A method for verifying the regulation capability of a distributed resource cluster

Abstract

The application discloses a kind of distributed resource cluster's regulation ability trusted authentication method, comprising: the distributed resource cluster to be proved according to regulation ability certificate and cluster parameter, determine public parameter and private parameter to generate regulation ability effectiveness proof, based on regulation ability effectiveness proof, regulation ability certificate and cluster parameter, build verifiable statement, verifiable statement is submitted to verifying party, verifying party uses the public key of power distribution network certificate issuing center and zero-knowledge proof verification algorithm, to verifiable statement check, determine check result. It can be seen that the public key of power distribution network certificate issuing center is introduced to carry out asymmetric encryption check to verifiable statement, avoid user tampering with own regulation ability value without saving user information, and the zero-knowledge proof verification algorithm is used to prove that regulation ability meets the requirements, so as to prove the effectiveness of regulation ability while protecting the actual regulation ability privacy of distributed resource cluster, prevent unnecessary information leakage.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information verification, and more particularly to a method for verifying the regulation capacity of a distributed resource cluster. BACKGROUND

[0002] With the development of photovoltaic power generation technology and the construction of power market of distribution network, a large number of users participate in power transaction, including distributed power capacity, power and other transaction businesses. In the traditional P2P transaction mode, in order to ensure the effective transaction and prevent users from falsely marking the tradable assets, the users need to submit asset validity proof containing identity and asset detailed information. However, in some scenarios, the transaction access rules do not require full information, and only need to prove that the assets meet certain requirements. In this case, the disclosure of specific asset information of the user increases unnecessary information exposure, which seriously threatens the asset and identity privacy of the user.

[0003] To solve this problem, a third-party solution can be introduced. The market organizer verifies the asset information of the user, and the verifier submits a verification request to the organizer to obtain whether the user has asset information that meets the transaction requirements. However, because of the change of transaction requirements, the third party needs to keep the asset information of the user for verification. If the third party is attacked, a large amount of user information will be leaked. At the same time, because the transaction verification request depends on the running status of the third party, the abnormality of the third party will greatly affect the transaction verification.

[0004] How to prove the effectiveness of the regulation capacity while protecting the privacy of the actual regulation capacity of the distributed resource cluster to prevent unnecessary leakage of information is a problem that needs attention. SUMMARY

[0005] In view of the above problems, the present application provides a method for verifying the regulation capacity of a distributed resource cluster, which proves the effectiveness of the regulation capacity while protecting the privacy of the actual regulation capacity of the distributed resource cluster to prevent unnecessary leakage of information.

[0006] In order to achieve the above purpose, the specific scheme is as follows:

[0007] A method for verifying the regulation capacity of a distributed resource cluster is applied to a distributed resource cluster, and the distributed resource cluster includes a plurality of to-be-proved distributed resource clusters and a verifier distributed resource cluster. The method comprises the following steps:

[0008] The target to-be-proved distributed resource cluster of the distributed resource cluster determines the public parameter and the private parameter according to the pre-saved regulation capacity certificate and the cluster parameters of the target to-be-proved distributed resource cluster;

[0009] The target distributed resource cluster to be proved generates an adjustment capability validity proof according to the public parameter and the private parameter;

[0010] The target distributed resource cluster to be proved constructs a verifiable statement based on the adjustment capability validity proof, the adjustment capability certificate and the cluster parameter;

[0011] The target distributed resource cluster to be proved submits the verifiable statement to the verifier distributed resource cluster;

[0012] The verifier distributed resource cluster verifies the verifiable statement by using a public key of a power grid certificate issuing center and a zero-knowledge proof verification algorithm, and determines a verification result to prove the credibility of the adjustment capability of the target distributed resource cluster to be proved.

[0013] Optionally, the distributed resource cluster further comprises a distributed resource cluster controller;

[0014] The saving process of the adjustment capability certificate comprises:

[0015] The distributed resource cluster controller acquires an adjustment capability proof constraint circuit of the target distributed resource cluster to be proved, and the adjustment capability proof constraint circuit comprises a hash calculation circuit, a time constraint circuit and an adjustment capability numerical range constraint circuit;

[0016] The hash calculation circuit is:

[0017] C hash (ID,a,x,t invaild ,s)→x hash

[0018] Wherein, C hash is the hash calculation circuit, ID is an identity number of the target distributed resource cluster to be proved, a is a resource type code of a resource to be verified of the target distributed resource cluster to be proved, x is an actual numerical value of the adjustment capability of the target distributed resource cluster to be proved, t invaild is a signature invalidation time, s is an encrypted random number, and x hash is a combined hash value;

[0019] The time constraint circuit is:

[0020] C time (t stamp )

[0021] Wherein, t stamp is a proof generation time, and C time is the time constraint circuit;

[0022] The adjusting capacity numerical range constraint circuit is:

[0023] C attr (x, x max , x min )

[0024] wherein, C attr is the adjusting capacity numerical range constraint circuit, x max is the upper limit value of the adjusting capacity of the target distributed resource cluster to be proved, and x min is the lower limit value of the adjusting capacity of the target distributed resource cluster to be proved.

[0025] The distributed resource cluster controller tests the actual adjustable capacity of the target distributed resource cluster to be proved, so as to calculate a certificate signature according to the combined hash value and the private key of the power distribution network certificate issuing center after the target distributed resource cluster to be proved passes the actual adjustable capacity test.

[0026] The distributed resource cluster controller generates an adjusting capacity certificate according to the adjusting capacity actual value, the certificate signature, the encrypted random number and the signature invalidation time, and sends the adjusting capacity certificate to the target distributed resource cluster to be proved.

[0027] The target distributed resource cluster to be proved saves the adjusting capacity certificate.

[0028] Optionally, the calculation process of the combined hash value comprises:

[0029] The distributed resource cluster controller calculates the combined hash value by using a first formula, and the first formula is:

[0030] x hash = SHA256 (ID, a, x, t invaild , s)

[0031] wherein, SHA256 is a 256-bit secure hash algorithm.

[0032] Optionally, the distributed resource cluster controller calculates the certificate signature according to the combined hash value and the private key of the power distribution network certificate issuing center, comprising:

[0033] The distributed resource cluster controller calculates the certificate signature by using a second formula, and the second formula is:

[0034] x sign = RSA sign (x hash , PK CA )

[0035] wherein, xsign RSA is a certificate signature. sign PK is an asymmetric encryption signature algorithm. CA The private key of the power distribution network certificate issuing center.

[0036] Optionally, the target distributed resource cluster to be proved generates an adjustment capability validity proof according to the public parameter and the private parameter, including:

[0037] The target distributed resource cluster to be proved generates an adjustment capability validity proof by using a third formula, the third formula being:

[0038] ZKP prove (p, w)→pai

[0039] wherein ZKP prove is a proof generation algorithm, p is the public parameter, w is the private parameter, and pai is the adjustment capability validity proof.

[0040] Optionally, the verifiable statement includes a signature expiration time, a proof generation time, a certificate signature, the public parameter, and the adjustment capability validity proof.

[0041] The verifier distributed resource cluster verifies the verifiable statement by using the public key of the power distribution network certificate issuing center and a zero-knowledge proof verification algorithm, and determines a verification result, including:

[0042] The verifier distributed resource cluster performs a first time validity verification on the signature expiration time, and obtains a first verification result in the form of a Boolean value.

[0043] The verifier distributed resource cluster performs a second time validity verification on the proof generation time, and obtains a second verification result in the form of a Boolean value.

[0044] The verifier distributed resource cluster performs a signature validity verification on the certificate signature by using the public key of the power distribution network certificate issuing center, and obtains a third verification result in the form of a Boolean value.

[0045] The verifier distributed resource cluster performs a proof validity verification on the public parameter and the adjustment capability validity proof by using the zero-knowledge proof verification algorithm, and obtains a fourth verification result in the form of a Boolean value.

[0046] When the first verification result, the second verification result, the third verification result, and the fourth verification result are all 1, the verifier distributed resource cluster determines that the verification result is that the verifiable statement has passed the verification.

[0047] When the first verification result, the second verification result, the third verification result, and the fourth verification result are not all 1, the verification party distributed resource cluster determines that the verifiable declaration has failed the verification.

[0048] Optionally, the distributed resource cluster of the verification party performs a first time validity check on the signature expiration time to obtain a first check result in the form of a Boolean value, including:

[0049] The distributed resource cluster of the verification party uses the fourth formula to perform a first time validity check on the signature expiration time, obtaining a first check result in the form of a Boolean value. The fourth formula is:

[0050] if(t now ≤t invaild → Flag time_1

[0051] Among them, t now t represents the current time. invaild Flag is the signature expiration time. time_1 The first verification result, Flag time_1 =1 indicates that the signature expiration time has passed the first time validity check. Flag time_1 =0 indicates that the signature expiration time failed the first time validity check.

[0052] Optionally, the distributed resource cluster of the verification party performs a second verification on the time validity of the proof generation time, obtaining a second verification result in the form of a Boolean value, including:

[0053] The verification party's distributed resource cluster uses the fifth formula to perform a second verification of the time validity of the proof generation time, obtaining a second verification result in Boolean form. The fifth formula is:

[0054] if(t now -t limit ≤t stamp ≤t now → Flag time_2

[0055] Among them, t now t represents the current time. limit To prove the maximum available duration, t stamp For the proof generation time, Flag time_2 For the verification result, Flag time_2 =1 indicates that the proof generation time passed the second time validity check, Flag time_2 =0 indicates that the proof generation time has passed the second time validity check.

[0056] Optionally, the verification party distributed resource cluster verifies the signature validity of the certificate signature by using the public key of the power distribution network certificate issuing center, and obtains a third check result in the form of a Boolean value, including:

[0057] The verification party distributed resource cluster verifies the signature validity of the certificate signature by using a sixth formula, and obtains a third check result in the form of a Boolean value, the sixth formula being:

[0058] RSA verify (x sign ,VK CA )→Flag vs

[0059] wherein RSA verify is an asymmetric encryption signature verification algorithm, x sign is the certificate signature, VK CA is the public key of the power distribution network certificate issuing center, Flag vs is the third check result, Flag vs = 1 indicates that the certificate signature passes the signature validity verification, and Flag vs = 0 indicates that the certificate signature fails the signature validity verification.

[0060] Optionally, the verification party distributed resource cluster uses a zero-knowledge proof verification algorithm to perform proof validity checking on the public parameter and the adjustment capacity validity proof, and obtains a fourth check result in the form of a Boolean value, including:

[0061] The verification party distributed resource cluster uses a seventh formula to perform proof validity checking on the public parameter and the adjustment capacity validity proof, and obtains a fourth check result in the form of a Boolean value, the seventh formula being:

[0062] ZKP verify (p,π)→Flag vp

[0063] wherein ZKP verify is a zero-knowledge proof verification algorithm, p is the public parameter, π is the adjustment capacity validity proof, Flag vp is the fourth check result, Flag vp = 1 indicates that the public parameter and the adjustment capacity validity proof pass the proof validity checking, and Flag vp = 0 indicates that the public parameter and the adjustment capacity validity proof fail the proof validity checking.

[0064] By the above technical solution, the application determines the public parameter and the private parameter according to the pre-saved adjustment capability certificate and the cluster parameter of the target distributed resource cluster to be proved, generates an adjustment capability validity proof according to the public parameter and the private parameter, constructs a verifiable statement based on the adjustment capability validity proof, the adjustment capability certificate and the cluster parameter, submits the verifiable statement to the verifier distributed resource cluster, further, the verifier distributed resource cluster uses the public key of the power grid certificate issuing center and a zero-knowledge proof verification algorithm to check the verifiable statement, determines the checking result to prove the credibility of the adjustment capability of the target distributed resource cluster to be proved. As can be seen, by introducing the public key of the power grid certificate issuing center to asymmetrically encrypt and check the verifiable statement, the user can avoid tampering with the adjustment capability value without saving the user information, and the zero-knowledge proof verification algorithm is used to prove that the adjustment capability meets the specific requirements, so as to protect the actual adjustment capability privacy of the distributed resource cluster while proving the effectiveness of the adjustment capability to prevent unnecessary leakage of information. BRIEF DESCRIPTION OF DRAWINGS

[0065] Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are for purposes of illustration only and are not intended to limit the application thereto. Moreover, like reference numerals in the Figures are intended to represent the same or similar components. In the Figures:

[0066] Figure 1 A node topology diagram of each cluster in a distributed resource cluster provided by an embodiment of the application;

[0067] Figure 2 A flowchart for realizing adjustment capability credible verification of a distributed resource cluster provided by an embodiment of the application;

[0068] Figure 3 A flowchart from constructing an adjustment capability certificate to saving provided by an embodiment of the application. DETAILED DESCRIPTION

[0069] The technical solutions in the embodiments of the application will be described clearly and completely below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, not all the embodiments. Based on the embodiments in the application, all other embodiments obtained by those of ordinary skill in the art without creative labor are within the scope of protection of the application.

[0070] The scheme can be implemented based on a system with data processing capability, which can be a distributed resource cluster. Specifically, the distributed resource cluster can include a plurality of to-be-proved distributed resource clusters and a verifier distributed resource cluster.

[0071] It can be understood that the distributed resource cluster can be divided into a plurality of to-be-proved distributed resource clusters and a verifier distributed resource cluster according to the topological relationship of each node.

[0072] For example, Figure 1 , Figure 1 An IEEE 33-node example with distributed resources is shown, Figure 1 The distributed resource cluster is divided into three clusters, of which cluster 1 is a verifier distributed resource cluster, clusters 2 and 3 are to-be-proved distributed resource clusters, the to-be-verified resource is a distributed power adjustable capacity, and the resource type code is 101. The distributed power adjustable capacity of cluster 2 is 1000 kW, and the distributed power adjustable capacity of cluster 3 is 600 kW. The adjustment capacity trusted verification task requires, for example, that cluster 1 requires the remaining two to-be-verified distributed resource clusters to prove that the distributed power adjustable capacity is greater than 800 kW and less than 2000 kW.

[0073] Next, in combination with Figure 2 The adjustment capacity trusted verification method of the distributed resource cluster of the present application can include the following steps:

[0074] Step S110, the target to-be-proved distributed resource cluster of the distributed resource cluster determines the public parameter and the private parameter according to the pre-saved adjustment capacity certificate and the cluster parameters of the target to-be-proved distributed resource cluster.

[0075] The target to-be-proved distributed resource cluster can represent a to-be-proved distributed resource cluster that needs to perform an adjustment capacity trusted verification task from the distributed resource cluster.

[0076] Specifically, the pre-saved adjustment capacity certificate can include the verified adjustment capacity actual value, the certificate signature, the encrypted random number, and the signature expiration time. The cluster parameters can include the resource type code, the proof generation time, the adjustment capacity constraint parameter, and the to-be-proved distributed resource cluster identity number. Then the public parameter can be the resource type code, the signature expiration time, the proof generation time, and the adjustment capacity constraint parameter, and the private parameter can be the to-be-proved distributed resource cluster identity number, the adjustment capacity actual value, and the encrypted random number.

[0077] Step S120, the target to-be-proved distributed resource cluster generates an adjustment capacity validity proof according to the public parameter and the private parameter.

[0078] Step S130, the target distributed resource cluster to be proved constructs a verifiable statement based on the adjustment capability validity proof, the adjustment capability certificate and the cluster parameters.

[0079] The verifiable statement can include a resource type code, a combined hash value, a signature expiration time, a proof generation time, a certificate signature, the public parameters and the adjustment capability validity proof.

[0080] Specifically, the verifiable statement can represent the to-be-verified information of the target distributed resource cluster to be proved.

[0081] Step S140, the target distributed resource cluster to be proved submits the verifiable statement to the verifier distributed resource cluster.

[0082] It can be understood that since the verifier distributed resource cluster needs to verify the adjustment capability of the distributed resource cluster to be proved, the target distributed resource cluster to be proved can submit the to-be-verified information, i.e., the verifiable statement, to the verifier distributed resource cluster for verification.

[0083] Step S150, the verifier distributed resource cluster checks the verifiable statement by using the public key of the power grid certificate issuing center and a zero-knowledge proof verification algorithm, and determines a checking result to prove the credibility of the adjustment capability of the target distributed resource cluster to be proved.

[0084] Specifically, the public key of the power grid certificate issuing center can be used by the verifier distributed resource cluster to perform asymmetric encryption checking, so as to avoid tampering of the adjustment capability value by the user without saving the user information, and the zero-knowledge proof verification algorithm can verify whether the target distributed resource cluster to be proved meets the algorithm specified requirements according to the verifiable statement.

[0085] The adjustment capability trusted verification method of the distributed resource cluster provided by the embodiment can determine public parameters and private parameters according to a pre-stored adjustment capability certificate and cluster parameters of the target distributed resource cluster to be verified, generate adjustment capability validity proof according to the public parameters and the private parameters, construct a verifiable statement based on the adjustment capability validity proof, the adjustment capability certificate and the cluster parameters, submit the verifiable statement to the verifier distributed resource cluster, and further, the verifier distributed resource cluster uses the public key of the power grid certificate issuing center and a zero-knowledge proof verification algorithm to check the verifiable statement, and determines a check result to prove the credibility of the adjustment capability of the target distributed resource cluster to be verified. As can be seen, by introducing the public key of the power grid certificate issuing center to asymmetrically encrypt and check the verifiable statement, the user can avoid tampering with the adjustment capability value without saving the user information, and the zero-knowledge proof verification algorithm is used to prove that the adjustment capability meets the specific requirements, so as to protect the actual adjustment capability privacy of the distributed resource cluster while proving the effectiveness of the adjustment capability to prevent unnecessary information leakage.

[0086] In some embodiments of the present application, the distributed resource cluster mentioned in the above embodiment is further introduced. In addition to each distributed resource cluster to be verified and the verifier distributed resource cluster, the distributed resource cluster can also include a distributed resource cluster controller to control each cluster. Based on this, the saving process of the adjustment capability certificate mentioned in the above embodiment is introduced. In combination with Figure 3 , the saving process can include:

[0087] In step S210, the distributed resource cluster controller obtains the adjustment capability proof constraint circuit of the target distributed resource cluster to be verified.

[0088] Specifically, the adjustment capability proof constraint circuit can be constructed by the power grid certificate issuing center and sent to the distributed resource cluster controller by the power grid certificate issuing center.

[0089] Further, the power grid certificate issuing center can also generate a private key and a public key, and send the public key to the distributed resource cluster controller.

[0090] The adjustment capability proof constraint circuit can include a hash calculation circuit, a time constraint circuit and an adjustment capability value range constraint circuit.

[0091] The hash calculation circuit is:

[0092] C hash (ID, a, x, t invaild , s)→x hash

[0093] wherein C hash is the hash calculation circuit, ID is the identity number of the target distributed resource cluster to be proved, a is the resource type code of the resource to be verified of the target distributed resource cluster to be proved, x is the actual value of the adjustment capacity of the target distributed resource cluster to be proved, t invaild is the signature expiration time, s is the encrypted random number, x hash is the combined hash value.

[0094] wherein the combined hash value x hash is calculated by the following process:

[0095] The distributed resource cluster controller calculates the combined hash value by using a first formula.

[0096] wherein the first formula is:

[0097] x hash = SHA256 (ID, a, x, t invaild , s)

[0098] wherein SHA256 is a 256-bit secure hash algorithm.

[0099] The time constraint circuit is:

[0100] C time (t stamp )

[0101] wherein t stamp is the proof generation time, C time is the time constraint circuit.

[0102] The adjustment capacity value range constraint circuit is:

[0103] C attr (x, x max , x min )

[0104] wherein C attr is the adjustment capacity value range constraint circuit, x max is the upper limit value of the adjustment capacity of the target distributed resource cluster to be proved, x min is the lower limit value of the adjustment capacity of the target distributed resource cluster to be proved.

[0105] Step S220, the distributed resource cluster controller tests the actual adjustable capacity of the target distributed resource cluster to be proved, so as to calculate the certificate signature according to the combined hash value and the private key of the power distribution network certificate issuing center after the target distributed resource cluster to be proved passes the actual adjustable capacity test.

[0106] Specifically, the distributed resource cluster controller can calculate the certificate signature by using a second formula.

[0107] The second formula is as follows:

[0108] x sign = RSA sign (x hash , PK CA )

[0109] wherein x sign is the certificate signature, RSA sign is an asymmetric encryption signature algorithm, and PK CA is a private key of the power distribution network certificate issuing center.

[0110] In step S230, the distributed resource cluster controller generates an adjustment capability certificate according to the actual value of the adjustment capability, the certificate signature, the encrypted random number, and the signature expiration time, and sends the adjustment capability certificate to the target distributed resource cluster to be verified.

[0111] In step S240, the target distributed resource cluster to be verified saves the adjustment capability certificate.

[0112] The adjustment capability trusted verification method of the distributed resource cluster provided in the embodiment can prevent third-party information leakage by constructing an adjustment capability proof constraint circuit, calculating a certificate signature, and generating an adjustment capability certificate before performing adjustment capability trusted verification on a target distributed resource cluster to be verified, so that the target distributed resource cluster to be verified pre-saves the adjustment capability certificate.

[0113] In some embodiments of the present application, the process of generating the adjustment capability validity proof by the target distributed resource cluster to be verified according to the public parameter and the private parameter in the above step S120 is introduced, which can include:

[0114] The target distributed resource cluster to be verified generates the adjustment capability validity proof by using a third formula, and the third formula is as follows:

[0115] ZKP prove (p, w) -> pai

[0116] wherein ZKP prove is a proof generation algorithm, p is the public parameter, w is the private parameter, and pai is the adjustment capability validity proof.

[0117] Specifically, the target distributed resource cluster to be verified can input the public parameter and the private parameter in the proof generation algorithm, and output the adjustment capability validity proof.

[0118] In some embodiments of the present application, the verifiable statement mentioned in the foregoing embodiments includes the signature expiration time, the certificate generation time, the certificate signature, the public parameter, and the adjustment capability validity certificate, and the process of checking the verifiable statement by the verifier distributed resource cluster using the public key of the power distribution network certificate issuing center and the zero-knowledge proof verification algorithm to determine the checking result is introduced. The process can include:

[0119] S1, the verifier distributed resource cluster performs a first time validity check on the signature expiration time to obtain a first checking result in the form of a numerical Boolean value.

[0120] Specifically, the verifier distributed resource cluster can perform a first time validity check on the signature expiration time using a fourth formula to obtain a first checking result in the form of a numerical Boolean value.

[0121] The fourth formula is:

[0122] if(t now ≤t invaild )→Flag time_1

[0123] Where t now is the current time, t invaild is the signature expiration time, Flag time_1 is the first checking result, Flag time_1 = 1 indicates that the signature expiration time passes the first time validity check, and Flag time_1 = 0 indicates that the signature expiration time fails the first time validity check.

[0124] S2, the verifier distributed resource cluster performs a second time validity check on the certificate generation time to obtain a second checking result in the form of a numerical Boolean value.

[0125] Specifically, the verifier distributed resource cluster can perform a second time validity check on the certificate generation time using a fifth formula to obtain a second checking result in the form of a numerical Boolean value.

[0126] The fifth formula is:

[0127] if(t now -t limit ≤t stamp ≤t now )→Flag time_2

[0128] Where t now is the current time, t limit is the maximum available duration of the certificate, and tstamp For the proof generation time, Flag time_2 For the verification result, Flag time_2 =1 indicates that the proof generation time passed the second time validity check, Flag time_2 =0 indicates that the proof generation time has passed the second time validity check.

[0129] S3. The verification distributed resource cluster uses the public key of the power distribution network certificate issuance center to verify the signature validity of the certificate signature, and obtains a third verification result in the form of a Boolean value.

[0130] Specifically, the verification party's distributed resource cluster uses the sixth formula to verify the signature validity of the certificate signature, and obtains the third verification result in the form of a Boolean value.

[0131] The sixth formula is as follows:

[0132] RSA verify (x sign VK CA → Flag vs

[0133] Among them, RSA verify For asymmetric cryptographic signature verification algorithms, x sign VK signs the certificate. CA Flag is the public key for the distribution network certificate issuance center. vs For the third verification result, Flag vs =1 indicates that the certificate signature has passed the signature validity verification. Flag vs =0 indicates that the certificate signature failed the signature validity verification.

[0134] S4. The distributed resource cluster of the verification party uses a zero-knowledge proof verification algorithm to verify the validity of the proof of the public parameters and the validity of the adjustment capability, and obtains a fourth verification result in the form of a Boolean value.

[0135] Specifically, the verification distributed resource cluster can use the seventh formula to verify the validity of the public parameters and the proof of the adjustment capability, and obtain the fourth verification result in the form of a Boolean value.

[0136] The seventh formula is as follows:

[0137] ZKP verify (p,π)→Flag vp

[0138] Among them, ZKP verifyThe zero-knowledge proof verification algorithm, p is the public parameter, π is the adjustment capability validity proof, Flag vp The fourth check result, Flag vp = 1 indicates that the public parameter and the adjustment capability validity proof pass the proof validity check, Flag vp = 0 indicates that the public parameter and the adjustment capability validity proof do not pass the proof validity check.

[0139] S5, the verifier distributed resource cluster When the first check result, the second check result, the third check result and the fourth check result are all 1, it is determined that the check result is that the verifiable claim has passed the check.

[0140] It can be understood that when all verifiable claims pass the time validity first check, the time validity second check, the signature validity verification and the proof validity check, it can be determined that the verifiable claim of the target to be proved distributed resource cluster has passed the check, thereby proving that the adjustment capability of the target to be proved distributed resource cluster is reliable.

[0141] S6, the verifier distributed resource cluster When the first check result, the second check result, the third check result and the fourth check result are not all 1, it is determined that the check result is that the verifiable claim does not pass the check.

[0142] It can be understood that if all verifiable claims fail at least one check in the process of time validity first check, time validity second check, signature validity verification and proof validity check, it indicates that the verifiable claim of the target to be proved distributed resource cluster has a privacy leakage risk, thereby proving that the adjustment capability of the target to be proved distributed resource cluster is unreliable.

[0143] Next, the feasibility of the distributed resource cluster adjustment capability reliable verification method of the present application is verified through the following verification scenarios.

[0144] Scenario one: the distributed resource cluster 2 fully meets the verification requirements;

[0145] Scenario two: the adjustable capacity of the distributed resource cluster 3 does not meet the verification requirements;

[0146] Scenario three: the attacker forges a power grid certificate signing center signature to submit a fake proof;

[0147] Scenario four: the attacker steals the third party invalid proof to submit verification.

[0148] For the above scenarios, verification is carried out respectively, and the results are shown in the following table.

[0149]

[0150] From the above table, for the scenario one that fully meets the verification requirements, the verifier can verify the verifiable statement, and the following conclusions can be obtained:

[0151] a) The distributed power adjustable capacity of cluster 2 has been authenticated by the power distribution network certificate issuing center;

[0152] b) The signature and the generated certificate of the distributed power adjustable capacity of cluster 2 are within the effective time;

[0153] c) The distributed power adjustable capacity of cluster 2 is greater than 800 kW and less than 2000 kW.

[0154] Based on the above conclusions, cluster 1 can complete the next transaction with cluster 2. At the same time, for scenario two, since the adjustable capacity of cluster 3 does not meet the set conditions, it cannot generate an adjustable capacity validity certificate, nor can it submit a verifiable statement to cluster 1, so it cannot participate in the subsequent transaction process; for scenario three, the attacker's forged signature cannot be verified by the public key of the verifier, and the verification fails; for scenario four, since the certificate has exceeded the authentication time, the verification fails.

[0155] The results show that the proposed method can successfully verify the range of the distributed power adjustable capacity of the cluster without revealing the specific adjustable capacity of the distributed power cluster, effectively reducing unnecessary information leakage, and effectively identifying non-compliant certificates to prevent verification attacks.

[0156] Finally, it should be noted that in this paper, relationship terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between the entities or operations. Moreover, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or device. Without more limitations, the element defined by the statement "including a" does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0157] The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same and similar parts refer to each other.

[0158] The foregoing description of the disclosed embodiments enables a person skilled in the art to make or use the application. Modifications of these embodiments will occur to persons of skill in the art, and that the generic principles defined herein can be applied to other embodiments without departing from the spirit or scope of the application. Therefore, the present application is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for verifying the regulation capability of a distributed resource cluster, characterized in that, The application is applied to a distributed resource cluster, and the distributed resource cluster includes a plurality of to-be-proved distributed resource clusters and a verifier distributed resource cluster; The method comprises: The target to-be-proved distributed resource cluster of the distributed resource cluster determines public parameters and private parameters according to a pre-stored adjustment capability certificate and cluster parameters of the target to-be-proved distributed resource cluster; The target to-be-proved distributed resource cluster generates adjustment capability validity proof according to the public parameters and the private parameters; The target to-be-proved distributed resource cluster constructs a verifiable statement based on the adjustment capability validity proof, the adjustment capability certificate and the cluster parameters; The target to-be-proved distributed resource cluster submits the verifiable statement to the verifier distributed resource cluster; The verifier distributed resource cluster verifies the verifiable statement by using a public key of a power grid certificate issuing center and a zero-knowledge proof verification algorithm, determines a verification result, and proves the credibility of the adjustment capability of the target to-be-proved distributed resource cluster; The distributed resource cluster further includes a distributed resource cluster controller; The saving process of the adjustment capability certificate comprises: The distributed resource cluster controller acquires an adjustment capability proof constraint circuit of the target to-be-proved distributed resource cluster, and the adjustment capability proof constraint circuit includes a hash calculation circuit, a time constraint circuit and an adjustment capability numerical range constraint circuit; The hash calculation circuit is: ； wherein, is the identity number of the target distributed resource cluster to be proved, is the identity number of the target distributed resource cluster to be proved, is the resource type code of the resource to be verified of the target distributed resource cluster to be proved, is the actual value of the adjustment capacity of the target distributed resource cluster to be proved, is the signature expiration time, is the encrypted random number, is the combined hash value; The time constraint circuit is: ； wherein, to prove the time of generation, a time constraint circuit; The adjustment capability numerical range constraint circuit is: ； wherein, the adjustment capability numerical range constraint circuit, the upper limit value of the adjustment capability of the target distributed resource cluster to be proved, the lower limit value of the adjustment capability of the target distributed resource cluster to be proved; The distributed resource cluster controller tests the actual adjustable capability of the target to-be-proved distributed resource cluster, calculates a certificate signature according to the combined hash value and a private key of the power grid certificate issuing center after the target to-be-proved distributed resource cluster passes the actual adjustable capability test; The distributed resource cluster controller generates an adjustment capability certificate according to the actual numerical value of the adjustment capability, the certificate signature, the encrypted random number and the signature invalidation time, and sends the adjustment capability certificate to the target to-be-proved distributed resource cluster; The target to-be-proved distributed resource cluster saves the adjustment capability certificate.

2. The method of claim 1, wherein, The calculation process of the combined hash value comprises: The distributed resource cluster controller calculates the combined hash value by using a first formula, and the first formula is: ； wherein, SHA-256 is a 256-bit secure hash algorithm.

3. The method of claim 1, wherein, The distributed resource cluster controller calculates a certificate signature according to the combined hash value and a private key of the power grid certificate issuing center, and the calculation process comprises: The distributed resource cluster controller calculates a certificate signature by using a second formula, and the second formula is: ； wherein, is a certificate signature, is a non-symmetric encryption signature algorithm, is a private key of the power distribution network certificate issuing center.

4. The method of claim 1, wherein, The target to-be-proved distributed resource cluster generates adjustment capability validity proof according to the public parameters and the private parameters, and the generation process comprises: The target to-be-proved distributed resource cluster generates adjustment capability validity proof by using a third formula, and the third formula is: ； wherein, to prove generation algorithm, for the public parameter, for the private parameter, for the adjustment capability validity proof.

5. The method of claim 1, wherein, The verifiable statement includes a signature invalidation time, a proof generation time, a certificate signature, the public parameters and the adjustment capability validity proof; The verification party distributed resource cluster utilizes the public key of the power distribution network certificate issuing center and a zero-knowledge proof verification algorithm to check the verifiable statement, determines a checking result, and includes: The verification party distributed resource cluster performs a first time validity check on the signature expiration time to obtain a first checking result in the form of a Boolean value; The verification party distributed resource cluster performs a second time validity check on the proof generation time to obtain a second checking result in the form of a Boolean value; The verification party distributed resource cluster performs signature validity verification on the certificate signature by using the public key of the power distribution network certificate issuing center to obtain a third checking result in the form of a Boolean value; The verification party distributed resource cluster performs proof validity check on the public parameter and the adjustment capability validity proof by using a zero-knowledge proof verification algorithm to obtain a fourth checking result in the form of a Boolean value; When the first checking result, the second checking result, the third checking result, and the fourth checking result are all 1, the verification party distributed resource cluster determines that the checking result is that the verifiable statement has passed the check. When the first checking result, the second checking result, the third checking result, and the fourth checking result are not all 1, the verification party distributed resource cluster determines that the checking result is that the verifiable statement has not passed the check.

6. The method of claim 5, wherein, The verification party distributed resource cluster performs a first time validity check on the signature expiration time to obtain a first checking result in the form of a Boolean value, and includes: The verification party distributed resource cluster performs a first time validity check on the signature expiration time by using a fourth formula to obtain a first checking result in the form of a Boolean value, and the fourth formula is: ； wherein, is the current time, is the signature expiration time, is the first check result, = 1 indicates that the signature expiration time passes the time validity first check, = 0 indicates that the signature expiration time does not pass the time validity first check.

7. The method of claim 5, wherein, The verification party distributed resource cluster performs a second time validity check on the proof generation time to obtain a second checking result in the form of a Boolean value, and includes: The verification party distributed resource cluster performs a second time validity check on the proof generation time by using a fifth formula to obtain a second checking result in the form of a Boolean value, and the fifth formula is: ； wherein, is the current time, is the maximum available duration of proof, is the proof generation time, is the first check result, = 1 indicates that the proof generation time passes the second time validity check, = 0 indicates that the proof generation time passes the second time validity check.

8. The method of claim 5, wherein, The verification party distributed resource cluster performs signature validity verification on the certificate signature by using the public key of the power distribution network certificate issuing center to obtain a third checking result in the form of a Boolean value, and includes: The verification party distributed resource cluster performs signature validity verification on the certificate signature by using a sixth formula to obtain a third checking result in the form of a Boolean value, and the sixth formula is: ； wherein, is an asymmetric encryption signature verification algorithm, is the certificate signature, is a public key of a distribution network certificate issuing center, is a third check result, = 1 indicates that the certificate signature passes the signature validity verification, = 0 indicates that the certificate signature fails the signature validity verification.

9. The method according to any one of claims 5-8, characterized in that, The verification party distributed resource cluster performs proof validity check on the public parameter and the adjustment capability validity proof by using a zero-knowledge proof verification algorithm to obtain a fourth checking result in the form of a Boolean value, and includes: The verification party distributed resource cluster performs proof validity check on the public parameter and the adjustment capability validity proof by using a seventh formula to obtain a fourth checking result in the form of a Boolean value, and the seventh formula is: ； wherein, is a zero-knowledge proof verification algorithm, is the public parameter, is the adjustment capability validity proof, is a fourth check result, = 1 indicates that the public parameter and the adjustment capability validity proof pass the proof validity check, = 0 indicates that the public parameter and the adjustment capability validity proof do not pass the proof validity check.

Images