Multi-module interconnected scene fusion station area intelligent terminal

Abstract

The present invention provides a multi-module interconnected scene fusion station area intelligent terminal, which belongs to the field of Internet of Things technology and is used to ensure the data transmission efficiency in a large number or even a massive number of southern area device scenes. The station area intelligent terminal is provided with M types of communication modules, each of the M types of communication modules provides a corresponding communication mode, and there are M types of communication modes in total. The station area intelligent terminal is configured as follows: the station area intelligent terminal discovers multiple southbound devices; the station area intelligent terminal assigns the southbound devices that support the same communication mode in the multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices, and obtains N device groups, and the N device groups support N communication modes, and the N communication modes are provided by N communication modules in the M types of communication modules; the station area intelligent terminal performs data transmission with the N device groups in the N communication modes respectively.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a multi-module interconnected scene fusion area intelligent terminal. Background Art

[0002] Southbound devices, substation terminals and master stations are several important concepts in the field of the Internet of Things, and each of them has different functions and roles. Southbound devices: Southbound devices usually refer to intelligent devices on site, such as sensors, meters and other measurement and control devices. These devices are responsible for collecting data on site and transmitting these data to the upper system for processing and analysis. It is called "southbound" because in the system architecture diagram, these devices are usually located at the bottom of the system (equivalent to the south on the map). Substation terminal: The substation terminal is an intermediate layer device connecting the southbound device and the master station. It is mainly responsible for aggregating the data of the southbound devices and performing preliminary processing and aggregation. The substation terminal is also responsible for forwarding the aggregated data to the master station, and receiving and executing the commands and instructions issued by the master station. In the automation of the distribution network, the substation terminal plays a connecting role, ensuring that the data of the field equipment can be efficiently transmitted to the master station and executing the control strategy of the master station. Master station: The master station is the core control center in the automation of the entire system. It is responsible for collecting and managing data from various substation terminals and southbound devices, and conducting comprehensive analysis and decision-making. The master station can realize functions such as load management, fault detection and recovery, and optimized operation through data analysis and processing.

[0003] However, for multi-device scenarios, such as a large number or even a massive number of South Zone devices, how to ensure data transmission efficiency is a current research issue. Summary of the invention

[0004] The embodiment of the present invention provides a multi-module interconnected scenario-integrated station area intelligent terminal for packet transmission to improve transmission efficiency, thereby ensuring data transmission efficiency in a large number or even massive southern area device scenario.

[0005] In order to achieve the above object, the present invention adopts the following technical scheme:

[0006] In a first aspect, a multi-module interconnected scenario-integrated substation smart terminal is provided, wherein the substation smart terminal is provided with M communication modules, where M is an integer greater than 1, and each of the M communication modules provides a corresponding communication mode, and there are M communication modes in total. The substation smart terminal is configured as follows: the substation smart terminal discovers multiple southbound devices; the substation smart terminal assigns the southbound devices that support the same communication mode among the multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices, and obtains N device groups, where N is an integer greater than 1 and less than or equal to M, and the N device groups correspondingly support N communication modes, and the N communication modes are correspondingly provided by N communication modules among the M communication modules; the substation smart terminal transmits data with the N device groups respectively under the N communication modes.

[0007] Optionally, for the i-th communication module among M types of communication modules, the i-th communication module supports the i-th communication mode, and the substation intelligent terminal discovers multiple southbound devices, including: the substation intelligent terminal broadcasts a device discovery message #i in the i-th communication mode through the i-th communication module, and the device discovery message #i indicates that the device supporting the i-th communication mode needs to return a response; within the timeout time #i after broadcasting the device discovery message #i, if the substation intelligent terminal receives the device discovery response message #i returned by the southbound device #i in the i-th communication mode to the device discovery message #i, then the substation intelligent terminal determines that the southbound device #i is discovered; otherwise, after the timeout time #i after broadcasting the device discovery message #i, the substation intelligent terminal continues to broadcast a device discovery message #i+1 in the i+1 communication mode through the i+1-th communication module, and the device discovery message #i+1 indicates that the device supporting the i+1-th communication mode needs to return a response; when i traverses from 1 to M-1, the substation intelligent terminal determines that multiple southbound devices are discovered.

[0008] Optionally, for any southbound device among multiple southbound devices, the substation intelligent terminal determines that the southbound device supports the communication mode based on the communication mode used when receiving the device discovery response message returned by the southbound device; if the substation intelligent terminal receives the device discovery response message returned by the southbound device under at least two communication modes, the substation intelligent terminal determines that the southbound device supports at least two communication modes.

[0009] Optionally, in the process of assigning southbound devices that support the same communication mode among multiple southbound devices to the same device group according to the communication modes respectively supported by the multiple southbound devices, for any southbound device among the multiple southbound devices, if the southbound device supports at least two communication modes, then the southbound device is simultaneously assigned to at least two device groups corresponding to the at least two communication modes, that is, at least two device groups both include the southbound device.

[0010] Optionally, the substation intelligent terminal performs data transmission with N device groups under N communication modes respectively, including: the substation intelligent terminal assigns device groups that support the same security protection algorithm among the N device groups to the same device group set according to the security protection algorithms corresponding to the N communication modes, to obtain K device group sets, where K is an integer greater than or equal to 1; for the j-th device group set among the K device group sets, j is an integer traversing from 1 to K, the substation intelligent terminal uses a security protection algorithm supported by the j-th device group set, and performs secure data transmission with the j-th device group under the j-th communication mode corresponding to the j-th device group set.

[0011] Optionally, the intelligent terminal in the substation area uses a security protection algorithm supported by the j-th device group set to perform secure data transmission with the j-th device group in the j-th communication mode corresponding to the j-th device group set, including: when j=1, for the first device group set in the K device group sets, the first device group set supports security protection algorithm #1, and the first device group set includes L1 southbound devices, where L1 is an integer greater than 1: the intelligent terminal in the substation area sends the first freshness parameter R1 randomly generated by the intelligent terminal in the substation area to the L1 southbound devices respectively, to receive the second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R3 generated and returned by the L1 southbound devices based on the freshness parameter R1. L1 , a total of L1 second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L1 southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L1 southbound devices, and so on. L1It is the freshness parameter R generated by the L1th southbound device among the L1 southbound devices; the intelligent terminal in the substation uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 of the security protection algorithm #1 to obtain the transmission key #1, and the intelligent terminal in the substation sends the second freshness parameter R generated by each of the L1-1 southbound devices in the L1 southbound devices except the southbound device to each southbound device in the L1 southbound devices, so that each of the L1 southbound devices uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 to obtain the transmission key #1; the intelligent terminal in the substation and the L1 All southbound devices use transmission key #1 for secure data transmission; when j=2, for the second device group set in the K device group sets, the second device group set also supports security protection algorithm #1, and the second device group set includes L2 southbound devices, where L2 is an integer greater than 1: the substation intelligent terminal sends the first freshness parameter R2 generated by the substation intelligent terminal based on the L1 second freshness parameter R to the L2 southbound devices, respectively, to receive the third freshness parameter R1, the third freshness parameter R2, and the third freshness parameter R1 generated and returned by the L2 southbound devices based on the freshness parameter R2, respectively. L2 , a total of L2 third freshness parameters R are obtained, where the third freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L2 southbound devices, the third freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L2 southbound devices, and so on. L2 It is the freshness parameter R generated by the L2th southbound device among the L2 southbound devices; the substation intelligent terminal uses the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2, and the substation intelligent terminal sends the third freshness parameters generated by the L2-1 southbound devices among the L2 southbound devices except the southbound device to each southbound device among the L2 southbound devices, so that the L2 southbound devices each use the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2; the substation intelligent terminal and the L2 southbound devices both use the transmission key #2 for secure data transmission; and so on, until j=K, for the Kth device group set among the K device group sets, the Kth device group set also supports the security protection algorithm #1, the Kth device group set includes LK southbound devices, LK is an integer greater than 1, and the substation intelligent terminal and the LK southbound devices both use the transmission key #K for secure data transmission.

[0012] Optionally, the intelligent terminal in the substation area is further configured as follows: the intelligent terminal in the substation area performs a hash operation on L1 second freshness parameters R to obtain a first freshness parameter R2.

[0013] Optionally, the intelligent terminal in the substation area performs data transmission with N device groups in N communication modes respectively, including: the intelligent terminal in the substation area uses the security protection algorithm supported by each of the N device groups to perform secure data transmission with the N device groups in N communication modes respectively.

[0014] Optionally, the intelligent terminal in the substation area uses the security protection algorithm supported by each of the N device groups to perform secure data transmission with the N device groups in N communication modes, including: for the j-th device group in the N device groups, j is an integer traversing from 1 to N, the j-th device group supports the security protection algorithm #j, the j-th device group includes Lj southbound devices, and Lj is an integer greater than 1; the intelligent terminal in the substation area sends the first freshness parameter R randomly generated by the intelligent terminal in the substation area to the Lj southbound devices respectively. j , to receive Lj southbound devices based on the freshness parameter R j The second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R Lj , a total of Lj second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the Lj southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the Lj southbound devices, and so on. Lj is the freshness parameter R generated by the Ljth southbound device among the Lj southbound devices; the first freshness parameter R is used by the intelligent terminal in the substation area. j The root key #j of the security protection algorithm #j is derived from the Lj second freshness parameters R to obtain the transmission key #j, and the intelligent terminal in the substation sends the second freshness parameters R generated by each of the Lj-1 southbound devices except the southbound device in the Lj southbound devices to each southbound device in the Lj southbound devices, so that each of the Lj southbound devices uses the first freshness parameter R j And Lj second freshness parameters R are used to derive the root key #j to obtain the transmission key #j; the intelligent terminal in the substation area and the Lj southbound devices all use the transmission key #j for secure data transmission.

[0015] According to a second aspect, a data transmission method for a substation smart terminal integrating a multi-module interconnected scenario is provided, wherein the substation smart terminal is provided with M communication modules, where M is an integer greater than 1, and each of the M communication modules provides a corresponding communication mode, and there are M communication modes in total. The method comprises: the substation smart terminal discovers multiple southbound devices; the substation smart terminal assigns the southbound devices supporting the same communication mode among the multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices, and obtains N device groups, where N is an integer greater than 1 and less than or equal to M, and the N device groups correspondingly support N communication modes, and the N communication modes are correspondingly provided by N communication modules among the M communication modules; the substation smart terminal transmits data with the N device groups respectively under the N communication modes.

[0016] In a third aspect, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, and when the processor executes the computer program, the electronic device executes the method described in the first aspect.

[0017] In a possible design solution, the electronic device described in the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the electronic device described in the third aspect to communicate with other electronic devices.

[0018] In an embodiment of the present invention, the electronic device described in the third aspect may be a terminal, or a chip (system) or other parts or components that may be arranged in the terminal, or a system including the terminal.

[0019] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method described in the first aspect.

[0020] In summary, the above terminal and method have the following technical effects:

[0021] When the substation intelligent terminal is provided with M communication modules to support M communication modes, the substation intelligent terminal can discover multiple southbound devices, and according to the communication modes supported by the multiple southbound devices, assign the southbound devices supporting the same communication mode among the multiple southbound devices to the same device group to obtain N device groups. In this way, the substation intelligent terminal transmits data with the N device groups under the N communication modes respectively, that is, the same communication mode is used to communicate with the same device group, thereby ensuring the data transmission efficiency in the scenario of a large number or even a massive number of south-area devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 A schematic diagram of the architecture of an Internet of Things system provided by an embodiment of the present invention;

[0023] Figure 2 A flow chart of a data transmission method for a multi-module interconnected scenario-fusion area intelligent terminal provided by an embodiment of the present invention;

[0024] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0025] The technical solution of the present invention will be described below in conjunction with the accompanying drawings.

[0026] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0027] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0028] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0029] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0030] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future systems, and the embodiments of the present invention do not specifically limit this.

[0031] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0032] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0033] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0034] To facilitate understanding of the embodiments of the present invention, first Figure 1 Taking the Internet of Things system shown in as an example, Figure 1 A schematic diagram of the architecture of an Internet of Things system applicable to multi-modular interconnected scenario-fusion area smart terminals provided in an embodiment of the present invention.

[0035] like Figure 1 As shown, the Internet of Things system may include: southbound equipment, area intelligent terminals and a master station.

[0036] The above-mentioned southbound equipment and intelligent terminal in the area can be devices in the form of terminals, that is, terminals. The terminal can be a terminal with transceiver functions, or a chip or chip system that can be set in the terminal. The terminal can also be called user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, etc. The terminal of the present application may also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0037] Among them, the intelligent terminal in the substation area is equipped with M communication modules, M is an integer greater than 1, and each of the M communication modules provides a corresponding communication mode, totaling M communication modes, such as Bluetooth communication mode, Star Flash (Green Tooth) communication mode, Wi-Fi communication mode, ZigBee communication mode, LoRa communication mode, 2.4G communication mode, cellular mobile communication mode, etc.

[0038] Figure 2This is a flow chart of the method provided by an embodiment of the present invention. The multi-module interconnected scene fusion station area intelligent terminal is applicable to the above-mentioned Internet of Things system, involving the interaction between devices in the above-mentioned Internet of Things system. The specific process is as follows:

[0039] S201, the intelligent terminal in the substation area discovered multiple southbound devices.

[0040] For example, the intelligent terminal in the substation broadcasts a device discovery message #i in the i-th communication mode through the i-th communication module. The device discovery message #i indicates that the device supporting the i-th communication mode needs to return a response, where i is an integer greater than or equal to 1, such as i is 1, 2, 3, 4, etc. Message #i has the signaling format of the i-th communication mode and can be an existing message. There is no restriction on the specific implementation. Within the timeout period #i after broadcasting the device discovery message #i, if (a certain) substation intelligent terminal receives the device discovery response message #i returned by the southbound device #i in response to the device discovery message #i in the i-th communication mode, the substation intelligent terminal determines that the southbound device #i is found; otherwise, after the timeout period #i (such as 2-5 seconds) after broadcasting the device discovery message #i, the substation intelligent terminal continues to broadcast the device discovery message #i+1 in the i+1 communication mode through the i+1th communication module, and the device discovery message #i+1 indicates that the device supporting the i+1th communication mode needs to return a response; when i traverses from 1 to M-1, the substation intelligent terminal determines that multiple southbound devices are found.

[0041] S202, the intelligent terminal in the substation area assigns southbound devices that support the same communication mode among multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices, thereby obtaining N device groups, where N is an integer greater than 1 and less than or equal to M.

[0042] N device groups support N communication modes, and the N communication modes are provided by N communication modules among the M communication modules. For any southbound device among the multiple southbound devices, the intelligent terminal in the substation determines that the southbound device supports the communication mode based on the communication mode used when receiving the device discovery response message returned by the southbound device. If the intelligent terminal in the substation receives the device discovery response message returned by the southbound device in at least two communication modes, the intelligent terminal in the substation determines that the southbound device supports at least two communication modes. The advantage of this is that for the southbound device, at least two communication modes can be used in sequence to transmit data separately. Different communication modes may correspond to different security protection methods, so that different security protection methods can be used for the same southbound device to further improve data security.

[0043] On this basis, in the process where the intelligent terminal in the substation can assign southbound devices that support the same communication mode among multiple southbound devices to the same device group according to the communication modes supported by each of the multiple southbound devices, for any southbound device among the multiple southbound devices, if the southbound device supports at least two communication modes, then the southbound device is simultaneously assigned to at least two device groups corresponding to the at least two communication modes, that is, at least two device groups both include the southbound device.

[0044] S203, the intelligent terminal in the substation area performs data transmission with N device groups in N communication modes respectively.

[0045] Method 1:

[0046] The intelligent terminal in the substation area can allocate the device groups that support the same security protection algorithm in the N device groups to the same device group set according to the security protection algorithms corresponding to the N communication modes, and obtain K device group sets, where K is an integer greater than or equal to 1. For example, device group #1 is the Wi-Fi communication mode, and the security protection algorithms supported by the Wi-Fi communication mode include AES (Advanced Encryption Standard), such as AES-128, and device group #2 is the ZigBee communication mode, and the security protection algorithms supported by the ZigBee communication mode also include AES, such as AES-128, then device group #1 and device group #2 are allocated to the same device group set.

[0047] For the jth device group set among the K device group sets, j is an integer traversing from 1 to K. The station intelligent terminal uses a security protection algorithm supported by the jth device group set to perform secure data transmission with the jth device group in the jth communication mode corresponding to the jth device group set.

[0048] For example, when j=1, for the first device group set among the K device group sets, the first device group set supports security protection algorithm #1, and the first device group set includes L1 southbound devices, where L1 is an integer greater than 1:

[0049] The intelligent terminal in the substation area sends the first freshness parameter R1 randomly generated by the intelligent terminal in the substation area to L1 southbound devices respectively, so as to receive the second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R1 respectively generated and returned by L1 southbound devices based on the first freshness parameter R1. L1, a total of L1 second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L1 southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L1 southbound devices, and so on. L1 It is the freshness parameter R generated by the L1th southbound device among the L1 southbound devices; the substation intelligent terminal uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 of the security protection algorithm #1 to obtain the transmission key #1, and the substation intelligent terminal sends the second freshness parameter R generated by each of the L1-1 southbound devices among the L1 southbound devices except the southbound device to each of the L1 southbound devices, so that each of the L1 southbound devices uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 to obtain the transmission key #1.

[0050] The intelligent terminal in the substation and the L1 southbound devices all use transmission key #1 for secure data transmission, such as data encryption and decryption, as well as integrity protection and verification. In addition, the intelligent terminal in the substation can also pass the received data to the master station, or receive data from the master station and transmit key #1 to the southbound device securely.

[0051] For example, L1=3, the second freshness parameter R1 generated by the first southbound device, the second freshness parameter R2 generated by the second southbound device, the second freshness parameter R3 generated by the third southbound device, the substation intelligent terminal sends the second freshness parameter R1 to the second southbound device and the third southbound device, the substation intelligent terminal sends the second freshness parameter R2 to the first southbound device and the third southbound device, and the substation intelligent terminal sends the second freshness parameter R3 to the first southbound device and the second southbound device, so that each southbound device can obtain the four second freshness parameters R. Each southbound device can use the first freshness parameter R1 and the four second freshness parameters R, as well as the pre-configured root key #1 as input parameters, and use the key deduction algorithm to calculate the input parameters to obtain the transmission key #1. It can be understood that for different devices supporting the same security algorithm, the same root key, such as root key #1, can be pre-defined by protocol or pre-configured at the factory.

[0052] The above freshness parameters are all used to prevent replay attacks during data transmission.

[0053] Afterwards, when j=2, for the second device group set in the K device group sets, the second device group set also supports security protection algorithm #1, and the second device group set includes L2 southbound devices, where L2 is an integer greater than 1:

[0054] The intelligent terminal in the substation area sends the first freshness parameter R2 generated by the intelligent terminal in the substation area according to the second freshness parameter R of L1 to the L2 southbound devices, so as to receive the third freshness parameter R1, the third freshness parameter R2, and the third freshness parameter R1 generated and returned by the L2 southbound devices based on the freshness parameter R2. L2 , a total of L2 third freshness parameters R are obtained, where the third freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L2 southbound devices, the third freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L2 southbound devices, and so on. L2 It is the freshness parameter R generated by the L2th southbound device among the L2 southbound devices; the substation intelligent terminal uses the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2, and the substation intelligent terminal sends the third freshness parameter generated by each of the L2-1 southbound devices among the L2 southbound devices except the southbound device to each of the L2 southbound devices, so that each of the L2 southbound devices uses the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2.

[0055] The intelligent terminal in the substation and the L2 southbound devices all use transmission key #2 for secure data transmission. In addition, the intelligent terminal in the substation can also pass the received data to the master station, or receive data from the master station and transmit key #1 to the southbound device securely.

[0056] By analogy, when j=K, for the Kth device group set in the K device group sets, the Kth device group set also supports security protection algorithm #1, and the Kth device group set includes LK southbound devices, where LK is an integer greater than 1. The intelligent terminal in the substation area and the LK southbound devices all use the transmission key #K for secure data transmission. In addition, the intelligent terminal in the substation area can also pass the received data to the master station, or receive data from the master station, and transmit the transmission key #1 securely to the southbound device.

[0057] That is to say, each device group set adopts a similar method as above, that is, each device obtains the freshness parameters of other devices in the cluster to derive the transmission key. The advantage of this is that, while ensuring security, for K device group sets, the intelligent terminals in the substation area and all southbound devices in the K device group sets can maintain only the same root key from beginning to end, which can improve efficiency and reduce maintenance costs.

[0058] It can be understood that the intelligent terminal in the substation performs a hash operation on L1 second freshness parameters R to obtain the first freshness parameter R2.

[0059] Method 2:

[0060] The intelligent terminal in the substation area uses the security protection algorithms supported by each of the N device groups to perform secure data transmission with the N device groups in N communication modes.

[0061] For example, for the jth device group among N device groups, j is an integer traversing from 1 to N, the jth device group supports security protection algorithm #j, the jth device group includes Lj southbound devices, and Lj is an integer greater than 1; the intelligent terminal in the substation area sends the first freshness parameter R randomly generated by the intelligent terminal in the substation area to the Lj southbound devices respectively. j , to receive Lj southbound devices based on the freshness parameter R j The second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R Lj , a total of Lj second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the Lj southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the Lj southbound devices, and so on. Lj is the freshness parameter R generated by the Ljth southbound device among the Lj southbound devices; the first freshness parameter R is used by the intelligent terminal in the substation area. j The root key #j of the security protection algorithm #j is derived from the Lj second freshness parameters R to obtain the transmission key #j, and the intelligent terminal in the substation sends the second freshness parameters R generated by each of the Lj-1 southbound devices except the southbound device in the Lj southbound devices to each southbound device in the Lj southbound devices, so that each of the Lj southbound devices uses the first freshness parameter R j And Lj second freshness parameters R derive root key #j to obtain transmission key #j; the intelligent terminal in the substation and Lj southbound devices use transmission key #j for secure data transmission. In addition, the intelligent terminal in the substation can also pass the received data to the master station, or receive data from the master station and transmit key #1 to the southbound device securely.

[0062] That is to say, the difference between method 2 and method 1 is that each device group can use its own corresponding security algorithm for secure data transmission. However, for the same device group, the district intelligent terminal and all southbound devices in the device group can also maintain only the same root key from beginning to end, which can improve efficiency and reduce maintenance costs.

[0063] In summary, when the substation intelligent terminal is provided with M communication modules to support M communication modes, the substation intelligent terminal can discover multiple southbound devices, and according to the communication modes supported by the multiple southbound devices, the southbound devices supporting the same communication mode among the multiple southbound devices are assigned to the same device group to obtain N device groups. In this way, the substation intelligent terminal transmits data with the N device groups under the N communication modes respectively, that is, the same communication mode is used to communicate with the same device group, thereby ensuring the data transmission efficiency in the scenario of a large number or even a massive number of south-area devices.

[0064] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is a detailed description of a multi-module interconnected scene fusion area intelligent terminal for executing the embodiment of the present invention, the area intelligent terminal is provided with M communication modules, M is an integer greater than 1, each of the M communication modules provides a corresponding communication mode, a total of M communication modes.

[0065] The substation intelligent terminal is configured as follows: the substation intelligent terminal discovers multiple southbound devices; the substation intelligent terminal assigns the southbound devices that support the same communication mode among the multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices, so as to obtain N device groups, where N is an integer greater than 1 and less than or equal to M, and the N device groups correspondingly support N communication modes, which are correspondingly provided by N communication modules among M communication modules; the substation intelligent terminal performs data transmission with the N device groups respectively under the N communication modes.

[0066] Optionally, for the i-th communication module among M types of communication modules, the i-th communication module supports the i-th communication mode, and the substation intelligent terminal discovers multiple southbound devices, including: the substation intelligent terminal broadcasts a device discovery message #i in the i-th communication mode through the i-th communication module, and the device discovery message #i indicates that the device supporting the i-th communication mode needs to return a response; within the timeout time #i after broadcasting the device discovery message #i, if the substation intelligent terminal receives the device discovery response message #i returned by the southbound device #i in the i-th communication mode to the device discovery message #i, then the substation intelligent terminal determines that the southbound device #i is discovered; otherwise, after the timeout time #i after broadcasting the device discovery message #i, the substation intelligent terminal continues to broadcast a device discovery message #i+1 in the i+1 communication mode through the i+1-th communication module, and the device discovery message #i+1 indicates that the device supporting the i+1-th communication mode needs to return a response; when i traverses from 1 to M-1, the substation intelligent terminal determines that multiple southbound devices are discovered.

[0067] Optionally, for any southbound device among multiple southbound devices, the substation intelligent terminal determines that the southbound device supports the communication mode based on the communication mode used when receiving the device discovery response message returned by the southbound device; if the substation intelligent terminal receives the device discovery response message returned by the southbound device under at least two communication modes, the substation intelligent terminal determines that the southbound device supports at least two communication modes.

[0068] Optionally, in the process of assigning southbound devices that support the same communication mode among multiple southbound devices to the same device group according to the communication modes respectively supported by the multiple southbound devices, for any southbound device among the multiple southbound devices, if the southbound device supports at least two communication modes, then the southbound device is simultaneously assigned to at least two device groups corresponding to the at least two communication modes, that is, at least two device groups both include the southbound device.

[0069] Optionally, the substation intelligent terminal performs data transmission with N device groups under N communication modes respectively, including: the substation intelligent terminal assigns device groups that support the same security protection algorithm among the N device groups to the same device group set according to the security protection algorithms corresponding to the N communication modes, to obtain K device group sets, where K is an integer greater than or equal to 1; for the j-th device group set among the K device group sets, j is an integer traversing from 1 to K, the substation intelligent terminal uses a security protection algorithm supported by the j-th device group set, and performs secure data transmission with the j-th device group under the j-th communication mode corresponding to the j-th device group set.

[0070] Optionally, the intelligent terminal in the substation area uses a security protection algorithm supported by the j-th device group set to perform secure data transmission with the j-th device group in the j-th communication mode corresponding to the j-th device group set, including: when j=1, for the first device group set in the K device group sets, the first device group set supports security protection algorithm #1, and the first device group set includes L1 southbound devices, where L1 is an integer greater than 1: the intelligent terminal in the substation area sends the first freshness parameter R1 randomly generated by the intelligent terminal in the substation area to the L1 southbound devices respectively, to receive the second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R3 generated and returned by the L1 southbound devices based on the freshness parameter R1. L1 , a total of L1 second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L1 southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L1 southbound devices, and so on. L1It is the freshness parameter R generated by the L1th southbound device among the L1 southbound devices; the intelligent terminal in the substation uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 of the security protection algorithm #1 to obtain the transmission key #1, and the intelligent terminal in the substation sends the second freshness parameter R generated by each of the L1-1 southbound devices in the L1 southbound devices except the southbound device to each southbound device in the L1 southbound devices, so that each of the L1 southbound devices uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key #1 to obtain the transmission key #1; the intelligent terminal in the substation and the L1 All southbound devices use transmission key #1 for secure data transmission; when j=2, for the second device group set in the K device group sets, the second device group set also supports security protection algorithm #1, and the second device group set includes L2 southbound devices, where L2 is an integer greater than 1: the substation intelligent terminal sends the first freshness parameter R2 generated by the substation intelligent terminal based on the L1 second freshness parameter R to the L2 southbound devices, respectively, to receive the third freshness parameter R1, the third freshness parameter R2, and the third freshness parameter R1 generated and returned by the L2 southbound devices based on the freshness parameter R2, respectively. L2 , a total of L2 third freshness parameters R are obtained, where the third freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L2 southbound devices, the third freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L2 southbound devices, and so on. L2 It is the freshness parameter R generated by the L2th southbound device among the L2 southbound devices; the substation intelligent terminal uses the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2, and the substation intelligent terminal sends the third freshness parameters generated by the L2-1 southbound devices among the L2 southbound devices except the southbound device to each southbound device among the L2 southbound devices, so that the L2 southbound devices each use the first freshness parameter R2 and the L2 third freshness parameters R to derive the root key #1 to obtain the transmission key #2; the substation intelligent terminal and the L2 southbound devices both use the transmission key #2 for secure data transmission; and so on, until j=K, for the Kth device group set among the K device group sets, the Kth device group set also supports the security protection algorithm #1, the Kth device group set includes LK southbound devices, LK is an integer greater than 1, and the substation intelligent terminal and the LK southbound devices both use the transmission key #K for secure data transmission.

[0071] Optionally, the intelligent terminal in the substation area is further configured as follows: the intelligent terminal in the substation area performs a hash operation on L1 second freshness parameters R to obtain a first freshness parameter R2.

[0072] Optionally, the intelligent terminal in the substation area performs data transmission with N device groups in N communication modes respectively, including: the intelligent terminal in the substation area uses the security protection algorithm supported by each of the N device groups to perform secure data transmission with the N device groups in N communication modes respectively.

[0073] Optionally, the intelligent terminal in the substation area uses the security protection algorithm supported by each of the N device groups to perform secure data transmission with the N device groups in N communication modes, including: for the j-th device group in the N device groups, j is an integer traversing from 1 to N, the j-th device group supports the security protection algorithm #j, the j-th device group includes Lj southbound devices, and Lj is an integer greater than 1; the intelligent terminal in the substation area sends the first freshness parameter R randomly generated by the intelligent terminal in the substation area to the Lj southbound devices respectively. j , to receive Lj southbound devices based on the freshness parameter R j The second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R Lj , a total of Lj second freshness parameters R are obtained, where the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the Lj southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the Lj southbound devices, and so on. Lj is the freshness parameter R generated by the Ljth southbound device among the Lj southbound devices; the first freshness parameter R is used by the intelligent terminal in the substation area. j The root key #j of the security protection algorithm #j is derived from the Lj second freshness parameters R to obtain the transmission key #j, and the intelligent terminal in the substation sends the second freshness parameters R generated by each of the Lj-1 southbound devices except the southbound device in the Lj southbound devices to each southbound device in the Lj southbound devices, so that each of the Lj southbound devices uses the first freshness parameter R j And Lj second freshness parameters R are used to derive the root key #j to obtain the transmission key #j; the intelligent terminal in the substation area and the Lj southbound devices all use the transmission key #j for secure data transmission.

[0074] Figure 3 The schematic diagram of the structure of the electronic device provided by the embodiment of the present invention. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0075] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0076] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0077] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 The multi-modular interconnected scenario shown integrates the smart terminal in the station area.

[0078] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0079] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).

[0080] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0081] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0082] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0083] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0084] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0085] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0086] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0087] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0088] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0089] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0090] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0091] In the present invention, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0092] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0093] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0094] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0095] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0096] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0097] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0098] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0099] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A multi-module interconnected scene fusion area intelligent terminal, characterized in that: The intelligent terminal in the area is provided with M communication modules, where M is an integer greater than 1, and each of the M communication modules provides a corresponding communication mode, with a total of M communication modes. The intelligent terminal in the area is configured as follows: The intelligent terminal in the substation area discovers multiple southbound devices; The station intelligent terminal assigns the southbound devices supporting the same communication mode among the multiple southbound devices to the same device group according to the communication modes supported by the multiple southbound devices respectively, to obtain N device groups, where N is an integer greater than 1 and less than or equal to M, and the N device groups correspondingly support N communication modes, and the N communication modes are correspondingly provided by N communication modules among the M communication modules; The intelligent terminals in the substation area perform data transmission with the N device groups respectively under the N communication modes; The intelligent terminal in the substation area allocates the device groups supporting the same security protection algorithm among the N device groups to the same device group set according to the security protection algorithms corresponding to the N communication modes, thereby obtaining K device group sets, where K is an integer greater than or equal to 1; For the jth device group set among the K device group sets, j is an integer traversing from 1 to K, and the station area intelligent terminal uses a security protection algorithm supported by the jth device group set to perform secure data transmission with the jth device group in the jth communication mode corresponding to the jth device group set.

2. The terminal according to claim 1, characterized in that For the i-th communication module among the M types of communication modules, the i-th communication module supports the i-th communication mode, and the station area intelligent terminal discovers multiple southbound devices, including: The intelligent terminal in the station area broadcasts a device discovery message i in the i-th communication mode through the i-th communication module, and the device discovery message i indicates that the device supporting the i-th communication mode needs to return a response; Within the timeout period after broadcasting the device discovery message i, if the station area intelligent terminal receives a device discovery response message returned by the southbound device for the device discovery message i in the i-th communication mode, the station area intelligent terminal determines that the southbound device is discovered; otherwise, after the timeout period after broadcasting the device discovery message i, the station area intelligent terminal continues to broadcast the device discovery message i+1 in the i+1-th communication mode through the i+1-th communication module, and the device discovery message i+1 indicates that the device supporting the i+1-th communication mode needs to return a response; When i traverses from 1 to M-1, the station intelligent terminal determines that the multiple southbound devices are found.

3. The terminal according to claim 2, characterized in that: For any southbound device among the multiple southbound devices, the substation intelligent terminal determines that the southbound device supports the communication mode based on the communication mode used when receiving the device discovery response message returned by the southbound device; if the substation intelligent terminal receives the device discovery response message returned by the southbound device under at least two communication modes, the substation intelligent terminal determines that the southbound device supports the at least two communication modes.

4. The terminal according to claim 1, characterized in that: In the process in which the substation intelligent terminal assigns the southbound devices that support the same communication mode among the multiple southbound devices to the same device group according to the communication modes respectively supported by the multiple southbound devices, for any southbound device among the multiple southbound devices, if the southbound device supports at least two communication modes, then the southbound device is simultaneously assigned to at least two device groups corresponding to the at least two communication modes, that is, the at least two device groups both include the southbound device.

5. The terminal according to claim 4, characterized in that: The intelligent terminal in the station area uses a security protection algorithm supported by the j-th device group set to perform secure data transmission with the j-th device group in the j-th communication mode corresponding to the j-th device group set, including: In the case of j=1, for the first device group set among the K device group sets, the first device group set supports the security protection algorithm, and the first device group set includes L1 southbound devices, where L1 is an integer greater than 1: The intelligent terminal in the substation area sends the first freshness parameter R1 randomly generated by the intelligent terminal in the substation area to the L1 southbound devices respectively, so as to receive the second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R1 respectively generated and returned by the L1 southbound devices based on the first freshness parameter R1. L1 , a total of L1 second freshness parameters R are obtained, wherein the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L1 southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L1 southbound devices, and so on. L1 It is the freshness parameter R generated by the L1th southbound device among the L1 southbound devices; the substation intelligent terminal uses the first freshness parameter R1 and the L1 second freshness parameters R to derive the root key of the security protection algorithm to obtain the transmission key 1, and the substation intelligent terminal sends the second freshness parameter R generated by each of the L1-1 southbound devices among the L1 southbound devices except the southbound device to each southbound device among the L1 southbound devices, so that each of the L1 southbound devices uses the first freshness parameter R1 and the L1 second freshness parameter R to derive the root key, and the transmission key 1 is obtained; The intelligent terminal in the substation area and the L1 southbound devices both use the transmission key 1 for secure data transmission; In the case of j=2, for the second device group set in the K device group sets, the second device group set also supports the security protection algorithm, and the second device group set includes L2 southbound devices, where L2 is an integer greater than 1: The intelligent terminal in the substation area sends the first freshness parameter R2 generated by the intelligent terminal in the substation area according to the second freshness parameter R of L1 to the L2 southbound devices respectively, so as to receive the third freshness parameter R1, the third freshness parameter R2, and the third freshness parameter R1 generated and returned by the L2 southbound devices respectively based on the first freshness parameter R2. L2 , a total of L2 third freshness parameters R are obtained, wherein the third freshness parameter R1 is the freshness parameter R generated by the first southbound device among the L2 southbound devices, the third freshness parameter R2 is the freshness parameter R generated by the second southbound device among the L2 southbound devices, and so on. L2 is the freshness parameter R generated by the L2th southbound device among the L2 southbound devices; the substation intelligent terminal uses the first freshness parameter R2 and the L2 third freshness parameter R to derive the root key to obtain the transmission key 2, and the substation intelligent terminal sends the third freshness parameter generated by each of the L2-1 southbound devices in the L2 southbound devices except the southbound device to each southbound device in the L2 southbound devices, so that each of the L2 southbound devices uses the first freshness parameter R2 and the L2 third freshness parameter R to derive the root key, and the transmission key 2 is obtained; The intelligent terminal in the substation area and the L2 southbound devices both use the transmission key 2 for secure data transmission; And so on, until j=K, for the Kth device group set among the K device group sets, the Kth device group set also supports the security protection algorithm, the Kth device group set includes LK southbound devices, LK is an integer greater than 1, and the substation intelligent terminal and the LK southbound devices all use the transmission key K for secure data transmission.

6. The terminal according to claim 5, characterized in that: The station area intelligent terminal is also configured as: The station area intelligent terminal performs a hash operation on the L1 second freshness parameters R to obtain the first freshness parameter R2.

7. The terminal according to claim 1, characterized in that: The intelligent terminal in the substation area performs data transmission with the N device groups respectively in the N communication modes, including: The intelligent terminal in the substation area uses the security protection algorithms supported by each of the N device groups to perform secure data transmission with the N device groups in the N communication modes respectively.

8. The terminal according to claim 7, characterized in that: The intelligent terminal in the station area uses the security protection algorithms supported by the N device groups respectively to perform secure data transmission with the N device groups in the N communication modes respectively, including: For the j-th device group among the N device groups, j is an integer ranging from 1 to N, the j-th device group supports the security protection algorithm, the j-th device group includes Lj southbound devices, and Lj is an integer greater than 1; The intelligent terminal in the substation area sends the first freshness parameter R randomly generated by the intelligent terminal in the substation area to the Lj southbound devices respectively. j , to receive the Lj southbound devices based on the first freshness parameter R j The second freshness parameter R1, the second freshness parameter R2, and the second freshness parameter R Lj , a total of Lj second freshness parameters R are obtained, wherein the second freshness parameter R1 is the freshness parameter R generated by the first southbound device among the Lj southbound devices, the second freshness parameter R2 is the freshness parameter R generated by the second southbound device among the Lj southbound devices, and so on. Lj is the freshness parameter R generated by the Lj-th southbound device among the Lj southbound devices; the station area intelligent terminal uses the first freshness parameter R j The Lj second freshness parameters R are used to derive the root key of the security protection algorithm to obtain the transmission key j, and the intelligent terminal in the substation area sends the second freshness parameter R generated by each of the Lj-1 southbound devices except the southbound device in the Lj southbound devices to each southbound device in the Lj southbound devices, so that each of the Lj southbound devices uses the first freshness parameter R j and the Lj second freshness parameters R are used to derive the root key, and the transmission key j is obtained; The substation intelligent terminal and the Lj southbound devices all use the transmission key j for secure data transmission.

Images