Design method and system for wireless secure encryption communication of virtual power plants

Abstract

The present invention relates to the field of virtual power plant security communication technology, and provides a method and system for designing wireless secure encrypted communication for a virtual power plant, wherein the method includes: setting virtual power plant security communication hardware and software, including a built-in trusted CPU, an operating system, and a wireless communication software program; designing a multi-modal CPU operation mechanism based on the built-in trusted CPU; designing a wireless secure encrypted communication method for virtual power plants to achieve secure communication with other devices; and encrypting the wireless secure encrypted communication to achieve trusted and secure wireless communication interaction for virtual power plants. According to the solution of the present invention, the present invention genetically improves the security of the core equipment of the virtual power plant, provides efficient cryptographic computing services for communication and business computing, realizes high reliability, low latency and security of wireless communication through 5G encrypted communication, and realizes the security of power transactions through blockchain technology.

Description

Technical Field

[0001] The present invention relates to the field of virtual power plant security communications, and in particular to a method and system for designing wireless security encrypted communications for a virtual power plant. Background Art

[0002] As the reform of the power system continues to deepen, the construction of a new power system emphasizes new energy as the main body, improving the consumption of clean energy such as photovoltaics and wind power. Energy transformation has given rise to energy storage needs and a more digital and intelligent power system. As an energy digital platform that coordinates distributed resources to participate in the power trading market and demand response, virtual power plants will play an important role in the current period when industrial policies and market demands are constantly increasing.

[0003] However, there are still some deep-seated problems in the development of virtual power plants. The construction of virtual power plants faces challenges in network security and privacy protection. Virtual power plants use intelligent technology to achieve intelligent management of decentralized energy equipment and loads, but this also makes the system vulnerable to network attacks, threatening the stability and security of energy supply. In addition, virtual power plants involve a large amount of energy data and user privacy information. How to ensure data security and privacy protection is also an urgent problem to be solved. Virtual power plants aggregate a large amount of user information, and they also have some Internet genes, which involve the personal and commercial privacy of users. There may be information leakage, abuse or unauthorized access in data collection, transmission and storage. If it is obtained, tampered with or destroyed by malicious attackers, and the equipment is invaded, manipulated or maliciously interfered, the control of industrial loads on the user side will cause major production safety accidents. Summary of the invention

[0004] The purpose of the present invention is to solve at least one technical problem in the background technology and to provide a method and system for designing wireless secure encrypted communications for a virtual power plant.

[0005] To achieve the above objectives, the present invention provides a method for designing wireless secure encrypted communication for a virtual power plant, comprising:

[0006] Set up virtual power plant secure communication hardware and software, including built-in trusted CPU, operating system and wireless communication software program;

[0007] Design a multi-mode CPU operation mechanism based on the built-in trusted CPU;

[0008] Design a wireless secure encryption communication method for the virtual power plant to achieve secure communication with other devices;

[0009] Encryption design is performed on wireless secure encrypted communications to achieve trusted and secure wireless communication interaction of virtual power plants.

[0010] According to one aspect of the present invention, the multi-modal CPU operation mechanism is designed based on the built-in trusted CPU, including:

[0011] A CPU core in the built-in trusted CPU is opened up as an independent secure trusted core, which only provides cryptographic computing services;

[0012] Design an independent memory area, which contains the user's authentication information and secret key. This independent memory area can only be accessed by the secure and trusted core, and cannot be accessed by other CPU cores.

[0013] The other CPU cores are computing cores, which interact through the trusted agent software module in the wireless communication software program and the trusted verification module in the security trusted core, and implement data encryption and signature authentication calculations through cryptographic services.

[0014] According to one aspect of the present invention, the wireless secure encrypted communication method for designing a virtual power plant to achieve secure communication with other devices is to design a 5G wireless secure encrypted communication integrating RedCap, including:

[0015] Design a 5G wireless communication plug-in that integrates a 5G wireless communication module;

[0016] Design an independent hardware encryption and decryption area on the 5G wireless communication plug-in and install an encryption and decryption module to encrypt and decrypt data sent through the 5G wireless communication module;

[0017] Synchronize 5G wireless communication data between a 5G wireless communication plug-in having a 5G wireless communication module and each computing core via a Gigabit Ethernet bus;

[0018] The computing core transmits the data to be sent to the 5G wireless communication plug-in via the Gigabit Ethernet bus;

[0019] The computing core obtains data from the 5G wireless communication plug-in through the Gigabit Ethernet bus.

[0020] According to one aspect of the present invention, the encryption design of wireless secure encrypted communication to achieve reliable and secure wireless communication interaction of virtual power plants is: encryption design based on a channel time-varying key to achieve reliable and secure wireless encrypted communication interaction of virtual power plants, including:

[0021] The communicating parties a and b first perform channel detection. The channel detection process is bidirectional and obtains the measurement results x respectively. a , x b ;

[0022] The measurement result x a and x b Convert to binary and get the result

[0023] Identify the mismatched information between a and b, and a and b obtain the matching information of both parties and

[0024] Based on information and Using signal amplification technology, the keys A and B of parties a and b are obtained;

[0025] a and b use their secret keys A and B to encrypt and sign;

[0026] Among them, a and b represent the virtual power plant and other devices communicating with the virtual power plant, respectively.

[0027] To achieve the above objectives, the present invention also provides a virtual power plant wireless security encryption communication design system, comprising:

[0028] The hardware and software setting module sets up the virtual power plant security communication hardware and software, including the built-in trusted CPU, operating system and wireless communication software program;

[0029] CPU operation mechanism design module, based on the built-in trusted CPU, designs a multi-modal CPU operation mechanism;

[0030] Wireless secure encrypted communication method design module, designing wireless secure encrypted communication methods for virtual power plants to achieve secure communication with other devices;

[0031] The encryption design module performs encryption design on wireless secure encrypted communications to achieve trusted and secure wireless communication interaction of virtual power plants.

[0032] To achieve the above objectives, the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the virtual power plant wireless secure encrypted communication design method as described above is implemented.

[0033] To achieve the above objectives, the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the virtual power plant wireless secure encrypted communication design method as described above is implemented.

[0034] According to the solution of the present invention, the present invention constructs a CPU built-in trusted and secure base (built-in trusted CPU), designs a multi-modal CPU operation mechanism of trusted core and computing core, realizes a protection mechanism of efficient computing + reliable protection dual system, realizes active immunity to unknown attacks, and provides high-intensity cryptographic computing services for upper-layer storage, communication and business operations; integrates RedCap 5G communication technology enables data collection and forwarding of virtual power plants, remote operations such as group dispatching and group control of virtual power plants based on 5G communication, and rapid load adjustment of virtual power plants; designs high-security technologies such as signature verification and authentication protection based on wireless communication, and protects the confidentiality and integrity of data communication through encryption and authentication technology, prevents data from being tampered with or stolen, and ensures the essential requirement of high security of virtual power plant data interaction; designs high-reliability technologies such as low-latency and anti-interference, reduces communication delays and improves anti-interference capabilities by optimizing protocol structures and algorithms, ensures the accuracy and stability of data transmission, and further ensures the stability and reliability of network security performance of virtual power plants; designs a distributed trusted data chain for virtual power plant wireless networks based on blockchain technology, designs key node chain-up strategies, trusted authentication between heterogeneous chains, master block election and distributed consensus protocols, and realizes efficient identity authentication and dynamic management.

[0035] According to the solution of the present invention, the present invention genetically improves the security of the core equipment of the virtual power plant, provides efficient cryptographic computing services for communications and business calculations, realizes high reliability, low latency and security of wireless communications through 5G encrypted communications, and realizes the security of electricity transactions through blockchain technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 A flowchart schematically showing a method for designing wireless secure encrypted communication for a virtual power plant according to an embodiment of the present invention;

[0037] Figure 2 A diagram schematically showing a trusted security base architecture of a virtual power plant according to an embodiment of the present invention;

[0038] Figure 3 Schematically showing a parallel multi-modal CPU operation mechanism diagram according to an embodiment of the present invention;

[0039] Figure 4 A diagram schematically showing a data processing mechanism according to an embodiment of the present invention;

[0040] Figure 5 The following schematically shows a flow chart for constructing a distributed trusted data chain according to an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The content of the present invention will now be discussed with reference to exemplary embodiments. It should be understood that the embodiments discussed are only to enable those skilled in the art to better understand and thus implement the content of the present invention, rather than implying any limitation on the scope of the present invention.

[0042] As used herein, the term “including” and variations thereof are to be interpreted as open-ended terms meaning “including, but not limited to.” The term “based on” is to be interpreted as “based, at least in part, on.” The terms “one embodiment” and “an embodiment” are to be interpreted as “at least one embodiment.”

[0043] Figure 1 The flowchart schematically shows a method for designing wireless secure encrypted communication for a virtual power plant according to an embodiment of the present invention. Figure 1 As shown, in this embodiment, the design method of wireless secure encrypted communication of a virtual power plant includes:

[0044] a. Set up virtual power plant secure communication hardware and software (trusted security base), including built-in trusted CPU, operating system and wireless communication software program;

[0045] b. Design a multi-modal CPU operation mechanism based on the built-in trusted CPU;

[0046] c. Design a wireless secure encryption communication method for the virtual power plant to achieve secure communication with other devices;

[0047] d. Perform encryption design on wireless secure encrypted communication to realize reliable and secure wireless communication interaction of virtual power plants.

[0048] According to an embodiment of the present invention, in the above step a, the soft chain from the hardware level, the operating system level and the communication application software level realizes secure and reliable communication, including the following steps:

[0049] Designed with a built-in trusted CPU to provide hardware trusted function support for virtual power plants and edge IoT gateway devices;

[0050] Design the operating system, which is responsible for interacting with the CPU to provide security and computing services for upper-layer communication applications;

[0051] Design wireless communication software programs, which realize secure communication interaction between virtual power plants and edge IoT gateway devices through encryption and signature authentication.

[0052] Based on the above scheme, if Figure 2 As shown, for example:

[0053] At the built-in trusted security level, develop a built-in trusted security chip based on an autonomous and controllable CPU; establish a trusted computing platform by introducing TPM (Trusted Platform Module) as the root of trust. After the hardware is powered on, trusted computing gradually spreads trust through the hardware root of trust, ultimately forming a trusted system and a trusted network.

[0054] At the operating system level, a trusted software module is designed to call cryptographic services to measure upper-level applications.

[0055] At the application level, a communication verification mechanism based on identity authentication is designed to achieve trusted verification of user identities.

[0056] Further, Figure 3 Schematically shows a parallel multi-mode CPU operation mechanism diagram according to an embodiment of the present invention. Figure 3 As shown, according to an embodiment of the present invention, in the above step b, based on the built-in trusted CPU, a multi-modal CPU operation mechanism is designed, including:

[0057] A CPU core in the built-in trusted CPU is opened up as an independent secure trusted core, which only provides cryptographic computing services;

[0058] Design an independent memory area, which contains the user's authentication information and secret key. This independent memory area can only be accessed by the secure and trusted core, and cannot be accessed by other CPU cores.

[0059] The other CPU cores are computing cores, which interact through the trusted agent software module in the wireless communication software program and the trusted verification module in the security trusted core, and implement data encryption and signature authentication calculations through cryptographic services.

[0060] In this embodiment, a regional isolation mechanism is constructed from the hardware level, and two CPU working modes are designed, namely, a trusted execution environment (TEE) and a TPCM environment (protection component).

[0061] In the entire CPU, the working mode of some cores is set to be a secure and trusted core, and the working mode of some cores is set to be a high-efficiency computing core (i.e., the computing core mentioned above);

[0062] Develop a dedicated secure communication protocol for communication between the trusted security core and the high-efficiency computing core.

[0063] Further, according to an embodiment of the present invention, in the above step c, the wireless secure encrypted communication method for designing the virtual power plant to achieve secure communication with other devices is to design 5G wireless secure encrypted communication integrating RedCap, including:

[0064] Design a 5G wireless communication plug-in that integrates a 5G wireless communication module;

[0065] Design an independent hardware encryption and decryption area on the 5G wireless communication plug-in and install an encryption and decryption module to encrypt and decrypt data sent through the 5G wireless communication module;

[0066] Synchronize 5G wireless communication data between a 5G wireless communication plug-in having a 5G wireless communication module and each computing core via a Gigabit Ethernet bus;

[0067] The computing core transmits the data to be sent to the 5G wireless communication plug-in via the Gigabit Ethernet bus;

[0068] The computing core obtains data from the 5G wireless communication plug-in through the Gigabit Ethernet bus.

[0069] Specifically, Figure 4 As shown, for example:

[0070] Step 1: Devices (power generation equipment, energy storage systems, charging equipment, etc.) collect access device data through southbound protocols;

[0071] Step 2: The data collected by the device is published to the MQTT bus;

[0072] 1) The data center subscribes to the southbound access device data;

[0073] 2) The southbound protocol publishes the collected data to the MQTT bus.

[0074] Step 3: Data received by the data center storage bus is published to the northbound protocol

[0075] 1) The northbound protocol subscribes to the required data from the data center;

[0076] 2) After receiving the data published by the southbound protocol, the data center publishes the data to the northbound protocol.

[0077] Step 4: The northbound protocol transmits the received data center data to the virtual power plant.

[0078] Further, according to an embodiment of the present invention, in the above step d, the wireless secure encrypted communication is encrypted and designed to realize the trusted and secure wireless communication interaction of the virtual power plant: the encryption design is performed based on the time-varying key of the channel to realize the trusted and secure wireless encrypted communication interaction of the virtual power plant, including:

[0079] The communicating parties a and b first perform channel detection. The channel detection process is bidirectional and obtains the measurement results x respectively. a , x b ;

[0080] The measurement result x a and x bConvert to binary and get the result

[0081] Identify the mismatched information between a and b, and a and b obtain the matching information of both parties and

[0082] Based on information and Using signal amplification technology, the keys A and B of parties a and b are obtained;

[0083] a and b use their secret keys A and B to encrypt and sign;

[0084] Among them, a and b represent the virtual power plant and other devices communicating with the virtual power plant, respectively.

[0085] Based on the above scheme, taking SM2 encryption as an example, the process is as follows:

[0086] SM2 uses a block cipher. First, the application layer plaintext is cut into multiple segments of 16 bytes with a length of 128 bits. If the last segment is less than 16 bytes, it is necessary to fill this segment with Padding. Then, each segment is encrypted separately, and finally, each encrypted segment is pieced together to form the final ciphertext. There are three modes of Padding. In this example, the PKCS7 method is used, that is, if the last segment is less than 16 bytes, it is filled with 0 to 16 bytes. Before encrypting the data, the data sender needs to randomly generate an initial vector (IV), a 128-bit 16-byte random number, in order to make the encryption more secure and reliable. When encrypting the first plaintext block, the initial vector is first XORed with plaintext block 1, and then encrypted with the key to obtain ciphertext block 1. At the same time, ciphertext block 1 is used as the encryption vector of the next plaintext block. This is repeated, and finally all ciphertext blocks are pieced together to obtain the final ciphertext.

[0087] In addition, based on the above scheme of the present invention and the design method of wireless secure encrypted communication of virtual power plants, the present invention also includes designing a distributed trusted data chain of a virtual power plant wireless network based on blockchain technology, generating a master node through an election mechanism based on reputation, and managing other nodes to conduct trusted transactions. Figure 5 As shown, the specific methods include:

[0088] Distribute digital certificates, authenticate nodes through hash calculations, and join trusted data chains;

[0089] The master node is generated through a reputation-based election mechanism, and together with other nodes, it forms a trusted transaction system;

[0090] The master node can provide support for subsequent data protection, real-time sharing, and integrity authentication, effectively improving the real-time nature of data verification. If transaction data is maliciously tampered with, the user can be prompted that the data is no longer credible and the user can discard the data.

[0091] According to the above scheme of the present invention, the present invention constructs a CPU with built-in trusted security base (built-in trusted CPU), designs a multi-modal CPU operation mechanism of trusted core and computing core, realizes the protection mechanism of efficient computing + reliable protection dual system, realizes active immunity to unknown attacks, and provides high-intensity cryptographic computing services for upper-layer storage, communication and business operations; integrates RedCap 5G communication technology to realize virtual power plant data collection and forwarding, realizes remote operations such as virtual power plant group adjustment and group control based on 5G communication, and realizes rapid adjustment of virtual power plant load; designs high-security technologies such as signature verification and authentication protection based on wireless communication, protects confidentiality and integrity in the data communication process through encryption and authentication technology, prevents data from being tampered with or stolen, and ensures the essential requirements of high security of virtual power plant data interaction; designs a virtual power plant wireless network distributed trusted data chain based on blockchain technology, designs key node chain-up strategy, trusted authentication between heterogeneous chains, main block election and distributed consensus protocol, and realizes efficient identity authentication and dynamic management.

[0092] According to the solution of the present invention, the present invention genetically improves the security of the core equipment of the virtual power plant, provides efficient cryptographic computing services for communications and business calculations, realizes high reliability, low latency and security of wireless communications through 5G encrypted communications, and realizes the security of electricity transactions through blockchain technology.

[0093] Furthermore, to achieve the above-mentioned purpose, the present invention also provides a virtual power plant wireless security encryption communication design system, comprising:

[0094] The hardware and software setting module sets up the virtual power plant security communication hardware and software, including the built-in trusted CPU, operating system and wireless communication software program;

[0095] CPU operation mechanism design module, based on the built-in trusted CPU, designs a multi-modal CPU operation mechanism;

[0096] Wireless secure encrypted communication method design module, designing wireless secure encrypted communication methods for virtual power plants to achieve secure communication with other devices;

[0097] The encryption design module performs encryption design on wireless secure encrypted communications to achieve trusted and secure wireless communication interaction of virtual power plants.

[0098] According to an embodiment of the present invention, in the above-mentioned software and hardware setting module, the soft chain from the hardware level, the operating system level and the communication application software level realizes secure and reliable communication, including the following steps:

[0099] Designed with a built-in trusted CPU to provide hardware trusted function support for virtual power plants and edge IoT gateway devices;

[0100] Design the operating system, which is responsible for interacting with the CPU to provide security and computing services for upper-layer communication applications;

[0101] Design wireless communication software programs, which realize secure communication interaction between virtual power plants and edge IoT gateway devices through encryption and signature authentication.

[0102] Based on the above scheme, if Figure 2 As shown, for example:

[0103] Develop a built-in trusted security chip based on an independent and controllable CPU;

[0104] By introducing TPM (Trusted Platform Module) as the root of trust, a trusted computing platform is established. After the hardware is powered on, trusted computing gradually spreads trust through the hardware root of trust, eventually forming a trusted system and a trusted network.

[0105] According to the national secret algorithm standards and the password classification standards, the national secret algorithm was studied and the symmetric algorithms SM1, SM4, Zu Chongzhi cryptographic algorithm, asymmetric algorithms SM2, SM9 and SM3 hash algorithm were developed respectively;

[0106] Based on trusted security chips, the virtual power plant management and control system hardware and edge Internet of Things gateway devices are developed respectively.

[0107] Furthermore, combined with Figure 3 As shown, according to an embodiment of the present invention, in the above-mentioned CPU operation mechanism design module, based on the built-in trusted CPU, a multi-modal CPU operation mechanism is designed, including:

[0108] A CPU core in the built-in trusted CPU is opened up as an independent secure trusted core, which only provides cryptographic computing services;

[0109] Design an independent memory area, which contains the user's authentication information and secret key. This independent memory area can only be accessed by the secure and trusted core, and cannot be accessed by other CPU cores.

[0110] The other CPU cores are computing cores, which interact through the trusted agent software module in the wireless communication software program and the trusted verification module in the security trusted core, and implement data encryption and signature authentication calculations through cryptographic services.

[0111] In this embodiment, a regional isolation mechanism is constructed from the hardware level, and two CPU working modes are designed, namely, a trusted execution environment (TEE) and a TPCM environment (protection component).

[0112] In the entire CPU, the working mode of some cores is set to be a secure and trusted core, and the working mode of some cores is set to be a high-efficiency computing core (i.e., the computing core mentioned above);

[0113] Develop a dedicated secure communication protocol for communication between the trusted security core and the high-efficiency computing core.

[0114] Further, according to an embodiment of the present invention, in the above-mentioned wireless secure encrypted communication mode design module, the wireless secure encrypted communication mode for designing the virtual power plant and other devices to achieve secure communication is to design 5G wireless secure encrypted communication integrating RedCap, including:

[0115] Design a 5G wireless communication plug-in that integrates a 5G wireless communication module;

[0116] Design an independent hardware encryption and decryption area on the 5G wireless communication plug-in and install an encryption and decryption module to encrypt and decrypt data sent through the 5G wireless communication module;

[0117] Synchronize 5G wireless communication data between a 5G wireless communication plug-in having a 5G wireless communication module and each computing core via a Gigabit Ethernet bus;

[0118] The computing core transmits the data to be sent to the 5G wireless communication plug-in via the Gigabit Ethernet bus;

[0119] The computing core obtains data from the 5G wireless communication plug-in through the Gigabit Ethernet bus.

[0120] Specifically, Figure 4 As shown, for example:

[0121] Step 1: Devices (power generation equipment, energy storage systems, charging equipment, etc.) collect access device data through southbound protocols;

[0122] Step 2: The data collected by the device is published to the MQTT bus;

[0123] 1) The data center subscribes to the southbound access device data;

[0124] 2) The southbound protocol publishes the collected data to the MQTT bus.

[0125] Step 3: Data received by the data center storage bus is published to the northbound protocol

[0126] 1) The northbound protocol subscribes to the required data from the data center;

[0127] 2) After receiving the data published by the southbound protocol, the data center publishes the data to the northbound protocol.

[0128] Step 4: The northbound protocol transmits the received data center data to the virtual power plant.

[0129] Further, according to an embodiment of the present invention, in the above encryption design module, the wireless secure encrypted communication is encrypted and designed to realize the trusted and secure wireless communication interaction of the virtual power plant: the encryption design is performed based on the time-varying key of the channel to realize the trusted and secure wireless encrypted communication interaction of the virtual power plant, including:

[0130] The communicating parties a and b first perform channel detection. The channel detection process is bidirectional and obtains the measurement results x respectively. a , x b ;

[0131] The measurement result x a and x b Convert to binary and get the result

[0132] Identify the mismatched information between a and b, and a and b obtain the matching information of both parties and

[0133] Based on information and Using signal amplification technology, the keys A and B of parties a and b are obtained;

[0134] a and b use their secret keys A and B to encrypt and sign;

[0135] Among them, a and b represent the virtual power plant and other devices communicating with the virtual power plant, respectively.

[0136] Based on the above scheme, taking SM2 encryption as an example, the process is as follows:

[0137] SM2 uses a block cipher. First, the application layer plaintext is cut into multiple segments of 16 bytes with a length of 128 bits. If the last segment is less than 16 bytes, it is necessary to fill this segment with Padding. Then, each segment is encrypted separately, and finally, each encrypted segment is pieced together to form the final ciphertext. There are three modes of Padding. In this example, the PKCS7 method is used, that is, if the last segment is less than 16 bytes, it is filled with 0 to 16 bytes. Before encrypting the data, the data sender needs to randomly generate an initial vector (IV), a 128-bit 16-byte random number, in order to make the encryption more secure and reliable. When encrypting the first plaintext block, the initial vector is first XORed with plaintext block 1, and then encrypted with the key to obtain ciphertext block 1. At the same time, ciphertext block 1 is used as the encryption vector of the next plaintext block. This is repeated, and finally all ciphertext blocks are pieced together to obtain the final ciphertext.

[0138] In addition, based on the above scheme of the present invention, the present invention also includes designing a distributed trusted data chain of a virtual power plant wireless network based on blockchain technology, generating a master node through an election mechanism based on reputation, and the master node manages other nodes to conduct trusted transactions. Figure 5 As shown, the specific methods include:

[0139] Distribute digital certificates, authenticate nodes through hash calculations, and join trusted data chains;

[0140] The master node is generated through a reputation-based election mechanism, and together with other nodes, it forms a trusted transaction system;

[0141] The master node can provide support for subsequent data protection, real-time sharing, and integrity authentication, effectively improving the real-time nature of data verification. If transaction data is maliciously tampered with, the user can be prompted that the data is no longer credible and the user can discard the data.

[0142] According to the above scheme of the present invention, the present invention constructs a CPU built-in trusted and secure base (built-in trusted CPU), designs a multi-modal CPU operation mechanism of trusted core and computing core, realizes the protection mechanism of efficient computing + reliable protection dual system, realizes active immunity to unknown attacks, and provides high-intensity cryptographic computing services for upper-layer storage, communication and business operations; integrates RedCap 5G communication technology enables data collection and forwarding of virtual power plants, remote operations such as group dispatching and group control of virtual power plants based on 5G communication, and rapid load adjustment of virtual power plants; designs high-security technologies such as signature verification and authentication protection based on wireless communication, and protects the confidentiality and integrity of data communication through encryption and authentication technology, prevents data from being tampered with or stolen, and ensures the essential requirement of high security of virtual power plant data interaction; designs high-reliability technologies such as low-latency and anti-interference, reduces communication delays and improves anti-interference capabilities by optimizing protocol structures and algorithms, ensures the accuracy and stability of data transmission, and further ensures the stability and reliability of network security performance of virtual power plants; designs a distributed trusted data chain for virtual power plant wireless networks based on blockchain technology, designs key node chain-up strategies, trusted authentication between heterogeneous chains, master block election and distributed consensus protocols, and realizes efficient identity authentication and dynamic management.

[0143] According to the solution of the present invention, the present invention genetically improves the security of the core equipment of the virtual power plant, provides efficient cryptographic computing services for communications and business calculations, realizes high reliability, low latency and security of wireless communications through 5G encrypted communications, and realizes the security of electricity transactions through blockchain technology.

[0144] Furthermore, to achieve the above-mentioned purpose, the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the virtual power plant wireless secure encrypted communication design method as described above is implemented.

[0145] Furthermore, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the virtual power plant wireless security encrypted communication design method as described above is implemented.

[0146] Those of ordinary skill in the art will appreciate that the modules and algorithm steps described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0147] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and equipment can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0148] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0149] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the embodiments of the present invention.

[0150] In addition, each functional module in the embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0151] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the energy-saving signal sending / receiving method of each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.

[0152] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features are replaced with (but not limited to) technical features with similar functions disclosed in the present application.

[0153] It should be understood that the size of the serial numbers of each step in the content of the invention and the embodiments of the present invention does not absolutely mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

Claims

1. A design method for wireless secure encrypted communication of a virtual power plant, characterized in that: include: Set up virtual power plant secure communication hardware and software, including built-in trusted CPU, operating system and wireless communication software program; Design a multi-mode CPU operation mechanism based on the built-in trusted CPU; Design a wireless secure encryption communication method for the virtual power plant to achieve secure communication with other devices; Encryption design for wireless secure encrypted communications to achieve reliable and secure wireless communication interaction of virtual power plants; The multi-mode CPU operation mechanism is designed based on the built-in trusted CPU, including: A CPU core in the built-in trusted CPU is opened up as an independent secure trusted core, which only provides cryptographic computing services; Design an independent memory area, which contains the user's authentication information and secret key. This independent memory area can only be accessed by the secure and trusted core, and cannot be accessed by other CPU cores. The other CPU cores are computing cores, which interact with the trusted proxy software module in the wireless communication software program and the trusted verification module in the security trusted core, and implement data encryption and signature authentication calculations through cryptographic services; The wireless secure encrypted communication method for the virtual power plant to achieve secure communication with other devices is 5G wireless secure encrypted communication integrated with RedCap, including: Design a 5G wireless communication plug-in that integrates a 5G wireless communication module; Design an independent hardware encryption and decryption area on the 5G wireless communication plug-in and install an encryption and decryption module to encrypt and decrypt data sent through the 5G wireless communication module; Synchronize 5G wireless communication data between a 5G wireless communication plug-in having a 5G wireless communication module and each computing core via a Gigabit Ethernet bus; The computing core transmits the data to be sent to the 5G wireless communication plug-in via the Gigabit Ethernet bus; The computing core obtains data from the 5G wireless communication plug-in through the Gigabit Ethernet bus.

2. The method for designing wireless secure encrypted communication for a virtual power plant according to claim 1 is characterized in that: The encryption design of wireless secure encrypted communication to realize reliable and secure wireless communication interaction of virtual power plants is: encryption design based on channel time-varying keys to realize reliable and secure wireless encrypted communication interaction of virtual power plants, including: The communicating parties a and b first perform channel detection. The channel detection process is bidirectional and obtains measurement results respectively. , ; The measurement results Convert to binary and get the result , ; Identify the mismatched information between a and b, and a and b obtain the matching information of both parties and ; Based on information and , using signal amplification technology, obtain the keys A and B of both parties a and b; a and b use their secret keys A and B to encrypt and sign; Among them, a and b represent the virtual power plant and other devices communicating with the virtual power plant, respectively.

3. Virtual power plant wireless security encryption communication design system, characterized by: include: The hardware and software setting module sets up the virtual power plant security communication hardware and software, including the built-in trusted CPU, operating system and wireless communication software program; CPU operation mechanism design module, based on the built-in trusted CPU, designs a multi-modal CPU operation mechanism; Wireless secure encrypted communication method design module, designing wireless secure encrypted communication methods for virtual power plants to achieve secure communication with other devices; Encryption design module, which performs encryption design on wireless secure encrypted communications to achieve reliable and secure wireless communication interaction of virtual power plants; The multi-mode CPU operation mechanism is designed based on the built-in trusted CPU, including: A CPU core in the built-in trusted CPU is opened up as an independent secure trusted core, which only provides cryptographic computing services; Design an independent memory area, which contains the user's authentication information and secret key. This independent memory area can only be accessed by the secure and trusted core, and cannot be accessed by other CPU cores. The other CPU cores are computing cores, which interact with the trusted proxy software module in the wireless communication software program and the trusted verification module in the security trusted core, and implement data encryption and signature authentication calculations through cryptographic services; The wireless secure encrypted communication method for the virtual power plant to achieve secure communication with other devices is 5G wireless secure encrypted communication integrated with RedCap, including: Design a 5G wireless communication plug-in that integrates a 5G wireless communication module; Design an independent hardware encryption and decryption area on the 5G wireless communication plug-in and install an encryption and decryption module to encrypt and decrypt data sent through the 5G wireless communication module; Synchronize 5G wireless communication data between a 5G wireless communication plug-in having a 5G wireless communication module and each computing core via a Gigabit Ethernet bus; The computing core transmits the data to be sent to the 5G wireless communication plug-in via the Gigabit Ethernet bus; The computing core obtains data from the 5G wireless communication plug-in through the Gigabit Ethernet bus.

4. An electronic device, characterized in that It includes a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the method for designing wireless secure encrypted communication for a virtual power plant as described in claim 1 or 2 is implemented.

5. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, it implements the virtual power plant wireless secure encrypted communication design method as described in claim 1 or 2.

Images