Intelligent substation inspection method and system based on information encryption

Abstract

The invention discloses an intelligent substation inspection method and system based on information encryption, and relates to the field of data processing, and the method comprises the steps: carrying out the selective extraction and dynamic encryption of inspection data based on an inspection request, and transmitting the inspection data to request equipment; performing frame extraction of a preset degree on the unencrypted inspection data to obtain frame-extracted copy data, and if it is detected that the inspection data is in a charging state or a security risk state, performing supplementary encryption on the copy data; if the access request of the local data is received, the authenticity of the position of the inspection equipment is verified when the access request is received, and the position information is output to the access control module only when the verification is passed; the access control module presets an access control mechanism based on the position and the key information, and provides access authority of local data only when the position and the key information meet preset requirements at the same time. According to the invention, multiple security protection is carried out by reducing the data volume, supplementing encryption and an access control mechanism, so that the security of local data is ensured.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and in particular to a substation intelligent inspection method and system based on information encryption. Background Art

[0002] At present, intelligent substation inspection solutions based on drones or inspection robots are becoming more and more common. During the inspection process, due to the frequent information communication involved, the existing technology usually designs a secure and complex encryption communication solution to ensure the security of the communication process.

[0003] However, researchers have discovered that inspection drones usually need to collect and transmit data in real time when performing tasks, but the actual amount of data transmitted is not large. Most of the data is stored locally for a long time after being collected. Therefore, if complex encryption algorithms are used to encrypt local data after the transmitted data has been encrypted, the amount of data processing computation and the time delay of transmission will increase. Drones are limited by their size and weight, and usually have limited computing and power resources. Complex encryption algorithms consume a lot of computing power and electricity. This full encryption method significantly affects the drone's endurance, stability, and the normal operation of other functions.

[0004] Therefore, in actual work, the existing technology usually sets the local data of the inspection drone to be accessed only by the drone itself and the ground control system. Therefore, the security of local data mainly depends on the effectiveness of access control measures rather than encryption algorithms. Therefore, considering the above factors, delay, endurance, stability and other issues, in actual work, the local data in the inspection equipment is generally not encrypted when it is saved.

[0005] However, on the one hand, conventional access control policies are usually static and cannot be adjusted dynamically according to environmental changes. They usually rely on a single factor (such as username and password) for authentication, which is easy to crack. On the other hand, the automatic inspection method is also prone to deviation and loss of connection. Therefore, once stolen or lost, combined with the above two reasons, illegal visitors have ample time and opportunities to decipher local data, which poses a security risk. If local data is encrypted in a complex way for this purpose, it will cause data delays, reduced battery life, and reduced stability during normal inspections. These problems constitute irreconcilable contradictions. Therefore, for inspection equipment, how to improve the security of local data without affecting real-time performance, battery life and system stability is a technical problem that needs to be solved urgently. Summary of the invention

[0006] In view of the problem that inspection equipment in the prior art is difficult to balance inspection performance and local data security, the present invention provides an intelligent substation inspection method and system based on information encryption, which extracts frames of inspection data that are not requested by the requested device and performs supplementary encryption at an appropriate time, and cooperates with location verification and an access control mechanism based on location and key information to achieve non-encryption of local data during normal inspections, without affecting the real-time performance, endurance and system stability during normal inspections. The security of local data is ensured by reducing the amount of data and performing supplementary encryption under specified conditions, and then a unique access control mechanism and supplementary encryption mechanism are superimposed for double security protection to ensure the security of local data.

[0007] The following is the technical solution of the present invention: The intelligent inspection method for substations based on information encryption is applicable to inspection equipment, and the inspection equipment performs the following steps: S1: Collect and save inspection data according to inspection tasks; S2: selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device; S3: extracting frames of the unencrypted inspection data to a preset degree to obtain the retained data after the extraction. If it is detected that the device is in a charging state or a safety risk state, the retained data is additionally encrypted; S4: If a request for access to local data is received, the authenticity of the location of the inspection device is verified upon receiving the access request, and the location information is output to the access control module only when the verification is passed; S5: The access control module presets an access control mechanism based on location and key information, and only provides access rights to local data when both the location and key information meet the preset requirements.

[0008] In the present invention, in view of the non-continuous working characteristics of the inspection equipment, the inspection request is not interfered during normal inspection, thereby ensuring that the real-time performance, endurance and system stability during normal inspection are not affected. When in a charging state or a security risk state, the local data is supplementarily encrypted to ensure the security of the local data. At the same time, considering the uncertainty of the security risk state, a frame extraction step is added during the normal inspection process. The frame extraction step with low computing power requirements is used to reduce the amount of local data in advance, so that the remaining data can be encrypted as quickly as possible when a security risk occurs. At the same time, the location information can be prevented from being tampered with through location verification, thereby ensuring that access is controllable based on the access control mechanism of location and key information. The present invention achieves both inspection performance and local data security from the two dimensions of data encryption and access control.

[0009] Preferably, the step S2: selectively extracting and dynamically encrypting the inspection data based on the inspection request, and sending the inspection data to the requesting device, comprises: The data to be sent is selected from the inspection data based on the inspection request, the data to be sent is encrypted and sent to the requesting device, and a first mark is added to the sent data after the sending is successful.

[0010] Preferably, in S3, the unencrypted inspection data is subjected to a preset degree of frame extraction to obtain the retained data after frame extraction, including: For any type of inspection data containing time series, the unencrypted part is framed based on a preset degree; The preset degree changes dynamically, wherein the larger the time stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction is, and the retained data after the frame extraction process is no longer used as a frame extraction object.

[0011] In the present invention, since the task of supplementary encryption is only performed in the charging state or the risk state, and these two states generally last much shorter than normal inspections, and at the same time, the non-essential data in the inspection data is much more than the necessary data in the inspection request, under the influence of these two factors, if all non-essential data are encrypted, the encryption time will be too long, especially in sudden situations such as risk states. Therefore, it is necessary to greatly reduce the amount of supplementary encrypted data in order to complete this step in a shorter time.

[0012] Preferably, extracting frames from the unencrypted part based on a preset degree comprises: Each time an encrypted inspection data is selected, the timestamps of adjacent unencrypted inspection data are traversed to obtain the difference between two adjacent timestamps; A timestamp interval threshold formula is set to calculate the interval threshold for the timestamp based on the timestamp of the unencrypted inspection data; If the difference between the timestamp of the frame and the timestamp of the next frame is less than the interval threshold, it is marked as a candidate for frame extraction; Traverse the unencrypted inspection data and delete the inspection data corresponding to all frame extraction candidates.

[0013] Preferably, the timestamp interval threshold formula includes: ; in, and are the preset maximum value and the preset minimum value respectively. is the growth coefficient, It is the difference between the timestamp to be determined and the timestamp of the encrypted inspection data.

[0014] In the present invention, in view of the characteristics of the inspection data, usually the inspection data when the inspection target is photographed will be transmitted and read according to the inspection request, while the video along the way or the inspection data when the surrounding environment is photographed is not so important and is only used as an auxiliary record. Therefore, the present invention performs frame extraction based on a preset degree to achieve that the longer the time interval between the unencrypted part and the encrypted part, the more frequent the frame extraction. The inspection data near the inspection target will be frame extracted less frequently, while the inspection data far away from the inspection target will be frame extracted more frequently, thereby saving local storage space and reducing the amount of data in subsequent local data processing.

[0015] Preferably, in S3, if it is detected that the battery is in a charging state or a safety risk state, the retained data is additionally encrypted, including: Preset areas and status conditions in the pre-set supplementary encryption mechanism; When the inspection device is located in the preset area, it is determined whether it is in a charging state. If it is in a charging state, the retained data is supplementally encrypted and a second mark is added. Otherwise, the supplementary encryption is not performed. When the inspection equipment is not located in the preset area, it is judged to be in a security risk state, and the retained data is additionally encrypted and a second mark is added.

[0016] Preferably, the S4: if a request for access to local data is received, then verifying the authenticity of the location of the inspection device upon receiving the access request, and outputting the location information to the access control module only when the verification is passed, includes: Record the position of the inspection equipment based on a preset frequency, and calculate the displacement speed of the inspection equipment once every preset time interval; If the displacement speed of the inspection device is greater than the preset threshold, it is considered that the location information has been tampered with and the verification fails; otherwise, the authentication passes.

[0017] In the present invention, since a special access control method is used to avoid affecting the endurance and performance of the inspection equipment during normal inspections, higher requirements are placed on the reliability of the access control mechanism. The present invention verifies the authenticity based on the continuity and change speed of the position to prevent tampering. Compared with common verification methods, the coverage is more comprehensive. In addition, due to the existence of the speed attribute, in order to deceive the system, a sufficiently long time is required to perform continuous position tampering, which greatly increases the difficulty of tampering.

[0018] Preferably, the access control module in S5 presets an access control mechanism based on location and key information, and provides access rights to local data only when both the location and key information meet preset requirements, including: Using user registration information as key information, build an access control mechanism based on location and key information; After receiving the verified location information, the access control module determines whether the location of the inspection device is within the pre-approved location range, and also determines whether the registration information entered by the user is correct. Only when both requirements are met will access to local data be provided.

[0019] Preferably, the S3 further includes: actively sending the supplementary encrypted backup data to the requesting device when in a security risk state, including: If it is determined that the device is in a security risk state, the retained data is additionally encrypted and a second tag is added, and the retained data with the second tag is actively sent to the requesting device.

[0020] As a preferred embodiment, the method further includes S6: presetting a redundant cleaning mechanism to continuously evaluate the security risk status, and selecting inspection data for deletion in batches based on the evaluation results, specifically including: If the inspection device does not return to the preset area within the first time threshold, the inspection data with the first mark is deleted, and if the inspection device does not return to the preset area within the second time threshold, the remaining data is deleted.

[0021] The present invention also provides a substation intelligent inspection system based on information encryption, including inspection equipment and a control platform, wherein the inspection equipment is configured to execute the above-mentioned substation intelligent inspection method based on information encryption.

[0022] The present invention also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and when the processor calls the computer program in the memory, the steps of the above-mentioned substation intelligent inspection method based on information encryption are implemented.

[0023] The present invention also provides a storage medium, in which computer executable instructions are stored. When the computer executable instructions are loaded and executed by a processor, the steps of the above-mentioned substation intelligent inspection method based on information encryption are implemented.

[0024] The substantial effects of the present invention include: The intelligent substation inspection method and system based on information encryption proposed in the present invention effectively solves the contradiction between the inspection performance and local data security of the inspection equipment. During the normal inspection process, the local data is not complicatedly encrypted, which ensures the real-time performance, endurance and system stability of the inspection. At the same time, the frame extraction technology is used to reduce the amount of local data in advance, so that when the inspection equipment is in a charging state or a security risk state, the retained data can be supplemented with encryption to ensure the security of the data. In addition, the present invention also introduces location verification and access control mechanisms based on location and key information. The double protection further enhances the security of local data.

[0025] Specifically, this method reduces the computational complexity of data processing and transmission by dynamically encrypting and selectively extracting inspection data. The use of frame extraction technology enables the rapid encryption of backup data when security risks occur. The location verification mechanism increases the time required for tampering by monitoring the displacement speed of the inspection equipment, effectively preventing tampering of location information. The access control mechanism based on location and key information ensures that local data can only be accessed when specific conditions are met, thereby improving data security.

[0026] In addition, the present invention also provides a redundant cleaning mechanism, which can select inspection data in batches for deletion according to the continuous evaluation results of the security risk status, thereby improving security.

[0027] In summary, the technical solution of the present invention not only ensures the normal inspection performance of the inspection equipment, but also ensures the security of local data through multiple security protection measures, providing a more efficient and reliable solution for the intelligent inspection of substations. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 is a flow chart of an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution will be clearly and completely described below in combination with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] In various embodiments of the present invention, the size of the sequence number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0031] In the present invention, "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus comprising a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to these processes, methods, products or apparatuses.

[0032] In the present invention, "plurality" refers to two or more. "And / or" is only a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "Contains A, B and C", "Contains A, B, C" means that A, B, and C are all included, "Contains A, B or C" means that one of A, B, and C is included, and "Contains A, B and / or C" means that any one, any two, or any three of A, B, and C are included.

[0033] The technical solution of the present invention is described in detail with specific embodiments below. The embodiments may be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0034] Example 1: Figure 1 As shown, the substation intelligent inspection method based on information encryption is applicable to the inspection equipment, and the inspection equipment performs the following steps: S1: Collect and save inspection data according to inspection tasks.

[0035] In this embodiment, inspection equipment, such as drones or inspection robots, starts to perform inspection operations according to the preset inspection task plan. Various sensors carried on the equipment, such as high-definition cameras, infrared thermal imagers, etc., will collect real-time operating status data of the substation, including equipment appearance, temperature distribution, sound, etc. These data will be saved immediately in the local storage medium of the device, such as a solid-state drive or SD card, to ensure data integrity and subsequent traceability. At the same time, the system will record the time and location of data collection, providing a basis for subsequent data analysis and processing. Such an implementation method ensures the comprehensive collection and reliable preservation of inspection data, and provides strong support for subsequent inspection task execution and data utilization.

[0036] S2: Based on the inspection request, the inspection data is selectively extracted and dynamically encrypted, and sent to the requesting device.

[0037] Specifically, it includes: selecting data to be sent from the inspection data based on the inspection request, encrypting the data to be sent and sending it to the requesting device, and adding a first mark to the sent data after the sending is successful.

[0038] In this embodiment, when the requesting device of the control platform issues an inspection request, the inspection device will receive the request and parse the specific data content required. Then, the device will select the requested data from the local storage, which may include photos, video clips or temperature records of specific equipment. Then, the device will use a preset encryption algorithm to dynamically encrypt the data to ensure security during transmission. The encrypted data will be sent to the requesting device, such as the server of the control platform, via a wireless network. Once the data is successfully sent and confirmed, the inspection device will add a first tag to the sent data locally for subsequent data management.

[0039] For example, the AES symmetric encryption algorithm or the RSA asymmetric encryption algorithm can be used to dynamically encrypt the selected data. At the same time, in order to ensure the integrity of the data, a SHA-256 hash value can also be generated and sent together with the encrypted data for verification by the recipient. This implementation method ensures the security and integrity of the inspection data during transmission.

[0040] S3: extract frames of the unencrypted inspection data to a preset degree to obtain the retained data after the extraction. If it is detected that the device is in a charging state or a safety risk state, the retained data is additionally encrypted.

[0041] Specifically include: For any type of inspection data containing time series, extract frames from the unencrypted part based on a preset degree; The preset degree changes dynamically, wherein the larger the time stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction is, and the retained data after the frame extraction process is no longer used as a frame extraction object.

[0042] In this embodiment, since the task of supplementary encryption is only performed in the charging state or the risk state, and these two states generally last much shorter than normal inspections, and at the same time, the non-essential data in the inspection data is much more than the necessary data in the inspection request, therefore, under the influence of these two factors, if all non-essential data is encrypted, the encryption time will be too long, especially in sudden situations such as risk states, so it is necessary to greatly reduce the amount of supplementary encrypted data in order to complete this step in a shorter time.

[0043] The unencrypted part is extracted based on a preset degree, including: Each time an encrypted inspection data is selected, the timestamps of adjacent unencrypted inspection data are traversed to obtain the difference between two adjacent timestamps; A timestamp interval threshold formula is set to calculate the interval threshold for the timestamp based on the timestamp of the unencrypted inspection data; If the difference between the timestamp of the frame and the timestamp of the next frame is less than the interval threshold, it is marked as a candidate for frame extraction; Traverse the unencrypted inspection data and delete the inspection data corresponding to all frame extraction candidates.

[0044] The timestamp interval threshold formula of this embodiment includes: ; in, and are the preset maximum value and the preset minimum value respectively. is the growth coefficient, It is the difference between the timestamp to be determined and the timestamp of the encrypted inspection data.

[0045] In this embodiment, in view of the characteristics of the inspection data, the inspection data when the inspection target is photographed will usually be transmitted and read according to the inspection request, while the video along the way or the inspection data when the surrounding environment is photographed is not so important and is only used as an auxiliary record. Therefore, the present invention performs frame extraction based on a preset degree to achieve that the longer the time interval between the unencrypted part and the encrypted part, the more frequent the frame extraction. The inspection data near the inspection target will be frame extracted less frequently, while the inspection data far away from the inspection target will be frame extracted more frequently, thereby saving local storage space and reducing the amount of data in subsequent local data processing.

[0046] For example, the inspection device of this embodiment first identifies all unencrypted inspection data containing time series, which usually includes non-essential inspection data such as videos along the way and records of the surrounding environment. Then, according to the preset frame extraction degree, the device dynamically adjusts the frame extraction frequency. The storage amount of non-critical data is reduced, while ensuring the integrity of critical data (such as records near the inspection target).

[0047] Specifically, the inspection device selects one encrypted inspection data at a time and traverses the timestamps of its adjacent unencrypted data. By calculating the difference between adjacent timestamps and comparing it with the set timestamp interval threshold, the device decides which data frames should be marked as frame extraction candidates. The timestamp interval threshold is calculated using the above formula, which takes into account the preset maximum and minimum values, as well as the growth coefficient and the difference between the timestamp to be judged and the encrypted data timestamp. After traversing all unencrypted data, the inspection device deletes all data frames marked as frame extraction candidates, thereby obtaining the retained data after frame extraction.

[0048] In addition, if the battery is detected to be in a charging state or a safety risk state, the retained data will be encrypted, including: Preset areas and status conditions in the pre-set supplementary encryption mechanism; When the inspection device is located in the preset area, it is determined whether it is in a charging state. If it is in a charging state, the retained data is supplementally encrypted and a second mark is added. Otherwise, the supplementary encryption is not performed. When the inspection equipment is not located in the preset area, it is judged to be in a security risk state, and the retained data is additionally encrypted and a second mark is added.

[0049] In this embodiment, since these two states usually last for a short time and non-critical data is much more than critical data, the amount of data to be encrypted can be significantly reduced by frame extraction, thereby completing the encryption task in a shorter time. This implementation method not only saves local storage space, but also improves data processing efficiency.

[0050] S4: If a request for accessing local data is received, the authenticity of the location of the inspection device is verified upon receiving the access request, and the location information is output to the access control module only when the verification is passed.

[0051] Specifically include: Record the position of the inspection equipment based on a preset frequency, and calculate the displacement speed of the inspection equipment once every preset time interval; If the displacement speed of the inspection device is greater than the preset threshold, it is considered that the location information has been tampered with and the verification fails; otherwise, the authentication passes.

[0052] In this embodiment, since a special access control method is used to avoid affecting the endurance and performance of the inspection equipment during normal inspections, higher requirements are placed on the reliability of the access control mechanism. The present invention verifies the authenticity based on the continuity and change speed of the position to prevent tampering. Compared with common verification methods, the coverage is more comprehensive. In addition, due to the existence of the speed attribute, in order to deceive the system, a sufficiently long time is required to perform continuous position tampering, which greatly increases the difficulty of tampering.

[0053] For example, the inspection device will regularly record its own position and calculate the displacement speed by comparing the position information of adjacent recording points. If the calculated displacement speed exceeds the preset threshold, the system will consider that the position information may have been tampered with. In this case, the verification fails and the device will not output the position information to the access control module. Only when the displacement speed is within a reasonable range, that is, the verification passes, will the device output the position information for use by the access control module.

[0054] Compared with common verification methods, this verification method based on location continuity and change speed provides more comprehensive coverage and can effectively prevent tampering of location information. Due to the introduction of speed attributes, it is necessary to perform long-term continuous location tampering to deceive the system, which increases the difficulty of tampering. Therefore, this embodiment can ensure that when receiving a local data access request, the output location information is authentic and reliable, providing a strong guarantee for the access control mechanism.

[0055] S5: The access control module presets an access control mechanism based on location and key information, and only provides access rights to local data when both the location and key information meet the preset requirements.

[0056] Specifically include: Using user registration information as key information, build an access control mechanism based on location and key information; After receiving the verified location information, the access control module determines whether the location of the inspection device is within the pre-approved location range, and also determines whether the registration information entered by the user is correct. Only when both requirements are met will access to local data be provided.

[0057] In this embodiment, in the S5 stage, the access control module implements a strict access control mechanism based on location and key information. This mechanism first uses the user's registration information as key information, combined with the location information of the inspection device, to form a dual condition for access control.

[0058] When the access control module receives the verified location information, it immediately starts the judgment process. On the one hand, the module checks whether the location of the inspection device is within the pre-set security range to ensure that the device is operating in the authorized geographical area. On the other hand, the module requires the user to enter the registration information and verifies the accuracy to ensure that only legitimate users can access the data.

[0059] Only when the location of the inspection device and the user registration information meet the preset requirements at the same time, the access control module will unlock the access rights to the local data. This double verification mechanism greatly improves the security of data access, prevents the risk of unauthorized access and data leakage, and ensures the integrity and confidentiality of the inspection data.

[0060] In summary, this embodiment targets the characteristics of the non-continuous operation of the inspection equipment, and does not interfere with the inspection request during normal inspection, thereby ensuring that the real-time performance, endurance and system stability during normal inspection are not affected. When in the charging state or the security risk state, the local data is supplementarily encrypted to ensure the security of the local data. At the same time, considering the uncertainty of the security risk state, a frame extraction step is added during the normal inspection process, and the amount of local data is reduced in advance through the frame extraction step with low computing power requirements, so that the remaining data can be encrypted as quickly as possible when a security risk occurs. At the same time, location verification can prevent the location information from being tampered with, and then the access control mechanism based on location and key information ensures that access is controllable. The present invention achieves both inspection performance and local data security from the two dimensions of data encryption and access control.

[0061] Embodiment 2: This embodiment further enhances the security of data retention. Specifically, the difference from Embodiment 1 is that S3 further includes: actively sending the supplementary encrypted retention data to the requesting device when in a security risk state. Specifically, it includes: If it is determined that the device is in a security risk state, the retained data is additionally encrypted and a second tag is added, and the retained data with the second tag is actively sent to the requesting device.

[0062] In this embodiment, when the inspection device detects that it is in a security risk state, the supplementary encryption process is immediately triggered. The device first performs comprehensive supplementary encryption on the retained data to ensure that the confidentiality of the data is not compromised, and adds a second mark to the encrypted data for subsequent tracking and management. After completing these operations, the device will not wait for external access requests, but will actively send the encrypted retained data with the second mark to the requesting device, such as the server of the control platform. In this way, even if the device is damaged or data is lost in a security risk state, the requesting device can obtain the complete retained data in time, thereby ensuring the continuity and integrity of the inspection data.

[0063] Embodiment 3: This embodiment further increases security redundancy. Specifically, the difference from Embodiment 1 or Embodiment 2 is that it also includes S6: a preset redundancy cleaning mechanism to continuously evaluate the security risk status, and select inspection data in batches for deletion based on the evaluation results, specifically including: If the inspection device does not return to the preset area within the first time threshold, the inspection data with the first mark is deleted, and if the inspection device does not return to the preset area within the second time threshold, the remaining data is deleted.

[0064] In this embodiment, the mechanism continuously evaluates the security risk status and selects inspection data for deletion in batches based on the evaluation results. In specific implementation, if the inspection device fails to return to the preset area within the first time threshold, the system will automatically delete the inspection data with the first mark to reduce potential security risks. If the device still does not return to the preset area within the second time threshold, the system will delete all remaining data to ensure that no security risks are left. This batch deletion strategy not only ensures the security of the data, but also avoids the impact on system performance caused by deleting a large amount of data at one time.

[0065] Embodiment 4: A substation intelligent inspection system based on information encryption includes an inspection device and a control platform, wherein the inspection device is configured to execute the above-mentioned substation intelligent inspection method based on information encryption.

[0066] The substation intelligent inspection system based on information encryption in this embodiment consists of two parts: inspection equipment and control platform, which realizes efficient and safe inspection of substations. The inspection equipment is used as the core execution unit of the system to execute a set of advanced intelligent inspection methods based on information encryption.

[0067] The control platform, as the command center of the system, is responsible for receiving, processing and analyzing the data uploaded by the inspection equipment. The platform will decrypt and verify the data to ensure its integrity and authenticity.

[0068] Through this intelligent substation inspection system based on information encryption, we have achieved comprehensive, efficient and safe inspections of substations, providing strong guarantees for the stable operation of the power system.

[0069] Embodiment 5: An electronic device comprises a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above-mentioned intelligent inspection method for substations based on information encryption when calling the computer program in the memory.

[0070] Embodiment 6: A storage medium stores computer executable instructions, and when the computer executable instructions are loaded and executed by a processor, the steps of the above-mentioned substation intelligent inspection method based on information encryption are implemented.

[0071] In summary, the intelligent substation inspection method and system based on information encryption proposed in this embodiment effectively solves the contradiction between the inspection performance and local data security of the inspection equipment. During the normal inspection process, the local data is not complexly encrypted, which ensures the real-time, endurance and system stability of the inspection. At the same time, the frame extraction technology is used to pre-reduce the amount of local data so that when the inspection equipment is in a charging state or a security risk state, the retained data is supplemented with encryption to ensure the security of the data. In addition, the present invention also introduces location verification and access control mechanisms based on location and key information. The double protection further enhances the security of local data.

[0072] Specifically, this method reduces the computational complexity of data processing and transmission by dynamically encrypting and selectively extracting inspection data. The use of frame extraction technology enables the rapid encryption of backup data when security risks occur. The location verification mechanism increases the time required for tampering by monitoring the displacement speed of the inspection equipment, effectively preventing tampering of location information. The access control mechanism based on location and key information ensures that local data can only be accessed when specific conditions are met, thereby improving data security.

[0073] In addition, this embodiment also provides a redundant cleaning mechanism, which can select inspection data for deletion in batches according to the continuous evaluation results of the security risk status, thereby improving security.

[0074] Through the description of the above implementation methods, technical personnel in the relevant field can understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the specific device can be divided into different functional modules to complete all or part of the functions described above.

[0075] In the embodiments provided in the present application, it should be understood that the disclosed structures and methods can be implemented in other ways. For example, the embodiments of the structure described above are only schematic. For example, the division of modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another structure, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, structures or units, which can be electrical, mechanical or other forms.

[0076] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0077] In addition, each functional unit in the embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0078] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium, including several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0079] The above contents are only specific implementation methods of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. The intelligent inspection method of substation based on information encryption is applicable to inspection equipment. It is characterized in that The inspection device performs the following steps: S1: Collect inspection data according to inspection tasks and save it as local data; S2: selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device; S3: extracting frames of the unencrypted inspection data to a preset degree to obtain the retained data after the extraction. If it is detected that the device is in a charging state or a safety risk state, the retained data is additionally encrypted; S4: If a request for access to local data is received, the authenticity of the location of the inspection device is verified upon receiving the access request, and the location information is output to the access control module only when the verification is passed; S5: The access control module presets an access control mechanism based on location and key information, and only provides access rights to local data when both the location and key information meet the preset requirements.

2. According to claim 1, the intelligent inspection method for substations based on information encryption, It is characterized in that S2: selectively extracting and dynamically encrypting the inspection data based on the inspection request, and sending it to the requesting device, including: The data to be sent is selected from the inspection data based on the inspection request, the data to be sent is encrypted and sent to the requesting device, and a first mark is added to the sent data after the sending is successful.

3. According to claim 1, the intelligent inspection method for substations based on information encryption, It is characterized in that In S3, the unencrypted inspection data is subjected to a preset degree of frame extraction to obtain the retained data after frame extraction, including: For any type of inspection data containing time series, the unencrypted part is framed based on a preset degree; The preset degree changes dynamically, wherein the larger the time stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction is, and the retained data after the frame extraction process is no longer used as a frame extraction object.

4. According to claim 3, the intelligent inspection method for substations based on information encryption, It is characterized in that The extracting of frames from the unencrypted part based on a preset degree includes: Each time an encrypted inspection data is selected, the timestamps of adjacent unencrypted inspection data are traversed to obtain the difference between two adjacent timestamps; A timestamp interval threshold formula is set to calculate the interval threshold for the timestamp based on the timestamp of the unencrypted inspection data; If the difference between the timestamp of the frame and the timestamp of the next frame is less than the interval threshold, it is marked as a candidate for frame extraction; Traverse the unencrypted inspection data and delete the inspection data corresponding to all frame extraction candidates.

5. According to claim 4, the intelligent inspection method for substations based on information encryption, It is characterized in that The timestamp interval threshold formula includes: ； in, and are the preset maximum value and the preset minimum value respectively. is the growth coefficient, It is the difference between the timestamp to be determined and the timestamp of the encrypted inspection data.

6. The substation intelligent inspection method based on information encryption according to claim 3, It is characterized in that In S3, if it is detected that the vehicle is in a charging state or a safety risk state, the retained data is additionally encrypted, including: Preset areas and status conditions in the pre-set supplementary encryption mechanism; When the inspection device is located in the preset area, it is determined whether it is in a charging state. If it is in a charging state, the retained data is supplementally encrypted and a second mark is added. Otherwise, the supplementary encryption is not performed. When the inspection equipment is not located in the preset area, it is judged to be in a security risk state, and the retained data is additionally encrypted and a second mark is added.

7. The substation intelligent inspection method based on information encryption according to claim 1, It is characterized in that S4: if a request for access to local data is received, the authenticity of the location of the inspection device is verified upon receiving the access request, and the location information is output to the access control module only when the verification is passed, including: Record the position of the inspection equipment based on the preset frequency, and calculate the displacement speed of the inspection equipment once every preset time interval; If the displacement speed of the inspection device is greater than the preset threshold, it is considered that the location information has been tampered with and the verification fails; otherwise, the authentication passes.

8. The substation intelligent inspection method based on information encryption according to claim 1, It is characterized in that The access control module S5 presets an access control mechanism based on location and key information, and only provides access rights to local data when both the location and key information meet the preset requirements, including: Using user registration information as key information, build an access control mechanism based on location and key information; After receiving the verified location information, the access control module determines whether the location of the inspection device is within the pre-approved location range, and also determines whether the registration information entered by the user is correct. Only when both requirements are met will access to local data be provided.

9. The substation intelligent inspection method based on information encryption according to claim 6, It is characterized in that The S3 also includes: actively sending the supplementary encrypted backup data to the requesting device when in a security risk state, including: If it is determined that the device is in a security risk state, the retained data is additionally encrypted and a second tag is added, and the retained data with the second tag is actively sent to the requesting device.

10. The substation intelligent inspection method based on information encryption according to claim 6, It is characterized in that It also includes S6: a preset redundant cleaning mechanism to continuously evaluate the security risk status and select inspection data for deletion in batches based on the evaluation results, including: If the inspection device does not return to the preset area within the first time threshold, the inspection data with the first mark is deleted, and if the inspection device does not return to the preset area within the second time threshold, the remaining data is deleted.

11. Intelligent inspection system for substations based on information encryption, including inspection equipment and control platform. It is characterized in that The inspection device is configured to execute the substation intelligent inspection method based on information encryption as described in any one of claims 1 to 10.

Images