Power grid security communication method based on multi-resource hybrid quantum key distribution

Abstract

The application discloses a power grid security communication method based on a multi-resource mixed quantum key distribution, and steps are as follows: 1, analyzing communication processes of three quantum key distribution modes of satellites, optical fibers and wireless; 2, building a power secret communication network architecture based on satellite-optical fiber-wireless mixed quantum key distribution; 3, based on the power secret communication network architecture, establishing a quantum resource optimization deployment model; 4, the objective function of the model is to minimize the information risk index; 5, the constraint conditions of the model include single quantum key distribution constraints and mixed quantum key distribution constraints, deployment cost constraints, communication demand constraints and quantum information flow constraints; 6, the established model is converted into a mixed linear integer programming form, and is solved to obtain a quantum resource optimization deployment and scheduling scheme. The application is a power communication method considering mixed quantum key distribution QKD cooperation effects and power service demand characteristics, fusing three QKD modes of satellites, optical fibers and wireless, and improving information security.

Description

Technical Field

[0001] This invention relates to the field of power grid security communication technology, and specifically to a power grid security communication method based on multi-resource hybrid quantum key distribution. Background Technology

[0002] The rapid development of information and communication technologies (ICT) has driven the modernization of smart grids, in which power systems and communication networks are closely integrated. As an indispensable support for smart grids, power communication systems face an urgent need to improve security. On the one hand, with the access of a large number of devices and terminals, the risk of network attacks has increased dramatically. On the other hand, failures in communication systems can not only lead to serious consequences but also trigger cascading failures at the information and physical layers.

[0003] With the rapid development of high-efficiency decryption algorithms (such as Grove's algorithm, Shor's algorithm, and quantum algorithms for linear equations) and high-performance quantum computers, the security of encryption algorithms currently used in power systems, which rely on computational complexity, has been greatly reduced. Therefore, it is urgent to develop defensive measures against these potential threats. Quantum communication, which combines the principles of quantum mechanics with cryptographic encryption methods, is considered a potential solution that can ensure unconditional security of information at the physical level. Quantum Key Distribution (QKD), as the most mature and widely used quantum communication technology, can generate and distribute absolutely secure key pairs between the sender and receiver, thus making information security breaches impossible to conceal.

[0004] Despite the immense potential of quantum key distribution (QKD) in the field of power information security, its practical application in my country's power system still faces a series of challenges. my country's power system network is large-scale and operates in a complex environment; relying solely on fiber-optic quantum communication networks is insufficient to meet the operational needs of all stages of the power system, including the generation, grid, load, and energy storage. Therefore, it is urgent to construct a quantum communication network architecture suitable for the actual needs of the power system, to achieve rational planning of the quantum power communication network, and to maximize the security of the power communication network while considering economic efficiency. Summary of the Invention

[0005] To address the above problems, the present invention aims to provide a power grid secure communication method based on multi-resource hybrid quantum key distribution (QKD). This method considers the synergistic effect of hybrid quantum key distribution (QKD) and the characteristics of power service requirements, and integrates satellite, fiber optic, and wireless QKD methods to improve information security.

[0006] To achieve the above objectives, the present invention adopts the following technical solution:

[0007] A secure power grid communication method based on multi-resource hybrid quantum key distribution is proposed. First, a secure power communication network architecture based on multi-resource hybrid quantum key distribution is proposed. By integrating three quantum key generation and distribution methods—satellite, fiber optic, and wireless—a quantum-secure communication system compatible with existing power communication networks is proposed. Second, a quantum resource optimization deployment model is constructed with the goal of minimizing the system information risk index. By deploying quantum devices on communication nodes or channels, a quantum resource optimization deployment and scheduling scheme considering the synergistic effect of hybrid quantum key distribution and the needs of power services is proposed, providing a decision-making reference for the large-scale construction of quantum power communication networks in future power systems.

[0008] Includes the following steps,

[0009] Step 1: Considering the business needs and existing communication methods in the power system, analyze the communication process of three quantum key distribution methods: satellite, fiber optic, and wireless.

[0010] Step 2: Based on the thorough analysis of quantum communication technology in Step 1, construct a power secure communication network architecture based on satellite-fiber-wireless hybrid quantum key distribution;

[0011] Step 3: Based on the power secure communication network architecture built in Step 2, establish a quantum resource optimization deployment model considering the key generation stage and the information transmission stage;

[0012] Step 4: Establish the objective function of the quantum resource optimization deployment model in Step 3 as minimizing the information risk index;

[0013] Step 5: Establish constraints for the quantum resource optimization deployment model in Step 3: Model the three quantum key distribution methods (satellite, fiber optic, and wireless) in the key generation stage to form single quantum key distribution constraints and hybrid quantum key distribution constraints; model the deployment and operation costs of quantum devices involved in different quantum key distribution methods in the key generation stage to form deployment cost constraints; model the communication requirements of power system services in the information transmission stage to form communication requirement constraints; and model the quantum information flow in the information transmission stage to form quantum information flow constraints.

[0014] Step 6: Transform the established quantum resource optimization deployment model into a mixed linear integer programming form, and use a commercial solver to solve it to obtain a quantum resource optimization deployment and scheduling scheme.

[0015] Compared with the prior art, the present invention has the following advantages:

[0016] This invention proposes a power grid security communication scheme based on multi-resource hybrid QKD, which meets the communication needs of power services through the synergy of multiple QKD resources. First, the advantages and disadvantages of satellite, fiber optic, and wireless QKD methods, as well as their applicable scenarios in power systems, are analyzed, and a power secure communication network architecture based on hybrid QKD is constructed. Then, considering the synergistic effect of hybrid QKD and the needs of power services, a quantum resource optimization deployment model is established with the goal of minimizing the system's information risk index. This model is then transformed into an easily solvable mixed-integer linear programming form, providing a decision-making reference for the future large-scale construction of quantum power communication networks. It has the following advantages:

[0017] First: Expand the coverage of quantum communication in the power system by introducing QKD technology on the basis of the existing power communication network to achieve quantum secure communication, thereby meeting the multi-scale power business communication needs;

[0018] Second: Improve the utilization rate of quantum devices and quantum key resources by unifying the scheduling and allocation of various QKD methods, thereby improving the utilization rate of quantum resources while taking into account both security and economy;

[0019] Third: Improve the security of power communication systems and reduce the risk of information leakage in power systems;

[0020] Furthermore, the effectiveness of the design is ensured by using the method described above and verifying the solution. Attached Figure Description

[0021] Figure 1 This is a diagram of the quantum secure communication process based on QKD.

[0022] Figure 2 This is a schematic diagram illustrating the satellite quantum key generation and distribution method.

[0023] Figure 3 This is a schematic diagram of fiber optic quantum key generation and distribution.

[0024] Figure 4 This is a schematic diagram of a wireless quantum key generation and distribution method.

[0025] Figure 5 This is a diagram of a secure power communication network architecture based on a satellite-fiber-wireless hybrid QKD. Detailed Implementation

[0026] The present invention will now be described in further detail with reference to the accompanying drawings and specific embodiments.

[0027] The implementation process of the power grid secure communication method based on multi-resource hybrid quantum key distribution described in this invention is as follows.

[0028] Step 1. This invention analyzes the specific processes and applicable scenarios for three QKD methods: fiber optic, satellite, and wireless. Figure 1 This is a diagram of the quantum secure communication process based on QKD. Figure 2 , 3 Figure 4 shows specific schematic diagrams of different QKD (Quantum Key Generation and Distribution) methods. Fiber optic QKD relies on the existing fiber optic infrastructure of the power system, without the need for separate quantum fiber installations. It has good existing conditions and relatively stable key generation, making it suitable for direct upgrades on the existing power grid. It is responsible for encrypting related services carried by power communication fibers, including critical power production control services such as high-voltage line protection and provincial dispatching and switching. Satellite QKD, due to its wide coverage and low loss characteristics, has unique advantages in key generation at the kilometer level, making it suitable for meeting the large-scale, wide-coverage communication needs of new power systems, such as power supply emergency command, data center disaster recovery backup, and cross-regional information transmission. Wireless QKD matches the higher flexibility requirements of the terminal side of new power systems, and is suitable for services such as distribution system automation, distributed new energy access, and grid status awareness. It also provides good centralized protection for a large number of terminal devices involving open deployment and lack of encryption methods.

[0029] Step 2. Integrate these three methods to build a power grid secure communication network architecture based on satellite-fiber-wireless hybrid QKD, such as... Figure 5 As shown, this architecture consists of three layers: a quantum encryption layer, an information transmission layer, and a power service layer. The quantum encryption layer is responsible for the generation, distribution, and management of quantum keys, including satellite and ground components, with the ground component comprising both fiber optic and wireless methods. The information transmission layer is responsible for transmitting quantum-encrypted power service data, based on the existing power communication system architecture, and includes both fiber optic and wireless components. The power service layer encompasses various services within the power system. This architecture integrates three quantum key distribution (QKD) methods to meet the secure communication needs of multi-category, multi-entity, and large geographical span power systems. This architecture introduces multiple quantum key distribution methods into the existing power communication architecture, considers the synergistic effects between fiber optic, satellite, and wireless QKD, and comprehensively plans and uniformly schedules multiple quantum resources to distribute quantum keys among communication entities at different levels, thereby providing a more complete quantum-secure communication solution and meeting the multi-scale secure communication needs of new power systems. This architecture can integrate the applicable scenarios of various QKD methods, avoid the drawbacks of a single QKD network, expand the security scope of quantum communication, and solve the waste of equipment and resources caused by the lack of cooperation between multiple single QKD networks, greatly enhancing the availability and flexibility of quantum networks.

[0030] Step 3. Establish a quantum resource optimization deployment model that considers both the key generation and information transmission phases. The specific optimization objective function and constraints are described in Steps 4 and 5.

[0031] Step 4. Establish the objective function. The goal of the quantum resource optimization deployment model of this invention is to meet the quantum secure communication requirements of power services in the network as much as possible and improve the level of information security. δ is defined as the information risk index, representing the product of the amount of unencrypted information in the network and its corresponding service importance, used to measure the degree of information security risk in the network. Therefore, the objective function can be expressed as minimizing the information risk index:

[0032]

[0033]

[0034] In the formula: δ is the information risk index; defined as follows: For communication requirement r, there is a non-quantum-secure information quantity, analogous to load shedding, used to describe the situation where power services are quantum-secured; The total amount of information required for communication; The amount of information encrypted with quantum keys to achieve quantum secure communication in communication requirements; w r This is the weighting coefficient for the service to which the communication requirement r belongs.

[0035] Step 5. Establish constraints. The quantum resource optimization deployment model proposed in this invention includes the following constraints: single quantum key distribution constraints and hybrid quantum key distribution constraints, deployment cost constraints, communication requirement constraints, and quantum information flow constraints.

[0036] 1) Single quantum key distribution constraints

[0037] The quantum key generated between two nodes using satellite QKD can be represented as:

[0038]

[0039]

[0040]

[0041] In the formula: The number of keys generated by the quantum satellite for communication needs r at a given moment; and These represent decision variables for whether the communication start point s and end point d are equipped with satellite quantum devices, respectively. A value of 1 indicates that the node is equipped with a satellite quantum device, and a value of 0 indicates that the node is not equipped with a satellite quantum device. and These represent the satellite coverage status of the communication origin s and destination d, respectively. A value of 1 indicates that the node is covered by satellite, and a value of 0 indicates that the node is not covered by satellite; set Includes satellite coverage nodes within time slot T; N represents the decision variable for whether a satellite quantum device should be deployed at node i' covered by the satellite; satellite The number of transmitters on the satellite; M is the maximum value; The original number of satellite keys between requirements r; R satellite It is the rate at which satellite quantum keys are generated; The duration during which a satellite can establish a satellite-to-ground link while passing through a node.

[0042] Equation (3) indicates that the satellite QKD generation condition for communication requirement r is: the beginning and end nodes of the communication are simultaneously covered by the satellite and both are equipped with satellite quantum devices; Equation (4) is the satellite-to-ground connection constraint, indicating that the number of nodes that can establish a satellite-to-ground link with the satellite in the same time slot is limited by the number of transmitters N on the satellite. satellite Equation (5) represents the key limit that each pair of nodes can obtain after establishing a satellite-to-ground connection.

[0043] Fiber-based QKD relies on the existing fiber optic network infrastructure, thus requiring the generation of reachable paths between node pairs based on the existing network's fiber optic topology. Each path contains multiple links, therefore introducing 0-1 decision variables. The quantum key generated between two nodes based on optical fiber can be represented as:

[0044]

[0045]

[0046]

[0047]

[0048]

[0049] In the formula: The number of keys generated by the quantum satellite between communication requirements r; p = {x p,1 ,...,x p,l ,...,x p,m} is a vector of size m×1, representing a reachable path between two nodes, x p,l This is a 0-1 variable representing whether path p passes through link l. A value of 1 indicates that path p passes through link l, and a value of 0 indicates that path p does not pass through link l; P r This is the set of reachable paths between node pairs r in the topology; This represents the quantum feasibility of a feasible fiber optic path between any pair of nodes. If the fiber optic path is reachable and all links on the path are equipped with quantum devices, then the path has the basic conditions for quantum key generation. A value of 1 indicates that path p can generate a quantum key, and a value of 0 indicates that path p cannot generate a quantum key. R represents the decision variable for whether to deploy a fiber optic quantum device on link l, with a value of 1 indicating deployment and a value of 0 indicating no deployment; l R represents the original key generation rate of link l, which is related to the distance d; min The threshold for the link key generation rate is the critical value before the key rate drops rapidly with distance. The quantum key generation rate of the line after the installation of relay equipment; "l" represents the relay links after the addition of relays to a link; This represents the quantum key generation rate corresponding to relay link l”; The number of quantum keys available on link l at this moment; Δt represents the number of quantum keys on link l at time 0; Δt represents the time elapsed from time 0 to this time for generating the quantum key.

[0050] Equations (6) and (7) indicate that the fiber QKD generation condition for communication requirement r is that all links on at least one path between node pairs are equipped with QKD devices; Equation (8) is a link relay constraint, indicating that when the key rate is lower than the threshold, a relay needs to be installed to meet the real-time quantum communication requirement; Equation (9) indicates that the key generation rate of the link after the relay is installed is equal to the minimum key generation rate of each relay segment; Equation (10) indicates that the number of available keys between node pairs is equal to the sum of the number of keys on all feasible installed paths, and the number of keys on each path is the minimum value of the links it contains.

[0051] The quantum key generated between two nodes using wireless QKD can be represented as:

[0052]

[0053]

[0054]

[0055]

[0056]

[0057]

[0058]

[0059] In the formula: (x i ,yi ) and (x j ,y j ) represent the position coordinates of communication node i and communication node j, respectively, and d (i,j) The relationship between the distance between these two points and the coverage radius of the wireless base station; d cover It represents the coverage area of ​​a wireless node and is a constant. This represents the coverage status between communication nodes i and j. A value of 1 indicates that if one node has a wireless base station installed, the other node will be covered. A value of 0 indicates that the two nodes cannot cover each other. M represents the number of keys generated by the quantum wireless base station between communication requirements r; M is a maximum value. This represents the decision variable for whether to deploy a wireless quantum device at node i. A value of 1 indicates that a wireless quantum device is deployed, and a value of 0 indicates that a wireless quantum device is not deployed. This indicates the situation where node i and the communication starting point s overlap with each other; This indicates the situation where node i and the communication endpoint d overlap with each other; This represents the number of quantum keys at wireless base station i at this moment; R represents the number of quantum keys at time 0 for wireless base station i; wireless Δt represents the rate at which the quantum key is generated by the wireless base station; Δt is the time elapsed from time 0 to this time during which the wireless quantum key is generated. This represents the upper limit of the number of quantum keys that can be used by a node; and These represent the lower and upper limits, respectively, for the number of quantum keys that a wireless base station can allocate to any node.

[0060] Equations (11) and (12) describe the variables and parameters in the wireless QKD network; Equation (13) indicates that the wireless quantum key generation condition for communication demand r is that both the beginning and end nodes are covered by nodes equipped with wireless base stations; Equations (14) and (15) indicate that the number of quantum keys generated in the wireless base station shall not exceed the upper limit of the key pool capacity; Equations (16) and (17) are constraints on the distribution of quantum keys by the wireless base station to the nodes, indicating that the sum of the number of keys allocated to all communication demands r is less than the number of keys currently available to the wireless base station, and the upper and lower limits of the number of keys allocated to a single pair of beginning and end nodes are constrained by the carrying capacity of the mobile device.

[0061] 2) Hybrid quantum key distribution constraints

[0062] definition This represents a 0-1 decision variable regarding whether line l possesses quantum communication capabilities. Satellites and wireless networks establish quantum connections between nodes that were previously unconnected, forming a new set of links. When considered together, this results in hybrid quantum key distribution.

[0063]

[0064]

[0065]

[0066]

[0067]

[0068]

[0069] In the formula: The number of keys generated by the hybrid QKD network between communication requirements r; Let E be the set of hybrid QKD reachable paths between node pairs r in the topology; E is the set of all links; E satellite For a set of satellite links; E wireless This is a set of wireless links.

[0070] Equations (18), (19), and (20) are state constraints for hybrid QKD quantum channels, indicating that the hybrid QKD network includes available quantum channels for satellite, fiber optic, and wireless sub-networks; Equations (21) and (22) indicate that the hybrid QKD generation condition for communication requirement r is that all links on at least one path between node pairs are available quantum channels; Equation (23) represents the minimum number of resource keys on all its paths.

[0071] The final number of available keys between each pair of nodes It equals the sum of the number of keys generated by the three sub-networks and the hybrid network:

[0072]

[0073] 3) Deployment cost constraints

[0074] The cost of deploying various quantum resources consists of two parts: fixed equipment cost C. device and operating costs C operation .

[0075] C all =C device +C operation (25)

[0076] C device =C sgs +C fiber +C wireless (26)

[0077]

[0078]

[0079]

[0080]

[0081] In the formula, C all The total cost of deploying quantum devices; C device For fixed equipment costs; C operation For operating costs; C sgs C fiber C wireless These represent the fixed equipment costs required to generate quantum keys via satellite, fiber optics, and wireless, respectively, and are equal to the unit price multiplied by the total number of deployed nodes and links; V represents the set of nodes i; E represents the set of links l. The decision variable representing whether node i should deploy a quantum device; The decision variable representing whether to deploy quantum devices on link l; The decision variable representing whether node i should deploy a quantum device; These represent the unit price for deploying a quantum device at a node i or link l, respectively. The number of quantum keys generated by the satellite for communication requirement r; C rent The unit price for satellite calls is expressed in "yuan per bit".

[0082] 4) Communication requirement constraints

[0083] The communication process carrying power service information can be described using information flow. The basic requirement of communication is to convey all information... Upon reaching the destination node, having sufficient quantum keys for encrypting the information is a further consideration. Therefore, the transmission of information must first meet the constraints of communication latency and link bandwidth.

[0084]

[0085] D r,p ≤D r,min (32)

[0086]

[0087] B l ≤B l.max (34)

[0088] In the formula: D r,p The end-to-end delay of the information flow of communication requirement r through path p; d l Where is the link length; v is the information transmission rate after considering the data processing time at the node; D r,minB represents the minimum latency requirement for communication demand r; l and B l,max B represents the bandwidth already used in the communication link and its maximum bandwidth limit. r Let x be the bandwidth of communication demand r; R be the set of communication demands r; x r,l and x r,l' The state variables describe whether the information flow passes through links l and l', respectively. A value of 1 indicates that the information flow has passed through the links, and a value of 0 indicates that the information flow has not passed through the links.

[0089] Equations (31) and (32) are the communication delay constraints for communication requirement r. If the information of the starting node s flows into the end node d through path p, then the end-to-end delay is the sum of the data transmission delays of all links l in path p. Here, the data delay on the link has already taken into account the time for data processing at both ends, and is only inversely proportional to the transmission distance. Equations (33) and (34) are the communication link bandwidth constraints, which indicate that the bandwidth occupied by the communication link is equal to the sum of the bandwidth consumed by the data flowing through the link, and cannot exceed the upper limit of the link bandwidth.

[0090] Since the bandwidth occupied during the generation stage is extremely small compared to the total bandwidth of power optical fiber, it will not be a limitation. Therefore, the bandwidth occupied by the quantum channel and the classical channel during the key generation stage will not be considered.

[0091] 5) Quantum information flow constraints

[0092] Information encrypted using quantum keys must also meet the constraints of information flow and capacity:

[0093]

[0094] Equation (35) is a constraint on the coupling relationship between the deployment and information transmission phases of quantum devices.

[0095]

[0096]

[0097]

[0098]

[0099]

[0100] In the formula: Let r be the number of all available quantum keys required for communication at time t; The total amount of information in the communication requirement r' that must be encrypted using quantum key distribution; R' represents the amount of information encrypted with a quantum key to achieve quantum secure communication in the communication requirements; R' represents the set of services r' that must be quantum encrypted; Ki,t Let be the difference between the quantum information flow flowing into and out of node i; for all connected links l(ij), l' represents link l(ji), if x r,l If x is 1, it indicates that information flows out of node i. r,l' A value of 1 indicates that information flows into node i; L i V is the set of all links connected to node i; relay A relay node in a communication process, that is, the set of nodes V\V excluding the initiator and exitiator nodes of the communication pair. (s,d) ;K l,t It is the sum of the quantum information flow passing through link l; denoted as the upper limit of the quantum key pool for the link; E represents the set of all links l; R represents the set of all communication requests r.

[0101] Equation (36) represents the encryption requirement constraint for core business operations, indicating that core business operations must adopt quantum secure communication; Equations (37) and (38) represent the relay node flow constraint for quantum information flow, indicating that for each relay node through which the information flow passes, the amount of quantum information flowing in is equal to the amount flowing out; Equations (39) and (40) represent the link-path capacity constraint for quantum information flow, indicating that the number of quantum keys used for encryption on the link is equal to the sum of the number of quantum keys consumed by the information flowing through the link, and cannot exceed the upper limit of the quantum key pool capacity of the link. The above two constraints are used to ensure that quantum information flow circulates between the originating and end node pairs in the quantum network.

[0102] Step 6. The quantum resource optimization deployment model proposed in this invention is a nonlinear mixed-integer programming (MIP) model, which is difficult to solve using traditional methods. Therefore, the nonlinear part of the model is linearized.

[0103] Introducing new 0-1 variables Equations (3) and (19) are linearized. The 0-1 variables describe whether both the initial and final node pairs (s, d) of the communication requirement have satellite ground stations installed. The equivalent linearized formula is as follows:

[0104]

[0105]

[0106]

[0107] The objective function (Equations 1-2) and constraints (Equations 4-18, 20-40, 41-43) together constitute the linearized comprehensive optimization model for the deployment of quantum resources and service scheduling in a wide-area power grid secure communication network based on satellite-fiber-wireless hybrid QKD. This model is a mixed-integer linear programming (MILP) model, which can be solved using commercial solvers such as CPLEX and Gurobi.

Claims

1. A power grid secure communication method based on multi-resource hybrid quantum key distribution, characterized in that: Includes the following steps, Step 1: Considering the business needs and existing communication methods in the power system, analyze the communication process of three quantum key distribution methods: satellite, fiber optic, and wireless. Step 2: Based on the thorough analysis of quantum communication technology in Step 1, construct a power secure communication network architecture based on satellite-fiber-wireless hybrid quantum key distribution; Step 3: Based on the power secure communication network architecture built in Step 2, establish a quantum resource optimization deployment model considering the key generation stage and the information transmission stage; Step 4: Establish the objective function of the quantum resource optimization deployment model in Step 3 as minimizing the information risk index; The objective function of the quantum resource optimization deployment model is to minimize the information risk index, as shown below: （1） （2） In the formula: Information risk index; For communication needs The non-quantum-secure information quantity, analogous to the load shedding quantity, is used to describe the situation where power business is quantum-secured; The total amount of information required for communication; The amount of information encrypted with quantum keys to achieve quantum secure communication in communication needs; For communication needs The weighting coefficient of the relevant business segment; Step 5: Establish constraints for the quantum resource optimization deployment model in Step 3: Model the three quantum key distribution methods of satellite, fiber optic and wireless in the key generation stage to form single quantum key distribution constraints and hybrid quantum key distribution constraints; Model the deployment and operation costs of quantum devices involved in different quantum key distribution methods in the key generation stage to form deployment cost constraints; The communication requirements of power system services during the information transmission phase are modeled to form communication requirement constraints; the quantum information flow during the information transmission phase is modeled to form quantum information flow constraints. Step 6: Transform the established quantum resource optimization deployment model into a mixed linear integer programming form, and use a commercial solver to solve it to obtain a quantum resource optimization deployment and scheduling scheme.

2. The power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 2, the secure power communication network architecture consists of three layers: a quantum encryption layer, an information transmission layer, and a power service layer. The quantum encryption layer is responsible for the generation, distribution, and management of quantum keys, including satellite and ground components, with the ground component consisting of both fiber optic and wireless methods. The information transmission layer is responsible for transmitting power service data encrypted with quantum keys, including both fiber optic and wireless methods. The power service layer includes various services within the power system.

3. The power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints for single quantum key distribution are as follows: The quantum key generated between two nodes using satellite quantum key distribution is represented as follows: （3） （4） （5） In the formula: Communication needs at a certain moment The number of keys generated by the quantum satellite between them; and Representing the communication starting point respectively and the end point The decision variable for whether or not a satellite quantum device has been installed is 1, which means that the node has installed a satellite quantum device, and 0 means that the node has not installed a satellite quantum device. and Representing the communication starting point respectively and the end point The state of being covered by satellite; a value of 1 indicates that the node is covered by satellite, and a value of 0 indicates that the node is not covered by satellite; set Includes time slots Internal satellite coverage nodes; Represents nodes covered by satellite Decision variables regarding whether to deploy satellite quantum devices; The number of transmitters on the satellite; It is the maximum value; For demand The original number of satellite keys between them; It is the rate at which satellite quantum keys are generated; The duration during which a satellite can establish a satellite-to-ground link while passing over a node; Equation (3) represents the communication requirements. The conditions for generating satellite quantum key distribution are: the beginning and end nodes of the communication are simultaneously covered by the satellite and both are equipped with satellite quantum devices; Equation (4) is the satellite-to-ground connection constraint, indicating that the number of nodes that can establish a satellite-to-ground link with the satellite in the same time slot is limited by the number of transmitters on the satellite. Equation (5) represents the key limit that each pair of nodes can obtain after establishing a satellite-to-ground connection. The quantum key generated between two nodes based on optical fiber is represented as follows: （6） （7） （8） （9） （10） In the formula: For communication needs The number of keys generated by the quantum satellite between them; It is a size of A vector represents a reachable path between two nodes. For path Whether it passes through the link A 0-1 variable, where a value of 1 represents a path. via link A value of 0 indicates a path Without going through a link; For node pairs in the topology The set of paths that can be reached between them; This represents the quantum feasibility of a feasible fiber optic path between any pair of nodes. A path possesses the basic conditions for quantum key generation if it is reachable and all links along the path are equipped with quantum devices. A value of 1 indicates that the path... Capable of generating quantum keys, with a value of 0 indicating a path. Quantum keys cannot be generated; Indicates whether on the link The decision variable for deploying fiber optic quantum devices is defined as follows: a value of 1 indicates that fiber optic quantum devices are deployed, and a value of 0 indicates that fiber optic quantum devices are not deployed. For link The original key generation rate, and distance related; The threshold for the link key generation rate is the critical value before the key rate drops rapidly with distance. The quantum key generation rate of the line after the relay equipment is installed; This represents the segments of a link after a repeater has been added. Indicates relay link The corresponding quantum key generation rate; For this moment, the link The number of quantum keys available on the platform; Link at time 0 The number of quantum keys on; This represents the time elapsed from time 0 to this moment when the quantum key was generated. Equations (6) and (7) represent communication requirements. The fiber QKD generation condition is that all links on at least one path between node pairs are equipped with QKD devices; Equation (8) is a link relay constraint, indicating that when the key rate is lower than the threshold, a relay needs to be installed to meet the real-time quantum communication requirements; Equation (9) represents the key generation rate of the link after the relay is installed, which is equal to the minimum key generation rate of each relay segment; Equation (10) indicates that the number of available keys between node pairs is equal to the sum of the number of keys on all feasible installed paths, and the number of keys on each path is the minimum value of the links it contains; The quantum key generated between two nodes using wireless quantum key distribution is represented as follows: （11） （12） （13） （14） （15） （16） （17） In the formula: and Communication nodes and communication nodes Location coordinates, The relationship between the distance between these two points and the coverage radius of the wireless base station; It represents the coverage area of ​​a wireless node and is a constant. For communication nodes and The mutual coverage between nodes: a value of 1 indicates that if one node has a wireless base station installed, the other node will be covered; a value of 0 indicates that the two nodes cannot cover each other. For communication needs The number of keys generated by the quantum wireless base station between them; It is a maximum value; Indicates whether it is in the node The decision variable for deploying wireless quantum devices is set to 1, indicating that wireless quantum devices are deployed, and 0, indicating that wireless quantum devices are not deployed. Represents a node and communication starting point The situation where they overlap; Represents a node and communication endpoint The situation where they overlap; This indicates the wireless base station at this moment. The number of quantum keys; Indicates wireless base station The number of quantum keys at time 0; The rate at which quantum keys are generated for wireless base stations; The duration from time 0 to this time for generating the wireless quantum key; This represents the upper limit of the number of quantum keys that can be used by a node; and These represent the lower and upper limits, respectively, for the number of quantum keys that a wireless base station can allocate to any node; Equations (11) and (12) describe the variables and parameters in the wireless quantum key distribution network; Equation (13) represents the communication requirements. The conditions for generating wireless quantum keys are that both the originating and end nodes are covered by nodes equipped with wireless base stations; Equations (14) and (15) indicate that the number of quantum keys generated in the wireless base station must not exceed the upper limit of the key pool capacity; Equations (16) and (17) are constraints on the distribution of quantum keys from the wireless base station to the nodes, representing all communication requirements. The sum of the number of keys obtained is less than the number of keys currently available at the wireless base station, and the upper and lower limits of the number of keys obtained by a single pair of start and end nodes are constrained by the carrying capacity of the mobile device.

4. A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints of hybrid quantum key distribution are as follows: definition For the line Whether it has quantum communication capability is a 0-1 decision variable; satellites and wireless networks establish quantum connections between nodes that were not originally connected by lines, forming a new set of links. When these are added, the result is hybrid quantum key distribution. （18） （19） （20） （21） （22） （23） In the formula: For communication needs The number of keys generated by the hybrid QKD network; For node pairs in the topology A set of mixed QKD reachable paths; The set of all links; A collection of satellite links; A set of wireless links; Equations (18), (19), and (20) are the state constraints of the hybrid QKD quantum channel, representing the available quantum channels in the hybrid QKD network that include satellite, fiber optic, and wireless sub-networks; Equations (21) and (22) represent the communication requirements. The hybrid QKD generation condition is that all links on at least one path between node pairs are available quantum channels; Equation (23) represents the minimum number of all resource keys on all its paths.

5. A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the deployment cost constraints are as follows: the cost of various quantum resources consists of two parts. Components: Fixed equipment costs and operating costs ; (25) (26) (27) (28) (29) (30) In the formula, The total cost of deploying quantum devices; For fixed equipment costs; Operating costs; , , These represent the fixed equipment costs required to generate quantum keys via satellite, fiber optics, and wireless, respectively, and are equal to the unit price multiplied by the total number of deployed nodes and links. Representative node A set; Representative link A set; Representative node Decision variables for whether to deploy quantum devices; Representative link Decision variables for whether to deploy quantum devices; Representative node Decision variables for whether to deploy quantum devices; , , At a certain node or link The unit price for deploying quantum devices; For communication needs The number of quantum keys generated by the satellite that can be invoked; The unit price for satellite calls is expressed in "yuan per bit".

6. A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the communication requirements are constrained as follows: The transmission of information streams must first meet the constraints of communication latency and link bandwidth: (31) (32) (33) (34) In the formula: For communication needs Information flow through the path End-to-end delay; Link length; This is the information transmission rate after taking into account the data processing time at the nodes; For communication needs The minimum latency requirement; and This refers to the bandwidth already used in the communication link and its bandwidth limit. For communication needs bandwidth; For communication needs A set; and Describe whether the information flow passes through the link. and The state variable has a value of 1 indicating that the journey has been completed, and a value of 0 indicating that the journey has not been completed. Equations (31) and (32) represent the communication requirements. Communication delay constraints, if the starting node Information via path Flow into the final node Then the end-to-end delay is the path delay. All links in The sum of data transmission delays, where the data delay on the link has already taken into account the time for data processing at both ends, and is only inversely proportional to the transmission distance; Equations (33) and (34) are the bandwidth constraints of the communication link, which means that the bandwidth occupied by the communication link is equal to the sum of the bandwidth consumed by the data flowing through the link, and cannot exceed the upper limit of the link bandwidth.

7. A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the quantum information flow is constrained as follows: Information encrypted using quantum keys must meet the constraints of information flow and capacity: (35) Equation (35) represents the coupling constraints between the deployment and information transmission phases of quantum devices; (36) (37) (38) (39) (40) In the formula: for Real-time communication requirements The total number of available quantum keys; For communication needs that require quantum key encryption The total amount of information; The amount of information encrypted with quantum keys to achieve quantum secure communication in communication needs; For business that must complete quantum encryption gather; For nodes The difference between the inflow and outflow of quantum information; For all the links connected to it , Representative link ,like A value of 1 indicates that the information is flowing out of the node. ,like A value of 1 indicates that information is flowing into the node. ; For nodes The set of all connected links; A relay node in a communication process, that is, the set of nodes excluding the initiator and endpoint of the communication pair. ; For link The sum of the quantum information flows passing through it; This represents the upper limit of the quantum key pool for the link; Represents all links A set; Represents all communication needs A set; Equation (36) is the encryption requirement constraint for core business, indicating that core business must adopt quantum secure communication; Equations (37) and (38) are the relay node flow constraints for quantum information flow, indicating that for the relay node through which the information flow passes, the amount of quantum information flowing in and out is equal; Equations (39) and (40) are the link-path capacity constraints for quantum information flow, indicating that the number of quantum keys used for encryption on the link is equal to the sum of the number of quantum keys consumed by the information flowing through the link, and cannot exceed the upper limit of the quantum key pool capacity of the link. Equations (39) and (40) are used to ensure that quantum information flow flows between the start and end node pairs in the quantum network.

Images