Substation Intelligent Inspection Method and System Based on Information Encryption

Abstract

The present invention discloses a method and system for intelligent inspection of a substation based on information encryption, which relates to the field of data processing and includes: selectively extracting and dynamically encrypting inspection data based on an inspection request and sending it to the requesting device; performing frame extraction on the unencrypted inspection data to a preset degree to obtain the retained data after frame extraction, and if it is detected that the device is in a charging state or a security risk state, supplementarily encrypting the retained data; if an access request for local data is received, verifying the authenticity of the location of the inspection device when the access request is received, and only outputting the location information to the access control module when the verification is passed; the access control module is preset with an access control mechanism based on location and key information, and only provides access rights to local data when both the location and the key information meet the preset requirements. The present invention performs multiple security protections through reducing the data volume, supplementary encryption, and the access control mechanism to ensure the security of local data.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and particularly to an intelligent substation inspection method and system based on information encryption. Background Art

[0002] At present, intelligent substation inspection solutions based on unmanned aerial vehicles (UAVs) or inspection robots are becoming increasingly common. During the inspection process, due to frequent information communication, existing technologies usually design secure and complex encryption communication schemes to ensure the security of the communication process.

[0003] However, the researchers found that when an inspection UAV executes tasks, it usually needs to collect and transmit data in real time. In fact, the proportion of data actually transmitted is not large, and most of the data is stored locally for a long time after being collected. Therefore, if complex encryption algorithms are used to encrypt the local data on the basis of encrypting the transmitted data, it will increase the computational complexity of data processing and the time delay of transmission. Since UAVs are limited by their volume and weight, they usually have limited computing resources and power resources. Complex encryption algorithms consume a large amount of computing power and electricity, and this all-encryption method significantly affects the endurance, stability, and normal operation of other functions of the UAV.

[0004] Therefore, in actual work, existing technologies usually set the local data of inspection UAVs to be accessible only by the UAVs themselves and the ground control system. Therefore, the security of local data mainly depends on the effectiveness of access control measures rather than encryption algorithms. Considering the above factors and issues such as delay, endurance, and stability, in actual work, complex encryption is generally not performed when local data in inspection devices is saved.

[0005] However, on the one hand, conventional access control strategies are usually static, unable to be dynamically adjusted according to environmental changes, and usually rely only on a single factor (such as username and password) for authentication, with a low cracking difficulty. On the other hand, the automatic inspection method is also prone to situations such as deviation and loss of connection. Therefore, once stolen or lost, due to the above two reasons, illegal visitors have sufficient time and opportunity to decrypt the local data, posing a security risk. And if complex encryption is performed on the local data for this reason, it will lead to problems such as data delay, reduced endurance, and decreased stability during normal inspection. These problems constitute an irreconcilable contradiction. Therefore, for inspection devices, how to improve the security of local data without affecting real-time performance, endurance, and system stability is a technical problem that urgently needs to be solved at present. Summary of the Invention

[0006] Aiming at the problem that the existing inspection equipment is difficult to balance the inspection performance and local data security, the present invention provides a substation intelligent inspection method and system based on information encryption. It extracts frames and saves the inspection data that is not requested by the requesting device, and performs supplementary encryption at an appropriate time, and cooperates with location verification and an access control mechanism based on location and key information to achieve that local data is not encrypted during normal inspection, without affecting the real-time performance, battery life and system stability during normal inspection. By reducing the data volume and performing supplementary encryption in a specified state, the security of local data is ensured, and then a unique access control mechanism and supplementary encryption mechanism are superimposed for dual security protection to ensure the security of local data.

[0007] The following is the technical solution of the present invention:

[0008] A substation intelligent inspection method based on information encryption, applicable to inspection equipment, and the inspection equipment performs the following steps:

[0009] S1: Collect inspection data according to the inspection task and save it;

[0010] S2: Selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device;

[0011] S3: Perform frame extraction of the unencrypted inspection data to a preset degree to obtain the reserved data after frame extraction. If it is detected that the device is in a charging state or a security risk state, supplementary encryption is performed on the reserved data;

[0012] S4: If an access request for local data is received, verify the authenticity of the location of the inspection equipment when the access request is received, and only output the location information to the access control module when the verification is passed;

[0013] S5: The access control module is preset with an access control mechanism based on location and key information, and provides access rights to local data only when the location and key information simultaneously meet the preset requirements.

[0014] In the present invention, in view of the discontinuous working characteristics of the inspection equipment, no intervention is made on the inspection request during normal inspection, so as to ensure that the real-time performance, battery life and system stability during normal inspection are not affected. When in the charging state or the security risk state, the local data is supplemented and encrypted, which can ensure the security of the local data. At the same time, considering the uncertainty of the security risk state, a frame extraction step is added during the normal inspection process. The data volume of the local data is pre-reduced through the frame extraction step with low computing power requirements, so as to encrypt the archived data as soon as possible in a short time when a security risk occurs. At the same time, the location information can be prevented from being tampered with through location verification, and then the access control mechanism based on the location and key information ensures that the access is controllable. The present invention realizes the inspection performance and local data security that take into account both dimensions of data encryption and access control.

[0015] Preferably, the step S2: selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device, including:

[0016] Select the data to be sent from the inspection data based on the inspection request, encrypt the data to be sent and send it to the requesting device, and add a first mark to the sent data after successful sending.

[0017] Preferably, in the step S3, the unencrypted inspection data is frame-extracted to a preset degree to obtain the archived data after frame extraction, including:

[0018] For any type of inspection data containing time series, frame extraction is performed on the unencrypted part based on a preset degree;

[0019] The preset degree changes dynamically, wherein the larger the time stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction, and the archived data after frame extraction processing is no longer used as the frame extraction object.

[0020] In the present invention, since the task of supplementary encryption is only executed in the charging state or the risk state, and the duration of these two states is generally much shorter than that of normal inspection, and the non-essential data in the inspection data is much more than the essential data in the inspection request. Therefore, under the influence of these two factors, if all non-essential data is encrypted, the encryption time will be too long, especially in the case of a sudden situation such as the risk state. Therefore, it is necessary to greatly reduce the data volume of supplementary encryption in order to complete this step in a shorter time.

[0021] Preferably, the frame extraction of the unencrypted part based on a preset degree includes:

[0022] Each time an encrypted inspection data item is selected, traverse the time stamps of adjacent unencrypted inspection data to obtain the difference between two adjacent time stamps;

[0023] Set the timestamp interval threshold formula, and calculate the interval threshold for the timestamp based on the timestamp of the unencrypted inspection data;

[0024] If the difference between the timestamp and the timestamp of the next frame is less than the interval threshold, mark it as a candidate for frame extraction;

[0025] Traverse the unencrypted inspection data and delete the inspection data corresponding to all candidates for frame extraction.

[0026] Preferably, the timestamp interval threshold formula includes:

[0027] ;

[0028] Wherein, and are the preset maximum value and the preset minimum value respectively, is the growth coefficient, is the difference between the timestamp to be judged and the timestamp of the encrypted inspection data.

[0029] In the present invention, according to the characteristics of the inspection data, usually the inspection data when the inspection target is photographed will be transmitted and read according to the inspection request, while the videos along the way or the inspection data when the surrounding environment is photographed are not so important and are only used as auxiliary records. Therefore, the present invention performs frame extraction based on a preset degree to achieve that the longer the time interval between the unencrypted part and the encrypted part, the more frequent the frame extraction. For the inspection data near the inspection target, less frame extraction is performed, while for the inspection data far from the inspection target, more frequent frame extraction is performed, so as to save local storage space and reduce the amount of data during subsequent local data processing.

[0030] Preferably, in S3, if it is detected that the device is in a charging state or a security risk state, supplementary encryption is performed on the archived data, including:

[0031] Preset the preset area and status conditions in the supplementary encryption mechanism;

[0032] When the inspection device is located in the preset area, judge whether it is in the charging state. If it is in the charging state, perform supplementary encryption on the archived data and add a second mark, otherwise do not perform supplementary encryption;

[0033] When the inspection device is not located in the preset area, that is, judge that it is in a security risk state, and perform supplementary encryption on the archived data and add a second mark.

[0034] [[ID=4K]]Preferably, in S4: If an access request for local data is received, verify the authenticity of the location of the inspection device when the access request is received, and only output the location information to the access control module when the verification is passed, including:

[0035] Record the position of the inspection device based on a preset frequency, and calculate the displacement speed of the inspection device every preset time interval;

[0036] If the displacement speed of the inspection device is greater than the preset threshold, it is considered that the position information has been tampered with and the verification fails; otherwise, the authentication passes.

[0037] In the present invention, since a special access control method is adopted to avoid affecting the battery life and performance of the inspection device during normal inspection, a higher requirement is placed on the reliability of the access control mechanism. The present invention verifies authenticity based on the continuity and change speed of the position to prevent tampering. Compared with common verification methods, the coverage is more comprehensive. And due to the existence of the speed attribute, it takes a long time to continuously tamper with the position to deceive the system, greatly increasing the difficulty of tampering.

[0038] Preferably, in step S5: The access control module pre-sets an access control mechanism based on position and key information, and provides access rights to local data only when the position and key information both meet the preset requirements, including:

[0039] Use the user registration information as the key information to construct an access control mechanism based on position and key information;

[0040] After the access control module receives the verified position information, it judges whether the position of the inspection device is within the pre-examined position range, and at the same time judges whether the user-entered registration information is correct. Only when both meet the requirements, it provides access rights to local data.

[0041] Preferably, step S3 further includes: When in a security risk state, actively send the supplementary encrypted archived data to the requesting device, including:

[0042] If it is judged to be in a security risk state, while supplementing and encrypting the archived data and adding a second mark, actively send the archived data with the second mark to the requesting device.

[0043] Preferably, it further includes S6: Preset a redundant cleaning mechanism to continuously evaluate the security risk state, and batch-select inspection data for deletion based on the evaluation results, specifically including:

[0044] If the inspection device does not return to the preset area within the first time threshold, delete the inspection data with the first mark; if the inspection device does not return to the preset area within the second time threshold, delete the remaining data.

[0045] The present invention also provides a substation intelligent inspection system based on information encryption, including an inspection device and a control platform. The inspection device is configured to execute the above-mentioned substation intelligent inspection method based on information encryption.

[0046] The present invention also provides an electronic device, including a memory and a processor. A computer program is stored in the memory, and when the processor calls the computer program in the memory, the steps of the above-mentioned substation intelligent patrol inspection method based on information encryption are realized.

[0047] The present invention also provides a storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are loaded and executed by a processor, the steps of the above-mentioned substation intelligent patrol inspection method based on information encryption are realized.

[0048] The substantial effects of the present invention include:

[0049] The substation intelligent patrol inspection method and system based on information encryption proposed by the present invention effectively solve the contradiction between the patrol inspection performance of the patrol inspection device and the local data security. During normal patrol inspection, complex encryption is not performed on local data, ensuring the real-time performance, battery life and system stability of the patrol inspection. At the same time, the frame extraction technology is used to pre-reduce the local data volume, so that when the patrol inspection device is in a charging state or a security risk state, the remaining data can be supplemented and encrypted to ensure the security of the data. In addition, the present invention also introduces a location verification and an access control mechanism based on location and key information, and the dual protection further improves the security of local data.

[0050] Specifically, this method reduces the computational amount of data processing and transmission by dynamically encrypting and selectively extracting patrol inspection data. The application of the frame extraction technology enables the remaining data to be quickly encrypted when a security risk occurs. The location verification mechanism increases the time required for tampering by monitoring the displacement speed of the patrol inspection device, effectively preventing the tampering of location information. The access control mechanism based on location and key information ensures that local data can only be accessed when specific conditions are met, thereby improving the security of the data.

[0051] In addition, the present invention also provides a redundant cleaning mechanism, which can batch-select patrol inspection data for deletion according to the continuous evaluation results of the security risk state, improving the security.

[0052] In summary, the technical solution of the present invention not only ensures the normal patrol inspection performance of the patrol inspection device, but also ensures the security of local data through multiple security protection measures, providing a more efficient and reliable solution for the intelligent patrol inspection of substations. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] Figure 1 is a flowchart of an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0054] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will, in conjunction with the embodiments, clearly and completely describe the present technical solution. Obviously, the described embodiments are only a part rather than all of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of protection of the present invention.

[0055] In various embodiments of the present invention, the magnitudes of the serial numbers of the respective processes do not imply the order of execution, and the order of execution of the respective processes should be determined based on their functions and internal logics, and should not constitute any limitation to the implementation processes of the embodiments of the present invention.

[0056] In the present invention, "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0057] In the present invention, "a plurality of" means two or more. "And / or" is only a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "Including A, B, and C" and "including A, B, C" mean that all of A, B, and C are included. "Including A, B, or C" means that one of A, B, and C is included. "Including A, B, and / or C" means that any one or any two or all three of A, B, and C are included.

[0058] The following will detail the technical solution of the present invention with specific embodiments. The embodiments may be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments.

[0059] Embodiment 1: As Figure 1 shown, a substation intelligent inspection method based on information encryption is applicable to inspection equipment, and the inspection equipment performs the following steps:

[0060] S1: Collect inspection data according to the inspection task and save it.

[0061] In this embodiment, the inspection device, such as a drone or an inspection robot, starts to perform the inspection operation according to the preset inspection task plan. Various sensors carried on the device, such as high-definition cameras, infrared thermal imagers, etc., will collect the operation status data of the substation in real time, including the appearance of the equipment, temperature distribution, sound, etc. These data will be immediately saved in the local storage medium of the device, such as a solid-state drive or an SD card, to ensure the integrity of the data and subsequent traceability. At the same time, the system will record the collection time and location of the data, providing a basis for subsequent data analysis and processing. Such an implementation method ensures the comprehensive collection and reliable preservation of the inspection data, providing strong support for the subsequent execution of the inspection task and data utilization.

[0062] S2: Selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device.

[0063] Specifically, it includes: selecting the data to be sent from the inspection data based on the inspection request, encrypting the data to be sent and sending it to the requesting device, and adding a first mark to the sent data after successful sending.

[0064] In this embodiment, when the requesting device of the control platform issues an inspection request, the inspection device will receive the request and parse out the specific data content required. Then, the device will select these requested data from the local storage, which may include photos, video clips, or temperature records of specific equipment, etc. Next, the device will use the preset encryption algorithm to dynamically encrypt these data to ensure security during transmission. The encrypted data will be sent to the requesting device, such as the server of the control platform, via a wireless network. Once the data is successfully sent and confirmed, the inspection device will add a first mark to these sent data locally for subsequent data management.

[0065] For example, the AES symmetric encryption algorithm or the RSA asymmetric encryption algorithm can be used to dynamically encrypt the selected data. At the same time, to ensure the integrity of the data, an SHA-256 hash value can also be generated and sent together with the encrypted data for the receiving party to verify. Such an implementation method ensures the security and integrity of the inspection data during transmission.

[0066] S3: Perform frame extraction of the unencrypted inspection data to a preset degree to obtain the retained data after frame extraction. If it is detected that the device is in a charging state or a security risk state, additional encryption will be performed on the retained data.

[0067] Specifically, it includes:

[0068] For any type of inspection data containing time series, perform frame extraction on the unencrypted part to a preset degree;

[0069] The preset degree changes dynamically. Among them, the greater the time - stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction. Moreover, the remaining data after frame - extraction processing is no longer used as an object for frame extraction.

[0070] In this embodiment, since the supplementary encryption task is only executed in the charging state or the risk state, and the durations of these two states are generally much shorter than that of normal patrol inspection. At the same time, the non - essential data in the patrol inspection data is much more than the essential data in the patrol inspection request. Therefore, under the influence of these two factors, if all non - essential data is encrypted, the encryption time will be too long, especially in the case of an emergency like the risk state. Therefore, it is necessary to greatly reduce the amount of data for supplementary encryption in order to complete this step in a relatively short time.

[0071] Among them, frame - extraction of the unencrypted part based on the preset degree includes:

[0072] Each time, select one piece of encrypted patrol inspection data, traverse the time stamps of adjacent unencrypted patrol inspection data, and obtain the difference between two adjacent time stamps.

[0073] Set the time - stamp interval threshold formula, and calculate the interval threshold for this time stamp based on the time stamp of the unencrypted patrol inspection data.

[0074] If the difference between this time stamp and the time stamp of the next frame is less than the interval threshold, mark it as a frame - extraction candidate.

[0075] Traverse the unencrypted patrol inspection data and delete the patrol inspection data corresponding to all frame - extraction candidates.

[0076] The time - stamp interval threshold formula of this embodiment includes:

[0077] ;

[0078] Among them, and are the preset maximum value and the preset minimum value respectively, is the growth coefficient, is the difference between the time stamp to be judged and the time stamp of the encrypted patrol inspection data.

[0079] In this embodiment, according to the characteristics of the patrol inspection data, usually, the patrol inspection data when the patrol inspection target is photographed will be transmitted and read according to the patrol inspection request, while the videos along the way or the patrol inspection data when photographing the surrounding environment is not so important and only serves as an auxiliary record. Therefore, the present invention performs frame - extraction based on the preset degree to achieve that the longer the time interval between the unencrypted part and the encrypted part, the more frequent the frame - extraction. The frame - extraction of the patrol inspection data near the patrol inspection target is less, while the patrol inspection data far from the patrol inspection target will be frame - extracted more frequently, so as to save local storage space and reduce the amount of data during subsequent local data processing.

[0080] For example, the inspection device in this embodiment first identifies all unencrypted inspection data containing time series, which usually includes non-essential inspection data such as on-the-way videos and surrounding environment records. Then, according to the preset frame extraction degree, the device dynamically adjusts the frame extraction frequency, reducing the storage amount of non-critical data while ensuring the integrity of critical data (such as records near the inspection target).

[0081] Specifically, the inspection device selects one encrypted inspection data each time and traverses the timestamps of its adjacent unencrypted data. By calculating the difference between adjacent timestamps and comparing it with the set timestamp interval threshold, the device decides which data frames should be marked as frame extraction candidates. The timestamp interval threshold is calculated by the above formula, which takes into account the preset maximum and minimum values, as well as the growth coefficient and the difference between the timestamp to be judged and the encrypted data timestamp. After traversing all unencrypted data, the inspection device deletes all data frames marked as frame extraction candidates, thus obtaining the remaining data after frame extraction.

[0082] In addition, if it is detected that the device is in the charging state or the security risk state, supplementary encryption is performed on the remaining data, including:

[0083] The preset area and status conditions in the preset supplementary encryption mechanism;

[0084] When the inspection device is located in the preset area, it judges whether it is in the charging state. If it is in the charging state, supplementary encryption is performed on the remaining data and a second mark is added; otherwise, no supplementary encryption is performed.

[0085] When the inspection device is not located in the preset area, that is, it is judged to be in the security risk state, supplementary encryption is performed on the remaining data and a second mark is added.

[0086] In this embodiment, since the durations of these two states are usually short and the amount of non-critical data is much larger than that of critical data, the amount of data that needs to be encrypted can be significantly reduced through frame extraction processing, thus completing the encryption task in a short time. Such an implementation method not only saves local storage space but also improves data processing efficiency.

[0087] S4: If an access request for local data is received, the authenticity of the inspection device's location is verified when the access request is received, and the location information is output to the access control module only when the verification is passed.

[0088] Specifically, it includes:

[0089] Record the location of the inspection device based on a preset frequency, and calculate the displacement speed of the inspection device every preset time interval;

[0090] If the displacement speed of the patrol device is greater than the preset threshold, it is considered that the location information has been tampered with and the verification fails; otherwise, the authentication passes.

[0091] In this embodiment, since a special access control method is adopted to avoid affecting the battery life and performance of the patrol device during normal patrol, a higher requirement is imposed on the reliability of the access control mechanism. The present invention verifies authenticity based on the continuity and change speed of the location to prevent tampering. Compared with common verification methods, the coverage is more comprehensive. And due to the existence of the speed attribute, it takes a long time to continuously tamper with the location to deceive the system, greatly increasing the difficulty of tampering.

[0092] For example, the patrol device regularly records its own location. By comparing the location information of adjacent recording points, the displacement speed is calculated. If the calculated displacement speed exceeds the preset threshold, the system will consider that the location information may have been tampered with. At this time, the verification fails and the device will not output the location information to the access control module. Only when the displacement speed is within a reasonable range, that is, when the verification passes, will the device output the location information for the access control module to use.

[0093] This verification method based on location continuity and change speed provides more comprehensive coverage compared with common verification methods and can effectively prevent tampering of location information. Due to the introduction of the speed attribute, it takes a long time to continuously tamper with the location to deceive the system, which increases the difficulty of tampering. Therefore, this embodiment can ensure that when a local data access request is received, the output location information is true and reliable, providing a strong guarantee for the access control mechanism.

[0094] S5: The access control module pre-sets an access control mechanism based on location and key information, and provides local data access rights only when both the location and the key information meet the preset requirements.

[0095] Specifically, it includes:

[0096] Taking the user registration information as the key information, an access control mechanism based on location and key information is constructed;

[0097] After receiving the verified location information, the access control module determines whether the location of the patrol device is within the pre-reviewed location range, and at the same time determines whether the user-entered registration information is correct. Only when both meet the requirements, local data access rights are provided.

[0098] In this embodiment, in the S5 stage, the access control module implements a strict access control mechanism based on location and key information. This mechanism first takes the user's registration information as the key information and combines it with the location information of the patrol device to jointly form a dual condition for access control.

[0099] When the access control module receives the verified location information, it immediately starts the judgment process. On the one hand, the module checks whether the location of the patrol device is within the pre-set safe range to ensure that the device operates within the authorized geographical area. On the other hand, the module requests the user to input registration information and verifies its accuracy to ensure that only legitimate users can access the data.

[0100] Only when the location of the patrol device and the user registration information both meet the pre-set requirements will the access control module unlock the access permission to the local data. This dual-verification mechanism greatly improves the security of data access, prevents the risks of unauthorized access and data leakage, and ensures the integrity and confidentiality of the patrol data.

[0101] In summary, in view of the characteristics of the discontinuous operation of the patrol device, this embodiment does not interfere with the patrol request during normal patrol, thus ensuring that the real-time performance, battery life and system stability during normal patrol are not affected. When in the charging state or the security risk state, the local data is additionally encrypted to ensure the security of the local data. At the same time, considering the uncertainty of the security risk state, a frame extraction step is added during the normal patrol process. The data volume of the local data is pre-reduced through the frame extraction step with low computing power requirements, so as to encrypt the retained data as soon as possible in a short time when a security risk occurs. At the same time, the location verification can prevent the location information from being tampered with, and thus the access control mechanism based on the location and key information ensures controllable access. The present invention realizes the balanced patrol performance and local data security from the two dimensions of data encryption and access control.

[0102] Embodiment 2: This embodiment further enhances the security in terms of data retention. Specifically, the difference from Embodiment 1 is that S3 further includes: actively sending the additionally encrypted retained data to the requesting device when in the security risk state. Specifically, it includes:

[0103] If it is judged that it is in the security risk state, while additionally encrypting the retained data and adding a second mark, the retained data with the second mark is actively sent to the requesting device.

[0104] In this embodiment, when the patrol device detects that it is in the security risk state, it immediately triggers the additional encryption process. The device first comprehensively encrypts the retained data to ensure that the confidentiality of the data is not damaged, and adds a second mark to the encrypted data for subsequent tracking and management. After completing these operations, the device does not wait for an external access request, but actively sends the encrypted retained data with the second mark to the requesting device, such as the server of the control platform. In this way, even if the device is damaged or the data is lost in the security risk state, the requesting device can obtain the complete retained data in time, thus ensuring the continuity and integrity of the patrol data.

[0105] Example 3: This example further increases the security redundancy. Specifically, the difference from Example 1 or Example 2 is that it further includes S6: a preset redundancy cleaning mechanism that continuously evaluates the security risk status and batch-selects inspection data for deletion based on the evaluation results. Specifically, it includes:

[0106] If the inspection device does not return to the preset area within the first time threshold, the inspection data marked with the first mark is deleted. If the inspection device does not return to the preset area within the second time threshold, the remaining data is deleted.

[0107] In this example, this mechanism continuously evaluates the security risk status and batch-selects inspection data for deletion based on the evaluation results. Specifically, when implemented, if the inspection device fails to return to the preset area within the first time threshold, the system automatically deletes the inspection data marked with the first mark to reduce potential security risks. If the device still does not return to the preset area within the second time threshold, the system deletes all the remaining data to ensure that no security hazards are left. This batch deletion strategy not only ensures data security but also avoids the impact on system performance caused by deleting a large amount of data at one time.

[0108] Example 4: A substation intelligent inspection system based on information encryption includes an inspection device and a control platform. The inspection device is configured to execute the above-mentioned substation intelligent inspection method based on information encryption.

[0109] The substation intelligent inspection system based on information encryption in this example consists of two main parts: an inspection device and a control platform, achieving efficient and safe inspection of the substation. The inspection device, as the core execution unit of the system, is used to execute an advanced intelligent inspection method based on information encryption.

[0110] The control platform, as the command center of the system, is responsible for receiving, processing, and analyzing the data uploaded by the inspection device. The platform decrypts and verifies the data to ensure the integrity and authenticity of the data.

[0111] Through this substation intelligent inspection system based on information encryption, we have achieved comprehensive, efficient, and safe inspection of the substation, providing a strong guarantee for the stable operation of the power system.

[0112] Example 5: An electronic device includes a memory and a processor. When the processor calls the computer program stored in the memory, the steps of the above-mentioned substation intelligent inspection method based on information encryption are implemented.

[0113] Embodiment 6: A storage medium stores computer-executable instructions. When the computer-executable instructions are loaded and executed by a processor, the steps of the above-mentioned substation intelligent inspection method based on information encryption are implemented.

[0114] In summary, the substation intelligent inspection method and system based on information encryption proposed in this embodiment effectively solve the contradiction between the inspection performance of inspection equipment and the local data security. During normal inspections, complex encryption is not performed on local data, ensuring the real-time performance, battery life, and system stability of the inspections. At the same time, the frame extraction technology is used to pre-reduce the amount of local data, so that when the inspection equipment is in a charging state or a security risk state, the remaining data can be supplemented and encrypted to ensure data security. In addition, the present invention also introduces a location verification and an access control mechanism based on location and key information, and the dual protection further enhances the security of local data.

[0115] Specifically, this method reduces the computational amount of data processing and transmission by dynamically encrypting and selectively extracting inspection data. The application of the frame extraction technology enables the remaining data to be quickly encrypted when a security risk occurs. The location verification mechanism increases the time required for tampering by monitoring the displacement speed of the inspection equipment, effectively preventing the tampering of location information. The access control mechanism based on location and key information ensures that local data can only be accessed when specific conditions are met, thereby improving data security.

[0116] In addition, this embodiment also provides a redundancy cleaning mechanism that can batch-select inspection data for deletion according to the continuous evaluation results of the security risk status to improve security.

[0117] Through the description of the above embodiments, those skilled in the art can understand that for the convenience and simplicity of description, only the above-mentioned division of each functional module is used as an example. In actual applications, the above functions can be allocated to different functional modules according to needs, that is, the internal structure of a specific device is divided into different functional modules to complete all or part of the functions described above.

[0118] In the embodiments provided in the present application, it should be understood that the disclosed structure and method can be implemented in other ways. For example, the embodiments described above regarding the structure are only illustrative. For example, the division of modules or units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another structure, or some features can be ignored or not executed. Another point is that the displayed or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, and the indirect coupling or communication connection of structures or units may be in an electrical, mechanical, or other form.

[0119] The unit described as a separation component may or may not be physically separated. The component displayed as a unit may be a single physical unit or multiple physical units, that is, it may be located in one place or distributed to multiple different places. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0120] In addition, each functional unit in the embodiments of this application can be integrated into a processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

[0121] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on such an understanding, the technical solution of the embodiments of this application essentially, or the part that contributes to the prior art, or all or part of this technical solution can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions to enable a device (which can be a single-chip microcomputer, a chip, etc.) or a processor to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes: USB flash drives, mobile hard disks, read only memory (ROM), random access memory (RAM), magnetic disks, or optical discs and other various media that can store program codes.

[0122] The above content is only the specific implementation manner of this application, but the protection scope of this application is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in this application, and all should be covered by the protection scope of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.

Claims

1. A substation intelligent inspection method based on information encryption, applicable to inspection equipment, characterized in that The inspection device performs the following steps: S1: Collect inspection data according to the inspection task and save it as local data; S2: Selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device; S3: Perform frame extraction on the unencrypted inspection data to a preset degree to obtain the retained data after frame extraction. If it is detected that the device is in a charging state or a security risk state, supplementary encryption is performed on the retained data; S4: If an access request for local data is received, verify the authenticity of the location of the inspection device when the access request is received, and only output the location information to the access control module when the verification is passed; S5: The access control module pre-sets an access control mechanism based on location and key information, and only provides access rights to local data when both the location and the key information meet the preset requirements; In the above S3, performing frame extraction on the unencrypted inspection data to a preset degree to obtain the retained data after frame extraction includes: For any type of inspection data containing time series, perform frame extraction on the unencrypted part based on a preset degree; The preset degree changes dynamically. Among them, the larger the time stamp interval between the unencrypted part and the encrypted part, the more frequent the frame extraction. And the retained data after frame extraction processing is no longer used as the frame extraction object; The performing frame extraction on the unencrypted part based on a preset degree includes: Each time, select one piece of encrypted inspection data, traverse the time stamps of adjacent unencrypted inspection data to obtain the difference between two adjacent time stamps; Set a time stamp interval threshold formula, and calculate the interval threshold for this time stamp based on the time stamp of the unencrypted inspection data; if the difference between this time stamp and the time stamp of the next frame is less than the interval threshold, mark it as a frame extraction candidate; Traverse the unencrypted inspection data and delete the inspection data corresponding to all frame extraction candidates; The time stamp interval threshold formula includes: θi = θmin + (θmax - θmin)·(1 - e -α·di ); Among them, θmax and θmin are the preset maximum value and the preset minimum value respectively, α is the growth coefficient, and di is the difference between the time stamp to be judged and the time stamp of the encrypted inspection data; In the above S3, if it is detected that the device is in a charging state or a security risk state, supplementary encryption is performed on the retained data, including: presetting the preset area and state conditions in the supplementary encryption mechanism; When the inspection device is located in the preset area, judge whether it is in a charging state. If it is in a charging state, perform supplementary encryption on the retained data and add a second mark, otherwise do not perform supplementary encryption; When the inspection device is not located in the preset area, that is, judge that it is in a security risk state, perform supplementary encryption on the retained data and add a second mark; The above S4: If an access request for local data is received, verify the authenticity of the location of the inspection device when the access request is received, and only output the location information to the access control module when the verification is passed, includes: Record the location of the inspection device based on a preset frequency, and calculate the displacement speed of the inspection device every preset time interval; If the displacement speed of the inspection device is greater than the preset threshold, it is considered that the location information has been tampered with and the verification fails, otherwise the authentication passes.

2. The intelligent substation inspection method based on information encryption according to claim 1, characterized in that, The above S2: Selectively extract and dynamically encrypt the inspection data based on the inspection request, and send it to the requesting device, includes: Select the data to be sent from the inspection data based on the inspection request, encrypt the data to be sent, and send it to the requesting device. After successful sending, add a first mark to the sent data.

3. The intelligent substation inspection method based on information encryption according to claim 1, characterized in that Step S5: The access control module pre-sets an access control mechanism based on location and key information, and provides access rights to local data only when the location and key information both meet the preset requirements, including: Use the user registration information as the key information to construct an access control mechanism based on location and key information; After the access control module receives the verified location information, it determines whether the location of the inspection device is within the preset location range, and at the same time determines whether the user-entered registration information is correct. Only when both meet the requirements, access rights to local data are provided.

4. The intelligent substation inspection method based on information encryption according to claim 1, wherein Step S3 also includes: When in a security risk state, actively send the supplementary encrypted archived data to the requesting device, including: If it is determined that the device is in a security risk state, while supplementarily encrypting the archived data and adding a second mark, actively send the archived data with the second mark to the requesting device.

5. The intelligent substation inspection method based on information encryption according to claim 1, wherein, It also includes S6: Preset a redundancy cleaning mechanism to continuously evaluate the security risk state, and batch-select inspection data for deletion based on the evaluation results, specifically including: If the inspection device does not return to the preset area within the first time threshold, delete the inspection data with the first mark. If the inspection device does not return to the preset area within the second time threshold, delete the remaining data.

6. The intelligent substation inspection system based on information encryption includes inspection equipment and a control platform, characterized in that The inspection device is configured to execute the substation intelligent inspection method based on information encryption according to any one of claims 1 to 5.

Images