorization request from the smart unlocking key management machine, authenticates the identity of the smart unlocking key management machine and decrypts the data, and forwards the decrypted request data to the communication module;

[0048] S105: The communication module receives the authorization request message forwarded from the MQTT message server, parses and processes the JSON data, and verifies the MD5 digital signature of the device number. After the device number verification passes, the authorization request is forwarded to the authorization module;

[0049] S106-107: The authorization module matches the authorized approver according to the device number, constructs the SMS access code of the industry gateway access number + the device device number, and calls the SMS module to send the authorization application SMS to the matched authorized approver; the SMS module establishes a TCP connection with the industry SMS gateway, sends the authorization application SMS to the authorized approver through the industry SMS gateway, and receives the status report of the authorization application SMS sending;

[0050] S108-109: The authorized approver replies to the authorization approval SMS. The industry SMS gateway submits the approval SMS replied by the authorized approver to the SMS module. The SMS module decodes the protocol and sends the decoded source and destination numbers and SMS content to the authorization module.

[0051] S110-111: The authorization module verifies the source and destination numbers of the approval SMS, and parses the device number from the destination number, matches the corresponding authorization application according to the device number and the source mobile phone number, records the authorization approval log after the match is successful, and constructs an authorization response message and sends it to the communication module;

[0052] S112: The communication module uses the private key to perform MD5 signature on the device number, and encapsulates the signature data and the authorization approval message into JSON data format, and sends it to the MQTT server; the MQTT server re-encapsulates and encrypts the authorization approval message in JSON format, and sends it to the smart unlocking key management machine through the 4G cellular network;

[0053] S113: The smart unlocking key management machine decrypts the authorization approval message and verifies the device number signature. After the verification passes, the control operation is performed according to the authorization instruction.

[0054] Embodiment 2 Authorized communication device of five-defense management machine based on 4G cellular network

[0055] The device structure is as follows Figure 2 As shown, including:

[0056] Intelligent unlocking key management machine (211), 4G communication module (212), MQTT message server (231), authorization management server communication module (232), authorization management server authorization module (233), authorization management server SMS module (234), authorization communication device Web management module, Internet of Things platform (221), industry SMS gateway (222), and authorizer approval mobile phone (24).

[0057] The following is the working principle of the specific device:

[0058] 1. Intelligent unlocking key management machine (211): It manages the special unlocking keys used in the unmanned substation microcomputer anti-error locking device, applies for authorization from the IoT five-defense management machine remote authorization communication management system (23) through the 4G cellular network, and controls the door opening according to the authorization approval result. When the user sends an unlocking request, the intelligent unlocking key management machine (211) sends an authorization request to the IoT five-defense management machine remote authorization communication management system (23) based on the 4G cellular network through the MQTT protocol. The intelligent unlocking key management machine (211) can configure the MQTT server address, port number, user name, password, SSL / TLS, subscribe to the MQTT protocol topic, receive authorization instructions from the authorization management server communication module (232), and identify the instructions to perform related operations;

[0059] 2. 4G communication module (212): used for the smart unlocking key management machine (211) to access the 4G network;

[0060] 3. MQTT message server (231): MQTT server software developed based on the MQTT protocol, which solves the data communication transmission problem between the remote authorization communication management system (23) of the IoT five-defense management machine and the smart unlocking key management machine (211), receives the authorization request from the smart unlocking key management machine (211) and forwards it to the authorization management server communication module (232), performs identity authentication of the smart unlocking key management machine, and encrypts data transmission;

[0061] 4. Authorization management server communication module (232): subscribes to the topic of the smart unlocking key management machine, receives data sent by the MQTT message server (231), receives relevant instructions from the authorization module (233) of the authorization management server and publishes information to the smart unlocking key management machine (211), and detects the online status of the smart unlocking key management machine;

[0062] 5. Authorization module (233) of the authorization management server: processes and analyzes the authorization request of the smart unlocking key management machine (211), queries the matching mobile phone number of the authorized approver, calls the SMS module (234) of the authorization management server to send the authorization application SMS to the authorized approver, processes and analyzes the SMS reply from the authorized approver, and calls the communication module (232) of the authorization management server to send the authorization result instruction to the smart unlocking key management machine (211);

[0063] 6. Authorization management server SMS module (234): connected to the industry SMS gateway (222), by calling the SMS sending and receiving capability of the industry SMS gateway (222), sending the authorization application point-to-point SMS to the authorization approver (24), receiving the authorization application SMS sending status report returned by the industry SMS gateway (222), and receiving the authorization approval SMS replied by the authorization approver (24);

[0064] 7. Authorized communication device web management module: provides information query and setting functions of operating parameters of each module of the authorized communication device. Information query includes: online status query of smart unlocking key management machine, authorization application record query, and SMS log query. Operating parameter settings include: smart unlocking key management machine device number setting, authorized approver setting, smart unlocking key management machine and authorizer binding setting, industry SMS gateway parameter configuration, and smart unlocking key management machine management authority setting.

[0065] Other working contents of the authorized communication device of the five-defense management machine based on 4G cellular network:

[0066] The communication between the smart unlocking key management machine (21) and the remote authorization communication management system (23) of the five-defense management machine of the Internet of Things establishes a transmission dedicated network through the Internet of Things platform (221) at the network layer. In terms of data transmission, the MQTT+JSON protocol is adopted, and the data transmission encryption of MQTT is used to ensure the security of data transmission. For the trusted verification of the smart unlocking key management machine (211), the digital signature of the device number through the MD5 algorithm is carried in the MQTT protocol message. After receiving the MQTT message, the MQTT message server (231) first verifies the signature, and then further processes it after passing it to ensure that the authorization request is not counterfeited. The MQTT+JSON protocol interaction format is as follows:

[0067]

[0068] The JSON format is as follows:

[0069] Fields Parent element name type Is it necessary describe Type root number yes Type, SMS type is 1 Body root object yes Data Entity PartID Body number yes Bureau Number DeviceID Body number yes Device No. SrcPhone Body number yes Source MSISDN DstPhone Body number yes Target MSISDN Content Body string yes SMS content Signature Body string yes Device ID MD5 digital signature

[0070] Smart unlocking key management machine authorization multi-tasking mode: For each authorization request initiated by the smart unlocking key management machine, the server side uses the industry gateway access number + device number as the SMS access code to send an authorization application SMS to the authorized approver's mobile phone. The server matches the corresponding smart unlocking key management machine authorization application according to the mobile phone number of the reply SMS and the SMS access code with the device number, thereby realizing the multi-tasking mode of authorization application.

[0071] Multiple authorization number processing mechanism: If the same smart unlocking key management device corresponds to multiple authorization approval numbers, the number that responds first is confirmed as the authorizer.

[0072] In this embodiment, the output control measures of the relevant units obtained for each monitoring channel are substituted into the initial mode, and the flow calculation verification is performed. If the verification is passed, the control measures are effective. The above-mentioned method for analyzing the control measures of the fault consequence considering the fault transfer ratio is a specific embodiment of the present invention, which has embodied the substantial characteristics and progress of the present invention. According to the actual use needs, under the enlightenment of the present invention, the shape, structure and other aspects of the same modification can be made, which are all within the protection scope of this scheme.

[0073] The above is only for explaining the implementation mode of the present invention and is not intended to limit the present invention. For those skilled in the art, any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention without creative work should be included in the protection scope of the present invention.

Claims

1. A five-defense management machine authorization communication method based on 4G cellular network, characterized in that: include: The communication module of the smart unlocking key management machine selects network authorization and sends an authorization application to the remote authorization communication management system of the IoT five-defense management machine through the 4G communication module; The MQTT message server receives the authorization request from the smart unlocking key management machine, authenticates the identity of the smart unlocking key management machine and decrypts the data, and forwards the decrypted request data to the communication module; The communication module receives the authorization request message forwarded from the MQTT message server, parses and processes the data, and verifies the device number. After the device number verification passes, the authorization request is forwarded to the authorization module; The authorization module matches the authorized approver according to the device number, constructs the SMS access code, and calls the SMS module to send the authorization application SMS to the matched authorized approver; After the authorized approver replies, the SMS module decodes the authorization approval SMS replied by the authorized approver, packages the decoded source and destination numbers and SMS content, and resends it to the authorization module; The authorization module verifies the reply approval SMS, parses the device number, and then matches the corresponding authorization application. After the match is successful, it constructs an authorization response message and sends it to the communication module; The communication module signs the device number and sends the signature data and authorization approval message to the MQTT server; The MQTT message server re-encapsulates and encrypts the authorization approval message and sends it to the smart unlocking key management machine through the 4G cellular network; The 4G communication module receives the encrypted authorization approval message and transmits it to the smart unlocking key management machine. The smart unlocking key management machine decrypts the authorization approval message and verifies the device number signature. After the verification is passed, the control operation is performed according to the authorization instruction.

2. The method according to claim 1, characterized in that: The SMS access code includes the industry gateway access number and the equipment device number.

3. The method according to claim 1, characterized in that: The method for the SMS module to send the authorization application SMS is: establishing a TCP connection with the industry SMS gateway, sending the authorization application SMS to the authorized approver through the industry SMS gateway, and receiving a status report on the sending of the authorization application SMS.

4. A five-defense management machine authorization communication device based on 4G cellular network, characterized in that: The device is used to execute the five-defense management machine authorization communication method according to any one of claims 1 to 3, including: The smart unlocking key management machine applies for authorization from the remote authorization communication management system of the IoT five-defense management machine through the 4G cellular network, and controls the door opening according to the authorization approval result; 4G communication module, used to connect the smart unlocking key management machine to the 4G network; MQTT message server, used for data communication and transmission between the authorization management server communication module and the smart unlocking key management machine; The authorization management server communication module is used for data transmission between the MQTT message server and the authorization module of the authorization management server; The authorization module of the authorization management server is used for data transmission between the communication module and the SMS module; The SMS module of the authorization management server connects to the industry gateway to send authorization application SMS to the authorizer and approver and receive authorization approval SMS from the authorizer and approver; The authorized communication device Web management module provides information query and operation parameter setting functions for each module of the authorized communication device.

5. The device according to claim 4, characterized in that: The MQTT message server, authorization management server communication module, authorization management server authorization module, and authorization management server SMS module belong to the remote authorization communication management system of the Internet of Things five-defense management machine.

6. The device according to claim 4, characterized in that: The data communication and transmission between the authorization management server communication module and the smart unlocking key management machine establishes a transmission dedicated network through the Internet of Things platform at the network layer, and in terms of data transmission, the MQTT+JSON protocol is adopted.

7. The device according to claim 4, characterized in that: The MQTT message server is software developed based on the MQTT protocol.

8. The device according to claim 4, characterized in that: The functions of the authorized communication device Web management module include: Information query: online status query of smart unlocking key management machine, authorization application record query, SMS log query; Operation parameter settings: smart unlocking key management machine device number setting, authorized approver setting, smart unlocking key management machine and authorizer binding setting, industry SMS gateway parameter configuration, smart unlocking key management machine management authority setting.

9. The device according to claim 4, characterized in that: The smart unlocking key management machine has an authorized multi-task mode, which matches the corresponding smart unlocking key management machine authorization application according to the mobile phone number of the reply SMS and the SMS access code with the device number, thereby realizing the multi-task mode of authorization application.

10. The device according to claim 4, characterized in that: If the same smart unlocking key management device corresponds to multiple authorization approval numbers, the number that responds first is confirmed as the authorizer.

Images