Encryption communication method and system for energy remote scheduling control

Abstract

The invention relates to the technical field of remote control, particularly provides an encrypted communication method and system for energy remote scheduling control, and solves the problem of lack of comprehensive safety protection measures in the prior art. The method comprises the steps that a sender of the encryption communication equipment transmits data, a quantum random number is generated in the transmission process, the quantum random number is converted into a quantum key, and a quantum public key of a receiver of the encryption communication equipment is used for encrypting the quantum key; the data soft route performs identity authentication, establishes connection with a receiver of the encrypted communication equipment, and sends a control command to the embedded security control module; the embedded safety control module carries out encryption processing on the control command; and the embedded security control module carries out decryption processing and executes operation. The system comprises a data encryption module, an identity authentication module and a secondary encryption module. According to the invention, the security of the control command in the transmission process is ensured, and unauthorized access and operation are prevented.

Description

Technical Field

[0001] The present invention relates to the field of remote control technology, and in particular to an encrypted communication method and system for remote energy dispatching and control. Background Art

[0002] With the development trend of intelligent and remote energy management systems, remote dispatch and control of energy data has become increasingly important. However, existing remote energy dispatch systems have security risks in the process of data transmission and storage, such as data leakage and tampering. At present, some systems use simple data encryption methods for data transmission, but lack comprehensive security measures, especially in the process of data routing, storage and forwarding between platforms. The existing technology has failed to fully solve the data security issues in energy remote dispatch and control, especially in terms of authority management and data storage. The security protection measures are not perfect.

[0003] Prior art 1, Chinese patent, application number: 202111367792.2 provides a regional integrated energy dispatching and control system based on energy internet, which connects the distribution network dispatching automation system, demand side management platform and power trading center through the regional integrated energy dispatching and control system, aggregates the multi-type adjustable resources of regional integrated energy, realizes the integrated interaction of energy internet including multiple energy forms in the region, and realizes regional integrated energy dispatching and control based on energy internet; the terminal link comprehensively considers the local access terminals and multi-type energy parks of various energy supply and use terminals including electric energy, cold and heat energy, and renewable energy, expands the energy control space of power grid terminals according to the differences in the time and space characteristics of different types of energy, and takes the regional integrated energy dispatching and control system as the core carrier for realizing energy internet. Although the complementary characteristics of various adjustable resources are fully utilized to comprehensively improve the operation level of regional integrated energy control, there is a lack of comprehensive security protection measures, especially in data security issues.

[0004] Prior art 2, Chinese patent, application number 201711435416.6 discloses a new energy grid-connected control method with automatic switching between automatic control and emergency dispatch control, which belongs to the field of power system and automation technology. By checking the calculation result of the command value in the closed-loop control mode of the new energy grid-connected active control system, verifying the rationality of the calculated command value, and automatically switching to the manual dispatch emergency mode to obtain the manual setting value in the emergency mode or the command value issued in the previous round after the calculation of the command value fails to be verified, it ensures that the final command value issued is reasonable, thereby improving the reliability of the new energy grid-connected active control system. Although the robustness and reliability of the new energy grid-connected active control system are improved, a simple data encryption method is used for data transmission, and the security of data transmission is not considered.

[0005] Prior art three, Chinese patent, application number 200610139382.1 provides a system and method for remotely controlling multiple display devices connected via a network. It includes: a remote control scheduling server, which sends a predetermined remote control command to a predetermined display device at a predetermined time; and one or more display devices, which execute the remote control command when receiving the remote control command from the remote control scheduling server, but the security protection measures in terms of authority management and data storage are not perfect.

[0006] At present, the existing technologies 1, 2 and 3 lack comprehensive security protection measures, especially in terms of data security. They use simple data encryption methods for data transmission without considering the security issues of data transmission, and the security protection measures for authority management and data storage are not perfect. Therefore, the present invention provides an encrypted communication method and system for remote energy dispatching and control. Summary of the invention

[0007] In order to achieve the above object, the present invention adopts the following technical scheme: In one aspect of the present invention, there is provided an encrypted communication method for remote energy dispatching control, comprising the following steps: The sender of the encrypted communication device transmits the data. During the transmission process, a quantum random number is generated, which is converted into a quantum key. The quantum key is encrypted using the quantum public key of the receiver of the encrypted communication device. The sender of the encrypted communication device sends the quantum key and the encrypted data together to the data soft router. The energy monitoring communication security wall conducts comprehensive monitoring during the transmission process. The data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends the control command to the embedded security control module; The embedded security control module will encrypt the control command; after the electric energy meter receives the remote control command, the embedded security control module will decrypt it and execute the operation.

[0008] In an optional implementation, the process of using a quantum random number to generate a quantum random number during the transmission process includes: During the data transmission process, a quantum random number is generated as the subscript of the transmitted data to establish a quantum random number sequence; Process and extract the quantum random number sequence, take the quantum random number sequence as input, map it to an output of fixed length, calculate the probability distribution of each quantum element to obtain the entropy of the quantum random number sequence, and check the entropy of the quantum random number sequence. If the check is higher than the preset value, the quantum random number sequence is packaged; The packaged quantum random number sequence is divided into N data blocks, where the data block occupies the set bytes. If the data block is less than the set bytes, the byte position is supplemented in the data block so that the data block occupies the set bytes. The quantum random number sequence is used to obtain the quantum key for the data to be transmitted.

[0009] In an optional implementation, the process of encrypting the quantum public key of the receiving party of the encryption communication device to encrypt the quantum key comprises: A shared quantum key is generated through the quantum key distribution protocol. The quantum key is used to encrypt data. The quantum key distribution protocol contains a matrix of quantum states and quantum public keys. Encrypt data using a shared quantum key, encode data into a quantum state, and use the recipient's quantum public key to control the transformation of the quantum state, and use the matrix of the quantum public key to manipulate the quantum state; The encrypted quantum key is forwarded to the data soft routing device. During the forwarding process, the data is monitored by the energy monitoring communication security wall.

[0010] In an optional implementation, the process of performing identity authentication according to the rights management policy algorithm includes: Authenticate the sender's password, use quantum public key encryption exchange to obtain an encrypted quantum key, decrypt the quantum key to obtain an encrypted quantum private key, and perform role access control, role access control, dynamic permission management and identity authentication operations based on the encrypted quantum private key; According to the identity authentication result, the operation authority corresponding to the identity is obtained, a communication connection between the sender and the encrypted receiver is established, and specific data corresponding to the identity is obtained or specific operations are performed; A control model is constructed based on the identity operation permission verification results and the operation permissions. The authorization scope is divided according to the control model and sent to the embedded security control module to monitor the content of the operation. When the operation content exceeds the permission scope, a reminder is issued.

[0011] In an optional implementation, the process of encrypting the control command includes: Using the control command as input, combined with the quantum key for processing, to generate a data integrity check code; attaching the data integrity check code to the original control command to form a message unit, and adding the message unit to the embedded security module; The embedded security module generates a random quantum state for the message unit, transmits the quantum state to the target device through the communication channel using quantum communication technology, and periodically replaces the quantum key and immediately revokes and replaces the quantum key when the quantum key is leaked; After the target device receives the encrypted control command, it uses the decryption quantum key to decrypt it and verify the data integrity. After confirmation, it executes the control command. If there is an error, an alarm will be issued.

[0012] In an optional implementation manner, the process of forming a message unit includes: The size of each data block is preset, the length of the original control command is determined, and the data is segmented. If the length of the original control command is not enough to reach the predetermined data block size, a random number is filled at the end of the original command to meet the preset size. Each data block is encrypted and a tag is generated during the encryption process. The tag generated by the last data block contains the information and integrity of the entire message. The generated tag is attached to the corresponding data block to form a complete data unit. The data unit is encrypted with a quantum key, and the label generated by the last data block is placed after the original control command to form a new data, and the new data is encapsulated into a message unit.

[0013] In an optional implementation, the process of generating a quantum key includes: A series of quantum bits are generated using a quantum light source to define each quantum state. The generated quantum bits are transmitted to the receiver via optical fiber, and the devices at both ends of the communication dynamically negotiate and encode according to the quantum key distribution protocol. After receiving the quantum bit, the receiver will randomly select the same measurement basis as the sender. After the measurement is completed, the receiver will record the measurement result and inform the sender of the measurement basis it used. Based on the measurement results, the sender and receiver will jointly form a set of candidate key bits; if the measurement results are consistent, the value of the quantum bit can be used as part of the key; error correction is performed on the preliminary key, and a hash function is applied to reduce any information content; a set of quantum keys is generated and used in the embedded security module for encryption processing.

[0014] In an optional implementation, the process of generating a set of quantum keys includes: At the first position, the second position, the third position, the fourth position and the fifth position of the measurement basis, respectively determine whether the measurement results of the sender and the receiver are the same; generate candidate key bits, the length of the candidate key is equal to the number of base matches of both parties; The sender and receiver use fine-grained error correction to identify and correct erroneous bits, perform error detection, and exchange verification evidence. The sender sends a portion of the verified candidate key bits through the classical channel and obtains feedback from the receiver. When inconsistencies are found, the erroneous bits are corrected by sending a hash-based public key or an attack detection message. A hash function is selected and used to process the candidate key, the candidate key is input into the hash function to generate a hash value of a fixed length; the generated hash value compresses the candidate key; the hash value is used as the final shared key, and the sender and the receiver confirm the shared key in the embedded security module.

[0015] In an optional implementation, the process of decrypting using a decryption quantum key includes: The target device measures the received quantum state through the quantum measurement basis to obtain information related to the original control command; it decrypts the information using the previously shared quantum key, which is generated and stored through a secure quantum key distribution protocol before quantum communication. The target device decrypts the encrypted control command by combining the quantum key and the previously received quantum state; Convert the quantum state into classical bits, perform logical operations on the received bits and the quantum key, obtain information related to the control command, and get the decrypted control command and the corresponding integrity check code.

[0016] Another aspect of the present invention provides an encrypted communication system for remote energy dispatching control of the encrypted communication method for remote energy dispatching control, comprising: The data encryption module is responsible for encrypting the data transmitted by the sender of the communication device. During the transmission process, a quantum random number is generated, the quantum random number is converted into a quantum key, and the quantum key is encrypted using the quantum public key of the receiver of the encryption communication device. The sender of the encryption communication device sends the quantum key and the encrypted data together to the data soft router; the transmission process is fully monitored by the energy monitoring communication security wall; The identity authentication module, the data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends the control command to the embedded security control module; The secondary encryption module and the embedded security control module will encrypt the control command; after the electric energy meter receives the remote control command, the embedded security control module will decrypt it and execute the operation.

[0017] The device for obtaining encrypted communication of the present invention is composed of initializing the encrypted communication device, which includes a background cipher machine, a master station, an electric energy meter and an embedded security control module ESAM; during the data transmission process, a quantum random number is used to generate a quantum key, and the key is encrypted by the quantum public key of the receiver. This process is fully monitored by the energy monitoring communication security wall to ensure the security and integrity of the transmission. Through the quantum key distribution (QKD) technology, a theoretically unconditionally secure key sharing method is realized, ensuring the absolute security of data transmission. Security is based on the basic principles of quantum mechanics, and the security of communication can be guaranteed even when the eavesdropper has strong physical operation and computing capabilities. The data soft router performs identity authentication according to the authority management strategy algorithm, establishes a connection with the receiver of the encrypted communication device, and sends the control command to the embedded security control module ESAM; through identity authentication and authority management, it is ensured that only legitimate devices and users can access and control the system, enhancing the security and controllability of the system. The application of the ESAM security chip further enhances the security of the meter, and uses its encryption algorithm to encrypt key information data. The embedded security control module ESAM encrypts the control command. After the electric energy meter receives the remote control command, the ESAM decrypts it and performs the corresponding operation. The encryption and decryption of the ESAM ensures the security of the control command during transmission and prevents unauthorized access and operation. The security mechanism is crucial to the construction of smart grids, especially in the design of smart meters, where the ESAM technology is the key and difficulty. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 This is a flow chart of the encrypted communication method for remote energy dispatching and control provided in Example 1 of the present invention; Figure 2 A process diagram for generating a quantum random number during transmission provided in Embodiment 2 of the present invention; Figure 3 A process diagram of encrypting a quantum key by a quantum public key pair of a receiving party of an encryption communication device provided in Embodiment 3 of the present invention; Figure 4 A process diagram of identity authentication according to the rights management strategy algorithm provided in Example 4 of the present invention; Figure 5 This is a process diagram of encrypting a control command provided in Embodiment 5 of the present invention; Figure 6 A process diagram of forming a message unit provided in Embodiment 6 of the present invention; Figure 7 This is a process diagram for generating a quantum key provided in Embodiment 7 of the present invention; Figure 8 A process diagram for generating a set of quantum keys provided in Embodiment 8 of the present invention; Fig. 9 A process diagram of decryption using a decryption quantum key provided in Embodiment 9 of the present invention; Fig.10 A block diagram of an encrypted communication system for remote energy dispatch control provided in Embodiment 10 of the present invention; Fig.11 is a block diagram of an electronic device provided in Embodiment 11 of the present invention; Fig.12 This is a block diagram of the computer-readable storage medium provided in Example 12 of the present invention. DETAILED DESCRIPTION

[0019] The technical solutions in the embodiments of the present invention will be described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments.

[0020] In the following, the terms "first", "second", etc. are used only for convenience of description and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, "plurality" means two or more.

[0021] In the present invention, unless otherwise clearly specified and limited, the term "connection" should be understood in a broad sense, for example, "connection" can be a fixed mechanical connection, or a detachable mechanical connection, or integrated; or, "connection" can be a direct connection, or an indirect connection through an intermediate medium. In addition, unless otherwise clearly specified and limited, the term "coupling" should be understood in a broad sense, for example, "coupling" can be a direct electrical connection, such as physical contact and electrical conduction between two components, and can also be understood as electrical connection between different components in a circuit structure through physical lines such as copper foil or wires on a printed circuit board (PCB) that can transmit electrical signals to transmit electrical signals; or, "coupling" can be an indirect electrical connection between two components through an intermediate medium; or, "coupling" can be an electrical connection between two components in an air-spaced / non-contact manner, for example, two components are electrically connected by capacitive coupling to transmit electrical signals.

[0022] In the embodiments of the present invention, directional terms such as "up", "down", "left" and "right" may include but are not limited to being defined relative to the orientation of the components schematically placed in the drawings. It should be understood that these directional terms may be relative concepts, which are used for relative description and clarification, and may change accordingly according to changes in the orientation of the components in the drawings.

[0023] Embodiments of the present invention can be used in the following scenarios: Smart grid management, ensuring the security of data transmission in energy management systems, effectively preventing unauthorized access and data tampering, and improving the stability and security of smart grids. Remote monitoring and control, suitable for power companies to remotely monitor the status of equipment and perform remote control, such as regulating electricity consumption during demand response. Secure communication between devices, ensuring that multiple devices located in different locations (such as electricity meters, substations, etc.) can exchange information safely and reliably, especially in key security measures and status reports. Public utilities and infrastructure, by ensuring the security of communications, protect the infrastructure of public utilities (such as water, electricity, gas, etc.) from cyber attacks and improve their operational efficiency.

[0024] The key technical features of the embodiments of the present invention are as follows: random numbers are generated using the principles of quantum mechanics. The random numbers are highly random and unpredictable, providing a strong foundation for secure communication. The sender uses the receiver's quantum public key for encryption to ensure the security of the key during information transmission; even if the received information is intercepted, the attacker cannot obtain a valid key from it. Before the data soft router establishes a communication connection with the receiver, an effective identity authentication is performed to ensure that both parties of the data transmission are legitimate users and prevent middleman attacks. The control command is encrypted twice before entering the embedded security control module, which enhances the security of the command during transmission. Even if the security of the first stage fails, there is a second layer of protection. During the information transmission process, the energy monitoring communication security wall performs real-time monitoring, captures and responds to potential security threats in a timely manner, ensures the security of the system, and provides support for compliance audits. The electric energy meter that receives the command is decrypted by the embedded security control module, which not only ensures the security of decryption, but also ensures that the electric energy meter can execute remote control commands, and ensures the accuracy of the operation and the real-time response. This encryption communication method brings together the core technologies of modern quantum communication, information technology and security authentication, and solves the potential data security risks in energy remote scheduling. By using key mechanisms such as quantum key distribution, identity authentication, secondary encryption, and comprehensive monitoring, not only the security of the communication process is guaranteed, but also the reliability and effectiveness of the entire energy management system are improved, making the application of the method in the field of modern power and energy have significant practical significance and technical value.

[0025] Embodiment 1: like Figure 1 As shown, an embodiment of the present invention provides an encrypted communication method for remote energy dispatching control, comprising the following steps: Step S100: The sender of the encryption communication device transmits the data. During the transmission process, a quantum random number is generated, the quantum random number is converted into a quantum key, and the quantum key is encrypted using the quantum public key of the receiver of the encryption communication device. The sender of the encryption communication device sends the quantum key and the encrypted data together to the data soft router; wherein, the energy monitoring communication security wall performs comprehensive monitoring during the transmission process; Step S200: the data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends a control command to the embedded security control module; Step S300: the embedded security control module encrypts the control command; after the electric energy meter receives the remote control command, the embedded security control module decrypts it and executes the operation; Among them, the received control command is divided into data blocks of fixed size; the quantum key is used as the key for symmetric encryption, the key is combined with the data block, each data block is encrypted independently, the data block and the key are processed through the encryption algorithm to generate encrypted data blocks; each encrypted data block is combined into a complete encrypted command. This can be done through a simple connection operation to generate a continuous encrypted data stream; the encrypted command and integrity check code are packaged and ready to be sent to the next link.

[0026] In the above embodiment, the device composition of the encrypted communication is obtained in step S100, and the encrypted communication device is initialized. The encrypted communication device includes a background cipher machine, a master station, an electric energy meter and an embedded security control module ESAM; during the data transmission process, a quantum random number is used to generate a quantum key, and the key is encrypted by the quantum public key of the receiver. This process is fully monitored by the energy monitoring communication security wall to ensure the security and integrity of the transmission. Through the quantum key distribution (QKD) technology, a theoretically unconditionally secure key sharing method is realized, ensuring the absolute security of data transmission. This security is based on the basic principles of quantum mechanics, and can ensure the security of communication even when the eavesdropper has strong physical operation and computing capabilities. In step S200, the data soft router performs identity authentication according to the authority management strategy algorithm, establishes a connection with the recipient of the encrypted communication device, and sends the control command to the embedded security control module ESAM; through identity authentication and authority management, it is ensured that only legitimate devices and users can access and control the system, which enhances the security and controllability of the system. The application of the ESAM security chip further enhances the security of the meter, and uses its encryption algorithm to encrypt key information data. In step S300, the embedded security control module ESAM encrypts the control command. After the electric energy meter receives the remote control command, the ESAM decrypts it and performs the corresponding operation. Through the encryption and decryption processing of ESAM, the security of the control command during transmission is guaranteed, and unauthorized access and operation are prevented; the security mechanism is crucial to the construction of smart grids, especially in the design of smart meters, ESAM technology is the key and difficulty.

[0027] Embodiment 2: like Figure 2 As shown, based on Example 1, the process of using a quantum random number to generate a quantum random number in the transmission process in step S100 provided in the embodiment of the present invention includes the following steps: Step S101: During data transmission, a quantum random number is generated as a subscript of the transmitted data to establish a quantum random number sequence; Step S102: Process and extract the quantum random number sequence, take the quantum random number sequence as input, map it into an output of a fixed length, calculate the probability distribution of each quantum element to obtain the entropy of the quantum random number sequence, and check the entropy of the quantum random number sequence. If the check is higher than a preset value, the quantum random number sequence is packaged; Step S103: Divide the packaged quantum random number sequence to obtain N data blocks, where the data block occupies a set byte. If the data block is less than the set byte, the data block is supplemented with bytes so that the data block occupies the set byte, and the quantum random number sequence is used to obtain the quantum key for the data to be transmitted.

[0028] In the above embodiment, in step S101, during the data transmission process, a quantum random number is generated as the subscript of the transmitted data, and a quantum random number sequence is established; the randomness of quantum mechanics is used to generate an unpredictable random number sequence to ensure the randomness and security of data transmission. Its significance lies in providing a basis for subsequent data encryption and distribution, ensuring the randomness and unpredictability of the key, thereby enhancing the security of data transmission. In step S102, the quantum random number sequence is processed and extracted, the quantum random number sequence is used as input, mapped to an output of a fixed length, the probability distribution of each quantum element is calculated to obtain the entropy of the quantum random number sequence, and the entropy of the quantum random number sequence is checked. If the check is higher than the preset value, the quantum random number sequence is packaged; the randomness and security of the quantum random number sequence are evaluated by calculating the entropy of the quantum random number sequence, and the generated random number sequence is guaranteed to have sufficient security. Its significance lies in ensuring that the randomness and security of the quantum random number sequence meet the preset standards through the entropy check, thereby providing a reliable random number source for subsequent data distribution and encryption. In step S300, the packaged quantum random number sequence is divided to obtain N data blocks, where the data block occupies the set bytes. If the data block is less than the set bytes, the byte position is supplemented in the data block so that the data block occupies the set bytes. The quantum random number sequence is used to obtain the quantum key for the data to be transmitted; the quantum random number sequence is divided into data blocks of fixed size, and each data block is ensured to reach the set bytes, thereby generating the quantum key. Its significance lies in generating the key through the quantum random number sequence, ensuring the randomness and security of the key, and providing unconditional security guarantee for data transmission.

[0029] Embodiment 3: like Figure 3 As shown, on the basis of Example 2, in step S100 provided in the embodiment of the present invention, the process of encrypting the quantum public key of the receiving party of the encryption communication device to encrypt the quantum key comprises the following steps: Step S104: Generate a shared quantum key through a quantum key distribution protocol, where the quantum key is used to encrypt data. The quantum key distribution protocol includes a matrix of quantum states and quantum public keys; Step S105: Encrypt the data using the shared quantum key, encode the data into quantum states, and use the recipient's quantum public key to control the conversion of these quantum states, and use the matrix of the quantum public key to manipulate the quantum state; Step S106: The encrypted quantum key is forwarded to the data soft routing device. During the forwarding process, the data is monitored by the energy monitoring communication security wall.

[0030] In the above embodiment, a shared quantum key is generated by the quantum key distribution protocol in step S104; the quantum key distribution protocol includes a matrix of quantum states and quantum public keys; the high security of quantum keys ensures the security of key distribution; the advantage of quantum key distribution is that it can ensure the high security of quantum keys, thereby realizing the "one-time one-key" based on bits for confidential data that needs to be protected, which is a provably secure encryption communication technology. In step S105, the shared quantum key is used to encrypt the data, encode the data into the quantum state, and use the quantum public key of the recipient to control the conversion of these quantum states, and use the matrix of the quantum public key to manipulate the quantum state; by encrypting the data with the quantum key, unconditional secure communication can be achieved; quantum key distribution technology uses the principles of quantum mechanics to successfully solve the problem of key distribution difficulties, making the one-time one-key (OTP) algorithm have a practical use. The purpose of quantum key distribution is to provide unconditionally secure key distribution for communication participants, so improving the net secure key distribution rate is its primary task. In step S106, the encrypted quantum key is forwarded to the data soft routing device. During the forwarding process, the data is monitored by the energy monitoring communication security wall. During the forwarding process, the data is monitored to ensure the security of data transmission. The quantum key distribution network is a new network form with quantum key distribution technology as the core, which opens up a new path for ensuring network information security. The purpose of the quantum key distribution network is to provide unconditionally secure key distribution for communication participants, so improving the net secure key distribution rate is its primary task.

[0031] Embodiment 4: like Figure 4 As shown, based on Example 1, the process of performing identity authentication according to the rights management policy algorithm in step S200 provided in the embodiment of the present invention includes the following steps: Step S201: authenticate the sender's password, use quantum public key encryption exchange to obtain an encrypted quantum key, decrypt the quantum key to obtain an encrypted quantum private key, and perform role access control, role access control, dynamic rights management and identity authentication operations based on the encrypted quantum private key; Step S202: According to the identity authentication result, obtain the operation authority corresponding to the identity, establish a communication connection between the sender and the encrypted receiver, obtain specific data corresponding to the identity or perform specific operations; Step S203: construct a control mode according to the identity operation authority verification result and the operation authority, divide the authorization scope according to the control mode, and send the authorization scope to the embedded security control module to monitor the content of the operation; when the operation content exceeds the authority scope, a reminder is issued.

[0032] In the above embodiment, quantum public key encryption, exchange and decryption of quantum keys are performed in step S201 to ensure the authenticity of the sender's identity and prevent counterfeit attacks. Role access control is performed based on the decrypted quantum private key to ensure that only authorized users can access specific resources. Dynamic permission management is implemented to ensure the flexibility and real-time nature of permission allocation; identity authentication is performed through quantum keys to improve the security and reliability of the authentication process. In step S202, the operation permissions corresponding to the identity are obtained according to the identity authentication results to ensure that the user can only perform operations within their authority. A communication connection is established between the sender and the encrypted receiver to ensure the security and privacy of communication. Specific data corresponding to the identity is obtained or specific operations are performed to ensure the legitimacy and security of data access. In step S203, a control mode is constructed based on the identity operation permission verification results and the operation permissions to ensure the legitimacy of the operation; the authorization scope is divided according to the control mode to ensure the refinement of permission management. The authorization scope is sent to the embedded security control module ESAM to monitor the operation content to prevent unauthorized operations; when the operation content exceeds the authority scope, a reminder is given to ensure the security and compliance of the system.

[0033] Embodiment 5: like Figure 5 As shown, based on Example 1, the process of encrypting the control command in step S300 provided in the embodiment of the present invention includes the following steps: Step S301: using the control command as input, processing it in combination with the quantum key, generating a data integrity check code; attaching the data integrity check code to the original control command to form a message unit, and adding the message unit to the embedded security module; Step S302: The embedded security module generates a random quantum state for the message unit, transmits the quantum state to the target device through the communication channel using quantum communication technology, and periodically replaces the quantum key and immediately revokes and replaces the quantum key when the quantum key is leaked; Step S303: After receiving the encrypted control command, the target device uses the decryption quantum key to decrypt it and verify the data integrity; after confirming that it is correct, it executes the control command. If there is an error, an alarm will be prompted.

[0034] In the above embodiment, in step S301, by generating a data integrity check code, it is ensured that the control command has not been tampered with or replaced during the transmission process; the characteristics of the quantum key are utilized to ensure that the generation process of the check code is safe, thereby ensuring the integrity of the data; the check code is attached to the control command to form a message unit, which is convenient for subsequent encryption and transmission; it provides a basis for quantum communication and ensures the integrity and security of the message. In step S302, by generating a random quantum state and transmitting it using quantum communication technology, the security of the message during transmission is ensured. The randomness of the quantum state and the non-eavesdropping nature of quantum communication make it impossible for the message to be stolen or tampered with during the transmission process; the quantum key is replaced regularly and immediately revoked and replaced when the key is leaked, which ensures the security of the key; it prevents potential security risks caused by the long-term use of the key and enhances the security of the system. In step S303, the control command is decrypted using the decryption quantum key and the data integrity is verified to ensure that the received control command is complete and has not been tampered with; the correctness and security of the control command are guaranteed; the control command is executed after confirmation, and if there is an error, an alarm is issued to ensure the security and reliability of the system, prevent the execution of erroneous or malicious commands, and protect the security of the system.

[0035] Embodiment 6: like Figure 6 As shown, based on Example 5, this embodiment of the present invention provides a process of forming a message unit in step S301, which includes the following steps: Step S3011: Preset the size of each data block, determine the length of the original control command, and divide it. If the length of the original control is not enough to reach the predetermined data block size, fill the end of the original command with a random number to meet the preset size; Step S3012: encrypt each data block, generate a tag during the encryption process, the tag generated for the last data block contains the information and integrity of the entire message, and the generated tag is attached to the corresponding data block to form a complete data unit; Step S3013: Encrypt the data unit with the quantum key, and put the tag generated by the last data block after the original control command to form a new data, and encapsulate the new data into a message unit.

[0036] In the above embodiment, the size of each data block is preset in step S3011, the length of the original control command is determined, and the command is segmented. If the length of the original control is not enough to reach the predetermined data block size, a random number is filled at the end of the original command to meet the preset size; the size of each data block is ensured to be consistent, which is convenient for subsequent encryption processing; by filling in random numbers, it is possible to prevent attackers from inferring the length of the original command through the size of the data block, thereby enhancing the security of the data. In step S3012, each data block is encrypted, and a label is generated during the encryption process. The label generated by the last data block contains the information and integrity of the entire message. After the generated label is attached to the corresponding data block, a complete data unit is formed; the content of the data block is protected by encryption to prevent unauthorized access and tampering; the generated label ensures the integrity and authenticity of the data to prevent the data from being tampered with during transmission. In step S3013, the data unit is encrypted with a quantum key, and the tag generated by the last data block is placed after the original control command to form a new data, and the new data is encapsulated into a message unit; the high security of the quantum key is used to further enhance the confidentiality of the data; quantum key distribution technology has been proven to be unconditionally secure and can effectively prevent eavesdropping and attacks; placing the tag after the original control command ensures the integrity and order of the data and prevents the data from being reordered or tampered with during transmission.

[0037] Embodiment 7: like Figure 7 As shown, based on Example 5, the process of generating a quantum key in step S302 provided in this embodiment of the present invention includes the following steps: Step S3021: Generate a series of quantum bits using a quantum light source and define each quantum state; the generated quantum bits are transmitted to the receiver (target device) via optical fiber, and the devices at both ends of the communication (sender and receiver) perform dynamic negotiation and encoding according to the quantum key distribution protocol; Step S3022: After receiving the quantum bit, the receiver will randomly select the same measurement basis as the sender. After the measurement is completed, the receiver will record the measurement result and notify the sender of the measurement basis used. Step S3023: Based on the measurement results, the sender and the receiver will jointly form a set of candidate key bits; if the measurement results are consistent, the value of the quantum bit can be used as part of the key; error correction is performed on the preliminary key, and a hash function is applied to reduce any amount of information; a set of quantum keys is generated for use in the embedded security module for encryption processing.

[0038] In the above embodiment, step S3021 generates and transmits quantum bits. Through a quantum light source (such as a single photon source or other quantum state generating device), quantum bits of various states can be generated. The quantum bits are highly random and non-replicable, which are the core characteristics of quantum communication. Significance: The generated quantum bits constitute the basis of quantum keys, ensuring the randomness and security of key generation and preventing potential theft and interference. Definition of each quantum state The physical state of each quantum bit is precisely defined, such as polarization state or phase state, to provide necessary information for subsequent measurement and encoding. Significance: This clear state definition lays the foundation for effective quantum measurement, allowing the receiver to accurately decode the received quantum bits. Transmitting quantum bits through optical fiber: Optical fiber is used as a channel to transmit quantum bits, which can effectively reduce signal attenuation and environmental interference, and ensure the integrity of quantum states during transmission. Significance: A stable transmission path is an important condition for ensuring the security of key distribution, which helps to maintain information from being stolen or disturbed during transmission. Dynamic negotiation and encoding according to the quantum key distribution protocol: According to the consensus quantum key distribution protocol (such as BB84), the sender and the receiver can reach a negotiation in a secure manner to determine the encoding method and basis of the generated key. Significance: Through dynamic negotiation and encoding, the flexibility and security of the key generation process can be enhanced, thereby improving the overall communication security. Step S3022 selects the measurement basis and measurement result notification. The selection of the random basis makes the result of the measurement process have a certain degree of randomness, preventing any preset interference. Significance: It ensures that the measurement results are mutually consistent only when the sender and the receiver use the same measurement basis, thereby increasing security. Record the measurement results after the measurement is completed. The receiver records the measurement results of each quantum bit for subsequent confirmation. Significance: Recording the measurement results is an important step in generating the final key, which can ensure that subsequent collaboration is based on real and verified information. Notify the sender of the measurement basis used by the sender: Through communication, the receiver transmits the information of its measurement basis to the sender, so that the two can perform further data comparison. Significance: It enables both parties to determine the shared quantum bits, identify potential eavesdropping, and provide a basis for subsequent candidate key generation. Step S3023 forms candidate key bits and error correction. According to the recorded measurement results, the sender and the receiver can jointly decide which quantum bits can be used as candidate key bits and establish a preliminary key. Significance: This step ensures the consistency and security of the key and the confidentiality of subsequent data transmission. Error correction of the preliminary key Correct the errors in the transmission process (such as noise and channel interference) to make the candidate key higher quality and the error bits corrected. Significance: Error correction is a key link to improve the security of the key, ensuring that the key is the same in the cognition of both parties and can be used for encryption. Applying hash functions to reduce the amount of any information Generate a shorter key through the hash function, thereby ensuring that even if an eavesdropper obtains part of the information, it is difficult to reconstruct the complete key.Significance: The hashing process enhances the security of the key and prevents the possibility of an eavesdropper obtaining the complete key through limited information. Generate the final quantum key: The quantum key after the above steps is processed to form the final, secure quantum key. Significance: The generated quantum key will be used by the embedded security module for subsequent encryption processing to ensure the security and integrity of control command transmission.

[0039] In summary, in the entire quantum key generation process of this embodiment, the generated quantum key is guaranteed to have strong randomness, validity and security. This not only strengthens the key protection mechanism and ensures the security and reliability of information transmission, but also lays the foundation for the practical application of quantum communication technology.

[0040] Embodiment 8: like Figure 8 As shown, based on Example 7, the process of generating a set of quantum keys in step 3023 provided in this embodiment of the present invention includes the following steps: Step S30231: at the first position, the second position, the third position, the fourth position and the fifth position of the measurement basis, respectively determine whether the measurement results of the sender and the receiver are the same; generate candidate key bits, the length of the candidate key is equal to the number of base matches of both parties; Step S30232: The sender and the receiver identify and correct the error bits through fine-grained error correction, perform error detection, and exchange verification evidence; the sender sends a portion of the verified candidate key bits through the classical channel and obtains feedback from the receiver; when inconsistencies are found, the error bits are corrected by sending a hash-based public key or an attack detection message; Step S30233: Select a hash function and use the hash function to process the candidate key, input the candidate key into the hash function, and generate a hash value of a fixed length; the generated hash value will compress the candidate key; use the hash value as the final shared key, and the sender and the receiver confirm the shared key in the embedded security module; The expression of the hash function is:

[0041] Where K represents the candidate key bits of the input, represented by a bit string, M represents additional context information, such as participant identity, timestamp, session ID, etc., to enhance the uniqueness of the hash; T represents a marker for timestamp to introduce time effects to ensure that each generated hash is unique; Indicates a unique random number generated based on a timestamp, used for encryption rounds to reduce the risk of replay attacks; Represents an additional random number used to increase the complexity of PBKDF2 and reduce the possibility of dictionary attacks. Indicates the number of PBKDF2 iterations, usually set high enough to increase computational intensity; Indicates additional information about the candidate key, which is used for HKDF extension to improve the security of key derivation; Indicates the expected output length (number of hash bits); First, the message M is encrypted using AES-GCM (Galois / Counter Mode) and the Nonce generated by the candidate key K and the timestamp is used for encryption; HKDF (HMAC Key Derivation Function): derives multiple keys from the data generated by AES-GCM, and uses the added input information (such as Info) to enhance randomness and complexity, so that the derived key is context-dependent; the candidate key is combined with the timestamp T using the PBKDF2 algorithm, and iterated multiple times with the specified salt. This will greatly increase the difficulty of recovering the original key from the generated hash; SHA-512 hash: Finally, these blocks are concatenated together and processed through SHA-512 to output a fixed-length hash value; Output H(K, M, T), returns the final calculated fixed-length hash value with a length of 512 bits, which is used as the final shared key; combining AES-GCM and PBKDF2 greatly enhances the ability to resist attacks, ensuring that even if an attacker obtains a generated hash value, it is difficult to recover the original candidate key or message data; by introducing timestamps and Nonce, the risk of replay attacks is reduced, and each generated hash is guaranteed to be unique; HKDF provides powerful key derivation capabilities, making it possible to derive multiple independent keys from an initial key, enhancing the complexity of the key space; SHA-512 as the last step increases the entropy of the hash, improves anti-collision performance and increases the output space; due to the modular combination of HXDF, PBKDF2 and AES-GCM, this hash function is not only designed for quantum key generation, but can also be used for key derivation and management in other high-security environments; the hash function not only provides a way for simple key compression, but also comprehensively processes the initial candidate key and additional information through multiple layers of encryption and transformation to produce a solid and unique shared key. The way it is built ensures high security in a quantum communication environment and can cope with a variety of possible attacks. It is an innovative application in quantum key distribution.

[0042] In the above embodiment, step S30231 generates candidate key bits, compares the quantum bits measured by the sender and the receiver under various bases one by one, and verifies whether the measurement results of both parties at each bit position are consistent; it is ensured that only quantum bits with consistent measurement results on the same basis can be included in the candidate key; the length of the generated candidate key bits depends on the number of base matches of both parties, and only those measurement results obtained under the same measurement basis are considered to enhance the randomness and security of the generated key. Significance: By screening and processing quantum bits, it is ensured that the generated candidate key has high security and reduces the potential impact of theft and errors. Step S30232 error correction, both parties use error correction protocols (such as low-density parity check codes) to identify and correct erroneous bits in the candidate key; error detection and feedback ensure that any measurement errors can be discovered and corrected without exposing the specific content of the candidate key; the sender transmits part of the candidate key bits through the classical channel, and the receiver feedbacks some inconsistencies detected based on these data. The exchange of information helps to find errors in time and make adjustments; when it is found that there is an inconsistency in the feedback based on the candidate key, both parties can take corresponding measures to notify each other through hash or attack detection information and correct the problematic position. Significance: Through effective error correction, both parties can ensure that the generated keys are consistent and reliable, avoid potential security risks caused by measurement errors, and further improve the security of key use. Step S30233 Hash processing, select a secure hash function (such as SHA-256) to process the candidate key. The hash function converts the candidate key into a hash value of fixed length with anti-collision characteristics; the final key is irreversible; the hash processing compresses the longer candidate key into a shorter hash value while maintaining enough bits to increase its randomness and unpredictability. Significance: The generated hash value not only reduces the storage requirements of the key, but also greatly increases the security of the final key; even if the intermediate link is attacked, it is difficult for the attacker to restore the candidate key from the hash value, thereby ensuring the security of the key; the final hash value is used as a shared key, so that the sender and receiver can efficiently perform subsequent encryption operations, providing confidentiality and integrity of data transmission.

[0043] In summary, this embodiment ensures the security, reliability and effectiveness of quantum keys from the generation of candidate keys, error correction to the final hash processing, and provides a solid foundation for encrypted communications based on quantum keys. This not only promotes the development of quantum communication technology, but also provides new solutions for future network security.

[0044] Embodiment 9: like Fig. 9 As shown, based on Example 5, the process of using the decryption quantum key for decryption in step 303 provided in the embodiment of the present invention includes the following steps: Step S3031: The target device measures the received quantum state through a quantum measurement basis to obtain information related to the original control command; decrypts the information using a previously shared quantum key, which is generated and stored through a secure quantum key distribution protocol before quantum communication; Step S3032: The target device decrypts the encrypted control command by combining the quantum key and the previously received quantum state; Step S3033: Convert the quantum state into classical bits, perform logical operations on the received bits and the quantum key, obtain information related to the control command, and obtain the decrypted control command and the corresponding integrity check code.

[0045] In the above embodiment, step S3031 is quantum measurement and key decryption. The target device measures the received quantum state by selecting a suitable quantum measurement basis. The measurement process can extract information related to the original control command. The result of the measurement is a form of expression of information. The characteristics of the quantum state ensure that the measurement has certain privacy and security. After the measurement, the target device will use the previously shared quantum key for decryption. The quantum key is generated and stored through a secure quantum key distribution protocol before quantum communication to ensure the security and reliability of the key. Significance: It ensures that only authorized devices can read and understand the control command. Through the characteristics of quantum measurement, the information extraction and the use of quantum keys are successfully realized, so that the security of data transmission can be maintained. At the same time, successful quantum key generation and storage are the basis of quantum secure communication. Step S3032 combines the key decryption control command. The target device combines the previously received quantum state and quantum key to decrypt the encrypted control command. Because the quantum key is a high security guaranteed by quantum communication, the closely combined process can ensure the reliability and security of the decryption operation. Significance: Ensure the accuracy and security of the information decryption process; the decryption of control commands not only protects the information from illegal access, but also effectively prevents data tampering, ensuring the safety and reliability of the control process. Step S3033 quantum state conversion and logical operation, convert the decrypted quantum state into classical bits, so that the target device can process data in a traditional computing way; perform logical operations (such as general XOR operations) on the converted classical bits and quantum keys to obtain information related to the control command, and generate integrity check codes at the same time; the check codes can be used to verify the integrity of the command during transmission to ensure that there is no accidental tampering. Significance: Convert quantum information into a form that can be understood by classical computer systems to ensure the availability of control information. At the same time, the generation of integrity check codes and bit verification can prevent data from being tampered with during transmission, thereby maintaining the trust of the system and the accuracy of operations.

[0046] In summary, steps S3031, S3032 and S3033 of this embodiment cooperate with each other in the quantum decryption process to jointly ensure the security and effectiveness of data transmission and decryption of control commands. This enables the system to have strong capabilities in resisting attacks, protecting confidential information and maintaining data integrity, and ultimately ensures the reliable operation of the system; a safe and efficient communication mechanism is of great value to modern information technology, especially in the fields of energy, finance and military.

[0047] Embodiment 10: like Fig.10 As shown, based on Embodiments 1 to 9, the encrypted communication system for remote energy dispatching control provided by the embodiment of the present invention includes: Data encryption module 1 is responsible for the transmission of data by the sender of the encrypted communication device. During the transmission process, a quantum random number is generated, the quantum random number is converted into a quantum key, and the quantum key is encrypted using the quantum public key of the receiver of the encrypted communication device. The sender of the encrypted communication device sends the quantum key and the encrypted data together to the data soft router; the transmission process is fully monitored by the energy monitoring communication security wall; Identity authentication module 2, the data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends the control command to the embedded security control module; The secondary encryption module 3, the embedded security control module will encrypt the control command; after the electric energy meter receives the remote control command, the embedded security control module will decrypt it and execute the operation.

[0048] In the above embodiment, the data encryption module generates quantum random numbers to ensure that the generated key has extremely high randomness and unpredictability; randomness is based on the principle of quantum physics and has higher security than random numbers generated by classical computers; the quantum random number is converted into a quantum key, and then the quantum key is encrypted using the quantum public key of the recipient to ensure that even if the data is intercepted during the data transmission process, malicious users cannot obtain a valid decryption key; during the transmission process, the energy monitoring communication security wall performs real-time monitoring to ensure that no abnormal behavior or potential attacks occur. At the same time, compliance and audit functions are provided. Significance: It provides strong cryptographic support for communication, ensures the confidentiality, integrity and availability of information; improves the security level through quantum technology, enhances the ability to resist various network attacks, and helps to ensure the stability and security of energy scheduling. The identity authentication module ensures that the data soft router can reliably identify the identity of the recipient of the encrypted communication device to prevent unauthorized devices from accessing the system; establishes a secure channel with the recipient of the encrypted communication device through the authentication process to ensure that the sending and receiving of data is carried out within a secure communication framework. Significance: Identity authentication is an important part of ensuring system security. It ensures that both parties in communication are legitimate by verifying the identity of the device. It not only prevents masquerading and man-in-the-middle attacks, but also establishes a foundation of trust, providing a guarantee for the subsequent transmission of control commands. Secondary encryption module The embedded security control module re-encrypts the received control commands to ensure the confidentiality and integrity of the control commands during transmission and protect the command content from being stolen or tampered with. Significance: The design of secondary encryption improves the security of the entire system, so that even if a security vulnerability occurs in the previous link, secondary encryption can still provide a layer of protection; multiple protection mechanisms reduce potential risks and ensure the safe execution of energy scheduling instructions. Decryption and execution module (electricity meter decryption) The electric energy meter decrypts the received control commands through the embedded security control module to ensure that only this device can execute the control commands and prevent other devices that do not have decryption authority from operating; through the decrypted control commands, the electric energy meter performs corresponding operations, such as adjusting power supply and metering, which can respond to the requirements of the scheduling system in real time. Significance: It ensures that when the electric energy meter receives the dispatch command, it can operate safely and accurately, ensuring the system's response time and operation accuracy; it is the last link in the entire dispatch system chain, and its performance directly affects the effectiveness and efficiency of the dispatch system.

[0049] In summary, the encrypted communication system for remote energy dispatching and control in this embodiment achieves high security and high reliability of information transmission through the careful design of each module. The data encryption module provides preliminary protection and realizes the security of data transmission through quantum technology; the identity authentication module ensures the legitimacy of both parties in communication; the secondary encryption module further enhances the security of control commands; finally, the decryption and execution module ensures the safe execution of commands, and overall improves the protection capability and response efficiency of the dispatching system. =The multi-layer protection architecture is crucial to ensure the security and controllability of the energy management system.

[0050] Fig.11 A block diagram of an exemplary electronic device suitable for implementing embodiments of the present invention is shown.

[0051] The electronic device may include a central processing unit / microprocessor / main control chip, etc. 4; a storage medium 5, coupled to the central processing unit / microprocessor / main control chip, etc. 4, and storing computer executable instructions therein, for performing the steps of each method of an embodiment of the present invention when executed by the processor.

[0052] The central processing unit / microprocessor / main control chip 4 may include but is not limited to, for example, one or more processors or microprocessors.

[0053] The storage medium 5 may include, but is not limited to, for example, random access memory (RAM), read-only memory (ROM), flash memory, EPROM memory, EEPROM memory, registers, computer storage media (such as hard disk, floppy disk, solid state drive, removable disk, CD-ROM, DVD-ROM, Blu-ray disc, etc.).

[0054] In addition, the electronic device may also include (but not limited to) a data bus 6, an input / output bus / external bus / device bus 7, a display 8, and input / output devices 9 (eg, keyboard, mouse, speaker, etc.).

[0055] The central processing unit / microprocessor / main control chip etc. 4 can communicate with external devices ( 8 , 9 etc.) through the I / O bus 7 via a wired or wireless network (not shown).

[0056] The storage medium 5 may also store at least one computer executable instruction for executing the various functions and / or method steps in the embodiments described in the present technology when executed by the central processing unit / microprocessor / main control chip 4.

[0057] In one embodiment, the at least one computer executable instruction may also be compiled into or constitute a software product, wherein one or more computer executable instructions are executed by a processor to perform the various functions and / or method steps in the embodiments described in the present technology.

[0058] Fig.12 A schematic diagram of a computer-readable storage medium according to an embodiment of the present invention is shown.

[0059] like Fig.12 As shown, instructions are stored on a non-transitory computer-readable storage medium 11, and the instructions are, for example, computer-readable instructions 10. When the computer-readable instructions 10 are executed by the processor, the various methods described above can be executed. The non-transitory computer-readable storage medium includes, but is not limited to, for example, volatile memory and / or non-volatile memory. Volatile memory may, for example, include random access memory (RAM) and / or cache memory (cache), etc. The non-transitory non-volatile memory may, for example, include read-only memory (ROM), hard disk, flash memory, etc. For example, the non-transitory computer-readable storage medium 11 may be connected to a computing device such as a computer, and then, when the computing device runs the computer-readable instructions 10 stored on the computer-readable storage medium 11, the various methods described above may be performed.

[0060] In the several embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0061] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0062] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0063] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and contains several instructions for executing all or part of the steps of the various embodiments of the method of the present invention through a computer device (which can be a personal computer, server, or network device, etc.). The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (full name in English: Read-Only Memory, English abbreviation: ROM), random access memory (full name in English: Random Access Memory, English abbreviation: RAM), disk or optical disk and other media that can store program codes.

[0064] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features thereof may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An encrypted communication method for remote energy dispatching and control, characterized in that: The following steps are involved: The sender of the encrypted communication device transmits the data. During the transmission process, a quantum random number is generated, which is converted into a quantum key. The quantum key is encrypted using the quantum public key of the receiver of the encrypted communication device. The sender of the encrypted communication device sends the quantum key and the encrypted data together to the data soft router. The energy monitoring communication security wall conducts comprehensive monitoring during the transmission process. The data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends the control command to the embedded security control module; The embedded security control module will encrypt the control command; after the electric energy meter receives the remote control command, the embedded security control module will decrypt it and execute the operation.

2. The encrypted communication method for remote energy dispatching and control according to claim 1, characterized in that: The process of generating a quantum random number for use in the transmission process includes: During the data transmission process, a quantum random number is generated as the subscript of the transmitted data to establish a quantum random number sequence; Process and extract the quantum random number sequence, take the quantum random number sequence as input, map it to an output of fixed length, calculate the probability distribution of each quantum element to obtain the entropy of the quantum random number sequence, and check the entropy of the quantum random number sequence. If the check is higher than the preset value, the quantum random number sequence is packaged; The packaged quantum random number sequence is divided into N data blocks, where the data block occupies the set bytes. If the data block is less than the set bytes, the byte position is supplemented in the data block so that the data block occupies the set bytes. The quantum random number sequence is used to obtain the quantum key for the data to be transmitted.

3. The encrypted communication method for remote energy dispatching and control according to claim 1, characterized in that: The process of encrypting the quantum key by the quantum public key of the receiver of the encrypted communication device includes: A shared quantum key is generated through the quantum key distribution protocol, which is used to encrypt data. The quantum key distribution protocol contains a matrix of quantum states and quantum public keys; Encrypt data using a shared quantum key, encode data into a quantum state, and use the recipient's quantum public key to control the transformation of the quantum state, and use the matrix of the quantum public key to manipulate the quantum state; The encrypted quantum key is forwarded to the data soft routing device. During the forwarding process, the data is monitored by the energy monitoring communication security wall.

4. The encrypted communication method for remote energy dispatching and control according to claim 1, characterized in that: The process of identity authentication based on the permission management strategy algorithm includes: Authenticate the sender's password, use quantum public key encryption exchange to obtain an encrypted quantum key, decrypt the quantum key to obtain an encrypted quantum private key, and perform role access control, role access control, dynamic permission management and identity authentication operations based on the encrypted quantum private key; According to the identity authentication result, the operation authority corresponding to the identity is obtained, a communication connection between the sender and the encrypted receiver is established, and specific data corresponding to the identity is obtained or specific operations are performed; A control model is constructed based on the identity operation permission verification results and the operation permissions. The authorization scope is divided according to the control model and sent to the embedded security control module to monitor the content of the operation. When the operation content exceeds the permission scope, a reminder is issued.

5. The encrypted communication method for remote energy dispatching and control according to claim 1, characterized in that: The process of encrypting the control command includes: Using the control command as input, combined with the quantum key for processing, to generate a data integrity check code; attaching the data integrity check code to the original control command to form a message unit, and adding the message unit to the embedded security module; The embedded security module generates a random quantum state for the message unit, transmits the quantum state to the target device through the communication channel using quantum communication technology, and periodically replaces the quantum key and immediately revokes and replaces the quantum key when the quantum key is leaked; After receiving the encrypted control command, the target device uses the decryption quantum key to decrypt and verify the data integrity; After confirmation, the control command will be executed. If there is an error, an alarm will be issued.

6. The encrypted communication method for remote energy dispatching and control as claimed in claim 5, characterized in that: The process of forming a message unit includes: The size of each data block is preset, the length of the original control command is determined, and the data is segmented. If the length of the original control command is not enough to reach the predetermined data block size, a random number is filled at the end of the original command to meet the preset size. Each data block is encrypted and a tag is generated during the encryption process. The tag generated by the last data block contains the information and integrity of the entire message. The generated tag is attached to the corresponding data block to form a complete data unit. The data unit is encrypted with a quantum key, and the label generated by the last data block is placed after the original control command to form a new data, and the new data is encapsulated into a message unit.

7. The encrypted communication method for remote energy dispatching and control as claimed in claim 5, characterized in that: The process of generating quantum keys includes: A series of quantum bits are generated using a quantum light source to define each quantum state. The generated quantum bits are transmitted to the receiver via optical fiber, and the devices at both ends of the communication dynamically negotiate and encode according to the quantum key distribution protocol. After receiving the quantum bit, the receiver will randomly select the same measurement basis as the sender. After the measurement is completed, the receiver will record the measurement result and inform the sender of the measurement basis it used. Based on the measurement results, the sender and receiver will jointly form a set of candidate key bits; if the measurement results are consistent, the value of the quantum bit can be used as part of the key; Perform error correction on the preliminary key and apply a hash function to reduce any amount of information; Generate a set of quantum keys for use in embedded security modules for cryptographic processing.

8. The encrypted communication method for remote energy dispatching and control according to claim 7, characterized in that: The process of generating a set of quantum keys includes: At the first position, the second position, the third position, the fourth position and the fifth position of the measurement basis, respectively determine whether the measurement results of the sender and the receiver are the same; generate candidate key bits, the length of the candidate key is equal to the number of base matches of both parties; The sender and receiver identify and correct erroneous bits through fine-grained error correction, perform error detection, and exchange verification evidence; The sender sends a portion of the verified candidate key bits through the classical channel and obtains feedback from the receiver; when inconsistencies are found, the incorrect bits are corrected by sending a hash-based public key or an attack detection message; A hash function is selected and used to process the candidate key, the candidate key is input into the hash function to generate a hash value of a fixed length; the generated hash value compresses the candidate key; the hash value is used as the final shared key, and the sender and the receiver confirm the shared key in the embedded security module.

9. The encrypted communication method for remote energy dispatching and control as claimed in claim 5, characterized in that: The process of decrypting using the decryption quantum key includes: The target device measures the received quantum state through the quantum measurement basis to obtain information related to the original control command; it decrypts the information using the previously shared quantum key, which is generated and stored through a secure quantum key distribution protocol before quantum communication. The target device decrypts the encrypted control command by combining the quantum key and the previously received quantum state; Convert the quantum state into classical bits, perform logical operations on the received bits and the quantum key, obtain information related to the control command, and get the decrypted control command and the corresponding integrity check code.

10. An encrypted communication system for remote energy dispatching and control according to the encrypted communication method for remote energy dispatching and control according to any one of claims 1 to 9, characterized in that: Include: The data encryption module is responsible for encrypting the data transmitted by the sender of the communication device. During the transmission process, a quantum random number is generated, the quantum random number is converted into a quantum key, and the quantum key is encrypted using the quantum public key of the receiver of the encryption communication device. The sender of the encryption communication device sends the quantum key and the encrypted data together to the data soft router; the transmission process is fully monitored by the energy monitoring communication security wall; The identity authentication module, the data soft router performs identity authentication, establishes a connection with the encrypted communication device receiver, and sends the control command to the embedded security control module; The secondary encryption module and the embedded security control module will encrypt the control command; after the electric energy meter receives the remote control command, the embedded security control module will decrypt it and execute the operation.

Images