Data access control method and system based on multi-user smart meter

Abstract

The present invention discloses a data access control method and system based on a multi-user smart meter, and relates to the technical field of data access control for smart meters. For an access request, the present invention first verifies whether the data format of the access request data satisfies the standard data format, and adopts a mode of communicating with a central server to exchange access terminal network address data, and judging whether the access terminal network address data belongs to a network address in a security address database on the central server side. The request control module needs to verify whether the complete access target number data is its own number data, so as to prevent the situation that the feedback data does not match the request data due to an erroneous number. The last step of judgment is the verification of the key data based on the access time; if the three-step verification is passed, it is considered that the access request terminal is legal, which greatly improves the security of smart meter data access, ensures the security of the power system, and ensures the accuracy of the access data accessed by the access request terminal.

Description

Technical Field

[0001] The present invention relates to the technical field of data access control of smart meters, and in particular to a data access control method and system based on multi-user smart meters. Background Art

[0002] Data access control of multi-user smart meters is crucial for modern power systems. Its significance is mainly reflected in the following aspects:

[0003] Ensure that user electricity consumption data is not obtained by unauthorized third parties to protect user privacy; prevent malicious attackers from invading the power grid through the meter system to ensure the stable operation of the power system; enhance user trust in the smart grid system through effective control of data access; ensure that data is not tampered with during transmission to ensure the authenticity and accuracy of the data; and provide users with more personalized power services through access control to user data.

[0004] The following are some commonly used data access control technologies in multi-user smart meters:

[0005] Use symmetric encryption (such as AES) or asymmetric encryption (such as RSA) to protect data; verify user identity through username / password, digital certificates, biometrics and other technologies; assign permissions based on user roles; determine access rights based on the attributes of users, resources and environments, such as SSL / TLS, to establish secure communication channels.

[0006] Although existing technologies provide a variety of solutions for data access control of multi-user smart meters, they also have some defects:

[0007] User identities can be stolen or compromised, especially if passwords are weak or credentials are poorly managed.

[0008] Role-based access control (RBAC) may not be able to meet complex permission requirements, and the permission boundaries between roles may not be clear.

[0009] Data access control for multi-user smart meters is crucial to ensure the security of the power system, user privacy, and system reliability. Although existing technologies provide a variety of solutions, they still have certain defects in implementation, management, and maintenance. With the development of technology, these technologies need to be continuously optimized and improved to better meet the needs of smart grids.

[0010] Therefore, designing a data access control method and system based on multi-user smart meters to protect the data of smart meters is a technical problem that needs to be solved urgently. Summary of the invention

[0011] In order to solve the technical problem of data access control of multi-user smart meters, the present invention provides a data access control method and system based on multi-user smart meters. The following technical solutions are adopted:

[0012] The data access control method based on a multi-user smart meter includes the following steps:

[0013] Step 1: numbering multiple smart meters installed by multiple users respectively;

[0014] Step 2: When the smart meter receives the remote data access request sent by the access request end, the access request control module parses the remote data access request data packet to obtain the access request data;

[0015] Step 3, the access request control module verifies whether the data format of the access request data meets the standard data format, the standard data format includes complete access end network address data, complete access target number data, key data based on access time and request interaction data;

[0016] Step 4: If the access request control module determines that the access request data in step 3 meets the standard format, it communicates with the central server to exchange the access end network address data. The central server determines whether the access end network address data belongs to the network address in the security address database. If it is determined to be, it feeds back a successful access end network address verification signal to the access request control module.

[0017] Step 5: If the access request control module receives a feedback access end network address verification success signal, it continues to verify the access target number data to determine whether the access target number data is its own number. If so, it performs key data verification. If the access target number data is not its own number, the access request data is forwarded to the smart meter with the corresponding number based on the ad hoc network, and the smart meter with the corresponding number continues to perform key data verification.

[0018] Step 6: If the key data verification is successful, the access request is determined to be qualified, and the corresponding request interaction data stored in the smart meter memory is retrieved and sent to the access end network address data.

[0019] By adopting the above technical solution, the access request end can be a mobile terminal APP or a computer for handling business, etc. When the smart meter with the corresponding number of the designated network address receives the remote data access request sent by the access request end, its own access request control module first parses the remote data access request data packet to obtain the access request data;

[0020] For access requests, the following logic is required to determine whether the access is safe:

[0021] First, check whether the data format of the access request data meets the standard data format. The standard data format includes complete access end network address data, complete access target number data, key data based on access time and request interaction data. If the access data cannot completely include the above standard data format, the access request end is considered illegal.

[0022] When the data format of the access request data meets the standard data format, it is necessary to perform the second step of checking whether the access address is safe. This check is not done locally because local information updates are limited. Instead, the network address data of the access end is accessed through communication with the central server.

[0023] The central server determines whether the access end network address data belongs to the network address mode in the security address database. The determination is based on the continuously updated security address database. If it is determined to be, a successful access end network address verification signal is fed back to the access request control module.

[0024] If the central server feeds back a signal that the network address of the access end is successfully verified, the access request control module 1 needs to verify whether the complete access target number data is its own number data to prevent the feedback data from not being consistent with the request data due to an incorrect number. If it is determined that it is not its own number data, the remote data access request data packet of the logical access request end can be sent successfully. At this time, the corresponding number should be the smart meter in the ad hoc network. At this time, the access request data can be forwarded to the smart meter with the corresponding number based on the ad hoc network, and the smart meter with the corresponding number continues to perform key data verification;

[0025] The last step is to verify the key data based on the access time. The key data verification time synchronization based on the access time is the key, and the time deviation of the participating devices must be within an acceptable range. The base key K_base must be stored and transmitted securely and must not be leaked. The accuracy of the timestamp (such as seconds or milliseconds) will affect the key update frequency. The key length should be determined according to the requirements of the encryption algorithm and security requirements. The risk of key leakage should be considered, and a mechanism should be set to replace the base key. Through the above design, a dynamic key data system based on access time can be implemented to improve the security of data access.

[0026] After the above three steps of verification, if all are passed, the access request end is considered to be legal. The access request control module can call the data in the smart meter memory based on the requested interaction data and send it to the access request end, such as the smart meter operation data at the time point or time interval specified by the requested interaction data.

[0027] Greatly improve the security of smart meter data access, ensure the security of the power system, and ensure the accuracy of data accessed by the access requester.

[0028] Optionally, in step 1, multiple smart meters are numbered based on the ad hoc network. In the same ad hoc network, the numbering format of the smart meters is: ABC, where A is the area code, B is the device type code, and C is the serial number;

[0029] In step 5, if the access request control module compares the C value in number ABC with the C value of its own number, if they are the same, it is determined to be its own number.

[0030] By adopting the above technical solution, in a self-organizing network of multiple smart meters, multiple smart meters need to have a unique identifier to facilitate mutual identification and communication. The design of the numbering format needs to consider the scale of the network, the scalability of the meter, and the ease of management and maintenance.

[0031] The area code A is usually two letters or numbers, which is used to identify the geographical area or administrative area where the meter is located;

[0032] The equipment type code B is generally four letters or numbers, which are used to identify the model or functional type of the meter. For example, ELEC stands for smart meter.

[0033] The serial number C is generally a four-digit number depending on the situation, used to identify different individuals of the same type of electricity meters in the same area, and increases from 0001.

[0034] Optionally, in step 3, the method for generating key data based on access time is: the access request control module and the access request end perform time synchronization based on NTP, and convert the current timestamp into a string or a value of fixed length;

[0035] The base key K_base is combined with the timestamp T_now, a hash function is applied to generate a hash value, and a substring of the required length is extracted from the hash value as the dynamic key.

[0036] Optionally, the key data generation formula based on access time is:

[0037] Let the base key be K_base, the current timestamp be T_now, the key generation function be F_keygen, and the dynamic key based on access time be K_dynamic;

[0038] ;

[0039] ;

[0040] ;

[0041] Among them, SHA-256 is a widely used cryptographic hash function; is the number of combinations of the base key and the timestamp, is to apply the SHA-256 hash function; is a function to extract a substring, is the string index start position, is the string length.

[0042] Optionally, generate access time-based key data every one minute.

[0043] By adopting the above technical solution, assuming that the base key K_base is secretkey123 and the current timestamp T_now is 2024-08-21T14:00:00Z, the base key and timestamp are combined: K_combined="secretkey1232024-08-21T14:00:00Z" Apply the SHA-256 hash function: Hash_combined=SHA-256("secretkey1232024-08-21T14:00:00Z") Assume that the first 32 characters of the hash value are used as the dynamic key: K_dynamic=Substring(Hash_combined,0,32) In this way, a new dynamic key will be generated based on the new timestamp every time interval, such as one minute. Time synchronization is the key, and it is necessary to ensure that the time deviation of the participating devices is within an acceptable range.

[0044] The base key K_base must be stored and transmitted securely and must not be leaked. The accuracy of the timestamp (such as seconds or milliseconds) will affect the key update frequency. The key length should be determined according to the requirements of the encryption algorithm and security requirements. The risk of key leakage should be considered, and a mechanism should be set up to replace the base key. Through the above design, a dynamic key data system based on access time can be implemented to improve the security of smart meter data access.

[0045] Optionally, in step 4, the method by which the central server determines whether the access terminal network address data belongs to a network address in the secure address database is:

[0046] The secure address database contains multiple sets of trusted secure network address data and associated information data;

[0047] A network address matching algorithm is used to compare the access end network address data with the secure network address data in the secure address database, and whether it belongs is determined based on the matching result.

[0048] Optionally, the security network address data and associated information data are IP address range, subnet mask and network prefix.

[0049] Optionally, let the access end network address be A_ip, the address entry in the secure network address database be DB_ip, each entry including the network address Net_ip and the subnet mask Mask, the address matching function be F_match, and the formula for determining whether the network address belongs to the secure address database is:

[0050] ;

[0051] in It is a Boolean value indicating whether the access end network address data belongs to the secure address data;

[0052] The address matching function F_match is defined using the following formula:

[0053] ;

[0054] AND represents the bitwise AND operation, which is used to combine the IP address with the subnet mask to determine the network address.

[0055] By adopting the above technical solutions, the secure network address database needs to be regularly updated and maintained to reflect the latest security policies. The collection of access end network addresses should ensure accuracy. The address matching algorithm should be able to operate efficiently to cope with a large number of access requests. For IPv6 addresses, the matching algorithm needs to be adjusted accordingly. Through the above methods, the central server can effectively determine whether the access end network address belongs to the network address in the secure address database, and thus decide whether to allow access.

[0056] A data access control system based on multi-user smart meters is used to implement a data access control method based on multi-user smart meters. The data access control system includes multiple smart meters, a meter communication module and a central server. The multiple smart meters are respectively connected to the central server through the meter communication modules and based on the self-organizing network communication of the meter communication modules. The access request end is connected to the multiple smart meters through the meter communication module to exchange remote data access request data. The smart meter is provided with an access request control module based on a data analysis chip, and the access request control module is connected to the central server through the meter communication module.

[0057] In summary, the present invention includes at least one of the following beneficial technical effects: for an access request, the first step is to verify whether the data format of the access request data satisfies the standard data format. When the data format of the access request data satisfies the standard data format, it is necessary to perform the second step of verifying whether the access address is secure, and adopt a mode of communicating with the central server to exchange the access end network address data, and judging whether the access end network address data belongs to the network address in the security address database on the central server side for judgment. The judgment is based on the continuously updated security address database. If the central server feeds back a signal of successful access end network address verification, the request control module needs to verify whether the complete access target number data is its own number data, so as to prevent the situation where the feedback data does not match the request data due to the wrong number. If it is judged that it is not its own number data, the access request data can be forwarded to the smart meter with the corresponding number based on the self-organizing network, and the smart meter with the corresponding number continues to perform key data verification. The last step is to verify the key data based on the access time.

[0058] If the above three steps of verification are all passed, the access request end is considered to be legal. The access request control module calls the data in the smart meter memory based on the request interaction data and sends it to the access request end, which greatly improves the security of smart meter data access, ensures the security of the power system, and ensures the accuracy of the access data accessed by the access request end. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Figure 1 It is a flow chart of a data access control method based on a multi-user smart meter of the present invention;

[0060] Figure 2 It is a schematic diagram of the component connection principle of the data access control system based on multi-user smart meters of the present invention.

[0061] Explanation of the accompanying drawings: 1. Access request control module; 100. Smart meter; 101. Central server; 102. Access request end; 103. Meter communication module. DETAILED DESCRIPTION

[0062] The present invention is further described in detail below in conjunction with the accompanying drawings.

[0063] The embodiment of the invention discloses a data access control method and system based on a multi-user smart meter.

[0064] Reference Figure 1 and Figure 2 , Embodiment 1, a data access control method based on a multi-user smart meter, comprising the following steps:

[0065] Step 1: numbering a plurality of smart meters 100 installed by a plurality of users respectively;

[0066] Step 2: When the smart meter 100 receives the remote data access request sent by the access request end 102, the access request control module 1 parses the remote data access request data packet to obtain the access request data;

[0067] Step 3, the access request control module 1 verifies whether the data format of the access request data meets the standard data format, and the standard data format includes complete access end network address data, complete access target number data, key data based on access time, and request interaction data;

[0068] Step 4: If the access request control module 1 determines that the access request data in step 3 meets the standard format, it communicates with the central server 101 to exchange the access end network address data. The central server 101 determines whether the access end network address data belongs to the network address in the security address database. If it is determined to be, it feeds back a successful access end network address verification signal to the access request control module 1.

[0069] Step 5: If the access request control module 1 receives a feedback access end network address verification success signal, it continues to perform access target number data verification to determine whether the access target number data is its own number. If so, it performs key data verification. If the access target number data is not its own number, it forwards the access request data to the smart meter 100 with the corresponding number based on the ad hoc network, and the smart meter 100 with the corresponding number continues to perform key data verification.

[0070] Step 6: If the key data verification is successful, the access request is determined to be qualified, and the corresponding request interaction data stored in the memory of the smart meter 100 is retrieved and sent to the access end network address data.

[0071] The access request end 102 may be a mobile terminal APP or a computer for handling business, etc. When the smart meter 100 with the corresponding number of the designated network address receives the remote data access request sent by the access request end 102, its own access request control module 1 first parses the remote data access request data packet to obtain the access request data;

[0072] For access requests, the following logic is required to determine whether the access is safe:

[0073] First, it is checked whether the data format of the access request data meets the standard data format. The standard data format includes complete access end network address data, complete access target number data, key data based on access time and request interaction data. If the access data cannot completely include the above standard data format, then the access request end 102 is considered to be illegal.

[0074] When the data format of the access request data meets the standard data format, it is necessary to perform the second step of checking whether the access address is safe. This check is not done locally because the local information update is limited. Instead, the network address data of the access terminal is accessed through communication with the central server 101.

[0075] The central server 101 determines whether the access terminal network address data belongs to the network address mode in the security address database. The determination is based on the continuously updated security address database. If it is determined to be, a successful access terminal network address verification signal is fed back to the access request control module 1.

[0076] If the central server 101 feeds back a signal indicating successful verification of the access end network address, the access request control module 1 needs to verify whether the complete access target number data is its own number data, to prevent the feedback data from being inconsistent with the request data due to an incorrect number. If it is determined that it is not its own number data, the remote data access request data packet of the logical access request end 102 can be sent successfully. At this time, the corresponding number should be the smart meter 100 in the ad hoc network. At this time, the access request data can be forwarded to the smart meter 100 with the corresponding number based on the ad hoc network, and the smart meter 100 with the corresponding number continues to perform key data verification.

[0077] The last step is to verify the key data based on the access time. The key data verification time synchronization based on the access time is the key, and the time deviation of the participating devices must be within an acceptable range. The base key K_base must be stored and transmitted securely and must not be leaked. The accuracy of the timestamp (such as seconds or milliseconds) will affect the key update frequency. The key length should be determined according to the requirements of the encryption algorithm and security requirements. The risk of key leakage should be considered, and a mechanism should be set to replace the base key. Through the above design, a dynamic key data system based on access time can be implemented to improve the security of data access.

[0078] After the above three steps of verification, if all are passed, then the access request end 102 is considered to be legal, and the access request control module 1 can call the data in the memory of the smart meter 100 based on the requested interaction data and send it to the access request end 102, such as the smart meter 100 operation data at the time point or time interval specified by the requested interaction data.

[0079] The security of data access to the smart meter 100 is greatly improved, the security of the power system is guaranteed, and the accuracy of data accessed by the access request end 102 is ensured.

[0080] In embodiment 2, in step 1, multiple smart meters 100 are numbered based on the ad hoc network. In the same ad hoc network, the numbering format of the smart meters 100 is: ABC, where A is the area code, B is the device type code, and C is the serial number;

[0081] In Example 3, in step 5, if the access request control module 1 compares the C value in the number ABC with the C value of its own number, if they are the same, it is determined to be its own number.

[0082] In an ad hoc network of multiple smart meters 100, multiple smart meters 100 need to have a unique identifier to facilitate mutual identification and communication. The design of the numbering format needs to consider the scale of the network, the scalability of the meters, and the ease of management and maintenance.

[0083] The area code A is usually two letters or numbers, which is used to identify the geographical area or administrative area where the meter is located;

[0084] The equipment type code B is generally four letters or numbers, which are used to identify the model or functional type of the meter. For example, ELEC stands for smart meter.

[0085] The serial number C is generally a four-digit number depending on the situation, used to identify different individuals of the same type of electricity meters in the same area, and increases from 0001.

[0086] In embodiment 4, in step 3, the method for generating key data based on access time is: the access request control module 1 and the access request end 102 perform time synchronization based on NTP, and convert the current timestamp into a string or a value of fixed length;

[0087] The base key K_base is combined with the timestamp T_now, a hash function is applied to generate a hash value, and a substring of the required length is extracted from the hash value as the dynamic key.

[0088] In Example 5, the formula for generating key data based on access time is:

[0089] Let the base key be K_base, the current timestamp be T_now, the key generation function be F_keygen, and the dynamic key based on access time be K_dynamic;

[0090] ;

[0091] ;

[0092] ;

[0093] Among them, SHA-256 is a widely used cryptographic hash function; is the number of combinations of the base key and the timestamp, is to apply the SHA-256 hash function;

[0094] is a function to extract a substring, is the string index start position, is the string length.

[0095] : This is the result of the function call, that is, the substring extracted by the Substring function. K_dynamic usually represents a dynamically generated key or key value, which may have a specific purpose in the program, such as encryption, authentication, etc.

[0096] : This is a function name, indicating that this operation is to extract a substring from a longer string.

[0097] Hash_combined: This is the first parameter passed to the Substring function, which represents a calculated hash value (usually a string processed by a hash function). This hash value may be generated by combining multiple data through a hash function.

[0098] start: This is the second parameter passed to the Substring function, which defines the starting position of the extracted substring. This position is the index position starting from the left side of the Hash_combined string.

[0099] length: This is the third parameter passed to the Substring function, which defines the length of the substring to be extracted. Starting from the start position, extract length characters. The meaning of the entire function call is: from the Hash_combined hash value, starting from the start index position, extract a substring of length length and assign it to K_dynamic. This operation is usually used to obtain a fixed-length key value that is based on a hash value but contains only a portion of the hash value.

[0100] In Embodiment 6, key data based on access time is generated every one minute.

[0101] Assuming the base key K_base is secretkey123 and the current timestamp T_now is 2024-08-21T14:00:00Z, combine the base key and timestamp: K_combined="secretkey1232024-08-21T14:00:00Z" Apply the SHA-256 hash function: Hash_combined=SHA-256("secretkey1232024-08-21T14:00:00Z") Assuming the first 32 characters of the hash value as the dynamic key: K_dynamic=Substring(Hash_combined,0,32) In this way, every time interval, such as one minute, a new dynamic key will be generated based on the new timestamp. Time synchronization is the key, and it is necessary to ensure that the time deviation of the participating devices is within an acceptable range.

[0102] The base key K_base must be stored and transmitted securely and must not be leaked. The accuracy of the timestamp (such as seconds or milliseconds) will affect the key update frequency. The key length should be determined according to the requirements of the encryption algorithm and security requirements. The risk of key leakage should be considered, and a mechanism should be set up to replace the base key. Through the above design, a dynamic key data system based on access time can be implemented to improve the security of smart meter data access.

[0103] In Example 7, in step 4, the method by which the central server 101 determines whether the access terminal network address data belongs to a network address in the secure address database is:

[0104] The secure address database contains multiple sets of trusted secure network address data and associated information data;

[0105] A network address matching algorithm is used to compare the access end network address data with the secure network address data in the secure address database, and whether it belongs is determined based on the matching result.

[0106] In Example 8, the secure network address data and associated information data are IP address range, subnet mask and network prefix.

[0107] Assume that the access end network address is A_ip, the address entry in the secure network address database is DB_ip, each entry contains the network address Net_ip and the subnet mask Mask, the address matching function is F_match, and the formula for determining whether the network address belongs to the secure address database is:

[0108] ;

[0109] in It is a Boolean value indicating whether the access end network address data belongs to the secure address data;

[0110] The address matching function F_match is defined using the following formula:

[0111] ;

[0112] AND represents the bitwise AND operation, which is used to combine the IP address with the subnet mask to determine the network address.

[0113] The secure network address database needs to be regularly updated and maintained to reflect the latest security policies. The collection of access end network addresses should be accurate. The address matching algorithm should be able to operate efficiently to cope with a large number of access requests. For IPv6 addresses, the matching algorithm needs to be adjusted accordingly. Through the above method, the central server 101 can effectively determine whether the access end network address belongs to the network address in the secure address database, thereby deciding whether to allow access.

[0114] Embodiment 9, a data access control system based on a multi-user smart meter, is used to implement a data access control method based on a multi-user smart meter. The data access control system includes multiple smart meters 100, a meter communication module 103 and a central server 101. The multiple smart meters 100 are respectively connected to the central server 101 through the meter communication module 103, and are connected based on the self-organizing network communication of the meter communication module 103. The access request end 102 is connected to the multiple smart meters 100 through the meter communication module 103 to exchange remote data access request data. The smart meter 100 is provided with an access request control module 1 based on a data analysis chip, and the access request control module 1 is connected to the central server 101 through the meter communication module 103.

[0115] The above are all preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Therefore, any equivalent changes made based on the structure, shape, and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A data access control method based on a multi-user smart meter, characterized in that: The following steps are involved: Step 1, numbering a plurality of smart meters (100) installed by a plurality of users respectively; Step 2: when the smart meter (100) receives a remote data access request sent by the access request end (102), the access request control module (1) parses the remote data access request data packet to obtain access request data; Step 3, the access request control module (1) verifies whether the data format of the access request data satisfies the standard data format, where the standard data format includes complete access end network address data, complete access target number data, key data based on access time, and request interaction data; The formula for generating key data based on access time is: Let the base key be K_base, the current timestamp be T_now, the key generation function be F_keygen, and the dynamic key based on access time be K_dynamic; Among them, SHA-256 is a widely used cryptographic hash function; is the number of combinations of the base key and the timestamp, is to apply the SHA-256 hash function; is a function to extract a substring, is the string index start position, is the string length; Step 4, if the access request control module (1) determines that the access request data in step 3 meets the standard format, it communicates with the central server (101) to exchange the access end network address data, and the central server (101) determines whether the access end network address data belongs to the network address in the security address database. If it is determined that it does, it feeds back a access end network address verification success signal to the access request control module (1); Assume that the access end network address is A_ip, the address entry in the secure network address database is DB_ip, each entry contains the network address Net_ip and the subnet mask Mask, the address matching function is F_match, and the formula for determining whether the network address belongs to the secure address database is: in It is a Boolean value indicating whether the access end network address data belongs to the secure address data; The address matching function F_match is defined using the following formula: Where AND represents the bitwise AND operation, which is used to combine the IP address with the subnet mask to determine the network address; Step 5, if the access request control module (1) receives a feedback access end network address verification success signal, it continues to perform access target number data verification to determine whether the access target number data is its own number, and if so, performs key data verification; if the access target number data is not its own number, the access request data is forwarded to the smart meter (100) with the corresponding number based on the self-organizing network, and the smart meter (100) with the corresponding number continues to perform key data verification; Step 6: If the key data verification succeeds, the access request is judged to be qualified, and the corresponding request interaction data stored in the memory of the smart meter (100) is retrieved and sent to the access end network address data.

2. The data access control method based on a multi-user smart meter according to claim 1 is characterized in that: In step 1, a plurality of smart meters (100) are numbered based on an ad hoc network. In the same ad hoc network, the numbering format of the smart meters (100) is: ABC, where A is the area code, B is the device type code, and C is the serial number; In step 5, if the access request control module (1) compares the C value in the number ABC with the C value of its own number, if they are the same, it is determined to be its own number.

3. The data access control method based on a multi-user smart meter according to claim 2 is characterized in that: In step 3, the method for generating key data based on access time is as follows: the access request control module (1) and the access request end (102) perform time synchronization based on NTP, and convert the current timestamp into a character string or a numerical value of a fixed length; The base key K_base is combined with the timestamp T_now, a hash function is applied to generate a hash value, and a substring of the required length is extracted from the hash value as the dynamic key.

4. The data access control method based on a multi-user smart meter according to claim 3 is characterized in that: Generates access time-based key data every one minute.

5. The data access control method based on a multi-user smart meter according to claim 3 is characterized in that: In step 4, the method by which the central server (101) determines whether the access terminal network address data belongs to a network address in the secure address database is: The secure address database contains multiple sets of trusted secure network address data and associated information data; A network address matching algorithm is used to compare the access end network address data with the secure network address data in the secure address database, and whether it belongs is determined based on the matching result.

6. The data access control method based on a multi-user smart meter according to claim 5 is characterized in that: The secure network address data and associated information data are the IP address range, subnet mask and network prefix.

7. Data access control system based on multi-user smart meter, characterized by: The data access control method based on a multi-user smart meter as claimed in claim 6 is used to implement the data access control method based on a multi-user smart meter, the data access control system comprising a plurality of smart meters (100), a meter communication module (103) and a central server (101), the plurality of smart meters (100) are respectively connected to the central server (101) through the meter communication module (103), and are connected to the central server (101) in an ad hoc network based on the meter communication module (103), the access request end (102) is connected to the plurality of smart meters (100) in communication through the meter communication module (103), and exchanges remote data access request data, the smart meter (100) is provided with an access request control module (1) based on a data analysis chip, and the access request control module (1) is connected to the central server (101) in communication through the meter communication module (103).

Images