A communication method and device of a power grid system and a storage medium
By generating random seeds and public-private key pairs in the power grid system, mapping location information indexes, and calculating judgment parameters, the problem of communication data tampering in the power grid system is solved, and communication security and information integrity are improved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- GUANGDONG POWER GRID CO LTD
- Filing Date
- 2023-07-17
- Publication Date
- 2026-06-09
Smart Images
Figure CN116707800B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of information security technology, and in particular to a communication method, device and storage medium for a power grid system. Background Technology
[0002] Control information in power grid systems serves as the carrier of substation protection and control functions, requiring high real-time performance, reliability, and security. However, while the networked transmission of protection and control information from the main safety station in power grid systems expands information sharing, it also introduces security risks such as malicious control, external intrusion, and misoperation, posing hidden dangers to the safe and stable operation of the power system.
[0003] Existing power grid systems typically employ search encryption techniques to prevent data tampering during communication. However, these methods are insufficient to effectively prevent data tampering, resulting in low communication security for the power grid system. Summary of the Invention
[0004] This invention provides a communication method, device, and storage medium for a power grid system, in order to solve the technical problem that existing communication methods for power grid systems are unable to effectively prevent data from being tampered with during communication, resulting in low communication security of the power grid system.
[0005] One embodiment of the present invention provides a communication method for a power grid system, comprising:
[0006] Set the key generation function according to the communication level of the power grid system;
[0007] Random seeds are randomly generated for the sender, receiver, and security master station. Key pairs corresponding to the sender, receiver, and security master station are obtained according to the key generation function and the random seeds.
[0008] According to the key pair of the sending end and the preset encryption rules, the original location information index is encrypted to obtain the sending end location information index, and a first public key and private key pair are generated. The original location information index is mapped according to the first public key and the private key to obtain the transmitting end public key and the transmitting end private key.
[0009] The receiving end generates a second public key and private key pair based on an arbitrary number and the preset encryption rule. The original location information index is mapped according to the second public key and private key pair to obtain the receiving end public key and receiving end private key. The receiving end public key and receiving end private key are used as the receiving end location information index and returned to the secure master station.
[0010] When the secure master station receives the sender location information index, it calculates a first judgment parameter based on the sender public key and the sender private key; when the secure master station receives the receiver location information index, it calculates a second judgment parameter based on the receiver public key and the receiver private key.
[0011] The receiving end determines whether the original information location index is correct based on the first judgment parameter, the second judgment parameter, the sending end information location index, and the receiving end information location index.
[0012] Furthermore, the key generation function is:
[0013] Para=(λ,p,g,H)
[0014] Where Para is the key generation function, λ is the communication level, g is the random seed generated by the key with the encryption bit length corresponding to the communication level, p is the key library, and H is the key calibration judgment function.
[0015] Furthermore, the first judgment parameter is calculated based on the transmitter's public key and the transmitter's private key, including:
[0016] The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
[0017] Furthermore, a second judgment parameter is calculated based on the receiver's public key and private key, including:
[0018] The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
[0019] Furthermore, the receiving end determines whether the original information location index is correct based on the first judgment parameter, the second judgment parameter, the sending end information location index, and the receiving end information location index, including:
[0020] If the sending end information location index and the receiving end information location index are the same, then it is determined that the first judgment parameter and the second judgment parameter are the same, and the original location information index is correct; if the sending end location information index and the receiving end location information index are not the same, then it is determined that the first judgment parameter and the second judgment parameter are not the same, and the original information location index is incorrect.
[0021] One embodiment of the present invention provides a communication device for a power grid system, comprising:
[0022] The key generation function setting module is used to set the key generation function according to the communication level of the power grid system;
[0023] The key pair generation module is used to randomly generate random seeds corresponding to the sender, receiver, and security master station, and obtain key pairs corresponding to the sender, receiver, and security master station according to the key generation function and the random seeds;
[0024] The location information mapping module is used to encrypt the original location information index according to the key pair of the sending end and the preset encryption rules to obtain the sending end location information index, generate a first public key and a private key pair, and map the original location information index according to the first public key and the private key to obtain the transmitting end public key and the transmitting end private key.
[0025] The receiving end location information index return module is used to generate a second public key and private key pair based on an arbitrary number and the preset encryption rule by the receiving end, map the original location information index according to the second public key and private key pair to obtain the receiving end public key and the receiving end private key, and return the receiving end public key and the receiving end private key as the receiving end location information index to the secure master station.
[0026] The judgment parameter calculation module is used to calculate a first judgment parameter based on the transmitter's public key and the transmitter's private key when the security master station receives the transmitter's location information index; and to calculate a second judgment parameter based on the receiver's public key and the receiver's private key when the security master station receives the receiver's location information index.
[0027] The information location index determination module is used to determine whether the original information location index is correct by the receiving end based on the first determination parameter, the second determination parameter, the sending end information location index and the receiving end information location index.
[0028] Furthermore, the key generation function is:
[0029] Para=(λ,p,g,H)
[0030] Where Para is the key generation function, λ is the communication level, g is the random seed generated by the key with the encryption bit length corresponding to the communication level, p is the key library, and H is the key calibration judgment function.
[0031] Furthermore, the first judgment parameter is calculated based on the transmitter's public key and the transmitter's private key, including:
[0032] The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
[0033] Furthermore, a second judgment parameter is calculated based on the receiver's public key and private key, including:
[0034] The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
[0035] One embodiment of the present invention provides a computer-readable storage medium including a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to perform a communication method for a power grid system as described above.
[0036] In this embodiment of the invention, the original location information index is encrypted at the sending end to obtain a sending end location information index. The receiving end generates a second public key and private key pair based on an arbitrary number and the preset encryption rule. The original location information index is mapped according to the second public key and private key pair to obtain a receiving end public key and a receiving end private key, which are used as the receiving end location information index. Based on the judgment parameters generated by the sending end location information index, the receiving end location information index, and the public key, the correctness of the original location information index can be accurately determined, thereby effectively preventing data tampering during communication and thus effectively improving the communication security of the power grid system. Attached Figure Description
[0037] Figure 1 This is a flowchart illustrating the communication method for a power grid system provided in an embodiment of the present invention;
[0038] Figure 2 This is a schematic diagram of a public key mapping process provided by an embodiment of the present invention;
[0039] Figure 3 This is another schematic flowchart of the communication method for a power grid system provided in an embodiment of the present invention;
[0040] Figure 4 This is a schematic diagram of the structure of the communication device for the power grid system provided in an embodiment of the present invention. Detailed Implementation
[0041] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0042] In the description of this application, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this application, unless otherwise stated, "multiple" means two or more.
[0043] In the description of this application, it should be noted that, unless otherwise expressly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection between two components. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.
[0044] Please see Figure 1 One embodiment of the present invention provides a communication method for a power grid system, comprising:
[0045] S1. Set the key generation function according to the communication level of the power grid system;
[0046] In this embodiment of the invention, a key generation function can be set according to the communication level of the power grid system. The key generation function is as follows:
[0047] Para=(λ,p,g,H)
[0048] Where Para is the key generation function, λ is the communication level; g is the random seed generated by the key with the encryption bit length corresponding to the communication level; p is the key library; H is the key calibration judgment function, H:{0,1} is a key verification judgment function, 1 indicates that the sender and receiver have consistent key knowledge, and 0 indicates that the sender and receiver have failed to decode.
[0049] In this embodiment of the invention, the communication level can be obtained based on the communication security level of the power grid system.
[0050] S2. Randomly generate random seeds corresponding to the sender, receiver, and security master station, and obtain key pairs corresponding to the sender, receiver, and security master station according to the key generation function and the random seeds;
[0051] In this embodiment of the invention, during each information transmission, the security master station in the power grid randomly generates three seeds (x, y, z ∈ R) for the sending end, the receiving end, and the security master station, respectively, and obtains the corresponding key pairs according to the key generation function. The key pair for the sending end is (Pk... S Sk S )=(gx The receiving end's key pair is (Pk, x), where x is the key pair. R Sk R )=(g y The key pair of the secure master station is (Pk). Ser Sk Ser )=(g z ,z), and return these key pairs to the sender, receiver and security master respectively.
[0052] S3. Based on the key pair of the sending end and the preset encryption rules, the original location information index is encrypted to obtain the sending end location information index, and a first public key and private key pair are generated. The original location information index is mapped according to the first public key and the private key pair to obtain the transmitting end public key and the transmitting end private key.
[0053] In this embodiment of the invention, the sending end uses its own public key Pk S The original location information index in the power grid system is encrypted, where the original location information index is w. The original location information is the location information of control commands or transmitted data in the communication flow between the current substation and the master station.
[0054] In this embodiment of the invention, the encryption of the original location information index in the power grid system can be achieved using any random number r∈R, with the preset encryption rule being... In encryption, the first public key and key pair are generated as θ = H(w,K) = H(w,g) xy To improve communication security, this embodiment of the invention maps the original location information index using a first public key and a private key pair to obtain the transmitter's public key and transmitter's private key, wherein the transmitter's public key is... The transmitter's private key is
[0055] In this embodiment of the invention, the ciphertext that determines the location of the ciphertext information can be C. w = (C1, C2), C w This represents the ciphertext composed of the sender's information location index w and the public and private keys.
[0056] S4. The receiving end generates a second public key and private key pair based on an arbitrary number and a preset encryption rule. The original location information index is mapped according to the second public key and private key pair to obtain the receiving end public key and receiving end private key. The receiving end public key and receiving end private key are used as the receiving end location information index and returned to the secure master station.
[0057] In this embodiment of the invention, in order to successfully decrypt the communication information sent by the sender, the receiver selects any number t∈R and calculates it in the same way as the sender. And generate a second public and private key pair θ / =H(w / ,K)=H(w / ,g xy Then, the receiving end maps the original location information based on historical experience and probability distribution to obtain the receiving end's public key and private key, where the receiving end's public key is... The sender's public key is
[0058] To ensure that the information can be decrypted, in this embodiment of the invention, the receiving end indexes the mapped receiving end location information. Return to the main security station.
[0059] S5. When the secure master station receives the sender's location information index, it calculates the first judgment parameter based on the sender's public key and private key; when the secure master station receives the receiver's location information index, it calculates the second judgment parameter based on the receiver's public key and private key.
[0060] In this embodiment of the invention, when the power grid master station receives the receiver information location index provided by the transmitter, it pre-calculates the first judgment parameter. These values are then stored sequentially in a table. When the power grid master station receives the receiver information location index provided by the receiver... At that time, based on the private key Sk Ser The second judgment parameter is calculated.
[0061] S6. The receiving end determines whether the original information location index is correct based on the first judgment parameter, the second judgment parameter, the sending end information location index, and the receiving end information location index.
[0062] In this embodiment of the invention, the receiving end can decrypt the information of the sending end according to its own private key, and determine whether the original information location index is correct according to the first judgment parameter, the second judgment parameter, the sending end information location index and the receiving end information location index.
[0063] In this embodiment of the invention, it is assumed that (Pk) S Sk S =(g x ,x))(Pk R Sk R )=(g y ,y) and (Pk) Ser Sk Ser =(g z Let , z) be the key pair of the sender, receiver, and security master station, respectively. C = (C1, C2) is the ciphertext of the information location index w generated by the sender. Let The receiver information location index w generated for the receiver / The encrypted form.
[0064] That is, and
[0065] The embodiments of the present invention are obtained according to the above formula:
[0066]
[0067]
[0068] That is, if w = w / Then θ=H(w,g xy )=H(w / ,g xy )=θ / , at this time I=I / That is, the original information location index is correct; if w≠w / At this point, I≠I / This indicates an error in the original information location index.
[0069] The embodiments of the present invention can effectively improve the decryption speed, thereby effectively improving the ciphertext decoding speed, and further effectively improving the efficiency of control defense communication in the power grid system.
[0070] In one embodiment, the first judgment parameter is calculated based on the transmitter's public key and private key, including:
[0071] The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
[0072] In one embodiment, the second judgment parameter is calculated based on the receiver's public key and private key, including:
[0073] The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
[0074] In one embodiment, the receiving end determines whether the original information location index is correct based on the first judgment parameter, the second judgment parameter, the sending end information location index, and the receiving end information location index, including:
[0075] If the location index of the sending end information and the location index of the receiving end information are the same, then the first judgment parameter and the second judgment parameter are consistent, and the original location information index is correct; if the location index of the sending end information and the location index of the receiving end information are inconsistent, then the first judgment parameter and the second judgment parameter are inconsistent, and the original location information index is incorrect.
[0076] Please see Figure 2 This is a schematic diagram of a public key mapping process provided by an embodiment of the present invention. Figure 2The information sent by the sending end is encrypted using an asymmetric key. The information index is generated by mapping to create a new public key and private key, which are then encrypted. The sending end then sends the ciphertext and information index to the power grid master station. The receiving end generates an information map based on historical experience and statistical distribution and sends it to the power grid master station. Finally, the power grid master station evaluates the information sent by the sending and receiving ends and feeds back the result to the receiving end.
[0077] Please see Figure 3 This is another flowchart illustrating a communication method for a power grid system provided in an embodiment of the present invention.
[0078] Implementing the embodiments of the present invention has the following beneficial effects:
[0079] In this embodiment of the invention, the original location information index is encrypted at the sending end to obtain the sending end location information index. The receiving end generates a second public key and private key pair based on an arbitrary number and a preset encryption rule. The original location information index is mapped according to the second public key and private key pair to obtain the receiving end public key and receiving end private key, which are used as the receiving end location information index. Based on the judgment parameters generated by the sending end information location index, the receiving end information location index, and the public key, the correctness of the original information location index can be accurately determined, thereby effectively preventing data tampering during communication and thus effectively improving the communication security of the power grid system.
[0080] The embodiments of the present invention can securely respond to ciphertext location guessing attacks and multi-ciphertext attacks, and can maximize the security and integrity of information, thereby preventing information from being intercepted or tampered with, and thus laying the foundation for information protection of the security control defense line in the power grid system.
[0081] Please see Figure 4 Based on the same inventive concept as the above embodiments, one embodiment of the present invention provides a communication device for a power grid system, comprising:
[0082] The key generation function setting module 10 is used to set the key generation function according to the communication level of the power grid system.
[0083] The key pair generation module 20 is used to randomly generate random seeds corresponding to the sender, receiver and security master station, and obtain key pairs corresponding to the sender, receiver and security master station according to the key generation function and the random seeds;
[0084] The location information mapping module 30 is used to encrypt the original location information index according to the key pair of the sending end and the preset encryption rules to obtain the sending end location information index, generate a first public key and a private key pair, and map the original location information index according to the first public key and the key pair to obtain the transmitting end public key and the transmitting end private key.
[0085] The receiver location information index return module 40 is used to generate a second public key and private key pair based on an arbitrary number and a preset encryption rule by the receiver, map the original location information index according to the second public key and private key pair to obtain the receiver public key and receiver private key, and return the receiver public key and receiver private key as the receiver location information index to the secure master station.
[0086] The judgment parameter calculation module 50 is used to calculate the first judgment parameter based on the transmitter's public key and private key when the secure master station receives the transmitter's location information index; and to calculate the second judgment parameter based on the receiver's public key and private key when the secure master station receives the receiver's location information index.
[0087] The information location index determination module 60 is used to determine whether the original information location index is correct by the receiving end based on the first determination parameter, the second determination parameter, the information location index of the sending end, and the information location index of the receiving end.
[0088] In one embodiment, the key generation function is:
[0089] Para=(λ,p,g,H)
[0090] Where Para is the key generation function, λ is the communication level, g is the random seed generated by the key with the encryption bit length corresponding to the communication level, p is the key library, and H is the key calibration judgment function.
[0091] In one embodiment, the first judgment parameter is calculated based on the transmitter's public key and private key, including:
[0092] The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
[0093] In one embodiment, the second judgment parameter is calculated based on the receiver's public key and private key, including:
[0094] The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
[0095] In one embodiment, the receiving end determines whether the original information location index is correct based on the first judgment parameter, the second judgment parameter, the sending end information location index, and the receiving end information location index, including:
[0096] If the location index of the sending end information and the location index of the receiving end information are the same, then the first judgment parameter and the second judgment parameter are consistent, and the original location information index is correct; if the location index of the sending end information and the location index of the receiving end information are inconsistent, then the first judgment parameter and the second judgment parameter are inconsistent, and the original location information index is incorrect.
[0097] One embodiment of the present invention provides a computer-readable storage medium including a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to perform the communication method of the power grid system as described above.
[0098] The above are preferred embodiments of the present invention. It should be noted that, for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications are also considered to be within the scope of protection of the present invention.
Claims
1. A communication method for a power grid system, characterized in that, include: Set the key generation function according to the communication level of the power grid system; Random seeds are randomly generated for the sender, receiver, and security master station. Key pairs corresponding to the sender, receiver, and security master station are obtained according to the key generation function and the random seeds. According to the key pair of the sending end and the preset encryption rules, the original location information index is encrypted to obtain the sending end location information index, and a first public key and private key pair are generated. The original location information index is mapped according to the first public key and private key pair to obtain the sending end public key and sending end private key. The receiving end generates a second public key and private key pair based on an arbitrary number and the preset encryption rule. The original location information index is mapped according to the second public key and private key pair to obtain the receiving end public key and receiving end private key. The receiving end public key and receiving end private key are used as the receiving end location information index and returned to the secure master station. When the secure master station receives the sender location information index, it calculates the first judgment parameter based on the sender's public key and the sender's private key. When the secure master station receives the location information index of the receiving end, it calculates the second judgment parameter based on the public key and private key of the receiving end; If the location information index of the sending end and the location information index of the receiving end are the same, then it is determined that the first judgment parameter and the second judgment parameter are the same, and the original location information index is correct; If the location information index of the sending end and the location information index of the receiving end are inconsistent, it is determined that the first judgment parameter and the second judgment parameter are inconsistent, and the original location information index is incorrect.
2. The communication method for a power grid system as described in claim 1, characterized in that, The key generation function is: in, For key generation functions, denoted as the communication level; g is the random seed generated by the key with the corresponding encryption bit length for the communication level; p is the key library; and H is the key calibration judgment function.
3. The communication method for a power grid system as described in claim 1, characterized in that, The first judgment parameter is calculated based on the transmitter's public key and the transmitter's private key, including: The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
4. The communication method for a power grid system as described in claim 1, characterized in that, The second judgment parameter is calculated based on the receiver's public key and private key, including: The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
5. A communication device for a power grid system, characterized in that, include: The key generation function setting module is used to set the key generation function according to the communication level of the power grid system; The key pair generation module is used to randomly generate random seeds corresponding to the sender, receiver, and security master station, and obtain key pairs corresponding to the sender, receiver, and security master station according to the key generation function and the random seeds; The location information mapping module is used to encrypt the original location information index according to the key pair of the sending end and the preset encryption rules to obtain the sending end location information index, generate a first public key and a private key pair, and map the original location information index according to the first public key and the key pair to obtain the sending end public key and the sending end private key. The receiving end location information index return module is used to generate a second public key and private key pair based on an arbitrary number and the preset encryption rule by the receiving end, map the original location information index according to the second public key and private key pair to obtain the receiving end public key and the receiving end private key, and return the receiving end public key and the receiving end private key as the receiving end location information index to the secure master station. The judgment parameter calculation module is used to calculate the first judgment parameter based on the transmitter's public key and transmitter's private key when the security master station receives the transmitter's location information index; When the secure master station receives the location information index of the receiving end, it calculates the second judgment parameter based on the public key and private key of the receiving end; The location information index determination module is used to determine that the first determination parameter and the second determination parameter are consistent when the location information index of the sending end and the location information index of the receiving end are consistent, and the original location information index is correct. If the location information index of the sending end and the location information index of the receiving end are inconsistent, then the first judgment parameter and the second judgment parameter are inconsistent, and the original location information index is incorrect.
6. The communication device for a power grid system as described in claim 5, characterized in that, The key generation function is: in, For key generation functions, denoted as the communication level; g is the random seed generated by the key with the corresponding encryption bit length for the communication level; p is the key library; and H is the key calibration judgment function.
7. The communication device for a power grid system as described in claim 5, characterized in that, The first judgment parameter is calculated based on the transmitter's public key and the transmitter's private key, including: The ratio of the transmitter's public key to the transmitter's private key is used as the first judgment parameter.
8. The communication device for a power grid system as described in claim 5, characterized in that, The second judgment parameter is calculated based on the receiver's public key and private key, including: The ratio of the receiver's public key to the receiver's private key is used as the second judgment parameter.
9. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored computer program, wherein, when the computer program is executed, it controls the device containing the computer-readable storage medium to perform the communication method of the power grid system as described in any one of claims 1 to 4.