Information security protection method and system for gravity energy storage monitoring system

Abstract

The present invention discloses an information security protection method and system for a gravity energy storage monitoring system, comprising collecting gravity energy storage system monitoring data and external access information for preprocessing and storing in an information management module; using a security assessment algorithm to calculate and analyze the preprocessed gravity energy storage system monitoring data, and storing the results in the information management module; using a trust assessment algorithm to calculate and analyze the external access information of the gravity energy storage system, and storing the results in the information management module; extracting the monitoring assessment results and access assessment results from the information management module, and generating execution instructions for the gravity energy storage system. The present invention ensures the safe and stable operation of the system by evaluating the monitoring data; intercepts abnormal access behavior by evaluating the external access information, and protects the system from external intrusion; realizes comprehensive security monitoring and access management of the gravity energy storage monitoring system, and provides information security protection for the safe and stable operation of the gravity energy storage monitoring system.

Description

Technical Field

[0001] The present invention relates to the field of information security protection, and in particular to an information security protection method and system for a gravity energy storage monitoring system. Background Art

[0002] With the continuous growth of global energy demand and the improvement of renewable energy utilization, energy storage technology has become one of the important means to solve the imbalance between energy supply and demand and improve energy utilization efficiency. As a new energy storage method, gravity energy storage technology converts electrical energy into potential energy storage. It has the advantages of large energy storage capacity, long service life, and environmental friendliness, and has attracted widespread attention and research. The basic principle of the gravity energy storage system is to use the traction motor to drive the mass block upward, converting electrical energy into the potential energy storage of the mass block. When the energy needs to be released, the mass block falls and drives the traction motor to work, converting the potential energy back into electrical energy output, thereby realizing energy storage and release.

[0003] The gravity energy storage monitoring system primarily monitors the system's operating status in real time through sensors, data acquisition terminals, and communication networks, and centrally manages and dispatches the system through a control center. While this centralized monitoring model improves system efficiency, it also faces severe information security challenges.

[0004] At present, since the gravity energy storage system is still in its infancy, an information security protection method and system for the gravity energy storage monitoring system has not yet been established. The existing information security protection methods are only targeted at specific systems and cannot be directly applied to the gravity energy storage system. Therefore, there is an urgent need for an information security protection method and system for the gravity energy storage monitoring system. Summary of the Invention

[0005] In response to the problem that existing information security protection methods and systems for gravity energy storage monitoring systems are lacking, the present invention proposes an information security protection method and system for gravity energy storage monitoring systems.

[0006] The technical solutions of the present invention are as follows:

[0007] In a first aspect, an embodiment of the present invention provides an information security protection method for a gravity energy storage monitoring system, which includes:

[0008] Collect gravity energy storage system monitoring data and external access information, pre-process the acquired information, and store it in the information management module;

[0009] Extracting the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, performing calculations and analyses using the safety assessment algorithm, generating monitoring assessment results, and storing the analysis results in the information management module;

[0010] By running the security access module, the external access information of the gravity energy storage system is extracted from the information management module, and the trust evaluation algorithm is used to calculate and analyze the information, generate the access evaluation results, and store the analysis results in the information management module;

[0011] By running the security management module, the monitoring evaluation results and access evaluation results are extracted from the information management module to generate execution instructions for the gravity energy storage system.

[0012] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the information management module includes the following steps:

[0013] On-site collection of gravity energy storage system monitoring data and external access information;

[0014] Store gravity energy storage system monitoring data in the security log and store external access information in the historical access record database;

[0015] Preprocessing the monitoring data of the gravity energy storage system includes: calculating the hash value H(m) of the monitoring data m; signing the hash value H(m) with a private key to obtain a signature σ;

[0016] Storing monitoring and evaluation results generated by the monitoring management module;

[0017] Storing access assessment results generated by the security access module;

[0018] The gravity energy storage system execution instructions generated by the storage safety management module.

[0019] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the monitoring management module includes the following steps:

[0020] Extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module;

[0021] Use security assessment algorithms to calculate and analyze pre-processed data to generate monitoring assessment results;

[0022] The calculation and analysis steps of the security assessment algorithm are as follows:

[0023] Use the public key to verify the signature σ and hash value H(m);

[0024] Extract the feature vector x of the preprocessed data, use the trained isolation forest model to perform anomaly detection, and output the monitoring evaluation results;

[0025] The specific formula of the isolation forest model is as follows:

[0026]

[0027] Where s(x,n) is the abnormal score of monitoring data, h i (x i ) is the path length of the i-th data point, H(i) is the i-th harmonic number;

[0028] The monitoring and evaluation results are stored in the information management module so that the security management module can extract them.

[0029] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the security access module includes the following steps:

[0030] Extracting external access information of the gravity energy storage system from the information management module by running the security access module;

[0031] Use trust evaluation algorithms to calculate and analyze external access information and generate access evaluation results;

[0032] The calculation and analysis steps of the trust evaluation algorithm are as follows:

[0033] The reputation score R of the external access entity is calculated based on historical behavior records. The specific formula is:

[0034]

[0035] Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions;

[0036] Define the basic probability of the source's historical access record database as m1, and define the basic probability of the source's security log as m2. Combine the evidence from the two sources to obtain the comprehensive trust level. The specific formula is:

[0037]

[0038] Among them, m(A) is the basic probability assignment after combination, m1(B) and m2(C) are the basic probability assignments of source 1 and source 2 to access information B and C respectively;

[0039] Combining the reputation score and the evidence combination results, we get the access evaluation result T. The specific formula is:

[0040] T=f(R i ,m(A))

[0041] Among them, f is the mapping function, which converts the reputation score R i Combined with the comprehensive trust m(A) to obtain the access evaluation result T;

[0042] The access assessment results are stored in the information management module so that the security management module can extract them.

[0043] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the security management module includes the following steps:

[0044] Extract monitoring assessment results and access assessment results from the information management module by running the security management module;

[0045] If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed;

[0046] If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted;

[0047] If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions;

[0048] If the access assessment result is abnormal, the external access entity will be denied access to the gravity energy storage monitoring system and execution of instructions;

[0049] The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

[0050] As a preferred solution of the information security protection method for the gravity energy storage monitoring system of the present invention, the gravity energy storage system monitoring data includes slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoisting motor data, gantry crane travel motor data, gantry crane hoisting wire rope data, transformer data, and mass block data.

[0051] In a second aspect, an embodiment of the present invention provides an information security protection system for a gravity energy storage monitoring system, comprising:

[0052] The information management module includes on-site collection of gravity energy storage system monitoring data and external access information, storage of gravity energy storage system monitoring data in a security log, storage of external access information in a historical access record database, pre-processing of gravity energy storage system monitoring data, storage of monitoring evaluation results generated by the monitoring management module, storage of access evaluation results generated by the security access module, and storage of gravity energy storage system execution instructions generated by the security management module;

[0053] The monitoring management module extracts the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, verifies the digital signature and hash value of the monitoring data using the public key, extracts the feature vector x of the monitoring data, performs anomaly detection using the trained isolation forest model, generates monitoring evaluation results, and stores the analysis results in the information management module;

[0054] A security access module is used to extract external access information of the gravity energy storage system from the information management module by running the security access module, calculate the reputation score of the external access entity based on historical behavior records, combine evidence from the source historical access record database and the source security log to obtain a comprehensive trustworthiness, generate access assessment results, and store the analysis results in the information management module;

[0055] The security management module extracts the monitoring evaluation results and access evaluation results from the information management module by running the security management module, and generates execution instructions for the gravity energy storage system.

[0056] Compared with the prior art, the technical solution of the present invention has the following beneficial effects:

[0057] The present invention proposes an information security protection method for a gravity energy storage monitoring system. By evaluating monitoring data, the safe and stable operation of the system is guaranteed. By evaluating external access information, abnormal access behavior is intercepted to protect the system from external intrusion. By monitoring evaluation results and access evaluation results, comprehensive security monitoring and access management of the gravity energy storage monitoring system are achieved, providing information security protection for the safe and stable operation of the gravity energy storage monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments. It should be understood that the following drawings only illustrate certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without making any creative efforts.

[0059] Figure 1 Schematic diagram of an information security protection method for a gravity energy storage monitoring system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0060] In order to more clearly understand the above-mentioned objects, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that, in the absence of conflict, the embodiments of the present application and the features therein can be combined with each other.

[0061] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the scope of protection of the present invention is not limited to the specific embodiments disclosed below.

[0062] For easier understanding, see Figure 1 The present invention provides an embodiment of an information security protection method for a gravity energy storage monitoring system, comprising:

[0063] S1: Collect the monitoring data of the gravity energy storage system and external access information, pre-process the acquired information, and store it in the information management module.

[0064] Specifically, the gravity energy storage system monitoring data includes slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoisting motor data, gantry crane travel motor data, gantry crane hoisting wire rope data, transformer data, and mass block data.

[0065] Specifically, the monitoring data of the gravity energy storage system is preprocessed, including calculating the hash value H(m) of the monitoring data m; and signing the hash value H(m) with a private key to obtain a signature σ.

[0066] S2: Extract the pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, and evaluate it using the safety assessment algorithm.

[0067] Specifically, the monitoring management module includes the following steps: extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module;

[0068] Use security assessment algorithms to calculate and analyze pre-processed data to generate monitoring assessment results;

[0069] The calculation and analysis steps of the security assessment algorithm are as follows:

[0070] Use the public key to verify the signature σ and hash value H(m);

[0071] Extract the feature vector x of the monitoring data, use the trained isolation forest model to perform anomaly detection, and output the monitoring evaluation results;

[0072] The specific formula of the isolation forest model is as follows:

[0073]

[0074] Where s(x,n) is the abnormal score of monitoring data, h i (x i) is the path length of the i-th data point, H(i) is the i-th harmonic number;

[0075] The monitoring and evaluation results are stored in the information management module so that the security management module can extract them.

[0076] S3: Extract external access information of the gravity energy storage system from the information management module by running the security access module and evaluate it using the trust evaluation algorithm.

[0077] Specifically, the security access module includes the following steps: extracting external access information of the gravity energy storage system from the information management module by running the security access module;

[0078] Use trust evaluation algorithms to calculate and analyze external access information and generate access evaluation results;

[0079] The calculation and analysis steps of the trust evaluation algorithm are as follows: the reputation score R of the external access entity is calculated based on historical behavior records. The formula is:

[0080]

[0081] Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions;

[0082] Define the basic probability of the source's historical access record database as m1, and define the basic probability of the source's security log as m2. Combine the evidence from the two sources to obtain the comprehensive trust level. The specific formula is:

[0083]

[0084] Among them, m(A) is the basic probability assignment after combination, m1(B) and m2(C) are the basic probability assignments of source 1 and source 2 to access information B and C respectively;

[0085] Combining the reputation score and the evidence combination results, we get the access evaluation result T. The specific formula is:

[0086] T=f(R i ,m(A))

[0087] Among them, f is the mapping function, which converts the reputation score R i Combined with the comprehensive trust m(A) to obtain the access evaluation result T;

[0088] The access assessment results are stored in the information management module so that the security management module can extract them.

[0089] S4: Extract monitoring assessment results and access assessment results from the information management module by running the security management module, and issue execution instructions to the gravity energy storage monitoring system.

[0090] Specifically, the security management module includes the following steps:

[0091] Extract monitoring assessment results and access assessment results from the information management module by running the security management module;

[0092] If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed;

[0093] If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted;

[0094] If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions;

[0095] If the access assessment result is abnormal, the external access entity will be denied access to the gravity energy storage monitoring system and execution of instructions;

[0096] The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

[0097] Furthermore, this embodiment also provides an information security protection system for a gravity energy storage monitoring system, comprising: an information management module, including on-site collection of gravity energy storage system monitoring data and external access information, storage of gravity energy storage system monitoring data in a security log, storage of external access information in a historical access record database, pre-processing of gravity energy storage system monitoring data, storage of monitoring evaluation results generated by the monitoring management module, storage of access evaluation results generated by the security access module, and storage of gravity energy storage system execution instructions generated by the security management module; a monitoring management module, extracting pre-processed gravity energy storage system monitoring data from the information management module by running the monitoring management module, and verifying the digital signature of the monitoring data using the public key and hash value, extract the feature vector x of the monitoring data, use the trained isolation forest model to perform anomaly detection, generate monitoring evaluation results, and store the analysis results in the information management module; the security access module is used to extract the external access information of the gravity energy storage system from the information management module by running the security access module, and at the same time calculate the reputation score of the external access entity based on the historical behavior records, combine the evidence of the source historical access record database and the source security log to obtain a comprehensive trust degree, generate access evaluation results, and store the analysis results in the information management module; the security management module extracts the monitoring evaluation results and access evaluation results from the information management module by running the security management module, and generates execution instructions for the gravity energy storage system.

[0098] In summary, the present invention establishes an information security management data foundation by collecting monitoring data and external access information of the gravity energy storage system; ensures the safe and stable operation of the system through monitoring security assessment of the monitoring data; intercepts abnormal access behavior through trust assessment of external access information, and protects the system from external intrusion; realizes comprehensive security monitoring and access management of the gravity energy storage monitoring system through monitoring assessment results and access assessment results, and provides information security protection for the safe and stable operation of the gravity energy storage monitoring system.

Claims

1. An information security protection method for a gravity energy storage monitoring system, characterized by: include, Collecting gravity energy storage system monitoring data and external access information, including slope traction motor data, traction motor gearbox data, slope main traction device data, traction motor brake data, traction chain data, buffer conveyor belt data, gantry crane hoist motor data, gantry crane travel motor data, gantry crane hoist wire rope data, transformer data, and mass block data; Preprocessing the monitoring data includes calculating a hash value H(m) of the monitoring data m; signing the hash value H(m) using a private key to obtain a signature σ, and storing the preprocessed data in an information management module; By running the monitoring management module, the pre-processed gravity energy storage system monitoring data is extracted from the information management module. The signature σ and hash value H(m) are verified using the public key, the feature vector x of the pre-processed data is extracted, and anomaly detection is performed using the trained isolation forest model to output the monitoring evaluation results. The specific formula of the isolation forest model is as follows: Where s(x,n) is the abnormal score of monitoring data, h i (x i ) is the path length of the i-th data point, H(i) is the i-th harmonic number; By running the security access module, the external access information of the gravity energy storage system is extracted from the information management module. The reputation score R of the external access entity is calculated based on the historical behavior records. The specific formula is: Among them, R i is the reputation score of the i-th external access entity, S ij is the score of the i-th entity in the j-th interaction, W j is the weight of the jth interaction; n is the number of interactions; Define the basic probability of the source's historical access record database as m1, and define the basic probability of the source's security log as m2. Combine the evidence from the two sources to obtain the comprehensive trust level. The specific formula is: Among them, m(A) is the basic probability assignment after combination, m1(B) and m2(C) are the basic probability assignments of source 1 and source 2 to access information B and C respectively; Combining the reputation score and the evidence combination results, we get the access evaluation result T. The specific formula is: T=f(R i ,m(A)) Among them, f is the mapping function, which converts the reputation score R i Combined with the comprehensive trust m(A) to obtain the access evaluation result T; By running the security management module, the monitoring and evaluation results and access evaluation results are extracted from the information management module. If the monitoring and evaluation are abnormal, the instructions are intercepted; if the access evaluation is abnormal, access is denied. The gravity energy storage system execution instructions are generated and stored in the information management module.

2. The information security protection method for a gravity energy storage monitoring system according to claim 1, characterized in that: The information management module includes the following steps: The gravity energy storage system monitoring data is stored in the security log, and the external access information is stored in the historical access record database; Storing monitoring and evaluation results generated by the monitoring management module; Storing access assessment results generated by the security access module; The gravity energy storage system execution instructions generated by the storage safety management module.

3. The information security protection method for a gravity energy storage monitoring system according to claim 1, characterized in that: The security management module includes the following steps: Extract monitoring assessment results and access assessment results from the information management module by running the security management module; If the monitoring and evaluation results are normal, the transmission of monitoring data and the execution of control instructions are allowed; If the monitoring and evaluation results are abnormal, the abnormal monitoring data will be filtered and abnormal control instructions will be intercepted; If the access assessment result is normal, the external access entity is allowed to access the gravity energy storage monitoring system and execute instructions; If the access assessment result is abnormal, the external access entity will be denied access to the gravity energy storage monitoring system and execution of instructions; The execution instructions of the gravity energy storage monitoring system are stored in the information management module and sent for execution.

4. An information security protection system for a gravity energy storage monitoring system, based on the information security protection method for a gravity energy storage monitoring system according to any one of claims 1 to 3, characterized in that: include, An information management module is used to collect gravity energy storage system monitoring data and external access information, store the gravity energy storage system monitoring data in a security log, store external access information in a historical access record database, pre-process the gravity energy storage system monitoring data, store the monitoring evaluation results generated by the monitoring management module, store the access evaluation results generated by the security access module, and store the gravity energy storage system execution instructions generated by the security management module; The monitoring management module is used to extract the pre-processed gravity energy storage system monitoring data from the information management module, verify the digital signature and hash value of the monitoring data using the public key, extract the feature vector x of the monitoring data, perform anomaly detection using the trained isolation forest model, generate monitoring evaluation results, and store the analysis results in the information management module; The security access module is used to extract external access information of the gravity energy storage system from the information management module, calculate the reputation score of the external access entity based on historical behavior records, combine the evidence from the source historical access record database and the source security log to obtain a comprehensive trust level, generate access assessment results, and store the analysis results in the information management module; The security management module is used to generate execution instructions for the gravity energy storage system by extracting monitoring evaluation results and access evaluation results from the information management module.

Images