Power monitoring system control method, device, computer equipment and storage medium

Abstract

The present application relates to a method, device, computer equipment and storage medium for controlling a power monitoring system. The method comprises: constructing an electronic key of a control interface according to the respective private keys of a plurality of control interfaces corresponding to different control permissions in the power monitoring system, and obtaining a hash value of the electronic key; generating a first encryption value of the electronic key based on the coordinates and hash value of any point in a preconfigured elliptic curve; generating a second encryption value of the electronic key based on the first encryption value of the electronic key and the private key for constructing the electronic key, fusing the first encryption value and the second encryption value to generate a target encryption value; when the target encryption value of the control interface successfully matches the electronic key input by the user terminal, using the successfully matched control interface as a callable interface, responding to the control instruction of the user terminal, and controlling the power monitoring system within the control permission of the callable interface. The use of this method can improve the information security of the power monitoring system.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a power monitoring system control method, device, computer equipment and storage medium. Background Art

[0002] The power monitoring system is an important infrastructure. With the development of information security technology, traditional technologies generally use authentication methods such as account and password verification and facial recognition to ensure the information security of the power monitoring system and prevent external personnel who do not have control authority over the power monitoring system from controlling the power monitoring system.

[0003] However, in the current authentication method, there is a possibility of account password leakage, and facial recognition has certain technical loopholes, which cannot ensure completely accurate recognition. Once an external person passes the authentication and obtains control authority, the information security of the power monitoring system will not be guaranteed. Summary of the Invention

[0004] Based on this, it is necessary to provide a power monitoring system control method, device, computer equipment, computer-readable storage medium and computer program product that can improve the information security of the power monitoring system in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for controlling a power monitoring system. The method comprises:

[0006] According to the private key of the control interface in the power monitoring system, an electronic key of the control interface is constructed, and a hash value of the electronic key is obtained. There are multiple control interfaces, and each control interface corresponds to a control authority;

[0007] Obtaining the coordinates of any point on the preconfigured elliptic curve, and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0008] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0009] When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface will be used as a callable interface, and the power monitoring system will be controlled within the control authority of the callable interface in response to the control instructions of the user terminal.

[0010] In one embodiment, constructing an electronic key for the control interface based on a private key of the control interface in the power monitoring system includes:

[0011] Obtain multiple control interfaces of the power monitoring system and generate a private key corresponding to each control interface based on the key management system;

[0012] Based on the digital certificate management system, multiple initial electronic keys are obtained, and the number of initial electronic keys is consistent with the number of control interfaces;

[0013] A private key is imported into each initial power key to obtain the electronic key corresponding to each control interface.

[0014] In one embodiment, obtaining the coordinates of any point on a preconfigured elliptic curve and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key includes:

[0015] Obtain a base point of a preconfigured elliptic curve. Based on a randomly generated random number and the base point, obtain a random point in the preconfigured elliptic curve. The range of the random number is related to the order of the preconfigured elliptic curve.

[0016] Obtain the horizontal coordinate and vertical coordinate of the random point, and linearly add the horizontal coordinate, vertical coordinate and the hash value of the electronic key to obtain a linear addition result;

[0017] Based on the order of the preconfigured elliptic curve, a modulo operation is performed on the linear addition result to obtain a modulo result, and the modulo result is used as the first encryption value of the electronic key.

[0018] In one embodiment, generating a second encrypted value of the electronic key based on a first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key includes:

[0019] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key, a private key used to construct the electronic key, and a random number generated based on an order of a preconfigured elliptic curve;

[0020] The first encrypted value and the second encrypted value are linearly added to generate a target encrypted value of the electronic key.

[0021] In one embodiment, after generating the target encrypted value of the electronic key, the method further includes:

[0022] Update the target encryption value regularly to obtain the current target encryption value of each control interface;

[0023] Obtaining the electronic key input by the user terminal, and matching the electronic key input by the user terminal with the current target encryption value of each control interface to obtain a matching result;

[0024] Based on the matching result, it is determined whether the current target encryption value of the control interface successfully matches the electronic key input by the user terminal.

[0025] In one embodiment, the power monitoring system control method further includes:

[0026] Construct multiple fault monitoring interfaces of the power monitoring system and generate the public key corresponding to each fault monitoring interface;

[0027] When the public key of the fault monitoring interface successfully matches the public key input by the user terminal, the real-time fault monitoring data of the power monitoring system is sent to the user terminal.

[0028] In a second aspect, the present application further provides a power monitoring system control device. The device comprises:

[0029] A hash value acquisition module is used to construct an electronic key for the control interface in the power monitoring system based on the private key of the control interface and obtain the hash value of the electronic key. There are multiple control interfaces, and each control interface corresponds to a control authority.

[0030] A first encrypted value generation module, configured to obtain the coordinates of any point on the preconfigured elliptic curve and generate a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0031] a target encrypted value obtaining module, configured to generate a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and to fuse the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0032] The control instruction response module is used to use the successfully matched control interface as a callable interface when the current target encryption value of the control interface successfully matches the electronic key input by the user terminal, and respond to the control instruction of the user terminal to control the power monitoring system within the control authority of the callable interface.

[0033] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are performed:

[0034] According to the private key of the control interface in the power monitoring system, an electronic key of the control interface is constructed, and a hash value of the electronic key is obtained. There are multiple control interfaces, and each control interface corresponds to a control authority;

[0035] Obtaining the coordinates of any point on the preconfigured elliptic curve, and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0036] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0037] When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface will be used as a callable interface, and the power monitoring system will be controlled within the control authority of the callable interface in response to the control instructions of the user terminal.

[0038] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the following steps:

[0039] According to the private key of the control interface in the power monitoring system, an electronic key of the control interface is constructed, and a hash value of the electronic key is obtained. There are multiple control interfaces, and each control interface corresponds to a control authority;

[0040] Obtaining the coordinates of any point on the preconfigured elliptic curve, and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0041] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0042] When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface will be used as a callable interface, and the power monitoring system will be controlled within the control authority of the callable interface in response to the control instructions of the user terminal.

[0043] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the following steps:

[0044] According to the private key of the control interface in the power monitoring system, an electronic key of the control interface is constructed, and a hash value of the electronic key is obtained. There are multiple control interfaces, and each control interface corresponds to a control authority;

[0045] Obtaining the coordinates of any point on the preconfigured elliptic curve, and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0046] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0047] When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface will be used as a callable interface, and the power monitoring system will be controlled within the control authority of the callable interface in response to the control instructions of the user terminal.

[0048] The above-mentioned power monitoring system control method, device, computer equipment, storage medium and computer program product, for multiple control interfaces corresponding to different control permissions in the power monitoring system, construct an electronic key for the control interface based on the private key of the control interface, and then generate a first encryption value of the electronic key based on the hash value of the electronic key and the coordinates of any point in the preconfigured elliptic curve, so that the first encryption value has randomness, and then generate a second encryption value of the electronic key based on the first encryption value and the private key for constructing the electronic key, and then generate a target encryption value of the electronic key that also has randomness. When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the power monitoring system is controlled within the control authority of the successfully matched control interface in response to the control instruction of the user terminal. During the entire process, for the control interfaces corresponding to different control permissions in the power monitoring system, a random target encryption value is generated for each control interface to improve the information security of the power monitoring system. When a control interface is successfully matched, the control permissions are split so that the user terminal can only control the power monitoring system within the control permission of the successfully matched control interface, avoiding the leakage of some target encryption values, which leads to the control permission of the entire power monitoring system being exposed to risks, thereby further improving the information security of the power monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 This is a diagram of an application environment of a power monitoring system control method in one embodiment;

[0050] Figure 2 1 is a flow chart of a method for controlling a power monitoring system according to an embodiment;

[0051] Figure 3 is a flow chart of a power monitoring system control method according to another embodiment;

[0052] Figure 4 is a schematic diagram of a power monitoring system in one embodiment;

[0053] Figure 5 is a structural block diagram of a power monitoring system control device in one embodiment;

[0054] Figure 6 FIG. 1 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical solutions and advantages of this application more clear, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0056] The power monitoring system control method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown, a user terminal 102 communicates with a server 104 via a network. A data storage system can store data that server 104 needs to process. The data storage system can be integrated with server 104, or placed on a cloud or other network server. Server 104 constructs an electronic key for the control interface in the power monitoring system based on the private key of the control interface, obtains a hash value of the electronic key, and then obtains the coordinates of any point on a preconfigured elliptic curve. Based on the coordinates and the hash value of the electronic key, it generates a first encrypted value for the electronic key. Then, based on the first encrypted value of the electronic key and the private key used to construct the electronic key, it generates a second encrypted value for the electronic key. The first and second encrypted values ​​are combined to generate a target encrypted value for the electronic key. When the target encrypted value of the control interface successfully matches the electronic key input by user terminal 102, the matching control interface is designated as a callable interface. In response to control commands from user terminal 102, the power monitoring system is controlled within the control authority of the callable interface. User terminal 102 can be, but is not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, etc. The server 104 may be implemented as an independent server or a server cluster composed of multiple servers, and may specifically be a server interconnected with the power monitoring system and user terminals.

[0057] In one embodiment, Figure 2 As shown, a power monitoring system control method is provided, which is applied to Figure 1 The following steps are used as an example to illustrate the server in the example:

[0058] Step 202: construct an electronic key of the control interface according to the private key of the control interface in the power monitoring system, and obtain a hash value of the electronic key. There are multiple control interfaces, and each control interface corresponds to a control authority.

[0059] The control interfaces in the power monitoring system can be specifically divided into: transmission line control interface, distribution line control interface, and substation line control interface. An electronic key can be a method for storing encrypted data. A hash value can be obtained through a hash operation. A hash operation can be performed by shuffling and mixing any message or data, compressing the message or data into a digest to reduce the data size, fixing the data format, and recreating a hash value. This hash value is typically represented by a short string of random letters and numbers, giving it a random nature.

[0060] Optionally, for each control interface of the power monitoring system, the server can first construct an electronic key for each control interface based on the private key of each control interface in the power monitoring system, and randomly obtain the hash value of the electronic key of each control interface by performing a hash operation on the private key of each control interface, thereby obtaining the hash value of the electronic key of each control interface.

[0061] Exemplarily, the algorithms corresponding to the hash operation include but are not limited to SM3, SHA-256, SHA-384 and other algorithms.

[0062] Step 204 : Obtain the coordinates of any point in the preconfigured elliptic curve, and generate a first encrypted value of the electronic key based on the coordinates and the hash value of the electronic key.

[0063] Among them, the elliptic curve refers to a smooth cubic curve on a plane that satisfies the Weierstrass equation.

[0064] Optionally, for the electronic key of each control interface, the server can select any random point from the preconfigured elliptic curve according to a preconfigured selection method, and obtain the coordinates of the random point, and generate the first encrypted value of the electronic key based on the coordinates of the obtained random point and the hash value of the electronic key, thereby obtaining the first encrypted value of the electronic key of each control interface.

[0065] Step 206 : Generate a second encrypted value of the electronic key based on the first encrypted value of the electronic key and the private key used to construct the electronic key. Merge the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key.

[0066] Optionally, for the electronic key of each control interface, the server can operate on the first encryption value of the electronic key and the private key used to construct the electronic key according to a preconfigured operation method to obtain the operation result, and then convert the operation result to generate the second encryption value of the electronic key. Then, the first encryption value and the second encryption value are combined to generate the target encryption value of the electronic key, thereby obtaining the target encryption value of the electronic key of each control interface.

[0067] Step 208: When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface is used as a callable interface, and the power monitoring system is controlled within the control authority of the callable interface in response to the control instruction of the user terminal.

[0068] The successful matching may specifically be: the target encryption value of the control interface is consistent with the electronic key input by the user terminal.

[0069] Optionally, when the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the server can use the successfully matched control interface as a callable interface, and allow the user terminal to issue control instructions by calling the callable interface, and then respond to the control instructions issued by the user terminal, and control the power monitoring system according to the control instructions within the control authority of the callable interface.

[0070] For example, only when the target encryption values ​​of multiple control interfaces in the power monitoring system successfully match multiple electronic keys input by the user terminal can the user terminal obtain the entire control authority of the power monitoring system.

[0071] In the above-mentioned power monitoring system control method, for multiple control interfaces corresponding to different control permissions in the power monitoring system, an electronic key for each control interface is constructed based on the private key of the control interface. A first encrypted value of the electronic key is then generated based on a hash value of the electronic key and the coordinates of any point on a preconfigured elliptic curve, so that the first encrypted value is random. A second encrypted value of the electronic key is then generated based on the first encrypted value and the private key used to construct the electronic key. Furthermore, a target encrypted value of the electronic key, also having randomness, is generated. When the target encrypted value of a control interface successfully matches the electronic key input by a user terminal, the power monitoring system is controlled within the control permission of the matching control interface in response to a control instruction from the user terminal. Throughout this process, a target encrypted value with randomness is generated for each control interface corresponding to different control permissions in the power monitoring system, thereby improving the information security of the power monitoring system. When a control interface successfully matches, the control permission is split so that the user terminal can only control the power monitoring system within the control permission of the matching control interface, avoiding the risk of exposing the control permission of the entire power monitoring system due to the leakage of part of the target encrypted value, thereby further improving the information security of the power monitoring system.

[0072] In one embodiment, constructing an electronic key for the control interface based on a private key of the control interface in the power monitoring system includes:

[0073] Obtain multiple control interfaces of the power monitoring system and generate a private key corresponding to each control interface based on the key management system;

[0074] Based on the digital certificate management system, multiple initial electronic keys are obtained, and the number of initial electronic keys is consistent with the number of control interfaces;

[0075] A private key is imported into each initial power key to obtain the electronic key corresponding to each control interface.

[0076] The key management system may be a key generation system based on algorithms such as SM2 and RSA, which can be used to generate private keys, public keys, etc. The digital certificate management system may be a system based on a CA center, which can be used to generate electronic keys for storing encrypted data.

[0077] Alternatively, the server can first split the control permissions of the power monitoring system, obtaining multiple control permissions and the control interfaces corresponding to each control permission. The server can then, using the key management system, generate a private key corresponding to each control interface, with different private keys for different control interfaces. The server can then, using the digital certificate management system, obtain multiple initial electronic keys, equal in number to the number of control interfaces, and import a private key into each initial power key to obtain an electronic key corresponding to each control interface.

[0078] For example, taking the control interfaces of the power monitoring system including the transmission line control interface, the distribution line control interface and the substation line control interface as an example, the server can generate a private key corresponding to each control interface based on the key management system, and obtain the private key 1 corresponding to the transmission line control interface, the private key 2 corresponding to the distribution line control interface, and the private key 3 corresponding to the substation line control interface, and then import the private key 1, the private key 2 and the private key 3 into the three initial electronic keys respectively, and obtain the electronic key 1 corresponding to the transmission line control interface, the electronic key 2 corresponding to the distribution line control interface, and the electronic key 3 corresponding to the substation line control interface.

[0079] Optionally, the server can also set up firewalls for the key management system and each control interface respectively, and interconnect the firewall with the alarm system to prevent network attacks on the key management system and each control interface by external personnel, thereby improving the information security of the power monitoring system.

[0080] In this embodiment, an electronic key for each control interface is constructed using a private key corresponding to each control interface, so that different control interfaces correspond to different electronic keys.

[0081] In one embodiment, obtaining the coordinates of any point on a preconfigured elliptic curve and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key includes:

[0082] Obtain a base point of a preconfigured elliptic curve. Based on a randomly generated random number and the base point, obtain a random point in the preconfigured elliptic curve. The range of the random number is related to the order of the preconfigured elliptic curve.

[0083] Obtain the horizontal coordinate and vertical coordinate of the random point, and linearly add the horizontal coordinate, vertical coordinate and the hash value of the electronic key to obtain a linear addition result;

[0084] Based on the order of the preconfigured elliptic curve, a modulo operation is performed on the linear addition result to obtain a modulo result, and the modulo result is used as the first encryption value of the electronic key.

[0085] The base point of an elliptic curve is a randomly selected point on the elliptic curve, typically of a large prime order. The relationship between the range of the random number and the order of the preconfigured elliptic curve is as follows: when the order of the preconfigured elliptic curve is n and the random number is k, then k∈k₁,n-1]. Furthermore, based on the properties of the elliptic curve, performing a point multiplication of k and the base point of the elliptic curve yields another point on the elliptic curve.

[0086] Optionally, the server can obtain the base point of the preconfigured elliptic curve based on the base point selection algorithm, and obtain a random point in the preconfigured elliptic curve by performing a point multiplication operation on the random number and the base point, and then obtain the horizontal coordinate and vertical coordinate of the random point, and linearly add the horizontal coordinate, the vertical coordinate and the hash value of each electronic key to obtain the linear addition result of each electronic key. Then, based on the order of the preconfigured elliptic curve, perform a modulus operation on the linear addition result of each electronic key to obtain the modulus result of the linear addition result, and use the modulus result of each electronic key as the first encryption value of the corresponding electronic key, thereby obtaining the first encryption value of the electronic key corresponding to each control interface.

[0087] For example, for each electronic key of the control interface, the hash value of the electronic key is hash, the horizontal coordinate of the random point is X, and the vertical coordinate of the random point is Y. The server can specifically use formula (1) to linearly add the horizontal coordinate, the vertical coordinate, and the hash value to obtain the linear addition result of the electronic key, and then perform a modulo operation on the linear addition result based on the order of the preconfigured elliptic curve. Formula (1) is as follows:

[0088] R=(hash+X+Y) mod n (1)

[0089] Wherein, R is the first encrypted value of the electronic key, n is the order of the preconfigured elliptic curve, and mod is the modulus operator, such as 5 mod 3 = 2.

[0090] In this embodiment, a random point is obtained through a random number, and then based on the random point, a first encryption value of the electronic key corresponding to each control interface is randomly generated. This can ensure the randomness of the generated first encryption value, thereby improving the security of the first encryption value and providing information security for the power monitoring system.

[0091] In one embodiment, generating a second encrypted value of the electronic key based on a first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key includes:

[0092] generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key, a private key used to construct the electronic key, and a random number generated based on an order of a preconfigured elliptic curve;

[0093] The first encrypted value and the second encrypted value are linearly added to generate a target encrypted value of the electronic key.

[0094] Optionally, for the electronic key of each control interface, the server can perform operations on the first encryption value of the electronic key, the private key for constructing the electronic key, and the random number generated based on the order of the preconfigured elliptic curve according to a preconfigured operation method to obtain an operation result, and then perform a modulus operation on the operation result based on the order of the preconfigured elliptic curve to obtain a modulus result of the operation result, and use the modulus result of the operation result as the second encryption value of the electronic key. Then, the first encryption value and the second encryption value are linearly added to generate the target encryption value of the electronic key, thereby obtaining the target encryption value of the electronic key corresponding to each control interface.

[0095] For example, for each electronic key of the control interface, the server can specifically use formula (2) to perform an operation on the first encrypted value R of the electronic key, the private key A used to construct the electronic key, and the generated random number k to obtain an operation result, and then perform a modulo operation on the operation result based on the order n of the preconfigured elliptic curve to obtain a modulo result of the operation result. Formula (2) is as follows:

[0096] S={(1+A)-(kR·A)} mod n (2)

[0097] Wherein, R is the second encrypted value of the electronic key, S is the second encrypted value of the electronic key, n is the order of the preconfigured elliptic curve, k is a random number selected based on the order of the preconfigured elliptic curve, A is the private key used to construct the electronic key, and mod is the modulus operator.

[0098] In this embodiment, for each electronic key of each control interface, a second encryption value with the same randomness is generated by using a first encryption value with randomness and a random number, and then a target encryption value is generated based on the first encryption value and the second encryption value. This ensures that the generated target encryption value is random and more complex, thereby improving the information security of the power monitoring system.

[0099] In one embodiment, after generating the target encrypted value of the electronic key, the method further includes:

[0100] Update the target encryption value regularly to obtain the current target encryption value of each control interface;

[0101] Obtaining the electronic key input by the user terminal, and matching the electronic key input by the user terminal with the current target encryption value of each control interface to obtain a matching result;

[0102] Based on the matching result, it is determined whether the current target encryption value of the control interface successfully matches the electronic key input by the user terminal.

[0103] Optionally, for each control interface's respective electronic key, the server can periodically update the target encryption value of the electronic key according to a preconfigured update cycle and periodically obtain the updated target encryption value, i.e., the current target encryption value of the control interface. The server then obtains the electronic key input by the user terminal and matches the electronic key input by the user terminal with the current target encryption value of each control interface to obtain a matching result. Based on the matching result, it is determined whether there is a successful match between the current target encryption value of the control interface and the electronic key input by the user terminal. The preconfigured update cycle can be set to 1 minute, but in this embodiment, the preconfigured update cycle can be configured based on the actual application scenario.

[0104] In this embodiment, by periodically updating the target encryption value, the impact of the leakage of the target encryption value on the information security of the power monitoring system can be minimized to improve the information security of the power monitoring system. By matching the electronic key input by the user terminal with each current target encryption value, the user terminal can be authenticated, thereby further improving the information security of the power monitoring system.

[0105] In one embodiment, the power monitoring system control method further includes:

[0106] Construct multiple fault monitoring interfaces of the power monitoring system and generate the public key corresponding to each fault monitoring interface;

[0107] When the public key of the fault monitoring interface successfully matches the public key input by the user terminal, the real-time fault monitoring data of the power monitoring system is sent to the user terminal.

[0108] Optionally, the server can establish multiple fault monitoring interfaces for the power monitoring system and, based on a key management system, generate a corresponding public key for each fault monitoring interface. The server can then obtain the public key input by the user terminal and match the public key input by the user terminal with the public key of each fault monitoring interface to determine whether a public key of a fault monitoring interface successfully matches the public key input by the user terminal. If a public key of a fault monitoring interface successfully matches the public key input by the user terminal, the server can send real-time fault monitoring data of the power monitoring system to the user terminal, so that the user terminal can obtain the real-time fault monitoring data of the power monitoring system.

[0109] For example, a power monitoring system is configured with a fault recorder. The fault recorder can be used to receive and store real-time fault monitoring data from the power monitoring system. After receiving the real-time fault monitoring data, the fault recorder can analyze the real-time fault monitoring data to detect whether a fault has occurred. Multiple fault monitoring interfaces of the power monitoring system are interconnected with the fault recorder in the power monitoring system.

[0110] Optionally, the server can also set up a firewall for each fault monitoring interface and interconnect the firewall with the alarm system to prevent network attacks on each fault monitoring interface by external personnel, thereby improving the information security of the power monitoring system.

[0111] In this embodiment, by matching the public key of the fault monitoring interface with the public key input by the user terminal, the real-time fault monitoring data of the power monitoring system can be sent to the successfully authenticated user terminal so that internal personnel of the power monitoring system can grasp the real-time fault monitoring data of the power monitoring system.

[0112] In another embodiment, Figure 3 As shown, a flow chart of another power monitoring system control method is provided, which specifically includes the following steps:

[0113] Step 302: Acquire multiple control interfaces corresponding to different control permissions in the power monitoring system, generate a private key corresponding to each control interface based on the key management system, and then obtain multiple initial electronic keys that match the number of control interfaces based on the digital certificate management system.

[0114] Step 304: Import a private key into each initial power key, obtain the electronic key corresponding to each control interface, and obtain the hash value of each electronic key;

[0115] Step 306: Obtain a base point of the preconfigured elliptic curve. Based on a randomly generated random number and the base point, obtain a random point in the preconfigured elliptic curve. Obtain the abscissa and ordinate of the random point. Linearly add the abscissa and ordinate with the hash value of the electronic key to obtain a linear addition result. The range of the random number is related to the order of the preconfigured elliptic curve.

[0116] Step 308: Perform a modulo operation on the linear addition result based on the order of the preconfigured elliptic curve to obtain a modulo result, and use the modulo result as the first encrypted value of the electronic key;

[0117] Step 310: Generate a second encrypted value for the electronic key based on the first encrypted value of the electronic key, the private key used to construct the electronic key, and a random number generated based on the order of a preconfigured elliptic curve. Then, linearly add the first encrypted value and the second encrypted value to generate a target encrypted value for the electronic key.

[0118] Step 312: The target encryption value is updated periodically to obtain the current target encryption value of each control interface. The electronic key input by the user terminal is then obtained and matched with the current target encryption value of each control interface to obtain a matching result.

[0119] In step 314, if the matching result indicates that the target encrypted value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface is used as a callable interface, and the power monitoring system is controlled within the control authority of the callable interface in response to the control command of the user terminal.

[0120] Step 316: construct multiple fault monitoring interfaces of the power monitoring system, generate public keys corresponding to each fault monitoring interface, and send real-time fault monitoring data of the power monitoring system to the user terminal when the public key of the fault monitoring interface successfully matches the public key input by the user terminal.

[0121] In one implementation, the control interface of the power monitoring system is divided into a transmission line control interface, a distribution line control interface, and a substation line control interface as an example. Figure 4 As shown, a power monitoring system that applies the above-mentioned power monitoring system control method is provided. The power monitoring system may include the following modules: a private key generation module, an electronic key encryption value generation module, a control interface matching module, a fault monitoring interface construction module, a public key generation module and a fault monitoring interface matching module.

[0122] Optionally, the private key generation module is used to generate private keys (private key 1, private key 2 and private key 3) of each control interface in the power monitoring system based on a key management system interconnected with the power monitoring system.

[0123] Optionally, an electronic key encryption value generation module is used to construct an electronic key for each control interface, obtain a hash value of the electronic key, and then obtain the coordinates of any point in the preconfigured elliptic curve. Based on the coordinates and the hash value of the electronic key, a first encryption value of the electronic key is generated. Then, based on the first encryption value of the electronic key and a private key for constructing the electronic key, a second encryption value of the electronic key is generated. The first encryption value and the second encryption value are merged to generate a target encryption value of the electronic key.

[0124] Optionally, the control interface matching module is used to use the successfully matched control interface as a callable interface when the target encryption value of the control interface successfully matches the electronic key input by the user terminal, and to control the power monitoring system within the control authority of the callable interface in response to the control instructions of the user terminal.

[0125] Optionally, the fault monitoring interface construction module is used to construct multiple fault monitoring interfaces and interconnect them with fault recorders in the power monitoring system.

[0126] Optionally, the public key generation module is used to generate a public key corresponding to each fault monitoring interface.

[0127] Optionally, the fault monitoring interface matching module is configured to send real-time fault monitoring data of the power monitoring system to the user terminal when a public key of the fault monitoring interface successfully matches a public key input by the user terminal.

[0128] It should be understood that, although the various steps in the flowcharts involved in the various embodiments described above are displayed in sequence according to the instructions of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowcharts involved in the various embodiments described above can include multiple steps or multiple stages, and these steps or stages are not necessarily executed and completed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of steps or stages in other steps.

[0129] Based on the same inventive concept, embodiments of the present application also provide a power monitoring system control device for implementing the power monitoring system control method described above. The solution to the problem provided by this device is similar to the solution described in the method described above. Therefore, the specific limitations of one or more power monitoring system control device embodiments provided below can be found in the limitations of the power monitoring system control method described above and will not be repeated here.

[0130] In one embodiment, Figure 5As shown, a power monitoring system control device is provided, including: a hash value acquisition module 502, a first encryption value generation module 504, a target encryption value acquisition module 506 and a control instruction response module 508, wherein:

[0131] The hash value acquisition module 502 is used to construct an electronic key of the control interface in the power monitoring system according to the private key of the control interface and obtain the hash value of the electronic key. There are multiple control interfaces, and each control interface corresponds to a control authority.

[0132] A first encrypted value generating module 504 is configured to obtain the coordinates of any point on the preconfigured elliptic curve and generate a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key;

[0133] a target encrypted value obtaining module 506 for generating a second encrypted value of the electronic key based on the first encrypted value of the electronic key and a private key used to construct the electronic key, and fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key;

[0134] The control instruction response module 508 is used to control the power monitoring system within the control authority of the callable interface in response to the control instruction of the user terminal when the current target encryption value of the control interface successfully matches the electronic key input by the user terminal.

[0135] In the above-mentioned power monitoring system control device, for multiple control interfaces corresponding to different control permissions in the power monitoring system, an electronic key for each control interface is constructed based on the private key of the control interface. A first encrypted value of the electronic key is then generated based on a hash value of the electronic key and the coordinates of any point on a preconfigured elliptic curve, so that the first encrypted value is random. A second encrypted value of the electronic key is then generated based on the first encrypted value and the private key used to construct the electronic key. Furthermore, a target encrypted value of the electronic key, also having randomness, is generated. When the target encrypted value of a control interface successfully matches the electronic key input by a user terminal, the device controls the power monitoring system within the control permission of the matching control interface in response to a control instruction from the user terminal. Throughout this process, a target encrypted value with randomness is generated for each control interface corresponding to different control permissions in the power monitoring system, thereby improving the information security of the power monitoring system. When a control interface successfully matches, the control permission is split so that the user terminal can only control the power monitoring system within the control permission of the matching control interface, preventing the entire power monitoring system's control permission from being exposed to risk due to the leakage of part of the target encrypted value, thereby further improving the information security of the power monitoring system.

[0136] In one embodiment, the hash value acquisition module is also used to obtain multiple control interfaces of the power monitoring system, generate a private key corresponding to each control interface based on the key management system, and then obtain multiple initial electronic keys based on the digital certificate management system. The number of initial electronic keys is consistent with the number of control interfaces. Then, a private key is imported into each initial power key to obtain an electronic key corresponding to each control interface.

[0137] In one embodiment, the first encryption value generation module is also used to obtain a base point of a preconfigured elliptic curve, obtain a random point in the preconfigured elliptic curve based on a randomly generated random number and the base point, the value range of the random number is related to the order of the preconfigured elliptic curve, and then obtain the horizontal coordinate and vertical coordinate of the random point, linearly add the horizontal coordinate, the vertical coordinate and the hash value of the electronic key to obtain a linear addition result, and then, based on the order of the preconfigured elliptic curve, perform a modulus operation on the linear addition result to obtain a modulus result, and use the modulus result as the first encryption value of the electronic key.

[0138] In one embodiment, the target encryption value acquisition module is also used to generate a second encryption value of the electronic key based on the first encryption value of the electronic key, a private key for constructing the electronic key, and a random number generated based on the order of a preconfigured elliptic curve, and linearly add the first encryption value and the second encryption value to generate a target encryption value of the electronic key.

[0139] In one embodiment, the power monitoring system control device also includes a matching result judgment module, which is used to periodically update the target encryption value, obtain the current target encryption value of each control interface, and then obtain the electronic key input by the user terminal, and match the electronic key input by the user terminal with the current target encryption value of each control interface to obtain a matching result. Finally, based on the matching result, it is determined whether the current target encryption value of the control interface successfully matches the electronic key input by the user terminal.

[0140] In one embodiment, the power monitoring system control device also includes a real-time fault monitoring data sending module, which is used to construct multiple fault monitoring interfaces of the power monitoring system and generate a public key corresponding to each fault monitoring interface. When the public key of the fault monitoring interface successfully matches the public key input by the user terminal, the real-time fault monitoring data of the power monitoring system is sent to the user terminal.

[0141] Each module in the aforementioned power monitoring system control device may be implemented in whole or in part through software, hardware, or a combination thereof. Each module may be embedded in or independent of a processor within a computer device in hardware form, or may be stored in a computer device memory in software form, so that the processor can call and execute the corresponding operations of each module.

[0142] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 6 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, abbreviated as I / O) and a communication interface. The processor, memory and input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and computer program in the non-volatile storage medium. The database of the computer device is used to store power monitoring system control data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a power monitoring system control method is implemented.

[0143] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different component arrangement.

[0144] In one embodiment, a computer device is provided, including a memory and a processor. The memory stores a computer program, and the processor implements the steps in the above method embodiments when executing the computer program.

[0145] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0146] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0147] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions.

[0148] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, database or other media used in the embodiments provided in this application may include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory may include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in the various embodiments provided herein may include at least one of a relational database and a non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchains. The processor involved in the various embodiments provided herein may be, but are not limited to, a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, and the like.

[0149] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0150] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present application. It should be noted that a person of ordinary skill in the art may make various modifications and improvements without departing from the spirit of the present application, and these modifications and improvements fall within the scope of protection of the present application. Therefore, the scope of protection of the present application shall be determined by the appended claims.

Claims

1. A power monitoring system control method, characterized in that: The method comprises: Constructing an electronic key for a control interface in a power monitoring system according to a private key of the control interface, and obtaining a hash value of the electronic key, wherein the number of the control interfaces is multiple, and each control interface corresponds to a control authority; Obtaining coordinates of any random point in a preconfigured elliptic curve, and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key; performing an operation based on a preconfigured operation method on the first encrypted value of the electronic key, the private key used to construct the electronic key, and a random number generated based on the order of a preconfigured elliptic curve to obtain an operation result; performing a modulo operation on the operation result based on the order of the preconfigured elliptic curve to obtain a second encrypted value of the electronic key; and combining the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key; When the target encryption value of the control interface successfully matches the electronic key input by the user terminal, the successfully matched control interface will be used as a callable interface, and the power monitoring system will be controlled within the control authority of the callable interface in response to the control instructions of the user terminal.

2. The method according to claim 1, characterized in that The electronic key for constructing the control interface according to the private key of the control interface in the power monitoring system includes: Acquire multiple control interfaces of the power monitoring system, and generate a private key corresponding to each of the control interfaces based on a key management system; Based on a digital certificate management system, a plurality of initial electronic keys are obtained, where the number of the initial electronic keys is consistent with the number of the control interfaces; A private key is imported into each of the initial power keys to obtain an electronic key corresponding to each of the control interfaces.

3. The method according to claim 1, characterized in that Obtaining the coordinates of any point on the preconfigured elliptic curve and generating a first encrypted value of the electronic key based on the coordinates and a hash value of the electronic key includes: Obtaining a base point of a preconfigured elliptic curve, and obtaining a random point in the preconfigured elliptic curve based on a randomly generated random number and the base point, wherein a value range of the random number is related to the order of the preconfigured elliptic curve; Obtaining the abscissa and ordinate of the random point, and linearly adding the abscissa, the ordinate, and the hash value of the electronic key to obtain a linear addition result; Based on the order of the preconfigured elliptic curve, a modulo operation is performed on the linear addition result to obtain a modulo result, and the modulo result is used as the first encryption value of the electronic key.

4. The method according to claim 1, wherein The fusing the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key includes: The first encrypted value and the second encrypted value are linearly added to generate a target encrypted value of the electronic key.

5. The method according to claim 1, wherein After generating the target encrypted value of the electronic key, the method further includes: Regularly updating the target encryption value to obtain the current target encryption value of each control interface; Obtaining an electronic key input by a user terminal, and matching the electronic key input by the user terminal with the current target encryption value of each control interface to obtain a matching result; Based on the matching result, it is determined whether the current target encryption value of the control interface successfully matches the electronic key input by the user terminal.

6. The method according to claim 1, characterized in that The method further comprises: Constructing multiple fault monitoring interfaces of the power monitoring system and generating a public key corresponding to each of the fault monitoring interfaces; When the public key of the fault monitoring interface successfully matches the public key input by the user terminal, real-time fault monitoring data of the power monitoring system is sent to the user terminal.

7. A power monitoring system control device, characterized in that: The device comprises: A hash value acquisition module is used to construct an electronic key for a control interface in a power monitoring system according to a private key of the control interface, and obtain a hash value of the electronic key. There are multiple control interfaces, each of which corresponds to a control authority. a first encryption value generation module, configured to obtain the coordinates of any point on a preconfigured elliptic curve and generate a first encryption value of the electronic key based on the coordinates and a hash value of the electronic key; a target encrypted value obtaining module, configured to perform an operation on the first encrypted value of the electronic key, a private key used to construct the electronic key, and a random number generated based on the order of a preconfigured elliptic curve according to a preconfigured operation method to obtain an operation result, then perform a modulo operation on the operation result based on the order of the preconfigured elliptic curve to obtain a second encrypted value of the electronic key, and fuse the first encrypted value and the second encrypted value to generate a target encrypted value of the electronic key; A control instruction response module is used to use the successfully matched control interface as a callable interface when the current target encryption value of the control interface successfully matches the electronic key input by the user terminal, and to control the power monitoring system within the control authority of the callable interface in response to the control instruction of the user terminal.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images