A security control method and system for interaction between a power dispatch edge cluster and a dispatch cloud edge, and related equipment

Abstract

The present application relates to the technical field of power dispatching system cloud edge coordination, and particularly relates to a kind of power dispatching edge cluster and dispatching cloud cloud edge coordination product interaction security control method, system and related equipment.It includes: power dispatching edge cluster sends public key to dispatching cloud and saves private key;Dispatching cloud uses public key to encrypt interactive product after forming encrypted data;Interactive product and the IP address of power dispatching edge cluster are operated using hash algorithm, and first digest is obtained;First digest and encrypted data are encapsulated and sent to power dispatching edge cluster;After power dispatching edge cluster receives first digest and encrypted data, encrypted data is decrypted using private key, and decrypted interactive product is obtained;Decrypted interactive product and the IP address of itself are operated using hash algorithm, and second digest is obtained;When judging that second digest matches first digest, then run decrypted interactive product, improve the security and reliability of product transmission process.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of power dispatching system cloud edge collaboration, and particularly relates to a security control method and system for interaction between a power dispatching edge cluster and a dispatching cloud edge collaboration product, and related equipment. BACKGROUND

[0002] The collaboration content between the power dispatching edge cluster and the dispatching cloud cloud management center includes base interaction, product interaction, application interaction and monitoring interaction. The cloud management center includes registration management, base service, cloud product warehouse, application interaction service and monitoring center. The cloud product warehouse shelves standard products, and the base, components and applications and other products developed according to the dispatching cloud edge computing cluster product development standard can be shelved in the cloud product warehouse.

[0003] The power dispatching edge cluster has the functions of base Agent, product interaction Agent, application interaction Agent and monitoring Agent, and serves as a unified outlet for interaction with the cloud management center, so as to realize base interaction, product interaction, application interaction and monitoring interaction between the edge cluster and the dispatching cloud cloud management center. The product interaction Agent is connected with the cloud product warehouse, and is responsible for the transmission of cloud edge products.

[0004] Artifacts are generally encrypted using encryption algorithms to ensure security and reliability during cloud-edge product interaction. For example, Chinese Public Invention Application CN117591164A discloses a one-stop application software configuration collaboration and delivery method, which describes: Artifact generation; Artifacts in the R&D subsystem are generated by automated pipeline compilation, construction, and upload, with a version number generated based on the creation timestamp. For each artifact generated, a unique digest value is calculated using the SM3 encryption algorithm. The digest value is used by the user to determine whether the artifact has changed; identical artifacts have the same SM3 digest value; and the generated artifacts are divided into artifact repositories based on application software, associated projects, or work order numbers. However, it does not disclose security controls for the artifact transmission process. Chinese Public Invention Application CN115413343A discloses a method and system for transmitting software artifacts from a source network to a target network, which describes: For example, a platform provider can implement end-to-end encryption of software artifacts using the platform provider's public key before downloading them from the cloud (on the source network), and decrypt the software artifacts using the associated private key before installation on the target network, such as on an edge device. The aforementioned key distribution describes the requirements for signing software artifacts in the source network QN and the integrity check of signed software artifacts in the target network ZN. For software artifact encryption, the key distribution for asymmetric encryption is the opposite. In another embodiment, encrypted transmission can be achieved through symmetric encryption. The prior art only mentions the ability to perform integrity checks on encrypted software artifacts, but does not provide information on how to encrypt and control the security of software artifacts.

[0005] In view of this, a security control method, system and related equipment for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product are needed. Summary of the Invention

[0006] To address the problems in the existing technology, the present invention provides a method, system, and related equipment for secure control of the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product. The specific technical solution is as follows:

[0007] A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product includes the following steps:

[0008] The power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key;

[0009] The scheduling cloud encrypts the interactive artifacts using the public key to form encrypted data;

[0010] The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first summary;

[0011] The dispatch cloud encapsulates the first summary and the encrypted data and sends them to the power dispatch edge cluster;

[0012] After receiving the first summary and encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive artifact;

[0013] The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second summary;

[0014] The power dispatching edge cluster determines whether the second digest matches the first digest, and when it is determined that the second digest matches the first digest, runs the decrypted interactive product.

[0015] Preferably, the public key and the private key are n-order matrices, and are inverse matrices of each other.

[0016] Preferably, the scheduling cloud uses a hash algorithm to calculate the IP address of the interactive product and the power scheduling edge cluster to obtain the first summary, which specifically includes:

[0017] The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m bits of the hash value, designate the starting bit as the ath bit, use b bits as the interval width, and extract n bits at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0018] Preferably, the scheduling cloud encapsulates the first digest and the encrypted data and sends them to the power scheduling edge cluster further comprising:

[0019] The scheduling cloud also sends the array [a, b] consisting of the start bit and interval width to the power scheduling edge cluster.

[0020] Preferably, the power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second digest, which further includes:

[0021] The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain the second m-bit hash value. According to the array [a, b], the starting bit is determined as the a-th bit and the b-bit is used as the interval width. The n 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operations with the private key to obtain the second summary.

[0022] Preferably, the scheduling cloud encrypts the interactive product with the public key to form encrypted data, specifically including: the scheduling cloud divides the interactive product into n data blocks, each data block is encrypted with the public key to obtain n encrypted data blocks, i.e., encrypted data;

[0023] The scheduling cloud performs operation on each data block and the IP address of the power scheduling edge cluster by using a hash algorithm to obtain n first digests;

[0024] The scheduling cloud extracts the first n*1 matrix from the first n first digests, and performs operation on the first n*1 matrix and the public key to obtain a first order matrix;

[0025] The scheduling cloud encapsulates each encrypted data block and the corresponding first digest to form n transmission frames, and sequentially sends the first order matrix and the n transmission frames to the power scheduling edge cluster.

[0026] Preferably, after the power scheduling edge cluster receives the first order matrix and the n transmission frames, the power scheduling edge cluster first decrypts the n transmission frames with the private key to obtain n decrypted data blocks;

[0027] The power scheduling edge cluster performs operation on the n decrypted data blocks and the IP address by using a hash algorithm to obtain n second digests;

[0028] The power scheduling edge cluster extracts the first n*1 matrix from the first n first digests, and performs operation on the first n*1 matrix and the private key to obtain a second order matrix;

[0029] The power scheduling edge cluster judges whether the second order matrix is consistent with the first order matrix, if yes, the n decrypted data blocks are assembled in order to obtain the decrypted interactive product, and the decrypted interactive product is run.

[0030] A security control system for collaborative interaction of an interactive product between a power scheduling edge cluster and a scheduling cloud, the method is applied, including the scheduling cloud and the power scheduling edge cluster;

[0031] The scheduling cloud includes a public key storage module, a data encryption module, a first digest calculation module, and a first communication module;

[0032] The power scheduling edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second digest calculation module, and a judgment execution module;

[0033] The public key storage module is configured to receive the public key sent by the power scheduling edge cluster;

[0034] The data encryption module encrypts the interactive product with the public key to form encrypted data;

[0035] The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary;

[0036] The first communication module is connected to the second communication module to realize data interaction between the scheduling cloud and the power scheduling edge cluster;

[0037] Communication module, used for data exchange between the scheduling cloud and the power scheduling edge cluster;

[0038] The secret key generation module is used to generate a public key and a private key, and send the public key to the scheduling cloud, and save the private key corresponding to the public key;

[0039] The data decryption module is used to decrypt the encrypted data using the private key after receiving the first digest and the encrypted data to obtain the decrypted interactive artifact;

[0040] The second digest calculation module performs a hash operation on the decrypted interactive artifact and its own IP address to obtain a second digest;

[0041] The judgment execution module judges whether the second digest matches the first digest, and runs the decrypted interactive product when it is judged that the second digest matches the first digest.

[0042] A computer-readable storage medium includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product.

[0043] A processor is used to run a program, wherein when the program is running, the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product is executed.

[0044] Compared with the prior art, the beneficial effects of the present invention are as follows: the present invention can verify whether the sending is correct through the IP address of the interactive product and the power dispatching edge cluster, and through the matching judgment of the second digest and the first digest, it can be judged that the sending of the interactive product has not been tampered with during transmission, and verify whether it is complete and correct, thereby improving the reliability of the transmission process. The public key and private key are set in the form of an inverse matrix, which increases the difficulty of decryption and improves the security and reliability of the product transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly describes the drawings required for the specific embodiments or the description of the prior art. Similar elements or parts are generally identified by similar reference numerals throughout the drawings. Elements or parts in the drawings are not necessarily drawn to scale.

[0046] Figure 1 Flow chart of the method of the present invention.

[0047] Figure 2 This is a system principle diagram of the present invention. DETAILED DESCRIPTION

[0048] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0049] It will be understood that when used in this specification and the appended claims, the terms “comprises” and “comprising” indicate the presence of described features, integers, steps, operations, elements and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0050] It should also be understood that the terms used in the present specification are only for the purpose of describing particular embodiments and are not intended to limit the present invention. As used in the present specification and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

[0051] It should be further understood that the term "and / or" used in the present description and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0052] Example 1:

[0053] like Figure 1 As shown, this embodiment provides a security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, including the following steps:

[0054] In step S1, the power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key; the public key and the private key are n-order matrices and are inverse matrices of each other. The meaning of the inverse matrix is: suppose A is an n-order matrix. If there exists another n-order matrix B such that AB=BA=E, then the square matrix A is said to be invertible, and the square matrix B is said to be the inverse matrix of A, then A=B -1 , B=A -1 .

[0055] In step S2, the scheduling cloud encrypts the interactive product using a public key to form encrypted data.

[0056] Step S3: The scheduling cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain a first summary. This includes: the scheduling cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m-bit hash value, specifying the starting bit as the a-th bit, using b bits as the interval width, and extracting n equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0057] For example, in this embodiment, the hash algorithm uses the SHA256 algorithm, whose hash value is 256 bits, that is, m = 256. When a = 4, b = 5, and n = 3, the 10th, 16th, 22nd, 28th, 34th, 40th, 46th, 52nd, and 58th bits of the hash value are extracted, a total of 9 bits, to form a 3*3 matrix. Similarly, the values ​​of a, b, and n can be set, but they match the number of bits of the hash value obtained by the corresponding hash algorithm.

[0058] In step S4, the dispatch cloud encapsulates the first digest and encrypted data and sends them to the power dispatch edge cluster. Simultaneously, the dispatch cloud also sends the array [a, b] consisting of the start bit and the interval width to the power dispatch edge cluster. In step S5, after receiving the first digest and encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive artifact.

[0059] Step S6: The power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second digest. This includes: the power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain a second m-bit hash value, and according to the array [a, b], the starting bit is the ath bit, and the b bits are used as the interval width, and n equal intervals are extracted. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operations with the private key to obtain the second summary.

[0060] In step S7, the power dispatch edge cluster determines whether the second digest matches the first digest. If so, the decrypted interactive artifact is executed. In this embodiment, the Euclidean distance between the second digest and the first digest can be calculated. If the Euclidean distance is less than a set threshold, the second digest is determined to match the first digest; otherwise, they do not match. Other determination methods can also be used and are not detailed here.

[0061] In this embodiment, the IP address of the interactive product and the power dispatch edge cluster can be used to check whether the sending is correct, and the matching of the second digest and the first digest can be used to determine whether the sending of the interactive product is complete and correct, thereby improving the reliability of the transmission process. The public key and the private key are set in the form of an inverse matrix, thereby increasing the difficulty of decryption and improving the security and reliability of the product transmission process.

[0062] In addition, the dispatch cloud encrypts the interactive product using a public key to form encrypted data, which specifically includes:

[0063] The dispatch cloud divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, i.e., encrypted data.

[0064] The dispatch cloud performs a hash algorithm operation on each data block and the IP address of the power dispatch edge cluster to obtain n first digests; the calculation method of the first digest is as described above and will not be repeated here.

[0065] The dispatch cloud extracts the first n*1 matrix from the first n digests, and performs an operation on the first n*1 matrix and the public key to obtain a first order matrix.

[0066] The dispatch cloud encapsulates each encrypted data block and the corresponding first digest to form n transmission frames, and sequentially sends the first order matrix and the n transmission frames to the power dispatch edge cluster.

[0067] After receiving the first order matrix and the n transmission frames, the power dispatch edge cluster first decrypts the n transmission frames using a private key to obtain n decrypted data blocks.

[0068] The power dispatch edge cluster then performs a hash algorithm operation on the n decrypted data blocks and the IP address to obtain n second digests; the calculation method of the second digest is as described above and will not be repeated here.

[0069] The power dispatch edge cluster extracts the first n*1 matrix from the first n digests, and performs an operation on the first n*1 matrix and the private key to obtain a second order matrix.

[0070] When the power dispatch edge cluster determines that each second digest matches the first digest, it also determines whether the second order matrix is consistent with the first order matrix. If they are consistent, the n decrypted data blocks are assembled in order to obtain the decrypted interactive product, which is then run.

[0071] This embodiment transmits the product in blocks and sets the sequence matrix check based on the public key and private key. When the sequence matrix check passes, it means that the order of receiving the data blocks is correct. Combined with the summary check, the product transmission process is controlled to ensure both security and reduce the requirements of the transmission on the network, ensuring the integrity and reliability of the transmission process.

[0072] Example 3:

[0073] like Figure 2 As shown, based on the same inventive concept as embodiment 1, this embodiment provides a security control system for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, including a dispatching cloud and a power dispatching edge cluster;

[0074] The dispatching cloud includes a public key storage module, a data encryption module, a first summary calculation module, and a first communication module; the power dispatching edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second summary calculation module, and a judgment execution module;

[0075] The public key storage module is used to receive the public key sent by the power dispatch edge cluster;

[0076] The data encryption module encrypts the interactive artifact using a public key to form encrypted data;

[0077] The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary;

[0078] The first communication module is connected to the second communication module to realize data interaction between the dispatching cloud and the power dispatching edge cluster;

[0079] The communication module is used for data interaction between the scheduling cloud and the power scheduling edge cluster; including the scheduling cloud encapsulating the first summary and encrypted data and sending them to the power scheduling edge cluster.

[0080] The key generation module is used to generate public and private keys, send the public key to the scheduling cloud, and save the private key corresponding to the public key;

[0081] The data decryption module is used to decrypt the encrypted data using the private key after receiving the first summary and the encrypted data to obtain the decrypted interactive product;

[0082] The second digest calculation module uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second digest;

[0083] The judgment execution module judges whether the second digest matches the first digest, and when it is judged that the second digest matches the first digest, the decrypted interactive product is executed.

[0084] In this embodiment, the public key and the private key are n-order matrices, and are inverse matrices of each other.

[0085] The principle of the first summary calculation module is: the IP address of the interactive product and the power dispatch edge cluster is calculated using a hash algorithm to obtain the first m-bit hash value, the starting bit is designated as the a-th bit, the b-bit is used as the interval width, and n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

[0086] At the same time, the scheduling cloud also sends the array [a, b] consisting of the start bit and the interval width to the power scheduling edge cluster through the first communication module.

[0087] The principle of the second summary calculation module is: the decrypted interactive product and its own IP address are calculated using a hash algorithm to obtain the second m-bit hash value, and the starting bit is determined as the a-th bit and the b-bit is used as the interval width according to the array [a, b], and n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operations with the private key to obtain the second summary.

[0088] The principle of the judgment execution module is: calculate the Euclidean distance between the second digest and the first digest, and when the Euclidean distance is less than a set threshold, determine that the second digest matches the first digest, otherwise it does not match.

[0089] In addition, another application mode of the system of the present invention is:

[0090] The data encryption module divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, namely encrypted data.

[0091] The first digest calculation module uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first digests. The calculation method of the first digest is as described above and will not be repeated here. The dispatch cloud also includes a first sequence calculation module, which extracts the first digit of the n first digests to form a first n*1 matrix. This first n*1 matrix is ​​then calculated with the public key to obtain a first sequence matrix.

[0092] The first communication module encapsulates each encrypted data block with a first digest corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames in sequence to the power dispatching edge cluster.

[0093] After receiving the first sequence matrix and n transmission frames, the data decryption module first uses the private key to decrypt the n transmission frames to obtain n decrypted data blocks.

[0094] The second digest calculation module then uses a hash algorithm to calculate the n decrypted data blocks and the IP address to obtain n second digests. The calculation method of the second digest is as described above and will not be repeated here.

[0095] The power dispatching edge cluster also includes a second sequential calculation module, which extracts the first digits of n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the private key to obtain a second sequential matrix.

[0096] When the judgment execution module determines that each second digest matches the first digest, it also determines whether the second sequence matrix is ​​consistent with the first sequence matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

[0097] Example 3:

[0098] Based on the same inventive concept as Example 1, this embodiment provides a computer-readable storage medium, which includes a stored program, wherein a security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product executed by the device where the computer-readable storage medium is located is controlled when the program is running.

[0099] Example 4:

[0100] Based on the same inventive concept as that of Example 1, this embodiment provides a processor for running a program, wherein a security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product is executed when the program is running.

[0101] Those skilled in the art will appreciate that the modules of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition of each example has been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0102] In the embodiments provided by the present invention, it should be understood that the division of modules is merely a logical function division, and there may be other division methods in actual implementation, for example, multiple modules can be combined into one module, one module can be split into multiple modules, or some features can be ignored, etc.

[0103] In addition, the functional modules in various embodiments of the present invention may be integrated into a single processing module, or each module may exist physically separately, or two or more modules may be integrated into a single module. The aforementioned integrated modules may be implemented in the form of hardware or software functional modules.

[0104] If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the various embodiments of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-0nly Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk, etc., which can store program code.

[0105] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or make equivalent replacements for some or all of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and description of the present invention.

Claims

1. A security control method for the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product, characterized in that: The following steps are involved: The power dispatch edge cluster sends its public key to the dispatch cloud and saves the private key corresponding to the public key; The scheduling cloud encrypts the interactive artifacts using the public key to form encrypted data; The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first summary; The dispatch cloud encapsulates the first summary and the encrypted data and sends them to the power dispatch edge cluster; After receiving the first summary and encrypted data, the power dispatch edge cluster decrypts the encrypted data using the private key to obtain the decrypted interactive artifact; The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second summary; The power dispatching edge cluster determines whether the second digest matches the first digest, and when it is determined that the second digest matches the first digest, runs the decrypted interactive product.

2. A security control method for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 1, characterized in that: The public key and the private key are n-order matrices, and are inverse matrices of each other.

3. A security control method for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 2, characterized in that: The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster, and the first summary obtained specifically includes: The dispatch cloud uses a hash algorithm to calculate the IP address of the interactive product and the power dispatch edge cluster to obtain the first m bits of the hash value, designate the starting bit as the ath bit, use b bits as the interval width, and extract n bits at equal intervals. 2 number, and n 2 The number of them forms the first n-order summary matrix, and then performs matrix operation with the public key to obtain the first summary, where m>n 2 .

4. A security control method for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 3, characterized in that: The scheduling cloud encapsulates the first summary and the encrypted data and sends them to the power scheduling edge cluster, further comprising: The scheduling cloud also sends the array [a, b] consisting of the start bit and interval width to the power scheduling edge cluster.

5. A security control method for interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 4, characterized in that: The power dispatching edge cluster uses a hash algorithm to calculate the decrypted interactive artifact and its own IP address to obtain a second digest that also includes: The power dispatch edge cluster uses a hash algorithm to calculate the decrypted interactive product and its own IP address to obtain the second m-bit hash value. According to the array [a, b], the starting bit is the a-th bit and the b-bit is the interval width. The n bits are extracted at equal intervals. 2 number, and n 2 The number of them forms an n-order summary matrix, and then performs matrix operations with the private key to obtain the second summary.

6. A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 2, characterized in that: The scheduling cloud encrypts the interactive product using a public key to generate encrypted data, specifically including: The scheduling cloud divides the interactive product into n data blocks, each of which is encrypted using a public key to obtain n encrypted data blocks, i.e., encrypted data. The dispatch cloud uses a hash algorithm to calculate each data block and the IP address of the power dispatch edge cluster to obtain n first summaries; The scheduling cloud extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the public key to obtain a first order matrix; The scheduling cloud encapsulates each encrypted data block with the first summary corresponding to the data block to form n transmission frames, and sends the first sequence matrix and the n transmission frames to the power scheduling edge cluster in sequence.

7. A method for securely controlling the interaction between a power dispatching edge cluster and a dispatching cloud-edge collaborative product according to claim 6, characterized in that: After receiving the first sequence matrix and n transmission frames, the power dispatching edge cluster first decrypts the n transmission frames using a private key to obtain n decrypted data blocks; The power dispatch edge cluster then uses a hash algorithm to calculate the n decrypted data blocks and IP addresses to obtain n second digests; The power dispatching edge cluster extracts the first digits of the n first summaries to form a first n*1 matrix, and operates the first n*1 matrix with the private key to obtain a second sequence matrix; The power dispatching edge cluster determines whether the second order matrix is ​​consistent with the first order matrix. If they are consistent, n decrypted data blocks are assembled in sequence to obtain the decrypted interactive product and run it.

8. A security control system for the interaction between an electric power dispatching edge cluster and a dispatching cloud-edge collaborative product, characterized in that: The method according to any one of claims 1 to 7 is applied, comprising a scheduling cloud and a power scheduling edge cluster; the scheduling cloud comprises a public key storage module, a data encryption module, a first summary calculation module, and a first communication module; The power dispatching edge cluster includes a second communication module, a secret key generation module, a data decryption module, a second summary calculation module, and a judgment execution module; The public key storage module is used to receive the public key sent by the power dispatch edge cluster; The data encryption module encrypts the interactive product using a public key to generate encrypted data; The first summary calculation module uses a hash algorithm to calculate the interactive product and the IP address of the power dispatch edge cluster to obtain a first summary; The first communication module is connected to the second communication module to realize data interaction between the scheduling cloud and the power scheduling edge cluster; Communication module, used for data exchange between the scheduling cloud and the power scheduling edge cluster; The secret key generation module is used to generate a public key and a private key, and send the public key to the scheduling cloud, and save the private key corresponding to the public key; The data decryption module is used to decrypt the encrypted data using the private key after receiving the first digest and the encrypted data to obtain the decrypted interactive artifact; The second digest calculation module performs a hash operation on the decrypted interactive artifact and its own IP address to obtain a second digest; The judgment execution module judges whether the second digest matches the first digest, and runs the decrypted interactive product when it is judged that the second digest matches the first digest.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a stored program, wherein, when the program is running, the device where the computer-readable storage medium is located is controlled to execute the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product as described in any one of claims 1 to 7.

10. A processor, characterized in that: The processor is used to run a program, wherein, when the program is running, it executes the security control method for the interaction between the power dispatching edge cluster and the dispatching cloud-edge collaborative product described in any one of claims 1 to 7.

Images