Substation service data intelligent weaving method based on multi-access edge computing technology

Abstract

The application discloses a substation service data intelligent weaving method based on multi-access edge computing technology, comprising the following steps: S1, data segmentation is performed on multi-terminal service data to obtain first service data and second service data; S2, a first encryption algorithm is used to encrypt the first service data to obtain first security boundary information; S3, a second encryption algorithm is used to encrypt the second service data to obtain second security boundary information; S4, an edge server uses corresponding decryption algorithms to respectively decrypt and authenticate the first security boundary information and the second security boundary information; if the authentication is successful, the first service data and the corresponding second service data are spliced according to a virtual link contact list to obtain terminal service data which is sent to a service monitoring platform; if the authentication fails, an alarm log is generated. Two different encryption and decryption methods can ensure the safety of data transmission and improve the efficiency of information analysis.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of power grid information security, in particular to a substation business data intelligent weaving method based on multi-access edge computing technology. BACKGROUND

[0002] Key drivers of edge computing include the Internet of Things (IoT), today's 4G networks and the new generation of 5G networks. Traffic, especially video, is growing exponentially, and connected devices are also exploding, which means that network infrastructure needs to be effectively expanded to provide greater data volume. Multi-access edge computing (MEC) brings the flexibility and agility of the cloud closer to customers to meet these needs.

[0003] With the construction of new power systems, the access of massive wind power, photovoltaic and distributed power terminals and other new energy terminals will intensify the intermittency and volatility of power supply, and traditional wireless communication methods cannot meet the safe and reliable requirements of power grid control business, increasing the potential risk of stable operation of the power grid. Although multi-access edge computing can improve the efficiency of data collection and analysis, for the security and reliability of massive multi-terminal data, the current national encryption algorithm can ensure the security of information transmission within the network, but if the information is intercepted by the external network, there is still a possibility of cracking and stealing. Quantum encryption technology can ensure the absolute security of information transmission, but the quantum encryption and decryption process takes a long time, how to ensure the security of data transmission while improving the efficiency of information analysis is a technical problem that needs to be solved.

[0004] The above information disclosed in the background section is only used to strengthen the understanding of the background of the present application, and therefore it can include information that does not constitute prior art known to those of ordinary skill in the art. SUMMARY

[0005] The purpose of the present application is to solve the problem of low efficiency of multi-terminal business data analysis and potential security risks in new power systems. A substation business data intelligent weaving method based on multi-access edge computing technology is designed. By splitting the terminal business data, using 5G network slicing technology for single-link transmission of the split business data, and using two different encryption and decryption methods to ensure data transmission security, the data is verified and spliced at the edge server end, which can ensure the security of data transmission while improving the efficiency of information analysis.

[0006] In the first aspect, a technical solution provided in an embodiment of the present application is a substation business data intelligent weaving method based on multi-access edge computing technology, including the following steps:

[0007] S1, data segmentation of multi-terminal business data to obtain first business data and second business data;

[0008] S2, encrypting the first service data by using a first encryption algorithm to obtain first security boundary information, the first security boundary information being transmitted to the edge server by using a first virtual link;

[0009] S3, encrypting the second service data by using a second encryption algorithm to obtain second security boundary information, the second security boundary information being transmitted to the edge server by using a second virtual link;

[0010] S4, the edge server respectively decrypting and authenticating the first security boundary information and the second security boundary information by using corresponding decryption algorithms;

[0011] If the authentication is successful, the terminal service data is obtained by splicing the first service data and the corresponding second service data according to a virtual link contact list, and the terminal service data is sent to a service monitoring platform;

[0012] If the authentication fails, an alarm log is generated.

[0013] In the scheme, the terminal service data is split to obtain the first service data and the second service data, the 5G network slicing technology is used to transmit the split first service data and the second service data by using a single link, two different encryption and decryption methods are used to ensure the security of data transmission, and finally the data is verified and spliced at the edge server end, which can ensure the security of data transmission and improve the efficiency of information analysis.

[0014] Preferably, in step S1, the multi-terminal service data is split to obtain the first service data and the second service data, including the following steps:

[0015] The multi-terminal service data is obtained, the identity permission information in the service data is extracted to obtain the first service data, and the terminal attribute information in the service data is extracted to obtain the second service data.

[0016] In the scheme, the first service terminal data is obtained based on the identity permission information, the identity permission information includes the IP address and the factory number of the device, and based on the IP address of the device, the manufacturer and the corresponding model of the device can be known; the terminal attribute information includes the installation position of the device, the running life of the device, and the real-time state data of the device; based on the second service data, the device can be positioned, and the state information of the device can be analyzed and monitored.

[0017] Preferably, in step S2, the first service data is encrypted by using a first key to obtain first security boundary information, the first security boundary information being transmitted to the edge server by using a first virtual link, including the following steps:

[0018] The first service data is encrypted by using a national encryption algorithm to obtain the first security boundary information;

[0019] The first network slice allocation table and the second network slice allocation table are obtained by using a network slice technology, and a virtual link contact table is constructed according to the first network slice allocation table and the second network slice allocation table.

[0020] The first security boundary information is transmitted to the edge server based on the first virtual link allocated in the first network slice allocation table.

[0021] In the scheme, the national cryptographic algorithm is a series of algorithms formulated by the National Cryptography Administration. It includes symmetric encryption algorithm, elliptic curve asymmetric encryption algorithm, and hash algorithm. Specifically, it includes SM1, SM2, SM3, etc. Among them, the first business data does not contain sensitive data (mainly device state information), and the national cryptographic algorithm with good security effect and high encryption and decryption efficiency can improve the data analysis efficiency. The national cryptographic algorithm encrypts the first business data to obtain the first security boundary information. Further, by using the 5G network slice technology, each terminal device is allocated a virtual link during data transmission, which can ensure that the terminal data does not interfere with each other. According to the first network slice allocation table and the second network slice allocation table, the virtual link contact table can be constructed to associate the first business data and the second business data, and further provide a reliable basis for subsequent data splicing.

[0022] As a preferred, in step S3, the second business data is encrypted by using a second encryption algorithm to obtain second security boundary information, and the second security boundary information is transmitted to the edge server by using a second virtual link, including the following steps: the second business data is encrypted by using a quantum encryption algorithm to obtain the second security boundary information.

[0023] The second security boundary information is transmitted to the edge server based on the second virtual link allocated in the second network slice allocation table.

[0024] In the scheme, the second business data contains sensitive data (mainly device state information), and the quantum encryption algorithm with good security effect can ensure the absolute safety of the data.

[0025] As a preferred, the second business data is encrypted by using a quantum encryption algorithm to obtain the second security boundary information, including:

[0026] A first quantum key pool is constructed based on a quantum trunk to obtain a quantum key sent by a quantum key generator. The storage bit number of the first quantum key pool is the same as the number of terminals on the terminal side, and a mapping relationship between the corresponding storage bits of the first quantum key pool and the virtual link contact table is established.

[0027] The quantum key corresponding to the stored bit in the first quantum key pool is sequentially called to encrypt the second service data corresponding to the terminal to obtain second security boundary information;

[0028] The second security boundary information is sent to the edge server based on the corresponding second virtual link in the virtual link contact list.

[0029] In the scheme, the quantum key is distributed to the quantum key encryption and decryption terminal on the terminal side and the quantum key encryption and decryption terminal of the edge server through the quantum trunk, which can ensure the synchronization of quantum key distribution, and further, the second service data encrypted by the quantum key has absolute security on the transmission path.

[0030] As a preferred, the edge server uses corresponding decryption algorithms to respectively decrypt and authenticate the first security boundary information and the second security boundary information, including the following steps:

[0031] The first service data is obtained by decrypting the first security boundary information according to the national secret algorithm, the first service data is authenticated, and the first splicing information is obtained by splicing the authenticated first service data and the first virtual link information;

[0032] The second service data is obtained by decrypting the second security boundary information according to the quantum encryption algorithm, the second service data is authenticated, and the second splicing information is obtained by splicing the authenticated second service data and the second virtual link information.

[0033] In the scheme, the edge server obtains the first security boundary information, obtains the first service data by decrypting the first security boundary information according to the national secret algorithm, further authenticates the identity of the terminal device by authenticating the first service data, obtains the first splicing information by splicing the first service data and the first virtual link information after successful authentication, and the first splicing information contains the first virtual link information as the basis for splicing subsequent information; further, the second service data is obtained by decrypting the second security boundary information according to the quantum encryption algorithm, the second service data is verified for integrity, and the second splicing information is obtained by splicing the second service data and the second virtual link information, and the second splicing information contains the second virtual link information as the basis for splicing subsequent information.

[0034] As a preferred, the second service data is obtained by decrypting the second security boundary information according to the quantum encryption algorithm, including the following steps:

[0035] The proxy server synchronously obtains the quantum key sent by the quantum key generator based on the quantum trunk to construct the second quantum key pool, and establishes the mapping relationship between the corresponding storage bit of the second quantum key pool and the virtual link contact list;

[0036] The proxy server calls the quantum key corresponding to the storage bit in the second quantum key pool to decrypt the obtained second security boundary information to obtain the second service data.

[0037] In the scheme, since the twin port information of the virtual link contact table and the storage bit of the quantum key pool store the contact relationship, the quantum key corresponding to the position of the quantum key pool can be obtained according to the twin port information, and the second security boundary information transmitted through the corresponding virtual link can be quickly decrypted by obtaining the quantum key corresponding to the twin port information, thereby significantly improving the information analysis efficiency.

[0038] As preferred, if the authentication succeeds, the first service data and the corresponding second service data are spliced according to the virtual link contact table to obtain terminal service data, and the terminal service data is sent to the service monitoring platform, including the following steps:

[0039] According to the first virtual link information in the first splicing information, the corresponding second virtual link information is obtained by referring to the virtual link contact table, and the second splicing information corresponding to the second link information is searched; or according to the second virtual link information in the second splicing information, the corresponding first virtual link information is obtained by referring to the virtual link contact table, and the first splicing information corresponding to the first virtual link information is searched;

[0040] The obtained first splicing information and second splicing information are spliced to obtain corresponding pseudo-service terminal information;

[0041] The head information and tail information of the pseudo-service terminal information are extracted to obtain true-service terminal information.

[0042] In the scheme, based on the virtual link information in the first splicing information and the virtual link information in the second splicing information as the splicing basis, the splicing information corresponding to the virtual links belonging to the same twin port can be combined together as pseudo-service terminal information by referring to the virtual link contact table, and then the corresponding virtual link information in the pseudo-service terminal information is removed to obtain true-service terminal information.

[0043] As preferred, the making of the virtual link contact table includes:

[0044] The 5G terminal generates the same number of double-layer network slices according to the number of terminals on the terminal side;

[0045] The first port address of the first virtual link and the second port address of the second virtual link of the double-layer network slice are obtained to construct a twin port address;

[0046] The virtual link contact table is constructed according to the twin port address, and the association relationship between the first virtual link and the corresponding second link information is obtained according to the virtual link contact table.

[0047] In the scheme, each twin port corresponds to a pair of virtual links, and the two virtual links are associated through a virtual link contact table, which provides a basis for subsequent service data splicing.

[0048] Preferably, the virtual link contact table is constructed according to the twin port address, and the association relationship between the first virtual link and the corresponding second link information is obtained according to the virtual link contact table, including: the 5G terminal obtains the pulse signal of the quantum key generator generating the quantum key, sequentially obtains the dotting time and the corresponding time interval of the pulse signal, arranges the pulse signal according to the dotting time, determines the start time and the end time of the pulse signal, and further determines the time domain boundary corresponding to the first quantum key pool or / and the second quantum key pool.

[0049] The twin port is marked according to the coding order number; and the issuing frequency of the twin port is generated according to the coding order number and the time interval of the corresponding pulse signal.

[0050] The twin port address is sequentially sent to the edge server for storage to obtain the virtual link contact table according to the issuing frequency;

[0051] According to the address association between the time domain boundary corresponding to the virtual link contact table and the second quantum key pool, the storage position of the quantum key corresponding to the second quantum key pool is determined, and the quantum key is retrieved.

[0052] In the scheme, the quantum key generator generates a pair of quantum keys, which is used as a heartbeat information or a pulse information to interact with the 5G terminal. The 5G terminal records the dotting time and the corresponding time interval by dotting, arranges the dotting time, and injects the quantum keys of the two key pools to obtain the quantum key distribution time and the corresponding dotting number (the number of quantum keys, i.e. the storage position of the corresponding quantum key pool). Therefore, the time domain boundary corresponding to the first quantum key pool or / and the second quantum key pool is determined by the time dimension, and the twin port is marked according to the coding order number; the issuing frequency of the twin port is generated according to the coding order number and the time interval of the corresponding pulse signal. Therefore, the second security boundary information is sent to the corresponding storage position of the storage end of the edge server side according to the issuing frequency. The storage position also records the second security boundary information sent by the second virtual link. The address association between the time domain boundary corresponding to the virtual link contact table and the second quantum key pool can retrieve the quantum key in the corresponding position to accurately decrypt the second security boundary information, which significantly improves the analysis efficiency of the service data.

[0053] The beneficial effects of this invention are as follows: This invention designs an intelligent weaving method for substation business data based on multi-access edge computing technology. By splitting terminal business data, using 5G network slicing technology to transmit the split business data via a single link, and employing two different encryption and decryption methods to ensure the security of data transmission, the data is finally verified and spliced ​​at the edge server. This method can ensure the security of data transmission while improving the efficiency of information parsing.

[0054] The above description of the invention is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and in order to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0055] Other features, objects, and advantages of the invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings. The drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings.

[0056] Figure 1 This is a flowchart of the intelligent weaving method for substation business data based on multi-access edge computing technology according to the present invention. Detailed Implementation

[0057] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only one preferred embodiment of this invention and are only used to explain this invention. They do not limit the scope of protection of this invention. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0058] Before discussing the exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowcharts describe the operations (or steps) as sequential processes, many of the operations (or steps) can be performed in parallel, concurrently, or simultaneously. Furthermore, the order of the operations can be rearranged. The process can be terminated when its operation is completed, but it may also have additional steps not included in the figures; the process may correspond to a method, function, procedure, subroutine, subroutine, etc.

[0059] Example: Figure 1 As shown, the intelligent weaving method for substation business data based on multi-access edge computing technology includes the following steps:

[0060] S1, data segmentation is performed on the multi-terminal service data to obtain first service data and second service data.

[0061] Specifically, the multi-terminal service data is obtained, identity permission information in the service data is extracted to obtain the first service data, and terminal attribute information in the service data is extracted to obtain the second service data.

[0062] It can be understood that the terminal side mainly includes a network configuration DTU terminal, a network configuration differential protection terminal, and an edge proxy gateway. Different terminals collect different data, and the corresponding identity information is different. The first service terminal data is obtained based on the identity permission information. The identity permission information includes the IP address and the factory number of the device. Based on the IP address of the device, the manufacturer and the corresponding model of the device can be known. The terminal attribute information includes the installation position of the device, the running life of the device, and the real-time state data of the device. Based on the second service data, the device can be positioned, and the state information of the device can be analyzed and monitored.

[0063] S2, the first service data is encrypted by using a first encryption algorithm to obtain first security boundary information, and the first security boundary information is transmitted to an edge server by using a first virtual link.

[0064] Specifically, the first service data is encrypted by using a national encryption algorithm to obtain the first security boundary information.

[0065] The first network slice allocation table and the second network slice allocation table are obtained by using a network slice technology, and a virtual link contact table is constructed according to the first network slice allocation table and the second network slice allocation table.

[0066] The first security boundary information is transmitted to the edge server based on the first virtual link allocated in the first network slice allocation table.

[0067] It can be understood that the national encryption algorithm is a series of algorithms formulated by the National Cryptography Administration. It includes symmetric encryption algorithms, elliptic curve asymmetric encryption algorithms, and hash algorithms. Specifically, it includes SM1, SM2, SM3, etc. Among them, the first service data does not contain sensitive data (mainly the state information of the device), and the national encryption algorithm with good confidentiality and high encryption and decryption efficiency can improve the efficiency of data analysis. The national encryption algorithm encrypts the first service data to obtain the first security boundary information. Further, by using the 5G network slice technology, each device corresponds to a virtual link, which can ensure that the terminal data does not interfere with each other. According to the first network slice allocation table and the second network slice allocation table, the virtual link contact table can be constructed to associate the first service data and the second service data, and further provide a reliable basis for subsequent data splicing.

[0068] S3, encrypting the second service data by using a second encryption algorithm to obtain second security boundary information, wherein the second security boundary information is transmitted to the edge server by using a second virtual link.

[0069] Specifically, the second service data is encrypted by using a quantum encryption algorithm to obtain second security boundary information.

[0070] The second security boundary information is transmitted to the edge server based on a second virtual link allocated in a second network slice allocation table.

[0071] It can be understood that the second service data contains sensitive data (mainly device state information), and the quantum encryption algorithm with good confidentiality can ensure the absolute security of the data.

[0072] Specifically, the second service data is encrypted by using a quantum encryption algorithm to obtain second security boundary information, including: constructing a first quantum key pool based on a quantum key generator of a quantum trunk line, wherein the storage bit number of the first quantum key pool is the same as the number of terminals on the terminal side, and a mapping relationship between the corresponding storage bits of the first quantum key pool and a virtual link contact table is established.

[0073] The quantum keys in the corresponding storage bits of the first quantum key pool are sequentially called to encrypt the second service data corresponding to the terminal to obtain the second security boundary information.

[0074] The second security boundary information is transmitted to the edge server based on the corresponding second virtual link in the virtual link contact table.

[0075] It can be understood that the quantum key is distributed to the quantum key encryption and decryption terminal on the terminal side and the quantum key encryption and decryption terminal of the edge server by using the quantum trunk line, which can ensure the synchronization of quantum key distribution, and further, the second service data encrypted by using the quantum key is absolutely secure on the transmission path.

[0076] S4, the edge server uses a corresponding decryption algorithm to respectively decrypt and authenticate the first security boundary information and the second security boundary information.

[0077] If the authentication is successful, the first service data and the corresponding second service data are spliced to obtain terminal service data, and the terminal service data is transmitted to the service monitoring platform according to the virtual link contact table.

[0078] If the authentication fails, an alarm log is generated.

[0079] Specifically, the edge server uses a corresponding decryption algorithm to respectively decrypt and authenticate the first security boundary information and the second security boundary information, including the following steps:

[0080] According to the national secret algorithm, the first security boundary information is decrypted to obtain the first service data, the first service data is authenticated, and the authenticated first service data is spliced with the first virtual link information to obtain the first spliced information.

[0081] According to the quantum encryption algorithm, the second security boundary information is decrypted to obtain the second service data, the second service data is authenticated, and the authenticated second service data is spliced with the second virtual link information to obtain the second spliced information.

[0082] It can be understood that the edge server obtains the first security boundary information, decrypts the first security boundary information according to the national secret algorithm to obtain the first service data, further authenticates the first service data to determine the identity of the terminal device, and after successful authentication, the first service data is spliced with the first virtual link information to obtain the first spliced information, which contains the first virtual link information as the basis for splicing subsequent information; further, the second security boundary information is decrypted using the quantum encryption algorithm to obtain the second service data, and after verifying the integrity of the data, the second service data is spliced with the second virtual link information to obtain the second spliced information, which contains the second virtual link information as the basis for splicing subsequent information.

[0083] Further, the second security boundary information is decrypted according to the quantum encryption algorithm to obtain the second service data, including the following steps:

[0084] The proxy server constructs a second quantum key pool based on the quantum key generator sending the quantum key by the quantum trunk synchronization, and establishes a mapping relationship between the corresponding storage bit of the second quantum key pool and the virtual link contact table;

[0085] The proxy server retrieves the quantum key corresponding to the storage bit in the second quantum key pool to decrypt the obtained second security boundary information to obtain the second service data.

[0086] It can be understood that since the twin port information of the virtual link contact table and the storage bit of the quantum key pool store the contact relationship, the corresponding quantum key of the quantum key pool can be obtained according to the twin port information, and by obtaining the quantum key corresponding to the twin port information, the second security boundary information transmitted through the corresponding virtual link can be quickly decrypted, significantly improving the information analysis efficiency.

[0087] Further, if the authentication is successful, the first service data and the corresponding second service data are spliced according to the virtual link contact table to obtain terminal service data, which is sent to the service monitoring platform, including the following steps:

[0088] According to the first virtual link information in the first splicing information, the corresponding second virtual link information is obtained by referring to the virtual link contact table, and the second splicing information corresponding to the second link information is searched; or according to the second virtual link information in the second splicing information, the corresponding first virtual link information is obtained by referring to the virtual link contact table, and the first splicing information corresponding to the first virtual link information is searched;

[0089] The obtained first splicing information and second splicing information are spliced to obtain corresponding pseudo-service terminal information;

[0090] The head information and tail information of the pseudo-service terminal information are extracted to obtain true-service terminal information.

[0091] It can be understood that, based on the virtual link information in the first splicing information and the virtual link information in the second splicing information as the splicing basis, referring to the virtual link contact table can combine the splicing information corresponding to the virtual link pair belonging to one twin port together as pseudo-service terminal information, and then the corresponding virtual link information in the pseudo-service terminal information is removed to obtain true-service terminal information.

[0092] Further, the making of the virtual link contact table comprises:

[0093] The 5G terminal generates the same number of double-layer network slices according to the number of terminals on the terminal side;

[0094] The first port address of the first virtual link and the second port address of the second virtual link of the double-layer network slice are obtained to construct a twin port address;

[0095] A virtual link contact table is constructed according to the twin port address; and the association relationship between the first virtual link and the corresponding second link information is obtained according to the virtual link contact table.

[0096] It can be understood that each twin port corresponds to a pair of virtual links, and the two virtual links are associated through the virtual link contact table, which provides a basis for subsequent splicing of service data.

[0097] Further, the virtual link contact table is constructed according to the twin port address, and the association relationship between the first virtual link and the corresponding second link information is obtained according to the virtual link contact table, which comprises: the 5G terminal obtains the pulse signal of the quantum key generator generating the quantum key, sequentially obtains the dotting time and the corresponding time interval of the pulse signal, arranges the pulse signal according to the dotting time, determines the start time and the end time of the pulse signal, and further determines the time domain boundary corresponding to the first quantum key pool or / and the second quantum key pool;

[0098] The twin port is marked according to the arrangement number; and the issuing frequency of the twin port is generated according to the arrangement number and the time interval of the corresponding pulse signal;

[0099] According to the issuing frequency, the twin port address is sent to the edge server in sequence for storage to obtain a virtual link contact table;

[0100] According to the address association between the time domain boundary corresponding to the virtual link contact table and the second quantum key pool, the storage position of the quantum key corresponding to the second quantum key pool corresponding to the twin port address is determined, and the quantum key is retrieved.

[0101] It can be understood that the quantum key generator interacts with the 5G terminal as a heartbeat information or pulse information after generating a pair of quantum keys each time, the 5G terminal records the dotting time and the corresponding time interval in the form of dotting, arranges the dotting time, and obtains the quantum key distribution duration and the corresponding dotting number (the number of quantum keys, that is, the storage position of the corresponding quantum key pool) by injecting the quantum keys of the two-way key pool, therefore, the time domain boundary corresponding to the first quantum key pool or / and the second quantum key pool is determined in the time dimension, and then the twin port is marked according to the arrangement number; the issuing frequency of the twin port is generated according to the arrangement number and the time interval of the corresponding pulse signal, therefore, the second security boundary information is sent to the corresponding storage position of the storage end of the edge server side according to the issuing frequency, the storage position also records the second security boundary information sent by the virtual link, and the address association between the time domain boundary corresponding to the virtual link contact table and the second quantum key pool can retrieve the quantum key in the corresponding position to accurately decrypt the second security boundary information, which significantly improves the analysis efficiency of the business data.

[0102] The above specific implementation is a preferred implementation of the substation business data intelligent weaving method of the present application based on the multi-access edge computing technology, and is not limited to the specific implementation range of the present application, the scope of the present application includes but is not limited to the specific implementation, and equivalent changes made according to the shape and structure of the present application are within the protection scope of the present application.

Claims

1. A method for intelligent weaving of substation service data based on multi-access edge computing technology, characterized in that: The method comprises the following steps: S1, data segmentation is performed on the multi-terminal service data to obtain first service data and second service data; S2, a first encryption algorithm is used to encrypt the first service data to obtain first security boundary information, and the first security boundary information is transmitted to an edge server through a first virtual link; S3, a second encryption algorithm is used to encrypt the second service data to obtain second security boundary information, and the second security boundary information is transmitted to the edge server through a second virtual link; S4, the edge server uses corresponding decryption algorithms to respectively decrypt and authenticate the first security boundary information and the second security boundary information; specifically comprising: The edge server acquires the first security boundary information, decrypts the first security boundary information according to a national secret algorithm to obtain the first service data, further authenticates the identity of the terminal device by authenticating the first service data, and after successful authentication, splices the first service data and first virtual link information to obtain first spliced information, wherein the first spliced information contains the first virtual link information as a basis for splicing subsequent information; further, the second service data is obtained by decrypting the second security boundary information according to a quantum encryption algorithm, and after verifying the integrity of the data, the second service data is spliced with the second virtual link information to obtain second spliced information, wherein the second spliced information contains the second virtual link information as a basis for splicing subsequent information; If the authentication is successful, the first service data and the corresponding second service data are spliced according to a virtual link contact table to obtain terminal service data and are sent to a service monitoring platform; specifically comprising: According to the first virtual link information in the first spliced information, the corresponding second virtual link information is acquired by referring to the virtual link contact table, and the second spliced information corresponding to the second virtual link information is searched; or According to the second virtual link information in the second spliced information, the corresponding first virtual link information is acquired by referring to the virtual link contact table, and the first spliced information corresponding to the first virtual link information is searched; The acquired first spliced information and second spliced information are spliced to obtain corresponding pseudo-service terminal information; The head information and tail information of the pseudo-service terminal information are extracted to obtain true-service terminal information; If the authentication fails, an alarm log is generated.

2. The method of claim 1, wherein the method is based on a multi-access edge computing technology. The method comprises the following steps: In step S1, the multi-terminal service data is segmented to obtain first service data and second service data, comprising the following steps: The multi-terminal service data is acquired, the identity permission information in the service data is extracted to obtain the first service data, and the terminal attribute information in the service data is extracted to obtain the second service data.

3. The intelligent weaving method for substation service data based on multi-access edge computing technology according to claim 1, characterized in that: In step S2, the first service data is encrypted by using a first encryption algorithm to obtain first security boundary information, and the first security boundary information is transmitted to an edge server through a first virtual link, comprising the following steps: The first service data is encrypted by using a national secret algorithm to obtain the first security boundary information; The first network slice allocation table and the second network slice allocation table are obtained by using a network slice technology, and a virtual link contact table is constructed according to the first network slice allocation table and the second network slice allocation table. The first security boundary information is transmitted to the edge server based on the first virtual link allocated in the first network slice allocation table.

4. The intelligent weaving method of substation business data based on the multi-access edge computing technology according to claim 3, characterized in that: In step S3, the second security boundary information is obtained by encrypting the second business data by using a second encryption algorithm, and the second security boundary information is transmitted to the edge server by using a second virtual link, comprising the following steps: The second security boundary information is obtained by encrypting the second business data by using a quantum encryption algorithm; The second security boundary information is transmitted to the edge server based on the second virtual link allocated in the second network slice allocation table.

5. The intelligent weaving method of substation business data based on the multi-access edge computing technology according to claim 4, characterized in that: The second security boundary information is obtained by encrypting the second business data by using a quantum encryption algorithm, comprising: A first quantum key pool is constructed based on the quantum key sent by the quantum key generator based on the quantum trunk line, the storage bit number of the first quantum key pool is the same as the number of terminals on the terminal side, and the mapping relationship between the corresponding storage bit of the first quantum key pool and the virtual link contact table is established; The second security boundary information is obtained by encrypting the second business data corresponding to the terminal by sequentially calling the quantum key of the corresponding storage bit in the first quantum key pool; The second security boundary information is transmitted to the edge server based on the corresponding second virtual link in the virtual link contact table.

6. The intelligent weaving method of substation business data based on the multi-access edge computing technology according to claim 1, characterized in that: The second business data is obtained by decrypting the second security boundary information according to the quantum encryption algorithm, comprising the following steps: The second quantum key pool is constructed by the proxy server based on the quantum key sent by the quantum key generator based on the quantum trunk line synchronization, and the mapping relationship between the corresponding storage bit of the second quantum key pool and the virtual link contact table is established; The second business data is obtained by decrypting the obtained second security boundary information by calling the quantum key of the corresponding storage bit in the second quantum key pool.

7. The intelligent weaving method of substation business data based on the multi-access edge computing technology according to claim 5, characterized in that: The virtual link contact table is constructed according to the twin port address, and the association relationship between the first virtual link and the corresponding second virtual link information is obtained according to the virtual link contact table.

8. The intelligent weaving method of substation business data based on the multi-access edge computing technology according to claim 7, characterized in that: ​ ​ ​ The virtual link contact table is constructed according to the twin port address, and the association relationship between the first virtual link and the corresponding second virtual link information is obtained according to the virtual link contact table, comprising: The 5G terminal acquires the pulse signal of the quantum key generator generating the quantum key, sequentially acquires the dotting time and the corresponding time interval of the pulse signal, arranges the pulse signal according to the dotting time, determines the start time and the end time of the pulse signal, and further determines the time domain boundary corresponding to the first quantum key pool or / and the second quantum key pool; The twin port is marked according to the coding sequence number; the issuing frequency of the twin port is generated according to the coding sequence number and the time interval of the corresponding pulse signal; According to the issuing frequency, the twin port address is sequentially sent to the edge server for storage to obtain the virtual link contact table; According to the time domain boundary corresponding to the virtual link contact table and the second quantum key pool, the address association is carried out, the storage position of the quantum key corresponding to the second quantum key pool corresponding to the twin port address is determined, and the quantum key is retrieved.

Images