A quantum security special variable acquisition terminal

Abstract

The present invention relates to the technical field of power equipment, and specifically to a quantum security special transformer acquisition terminal. In the scheme of the present application, the acquisition data generated by the acquisition terminal can be encrypted in a quantum encryption manner to ensure the confidentiality of the data during transmission, and effectively prevent data leakage or illegal theft. Secondly, the quantum key supplement channel continuously provides new quantum keys for the quantum security module to ensure the strength and timeliness of encryption, so that the system can continuously and dynamically update the key, thereby improving the security of the system. In addition, the scheme does not add external devices, thereby simplifying the physical structure of the system, reducing the difficulty of installation, debugging and maintenance of the equipment, and also reducing the security risks that may be caused by the connection between external devices and the host. Therefore, the scheme of the present application not only improves the data security of the power load management system, but also optimizes the ease of use and reliability of the system.

Description

Technical Field

[0001] The present invention relates to the technical field of power equipment, and in particular to a quantum security special transformer acquisition terminal. Background Art

[0002] In the power load management system, data confidentiality and security are crucial. In recent years, with the development of quantum technology, the application of quantum encryption technology in this field has gradually shown its unique advantages. Quantum encryption, with its high security based on the principles of quantum mechanics, provides unprecedented protection for data transmission and storage.

[0003] At present, in the relevant technology, the power load management system has been initially transformed by quantum encryption through external quantum security encryption cards. Although this method has improved the security of the system to a certain extent, it has also brought some new problems. External devices not only increase the physical complexity of the system, making the installation, commissioning and maintenance of the equipment more difficult, but also may introduce new security risks. For example, the connection between the external device and the host may become a potential channel for hacker attacks or data leaks.

[0004] In order to solve these problems, it is particularly important to develop a dedicated acquisition terminal with a built-in quantum encryption module. Summary of the invention

[0005] In order to solve the above problems, the present invention discloses a quantum security special variable acquisition terminal.

[0006] The present application provides a quantum security special variable acquisition terminal, which includes a communication module, the communication module is used to establish a communication connection with a special variable acquisition system, the special variable acquisition terminal further includes a quantum security module, the quantum security module is in communication connection with a control interface of the special variable acquisition terminal, and the quantum security module and the communication module establish a quantum security data transmission channel through the special variable acquisition terminal body;

[0007] The quantum secure data transmission channel is used to send and receive data encrypted in a quantum encryption manner.

[0008] The dedicated variable acquisition terminal body includes a first transparent transmission module, which is used to forward the quantum security data to the quantum security module or the communication module according to the destination of the data;

[0009] The quantum security module is used to encrypt the collection data generated by the special-purpose acquisition terminal body in a quantum encryption manner to form quantum security data, and send it to the special-purpose acquisition terminal body, as well as to decrypt the received quantum security data, and then send the decrypted plaintext data to the special-purpose acquisition terminal body.

[0010] In addition, the dedicated variable acquisition terminal body also includes a second transparent transmission module, which is used to forward the quantum key supplement request from the quantum security module to the communication module;

[0011] The communication module is further used to send a quantum key supplement request to the quantum key generation end, and transmit the received quantum key supplement file to the dedicated transformer acquisition terminal body;

[0012] The first transparent transmission module is further used to forward the quantum key supplement file to the quantum security module.

[0013] Specifically, the communication module establishes a communication connection with the acquisition system in a wired and / or wireless manner.

[0014] The quantum key supplement file of the quantum key generation end is generated by a quantum random number generator.

[0015] In a specific structure, the quantum security module further includes:

[0016] An encryption and decryption processing unit, used to perform quantum encryption and decryption processing on data according to a quantum encryption and decryption algorithm;

[0017] A quantum key management unit, used to request and update quantum keys;

[0018] A memory unit used to store quantum keys for use in encryption and decryption processes.

[0019] In the above scheme, the data forwarding method of the first transparent transmission module includes:

[0020] Receiving quantum secure data, wherein the quantum secure data includes a specific tag and destination address information, wherein the specific tag includes information for distinguishing different types of data;

[0021] Parsing the specific tag to determine the destination of the data;

[0022] According to the determined destination, the data is forwarded to the corresponding processing end, which includes: a quantum security module, a communication module, and a processing module of the dedicated transformer acquisition terminal body;

[0023] In the above scheme, the quantum key supplement method of the quantum security module includes:

[0024] The quantum security module generates a quantum key supplement request and sends it to the second transparent transmission module;

[0025] The second transparent transmission module forwards the received quantum key supplement request to the communication module;

[0026] Sending a quantum key supplement request to a quantum key generation end through a communication module;

[0027] The communication module receives the quantum key supplementary file from the quantum key generation end;

[0028] The received quantum key supplementary file is transmitted to the first transparent transmission module of the dedicated variable acquisition terminal body through the communication module;

[0029] The quantum key supplement file is forwarded to the quantum security module through the first transparent transmission module.

[0030] In the scheme of the present application, the introduction of the quantum security module significantly enhances the security of data collection and transmission. Through the quantum secure data transmission channel, the collected data generated by the collection terminal can be encrypted in a quantum encryption manner to ensure the confidentiality of the data during transmission, and effectively prevent data leakage or illegal theft. Secondly, the quantum key supplement channel continuously provides new quantum keys for the quantum security module to ensure the strength and timeliness of encryption, so that the system can continuously and dynamically update the key, thereby improving the security of the system. In addition, the scheme does not add external devices, thereby simplifying the physical structure of the system, reducing the difficulty of installation, debugging and maintenance of the equipment, and also reducing the security risks that may be caused by the connection between external devices and the host. In summary, the scheme of the present application not only improves the data security of the power load management system, but also optimizes the ease of use and reliability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 This is a schematic diagram of the process of sending data outward by the dedicated variable acquisition terminal body in the embodiment of the present application;

[0032] Figure 2 This is a schematic diagram of the process of receiving and sending data by the dedicated variable acquisition terminal body in the embodiment of the present application;

[0033] Figure 3 A schematic diagram of the process of supplementing the quantum key of the dedicated variable acquisition terminal in the embodiment of the present application;

[0034] Figure 4 This is a structural diagram of a dedicated transformer acquisition terminal in an embodiment of the present application;

[0035] Figure 5 This is a schematic diagram of the structure of the quantum security module in the embodiment of the present application;

[0036] Figure 6 This is a flow chart of a data forwarding method of the first transparent transmission module in an embodiment of the present application;

[0037] Figure 7 This is a flow chart of the quantum key supplement method of the quantum security module in an embodiment of the present application. DETAILED DESCRIPTION

[0038] In order to make the purpose, features and advantages of the present invention more obvious and easy to understand, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described below are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. The principles and features of the present invention are described below in conjunction with the drawings. The examples are only used to explain the present invention and are not used to limit the scope of the present invention.

[0039] The terms "including" and other expressions with similar meanings in the specification or claims of the present invention and the above-mentioned drawings are intended to cover non-exclusive inclusions, such as a process, method or system, or device comprising a series of steps or units is not limited to the listed steps or units.

[0040] Example 1: Figure 4 As shown, a quantum security special variable acquisition terminal includes a communication module, and the communication module is used to establish a communication connection with a special variable acquisition system, such as type I, type II and type III special variable acquisition terminals. The special variable acquisition terminal has a control interface (such as a serial port interface) and a communication module. The communication module establishes a communication connection with the acquisition system through wired and wireless methods.

[0041] Specifically, the communication module can establish a stable communication connection with the acquisition system through wired (such as Ethernet) and wireless (such as 4G, 5G or LoRa). It is responsible for sending encrypted data to the acquisition system and receiving instructions or data from the acquisition system.

[0042] In the solution of this embodiment, the dedicated variable acquisition terminal further includes a quantum security module, which is communicatively connected to the control interface of the dedicated variable acquisition terminal, and the quantum security module and the communication module establish a quantum secure data transmission channel through the dedicated variable acquisition terminal body; the main function of the quantum security module is to provide quantum encryption and decryption services to enhance the security of data transmission.

[0043] The quantum secure data transmission channel is used to send and receive data encrypted in a quantum encryption manner. When the dedicated acquisition terminal needs to send data, the data will first be quantum encrypted by the quantum security module, and then sent to the communication module through the established quantum secure data transmission channel. Similarly, when the communication module receives external data, it will also be transmitted to the quantum security module through the quantum secure data transmission channel for decryption processing, and then transmitted to other parts of the dedicated acquisition terminal for processing.

[0044] Example 2: Figure 1-3As shown, in a possible implementation, the dedicated variable acquisition terminal body includes a first transparent transmission module, which is used to forward the quantum security data to the quantum security module or the communication module according to the destination of the data; specifically, the first transparent transmission module is used to determine whether the destination of the data is the quantum security module or the communication module according to the header information or specific identification of the data packet.

[0045] The quantum security module is used to encrypt the collection data generated by the special-purpose acquisition terminal body in a quantum encryption manner to form quantum security data, and send it to the special-purpose acquisition terminal body, as well as to decrypt the received quantum security data, and then send the decrypted plaintext data to the special-purpose acquisition terminal body.

[0046] In a specific structure, the dedicated variable acquisition terminal body further includes a second transparent transmission module, which is used to forward the quantum key supplement request from the quantum security module to the communication module;

[0047] The communication module is further used to send a quantum key supplement request to the quantum key generation end, and transmit the received quantum key supplement file to the dedicated transformer acquisition terminal body;

[0048] The first transparent transmission module is further used to forward the quantum key supplement file to the quantum security module.

[0049] The second transparent transmission module is mainly responsible for transmitting quantum key supplement requests between the quantum security module and the communication module. When the quantum security module finds that the key reserve is insufficient, it will generate a quantum key supplement request, which is forwarded to the communication module through the second transparent transmission module.

[0050] The second transparent transmission module acts as a relay. After receiving the request from the quantum security module, it does not perform any data processing and directly passes it to the communication module to ensure the timeliness and accuracy of the request.

[0051] After receiving the quantum key supplement request, the communication module is responsible for sending the request to the quantum key generation end and waiting to receive the quantum key supplement file. Once the supplement file is received, the communication module will transmit it to the dedicated transformer acquisition terminal.

[0052] In addition to the previous data forwarding function, the first transparent transmission module is also responsible for forwarding the received quantum key supplementary file to the quantum security module.

[0053] After receiving the quantum key supplement file from the dedicated acquisition terminal, the first transparent transmission module also does not process the data and directly forwards it to the quantum security module. This process ensures the timely delivery of the key file and maintains the integrity of the file.

[0054] Through the cooperation of the second transparent transmission module and the first transparent transmission module, the timely sending of quantum key supplement requests and the secure reception of quantum key supplement files are realized, ensuring the continuity and stability of quantum secure communication.

[0055] The first transparent transmission module and the second transparent transmission module jointly build an efficient data transmission channel. The second transparent transmission module is responsible for quickly transmitting the key supplement request of the quantum security module to the communication module, while the first transparent transmission module ensures that the quantum key supplement file received from the communication module can be quickly and accurately delivered to the quantum security module.

[0056] Since the two transparent transmission modules do not process data but simply forward data, the risk of data tampering is reduced. At the same time, with the help of quantum encryption technology, the security of the entire data transmission process has been greatly improved. This design not only protects the confidentiality of the data, but also ensures the integrity and authenticity of the data.

[0057] Specifically, the communication module establishes a communication connection with the acquisition system in a wired and / or wireless manner.

[0058] Among them, wired communication:

[0059] The communication module provides a standard wired interface, such as an RJ45 Ethernet port or a USB port, for direct connection to the acquisition system via a cable.

[0060] Adopt standard network communication protocols, such as TCP / IP, to ensure the stability and compatibility of data transmission.

[0061] Wireless Communication:

[0062] The communication module integrates wireless communication functions and supports wireless communication technologies such as Wi-Fi, 4G / 5G, and Zigbee. The appropriate wireless communication technology can be selected according to the actual application scenario.

[0063] Wireless communication is convenient for use in situations where wiring is difficult or the acquisition system needs to be moved, thus improving the flexibility and mobility of the system.

[0064] The principle of wired communication is mainly based on the transmission of electrical signals, and the stability and high speed of data transmission are ensured through physical cable connections. The principle of wireless communication is to use electromagnetic waves to transmit data in space, getting rid of the constraints of cables and achieving more flexible data exchange.

[0065] The quantum key supplementary file of the quantum key generation end is generated by a quantum random number generator. For example, a single-photon-based quantum random number generator and a quantum random number generator based on quantum entanglement. Both types of quantum random number generators use the basic principles of quantum mechanics to ensure the authenticity and unpredictability of the generated random numbers.

[0066] like Figure 6 As shown, in the above scheme, the data forwarding method of the first transparent transmission module includes:

[0067] S101: receiving quantum secure data, wherein the quantum secure data includes a specific tag and destination address information, wherein the specific tag includes information for distinguishing different types of data;

[0068] S102: parsing the specific tag to determine the destination of the data;

[0069] S103: According to the determined destination, the data is forwarded to the corresponding processing end, where the processing end includes: a quantum security module, a communication module, and a processing module of the dedicated transformer acquisition terminal body.

[0070] For example, a specific tag may contain information used to distinguish different types of data, such as "power data", "temperature data", etc.

[0071] Forwarding data according to the destination: The first transparent transmission module forwards the data to the corresponding processing end according to the parsed destination. For example, if the destination of the data is the quantum security module, the first transparent transmission module forwards the data to the quantum security module for processing.

[0072] In order to improve the processing speed, the tag can be encoded into a fixed-length binary format, which can reduce the processing time required for parsing. For example, use one byte to represent the data type. At the same time, a hash table is used to store the mapping relationship between the tag and the corresponding processing module. When the data is received, the corresponding processing module can be directly found through the hash table, thereby reducing the search time. Or use FPGA or AS IC to implement hardware acceleration of tag parsing. These hardware can process multiple tags in parallel, thereby improving the parsing speed.

[0073] like Figure 7 As shown, the quantum key supplement method of the above quantum security module includes:

[0074] S201: The quantum security module generates a quantum key supplement request and sends it to the second transparent transmission module;

[0075] S202: The second transparent transmission module forwards the received quantum key supplement request to the communication module;

[0076] S203: Sending a quantum key supplement request to the quantum key generation end through the communication module;

[0077] S204: The communication module receives a quantum key supplementary file from the quantum key generation end;

[0078] S205: Transmitting the received quantum key supplementary file to the first transparent transmission module of the dedicated transformer acquisition terminal body through the communication module;

[0079] S206: Forward the quantum key supplement file to the quantum security module through the first transparent transmission module.

[0080] like Figure 3 As shown, in the specific process:

[0081] 1. Quantum Security Module generates a supplementary request for quantum key

[0082] When the quantum security module detects that the current quantum key reserve is insufficient, it will automatically trigger the generation of a quantum key supplement request.

[0083] The request contains key information such as the identity of the quantum security module, the number and type of keys required, etc.

[0084] Suppose a quantum security module is responsible for protecting the communications of a smart grid system. When it finds that the key reserve is below a preset threshold, it automatically generates a request containing its identity and a request to supplement 100 new quantum keys.

[0085] 2. Send the request to the second transparent transmission module and forward it to the communication module

[0086] The quantum security module sends the generated key supplement request to the second transparent transmission module.

[0087] After receiving the request, the second transparent transmission module will perform simple verification and formatting, and then forward it to the communication module.

[0088] Among them, after the second transparent transmission module receives the request from the quantum security module, it will check the integrity and validity of the request, and then forward it to the communication module responsible for external communication.

[0089] 3. Send a quantum key supplement request to the quantum key generation end and receive the supplement file. The communication module sends the request to the remote quantum key generation end.

[0090] After receiving the request, the quantum key generation end generates the corresponding number of new quantum keys according to the content of the request and packages them into a quantum key supplement file. The generation end sends the supplement file back to the communication module. The communication module sends the request to a remote, highly secure quantum key generation service.

[0091] 4. Transmit the quantum key supplementary file to the first transparent transmission module and forward it to the quantum security module

[0092] After receiving the quantum key supplement file, the communication module will send it to the first transparent transmission module through the internal network. After receiving the file, the first transparent transmission module will perform necessary verification and decryption operations, and then forward it to the quantum security module.

[0093] After the quantum security module receives the new key, it adds it to the key reserve for use in subsequent encrypted communications.

[0094] Example 3: Figure 5 As shown, in a specific structure, the quantum security module further includes:

[0095] An encryption and decryption processing unit, used to perform quantum encryption and decryption processing on data according to a quantum encryption and decryption algorithm;

[0096] Exemplarily, the encryption and decryption method of the encryption and decryption processing unit specifically includes:

[0097] Encryption process:

[0098] 1. Prepare data to be encrypted

[0099] Convert the data to be encrypted into binary form, i.e. bit stream.

[0100] Ensure the integrity and accuracy of data for subsequent encryption operations.

[0101] 2. XOR encryption

[0102] Align the quantum random number key with the bit stream of the data to be encrypted.

[0103] XOR each bit of data: XOR each bit of the key with the corresponding bit of the data. If the key bit and the data bit are the same, the result is 0; if they are different, the result is 1.

[0104] Through XOR operation, the original data is obfuscated to generate an encrypted data bit stream.

[0105] Decryption process:

[0106] After the recipient receives the encrypted data, it decrypts it using the same quantum random number key as used in the encryption process.

[0107] Perform XOR decryption on the encrypted data: Use each bit of the key again to perform XOR operation with the corresponding bit of the encrypted data to restore the original data.

[0108] After decryption is completed, the receiver can obtain the plaintext information that is exactly the same as the original data.

[0109] In this way, using quantum random numbers as keys for XOR encryption can ensure data security and privacy. Due to the unpredictability and true randomness of quantum random numbers, the key has extremely high security strength. At the same time, the XOR encryption method is simple and easy to use, and the encryption and decryption speed is fast, which is suitable for various scenarios that require data encryption.

[0110] A quantum key management unit, used to request and update quantum keys;

[0111] A memory unit used to store quantum keys for use in encryption and decryption processes.

[0112] When a new quantum key is needed, the quantum key management unit sends a request to the key generation center. The request may contain the required key length, key type or other specific requirements.

[0113] When updating quantum keys, either regularly or under certain conditions, the quantum key management unit triggers the key update process. The update can be fully automatic or manually triggered based on certain policies or security requirements. During the update process, the old key will be securely destroyed or archived to ensure that it will not be misused.

[0114] The storage unit stores quantum keys in a highly secure manner, such as using a hardware security module (HSM) or an encrypted file system. The keys are encrypted when stored to ensure that they cannot be easily leaked even if the storage medium is illegally obtained.

[0115] When data needs to be encrypted or decrypted, the relevant application or service will request the quantum key from the storage unit. After verifying the identity and authority of the requester, the storage unit will securely provide the key. During the encryption or decryption process, the key will only exist briefly in secure memory and will be cleared immediately after use to reduce the risk of leakage.

[0116] The technical means disclosed in the scheme of the present invention are not limited to the technical means disclosed in the above-mentioned implementation mode, but also include technical schemes composed of any combination of the above-mentioned technical features. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications are also regarded as the protection scope of the present invention.

Claims

1. A quantum security special variable acquisition terminal, the special variable acquisition terminal includes a communication module, the communication module is used to establish a communication connection with a special variable acquisition system, characterized in that: The dedicated variable acquisition terminal further includes a quantum security module, the quantum security module is communicatively connected to the control interface of the dedicated variable acquisition terminal, and the quantum security module and the communication module establish a quantum security data transmission channel through the dedicated variable acquisition terminal body; The quantum secure data transmission channel is used to send and receive data encrypted by quantum encryption; The dedicated variable acquisition terminal body includes a first transparent transmission module, which is used to forward quantum security data to a quantum security module or a communication module according to the destination of the data; The quantum security module is used to encrypt the collected data generated by the dedicated acquisition terminal body in a quantum encryption manner to form quantum security data, and send it to the dedicated acquisition terminal body, and decrypt the received quantum security data, and then send the decrypted plaintext data to the dedicated acquisition terminal body; The dedicated variable acquisition terminal body also includes a second transparent transmission module, which is used to forward the quantum key supplement request from the quantum security module to the communication module; The communication module is further used to send a quantum key supplement request to the quantum key generation end, and transmit the received quantum key supplement file to the dedicated transformer acquisition terminal body; The first transparent transmission module is further used to forward the quantum key supplement file to the quantum security module; The quantum key supplement method of the quantum security module includes: The quantum security module generates a quantum key supplement request and sends it to the second transparent transmission module; After receiving the request from the quantum security module, the second transparent transmission module checks the integrity and validity of the request; The second transparent transmission module forwards the received quantum key supplement request to the communication module; Sending a quantum key supplement request to a quantum key generation end through a communication module; The communication module receives the quantum key supplementary file from the quantum key generation end; The received quantum key supplementary file is transmitted to the first transparent transmission module of the dedicated transformer acquisition terminal through the communication module; after receiving the quantum key supplementary file, the communication module sends it to the first transparent transmission module through the internal network; after receiving the file, the first transparent transmission module will perform verification and decryption operations, and then forward it to the quantum security module; The quantum key supplement file is forwarded to the quantum security module through the first transparent transmission module.

2. The terminal according to claim 1, characterized in that The communication module establishes a communication connection with the acquisition system in a wired and / or wireless manner.

3. The terminal according to claim 1, characterized in that: The quantum key supplement file of the quantum key generation end is generated by a quantum random number generator.

4. The terminal according to any one of claims 1 to 3, characterized in that: The quantum security module further comprises: An encryption and decryption processing unit, used to perform quantum encryption and decryption processing on data according to a quantum encryption and decryption algorithm; A quantum key management unit, used to request and update quantum keys; A memory unit used to store quantum keys for use in encryption and decryption processes.

5. The terminal according to claim 1, characterized in that: The data forwarding method of the first transparent transmission module includes: Receiving quantum secure data, wherein the quantum secure data includes a specific tag and destination address information, wherein the specific tag includes information for distinguishing different types of data; Parsing the specific tag to determine the destination of the data; According to the determined destination, the data is forwarded to the corresponding processing end, and the processing end includes: Quantum security module, communication module and processing module of the dedicated acquisition terminal body.

Images