Safety control method and system for interaction of power dispatching edge cluster and dispatching cloud edge collaborative product, and related equipment

Abstract

The invention relates to the technical field of power dispatching system cloud edge collaboration, in particular to a safety control method and system for interaction of a power dispatching edge cluster and a dispatching cloud edge collaboration product and related equipment. Comprising the steps that a power dispatching edge cluster sends a public key to a dispatching cloud and stores a private key; the scheduling cloud encrypts the interactive product by using a public key to form encrypted data; performing operation on the interactive product and the IP address of the power dispatching edge cluster by adopting a Hash algorithm to obtain a first abstract; the first abstract and the encrypted data are packaged and sent to a power dispatching edge cluster; after receiving the first abstract and the encrypted data, the power dispatching edge cluster decrypts the encrypted data through a private key to obtain a decrypted interactive product; performing operation on the decrypted interactive product and the own IP address by adopting a Hash algorithm to obtain a second abstract; when it is judged that the second abstract is matched with the first abstract, the decrypted interactive product is operated, and the safety and reliability of the product transmission process are improved.

Description

Technical Field

[0001] The present invention relates to the field of cloud-edge collaboration technology for electric power dispatching systems, and in particular to a security control method, system and related equipment for interaction between an electric power dispatching edge cluster and a dispatching cloud-edge collaborative product. Background Art

[0002] The collaboration between the power dispatch edge cluster and the dispatch cloud cloud management center includes base interaction, product interaction, application interaction and monitoring interaction. The cloud management center includes registration management, base services, cloud product warehouse, application interaction services and monitoring center. Among them, the cloud product warehouse lists standard products. Products such as bases, components and applications developed according to the dispatch cloud edge computing cluster product development standards can be listed in the cloud product warehouse.

[0003] The power dispatch edge cluster has the functions of base agent, product interaction agent, application interaction agent, and monitoring agent. As a unified exit for interaction with the cloud management center, it realizes the base interaction, product interaction, application interaction, and monitoring interaction between the edge cluster and the cloud management center of the dispatch cloud. Among them, the product interaction agent is connected to the cloud product warehouse and is responsible for the delivery of cloud-edge products.

[0004] Generally, encryption algorithms are used to encrypt products to ensure the security and reliability of cloud-edge product interaction. For example, a one-stop application software configuration collaboration and delivery method provided by China Public Invention Application CN117591164A records: Product generation; Products in the R&D subsystem are generated from automated pipeline compilation, construction, generation and upload, and the version number is generated according to the timestamp at the time of creation. For each product generated, a unique summary value will be calculated based on the SM3 encryption algorithm. The summary value is used by the user to determine whether the product has changed. The same product has the same SM3 summary value; the generated products are divided into product warehouses according to the application software, related projects or work order numbers. However, it does not disclose the security control of the product transmission process. The method and system for transmitting software products from the source network to the target network provided by China Public Invention Application CN115413343A records: For example, the platform provider can realize end-to-end encryption of the software product before downloading the product on the cloud (in the source network) according to the public key of the platform provider, and the software product can be decrypted in the target network, for example, on the edge device before installation on the edge, with the help of the assigned private key. The aforementioned distribution of keys describes the requirements for the signature of the software product in the source network QN and the integrity check of the signed software product in the target network ZN. For the encryption of the software product, the distribution of keys for asymmetric encryption is the opposite. In another embodiment, encrypted transmission can be achieved by symmetric encryption. The prior art only mentions that the encryption of the software product can be checked for integrity, but does not provide how to encrypt and control the security of the software product.

[0005] In view of this, a security control method, system and related equipment for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product are needed. Summary of the invention

[0006] In view of the problems in the prior art, the present invention provides a security control method, system and related equipment for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product. The specific technical solution is as follows:

[0007] A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product includes the following steps:

[0008] The power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key;

[0009] The scheduling cloud encrypts the interactive product with a public key to form encrypted data;

[0010] The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain a first summary;

[0011] The dispatch cloud encapsulates the first summary and the encrypted data and sends them to the power dispatch edge cluster;

[0012] After receiving the first summary and encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive product;

[0013] The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second summary;

[0014] The power dispatching edge cluster determines whether the second digest matches the first digest, and when it is determined that the second digest matches the first digest, the decrypted interactive product is run.

[0015] Preferably, the public key and the private key are n-order matrices, and are inverse matrices of each other.

[0016] Preferably, the dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first summary, which specifically includes:

[0017] The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m-bit hash value, specify the starting bit as the a-th bit, use b bits as the interval width, and extract n bits at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0018] Preferably, the dispatching cloud encapsulates the first summary and the encrypted data and sends them to the power dispatching edge cluster, further comprising:

[0019] The dispatch cloud also sends the array [a, b] consisting of the start bit and interval width to the power dispatch edge cluster.

[0020] Preferably, the power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second summary, which further includes:

[0021] The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain the second m-bit hash value. According to the array [a, b], the starting bit is determined as the ath bit, and the b bits are used as the interval width. The n 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operation with the private key to obtain the second summary.

[0022] Preferably, the scheduling cloud encrypts the interactive product with a public key to form encrypted data, specifically comprising: the scheduling cloud divides the interactive product into n data blocks, and encrypts each data block with a public key to obtain n encrypted data blocks, i.e., encrypted data;

[0023] The dispatch cloud uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first summaries;

[0024] The scheduling cloud extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the public key to obtain a first sequence matrix;

[0025] The scheduling cloud encapsulates each encrypted data block with the first summary corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames to the power scheduling edge cluster in sequence.

[0026] Preferably, after receiving the first sequence matrix and n transmission frames, the power dispatching edge cluster first uses a private key to decrypt the n transmission frames to obtain n decrypted data blocks;

[0027] The power dispatching edge cluster then uses a hash algorithm to calculate the n decrypted data blocks and IP addresses respectively to obtain n second summaries;

[0028] The power dispatching edge cluster extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the private key to obtain a second sequence matrix;

[0029] The power dispatching edge cluster determines whether the second order matrix is ​​consistent with the first order matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

[0030] A safety control system for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, applying the method described, including a dispatching cloud and a power dispatching edge cluster;

[0031] The scheduling cloud includes a public key storage module, a data encryption module, a first summary calculation module, and a first communication module;

[0032] The power dispatching edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second summary calculation module, and a judgment execution module;

[0033] The public key storage module is used to receive the public key sent by the power dispatch edge cluster;

[0034] The data encryption module encrypts the interactive product using a public key to form encrypted data;

[0035] The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary;

[0036] The first communication module is connected with the second communication module to realize data interaction between the dispatching cloud and the power dispatching edge cluster;

[0037] Communication module, used for data interaction between the dispatching cloud and the power dispatching edge cluster;

[0038] The secret key generation module is used to generate a public key and a private key, and send the public key to the scheduling cloud, and save the private key corresponding to the public key;

[0039] The data decryption module is used to decrypt the encrypted data using a private key after receiving the first summary and the encrypted data to obtain a decrypted interactive product;

[0040] The second summary calculation module uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second summary;

[0041] The judgment execution module judges whether the second digest matches the first digest, and when it is judged that the second digest matches the first digest, the decrypted interactive product is executed.

[0042] A computer-readable storage medium, comprising a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product.

[0043] A processor is used to run a program, wherein when the program is running, the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product is executed.

[0044] Compared with the prior art, the beneficial effects of the present invention are as follows: the present invention can verify whether the sending is correct through the IP address of the interactive product and the power dispatching edge cluster, and through the matching judgment of the second summary and the first summary, it can be judged whether the sending of the interactive product has not been tampered with during transmission, and verify whether it is complete and correct, thereby improving the reliability of the transmission process, setting the public key and the private key in the form of an inverse matrix, increasing the difficulty of decryption, and improving the security and reliability of the product transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following is a brief introduction to the drawings required for the specific embodiments or the description of the prior art. In all the drawings, similar elements or parts are generally identified by similar reference numerals. In the drawings, the elements or parts are not necessarily drawn according to the actual scale.

[0046] Figure 1 The present invention is a flow chart of the method.

[0047] Figure 2 It is a system principle diagram of the present invention. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] It should be understood that when used in this specification and the appended claims, the terms "include" and "comprises" indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0050] It should also be understood that the terms used in the present specification are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, the singular forms "a", "an" and "the" are intended to include plural forms unless the context clearly indicates otherwise.

[0051] It should be further understood that the term "and / or" used in the present description and the appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0052] Embodiment 1:

[0053] like Figure 1 As shown, this embodiment provides a security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, including the following steps:

[0054] Step S1: The power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key; the public key and the private key are n-order matrices and are inverse matrices of each other. The meaning of the inverse matrix is: suppose A is an n-order matrix. If there exists another n-order matrix B such that: AB=BA=E, then the square matrix A is called invertible, and the square matrix B is called the inverse matrix of A, then A=B -1 , B=A -1 .

[0055] Step S2: The scheduling cloud encrypts the interactive product using a public key to form encrypted data.

[0056] Step S3: The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain a first summary. This includes: the dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m-bit hash value, specifying the starting bit as the a-th bit, using b bits as the interval width, and extracting n equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0057] For example, in this embodiment, the hash algorithm adopts the SHA256 algorithm, and its hash value is 256 bits, that is, m=256. When a=4, b=5, and n=3, the 10th, 16th, 22nd, 28th, 34th, 40th, 46th, 52nd, and 58th bits of the hash value are extracted, and a total of 9 bits are sequentially formed into a 3*3 matrix. By analogy, the values ​​of a, b, and n can be set, but they match the number of bits of the hash value obtained by the corresponding hash algorithm.

[0058] Step S4: The dispatch cloud encapsulates the first summary and the encrypted data and sends them to the power dispatch edge cluster. At the same time, the dispatch cloud also sends the array [a, b] consisting of the start bit and the interval width to the power dispatch edge cluster. Step S5: After receiving the first summary and the encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive product.

[0059] Step S6: The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second summary. This includes: the power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second m-bit hash value, and according to the array [a, b], the starting bit is determined as the ath bit, and the b bits are used as the interval width, and n equal intervals are extracted. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operation with the private key to obtain the second summary.

[0060] Step S7, the power dispatch edge cluster determines whether the second digest matches the first digest. When it is determined that the second digest matches the first digest, the decrypted interactive product is run. In this embodiment, the Euclidean distance between the second digest and the first digest can be calculated. When the Euclidean distance is less than a set threshold, the second digest is determined to match the first digest, otherwise it does not match. Other judgment methods can also be used, which will not be repeated here.

[0061] In this embodiment, the IP address of the interactive product and the power dispatching edge cluster can be used to verify whether the sending is correct. The matching judgment of the second summary and the first summary can be used to determine whether the sending of the interactive product is complete and correct, thereby improving the reliability of the transmission process. The public key and the private key are set in the form of an inverse matrix, which increases the difficulty of decryption and improves the security and reliability of the product transmission process.

[0062] In addition, the scheduling cloud uses public key encryption to encrypt interactive products to form encrypted data, including:

[0063] The scheduling cloud divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, i.e., encrypted data.

[0064] The dispatch cloud uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first summaries; the calculation method of the first summary is as above and will not be repeated here.

[0065] The scheduling cloud extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the public key to obtain a first sequence matrix.

[0066] The scheduling cloud encapsulates each encrypted data block with the first summary corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames to the power scheduling edge cluster in sequence.

[0067] After receiving the first order matrix and n transmission frames, the electric power dispatching edge cluster first uses the private key to decrypt the n transmission frames to obtain n decrypted data blocks.

[0068] The electric power dispatching edge cluster then uses a hash algorithm to perform operations on the n decrypted data blocks and IP addresses respectively to obtain n second digests; the calculation method of the second digest is as above and will not be repeated here.

[0069] The power dispatching edge cluster extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the private key to obtain a second sequence matrix.

[0070] When the power dispatching edge cluster determines whether each second summary matches the first summary, it also determines whether the second sequence matrix is ​​consistent with the first sequence matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

[0071] This embodiment transmits the product in blocks, and sets the sequence matrix verification based on the public key and the private key. When the sequence matrix verification passes, it means that the order of receiving the data blocks is correct. Combined with the summary verification, the security of the product transmission process is controlled, which reduces the requirements of the transmission on the network and ensures the integrity and reliability of the transmission process.

[0072] Embodiment three:

[0073] like Figure 2 As shown, based on the same inventive concept as that of the first embodiment, this embodiment provides a security control system for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, including a dispatching cloud and a power dispatching edge cluster;

[0074] The dispatching cloud includes a public key storage module, a data encryption module, a first summary calculation module, and a first communication module; the power dispatching edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second summary calculation module, and a judgment execution module;

[0075] The public key storage module is used to receive the public key sent by the power dispatch edge cluster;

[0076] The data encryption module encrypts the interactive product using a public key to form encrypted data;

[0077] The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary;

[0078] The first communication module is connected with the second communication module to realize data interaction between the dispatching cloud and the power dispatching edge cluster;

[0079] The communication module is used for data interaction between the scheduling cloud and the power scheduling edge cluster; including the scheduling cloud encapsulating the first summary and the encrypted data and sending them to the power scheduling edge cluster.

[0080] The secret key generation module is used to generate public and private keys, send the public key to the scheduling cloud, and save the private key corresponding to the public key;

[0081] The data decryption module is used to decrypt the encrypted data using the private key after receiving the first summary and the encrypted data to obtain the decrypted interactive product;

[0082] The second summary calculation module uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second summary;

[0083] The judgment execution module judges whether the second digest matches the first digest, and when it is judged that the second digest matches the first digest, the decrypted interactive product is executed.

[0084] In this embodiment, the public key and the private key are n-order matrices, and are inverse matrices of each other.

[0085] The principle of the first summary calculation module is: the IP address of the interactive product and the power dispatch edge cluster is calculated using a hash algorithm to obtain the first m-bit hash value, the starting bit is designated as the a-th bit, and the b-bit is used as the interval width, and n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0086] At the same time, the dispatching cloud also sends the array [a, b] consisting of the start bit and the interval width to the power dispatching edge cluster through the first communication module.

[0087] The principle of the second summary calculation module is: the decrypted interactive product and its own IP address are calculated using a hash algorithm to obtain the second m-bit hash value, and the starting bit is determined as the a-th bit and the b-bit is used as the interval width according to the array [a, b], and n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operation with the private key to obtain the second summary.

[0088] The principle of the judgment execution module is: calculate the Euclidean distance between the second summary and the first summary, and when the Euclidean distance is less than a set threshold, judge that the second summary matches the first summary, otherwise it does not match.

[0089] In addition, another application mode of the system of the present invention is:

[0090] The data encryption module divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, namely encrypted data.

[0091] The first summary calculation module uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first summaries; the calculation method of the first summary is as above and will not be repeated here. The dispatch cloud also includes a first sequence calculation module, which extracts the first digit of the n first summaries to form a first n*1 matrix, and calculates the first n*1 matrix with the public key to obtain a first sequence matrix.

[0092] The first communication module encapsulates each encrypted data block with a first summary corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames to the power dispatching edge cluster in sequence.

[0093] After receiving the first sequence matrix and n transmission frames, the data decryption module first uses the private key to decrypt the n transmission frames to obtain n decrypted data blocks.

[0094] The second digest calculation module then uses a hash algorithm to calculate the n decrypted data blocks and the IP address to obtain n second digests. The calculation method of the second digest is as described above and will not be repeated here.

[0095] The power dispatching edge cluster also includes a second sequential calculation module, which extracts the first digits of n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with a private key to obtain a second sequential matrix.

[0096] When the judgment execution module judges that each second digest matches the first digest, it also judges whether the second sequence matrix is ​​consistent with the first sequence matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

[0097] Embodiment three:

[0098] Based on the same inventive concept as that of Embodiment 1, this embodiment provides a computer-readable storage medium, which includes a stored program, wherein a security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product executed by a device where the computer-readable storage medium is located is controlled when the program is running.

[0099] Embodiment 4:

[0100] Based on the same inventive concept as that of the first embodiment, this embodiment provides a processor for running a program, wherein a security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is executed when the program is running.

[0101] Those of ordinary skill in the art will appreciate that the modules of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition of each example has been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0102] In the embodiments provided by the present invention, it should be understood that the division of modules is only a logical function division, and there may be other division methods in actual implementation, for example, multiple modules can be combined into one module, one module can be split into multiple modules, or some features can be ignored, etc.

[0103] In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module. The above integrated modules may be implemented in the form of hardware or in the form of software functional modules.

[0104] If the integrated module is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-0nlyMemory), random access memory (RAM, RandomAccessMemory), mobile hard disk, magnetic disk or optical disk, etc., which can store program code.

[0105] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and specification of the present invention.

Claims

1. A security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, characterized in that: The following steps are involved: The power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key; The scheduling cloud encrypts the interactive product with a public key to form encrypted data; The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain a first summary; The dispatch cloud encapsulates the first summary and the encrypted data and sends them to the power dispatch edge cluster; After receiving the first summary and encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive product; The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second summary; The power dispatching edge cluster determines whether the second digest matches the first digest, and when it is determined that the second digest matches the first digest, the decrypted interactive product is run.

2. According to claim 1, a method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is characterized in that: The public key and the private key are n-order matrices, and are inverse matrices of each other.

3. According to claim 2, a method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is characterized in that: The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster, and obtains the first summary, which specifically includes: The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m-bit hash value, specify the starting bit as the a-th bit, use b bits as the interval width, and extract n bits at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

4. According to claim 3, a method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is characterized in that: The scheduling cloud encapsulates the first summary and the encrypted data and sends them to the power scheduling edge cluster, further comprising: The dispatch cloud also sends the array [a, b] consisting of the start bit and interval width to the power dispatch edge cluster.

5. According to claim 4, a method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is characterized in that: The power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address, and the second summary obtained also includes: The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain the second m-bit hash value. According to the array [a, b], the starting bit is the a-th bit, and the b-bit is used as the interval width. The n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operation with the private key to obtain the second summary.

6. A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 2, characterized in that: The scheduling cloud uses a public key to encrypt the interactive product to form encrypted data, which specifically includes: The scheduling cloud divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, i.e., encrypted data; The dispatch cloud uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first summaries; The scheduling cloud extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the public key to obtain a first sequence matrix; The scheduling cloud encapsulates each encrypted data block with the first summary corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames to the power scheduling edge cluster in sequence.

7. A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 6, characterized in that: After receiving the first sequence matrix and n transmission frames, the power dispatching edge cluster first uses a private key to decrypt the n transmission frames to obtain n decrypted data blocks; The power dispatching edge cluster then uses a hash algorithm to calculate the n decrypted data blocks and IP addresses respectively to obtain n second summaries; The power dispatching edge cluster extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the private key to obtain a second sequence matrix; The power dispatching edge cluster determines whether the second order matrix is ​​consistent with the first order matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

8. A security control system for the interaction between an electric power dispatching edge cluster and a dispatching cloud-edge collaborative product, characterized in that: The method described in any one of claims 1 to 7 is applied, comprising a scheduling cloud and a power scheduling edge cluster; the scheduling cloud comprises a public key storage module, a data encryption module, a first summary calculation module, and a first communication module; The power dispatching edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second summary calculation module, and a judgment execution module; The public key storage module is used to receive the public key sent by the power dispatch edge cluster; The data encryption module encrypts the interactive product using a public key to form encrypted data; The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary; The first communication module is connected with the second communication module to realize data interaction between the dispatching cloud and the power dispatching edge cluster; Communication module, used for data interaction between the dispatching cloud and the power dispatching edge cluster; The secret key generation module is used to generate a public key and a private key, and send the public key to the scheduling cloud, and save the private key corresponding to the public key; The data decryption module is used to decrypt the encrypted data using a private key after receiving the first summary and the encrypted data to obtain a decrypted interactive product; The second summary calculation module uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second summary; The judgment execution module judges whether the second digest matches the first digest, and when it is judged that the second digest matches the first digest, the decrypted interactive product is executed.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein, when the program is running, the device where the computer-readable storage medium is located is controlled to execute the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product as described in any one of claims 1 to 7.

10. A processor, characterized in that: The processor is used to run a program, wherein when the program is running, the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product described in any one of claims 1 to 7 is executed.

Images