Data security transmission method, system and equipment for power side equipment

Abstract

The invention discloses a data security transmission method, system and equipment for power side equipment, and belongs to the technical field of power data transmission. According to the data security transmission method for the power edge-side equipment, by constructing the link authentication model, the edge-side quantum generation model, the edge-side quantum encryption model and the edge-side quantum decryption model, sensitive parameters can be effectively stored and protected, and it is effectively ensured that data cannot be stolen and cracked; therefore, the security of data interaction can be effectively improved. Furthermore, the method can be used for data protection, encryption and decryption of edge / end equipment in a power cloud edge-end system, so that the safety of load control and management services of the edge / end equipment is improved, and the requirements of the power cloud edge-end system for data safety transmission and storage are met; and the quantum encryption technology can be superposed on the basis of not changing the existing client side business system architecture, so that the data communication security of the power grid is improved, and the normal operation of the power grid is ensured.

Description

Technical Field

[0001] The present invention relates to a data security transmission method, system and device for power edge-side equipment, and belongs to the technical field of power data transmission. Background Art

[0002] The concept of cloud, edge, and end control systems is widely used in application scenarios such as power systems. Its working characteristics are usually that the cloud manages several edge devices, and the edge devices manage several end devices. The cloud and edge communicate through the network, the edge and end communicate through the power-specific communication method, and the transmission between the cloud, edge, and end is carried out through ESAM encryption. However, the above communication methods are easy to crack and have low security, and cannot guarantee the absolute security of data transmission.

[0003] The information disclosed in this Background Art is only for understanding the background of the inventive concept and therefore it may include information that does not constitute the prior art. Summary of the invention

[0004] In response to the above problem or one of the above problems, an object of the present invention is to provide a method, system and equipment for secure data transmission of power edge-side devices. By constructing a link authentication model, an edge-side quantum generation model, an edge-side quantum encryption model and an edge-side quantum decryption model, secure transmission of data of power edge / end-side devices can be achieved, so that relevant data and sensitive parameters can be effectively stored and protected, effectively ensuring that data will not be stolen or cracked, thereby effectively improving the security of data interaction.

[0005] In response to the above problem or one of the above problems, the second object of the present invention is to provide a method, system and device for secure data transmission of power edge-side devices, which can be used for data protection and encryption and decryption of edge / end devices in the power cloud-edge-end system, so as to improve the security of the load control and management services of the edge / end devices. By constructing a number of related models, sensitive data protection, data encryption and decryption services can be provided for the load control and management services of the power cloud-edge-end system, thereby meeting the needs of the power cloud-edge-end system for secure data transmission and storage; and further, it can be achieved by superimposing quantum encryption technology on the basis of not changing the existing customer-side business system architecture, thereby improving the security of power grid data communications and ensuring the normal operation of the power grid.

[0006] In response to the above problem or one of the above problems, the third object of the present invention is to provide a method, system and equipment for secure data transmission of power edge-side devices. By setting a quantum security module on the power edge / end-side device, secure transmission of data of the power edge / end-side device can be achieved, so that relevant data and sensitive parameters can be effectively stored and protected, effectively ensuring that the data will not be stolen or cracked, thereby effectively improving the security of data interaction. The solution is simple, practical, feasible and has low application cost.

[0007] To achieve one of the above purposes, the first technical solution of the present invention is:

[0008] A data security transmission method for power edge side equipment includes the following contents:

[0009] Through the pre-built link authentication model, a connection is established between the edge / end device and the quantum security service platform, and a session key is generated;

[0010] Using the pre-built edge-side quantum generation model, the injection key is used to decrypt the session key to obtain the quantum key;

[0011] Based on the pre-built edge-side quantum encryption model, the quantum key is used to encrypt the storage data and / or device parameters to obtain encrypted protection data, and the quantum key is used to encrypt the business data to obtain the ciphertext encrypted by the quantum key;

[0012] A pre-built edge-side quantum decryption model is used to decrypt encrypted messages received from the power cloud-edge system network using quantum keys to obtain plaintext data, thereby achieving secure transmission of power edge / end-side device data.

[0013] After continuous exploration and experimentation, the present invention realizes the secure transmission of power edge / end device data by constructing a link authentication model, an edge-side quantum generation model, an edge-side quantum encryption model, and an edge-side quantum decryption model, so that relevant data and sensitive parameters can be effectively stored and protected, effectively ensuring that the data will not be stolen or cracked, thereby effectively improving the security of data interaction.

[0014] Furthermore, the present invention can be used for data protection and encryption / decryption of edge / end devices in the power cloud-edge-end system to improve the security of the load control and management services of the edge / end devices. By constructing a number of related models, sensitive data protection, data encryption and decryption services can be provided for the load control and management services of the power cloud-edge-end system to meet the power cloud-edge-end system's needs for secure data transmission and storage; and thus, it can be achieved by superimposing quantum encryption technology on the basis of not changing the existing customer-side business system architecture, thereby improving the security of power grid data communications and ensuring the normal operation of the power grid.

[0015] Furthermore, the model in the present application is an object that objectively describes the morphological structure with the help of physical or virtual representation. The object is not equal to the object and is not limited to physical and virtual. It can be a data processing function, software program, processing mode, usage method, operation method, workflow, application process, electronic hardware, circuit module, processing system, system imitation or simulation object.

[0016] As the preferred technical measures:

[0017] Using the pre-built edge-side quantum generation model, the method of decrypting the session key using the injection key to obtain the quantum key is as follows:

[0018] Connect to the quantum security service platform through a dedicated key injection module to inject keys. The dedicated key injection module is marked according to the unique serial number of the quantum security module and injects keys on the quantum security service platform. The key capacity injected at a time is between 10KB and 60MB.

[0019] The key charging is completed and the charging key is obtained;

[0020] After successfully decrypting the session key through the injection key, the quantum key is obtained.

[0021] As the preferred technical measures:

[0022] Based on the pre-built edge-side quantum encryption model, the device parameters are encrypted using the quantum key to obtain encrypted protection data, and the business data is encrypted using the quantum key to obtain the ciphertext encrypted by the quantum key as follows:

[0023] Obtain device parameters and business data; device parameters are sensitive parameters of the power cloud-edge system;

[0024] Import sensitive parameters and business data into the quantum security module;

[0025] Use quantum keys to encrypt and store sensitive parameters;

[0026] Use quantum keys to encrypt business data and obtain ciphertext of business data;

[0027] The ciphertext is then imported into the controller unit MCU and transmitted in the power cloud-edge system network, ensuring that the data transmission is ciphertext encrypted by quantum keys. Even if it is intercepted, it cannot be cracked and used, thus ensuring data security.

[0028] As the preferred technical measures:

[0029] When sensitive parameters are used, the quantum key is used to decrypt the sensitive parameters and then imported into the controller unit MCU.

[0030] As the preferred technical measures:

[0031] The method of using the pre-built edge-side quantum decryption model to decrypt the encrypted messages received from the power cloud edge system network using the quantum key to obtain the plaintext data is as follows:

[0032] Obtaining encrypted messages in the power cloud-edge system network;

[0033] Import the encrypted message into the quantum security module in the edge / end device;

[0034] Use quantum keys to decrypt encrypted messages.

[0035] The decrypted plaintext data is then transmitted to the controller unit MCU for data use.

[0036] To achieve one of the above purposes, the second technical solution of the present invention is:

[0037] A data security transmission system for power edge-end devices, applying the above-mentioned data security transmission method for power edge-end devices, comprising a power system master station, edge devices and end devices;

[0038] The power system master station is provided with a power service channel and a quantum service channel for edge devices to perform data transmission;

[0039] The edge device is provided with an edge controller unit MCU and a quantum security module 1;

[0040] The terminal device is provided with an terminal controller unit MCU and a quantum security module 2.

[0041] By setting a quantum security module on the power edge / end side equipment, the present invention can realize the secure transmission of power edge / end side equipment data, thereby effectively storing and protecting relevant data and sensitive parameters, effectively ensuring that the data will not be stolen or cracked, and thus effectively improving the security of data interaction. The solution is simple, practical, feasible, and has low application cost.

[0042] As the preferred technical measures:

[0043] The quantum security module 1 communicates with the edge controller unit MCU through the SPI interface and the UART interface;

[0044] The edge controller unit MCU is equipped with a communication interface 4G and a communication interface SOCKET;

[0045] The quantum security module 2 communicates with the end controller unit MCU through the interface SPI and the interface UART;

[0046] The end controller unit MCU is provided with a communication interface 4G and a communication interface SOCKET.

[0047] As the preferred technical measures:

[0048] Quantum security module 1 and quantum security module 2 are respectively equipped with USB interfaces for quantum key injection and firmware upgrade.

[0049] To achieve one of the above purposes, the third technical solution of the present invention is:

[0050] A data security transmission method for power edge side equipment includes the following contents:

[0051] After the edge / end device establishes a link with the quantum security service platform;

[0052] After network authentication and session key application, the edge / end device has joined the quantum secure network and successfully obtained the session key.

[0053] After the edge / end device obtains the session key, it uses the injection key to decrypt the session key to obtain the quantum key;

[0054] Then use quantum keys to protect and store sensitive data, and use quantum keys to encrypt business data to obtain ciphertext encrypted by quantum keys;

[0055] After the ciphertext is transmitted in the power cloud edge system, the edge / end device receives the encrypted message, and the edge / end device then uses the quantum key to decrypt it to obtain the plaintext data.

[0056] The present invention can be used for data protection and encryption / decryption of edge / end devices in the electric power cloud-edge-end system to improve the security of the load control and management services of the edge / end devices. By constructing a number of related models, it can provide sensitive data protection, data encryption and decryption services for the load control and management services of the electric power cloud-edge-end system, and meet the needs of the electric power cloud-edge-end system for secure data transmission and storage; furthermore, it can realize the superposition of quantum encryption technology without changing the existing customer-side business system architecture, thereby improving the security of power grid data communications and ensuring the normal operation of the power grid.

[0057] To achieve one of the above purposes, the fourth technical solution of the present invention is:

[0058] An electronic device comprising:

[0059] one or more processors;

[0060] A storage device for storing one or more programs;

[0061] When the one or more programs are executed by the one or more processors, the one or more processors implement the above-mentioned method for secure data transmission for power edge-side devices.

[0062] Compared with the prior art solutions, the present invention has the following beneficial effects:

[0063] After continuous exploration and experimentation, the present invention realizes the secure transmission of power edge / end device data by constructing a link authentication model, an edge-side quantum generation model, an edge-side quantum encryption model, and an edge-side quantum decryption model, so that relevant data and sensitive parameters can be effectively stored and protected, effectively ensuring that the data will not be stolen or cracked, thereby effectively improving the security of data interaction.

[0064] Furthermore, the present invention can be used for data protection and encryption / decryption of edge / end devices in the power cloud-edge-end system to improve the security of the load control and management services of the edge / end devices. By constructing a number of related models, sensitive data protection, data encryption and decryption services can be provided for the load control and management services of the power cloud-edge-end system to meet the power cloud-edge-end system's needs for secure data transmission and storage; and thus, it can be achieved by superimposing quantum encryption technology on the basis of not changing the existing customer-side business system architecture, thereby improving the security of power grid data communications and ensuring the normal operation of the power grid.

[0065] Furthermore, the present invention can achieve secure transmission of data of power edge / end-side devices by setting up a quantum security module on the power edge / end-side devices, so that relevant data and sensitive parameters can be effectively stored and protected, effectively ensuring that the data will not be stolen or cracked, thereby effectively improving the security of data interaction. The solution is simple, practical, feasible, and has low application cost. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] Figure 1 A schematic diagram of a flow chart of the data security transmission method of the present invention;

[0067] Figure 2 This is an architecture diagram of the power cloud-edge system of the present invention;

[0068] Figure 3 A schematic diagram of the physical interface of the edge / end side device of the present invention;

[0069] Figure 4 A schematic diagram of edge / end-side data flow interaction of the present invention;

[0070] Figure 5 A schematic diagram of a process of quantum key charging of the present invention;

[0071] Figure 6 A schematic diagram of a process of network access authentication and key application of edge / end side devices of the present invention;

[0072] Figure 7 A schematic diagram of a process of sensitive parameter storage / use and data encryption / decryption of the present invention. DETAILED DESCRIPTION

[0073] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0074] On the contrary, the present invention covers any substitution, modification, equivalent method and scheme made on the essence and scope of the present invention as defined by the claims. Further, in order to make the public have a better understanding of the present invention, some specific details are described in detail in the detailed description of the present invention below. Those skilled in the art can fully understand the present invention without the description of these details.

[0075] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present invention pertains. The terms used herein are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "or / and" as used herein includes any and all combinations of one or more of the associated listed items.

[0076] like Figure 1 As shown, the first embodiment of the data security transmission method for power edge side equipment of the present invention is:

[0077] A data security transmission method for power edge side equipment includes the following contents:

[0078] Through the pre-built link authentication model, a connection is established between the edge / end device and the quantum security service platform, and a session key is generated;

[0079] Using the pre-built edge-side quantum generation model, the injection key is used to decrypt the session key to obtain the quantum key;

[0080] Based on the pre-built edge-side quantum encryption model, the quantum key is used to encrypt the storage data and / or device parameters to obtain encrypted protection data, and the quantum key is used to encrypt the business data to obtain the ciphertext encrypted by the quantum key;

[0081] A pre-built edge-side quantum decryption model is used to decrypt encrypted messages received from the power cloud-edge system network using quantum keys to obtain plaintext data, thereby achieving secure transmission of power edge / end-side device data.

[0082] In this embodiment, the method of using the pre-built edge-side quantum generation model to decrypt the session key using the injection key to obtain the quantum key is as follows:

[0083] Connect to the quantum security service platform through a dedicated key injection module to inject keys. The dedicated key injection module is marked according to the unique serial number of the quantum security module and injects keys on the quantum security service platform. The key capacity injected at a time is between 10KB and 60MB.

[0084] The key charging is completed and the charging key is obtained;

[0085] After successfully decrypting the session key through the injection key, the quantum key is obtained.

[0086] In this embodiment: Based on the pre-built edge-side quantum encryption model, the device parameters are encrypted using the quantum key to obtain encrypted protection data, and the service data is encrypted using the quantum key to obtain the ciphertext encrypted by the quantum key as follows:

[0087] Obtain device parameters and business data; device parameters are sensitive parameters of the power cloud-edge system;

[0088] Import sensitive parameters and business data into the quantum security module;

[0089] Use quantum keys to encrypt and store sensitive parameters;

[0090] Use quantum keys to encrypt business data and obtain ciphertext of business data;

[0091] The ciphertext is then imported into the controller unit MCU and transmitted in the power cloud-edge system network, ensuring that the data transmission is ciphertext encrypted by quantum keys. Even if it is intercepted, it cannot be cracked and used, thus ensuring data security.

[0092] In this embodiment: when sensitive parameters are used, the sensitive parameters are decrypted using a quantum key and then imported into the controller unit MCU.

[0093] In this embodiment: a pre-built edge-side quantum decryption model is used to decrypt the encrypted message received from the power cloud edge system network using a quantum key to obtain the plaintext data as follows:

[0094] Obtaining encrypted messages in the power cloud-edge system network;

[0095] Import the encrypted message into the quantum security module in the edge / end device;

[0096] Use quantum keys to decrypt encrypted messages.

[0097] The decrypted plaintext data is then transmitted to the controller unit MCU for data use.

[0098] An embodiment of the data security transmission system of the present invention for power edge side equipment:

[0099] A data security transmission system for power edge-end devices, applying the above-mentioned data security transmission method for power edge-end devices, comprising a power system master station, edge devices and end devices;

[0100] The power system master station is provided with a power service channel and a quantum service channel for edge devices to perform data transmission;

[0101] The edge device is provided with an edge controller unit MCU and a quantum security module 1;

[0102] The terminal device is provided with an terminal controller unit MCU and a quantum security module 2.

[0103] In this embodiment: the quantum security module 1 communicates with the edge controller unit MCU via the SPI interface and the UART interface;

[0104] The edge controller unit MCU is equipped with a communication interface 4G and a communication interface SOCKET;

[0105] The quantum security module 2 communicates with the end controller unit MCU through the interface SPI and the interface UART;

[0106] The end controller unit MCU is provided with a communication interface 4G and a communication interface SOCKET.

[0107] In this embodiment: Quantum security module 1 and quantum security module 2 are respectively configured with USB interfaces for quantum key injection and firmware upgrade.

[0108] The present invention is applicable to the data protection and encryption / decryption of edge / end devices in the electric power cloud-edge-end system to improve the security of the load control and management services of edge / end devices. The quantum security module provides sensitive data protection, data encryption and decryption services for the load control and management services of the electric power cloud-edge-end system, meeting the needs of the electric power cloud-edge-end system for secure data transmission and storage. It realizes the superposition of quantum encryption technology without changing the existing customer-side business system architecture, improving the security of power grid data communication, and thus ensuring the normal operation of the power grid.

[0109] A second embodiment of the data security transmission method for power edge side equipment of the present invention:

[0110] A data security transmission method for power edge-end devices is applied to edge / end devices in the power cloud-edge-end system. It can perform quantum security protection on sensitive data stored in itself. When data is interacted with the main station, the interaction data is encrypted with quantum keys, so that all the transmissions of the socket or 4G line are ciphertext. The ciphertext received by the edge / end device is decrypted using the quantum key, thereby improving the data interaction security of the power cloud-edge-end system. The edge / end device of the present invention is used in the power cloud-edge-end system architecture such as Figure 2 shown.

[0111] In this embodiment, the physical interface design of the edge / end side device is as follows: Figure 3 As shown, the edge / end device has a built-in quantum security module and has passed the national secret level 2 qualification certification. The quantum security module communicates with the controller unit MCU through SPI and UART. The communication interface of the controller unit MCU remains unchanged, maintaining the existing 4G and SOCKET. In addition, the quantum security module is equipped with a USB interface for quantum key injection and firmware upgrade.

[0112] For edge / end devices, external data interaction is divided into quantum channel and power business channel. The quantum channel is mainly used for partial interaction with the quantum security service platform, such as device network authentication, application for session keys, etc. The internal data flow interaction between the quantum security module and the controller unit MCU is divided into network authentication, application for session keys, sensitive parameter protection, and data encryption and decryption; for the quantum security module itself, it is necessary to inject keys through dedicated injection software. The overall data flow interaction is as follows: Figure 4 shown.

[0113] For key charging services, the dedicated key charging software is used to connect to the quantum security service platform for key charging. The charging software is marked according to the unique serial number of the quantum security module. The key charging is performed on the quantum security service platform. The capacity of a single key charging is between 10KB and 60MB. For the quantum key charging process, please refer to Figure 5 .

[0114] Before using business data, edge / end devices must first join the quantum network. The edge / end devices authenticate the quantum network through the quantum channel. After successful authentication, the edge / end devices apply for a session key. After the application for the session key is successful, the session key is decrypted using the injection key to obtain the quantum key. The process is as follows: Figure 6 shown.

[0115] After successfully decrypting the session key through the injection key, the quantum key is obtained, and the quantum key is used to encrypt and store sensitive parameters of the power cloud edge system; when sensitive parameters need to be used, the sensitive parameters are decrypted using the quantum key, and then exported to the controller unit MCU; for data encryption, the quantum key is used for encryption processing, and then the ciphertext result is imported into the controller unit MCU and transmitted in the power cloud edge system network, ensuring that the data transmission is ciphertext encrypted by the quantum key, which cannot be cracked even if intercepted, ensuring data security; for the ciphertext received by the edge / end device, the quantum key is used to decrypt it, and then the decrypted plaintext data is transmitted to the controller unit MCU for data use, such as Figure 7 shown.

[0116] The present invention uses a quantum security module to protect and encrypt the data of the power cloud-edge system, securely protect sensitive data, ensure that key power parameters and switch data are encrypted for transmission, and improve the security of interactive data in the power system.

[0117] After the edge / end device establishes a link with the quantum security service platform, it performs network authentication and applies for a session key. At this time, the edge / end device has joined the quantum security network and successfully obtained the session key. After obtaining the session key, the edge / end device uses the injection key to decrypt the session key to obtain the quantum key. Then, quantum is used to protect and store sensitive data, and the business data is encrypted using the quantum key to obtain the ciphertext encrypted by the quantum key. This is transmitted in the power cloud edge system to ensure data security. After receiving the encrypted message, the edge / end device uses the quantum key to decrypt it to obtain the plaintext.

[0118] An embodiment of a device applying the method of the present invention:

[0119] An electronic device comprising:

[0120] one or more processors;

[0121] A storage device for storing one or more programs;

[0122] When the one or more programs are executed by the one or more processors, the one or more processors implement the above-mentioned method for secure data transmission for power edge-side devices.

[0123] A computer medium embodiment using the method of the present invention:

[0124] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned method for secure data transmission for power edge-side equipment.

[0125] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, and computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0126] The present application is described by flowcharts or / and block diagrams of the methods, devices (systems), and computer program products of the embodiments of the present application. It should be understood that each process or / and block in the flowchart or / and block diagram and the combination of the processes or / and blocks in the flowchart or / and block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart or / and block diagram. Figure 1 Process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0127] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 Process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0128] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 Process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0129] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field can still modify or replace the specific implementation methods of the present invention with equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be included in the scope of protection of the claims of the present invention.

Claims

1. A data security transmission method for power edge side equipment, characterized in that: Includes the following: Through the pre-built link authentication model, a connection is established between the edge / end device and the quantum security service platform, and a session key is generated; Using the pre-built edge-side quantum generation model, the injection key is used to decrypt the session key to obtain the quantum key; Based on the pre-built edge-side quantum encryption model, the quantum key is used to encrypt the storage data and / or device parameters to obtain encrypted protection data, and the quantum key is used to encrypt the business data to obtain the ciphertext encrypted by the quantum key; A pre-built edge-side quantum decryption model is used to decrypt encrypted messages received from the power cloud-edge system network using quantum keys to obtain plaintext data, thereby achieving secure transmission of power edge / end-side device data.

2. A data security transmission method for power edge side equipment according to claim 1, characterized in that: Using the pre-built edge-side quantum generation model, the method of decrypting the session key using the injection key to obtain the quantum key is as follows: Connect to the quantum security service platform through a dedicated key injection module to inject keys. The dedicated key injection module is marked according to the unique serial number of the quantum security module and injects keys on the quantum security service platform. The key capacity injected at a time is between 10KB and 60MB. The key charging is completed and the charging key is obtained; After successfully decrypting the session key through the injection key, the quantum key is obtained.

3. A data security transmission method for power edge side equipment according to claim 1, characterized in that: Based on the pre-built edge-side quantum encryption model, the device parameters are encrypted using the quantum key to obtain encrypted protection data, and the business data is encrypted using the quantum key to obtain the ciphertext encrypted by the quantum key as follows: Obtain device parameters and business data; device parameters are sensitive parameters of the power cloud-edge system; Import sensitive parameters and business data into the quantum security module; Use quantum keys to encrypt and store sensitive parameters; Use quantum keys to encrypt business data and obtain ciphertext of business data; The ciphertext is then imported into the controller unit MCU and transmitted in the power cloud edge system network.

4. A data security transmission method for power edge side equipment according to claim 3, characterized in that: When sensitive parameters are used, the quantum key is used to decrypt the sensitive parameters and then imported into the controller unit MCU.

5. A data security transmission method for power edge side equipment according to claim 1, characterized in that: The method of using the pre-built edge-side quantum decryption model to decrypt the encrypted messages received from the power cloud edge system network using the quantum key to obtain the plaintext data is as follows: Obtaining encrypted messages in the power cloud-edge system network; Import the encrypted message into the quantum security module in the edge / end device; Use quantum keys to decrypt encrypted messages. The decrypted plaintext data is then transmitted to the controller unit MCU for data use.

6. A data security transmission system for power edge equipment, characterized in that: A method for secure data transmission for power edge devices as described in any one of claims 1 to 5 is applied, comprising a power system master station, an edge device and an end device; The power system master station is provided with a power service channel and a quantum service channel for edge devices to perform data transmission; The edge device is provided with an edge controller unit MCU and a quantum security module 1; The terminal device is provided with an terminal controller unit MCU and a quantum security module 2.

7. A data security transmission system for power edge equipment according to claim 6, characterized in that: The quantum security module 1 communicates with the edge controller unit MCU through the SPI interface and the UART interface; The edge controller unit MCU is equipped with a communication interface 4G and a communication interface SOCKET; The quantum security module 2 communicates with the end controller unit MCU through the interface SPI and the interface UART; The end controller unit MCU is provided with a communication interface 4G and a communication interface SOCKET.

8. A data security transmission system for power edge equipment according to claim 7, characterized in that: Quantum security module 1 and quantum security module 2 are respectively equipped with USB interfaces for quantum key injection and firmware upgrade.

9. A data security transmission method for power edge side equipment, characterized in that: Includes the following: After the edge / end device establishes a link with the quantum security service platform; After network authentication and session key application, the edge / end device has joined the quantum secure network and successfully obtained the session key. After the edge / end device obtains the session key, it uses the injection key to decrypt the session key to obtain the quantum key; Then use quantum keys to protect and store sensitive data, and use quantum keys to encrypt business data to obtain ciphertext encrypted by quantum keys; After the ciphertext is transmitted in the power cloud edge system, the edge / end device receives the encrypted message, and the edge / end device then uses the quantum key to decrypt it to obtain the plaintext data.

10. An electronic device, characterized in that: It includes: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement a method for secure data transmission for power edge-side devices as described in any one of claims 1-5.

Images