A method, device, and storage medium for preventing data tampering in power supply enterprises.

Abstract

This invention discloses a method, device, and storage medium for preventing data tampering in power supply enterprises. It utilizes a network of relay stations and clients to form a data circulation network for the power supply enterprise. Simultaneously, the relay stations perform encryption and decryption services on the data, and multiple clients store the encrypted text, achieving decentralized data encryption processing. This improves data security while effectively solving the problem of data tampering, thus better meeting the data circulation needs of power supply enterprises. This invention can be widely applied in the field of power supply enterprise data processing technology.

Description

Technical Field

[0001] This invention relates to the field of data processing technology for power supply enterprises, and in particular to a method, device, and storage medium for preventing data tampering in power supply enterprises. Background Technology

[0002] Currently, power supply companies have a large number of distribution substations spread over a wide area. During operation, data exchange and flow frequently occur within each substation and between substations. Power supply company data needs to undergo multiple operations and forwardings, posing numerous risks of fraud. Power supply companies have numerous production and business processes, including metering, sampling, sample preparation, and testing. These involve diverse types of front-end equipment, which are deployed in a dispersed manner. Related data are often independent and have significantly different architectures. Therefore, ETL (Extract-Transform-Load, data warehouse technology) programs are needed to integrate the data sources of these separate basic business processes and ultimately store them in a formal data warehouse, providing a foundation for subsequent data analysis and business control. Regarding the security of power supply company data, a common technical solution is to pre-define encryption algorithms and keys during the deployment phase of the front-end equipment. After the raw data is generated, it is encrypted, and the encrypted result is saved along with the raw data to the local data warehouse. Verification is performed during the data extraction process of the ETL program.

[0003] To address the aforementioned technical issues, the first existing technical solution involves acquiring the field to be encrypted from power plant fuel data, performing multi-layered nested encryption on this field to obtain ciphertext, acquiring the process parameters for multi-layered nested encryption, and generating an identification code based on these parameters. It then receives the ciphertext and identification code from a database server, obtains the process parameters for multi-layered nested encryption of the ciphertext based on the identification code, decrypts the ciphertext based on these parameters, and sends the decryption result to the database server. The decryption result triggers the database server to verify whether the power plant fuel data has been tampered with. This effectively prevents personnel from cracking the preset encryption algorithm and tampering with or forging data, while reducing reliance on front-end equipment control programs and enhancing adaptability to complex business environments.

[0004] Furthermore, the second existing technical solution connects the data acquisition device to the target device, collects remote data through a physical interface, and encrypts the relevant data to form fingerprint data, data private key, and data ciphertext, which are then transmitted to the cloud platform data center storage module for storage. When users use the relevant data, they can perform online data comparison to prevent human tampering with the real data. Once the data acquisition device and the target device are bound, any physical disconnection requires manual authorization before it can be used again. If data modification occurs during the data acquisition process, the existing data acquisition process will be canceled, and the original version of the target data on the target device will be re-uploaded, thereby solving the problems of unauthorized tampering with detection data and data fraud.

[0005] However, existing technical solutions still rely solely on encryption algorithms and keys to solve technical problems. This allows individuals to crack encryption rules through long-term observation of data, thereby bypassing protection and tampering with the data. Alternatively, they can use similar plaintext and ciphertext fragments to splice and reassemble the data, posing significant security risks. Summary of the Invention

[0006] In order to at least partially solve one of the technical problems existing in the prior art, the purpose of this invention is to provide a method, device and storage medium for preventing data tampering in power supply enterprises.

[0007] The first technical solution adopted in this invention is:

[0008] A method for preventing data tampering in power supply companies includes the following steps:

[0009] Constructing a data circulation network: Divide the data circulation area of ​​the power supply enterprise into multiple data circulation areas, build relay stations in the data circulation areas, and match multiple clients with each relay station;

[0010] Data generation and recording: The client can automatically record the operation process and results of the power supply company or user on the client, forming corresponding data; after completing the operation, the client encodes the formed data to obtain encoded data; the client transmits the encoded data to the matching relay station through the network, and the matching relay station transmits it to other relay stations;

[0011] Data tamper-proof encryption: After receiving the encoded data, all relay stations use their own loaded encryption algorithm to encrypt the encoded data, forming encrypted text; the encrypted text is sent to the client through the relay stations, and the client stores the received encrypted text;

[0012] Data access and verification: Clients can proactively send access request information to their matched relay stations. The relay station receiving the request is designated as a Level 1 relay station, and the others are designated as Level 2 relay stations. The Level 1 relay station automatically verifies the client's permissions and interacts with all Level 2 relay stations regarding the access request information. The Level 2 relay stations search for corresponding encrypted text among the matched clients based on the access request information. The Level 2 relay stations decrypt and compare the multiple encrypted texts found and output relay station encoded data. The Level 1 relay station receives the relay station encoded data and compares and analyzes all the relay station encoded data, selecting the relay station encoded data with the highest repetition rate as the access result and sending it to the client that proactively sent the access request information.

[0013] Display of access results: After receiving the access results from the primary relay station, the client displays them in read-only mode and saves the access results by downloading or printing them.

[0014] Furthermore, each relay station has a unique digital number, and power supply companies or users can log in to the client through a preset login method;

[0015] The preset login methods include: entering a password, swiping a card, fingerprint recognition, or facial recognition. The client is a program installed in a self-service terminal, electricity meter, or power equipment.

[0016] Furthermore, in the steps of generating and recording the data, the operation process and operation results of the power supply company or user on the client automatically recorded by the client include: the user's self-service payment process and payment results, the electricity consumption query process and electricity consumption, the power equipment maintenance process and the power equipment operating status;

[0017] Encoding the generated data refers to associating client information and the characteristic information generated by the client during operation with the data.

[0018] Furthermore, in the step of tamper-proof encryption of the data, each relay station loads a different encryption algorithm. Each relay station uses its own unique encryption algorithm to encrypt the encoded data and form encrypted text, which is then sent to multiple clients that are matched with the relay station.

[0019] Furthermore, in the steps of accessing and verifying the data, the access request information includes the client's code, operation code, operation date, and authorization key;

[0020] Upon receiving an access request, the relay station automatically upgrades to a Level 1 relay station. The Level 1 relay station gains master control privileges and can monitor and remotely control the response process of the Level 2 relay station based on these privileges. The Level 1 relay station authenticates the access request and sends the authenticated access request to the Level 2 relay station. The Level 2 relay station can only respond to the authenticated access request.

[0021] Furthermore, the master control permissions are set in a dormant mode within the relay station, and the master control permissions set in all relay stations will be updated synchronously.

[0022] Furthermore, in the step of displaying the access results, the client deletes the access results that have already been displayed after completing the display.

[0023] Furthermore, the relay station is a macro base station.

[0024] The second technical solution adopted in this invention is:

[0025] A data anti-tampering circulation device for power supply companies, comprising:

[0026] At least one processor;

[0027] At least one memory for storing at least one program;

[0028] When the at least one program is executed by the at least one processor, the at least one processor implements the method described above.

[0029] The third technical solution adopted in this invention is:

[0030] A computer-readable storage medium storing a processor-executable program, which, when executed by a processor, performs the method described above.

[0031] The beneficial effects of this invention include:

[0032] (1) This invention utilizes relay stations to encode and encrypt / decrypt data generated during the operation of the power supply system. Similarly, multiple independent clients are used to store the encrypted encoded data, thereby achieving the effect of independent data storage and encryption / decryption services, effectively reducing the probability of data leakage and improving the security of power supply system operation data.

[0033] (2) The present invention uses encrypted text stored in multiple clients as the stub of power supply system operation data. During the query and retrieval process, the data stubs stored in most clients are used as the basis, which effectively isolates the impact of tampered data and abnormal data on the results, improves the fault tolerance performance and accuracy of power supply system operation data, and can better meet the work needs of power supply companies and users.

[0034] (3) The present invention uses multiple relay stations and multiple encryption methods to generate encrypted text for the same encoded data, which increases the difficulty of cracking the encrypted text and greatly enhances the variability of the encryption rules. Compared with the prior art, it can effectively prevent relevant practitioners from cracking the preset encryption algorithm and tampering with and forging data. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following description is provided with accompanying drawings of the relevant technical solutions in the embodiments of the present invention or the prior art. It should be understood that the accompanying drawings described below are only for the purpose of clearly illustrating some embodiments of the technical solutions of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This is a flowchart of a data anti-tampering circulation method for power supply enterprises according to an embodiment of the present invention;

[0037] Figure 2 This is a schematic diagram of data flow in a data anti-tampering circulation method for power supply enterprises according to an embodiment of the present invention. Detailed Implementation

[0038] The embodiments of the present invention are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and should not be construed as limiting the present invention. The step numbers in the following embodiments are set only for ease of explanation, and there is no limitation on the order between the steps. The execution order of each step in the embodiments can be adaptively adjusted according to the understanding of those skilled in the art.

[0039] In the description of this invention, it should be understood that the orientation descriptions, such as up, down, front, back, left, right, etc., are based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing this invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limiting this invention.

[0040] In the description of this invention, "several" means one or more, "multiple" means two or more, "greater than," "less than," and "exceeding" are understood to exclude the stated number, while "above," "below," and "within" are understood to include the stated number. If "first" or "second" is used, it is only for distinguishing technical features and should not be construed as indicating or implying relative importance, or implicitly indicating the number of indicated technical features, or implicitly indicating the order of the indicated technical features. Furthermore, "and / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, or B alone. The character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0041] In the description of this invention, unless otherwise explicitly defined, terms such as "set up," "install," and "connect" should be interpreted broadly, and those skilled in the art can reasonably determine the specific meaning of the above terms in this invention in conjunction with the specific content of the technical solution.

[0042] like Figure 1 and Figure 2 As shown in the figure, this embodiment provides a method for preventing data tampering in power supply companies, including the following steps:

[0043] S1. Construct a data circulation network.

[0044] Multiple data circulation zones are defined based on the scope of data circulation for power supply companies. For example, a province might be designated as the data circulation scope for a power supply company, and the area covered by each city could be considered a separate data circulation zone. Relay stations are constructed within each data circulation zone, with each relay station matched to multiple clients and possessing a unique numerical identifier. Each client is bound to either the information of a power supply company or a user, allowing either party to log in using a pre-defined login method.

[0045] Specifically, the functions of a relay station include: receiving access request information from clients and responding accordingly; receiving data transmitted by clients and encrypting or decrypting the data; and automatically sending encrypted data to clients in bulk. The number of relay stations can be one or multiple, and the number and distribution of relay stations should meet the needs of power supply companies or users to interact with relay stations via the network.

[0046] As an optional implementation, the methods for power supply companies or users to log in to the client in step S1 include: entering a password, swiping a card, fingerprint recognition, or facial recognition. The client is a program installed in a self-service terminal, electricity meter, or power equipment.

[0047] S2, Data generation and recording.

[0048] The client can automatically record the operation process and results of the power supply company or user on the client and form corresponding data. After completing the operation, the client encodes the formed data and obtains encoded data. The client transmits the encoded data to the matching relay station through the network, and then transmits it to other relay stations through the matching relay station.

[0049] As an optional implementation, step S2, where the client automatically records the operation process and results, includes: the user's self-service payment process and payment results, the electricity consumption query process and electricity consumption, and the power equipment maintenance process and power equipment operating status. Encoding the generated data refers to associating the client's information and the characteristic information generated by the client during the operation with the data. The client's information refers to the client's code; each client can only have one code. The characteristic information generated by the client during the operation includes the operation code and the operation date. The operation code corresponds to the type of operation; one operation code corresponds to one type of operation. The operation date is the time when the operation occurred.

[0050] S3. Data tamper-proof encryption.

[0051] All relay stations encrypt the received encoded data using their own built-in encryption algorithm to form encrypted text. The encrypted text is then sent to the client via a relay group, and the client stores the received encrypted text.

[0052] As an optional implementation, each relay station loads a different encryption algorithm in step S3. Each relay station uses its own unique encryption algorithm to encrypt the encoded data and form encrypted text, which is then sent to multiple clients that are matched with the relay station.

[0053] S4. Data access and verification.

[0054] A client can send an access request to its matched relay station. The relay station receiving the request is designated as a primary relay station, and the others are designated as secondary relay stations. Primary relay stations automatically verify client permissions. If a client's permissions do not meet the access requirements, the primary relay station rejects the access request and provides a text message. When a client's permissions meet the access requirements, the primary relay station exchanges the access request information among all secondary relay stations. Each secondary relay station searches for the corresponding encrypted text among its matched clients based on the access request information. The secondary relay station decrypts and compares the multiple encrypted texts found. If the multiple encoded data obtained after decryption by the secondary relay station are identical, the secondary relay station integrates the multiple encoded data and outputs the relay station's encoded data.

[0055] It should be noted that the unified integration method involves selecting one from multiple identical encoded data sets as the relay station's encoded data for output. If any abnormal encoded data appears among the multiple encoded data sets decrypted by the secondary relay station, the abnormal encoded data is deleted, and the remaining identical encoded data is uniformly integrated before outputting the relay station's encoded data. Furthermore, abnormal encoded data refers to encoded data that is significantly different from other encoded data. If several abnormal encoded data sets appear among the multiple encoded data sets decrypted by the secondary relay station, and the number of these abnormal encoded data sets exceeds one-third of the total number of encoded data sets, then the secondary relay station will not output relay station encoded data. The primary relay station receives all the relay station encoded data output from the secondary relay stations, compares and analyzes all the relay station encoded data, selects the relay station encoded data with the highest repetition rate as the access result, and sends the access result to the client.

[0056] As an optional implementation, the access request information in step S4 includes the client's code, operation code, operation date, and permission key.

[0057] As an optional implementation, the initial permissions of relay stations are all set to level two relay stations. Level two relay stations can only be set with ordinary permissions. Level two relay stations can only passively send, receive, and search data. After receiving an access request, the relay station automatically upgrades to a level one relay station, which gains master control permissions. When master control permissions are active, they can suppress ordinary permissions. After completing the data access and verification process, master control permissions automatically enter a dormant state and release the suppression of ordinary permissions. At this time, ordinary permissions take effect, and the level one relay station will be downgraded back to a level two relay station. The level one relay station can monitor and remotely control the response process of the level two relay station according to its master control permissions. The primary relay station can only review the client's permissions and make a judgment after obtaining authorization from the master control. When the client's permissions are approved, the primary relay station authenticates the access request information and sends the authenticated access request information to the secondary relay station. The authentication process of the primary relay station involves adding authentication credentials to the access request information. The authentication credentials are independent keys or codes generated by the secondary relay station when upgrading from the primary relay station. The secondary relay station can only respond to the authenticated access request information. Under the monitoring and remote control of the primary relay station, the secondary relay station completes the process of searching, decrypting, and outputting based on the authenticated access request information.

[0058] It should be noted that when both relay stations are upgraded to Level 1 relay stations, the two Level 1 relay stations will operate independently and will not engage in any data interaction. The master control permissions of the two Level 1 relay stations will take effect sequentially according to their unique numerical serial numbers. When the numerical serial number of one Level 1 relay station is greater than that of the other, the master control permission of the first Level 1 relay station will take effect first. The master control permission of the other Level 1 relay station will only take effect after the data access and verification process of the first Level 1 relay station is completed. The master control permission is set in a dormant state within the relay station. When a relay station is upgraded to Level 1, the master control permission is awakened and suppresses ordinary permissions, which will become invalid. When the master control permission is dormant, the ordinary permissions will take effect.

[0059] S5. Display of access results.

[0060] After receiving the access result from the primary relay station, the client displays it in read-only mode and saves the access result by downloading or printing it.

[0061] As an optional implementation, in step S5, the client will delete the displayed results after completing the display of the access results, so as to avoid the access results from conflicting with the encrypted text stored by the client and affecting the relay station's search for the encrypted text.

[0062] As an optional implementation, the master control permissions set in all relay stations will be updated synchronously. The relay station is a macro base station, which can execute the above process steps.

[0063] In some implementations of this application, the encryption algorithm loaded in the relay station includes two parts: a master key and a temporary key. The master key is a fixed key, and there is a one-to-one correspondence between the master key and the relay station. The temporary key is generated according to the operation sequence. The relay station has a backup list of temporary keys. Each time the relay station performs encryption, it randomly selects a temporary key. The relay station combines the selected temporary key with the master key and encrypts the encoded data to generate encrypted text.

[0064] It's important to note that there are two ways to generate master and temporary keys: using random numbers or passwords. Random numbers must be unpredictable; generally, a pseudo-random number generator is needed. We can use `java.security.SecureRandom` to generate password-secure random numbers. Passwords are passwords that humans can remember. To ensure that the key generated from a password cannot be brute-forced, the password needs to be salted. Simply put, this involves adding a random number to the password and then hashing the resulting number; the result can then be used as the master or temporary key. To ensure key security, we need to update the key periodically. A common practice is to use the current key as a baseline and calculate a new key using a specific algorithm. For example, if the base value is N bytes, when calculating the new key, first generate a set of random numbers, then use this random number to perform a modulo operation on N, and the result is used as the (N+1)th character of the new key. The first N characters of the new key use the base value in reverse order, and then use this random number to perform a modulo operation on the (N+2)th character of the new key, and the result is used as the (N+2)th character of the new key. Then use this random number to perform a modulo operation on the (N+2)th character of the new key, and the result is used as the (N+3)th character of the new key. Repeat the above steps until the last character of the new key is obtained. The total number of characters in the new key can be set according to the needs. The more characters, the harder it is to crack.

[0065] A temporary key list can be used to encrypt and save temporary keys using a key KEK. The temporary keys within the list don't require special security considerations, as even if stolen, the original keys cannot be recovered. We only need to save the keys that encrypt these keys.

[0066] This embodiment also provides a data anti-tampering circulation device for power supply enterprises, including:

[0067] At least one processor;

[0068] At least one memory for storing at least one program;

[0069] When the at least one program is executed by the at least one processor, the at least one processor implements Figure 1 The method shown.

[0070] This embodiment of the power supply enterprise data anti-tampering circulation device can execute the power supply enterprise data anti-tampering circulation method provided in the method embodiment of the present invention, and can execute any combination of implementation steps of the method embodiment, and has the corresponding functions and beneficial effects of the method.

[0071] This application also discloses a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform... Figure 1 The method shown.

[0072] This embodiment also provides a storage medium storing instructions or programs that can execute the data anti-tampering circulation method for power supply enterprises provided in the method embodiment of the present invention. When the instructions or programs are run, any combination of implementation steps of the method embodiment can be executed, and the method has the corresponding functions and beneficial effects.

[0073] In some alternative embodiments, the functions / operations mentioned in the block diagrams may not occur in the order shown in the operation diagrams. For example, depending on the functions / operations involved, two consecutively shown blocks may actually be executed substantially simultaneously, or the blocks may sometimes be executed in reverse order. Furthermore, the embodiments presented and described in the flowcharts of this invention are provided by way of example to provide a more comprehensive understanding of the technology. The disclosed methods are not limited to the operations and logic flows presented herein. Alternative embodiments are contemplated in which the order of various operations is altered and sub-operations described as part of a larger operation are executed independently.

[0074] Furthermore, although the invention has been described in the context of functional modules, it should be understood that, unless otherwise stated, one or more of the described functions and / or features may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the invention. Rather, given the properties, functions, and internal relationships of the various functional modules in the apparatus disclosed herein, the actual implementation of the module will be understood within the scope of conventional skill of an engineer. Therefore, those skilled in the art can implement the invention as set forth in the claims using ordinary techniques without excessive experimentation. It is also understood that the specific concepts disclosed are merely illustrative and not intended to limit the scope of the invention, which is determined by the full scope of the appended claims and their equivalents.

[0075] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0076] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0077] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, since the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0078] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0079] In the foregoing description of this specification, references to terms such as "one embodiment," "another embodiment," or "some embodiments" indicate that a specific feature, structure, material, or characteristic described in connection with an embodiment or example is included in at least one embodiment or example of the present invention. In this specification, illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0080] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

[0081] The above is a detailed description of the preferred embodiments of the present invention. However, the present invention is not limited to the above embodiments. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention. All such equivalent modifications or substitutions are included within the scope defined by the claims of this application.

Claims

1. A method for preventing data tampering during power supply enterprise circulation, characterized in that, Includes the following steps: Constructing a data circulation network: Divide the data circulation area of ​​the power supply enterprise into multiple data circulation areas, build relay stations in the data circulation areas, and match multiple clients with each relay station; Data generation and recording: The client automatically records the operation process and results of the power supply company or user on the client, forming corresponding data; After completing the operation, the client encodes the resulting data to obtain encoded data; the client then transmits the encoded data through the network to the matching relay station, which in turn transmits it to other relay stations. Data tamper-proof encryption: After receiving the encoded data, all relay stations use their own loaded encryption algorithm to encrypt the encoded data, forming encrypted text; the encrypted text is sent to the client through the relay stations, and the client stores the received encrypted text; Data access and verification: The client actively sends an access request to its matched relay station. The relay station receiving the request is designated as the primary relay station, and the others are designated as secondary relay stations. The primary relay station automatically verifies the client's permissions and interacts with all secondary relay stations regarding the access request. The secondary relay stations search for corresponding encrypted text among the matched clients based on the access request. The secondary relay stations decrypt and compare the multiple encrypted texts found and output relay station encoded data. The primary relay station receives the relay station encoded data and compares and analyzes all the relay station encoded data, selecting the relay station encoded data with the highest repetition rate as the access result and sending it to the client that actively sent the access request. Display of access results: After receiving the access results from the primary relay station, the client displays them in read-only mode and saves the access results by downloading or printing them.

2. The method for preventing data tampering in power supply enterprises according to claim 1, characterized in that, Each relay station has a unique numerical identifier, and power supply companies or users can log in to the client through a preset login method; The preset login methods include: entering a password, swiping a card, fingerprint recognition, or facial recognition.

3. The method for preventing data tampering in power supply enterprises according to claim 1, characterized in that, In the steps of generating and recording the data, the operation process and operation results of the power supply company or user on the client automatically recorded by the client include: the user's self-service payment process and payment results, the electricity consumption query process and electricity consumption, the power equipment maintenance process and the power equipment operating status; Encoding the generated data refers to associating client information and the characteristic information generated by the client during operation with the data.

4. The method for preventing data tampering in power supply enterprises according to claim 1, characterized in that, In the data anti-tampering encryption step, each relay station loads a different encryption algorithm. Each relay station uses its own unique encryption algorithm to encrypt the encoded data and form encrypted text, which is then sent to multiple clients that are matched with the relay station.

5. A method for preventing data tampering in power supply enterprises according to claim 1, characterized in that, In the steps of accessing and verifying the data, the access request information includes the client's code, operation code, operation date, and permission key; Upon receiving an access request, the relay station automatically upgrades to a Level 1 relay station. The Level 1 relay station gains master control privileges and can monitor and remotely control the response process of the Level 2 relay station based on these privileges. The Level 1 relay station authenticates the access request and sends the authenticated access request to the Level 2 relay station. The Level 2 relay station can only respond to the authenticated access request.

6. A method for preventing data tampering in power supply enterprises according to claim 5, characterized in that, The master control permissions are set in a dormant state within the relay station, and the master control permissions set in all relay stations will be updated synchronously.

7. A method for preventing data tampering in power supply enterprises according to claim 1, characterized in that, In the step of displaying the access results, the client deletes the access results that have already been displayed after completing the display.

8. A method for preventing data tampering in power supply enterprises according to any one of claims 1-7, characterized in that, The relay station is a macro base station.

9. A data anti-tampering circulation device for power supply enterprises, characterized in that, include: At least one processor; At least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements the method of any one of claims 1-8.

10. A computer-readable storage medium storing a processor-executable program, characterized in that, The processor-executable program, when executed by the processor, is used to perform the method as described in any one of claims 1-8.

Images