Encryption method, device, system and equipment based on carrier communication and wireless communication

Abstract

The present invention provides an encryption method, device, system and equipment based on carrier communication and wireless communication, which can be applied to the fields of power distribution network technology and communication security technology. The method includes: determining the first task and the second task to be unloaded to the target edge device from the initial task of the terminal device; encrypting the first task and the second task based on different encryption algorithms to obtain the first task ciphertext and the second task ciphertext of the terminal device; allocating the first task ciphertexts of multiple terminal devices based on wireless channel restriction conditions to obtain the target task ciphertext of each terminal device in the transmission time slot; controlling the terminal device to transmit the target task ciphertext to the target edge device through the wireless channel in the target time slot, and the terminal device is in a communication dormant state in the idle time slot without the target task ciphertext allocated; and controlling the terminal device to transmit the second task ciphertext to the target edge device through the carrier channel.

Description

Technical Field

[0001] The present invention relates to the fields of power distribution network technology and communication security technology, and more specifically, to an encryption method, device, system and equipment based on carrier communication and wireless communication. Background Art

[0002] In the power distribution network, smart terminal devices can include smart meters, distribution automation equipment and various sensors for real-time collection of power data, such as voltage, power and load. Although the traditional centralized cloud computing model can process this data, it has problems such as high latency and large bandwidth usage when facing a large number of terminal devices and complex data transmission. In order to meet the real-time and high-efficiency requirements of the power system, the power distribution network adopts an "edge-end" architecture to offload some computing tasks to edge devices (such as fusion terminals) to improve data processing efficiency and system response speed. By processing the data collected from the end-user devices nearby, the fusion terminal not only reduces the delay of data transmission, but also reduces the consumption of network bandwidth, enabling the power system to achieve more efficient monitoring and management.

[0003] Although edge computing has brought significant performance improvements to the operation of power distribution networks, it still faces many problems in data security and resource management. For example, the openness of wireless communications makes data transmission security risks (eavesdropping, tampering, and man-in-the-middle attacks), and the confidentiality and integrity of data during transmission are difficult to guarantee. Although traditional symmetric encryption has advantages in speed, it faces challenges in key distribution and management; while public key encryption algorithms provide higher security, they are computationally intensive; in addition, edge devices usually have limited resources, so how to reduce computing and energy consumption while ensuring data encryption and transmission security has become a key technical issue. Summary of the invention

[0004] In view of this, the present invention provides an encryption method, apparatus, system, equipment medium and product based on carrier communication and wireless communication.

[0005] One aspect of the present invention provides an encryption method based on carrier communication and wireless communication, which is applied to a distribution network, wherein the distribution network includes multiple terminal devices and a target edge device that are communicatively connected, and the method includes: determining a first task and a second task to be unloaded to a target edge device from an initial task of the terminal device, wherein the initial task is related to the operating state of the distribution network; encrypting the first task and the second task based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device; allocating the first task ciphertexts of each of the multiple terminal devices based on wireless channel restriction conditions to obtain a target task ciphertext of each terminal device in a transmission time slot, wherein the wireless channel restriction conditions represent an upper limit on the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; controlling the terminal device to transmit the target task ciphertext to the target edge device via the wireless channel in the target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot to which the target task ciphertext is not assigned; and controlling the terminal device to transmit the second task ciphertext to the target edge device via the carrier channel.

[0006] Another aspect of the present invention provides an encryption device based on carrier communication and wireless communication, which is applied to a distribution network, wherein the distribution network includes a plurality of terminal devices and a target edge device that are communicatively connected, and the device includes: a task determination module, which is used to determine a first task and a second task to be unloaded to a target edge device from an initial task of the terminal device, wherein the initial task is related to the operating state of the distribution network; a task encryption module, which is used to encrypt the first task and the second task based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device; a ciphertext allocation module, which is used to allocate the first task ciphertexts of each of the plurality of terminal devices based on wireless channel restriction conditions to obtain a target task ciphertext of each terminal device in a transmission time slot, wherein the wireless channel restriction conditions represent an upper limit on the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; a ciphertext transmission module, which is used to control the terminal device to transmit a target task ciphertext to the target edge device through a wireless channel in the target time slot, wherein the terminal device is assigned a target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot to which the target task ciphertext is not assigned; and a device control module, which is used to control the terminal device to transmit a second task ciphertext to the target edge device through a carrier channel.

[0007] Another aspect of the present invention provides a distribution network system, comprising: at least one target edge device; a plurality of terminal devices, communicatively connected to at least one target edge device, wherein at least one terminal device comprises: an encryption device based on carrier communication and wireless communication as described above.

[0008] Another aspect of the present invention provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the above method.

[0009] Another aspect of the present invention provides a computer-readable storage medium storing computer-executable instructions, which are used to implement the above method when executed.

[0010] Another aspect of the present invention provides a computer program product, the computer program product comprising computer executable instructions, and the instructions are used to implement the above method when being executed.

[0011] According to an embodiment of the present invention, by arranging an "edge-end" architecture from the target edge device to the terminal device in the distribution network, the initial task in the terminal device is offloaded to the target edge device, and the data transmission task is encrypted using a hybrid encryption algorithm for different communication modes to obtain different task ciphertexts, thereby ensuring the security and integrity of data transmission. When the terminal device transmits the ciphertext to the target edge device, since the upper limit of the transmission task amount of the wireless channel in the same transmission time slot is set, the task ciphertext with a larger data amount is transmitted to the target edge device through the carrier channel, and the dual transmission method is used to ensure the efficiency and real-time performance of the ciphertext transmission; at the same time, a communication sleep state is set for the terminal device without a transmission task, so as to avoid the target edge device from performing data collection and monitoring on the terminal device in the communication sleep state, thereby reducing the power consumption of the target edge device and further improving the data processing capability and efficiency of the target edge device. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The above and other objects, features and advantages of the present invention will become more apparent through the following description of the embodiments of the present invention with reference to the accompanying drawings, in which:

[0013] Figure 1 An application scenario diagram of an encryption method, apparatus, system and device based on carrier communication and wireless communication according to an embodiment of the present invention is shown;

[0014] Figure 2 A flow chart of an encryption method based on carrier communication and wireless communication according to an embodiment of the present invention is shown;

[0015] Figure 3 An exemplary schematic diagram showing an encryption process of carrier communication and wireless communication according to an embodiment of the present invention is shown;

[0016] Figure 4 A schematic diagram showing the relationship between the average execution time and the number of users for offloading tasks to edge computing devices in different scenarios according to an embodiment of the present invention is shown;

[0017] Figure 5 A schematic diagram showing the relationship between the average energy consumption and the number of users when offloading tasks to edge computing devices according to an embodiment of the present invention is shown;

[0018] Figure 6 A structural block diagram of an encryption device based on carrier communication and wireless communication according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0019] Below, embodiments of the present invention will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present invention. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of embodiments of the present invention. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of concepts of the present invention.

[0020] The terms used herein are only for describing specific embodiments and are not intended to limit the present invention. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0021] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0022] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0023] In the technical solution of the present invention, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data are in compliance with relevant laws, regulations and standards, necessary confidentiality measures are taken, public order and good morals are not violated, and corresponding operation portals are provided for users to choose to authorize or refuse. In the embodiments of the present invention, the user's authorization or consent is obtained before obtaining or collecting the user's personal information.

[0024] In the process of conceiving the present invention, the inventor found that in the related technologies, for the communication encryption method of the distribution network, the openness of wireless communication makes data transmission security risks (eavesdropping, tampering and man-in-the-middle attacks), and the confidentiality and integrity of data during transmission are difficult to guarantee; the traditional encryption method lacks targeted encryption for different channel characteristics, the encryption method is single, the calculation amount is large, and there are management difficulties, which is difficult to meet the actual encryption needs. How to reduce computing and energy consumption while ensuring data encryption and transmission security has become a key technical issue.

[0025] In view of this, the present invention unloads the initial task in the terminal device to the target edge device by arranging an "edge-end" architecture from the target edge device to the terminal device in the distribution network, and uses a hybrid encryption algorithm to encrypt the data transmission task for different communication modes to obtain different task ciphertexts, thereby ensuring the security and integrity of data transmission. When the terminal device transmits the ciphertext to the target edge device, since the upper limit of the transmission task amount of the wireless channel in the same transmission time slot is set, the task ciphertext with a larger data amount is transmitted to the target edge device through the carrier channel, and the dual transmission method is used to ensure the efficiency and real-time performance of the ciphertext transmission; at the same time, a communication sleep state is set for the terminal device without a transmission task, so as to avoid the target edge device from performing data collection and monitoring on the terminal device in the communication sleep state, thereby reducing the power consumption of the target edge device and further improving the data processing capability and efficiency of the target edge device.

[0026] The embodiment of the present invention provides an encryption method, device, system, equipment medium and product based on carrier communication and wireless communication. The method is applied to a distribution network, and the distribution network includes a plurality of terminal devices and a target edge device that are connected in communication. The method includes: determining a first task and a second task to be unloaded to a target edge device from the initial task of the terminal device, wherein the initial task is related to the operation state of the distribution network; encrypting the first task and the second task based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device; allocating the first task ciphertexts of the plurality of terminal devices based on wireless channel restriction conditions to obtain a target task ciphertext of each terminal device in a transmission time slot, wherein the wireless channel restriction conditions represent the upper limit of the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; controlling the terminal device to transmit the target task ciphertext to the target edge device through the wireless channel in the target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot to which the target task ciphertext is not assigned; and controlling the terminal device to transmit the second task ciphertext to the target edge device through the carrier channel.

[0027] Figure 1 An application scenario diagram of an encryption method, apparatus, system and device based on carrier communication and wireless communication according to an embodiment of the present invention is shown.

[0028] like Figure 1 As shown, the application scenario according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and an edge device 105 in a power distribution network. The network 104 is used to provide a medium for a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the edge device 105. The network 104 may include various connection types, such as wired, wireless communication links, or optical fiber cables, etc.

[0029] The user can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the edge device 105 through the network 104 to receive or send task ciphertexts, etc. The edge device 105 can be a fusion terminal in the "edge-end" architecture of the power distribution network, which can be used to implement functions such as data processing, monitoring and control. The first terminal device 101, the second terminal device 102, and the third terminal device 103 can be used to obtain data from smart meters, distribution automation equipment, and various sensors in the distribution network for storage, analysis, processing, and monitoring.

[0030] For example, the fusion terminal can collect data from various power equipment on site (such as smart meters, sensors, switches, etc.) and perform preliminary processing (such as data cleaning, analysis, etc.). The fusion terminal can also transmit the processed data to the upper-level centralized monitoring system or cloud platform through the network. It usually supports multiple communication protocols, such as PLC (power line carrier communication), GPRS, LTE, 5G, etc., to ensure flexible communication in different scenarios.

[0031] For example, in addition to data collection, the fusion terminal can also perform local control, such as remote control of power distribution equipment, automated response, etc. For example, when a power distribution equipment fails, the fusion terminal may automatically isolate or dispatch the equipment according to preset rules or algorithms, reducing dependence on the central system.

[0032] It should be noted that the encryption method based on carrier communication and wireless communication provided in the embodiment of the present invention can generally be executed by the first terminal device 101, the second terminal device 102, and the third terminal device 103. Accordingly, the encryption device based on carrier communication and wireless communication provided in the embodiment of the present invention can generally be set in the first terminal device 101, the second terminal device 102, and the third terminal device 103. The encryption method based on carrier communication and wireless communication provided in the embodiment of the present invention can also be executed by a server or server cluster that is different from the first terminal device 101, the second terminal device 102, and the third terminal device 103 and can communicate with the first terminal device 101, the second terminal device 102, and the third terminal device 103. Correspondingly, the encryption device based on carrier communication and wireless communication provided in the embodiment of the present invention can also be set in a server or server cluster that is different from the first terminal device 101, the second terminal device 102, and the third terminal device 103 and can communicate with the first terminal device 101, the second terminal device 102, and the third terminal device 103.

[0033] It should be understood that Figure 1 The number of edge devices, networks, and servers in the embodiment is only for illustration purposes. Any number of edge devices, networks, and servers may be provided as required.

[0034] The following will be based on Figure 1 The scene described by Figure 2~Figure 5 The encryption method based on carrier communication and wireless communication of the disclosed embodiment is described in detail.

[0035] Figure 2 A flow chart of an encryption method based on carrier communication and wireless communication according to an embodiment of the present invention is shown.

[0036] like Figure 2As shown, the encryption method based on carrier communication and wireless communication of this embodiment is applied to a distribution network, and the distribution network includes a plurality of terminal devices and a target edge device in communication connection, and the method includes operations S210 to S250.

[0037] In operation S210 , a first task and a second task to be offloaded to a target edge device are determined from an initial task of a terminal device, wherein the initial task is related to an operating state of a power distribution network.

[0038] In an embodiment of the present invention, the initial task of the terminal device can be determined based on the operating status of the distribution network, and can include tasks such as data collection, data processing, data transmission and data monitoring. It can be understood that the data includes but is not limited to voltage data, power data and load data. Each task of the terminal device can be partially processed locally and then uploaded to the cloud, or the task can be offloaded to the edge device for processing. In an edge computing environment, the decision to offload tasks can depend on the computing power of the user device and the data processing requirements of the current task.

[0039] In an embodiment of the present invention, taking into account the different characteristics of data transmission in channels of different types of communication modes, after determining the task to be offloaded to the target edge device, the task can be divided into a first task and a second task based on different transmission channels or different task amounts. For example, the amount of data transmitted corresponding to the first task is less than the amount of data transmitted by the second task. It can be understood that the distinction between the first task and the second task is only for illustration and is not specifically limited here, that is, conversely, the amount of data transmitted corresponding to the first task may be greater than the amount of data transmitted by the second task.

[0040] In operation S220, the first task and the second task are encrypted based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device.

[0041] In an embodiment of the present invention, the communication mode may include a power line carrier communication mode and a wireless communication mode. Different encryption schemes may be designed for different communication modes in view of the different characteristics of carrier communication and wireless communication. For the second task with a large amount of data transmission, the carrier communication mode may be adopted, and a symmetric encryption algorithm may be adopted when transmitting a large amount of data; for the first task with a relatively small amount of data transmission, the wireless communication mode may be adopted, and a public key encryption algorithm may be adopted for low power consumption considerations. This hybrid encryption mode can achieve data security under different transmission conditions by selecting an encryption method according to channel characteristics.

[0042] In an embodiment of the present invention, after the second task is encrypted using a symmetric encryption algorithm, the second task ciphertext can be obtained. After the first task is encrypted using a public key encryption algorithm, the first task ciphertext can be obtained.

[0043] In operation S230, based on the wireless channel restriction condition, the first task ciphertexts of the plurality of terminal devices are allocated to obtain the target task ciphertext of each terminal device in the transmission time slot, wherein the wireless channel restriction condition represents the upper limit of the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot.

[0044] In an embodiment of the present invention, wireless communication can use multiple sub-channels to transmit data to edge devices simultaneously through multiple terminal devices on the same spectrum. The wireless channel restriction condition can be used to control the allocation result of the first task ciphertext to the target edge device, and the upper limit of the wireless channel transmitting the first task ciphertext in the same transmission time slot is limited by the comparison result between the communication power interference information and the rated power interference information. The target task ciphertext can represent the backlog of the task ciphertext transmission queue generated according to user needs in the discrete time arrangement system over the total time period.

[0045] For example, according to transmitting data to the edge device for the reused subchannel, the upper limit of the task amount transmitted in the same time slot can be determined based on the transmission power, subchannel and signal fading coefficient configured for the terminal device. For example, according to the data transmission request queue corresponding to the wireless communication, the data transmission request queue is made to infinitely approach and not exceed the upper limit of the average task amount of the target task ciphertext with the time change trend of multiple transmission time slots.

[0046] In operation S240, the terminal device is controlled to transmit the target task ciphertext to the target edge device through the wireless channel in the target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot where the target task ciphertext is not assigned.

[0047] In an embodiment of the present invention, the total time period for transmitting the task ciphertext can be divided into multiple time slots (sub-time periods) according to actual needs, and the target time slot can represent the time slot used to transmit the target task ciphertext. The present invention uses a discontinuous receiving method, and the inactive terminal device can close the unscheduled time slot and be in a communication dormant state, and the target edge device will not perform data collection and monitoring on the terminal device in the communication dormant state.

[0048] In operation S250 , the terminal device is controlled to transmit the second task ciphertext to the target edge device through the carrier channel.

[0049] In an embodiment of the present invention, considering the large amount of data in the second task ciphertext, the terminal device can be controlled to transmit the second task ciphertext to the target edge device through power line carrier communication. By using wireless communication to transmit the first task ciphertext, and combining the use of carrier communication to transmit the second task ciphertext with a large amount of data, the communication bandwidth occupancy of the wireless channel transmission can be reduced through the carrier channel, thereby improving the data transmission efficiency.

[0050] According to an embodiment of the present invention, by arranging an "edge-end" architecture from the target edge device to the terminal device in the distribution network, the initial task in the terminal device is offloaded to the target edge device, and the data transmission task is encrypted using a hybrid encryption algorithm for different communication modes to obtain different task ciphertexts, thereby ensuring the security and integrity of data transmission. When the terminal device transmits the ciphertext to the target edge device, since the upper limit of the transmission task amount of the wireless channel in the same transmission time slot is set, the task ciphertext with a larger data amount is transmitted to the target edge device through the carrier channel, and the dual transmission method is used to ensure the efficiency and real-time performance of the ciphertext transmission; at the same time, a communication sleep state is set for the terminal device without a transmission task, so as to avoid the target edge device from performing data collection and monitoring on the terminal device in the communication sleep state, thereby reducing the power consumption of the target edge device and further improving the data processing capability and efficiency of the target edge device.

[0051] It can be understood that the above describes the encryption process based on carrier communication and wireless communication, and the wireless channel restriction conditions will be further described below.

[0052] According to an embodiment of the present invention, wireless channel restriction conditions include: a communication power interference condition, which characterizes that in the same transmission time slot, the cumulative sum of the communication power interference information of multiple terminal devices is less than or equal to the rated power interference information of a preset wireless channel, and the communication power interference information is determined based on the wireless communication power, transmission state variables and Rayleigh fading channel coefficient of the terminal device, the wireless communication power characterizes the power consumed by the terminal device in transmitting the target task ciphertext in the transmission time slot, and the transmission state variable characterizes whether the terminal device transmits the target task ciphertext in the transmission time slot; and a channel task volume restriction condition, which characterizes the transmission task volume attribute of each subchannel of the wireless channel, as the time change trend of multiple transmission time slots infinitely approaches the upper bound of the average task volume of the target task ciphertext, the average task volume of the target task ciphertext is determined based on the task volume of the target task ciphertext queue of multiple transmission time slots, and the target task ciphertext queue of the transmission time slot is determined based on the target task ciphertext of at least one terminal device.

[0053] In an embodiment of the present invention, the wireless communication power is based on the wireless communication power of the terminal device, the transmission state variable and the Rayleigh fading channel coefficient, so as to determine the communication interference information, which may include: defining the power allocation and sub-channel allocation variables as and In the subchannel allocation strategy, if the mth terminal device is arranged in time slot t, then ,otherwise ; In the case where it is necessary to reuse subchannel k to transmit the task ciphertext to the edge device, the tolerable interference level should not exceed the interference threshold, as shown in the following formula (1):

[0054] (1);

[0055] in, and It can represent the transmission power (wireless communication power) and subchannel state (transmission state variable) allocated by the lth remote wireless communication to the mth terminal device in time slot t, is the Rayleigh fading channel coefficient, Indicates the maximum tolerable interference (rated power interference information). It can be understood that The value of is 0 or 1. When the value is 0, it indicates that the terminal device does not need to unload the corresponding data to the edge device in the target time slot. When the value is 1, it indicates that the terminal device needs to unload corresponding data to the edge device in the target time slot. L and M can represent the total number of terminal devices and the total number of wireless communication sub-channels respectively.

[0056] In the embodiment of the present invention, the random unloading queue backlog of the mth terminal device through the lth remote wireless communication can be recorded as , then in the time slot The queue backlog of data transmission from users in the discrete-time queueing system can be expressed as .

[0057] In the embodiment of the present invention, the fading and shadowing of the continuous channel can be stabilized to allocate a reasonable channel task amount (data request queue) to each remote wireless communication. The transmission task amount attribute of each subchannel of the wireless channel approaches the supremum of the average task amount of the target task ciphertext infinitely along with the time variation trend of multiple transmission time slots, as shown in the following formula (2):

[0058] (2);

[0059] Among them, sup represents the supremum, It can represent the supremum of the average task amount of the target task ciphertext. It can represent the transmission task volume of each sub-channel. L and M can represent the total number of terminal devices and the total number of wireless communication sub-channels respectively. It can represent the average task amount of the target task ciphertext. T can represent multiple time slots t.

[0060] According to an embodiment of the present invention, dynamic allocation is performed based on factors such as communication power interference conditions and channel task volume restriction conditions, so that channel resources can be used more efficiently, thereby improving the overall throughput of the system. The channel task volume restriction condition can improve the adaptability of channel quality. When the channel is good, more task ciphertexts can be allocated to the terminal devices of the channel to make full use of the higher transmission rate; when the channel is poor, fewer task ciphertexts are allocated to avoid data packet loss or slow transmission, thereby ensuring the stability of the system. The communication power interference condition can improve the interference control of the channel. When the system faces strong interference, the allocation amount of task ciphertexts can be reduced or a lower transmission rate can be selected, thereby reducing the impact of interference on signal quality, optimizing channel utilization, and reducing conflicts and packet loss.

[0061] It can be understood that the wireless channel restriction conditions are described above, and an example of how to determine the target task ciphertext queue will be described below.

[0062] According to an embodiment of the present invention, the method also includes: based on the objective function and the wireless channel constraint conditions, processing the tth target task ciphertext queue, the tth completed task queue and the tth waiting task queue of the tth transmission time slot to obtain the t+1th target task ciphertext queue of the t+1th transmission time slot, where t is an integer greater than 1; wherein the objective function represents the accumulation of the task ciphertext difference and the task volume of the tth waiting task queue, the task ciphertext difference is the task volume difference information between the tth target task ciphertext queue and the tth completed task queue, the tth completed task queue represents the target task ciphertext executed by the target edge device in the tth transmission time slot, and the tth waiting task queue represents the target task ciphertext received by the target edge device in the tth transmission time slot but not yet executed.

[0063] In an embodiment of the present invention, the signal interference plus noise ratio is determined according to the signal transmitted by the mth terminal device through the lth remote wireless communication. , as shown in the following formula (3):

[0064] (3);

[0065] in, It can characterize the variance of the complex Gaussian distribution, It can characterize the channel gain of the link and indicate the channel quality at time t; It can characterize the interference power of other sending nodes i to receiving node l, The effect of channel gain (or matrix transpose) on interference can be characterized, and can be used to describe the interference of signals from other transmitters on the target link.

[0066] Furthermore, we can Indicates that the mth terminal device is backlogged in the random unloading queue through the lth remote wireless communication; Indicates time slot The data transmission queue from users in the above discrete time queue system is backlogged. Assume that the set of random arriving data is denoted as It should be noted that are independent and identically distributed in different time slots t and are subject to Constraints. Indicates that the backlog queue Unload the task of transmitted data. Therefore, the data flow queue of the mth terminal device transmitted through the lth remote wireless through subchannel k in time slot t+1 is specifically shown in the following formula (4):

[0067] (4);

[0068] in, It can represent the tth completed task queue, It can represent the tth waiting task queue, The objective function can be represented.

[0069] It can be understood that the above describes an example of how to determine the target task ciphertext queue, and the following will describe how to determine the first task ciphertext and the second task ciphertext.

[0070] According to an embodiment of the present invention, encrypting the first task and the second task based on different encryption algorithms to obtain the first task ciphertext and the second task ciphertext of the terminal device includes: encrypting the first task based on a symmetric encryption algorithm to obtain the first task ciphertext; and encrypting the second task based on an asymmetric encryption algorithm to obtain the second task ciphertext.

[0071] In an embodiment of the present invention, the first task ciphertext and the second task ciphertext can both represent data that is encrypted for task data but has not yet been assigned a time slot. Considering the difference in data volume and communication mode corresponding to the first task and the second task, different encryption methods are used to encrypt the first task and the second task.

[0072] In an embodiment of the present invention, for the first task, a symmetric encryption algorithm may be used, such as the Simplified Encryption and Permutation Keystream (SPECK) algorithm. The SPECK algorithm may support different block sizes and key lengths to meet diverse application requirements. The optional block size range includes 32, 48, 64, 96, and 128 bits, while the key length ranges from 64 bits to 256 bits. The encryption process of SPECK may consist of multiple rounds, and each round may include round key generation processing and data obfuscation processing.

[0073] In an embodiment of the present invention, for the second task, an asymmetric encryption algorithm, such as Key-Policy Attribute-Based Encryption (KP-ABE), can be used to encrypt the first task ciphertext. In the distribution network, considering that the microwave communication between the end user (data sender) and the edge device (data receiver) involves multiple data transmission links, due to the limited computing power and storage resources of the edge device, the lightweight characteristics of KP-ABE can be used for data encryption.

[0074] It can be understood that the above describes an example of how to determine the first task ciphertext and the second task ciphertext, and the following will further describe how to determine the first task ciphertext.

[0075] According to an embodiment of the present invention, encrypting the first task based on a symmetric encryption algorithm to obtain the first task ciphertext includes: dividing the first task into a first subtask and a second subtask; performing n rounds of encryption operations to obtain a first task ciphertext block and a second task ciphertext block of the n round; and determining the first task ciphertext based on the first task ciphertext block and the second task ciphertext block of the n round, wherein the n round encryption operation includes: encrypting the first subtask and the second subtask based on the i-th round key to obtain the first task ciphertext block of the n round; and encrypting the first subtask based on the i+1-th round key to obtain the second task ciphertext block of the n round, wherein the i-th round key and the i+1-th round key are obtained by processing the original key block based on a pseudo-random function, and the original key block is obtained by splitting the original key.

[0076] In an embodiment of the present invention, the first task ciphertext can be determined by concatenating the first task ciphertext block and the second task ciphertext block. The encryption method includes: during the encryption process, the original key is divided into multiple parts to generate the round key required for each round. The round key is generated using a pseudo-random function to ensure that the key of each round has sufficient randomness and security; data obfuscation processing, taking the two input data parts X0 and X1 as an example for obfuscation. The first subtask and the second subtask are encrypted based on the i-th round key, and the first subtask is encrypted based on the i+1-th round key as shown in the following formulas (5)-(6):

[0077] (5);

[0078] (6);

[0079] Among them, K i It can represent the round key of the i-th round, and m can represent the number of shifts determined according to the block size. It can be understood that the same original key data block can be divided into two parts during the encryption process. For example, the length of the input data block is 64 bits, X0 and X1 are both 32 bits, representing the high-order part and the low-order part respectively.

[0080] Furthermore, after encryption and completion of the task ciphertext transmission, the data recipient can decrypt it. The decryption process is opposite to the encryption process. The same round key can be used, but the operation order and calculation method are opposite to restore the original plaintext. This feature ensures the symmetry and reversibility of the SPECK algorithm.

[0081] According to an embodiment of the present invention, in the process of using edge devices for data processing, edge computing devices often have limited resources, so the use of the SPECK algorithm can maximize computing efficiency while ensuring security. At the same time, the SPECK algorithm has low computational complexity and can quickly complete data encryption and decryption operations on edge devices, reducing the delay caused by encryption and decryption and improving the overall performance of the system.

[0082] It can be understood that the above describes an example of how to determine the first task ciphertext, and the following will further describe how to determine the second task ciphertext.

[0083] According to an embodiment of the present invention, encrypting the second task based on an asymmetric encryption algorithm to obtain the second task ciphertext includes: encrypting the specified terminal device attributes of the terminal device and the second task based on the terminal public key of the terminal device to obtain the second task ciphertext, wherein the target edge device processes the terminal private key and the second task ciphertext based on a decryption algorithm to obtain the second task, and the terminal private key is determined based on a key generation algorithm processing the terminal public key and a terminal device attribute set, and the terminal device attribute set includes specified terminal device attributes.

[0084] In an embodiment of the present invention, the method of using the SPECK algorithm to encrypt the second task to obtain the second task ciphertext may include encryption and decryption. Using the KP-ABE algorithm to encrypt the second task may include: generating a global public key PK (terminal public key) and a user private key , when registering, the user provides his attribute information, such as "residential user" or "industrial user", so as to generate the corresponding terminal private key. The specific method of generating the private key is shown in the following formula (7):

[0085] (7);

[0086] KeyGen() represents the key generation algorithm function.

[0087] Among them, A represents the attribute set of the user. The lightweight design of KP-ABE requires less computing resources when users generate private keys, reducing the power consumption of the system.

[0088] Furthermore, during the encryption process, the data sender can select a specific attribute set S as the access structure of the ciphertext and use the global public key to encrypt the message M (second task). The encryption process can be shown in the following formula (8):

[0089] (8);

[0090] Encrypt() represents the encryption algorithm function.

[0091] It can be understood that the ciphertext CT may contain information related to the attribute set S (specified terminal device attributes), so that only users satisfying the structure can decrypt it, thereby effectively reducing unnecessary data processing.

[0092] Furthermore, the data receiver can use its private key to decrypt the data. The decryption process can be shown in the following function (9):

[0093] (9);

[0094] Decrypt() represents the decryption algorithm function.

[0095] It is understandable that the condition for successful decryption is the user's attribute set The access structure that satisfies the attribute set S in the ciphertext is shown in the following formula (10):

[0096] (10);

[0097] According to an embodiment of the present invention, the encryption of the first task is implemented through key policy attribute-based encryption (KP-ABE). The lightweight characteristics of the decryption process allow the edge device to quickly complete decryption with limited computing resources, thereby improving the overall communication efficiency. In edge computing, data is often distributed on multiple devices and nodes. KP-ABE can encrypt data based on user attributes to ensure that only users who meet specific attribute conditions can decrypt and access the data, thereby enhancing data privacy protection. By distributing data processing to edge nodes, edge computing reduces dependence on central servers. Combined with the encryption method of KP-ABE, data is still encrypted during transmission, avoiding the risk of being intercepted during transmission.

[0098] It can be understood that the above describes an example of how to determine the second task ciphertext, and the following will describe how to determine the task allocation result.

[0099] According to an embodiment of the present invention, determining the first task and the second task that should be offloaded to the target edge device from the initial task of the terminal device includes: judging whether the initial task needs to be offloaded to the target edge device based on the task amount of the initial task and the current computing power information of the terminal device, and obtaining a judgment result; in response to the judgment result indicating that at least one initial task should be offloaded to the target edge device, processing the current terminal computing performance attributes of the terminal device, the terminal computing power consumption attributes and the edge computing power consumption attributes of the initial task, and the communication bandwidth attributes of the wireless channel based on the offload task optimization function, and obtaining a task allocation result, wherein the terminal computing power consumption attribute represents the terminal computing power resources occupied by the terminal device to perform the initial task, and the edge computing power consumption attribute represents the computing power resources occupied by the target edge device to perform the initial task; and re-determining the first task and the second task from the initial task based on the task allocation result.

[0100] In an embodiment of the present invention, each computing task of the terminal device can be partially processed locally and then uploaded to the cloud, or it can be offloaded to the edge computing device. The offload task optimization function can include the total system energy consumption, local processing delay, and total processing delay of the edge computing device to complete the computing task cycle by allocating resources from the terminal device to the edge computing device.

[0101] In an embodiment of the present invention, using can represent loading decision variables, where Indicates that the computing task is loaded to the edge computing device, otherwise Considering that the decision of task offloading in edge computing environment can depend on the computing power of user devices and the data processing requirements of current tasks. In order to implement an effective offloading strategy, a comprehensive performance index can be constructed. , which comprehensively considers the computing power C of the user device and the data processing volume D of the task, as shown in the following formula (11):

[0102] (11);

[0103] Among them, C max and D max can represent the maximum value of the device computing power and the task data processing volume respectively, and θ and β can represent the corresponding weight coefficients respectively, which are used to adjust the relative importance of computing power and data processing volume in the offloading decision. You can decide how to uninstall. It is understandable that the comprehensive performance index It can be used for preliminary decision-making. By comprehensively considering the computing power of the device and the amount of data in the task, it provides an effective evaluation basis for whether to offload the task to the edge device.

[0104] In an embodiment of the present invention, after determining the offloading decision, a computation model of the cryptographic task can be established. Assume that the mth terminal device computes the task locally. m Denoted as computing power (unit: CPU cycles / second); Applying the dynamic voltage and frequency scaling method, the computing energy consumption E of the mth terminal device executing the task locally lo The calculation method of can be shown as the following formula (12):

[0105] (12);

[0106] Among them, ξ can represent the energy coefficient of the terminal equipment, L l It can represent the computing task load. Since the mth terminal device performs the task on its local device (terminal device), the local processing delay T lo Defined as ,in It can represent the computing resources required by the local device to process the task.

[0107] Furthermore, the energy consumption required by the terminal device to offload tasks can be determined. For example, when the mth terminal device offloads its computationally intensive tasks to the edge computing device for processing, the offloading energy consumption of the mth terminal device can be calculated. , as shown in the following formula (13):

[0108] (13);

[0109] However, the total processing delay of the edge computing device can be expressed as ,in, It can represent the input data size required by the mth terminal device, that is, the task data size offloaded to the edge device. Can represent computing resources outside of the load. It can represent the complexity coefficient or priority of a task, reflecting the computational requirements of the task. The more complex the task, the longer the computation time. It can represent the data transmission rate (bandwidth) between the edge device and the mth terminal device. Indicates faster transmission speed, which can shorten transmission delay.

[0110] It can be understood that the above formulas (12) and (13) can be used to further quantify the energy consumption and delay of tasks when they are executed locally and offloaded to edge devices, respectively. These two sets of formulas work together. Formula (11) provides decision-making guidance, while formulas (12) and (13) conduct specific energy consumption and delay evaluations on the execution effects of the decision-making schemes, thereby supporting the optimal choice of local processing or offloading of tasks. Therefore, the total system energy consumption of resource allocation from the mth terminal device to the edge computing device to complete the computing task cycle can be shown as follows in formula (14):

[0111] (14);

[0112] in, It can represent the computing energy consumption of the mth terminal device required for local processing tasks, It can represent the unloading energy consumption of the mth terminal device.

[0113] In a feasible embodiment, in order to verify the effectiveness of the encryption algorithm proposed in the present invention, the present invention simulates a low-voltage power line and wireless communication system containing 30 users. Each user device randomly generates different data transmission requirements according to different actual scenarios, simulating a typical communication load. The simulation experiment can focus on the performance of the encryption algorithm when 30 users are transmitting data at the same time. The performance may include efficiency and system energy consumption indicators. Through monitoring and analysis of multiple rounds of data transmission, the results show that the encryption method can still maintain a stable encryption effect in a multi-user concurrent communication environment and effectively reduce energy consumption.

[0114] According to an embodiment of the present invention, by utilizing the model to dynamically adjust weight coefficients and thresholds, it is possible to cope with the diversity of different user types and task characteristics, provide a flexible and efficient task offloading mechanism, and further achieve the optimization of resource utilization and task execution efficiency in edge computing.

[0115] Figure 3 An example schematic diagram of the encryption process of carrier communication and wireless communication according to an embodiment of the present invention is shown.

[0116] like Figure 3 As shown, according to the initial task 310 of the terminal device 301, the task 320 to be unloaded to the target edge device is determined based on the computing power of the terminal device and the data processing requirements of the current task. The task 320 includes a first task 321 transmitted through wireless communication and a second task 322 transmitted through power line carrier communication. The power and sub-channels in the first task can be allocated according to different time slots through a random data queue dynamic model; the task 320 is encrypted using an encryption algorithm to obtain a task ciphertext 330, the first task 321 after completing the power and channel allocation is encrypted using an asymmetric encryption algorithm to obtain a first task ciphertext 331, and the second task 322 is encrypted using a symmetric encryption algorithm to obtain a second task ciphertext 332; thereby, the encrypted first task ciphertext 331 and the second task ciphertext 332 are transmitted to the target edge device 302, and the target edge device 302 uses a decryption algorithm to obtain a first task plaintext 341 and a second task plaintext 342 corresponding to the first task ciphertext 331 and the second task ciphertext 332, respectively.

[0117] Figure 4 A schematic diagram showing the relationship between the average execution time and the number of users for offloading tasks to edge computing devices in different scenarios according to an embodiment of the present invention.

[0118] like Figure 4 As shown, the performance of the model can be evaluated according to three different strategies. Strategy 1, cloud computing, all tasks are executed in the cloud; Strategy 2, full offloading, all users offload their tasks to the edge computing device for remote execution; Strategy 3, the embodiment of the present invention provides a hybrid encryption algorithm to protect application data, and makes an offloading decision based on the current environment. Obviously, when the number of users is less than 25, complete offloading is better than cloud computing in terms of the communication time of transmitting task data through the channel, and the computing time of running tasks on the edge computing device and encrypting and decrypting in the case of the encryption model. However, as the number of users further increases, the performance of complete offloading decreases compared to cloud computing, while the method in the embodiment of the present invention is still better than cloud computing. This result is due to the large number of computing tasks brought about by the increase in the number of users.

[0119] Figure 5 A schematic diagram showing the relationship between average energy consumption and the number of users when offloading tasks to edge computing devices according to an embodiment of the present invention.

[0120] like Figure 5 As shown, energy consumption increases linearly with the increase of the number of users. When the number of users exceeds 10, the method provided by the embodiment of the present invention can reduce the overall energy consumption; in the complete offloading scenario, all users compete for limited communication and computing resources; when the number of users increases, the energy consumption of the offloading task will increase sharply.

[0121] Based on the above encryption method based on carrier communication and wireless communication, the present invention also provides an encryption device based on carrier communication and wireless communication. Figure 6 The device is described in detail.

[0122] Figure 6 A structural block diagram of an encryption device based on carrier communication and wireless communication according to an embodiment of the present invention is shown.

[0123] like Figure 6 As shown, the encryption device based on carrier communication and wireless communication of this embodiment is applied to a distribution network, which includes multiple terminal devices and target edge devices connected in communication. The device includes a task determination module 610, a task encryption module 620, a ciphertext allocation module 630, a ciphertext transmission module 640 and a device control module 650.

[0124] The task determination module 610 is used to determine the first task and the second task to be offloaded to the target edge device from the initial task of the terminal device, wherein the initial task is related to the operating state of the distribution network; in one embodiment, the task determination module 610 can be used to perform the operation S210 described above, which will not be repeated here.

[0125] The task encryption module 620 is used to encrypt the first task and the second task based on different encryption algorithms to obtain the first task ciphertext and the second task ciphertext of the terminal device; in one embodiment, the task encryption module 620 can be used to perform the operation S220 described above, which will not be repeated here.

[0126] The ciphertext allocation module 630 is used to allocate the first task ciphertexts of multiple terminal devices based on the wireless channel restriction conditions to obtain the target task ciphertext of each terminal device in the transmission time slot, wherein the wireless channel restriction conditions represent the upper limit of the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; in one embodiment, the ciphertext allocation module 630 can be used to perform the operation S230 described above, which will not be repeated here.

[0127] The ciphertext transmission module 640 is used to control the terminal device to transmit the target task ciphertext to the target edge device through the wireless channel in the target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in the idle time slot when the target task ciphertext is not assigned. In one embodiment, the ciphertext transmission module 640 can be used to perform the operation S240 described above, which will not be repeated here.

[0128] The device control module 650 is used to control the terminal device to transmit the second task ciphertext to the target edge device through the carrier channel. In one embodiment, the device control module 650 can be used to perform the operation S250 described above, which will not be described in detail here.

[0129] According to an embodiment of the present invention, through the task determination module 610, the task encryption module 620, the ciphertext distribution module 630, the ciphertext transmission module 640 and the device control module 650 in the encryption device based on carrier communication and wireless communication, by arranging the "edge-end" architecture from the target edge device to the terminal device in the distribution network, the initial task in the terminal device is unloaded to the target edge device, and the data transmission task is encrypted by a hybrid encryption algorithm for different communication modes to obtain different task ciphertexts, thereby ensuring the security and integrity of data transmission. When the terminal device transmits the ciphertext to the target edge device, since the upper limit of the transmission task amount of the wireless channel in the same transmission time slot is set, the task ciphertext with a larger data amount is transmitted to the target edge device through the carrier channel, and the dual transmission mode is used to ensure the efficiency and real-time performance of the ciphertext transmission; at the same time, a communication sleep state is set for the terminal device without a transmission task, so as to avoid the target edge device from collecting and monitoring the terminal device in the communication sleep state, thereby reducing the power consumption of the target edge device and further improving the data processing capability and efficiency of the target edge device.

[0130] According to an embodiment of the present invention, the wireless channel restriction conditions include: a communication power interference condition, which characterizes that in the same transmission time slot, the cumulative sum of the communication power interference information of multiple terminal devices is less than or equal to the rated power interference information of the preset wireless channel, and the communication power interference information is determined based on the wireless communication power, transmission state variables and Rayleigh fading channel coefficient of the terminal device, the wireless communication power characterizes the power consumed by the terminal device in transmitting the target task ciphertext in the transmission time slot, and the transmission state variable characterizes whether the terminal device transmits the target task ciphertext in the transmission time slot; and a channel task volume restriction condition, which characterizes the transmission task volume attribute of each subchannel of the wireless channel, as the time change trend of multiple transmission time slots infinitely approaches the upper bound of the average task volume of the target task ciphertext, the average task volume of the target task ciphertext is determined based on the task volume of the target task ciphertext queue of multiple transmission time slots, and the target task ciphertext queue of the transmission time slot is determined based on the target task ciphertext of at least one terminal device.

[0131] According to an embodiment of the present invention, the device also includes: a queue processing module, which is used to process the tth target task ciphertext queue, the tth completed task queue and the tth waiting task queue of the tth transmission time slot based on the objective function and the wireless channel constraints, and obtain the t+1th target task ciphertext queue of the t+1th transmission time slot, where t is an integer greater than 1; wherein the objective function represents the accumulation of the task ciphertext difference and the task amount of the tth waiting task queue, the task ciphertext difference is the task amount difference information between the tth target task ciphertext queue and the tth completed task queue, the tth completed task queue represents the target task ciphertext executed by the target edge device in the tth transmission time slot, and the tth waiting task queue represents the target task ciphertext received by the target edge device in the tth transmission time slot but not yet executed.

[0132] According to an embodiment of the present invention, the task encryption module 620 includes: a first task encryption submodule and a second task encryption submodule. The first task encryption submodule is used to encrypt the first task based on a symmetric encryption algorithm to obtain a first task ciphertext; and the second task encryption submodule is used to encrypt the second task based on an asymmetric encryption algorithm to obtain a second task ciphertext.

[0133] According to an embodiment of the present invention, the first task encryption submodule includes: a division unit, an execution unit, a task ciphertext determination unit, a first subtask encryption unit, and a second subtask encryption unit. The division unit is used to divide the first task into the first subtask and the second subtask; the execution unit is used to perform n rounds of encryption operations to obtain the first task ciphertext block and the second task ciphertext block of the nth round; the task ciphertext determination unit is used to determine the first task ciphertext based on the first task ciphertext block and the second task ciphertext block of the nth round, wherein the nth round of encryption operations includes: a first subtask encryption unit is used to encrypt the first subtask and the second subtask based on the i-th round key to obtain the first task ciphertext block of the nth round; and a second subtask encryption unit is used to encrypt the first subtask based on the i+1th round key to obtain the second task ciphertext block of the nth round, wherein the i-th round key and the i+1th round key are obtained by processing the original key block based on a pseudo-random function, and the original key block is obtained by splitting the original key.

[0134] According to an embodiment of the present invention, the second task encryption submodule includes: a second task encryption unit, which is used to encrypt the specified terminal device attributes and the second task of the terminal device based on the terminal public key of the terminal device to obtain the second task ciphertext, wherein the target edge device processes the terminal private key and the second task ciphertext based on the decryption algorithm to obtain the second task, and the terminal private key is determined based on the key generation algorithm processing the terminal public key and the terminal device attribute set, and the terminal device attribute set includes the specified terminal device attributes.

[0135] According to an embodiment of the present invention, the task determination module 610 includes: a judgment submodule, a response submodule and a task determination submodule. The judgment submodule is used to judge whether the initial task needs to be offloaded to the target edge device based on the task amount of the initial task and the current computing power information of the terminal device to obtain a judgment result; the response submodule is used to respond to the judgment result to indicate that at least one initial task should be offloaded to the target edge device, and to process the current terminal computing performance attributes of the terminal device, the terminal computing power consumption attributes and the edge computing power consumption attributes of the initial task, and the communication bandwidth attributes of the wireless channel based on the offload task optimization function to obtain the task allocation result, wherein the terminal computing power consumption attribute represents the terminal computing power resources occupied by the terminal device to execute the initial task, and the edge computing power consumption attribute represents the computing power resources occupied by the target edge device to execute the initial task; the task determination submodule is used to re-determine the first task and the second task from the initial task based on the task allocation result.

[0136] According to an embodiment of the present invention, any multiple modules among the task determination module 610, the task encryption module 620, the ciphertext allocation module 630, the ciphertext transmission module 640 and the device control module 650 can be combined into one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present invention, at least one of the task determination module 610, the task encryption module 620, the ciphertext allocation module 630, the ciphertext transmission module 640 and the device control module 650 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware and firmware or in a proper combination of any of them. Alternatively, at least one of the task determination module 610, the task encryption module 620, the ciphertext distribution module 630, the ciphertext transmission module 640 and the device control module 650 can be at least partially implemented as a computer program module, which can perform corresponding functions when executed.

[0137] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0138] It will be appreciated by those skilled in the art that the features described in the various embodiments of the present invention may be combined and / or combined in various ways, even if such combinations or combinations are not explicitly described in the present invention. In particular, without departing from the spirit and teachings of the present invention, the features described in the various embodiments of the present invention may be combined and / or combined in various ways. All of these combinations and / or combinations fall within the scope of the present invention.

[0139] The embodiments of the present invention are described above. However, these embodiments are only for the purpose of illustration, and are not intended to limit the scope of the present invention. Although each embodiment is described above, it does not mean that the measures in each embodiment cannot be used in combination advantageously. Without departing from the scope of the present invention, those skilled in the art may make various substitutions and modifications, which should all fall within the scope of the present invention.

Claims

1. An encryption method based on carrier communication and wireless communication, characterized in that: Applied to a distribution network, the distribution network includes a plurality of terminal devices and a target edge device in communication connection, the method includes: Determining, from the initial tasks of the terminal device, a first task and a second task to be offloaded to the target edge device, wherein the initial tasks are related to the operating state of the distribution network; Encrypt the first task and the second task based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device; Based on the wireless channel restriction condition, the first task ciphertexts of the plurality of terminal devices are allocated to obtain the target task ciphertext of each terminal device in the transmission time slot, wherein the wireless channel restriction condition represents the upper limit of the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; Controlling the terminal device to transmit the target task ciphertext to the target edge device through a wireless channel in a target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot in which the target task ciphertext is not assigned; and Control the terminal device to transmit the second task ciphertext to the target edge device through a power line carrier channel.

2. The encryption method according to claim 1, characterized in that: The wireless channel restriction conditions include: a communication power interference condition, characterizing that in the same transmission time slot, the cumulative sum of the communication power interference information of the plurality of terminal devices is less than or equal to the preset rated power interference information of the wireless channel, the communication power interference information is determined based on the wireless communication power, transmission state variable and Rayleigh fading channel coefficient of the terminal device, the wireless communication power characterizing the power consumed by the terminal device to transmit the target task ciphertext in the transmission time slot, and the transmission state variable characterizing whether the terminal device transmits the target task ciphertext in the transmission time slot; and The channel task volume constraint condition characterizes the transmission task volume attribute of each subchannel of the wireless channel. As the time variation trend of the plurality of transmission time slots approaches infinitely to the supremum of the average task volume of the target task ciphertext, the average task volume of the target task ciphertext is determined based on the task volume of the target task ciphertext queue of the plurality of transmission time slots, and the target task ciphertext queue of the transmission time slot is determined based on the target task ciphertext of at least one of the terminal devices.

3. The encryption method according to claim 2, characterized in that: The method further comprises: Based on the objective function and the wireless channel constraint, the tth target task ciphertext queue, the tth completed task queue and the tth waiting task queue of the tth transmission time slot are processed to obtain the t+1th target task ciphertext queue of the t+1th transmission time slot, where t is an integer greater than 1; Among them, the objective function representation accumulates the task ciphertext difference and the task volume of the tth waiting task queue, the task ciphertext difference is the task volume difference information between the tth target task ciphertext queue and the tth completed task queue, the tth completed task queue represents the target task ciphertext executed by the target edge device in the tth transmission time slot, and the tth waiting task queue represents the target task ciphertext received by the target edge device in the tth transmission time slot but not yet executed.

4. The encryption method according to claim 1, characterized in that: Encrypting the first task and the second task based on different encryption algorithms to obtain the first task ciphertext and the second task ciphertext of the terminal device includes: Encrypting the first task based on a symmetric encryption algorithm to obtain a ciphertext of the first task; and The second task is encrypted based on an asymmetric encryption algorithm to obtain a ciphertext of the second task.

5. The encryption method according to claim 4, characterized in that: Encrypting the first task based on a symmetric encryption algorithm to obtain the first task ciphertext includes: Dividing the first task into a first subtask and a second subtask; Perform n rounds of encryption operations to obtain the first task ciphertext block and the second task ciphertext block of the nth round; Based on the first task ciphertext block and the second task ciphertext block of the nth round, the first task ciphertext is determined, wherein the encryption operation of the nth round includes: Encrypting the first subtask and the second subtask based on the i-th round key to obtain a ciphertext block of the first task of the n-th round; and The first subtask is encrypted based on the (i+1) round key to obtain the second task ciphertext block of the nth round, wherein the (i) round key and the (i+1) round key are obtained by processing the original key block based on a pseudo-random function, and the original key block is obtained by splitting the original key.

6. The encryption method according to claim 4, characterized in that: Encrypting the second task based on an asymmetric encryption algorithm to obtain the ciphertext of the second task includes: The designated terminal device attributes of the terminal device and the second task are encrypted based on the terminal public key of the terminal device to obtain the second task ciphertext, wherein the target edge device processes the terminal private key and the second task ciphertext based on a decryption algorithm to obtain the second task, and the terminal private key is determined by processing the terminal public key and a terminal device attribute set based on a key generation algorithm, and the terminal device attribute set includes the designated terminal device attributes.

7. The encryption method according to claim 1, characterized in that: Determining, from the initial tasks of the terminal device, a first task and a second task to be offloaded to the target edge device includes: Based on the task amount of the initial task and the current computing capability information of the terminal device, determine whether the initial task needs to be offloaded to the target edge device, and obtain a determination result; In response to the judgment result indicating that at least one of the initial tasks should be offloaded to the target edge device, the current terminal computing performance attribute of the terminal device, the terminal computing power consumption attribute and the edge computing power consumption attribute of the initial task, and the communication bandwidth attribute of the wireless channel are processed based on the offload task optimization function to obtain a task allocation result, wherein the terminal computing power consumption attribute represents the terminal computing power resources occupied by the terminal device to execute the initial task, and the edge computing power consumption attribute represents the computing power resources occupied by the target edge device to execute the initial task; The first task and the second task are re-determined from the initial task based on the task allocation result.

8. An encryption device based on carrier communication and wireless communication, characterized in that: Applied to a distribution network, the distribution network includes a plurality of terminal devices and a target edge device in communication connection, the device includes: A task determination module, configured to determine, from the initial tasks of the terminal device, a first task and a second task to be offloaded to the target edge device, wherein the initial task is related to the operating state of the distribution network; A task encryption module, used for encrypting the first task and the second task based on different encryption algorithms to obtain a first task ciphertext and a second task ciphertext of the terminal device; A ciphertext allocation module, configured to allocate the first task ciphertexts of the plurality of terminal devices respectively based on a wireless channel restriction condition, to obtain a target task ciphertext of each terminal device in a transmission time slot, wherein the wireless channel restriction condition represents an upper limit on the amount of tasks that can be transmitted by the wireless channel in the same transmission time slot; a ciphertext transmission module, used to control the terminal device to transmit the target task ciphertext to the target edge device through a wireless channel in a target time slot, wherein the terminal device is assigned the target task ciphertext in the target time slot, and the terminal device is in a communication dormant state in an idle time slot in which the target task ciphertext is not assigned; and The device control module is used to control the terminal device to transmit the second task ciphertext to the target edge device through a power line carrier channel.

9. A distribution network system, characterized in that: include: at least one target edge device; A plurality of terminal devices are communicatively connected to the at least one target edge device, wherein at least one of the terminal devices comprises: An encryption device based on carrier communication and wireless communication as described in claim 8.

10. An electronic device, characterized in that: include: one or more processors; a memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the encryption method described in any one of claims 1 to 7.

Images