A secure transmission method of power distribution network state data

Abstract

The application discloses a kind of power distribution network state data security transmission method, comprising: collecting power distribution network state data, and obtaining primary encrypted data and primary key by encryption;Data acquisition device sends its primary encrypted data to the nearest n-1 data acquisition device, and receives the primary encrypted data from the n-1 data acquisition device;The n primary encrypted data including its primary encrypted data is encrypted to obtain secondary encrypted data and secondary key;Secondary encrypted data is transmitted to cloud through external network, and primary key and secondary key are sent to control center through internal network;Control center downloads secondary encrypted data, and decrypts according to secondary key and primary key, to obtain original power distribution network state data.The application transmits large amount of encrypted data by external network, and transmits key corresponding to encrypted data by internal network with high security, which meets the transmission of large amount of power distribution network data while ensuring the security of data.

Description

Technical Field

[0001] The present invention relates to the technical field of power distribution network transmission, and in particular to a method for securely transmitting power distribution network status data. Background Art

[0002] With socioeconomic development, the number of electricity users has increased, and grid changes have become more frequent. This has increased the probability of distribution network failures, complicated dispatching operations, and increased the workload for maintenance. This has also posed further challenges in terms of safety and reliability. Monitoring and management of grid operations relies heavily on manual labor, resulting in low efficiency and poor results. Therefore, using the massive amounts of operational data generated by distribution networks to monitor grid operations in real time and regulate power delivery, ensure power quality for users, effectively prevent electricity theft by metering devices, and improve the economic performance of the grid have become pressing challenges for power supply departments. Distribution networks generally use industrial fiber optic ring networks or GPRS / 3G wireless networks as data transmission channels. Due to the lengthy construction period for fiber optic ring networks, geographical constraints in cities, and high costs, power supply companies have generally chosen GPRS / 3G wireless networks as the primary data transmission network for distribution networks. Distribution network data is critical. If tampered with or falsified, it can lead to widespread power outages in cities, severely impacting public life and economic development. In particular, data transmitted over GPRS / 3G wireless networks is susceptible to hijacking, tampering, and falsification.

[0003] The "Intelligent Distribution Network Communication Security System" disclosed in Chinese patent documents has a publication number of CN106789015B and a publication date of 2020-05-01. It includes an identity authentication server and a distribution device. The distribution device includes a key storage module and a device communication module that are interconnected; the identity authentication server includes an offline registration module, a key generation module, a key management module, and a service communication module; the offline registration module is connected to the key generation module, the key generation module is connected to the key management module, and the key management module is connected to the service communication module; the service communication module is connected to the device communication module of the distribution device; and solves the problem that traditional distribution networks are maliciously tampered with and forged device status and operating data, and criminals transmit maliciously modified data to the dispatching control center, causing the dispatching control center to make incorrect judgments and operations, and ultimately causing distribution safety accidents. However, this technology does not have measures to encrypt data, but only increases the difficulty of obtaining data from the public network. Once the public network distribution network is invaded, the data is leaked. Therefore, it is necessary to consider how to encrypt the transmitted data to prevent data leakage. Summary of the Invention

[0004] The present invention aims to overcome the problem in the prior art that data of the distribution network is easily stolen and leaked when transmitted through the public network, resulting in insufficient security. A method for securely transmitting distribution network status data is provided. By integrating the internal and external networks, the external network transmits encrypted data with a large amount of data, and the internal network with high security transmits the key corresponding to the encrypted data. This ensures the security of the data while meeting the requirements of large-scale distribution network data transmission.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions:

[0006] A method for securely transmitting distribution network status data, comprising:

[0007] S1. The data acquisition device collects distribution network status data and encrypts it through the primary encryption module to obtain primary encrypted data and a primary key;

[0008] S2. The data acquisition device sends its own primary encrypted data to the nearest n-1 data acquisition devices, and receives the primary encrypted data collected and encrypted from the n-1 data acquisition devices;

[0009] S3. Encrypt n pieces of primary encrypted data, including its own primary encrypted data, using a secondary encryption module to obtain secondary encrypted data and a secondary key; transmit the secondary encrypted data to the cloud via the external network, and send the primary key and the secondary key to the control center via the internal network;

[0010] S4. The control center downloads the secondary encrypted data from the cloud and decrypts it based on the received secondary key and primary key to obtain the original distribution network status data.

[0011] In the present invention, the data acquisition device is set at the location where data acquisition is required in the distribution network, and each data acquisition device corresponds to its own unique address tag; the primary encryption module encrypts the collected data for the first time, and then sends it to the remaining n-1 data acquisition devices closest to it. Therefore, one distribution network status data corresponds to n transmission paths for transmission to the cloud and is downloaded by the control center; each data acquisition device uniformly performs a second encryption on the primary encrypted data collected and encrypted by the n nearest data acquisition devices including itself to obtain secondary encrypted data, and transmits the secondary encrypted data to the cloud, making full use of the advantage of the public network that can transmit large amounts of information to transmit the encrypted status data, and then transmitting the primary key and the secondary key through the intranet, which not only ensures security but also avoids the disadvantage of small data transmission volume of the intranet; thus, the advantages of the internal and external networks are combined to ensure the security of the distribution network status data transmission.

[0012] As preferred, in the S1, the primary encryption module stores therein a disorderly encryption library including several disorderly encryption algorithms, each of which corresponds to an encryption number; the control center stores the same disorderly encryption library; in the primary encryption, a disorderly encryption algorithm is randomly selected to encrypt the power grid state data, and a unique address label of the data acquisition device is added in front of the encrypted data to obtain the primary encrypted data, and the primary key includes the unique address label and the encryption number corresponding to the disorderly encryption algorithm used for encryption.

[0013] In the present application, the control center and the primary encryption module of the data acquisition device both store the same disorderly encryption library, and the encryption number of the disorderly encryption algorithm used for encryption is used as part of the primary key, so that the control center can directly find the specific disorderly encryption algorithm through the encryption number, and thus even if the primary key is cracked by someone, only the encryption number is obtained, and the specific encryption algorithm cannot be understood to decrypt the encrypted data, thereby ensuring the security of the data; in addition, each data acquisition device can set its unique disorderly encryption library, and the control center stores the same disorderly encryption library and uses the unique address label of the data acquisition device as a retrieval marker, so as to facilitate the retrieval of the disorderly encryption library corresponding to each data acquisition device in the control center.

[0014] As preferred, the S3 includes the following steps:

[0015] S31, taking the longest data length L in the n primary encrypted data as a standard, 0 is added at the end of the primary encrypted data with insufficient data length to obtain a data block of n rows and L columns;

[0016] S32, a reversible matrix A of n*n and its inverse matrix A -1 are randomly generated in the secondary encryption module.

[0017] S33, the data block of n rows and L columns is encrypted by the reversible matrix A, and a unique address label is added in front of the encrypted data to obtain the secondary encrypted data;

[0018] S34, the secondary encrypted data is transmitted to the cloud through the external network;

[0019] S35, the secondary key records the 0 supplement position of the primary encrypted data, the inverse matrix A -1 and the unique address label, and is sent to the control center through the internal network together with the primary key.

[0020] The n rows L column data blocks composed of n primary encryption modules are encrypted in the matrix encryption mode in the application, the distribution characteristics of the data can be ensured without being changed while the data security is ensured, and the generated reversible matrix is random and the specific order is different from n, so it is difficult for the personnel who want to steal data to decrypt the secondary encrypted data; in addition, the unique address label in the secondary encrypted data is not encrypted, so the control center can directly know which data acquisition device the secondary encrypted data comes from; the unique address label in the primary encrypted data can represent which data acquisition device collects the power distribution network state data; the secondary encrypted data in the cloud is twice encrypted data, and the security is higher, even if one layer is decrypted, the data cannot be leaked.

[0021] As preferred, in the S31, the n primary encrypted data are all converted into binary data according to a binary coding table, each character in the primary encrypted data corresponds to a unique eight-bit binary code; the longest data length L in the n primary encrypted data after binary conversion is taken as a standard, and the primary encrypted data with insufficient data length are supplemented with 0 at the end to obtain n rows L column data blocks; the binary coding table is saved in the control center and the secondary encryption module.

[0022] In the application, all the primary encrypted data are converted into binary data, the data is replaced through the conversion of the binary coding table, and the data cannot be restored and recovered without knowing the binary coding table, so the security of the data is more guaranteed; in addition, the binary coding table is saved in the control center and the secondary encryption module of the data acquisition device, can be updated regularly in the control center, and the binary coding table in the secondary encryption module is synchronously updated through the intranet, so that the probability of being cracked is reduced; in addition, different binary coding tables can be set in the secondary encryption module of each data acquisition device, and the same binary coding table and the corresponding unique address label are saved in the control center, so even if the binary coding table of one secondary encryption module is cracked, the security of other secondary encryption modules is not affected.

[0023] As preferred, in the S33, the n rows L column data blocks are sequentially segmented according to the size of n*n to obtain m=[L / n]+1 data blocks a1, a2, …, a m The segmented data blocks a i are sequentially numbered i, i∈[1,m], and the data blocks a m are sequentially numbered i, i∈[1,m], and the data blocks a m are sequentially numbered i, i∈[1,m], and the data blocks a m are sequentially numbered i, i∈[1,m], and the data blocks a

[0024] The data blocks a i are sequentially encrypted by the reversible matrix A to obtain encrypted data blocks bi , for m encrypted data blocks b i After random sorting, add a unique address tag to obtain the secondary encrypted data; the secondary key records the encrypted data block b after random sorting i The numbering sequence.

[0025] In the present invention, the data block with n rows and L columns is divided according to the size of the reversible matrix, and the entire L-column data block is divided into m blocks from front to back and numbered from 1 to m in the order of front to back; since L is not necessarily a multiple of n, the data block numbered m after division is a m The data is not filled, so random filling is required to ensure the integrity of the data block; after processing, each data block a i They can be regarded as matrices of the same order as the reversible matrix, and after multiplication, the encrypted data block b is obtained i The m encrypted data blocks are randomly shuffled to form secondary encrypted data. The principle of random encryption is used to improve data security. While shuffling the order, the shuffled numbering sequence is recorded as part of the secondary key so that it can be restored during decryption.

[0026] Preferably, in S4, the control center downloads the secondary encrypted data from the cloud, finds the secondary key with the same unique address tag according to the unique address tag contained in the secondary encrypted data, and decrypts it to obtain n primary encrypted data; finds the primary key with the same unique address tag according to the unique address tag contained in the primary encrypted data, and decrypts it to obtain the original distribution network status data.

[0027] In the present invention, when performing decryption, the control center first determines which data acquisition device the secondary encrypted data comes from based on the unique address tag, and then decrypts the encrypted data block b corresponding to the number sequence contained in the secondary key. i Rearrange the data from small to large according to the number, and decrypt it according to the inverse matrix to obtain m data blocks a arranged in sequence. i , remove the mth data block a of the secondary key record m After the supplementary data is obtained, n primary encrypted data are obtained again; then the unique address tag in the primary encrypted data is used to determine which data acquisition device collected and encrypted the encrypted data, and the corresponding random encryption algorithm is found in the control center according to the unique address tag and encryption number in the primary key, and the primary encrypted data is decrypted to obtain the original distribution network status data.

[0028] Preferably, after a distribution network status data is encrypted, transmitted and decrypted, n corresponding transitional distribution network status data are obtained at the control center; n characters at the same position in the n transitional distribution network status data are verified, and characters with a repetition rate greater than one-half are selected as characters at corresponding positions in the original distribution network status data; and the characters at all positions in the transitional distribution network status data are verified to obtain the original distribution network status data.

[0029] In the present invention, since a distribution network status data is sent to n-1 different data acquisition devices after primary encryption, a total of n distribution network status data will be sent to the cloud through different encryption paths, and after being decrypted by the control center, there will be n decrypted transition distribution network status data. Due to the influence of uncertainty factors in the data transmission process, some data will be erroneous. For these n transition distribution network status data, the characters in the same sequential position can be compared, and the characters with the highest repetition rate are used as the correct characters to check and correct the characters in all positions to obtain the original distribution network status data, so as to reduce the influence of some data transmission errors on the correctness of the original distribution network status data.

[0030] The present invention has the following beneficial effects: through the integration of internal and external networks, encrypted data with a large amount of data is transmitted by the external network, and the key corresponding to the encrypted data is transmitted by the internal network with high security, thereby ensuring the security of the data while meeting the huge distribution network data transmission; each distribution network status data is subjected to primary encryption and secondary encryption, and the security of the data is improved in the form of secondary encryption; each distribution network status data is transmitted through multiple transmission paths, and all transition distribution network status data corresponding to the distribution network status data are summarized in the control center, and verification and correction are performed to obtain the original distribution network status data, thereby reducing the impact of the transmission process and improving the accuracy; the random encryption algorithm of the primary encryption is only stored in the primary encryption module and the control center, and the binary coding table is also only stored in the secondary encryption module and the control center. Therefore, the encrypted data stolen during the transmission process is difficult to be encrypted without knowing the random encryption algorithm and the binary coding table, thereby improving the security of the data; the binary coding table can update the secondary encryption module at the control center from time to time through the internal network, and it is more difficult to find a pattern. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 It is a flow chart of the method for securely transmitting distribution network status data of the present invention. DETAILED DESCRIPTION

[0032] The present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0033] like Figure 1As shown, a method for securely transmitting distribution network status data includes:

[0034] S1. The data acquisition device collects distribution network status data and encrypts it via a primary encryption module to obtain primary encrypted data and a primary key. The primary encryption module stores a random encryption library including several random encryption algorithms, each of which corresponds to an encryption number. The control center stores the same random encryption library.

[0035] During primary encryption, a random encryption algorithm is randomly selected to encrypt the distribution network status data, and the unique address tag of the data acquisition device is added before the encrypted data to obtain the primary encrypted data. The primary key includes the unique address tag and the encryption number corresponding to the random encryption algorithm used for encryption.

[0036] S2. The data acquisition device sends its own primary encrypted data to the nearest n-1 data acquisition devices, and receives the primary encrypted data collected and encrypted from the above n-1 data acquisition devices.

[0037] S3: Encrypt n pieces of primary encrypted data, including its own primary encrypted data, through a secondary encryption module to obtain secondary encrypted data and a secondary key; transmit the secondary encrypted data to the cloud via an external network, and send the primary key and the secondary key to the control center via an internal network. S3 includes the following steps:

[0038] S31. Using the longest data length L among the n primary encrypted data as a standard, the remaining primary encrypted data with insufficient data length are padded with zeros at the end to obtain a data block with n rows and L columns.

[0039] S32: Randomly generate an n×n reversible matrix A and its inverse matrix A in the secondary encryption module -1 ;

[0040] S33, performing matrix encryption on the data block of n rows and L columns using the reversible matrix A, and adding a unique address tag before the encrypted data to obtain secondary encrypted data;

[0041] S34, transmitting the secondary encrypted data to the cloud via the external network;

[0042] S35, the secondary key records the 0-filled position of the primary encrypted data and the inverse matrix A -1 The unique address tag and the primary key are sent to the control center via the intranet.

[0043] S4. The control center downloads the secondary encrypted data from the cloud and decrypts it using the received secondary key and primary key to obtain the original distribution network status data. The control center downloads the secondary encrypted data from the cloud and decrypts it using the secondary key with the same unique address tag as the secondary encrypted data, obtaining n pieces of primary encrypted data. The control center then decrypts the data using the primary key with the same unique address tag as the primary encrypted data, obtaining the original distribution network status data.

[0044] In S31, the n primary encrypted data are converted into binary data according to a binary coding table, and each character in the primary encrypted data corresponds to a unique eight-bit binary code; taking the longest data length L among the n primary encrypted data after binary conversion as the standard, the remaining primary encrypted data with insufficient data length are padded with 0 at the end to obtain a data block with n rows and L columns; the binary coding table is stored in both the control center and the secondary encryption module.

[0045] In S33, the data block with n rows and L columns is divided into m=[L / n]+1 data blocks a1, a2, ..., a m , and the data block a after segmentation i Corresponding number i, i∈[1,m], for data block a m Supplementary data needs to be randomly generated to fill in the complete data block; the secondary key records the data block a m Supplementary data;

[0046] Use the reversible matrix A to transform the data block a i Encrypt one by one to get the encrypted data block b i , for m encrypted data blocks b i After random sorting, add a unique address tag to obtain the secondary encrypted data; the secondary key records the encrypted data block b after random sorting i Taking a1, a2, ..., a6 as an example, the encrypted data blocks are b1, b2, ..., b6. If they are randomly sorted into b4b6b1b2b5b3, then the secondary key records are numbered in the order of 4, 6, 1, 2, 5, 3. During decryption, the encrypted data blocks are matched according to the numbering sequence, and the numbers in the numbering sequence are rearranged from small to large. The encrypted data blocks are rearranged accordingly to obtain encrypted data blocks b1, b2, ..., b6, and then decrypted according to the inverse matrix in the secondary key.

[0047] After a distribution network status data is encrypted, transmitted, and decrypted, n corresponding transitional distribution network status data are obtained at the control center; n characters at the same position in the n transitional distribution network status data are verified, and characters with a repetition rate greater than one-half are selected as the characters at the corresponding position in the original distribution network status data; after verifying the characters at all positions in the transitional distribution network status data, the original distribution network status data is obtained.

[0048] In the present invention, the data acquisition device is set at the location where data acquisition is required in the distribution network, and each data acquisition device corresponds to its own unique address tag; the primary encryption module encrypts the collected data for the first time, and then sends it to the remaining n-1 data acquisition devices closest to it. Therefore, one distribution network status data corresponds to n transmission paths for transmission to the cloud and is downloaded by the control center; each data acquisition device uniformly performs a second encryption on the primary encrypted data collected and encrypted by the n nearest data acquisition devices including itself to obtain secondary encrypted data, and transmits the secondary encrypted data to the cloud, making full use of the advantage of the public network that can transmit large amounts of information to transmit the encrypted status data, and then transmitting the primary key and the secondary key through the intranet, which not only ensures security but also avoids the disadvantage of small data transmission volume of the intranet; thus, the advantages of the internal and external networks are combined to ensure the security of the distribution network status data transmission.

[0049] In the present invention, the primary encryption modules of the control center and the data acquisition device both store the same random encryption library, and use the encryption number of the random encryption algorithm used for encryption as part of the primary key. The control center can directly find the specific random encryption algorithm through the encryption number. Therefore, even if the primary key is cracked, only the encryption number is obtained, and the specific encryption algorithm cannot be understood to decrypt the encrypted data, thus ensuring the security of the data. In addition, each data acquisition device can be set up with its own unique random encryption library, and the same random encryption library is stored in the control center, and the unique address label of the data acquisition device is used as a retrieval mark, which facilitates the retrieval of the random encryption library corresponding to each data acquisition device in the control center.

[0050] The present invention adopts matrix encryption to encrypt a data block of n rows and L columns composed of n primary encryption modules, which can ensure data security without changing the distribution characteristics of the data. At the same time, since the generated reversible matrix is ​​random and the specific order varies with n, it is difficult for people who want to steal data to decrypt the encrypted secondary encrypted data; in addition, the unencrypted unique address tag included in the secondary encrypted data can directly understand which data acquisition device the secondary encrypted data comes from at the control center; similarly, the unique address tag in the primary encrypted data can indicate which data acquisition device collected the distribution network status data; the secondary encrypted data in the cloud are all twice encrypted data, which is more secure, and even if one layer is decrypted, the data cannot be leaked.

[0051] In the present invention, all primary encrypted data are converted into binary data, and data replacement is performed through the conversion of the binary coding table. Without understanding the binary coding table, it is impossible to restore and recover the data, so it is more conducive to ensuring the security of the data; in addition, the binary coding table is stored in the secondary encryption module of the control center and the data acquisition device at the same time, and can be updated regularly in the control center, and the binary coding table in the secondary encryption module can be synchronized and updated through the intranet to reduce the probability of being cracked; in addition, different binary coding tables can be set in the secondary encryption module of each data acquisition device, and the same binary coding table and the corresponding unique address label are stored in the control center. Even if the binary coding table of a secondary encryption module is cracked, it will not affect the security of other secondary encryption modules.

[0052] In the present invention, the data block with n rows and L columns is divided according to the size of the reversible matrix, and the entire L-column data block is divided into m blocks from front to back and numbered from 1 to m in the order of front to back; since L is not necessarily a multiple of n, the data block numbered m after division is a m The data is not filled, so random filling is required to ensure the integrity of the data block; after processing, each data block a i They can be regarded as matrices of the same order as the reversible matrix, and after multiplication, the encrypted data block b is obtained i The m encrypted data blocks are randomly shuffled to form secondary encrypted data. The principle of random encryption is used to improve data security. While shuffling the order, the shuffled numbering sequence is recorded as part of the secondary key so that it can be restored during decryption.

[0053] In the present invention, when performing decryption, the control center first determines which data acquisition device the secondary encrypted data comes from based on the unique address tag, and then decrypts the encrypted data block b corresponding to the number sequence contained in the secondary key. i Rearrange the data from small to large according to the number, and decrypt it according to the inverse matrix to obtain m data blocks a arranged in sequence.i , the mth data block a of the secondary key record is removed m After the supplementary data of the mth data block a of the secondary key record is removed, n primary encrypted data is obtained again; then the unique address label in the primary encrypted data is used to determine which data acquisition device collects the encrypted data, and the corresponding disordered encryption algorithm is found in the control center according to the unique address label and the encryption number in the primary key, so that the original power distribution network state data is obtained by decrypting the primary encrypted data.

[0054] In the present application, since one power distribution network state data is sent to n-1 different data acquisition devices after primary encryption, a total of n power distribution network state data will be sent to the cloud through different encryption paths, and after decryption by the control center, n decrypted transition power distribution network state data will be obtained; due to the influence of uncertain factors in the data transmission process, part of the data will be wrong, and for the n transition power distribution network state data, the characters at the same sequential position can be compared, and the character with the highest repetition rate is taken as the correct character to check and correct all the characters to obtain the original power distribution network state data, so as to reduce the influence of part of the data transmission error on the correctness of the original power distribution network state data.

[0055] In the embodiment of the present application, a data acquisition device is arranged at each place in the power distribution network where data acquisition is required, including tower state sensing: tower RFID tag, tower tilt sensor; overhead line state sensing: intelligent line arrester, clamp temperature sensor; cable branch box state sensing: cable branch box temperature and humidity sensor, cable terminal joint temperature sensor; ring network cabinet state sensing: ring network cabinet environment temperature and humidity sensor, cable T-joint temperature sensor, cable plug-in intelligent arrester, ring network cabinet intelligent dehumidification controller, ring network cabinet door magnetic sensor; disconnecting switch state sensing: disconnecting switch joint temperature sensor, disconnecting switch displacement sensor; transformer state sensing: transformer bushing temperature sensor, transformer body temperature sensor, transformer anti-theft sensor, JP cabinet branch switch energy consumption displacement power factor sensor, transformer intelligent arrester, drop fuse sensor; cable and cable trench state sensing: cable intermediate joint outer skin temperature sensor, cable trench water level sensor, cable trench toxic and harmful gas sensor, intelligent well lid, etc. for state data acquisition. Each data acquisition device has its corresponding unique address label for identifying the data acquisition device.

[0056] A data acquisition unit is provided in the data acquisition device for data acquisition. The collected data first enters a primary encryption module for primary encryption. The primary encryption module is located inside the data acquisition device and cannot be removed. The random encryption library in the primary encryption module can only output encryption numbers. A destruction alarm unit is also provided to sound an alarm if the outer shell of the primary encryption module is damaged. The primary encrypted data after primary encryption is transmitted via the communication network between data acquisition devices. After receiving the primary encrypted data from other data acquisition devices, the data acquisition device enters the secondary encryption module for encryption along with its own primary encrypted data. The secondary encryption module stores a binary encoding table that can convert the primary encrypted data into binary data before performing secondary encryption. The encrypted secondary encrypted data is sent to the cloud via the wireless communication unit of the data acquisition device, and the primary and secondary keys are sent to the control center via the intranet communication unit of the data acquisition device. The control center downloads the secondary encrypted data from the cloud and decrypts it based on the primary and secondary keys.

[0057] In the embodiment of the present invention, the random encryption library of each primary encryption module is set up before installation and is updated synchronously with the control center, so that the random encryption library is only stored in the primary encryption module and the control center; therefore, without disassembling and cracking the primary encryption module and invading the control center, the encrypted data after random encryption cannot be decrypted by relying solely on the encryption number, thereby ensuring data security.

[0058] The binary code table in the embodiment of the present invention is compiled with reference to the ASCII code table. Each character corresponds to an eight-bit binary code, such as 0 to 9 corresponding to 00000000 to 00001001, the 26 uppercase letters A to Z corresponding to 00001010 to 00100011, and the 26 lowercase letters a to z corresponding to 00100100 to 00111101. The remaining binary codes after 00111110 can be selected as needed to correspond to the characters required for different power distribution network data or left blank, thereby generating a unique binary code table. In addition, when updating the binary code table, the corresponding order can be randomly shuffled to increase the difficulty of cracking.

[0059] The above embodiments are further elaborations and illustrations of the present invention for ease of understanding, and are not intended to limit the present invention in any way. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for securely transmitting distribution network status data, characterized in that: include: S1. The data acquisition device collects distribution network status data and encrypts it through the primary encryption module to obtain primary encrypted data and a primary key; S2. The data acquisition device sends its own primary encrypted data to the nearest n-1 data acquisition devices, and receives the primary encrypted data collected and encrypted from the n-1 data acquisition devices; S3. Encrypting n pieces of primary encrypted data, including the primary encrypted data itself, via a secondary encryption module; comprising the following steps: S31. Using the longest data length L among the n primary encrypted data as a standard, the remaining primary encrypted data with insufficient data length are padded with zeros at the end to obtain a data block with n rows and L columns. S32: Randomly generate an n×n reversible matrix A and its inverse matrix A in the secondary encryption module -1 ; S33, performing matrix encryption on the data block of n rows and L columns using the reversible matrix A, and adding a unique address tag before the encrypted data to obtain secondary encrypted data; S34, transmitting the secondary encrypted data to the cloud via the external network; S35, the secondary key records the 0-filled position of the primary encrypted data and the inverse matrix A -1 and unique address tag, along with the primary key, are sent to the control center via the intranet; S4. The control center downloads the secondary encrypted data from the cloud and decrypts it based on the received secondary key and primary key to obtain the original distribution network status data.

2. A method for securely transmitting distribution network status data according to claim 1, characterized in that: In S1, the primary encryption module stores a random encryption library including several random encryption algorithms, and each random encryption algorithm corresponds to an encryption number; the control center stores the same random encryption library; during the primary encryption, a random encryption algorithm is randomly selected to encrypt the distribution network status data, and the unique address tag of the data acquisition device is added before the encrypted data to obtain the primary encrypted data, and the primary key includes the unique address tag and the encryption number corresponding to the random encryption algorithm for encryption.

3. A method for securely transmitting distribution network status data according to claim 1, characterized in that: In said S31, the n primary encrypted data are converted into binary data according to the binary coding table, and each character in the primary encrypted data corresponds to a unique eight-bit binary code; Taking the longest data length L among the n primary encrypted data after binary conversion as the standard, the remaining primary encrypted data with insufficient data length are padded with 0 at the end to obtain a data block of n rows and L columns; the binary coding table is stored in the control center and the secondary encryption module at the same time.

4. A method for securely transmitting distribution network status data according to claim 1, characterized in that: In the step S33, the data block with n rows and L columns is divided into m=[L / n]+1 data blocks a1, a2, ..., a m , and the data block a after segmentation i Corresponding number i, i∈[1,m], for data block a m Supplementary data needs to be randomly generated to fill in and form a complete data block; Secondary Key Record Data Block a m Supplementary data; Use the reversible matrix A to transform the data block a i Encrypt one by one to get the encrypted data block b i , for m encrypted data blocks b i After random sorting, add a unique address tag to obtain the secondary encrypted data; the secondary key records the encrypted data block b after random sorting i The numbering sequence.

5. The method for securely transmitting distribution network status data according to claim 1, characterized in that: In S4, the control center downloads the secondary encrypted data from the cloud, finds the secondary key with the same unique address tag according to the unique address tag contained in the secondary encrypted data, and decrypts it to obtain n primary encrypted data; According to the unique address tag contained in the primary encrypted data, the primary key with the same unique address tag is found for decryption to obtain the original distribution network status data.

6. A method for securely transmitting distribution network status data according to claim 1, 2, 3, 4 or 5, characterized in that: After a distribution network status data is encrypted, transmitted, and decrypted, n corresponding transitional distribution network status data are obtained at the control center; n characters at the same position in the n transitional distribution network status data are verified, and characters with a repetition rate greater than one-half are selected as the characters at the corresponding position in the original distribution network status data; after verifying the characters at all positions in the transitional distribution network status data, the original distribution network status data is obtained.

7. A method for securely transmitting distribution network status data according to claim 2, characterized in that: Each data acquisition device is equipped with its own unique random encryption library. The same random encryption library is stored in the control center and the unique address label of the data acquisition device is used as a retrieval mark, so as to facilitate retrieval of the random encryption library corresponding to each data acquisition device in the control center.

8. A method for securely transmitting distribution network status data according to claim 3, characterized in that: The binary code table is stored in the secondary encryption module of the control center and the data acquisition device at the same time. It can be updated regularly in the control center and the binary code table in the secondary encryption module can be synchronized and updated through the intranet.

Images