A secure communication method and system for power Internet of Things based on identification cryptographic algorithm

By adopting a security communication method based on the identifier -based password algorithm in the Electric Power Internet of Things, the two parties of the communication directly certify and encrypted communication through the identification to solve the power grid security risk caused by unsafe terminal access, and realize the reliability and security of data transmission. , And reduce system complexity and cost.

CN116800455BActive Publication Date: 2025-01-28HUIZHIAN INFORMATION TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202211521409.9
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-11-30
Publication Date
2025-01-28
Estimated Expiration
2042-11-30

AI Technical Summary

Technical Problem

Unsecure terminal access in the prior art causes huge risks to the power grid security, and data is easily eavesdropped and tampered during transmission of wireless networks, affecting communication security.

Method used

Adopting the power Internet of Things security communication methods based on the identifier -based password algorithm, the communication between the communication between the two parties directly certified and encrypted communication through the identification, and the formula (1), (2), and (3) are used for authentication information attachment, encryption processing, and data certification and decryption.

Benefits of technology

The complexity of the password system is reduced, the certificate request and verification process of the traditional PKI system is avoided, the hardware cost and communication burden are reduced, the reliability and security of data transmission can be ensured, and the demand for massive terminal access can be efficiently met.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116800455B_ABST
    Figure CN116800455B_ABST
Patent Text Reader

Abstract

The present invention relates to the technical field of electric power Internet of Things, and in particular to a secure communication method and system for electric power Internet of Things based on an identification cryptographic algorithm. The steps include: the sending end obtains authentication information according to the identification data of the sending end and attaches it to the communication data to obtain comprehensive data with authentication information; the sending end encrypts the comprehensive data with authentication information and sends it to the receiving end; the receiving end performs data authentication and decryption on the received encrypted data according to the identification data of the sending end of the encrypted data and its own identification data. The present invention uses the entity identification as the public key through the identification cryptographic algorithm, and there is no need to apply for and exchange certificates, which greatly reduces the complexity of the cryptographic system; the communicating parties can directly perform authentication and encrypted communication based on the identification of the other party, avoiding the processes such as certificate request and certificate verification required by the traditional PKI system, while ensuring data security, reducing hardware costs and communication burdens.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of electric power Internet of Things, and in particular to a method and system for secure communication of electric power Internet of Things based on an identification cryptographic algorithm. Background Art

[0002] The power Internet of Things is an intelligent service system that fully utilizes advanced information technology, network technology, and control technology such as "big cloud, things, mobile, and smart chain" to realize the interconnection of all things and human-machine interaction in all links of the power system, with comprehensive state perception, efficient information processing, and convenient and flexible application. The network security of the power Internet of Things is an important foundation for ensuring the safe and stable operation of electricity.

[0003] With the in-depth construction of the power Internet of Things, a large number of power Internet of Things terminals are connected to the power grid through edge Internet of Things agents. In the existing power Internet of Things edge environment, since some edge Internet of Things agents and power Internet of Things terminals have not yet adopted cryptographic technology, they face security challenges such as data eavesdropping, data forgery, and identity forgery. With massive terminal access, traditional security authentication based on the PKI mechanism faces huge software and hardware costs and management overhead.

[0004] In summary, due to the increasing number of security vulnerabilities, network intrusion methods and increasingly blurred network boundaries, insecure terminal access will bring great security risks to power grid security. When data is transmitted over wireless networks, it is extremely susceptible to destructive behaviors such as data eavesdropping and data tampering, affecting communication security. Summary of the invention

[0005] The purpose of the present invention is to provide a secure communication method and system for the power Internet of Things based on an identification cryptographic algorithm, which is used to solve the problems of the prior art: insecure terminal access will bring great security risks to the security of the power grid, and when data is transmitted in a wireless network, it is very easy to be subjected to destructive behaviors such as data eavesdropping and data tampering, which affects the security of communication.

[0006] In order to achieve the above object, the present invention adopts the following technical solutions:

[0007] The present invention provides a power Internet of Things security communication method based on an identification cryptographic algorithm, in which the communicating parties directly perform authentication and encrypted communication according to their identifications; wherein the communicating parties are an edge Internet of Things agent and a power Internet of Things terminal.

[0008] Furthermore, the communicating parties directly perform authentication and encrypted communication according to the identifications of the communicating parties, including the following steps:

[0009] Step A1: Before data communication, the sender of the communicating parties obtains authentication information according to the identification data of the sender and attaches it to the communication data to obtain comprehensive data with authentication information;

[0010] Step A2: the sending end encrypts the comprehensive data assigned with the authentication information according to the identification data of the receiving end of the communicating parties, obtains the encrypted data and sends it to the receiving end;

[0011] Step A3: After receiving the encrypted data, the receiving end performs data authentication and decryption on the received encrypted data according to the identification data of the sender of the encrypted data and its own identification data to obtain the original communication data.

[0012] Furthermore, the step A1 specifically includes: before data communication, the sending ends of the communicating parties use the first formula (1) to obtain authentication information according to the identification data of the sending end and attach it to the communication data to obtain comprehensive data with authentication information;

[0013] The first formula (1) is:

[0014]

[0015] Among them, G represents the comprehensive data given to the authentication information; Indicates authentication information data; D indicates the communication data that the sender needs to send; L c Indicates the preset identification data of the sender in the communication; len() indicates the number of data bits in the brackets; [] 16 Indicates converting the value in the brackets to hexadecimal; <<1 means shifting left by 1 bit; Indicates bitwise XOR of the data in the brackets; {,} means merging the data on both sides of the comma in the brackets into two data packets;

[0016] The step A2 specifically includes: the sending end encrypts the comprehensive data assigned with the authentication information according to the identification data of the receiving end of the communicating parties using the second formula (2) to obtain encrypted data;

[0017] The second formula (2) is:

[0018]

[0019] Wherein, F represents the encrypted data obtained by encrypting the comprehensive data assigned to the authentication information; L j Preset identification data indicating the receiving end of the communicating parties; Indicates circular right shift;

[0020] The step A3 specifically includes: after the receiving end receives the encrypted data, the receiving end uses the third formula (3) to perform data authentication and decryption on the received encrypted data according to the identification data of the sending end of the encrypted data and its own identification data to obtain the original communication data;

[0021] The third formula (3) is:

[0022]

[0023] Wherein, D′ represents the original communication data finally obtained after data authentication and decryption of the received encrypted data; F′ represents the encrypted data received by the receiving end; represents a circular left shift; M represents the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(1) represents the first data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(2) represents the second data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end.

[0024] Furthermore, the G, D.L c ,{,} Merged data, L j , F′ are both hexadecimal data.

[0025] Furthermore, if the receiving end calculates D′=0, it means that the current data authentication and decryption have failed, and the decryption and authentication operations are stopped immediately, and the receiving end waits for receiving new data again.

[0026] Furthermore, if the decrypted data M calculated by the receiving end is not in the form of two data packets, it means that the decryption fails, and the decryption and authentication operations are immediately stopped, and the receiving end waits for new data again.

[0027] The present invention also provides a power Internet of Things security communication system based on an identification cryptographic algorithm, comprising: an edge Internet of Things agent and at least one power Internet of Things terminal; the edge Internet of Things agent is communicatively connected to the power Internet of Things terminal; the edge Internet of Things agent and the power Internet of Things terminal act as the communicating parties and directly perform authentication and encrypted communication according to the identifications of the communicating parties.

[0028] Furthermore, both parties of the communication include:

[0029] An authentication information attachment module is used to obtain authentication information based on local identification data and attach it to the communication data before sending the communication data when the local side acts as the sending end of the communication, so as to obtain comprehensive data with authentication information;

[0030] An encryption processing module, used for encrypting the comprehensive data assigned with authentication information according to the identification data of the receiving end when the local side acts as the sending end in the communication, so as to obtain encrypted data;

[0031] A communication module, used to send locally generated encrypted data to a receiving end;

[0032] The data authentication and decryption module is used to authenticate and decrypt the received encrypted data according to the identification data of the sender of the received encrypted data and its own identification data when acting as the receiving end of the communicating parties locally, so as to obtain the original communication data.

[0033] Furthermore, the authentication information attachment module is specifically used to obtain comprehensive data assigned to the authentication information using the first formula (1);

[0034] The first formula (1) is:

[0035]

[0036] Among them, G represents the comprehensive data given to the authentication information; Indicates authentication information data; D indicates the communication data that the sender needs to send; L c Indicates the preset identification data of the sender in the communication; len() indicates the number of data bits in the brackets; [] 16 Indicates converting the value in the brackets to hexadecimal; <<1 means shifting left by 1 bit; Indicates bitwise XOR of the data in the brackets; {,} means merging the data on both sides of the comma in the brackets into two data packets;

[0037] The encryption processing module is specifically used to obtain encrypted data using the second formula (2);

[0038] The second formula (2) is:

[0039]

[0040] Wherein, F represents the encrypted data obtained by encrypting the comprehensive data assigned to the authentication information; Lj represents the preset identification data of the receiving end of the two communicating parties; Indicates circular right shift;

[0041] The data authentication and decryption module is specifically used to obtain the original communication data using the third formula (3);

[0042] The third formula (3) is:

[0043]

[0044] Wherein, D′ represents the original communication data finally obtained after data authentication and decryption of the received encrypted data; F′ represents the encrypted data received by the receiving end; represents a circular left shift; M represents the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(1) represents the first data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(2) represents the second data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end.

[0045] The present invention has at least the following beneficial effects:

[0046] (1) In general, the present invention uses the entity identifier as the public key through the identification cryptographic algorithm, without the need to apply for and exchange certificates, which greatly reduces the complexity of the cryptographic system. In the entire secure communication system, the communicating parties can directly perform authentication and encrypted communication based on the other party's identifier, avoiding the certificate request and certificate verification processes required by the traditional PKI system. While ensuring data security, it reduces hardware costs and communication burdens, and can efficiently meet the access needs of massive terminals.

[0047] (2) The present invention obtains authentication information according to the identification data of the sender of the communicating parties through the first formula (1) of step A1 and attaches it to the communication data, thereby attaching the authentication information of the sender to the communication data in a deformed form. Firstly, the deformed form can play an encryption role, and secondly, the authentication information of the receiving end and the communication end can ensure that the data transmission occurs between the two communicating parties, thereby ensuring the reliability and security of information transmission;

[0048] (3) The present invention uses the second formula (2) of step A2 to encrypt the communication data with authentication information according to the identification data of the receiving ends of the two communicating parties, and then uses the identification data of the receiving ends of the two communicating parties to perform reliable encryption, and also facilitates the receiving ends of the two communicating parties to use their own authentication information to perform safe and fast decryption in the subsequent process, thereby improving the security of the system and the efficiency of the system in data analysis;

[0049] (4) The present invention utilizes the third formula (3) of step A3 to perform data authentication and decryption on the received data according to the identification data of the data sending end and the identification data of the receiving end, thereby obtaining the original data, thereby ensuring the integrity and reliability of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying any creative work.

[0051] Figure 1 It is a schematic diagram of the method flow of the present invention. DETAILED DESCRIPTION

[0052] The present invention aims to solve the technical problems that the existing insecure terminal access will bring great security risks to the power grid security; when data is transmitted in a wireless network, it is very easy to be subjected to destructive behaviors such as data eavesdropping and data tampering, which affects the communication security. A new power Internet of Things secure communication method and system based on an identification cryptographic algorithm is proposed.

[0053] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0054] Example 1

[0055] This example is used to disclose the method of the present invention.

[0056] In order to improve the safe operation of the power Internet of Things, the present invention proposes a secure communication method for the power Internet of Things based on an identification cryptographic algorithm, in which the communicating parties directly perform authentication and encrypted communication according to the identifications of the communicating parties; wherein the communicating parties are an edge Internet of Things agent and a power Internet of Things terminal. The authentication and encryption technology based on the identification cryptographic algorithm provided by the present invention can effectively solve the problem of large-scale security authentication of power systems; at the same time, the identification cryptographic algorithm of the present invention is a certificateless asymmetric cryptographic authentication technology, which can generate public and private keys for the authentication process based on user identification information, without the need for a third-party authentication center to ensure the legitimacy of the public key, eliminating the certificate creation and maintenance process, and has technical advantages such as security, efficiency, and reliability, and is suitable for the power Internet of Things environment.

[0057] On the whole, the identification cryptographic algorithm of the present invention uses the entity identification of both parties as the public key during the communication between the edge IoT agent and the power IoT terminal, without the need to apply for and exchange certificates, which greatly reduces the complexity of the cryptographic system. In the entire secure communication system of the present invention, both parties can directly perform authentication and encrypted communication based on the other party's identification, avoiding the certificate request and certificate verification processes required by the traditional PKI system. While ensuring data security, it reduces hardware costs and communication burdens, and can efficiently meet the access needs of massive terminals.

[0058] For details, see Figure 1 , the communicating parties can directly authenticate and encrypt the communication according to each other's identification. The specific steps include:

[0059] Step A1: Before data communication, the sender of the two communicating parties uses the first formula (1) to obtain authentication information based on the identification data of the sender of the two communicating parties and attaches it to the communication data to obtain comprehensive data with authentication information.

[0060] Among them, the first formula is:

[0061]

[0062] Wherein, G represents the comprehensive data given to the authentication information, and the data is in hexadecimal format; represents authentication information, the data format of which is in hexadecimal format; D represents the communication data that the sender needs to send, which is in hexadecimal format; L c Indicates the preset identification data of the sender in the communication, which is in hexadecimal format; len() means to find the number of data bits in the brackets; [] 16 Indicates converting the value in the brackets to hexadecimal; <<1 means shifting left by 1 bit; It indicates bitwise XOR of the hexadecimal data in the brackets; {,} indicates merging the data on both sides of the comma in the brackets into two data packets to obtain new hexadecimal data.

[0063] Therefore, the first formula (1) of step A1 is used to obtain authentication information based on the identification data of the sending end of the communicating parties and attach it to the communication data, so that the authentication information of the sending end is attached to the communication data in a deformed form. Firstly, it can play an encryption role in the deformed form, and secondly, the authentication information of the receiving end and the communication end can ensure that the data transmission occurs between the two communicating parties, thereby ensuring the reliability and security of information transmission.

[0064] Step A2: After the communication data is assigned authentication information, the sending ends of the communicating parties use the second formula (2) to encrypt the comprehensive data assigned authentication information according to the identification data of the receiving ends of the communicating parties, obtain encrypted data and send it to the receiving end;

[0065] Among them, the second formula is:

[0066]

[0067] Wherein, F represents the encrypted data obtained by encrypting the comprehensive data assigned to the authentication information; L jPreset identification data indicating the receiving end of the communicating parties (the data is in hexadecimal format); Indicates circular right shift.

[0068] Therefore, the communication data with authentication information is encrypted according to the identification data of the receiving ends of the communicating parties using the second formula (2) of step A2, and then the identification data of the receiving ends of the communicating parties are used for reliable encryption. At the same time, it is also convenient for the receiving ends of the communicating parties to use their own authentication information for safe and fast decryption, thereby improving the security of the system and the efficiency of the system in data parsing.

[0069] Step A3: After receiving the encrypted data, the receiving end of the two communicating parties uses the third formula (3) to perform data authentication and decryption on the received encrypted data according to the identification data of the sending end of the encrypted data and the identification data of the receiving end itself, thereby obtaining the original communication data;

[0070] Among them, the third formula is:

[0071]

[0072] Wherein, D′ represents the original communication data finally obtained after data authentication and decryption of the received encrypted data. If D′=0, it means that the current data authentication and decryption fail, and the data cannot be parsed); F′ represents the data received by the receiving end of the two communicating parties (the data format is in hexadecimal format); Indicates circular left shift; M indicates the decrypted data obtained by decrypting the data received by the receiving end of the communicating parties (if the decrypted data is not in the form of two data packets, it means that the decryption has failed, then the decryption and authentication operations are stopped immediately and the reception of new data is waited for again); M(1) indicates the first data packet in the decrypted data obtained by decrypting the data received by the receiving end of the communicating parties; M(2) indicates the second data packet in the decrypted data obtained by decrypting the data received by the receiving end of the communicating parties.

[0073] Therefore, the third formula (3) of step A3 is used to perform data authentication and decryption on the received data according to the identification data of the data sending end and the identification data of the receiving end, thereby obtaining the original data, thereby ensuring the integrity and reliability of the data.

[0074] Furthermore, if the receiving end calculates through the third formula (3) that the decrypted data M is not in the form of two data packets, it means that the decryption fails, and the decryption and authentication operations are stopped immediately, and new data is received again. Alternatively, if D′=0 is calculated, it means that the current data authentication and decryption have failed, and the data cannot be parsed, and the decryption and authentication operations are stopped immediately, and new data is received again. In this way, problems can be discovered in time during the decryption and authentication process and the decryption and authentication operations can be terminated, further improving the system utilization rate of the receiving end.

[0075] Example 2

[0076] Based on the above-mentioned embodiment 1, this embodiment provides a power Internet of Things secure communication system based on an identification cryptographic algorithm.

[0077] The system of the present invention includes: an edge Internet of Things agent and at least one power Internet of Things terminal; the edge Internet of Things agent is communicatively connected with the power Internet of Things terminal; the edge Internet of Things agent and the power Internet of Things terminal serve as communicating parties and directly perform authentication and encrypted communication according to the identifications of the communicating parties.

[0078] Furthermore, the edge IoT agent and the power IoT terminal both include:

[0079] an authentication information attachment module, used to obtain authentication information according to local identification data and attach it to the communication data before sending the communication data when the local side acts as the sending end of the communication, so as to obtain comprehensive data assigned with the authentication information; preferably, the authentication information attachment module obtains the comprehensive data assigned with the authentication information according to the first formula (1);

[0080] an encryption processing module, used for encrypting the comprehensive data assigned with the authentication information according to the identification data of the receiving end when the local side acts as the sending end in the communication, so as to obtain the encrypted data; preferably, the encryption processing module obtains the encrypted data according to the second formula (2);

[0081] A communication module, used to send locally generated encrypted data to a receiving end;

[0082] The data authentication and decryption module is used to perform data authentication and decryption on the received encrypted data according to the identification data of the sender of the received encrypted data and its own identification data when acting locally as the receiving end of the communicating parties, so as to obtain the original communication data; preferably, the data authentication and decryption module obtains the original communication data according to the above third formula (3).

[0083] In this embodiment, the working principle and technical effect of each module are specifically consistent with those in the above method and will not be repeated here.

[0084] In summary:

[0085] The electric power Internet of Things secure communication system and method based on the identification cryptographic algorithm provided by the embodiment of the present invention uses the first formula (1) to obtain authentication information according to the identification data of the sending end of the communicating parties and attach it to the communication data, so that the authentication information of the sending end is attached to the communication data in a deformed form. First, it can play an encryption role in the deformed form, and second, the authentication information of the receiving end and the communication end can ensure that the data transmission occurs between the two communicating parties, thereby ensuring the reliability and security of information transmission; then, the communication data with the authentication information is encrypted according to the identification data of the receiving end of the communicating parties using the second formula (2), and then the identification data of the receiving end of the communicating parties is used for reliable encryption, and at the same time, it is convenient for the receiving ends of the subsequent communicating parties to use their own authentication information for safe and fast decryption, thereby improving the security of the system and the efficiency of the system in data parsing; finally, the third formula (3) is used to authenticate and decrypt the received data according to the identification data of the data sending end and the identification data of the receiving end, thereby obtaining the original data, thereby ensuring the integrity and reliability of the data. In the entire secure communication system, the communicating parties can directly perform authentication and encrypted communication based on each other's identification, avoiding the certificate request, certificate verification and other processes required by the traditional PKI system. While ensuring data security, it reduces hardware costs and communication burdens, and can efficiently meet the access needs of massive terminals.

[0086] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A secure communication method for power Internet of Things based on identification cryptographic algorithm, characterized in that: The communicating parties directly perform authentication and encrypted communication according to their identities; wherein the communicating parties are the edge IoT agent and the power IoT terminal; The two communicating parties directly perform authentication and encrypted communication according to their identifiers, including the following steps: Step A1: Before data communication, the sender of the communicating parties obtains authentication information according to the identification data of the sender and attaches it to the communication data to obtain comprehensive data with authentication information; Step A2: the sending end encrypts the comprehensive data assigned with the authentication information according to the identification data of the receiving end of the communicating parties, obtains the encrypted data and sends it to the receiving end; Step A3: After receiving the encrypted data, the receiving end performs data authentication and decryption on the received encrypted data according to the identification data of the sending end of the encrypted data and its own identification data to obtain the original communication data; The step A1 specifically includes: before data communication, the sending ends of the communicating parties use the first formula (1) to obtain authentication information according to the identification data of the sending end and attach the authentication information to the communication data to obtain comprehensive data with authentication information; The first formula (1) is: Among them, G represents the comprehensive data given to the authentication information; Indicates authentication information; D indicates the communication data that the sender needs to send; L c Indicates the preset identification data of the sender in the communication; len() indicates the number of data bits in the brackets; [] 16 Indicates converting the value in the brackets to hexadecimal; <<1 means shifting left by 1 bit; Indicates bitwise XOR of the data in the brackets; {,} means merging the data on both sides of the comma in the brackets into two data packets; The step A2 specifically includes: the sending end encrypts the comprehensive data assigned with the authentication information according to the identification data of the receiving end of the communicating parties using the second formula (2) to obtain encrypted data; The second formula (2) is: Wherein, F represents the encrypted data obtained by encrypting the comprehensive data assigned to the authentication information; L j Preset identification data indicating the receiving end of the communicating parties; Indicates circular right shift; The step A3 specifically includes: after the receiving end receives the encrypted data, the receiving end uses the third formula (3) to perform data authentication and decryption on the received encrypted data according to the identification data of the sending end of the encrypted data and its own identification data to obtain the original communication data; The third formula (3) is: Wherein, D′ represents the original communication data finally obtained after data authentication and decryption of the received encrypted data; F′ represents the encrypted data received by the receiving end; represents a circular left shift; M represents the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(1) represents the first data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(2) represents the second data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end.

2. According to claim 1, a method for secure communication of electric power Internet of Things based on identification cryptographic algorithm is characterized in that: The G. D.L c ,{,} Merged data, L j , F′ are both hexadecimal data.

3. According to claim 1, a method for secure communication of electric power Internet of Things based on identification cryptographic algorithm is characterized in that: If the receiving end calculates D′=0, it means that the current data authentication and decryption have failed, and the decryption and authentication operations are stopped immediately, and the receiving end waits for receiving new data again.

4. According to claim 1, a method for secure communication of electric power Internet of Things based on identification cryptographic algorithm is characterized in that: If the decrypted data M calculated by the receiving end is not in the form of two data packets, it means that the decryption has failed, and the decryption and authentication operations are stopped immediately, and the receiving end waits for receiving new data again.

5. A secure communication system for the power Internet of Things based on an identification cryptographic algorithm, characterized in that: include: An edge IoT agent and at least one power IoT terminal; The edge IoT agent is communicatively connected with the power IoT terminal; The edge IoT agent and the power IoT terminal, as the communicating parties, directly perform authentication and encrypted communication according to the identifications of the communicating parties; Wherein, the communicating parties both include: An authentication information attachment module is used to obtain authentication information based on local identification data and attach it to the communication data before sending the communication data when the local side acts as the sending end of the communication, so as to obtain comprehensive data with authentication information; An encryption processing module, used for encrypting the comprehensive data assigned with authentication information according to the identification data of the receiving end when the local side acts as the sending end in the communication, so as to obtain encrypted data; A communication module, used to send locally generated encrypted data to a receiving end; The data authentication and decryption module is used to authenticate and decrypt the received encrypted data according to the identification data of the sender of the received encrypted data and its own identification data when the local device acts as the receiving end of the communication, so as to obtain the original communication data; The authentication information attachment module is specifically used to obtain the comprehensive data assigned to the authentication information using the first formula (1); The first formula (1) is: Among them, G represents the comprehensive data given to the authentication information; Indicates authentication information data; D indicates the communication data that the sender needs to send; L c Indicates the preset identification data of the sender in the communication; len() indicates the number of data bits in the brackets; [] 16 Indicates converting the value in the brackets to hexadecimal; <<1 means shifting left by 1 bit; Indicates bitwise XOR of the data in the brackets; {,} means merging the data on both sides of the comma in the brackets into two data packets; The encryption processing module is specifically used to obtain encrypted data using the second formula (2); The second formula (2) is: Wherein, F represents the encrypted data obtained by encrypting the comprehensive data assigned to the authentication information; L j Preset identification data indicating the receiving end of the communicating parties; Indicates circular right shift; The data authentication and decryption module is specifically used to obtain the original communication data using the third formula (3); The third formula (3) is: Wherein, D′ represents the original communication data finally obtained after data authentication and decryption of the received encrypted data; F′ represents the encrypted data received by the receiving end; represents a circular left shift; M represents the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(1) represents the first data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end; M(2) represents the second data packet in the decrypted data obtained by decrypting the encrypted data received by the receiving end.

Citation Information

Patent Citations

  • Two-way identity authentication method with integration of identity and password for mailing system

    CN102195782A

  • Electric power Internet-of-things edge terminal access method and system based on identification cryptographic algorithm

    CN114024757A