Data security acquisition method and device of virtual power plant, equipment and storage medium

Abstract

The invention discloses a data security acquisition method and device for a virtual power plant, equipment and a storage medium. The method comprises the steps that random state information corresponding to target data is acquired from an acquisition terminal, the target data is operation data of a virtual power plant, and the random state information is obtained after the acquisition terminal performs random sequence generation on a ciphertext obtained by encrypting the target data and indicates that the ciphertext is sent to a cloud end by the acquisition terminal; the position information is stored in the cloud; determining a target storage position of the ciphertext in the cloud based on the random state information, and obtaining the ciphertext from the target storage position; and determining a decryption key corresponding to the ciphertext, and decrypting the ciphertext based on the decryption key to obtain the target data. According to the invention, the security in the process of acquiring the target data can be improved, and leakage and illegal acquisition of the data are effectively prevented.

Description

Technical Field

[0001] The present invention relates to the technical field of virtual power plants, and in particular to a method, device, equipment and storage medium for securely acquiring data of a virtual power plant. Background Art

[0002] As a new type of distributed power generation resource aggregation and management system, virtual power plants are gradually becoming an important part of the power system.

[0003] At present, the data security assurance system is mainly used in virtual power plants to ensure the security of collected data. For example, the data security assurance system will encrypt the data and upload it to cloud storage. When the user needs to obtain the encrypted data stored in the cloud, the data will be decrypted and sent to the user.

[0004] However, when users need to obtain collected data from the cloud, the security measures of the system lack protection against illegal theft of data during transmission. Therefore, it is urgent to propose a new method to solve the above problem. Summary of the invention

[0005] The present invention provides a method, device, equipment and storage medium for securely acquiring data of a virtual power plant, which improves the security in the process of acquiring target data and effectively prevents data leakage and illegal acquisition.

[0006] According to one aspect of the present invention, a method for securely acquiring data of a virtual power plant is provided, the method comprising:

[0007] Obtain random state information corresponding to the target data from the acquisition terminal, wherein the target data is the operation data of the virtual power plant, and the random state information is the location information stored in the cloud after the acquisition terminal generates a random sequence for the ciphertext obtained after encrypting the target data and the ciphertext is sent from the acquisition terminal to the cloud;

[0008] Determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location;

[0009] Determine the decryption key corresponding to the ciphertext, and decrypt the ciphertext based on the decryption key to obtain the target data.

[0010] The data security acquisition method of the virtual power plant provided by the embodiment of the present invention obtains the random state information corresponding to the target data from the acquisition terminal; determines the target storage location of the ciphertext in the cloud based on the random state information, and obtains the ciphertext from the target storage location; determines the decryption key corresponding to the ciphertext, and decrypts the ciphertext based on the decryption key to obtain the target data. In the above technical scheme, on the one hand, by obtaining the random state information corresponding to the target data from the acquisition terminal, a basis is provided for determining the storage location of the ciphertext encrypted by the target data in the cloud according to the random state information. On the other hand, the target storage location of the ciphertext in the cloud is determined based on the random state information, which realizes the use of random state information with randomness and diversity to determine the storage location of the ciphertext in the cloud, and improves the confidentiality and security of the storage location of the ciphertext of the target data in the cloud. And, after determining the target storage location, the ciphertext is obtained from the target storage location using the random state information, that is, the ciphertext needs to be decrypted when it is obtained from the target storage location, which solves the problem that the data may be illegally stolen during the transmission process, and improves the security of obtaining the target data from the storage location in the cloud. Finally, based on the access permission to the target data, the decryption key corresponding to the ciphertext is determined, and the ciphertext is decrypted based on the decryption key to obtain the target data. This ensures that the decryption key can be determined only when it is determined that the access permission to the target data is available, and the ciphertext can be decrypted based on the decryption key. This improves the security of the process of obtaining the target data and effectively prevents data leakage and illegal acquisition.

[0011] According to another aspect of the present invention, a data security acquisition device for a virtual power plant is provided, the device comprising:

[0012] An acquisition module is used to acquire random state information corresponding to target data from a collection terminal, wherein the target data is the operation data of a virtual power plant, and the random state information is the location information stored in the cloud after the collection terminal generates a random sequence for the ciphertext obtained after encrypting the target data and the ciphertext is sent from the collection terminal to the cloud;

[0013] A determination module, used to determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location;

[0014] The decryption module is used to determine the decryption key corresponding to the ciphertext, and decrypt the ciphertext based on the decryption key to obtain the target data.

[0015] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to the at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the data security acquisition method of the virtual power plant described in any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for securely acquiring data of a virtual power plant described in any embodiment of the present invention when executed.

[0020] According to another aspect of the present invention, a computer program product is provided, including a computer program, which, when executed by a processor, implements the method for securely acquiring data of a virtual power plant according to any embodiment of the present invention.

[0021] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0023] Figure 1 A schematic diagram of a flow chart of a method for securely acquiring data of a virtual power plant provided by an embodiment of the present invention;

[0024] Figure 2 Another schematic diagram of a flow chart of a method for securely acquiring data of a virtual power plant provided by an embodiment of the present invention;

[0025] Figure 3 A schematic diagram of the structure of a data security acquisition device for a virtual power plant provided by an embodiment of the present invention;

[0026] Figure 4 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "target", "backup", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] Figure 1 A flow chart of a method for securely acquiring data of a virtual power plant provided in an embodiment of the present invention is provided. This embodiment can be applied to ensure the transmission security of the operating data when the operating data of the virtual power plant is transmitted between different devices. The method can be executed by a data security acquisition device of a virtual power plant. The data security acquisition device of the virtual power plant can be implemented in the form of hardware and / or software. The data security acquisition device of the virtual power plant can be configured in an electronic device. In this embodiment, the electronic device can be a computer or server used for virtual power plant management.

[0030] like Figure 1 As shown, the method includes:

[0031] S101. Obtain random state information corresponding to target data from a collection terminal.

[0032] Among them, the target data is the operation data of the virtual power plant. In this embodiment, the target data can be the data currently required by the user, and the target data can be obtained according to the data acquisition request sent by the user, or the target data can also be the data automatically acquired by the data security acquisition device of the virtual power plant, and the target data can be periodically acquired from the acquisition terminal and saved as the operation log of the virtual power plant. The random state information is the location information stored in the cloud after the acquisition terminal generates a random sequence for the ciphertext obtained after encrypting the target data, indicating that the ciphertext is sent from the acquisition terminal to the cloud.

[0033] Exemplarily, in this embodiment, the acquisition terminal is a terminal device for managing the acquisition device, which is used to process the operation data of the virtual power plant collected by the acquisition device and send it to the cloud, so that the cloud stores all the received operation data of the virtual power plant. Among them, the acquisition device can be a voltage sensor, a current sensor, a temperature sensor, a humidity sensor or other power acquisition and monitoring equipment, which is used to collect the operation data of the virtual power plant such as the power generation, load conditions and equipment status of the virtual power plant. The processing of the operation data of the virtual power plant collected by the acquisition terminal may include data integration, data cleaning, abnormal value processing and other data preprocessing, data encryption and random sequence generation for the encrypted data. In this embodiment, the cloud is a remote server in the virtual power plant that is connected to the acquisition terminal and the data security acquisition device of the virtual power plant through the Internet, and is used to store all the operation data of the virtual power plant processed by the acquisition terminal.

[0034] The virtual power plant achieves the management of the power market and grid operation as a special power plant by coordinating and optimizing distributed energy sources such as distributed power sources, energy storage systems, controllable loads, and electric vehicles. This embodiment can be applied to the management process of the virtual power plant.

[0035] Specifically, after the acquisition terminal obtains the operation data of the virtual power plant collected by the acquisition device in real time, the acquisition terminal will integrate the operation data from different sources to improve the consistency and reliability of the data; and pre-process the integrated operation data, such as cleaning the operation data and processing abnormal values, to improve the data quality. After processing the operation data, the operation data is encrypted. For example, the operation data is encrypted using a symmetric encryption algorithm or an asymmetric encryption algorithm to obtain an encrypted ciphertext. After the acquisition terminal obtains the ciphertext, a random sequence is generated for the ciphertext to obtain random state information after the ciphertext is generated by the random sequence, thereby realizing secondary encryption of the target data and increasing the security of the target data during the transmission of the target data. The obtained random state information indicates a storage location in the cloud, which is the location where the acquisition terminal sends the ciphertext to the cloud and the cloud stores it after receiving the ciphertext.

[0036] Exemplarily, after the collection terminal obtains the ciphertext, it can process the ciphertext using methods such as Bayesian compressed sensing, least significant bit embedding algorithm, wavelet packet coefficient matrix transformation algorithm, and chaos mapping algorithm to obtain random state information.

[0037] Specifically, when the data security acquisition device of the virtual power plant needs to acquire the operating data collected in real time, or when the user acquires the required operating data based on the data security acquisition device of the virtual power plant, the operating data is the target data. At this time, the data security acquisition device of the virtual power plant can obtain the random state information corresponding to the target data from the acquisition terminal, and the random state information can indicate the storage location information of the target data in the cloud.

[0038] In this embodiment, by acquiring random state information corresponding to the target data from the acquisition terminal, a basis is provided for subsequently determining the storage location of the encrypted ciphertext of the target data in the cloud according to the random state information.

[0039] S102: Determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location.

[0040] The target storage location is the storage location of the ciphertext corresponding to the target data in the cloud.

[0041] Specifically, there are multiple storage locations in the cloud, and each storage location has its corresponding location state value. The location state value can be converted based on information such as the memory address of the storage location, or it can be obtained by performing the same random sequence generation on the memory address of the storage location. Therefore, the data security acquisition device of the virtual power plant can first determine the location state value corresponding to each storage location from the cloud, determine the target storage location based on the random state information and the location state value, and obtain the ciphertext from the target storage location based on the random state information.

[0042] Exemplarily, in one implementation, when the acquisition terminal determines the random state information and stores each encrypted operation data in the cloud, it will generate a relationship table in which the random state information of the ciphertext of the operation data and the position state value of the storage location are mapped to each other. The mapping relationship table records the one-to-one mapping relationship between the random state information of the ciphertext of all the operation data stored in the cloud and the position state value of the ciphertext storage location. The acquisition terminal will send the mapping relationship table to the data security acquisition device of the virtual power plant. The data security acquisition device of the virtual power plant can determine the mapping relationship between the position state value and the random state information based on the mapping relationship table, and determine the position state value corresponding to the random state information corresponding to the target data based on the mapping relationship, thereby determining the target storage location. Among them, the mapping relationship table can be transmitted in an encrypted transmission manner. And, the mapping relationship table can only be obtained when the acquirer has the acquisition authority of the target data. In another implementation, the position state value corresponding to each storage location is the same as the random state information of the operation data stored in the storage location. Therefore, the target storage location can be determined directly based on the storage location corresponding to the position state value with the same value as the random state information of the target data.

[0043] Exemplarily, after the target storage location is determined, the ciphertext of the target data needs to be taken out from the target storage location based on the random state information. For example, since the random state information is obtained by using the ciphertext to generate a random sequence, the inverse algorithm of the random sequence generation algorithm generated by the random state information can be used as a decryption key to unlock the target storage location, and the ciphertext can be obtained from the corresponding target storage location.

[0044] In this embodiment, the target storage location of the ciphertext in the cloud is determined based on the random state information, and the storage location of the ciphertext in the cloud is determined by using the random state information with randomness and diversity, which improves the confidentiality and security of the storage location of the ciphertext of the target data in the cloud. In addition, after determining the target storage location, the ciphertext is obtained from the target storage location using the random state information, that is, the ciphertext needs to be decrypted when it is obtained from the target storage location, which solves the problem that the data may be illegally stolen during the transmission process, and improves the security when obtaining the target data from the storage location in the cloud.

[0045] S103: Determine the decryption key corresponding to the ciphertext, and decrypt the ciphertext based on the decryption key to obtain the target data.

[0046] Specifically, the data security acquisition device of the virtual power plant can determine the corresponding decryption key based on the ciphertext.

[0047] For example, in one implementation, if the encryption method is a symmetric encryption algorithm, the same key as that used to encrypt the target data can be determined as the decryption key to decrypt the ciphertext. In another implementation, if the encryption method is an asymmetric encryption algorithm, it is necessary to determine the private key corresponding to the public key used to encrypt the target data, and use the private key to decrypt the ciphertext.

[0048] For example, in this embodiment, in order to further improve the security when acquiring the target data, the operation when acquiring the target data can be monitored in real time. During the real-time monitoring process, if an illegal operation is detected, the current operation can be stopped directly and an alarm can be issued.

[0049] In this embodiment, based on the access permission to the target data, the decryption key corresponding to the ciphertext is determined, and the ciphertext is decrypted based on the decryption key to obtain the target data. This ensures that the decryption key can be determined and the ciphertext can be decrypted based on the decryption key only when it is determined that the access permission to the target data is available. This improves the security of the process of obtaining the target data and effectively prevents data leakage and illegal acquisition.

[0050] The data security acquisition method of the virtual power plant provided by the embodiment of the present invention obtains the random state information corresponding to the target data from the acquisition terminal; determines the target storage location of the ciphertext in the cloud based on the random state information, and obtains the ciphertext from the target storage location; determines the decryption key corresponding to the ciphertext, and decrypts the ciphertext based on the decryption key to obtain the target data. In the above technical scheme, on the one hand, by obtaining the random state information corresponding to the target data from the acquisition terminal, a basis is provided for determining the storage location of the ciphertext encrypted by the target data in the cloud according to the random state information. On the other hand, the target storage location of the ciphertext in the cloud is determined based on the random state information, which realizes the use of random state information with randomness and diversity to determine the storage location of the ciphertext in the cloud, and improves the confidentiality and security of the storage location of the ciphertext of the target data in the cloud. And, after determining the target storage location, the ciphertext is obtained from the target storage location using the random state information, that is, the ciphertext needs to be decrypted when it is obtained from the target storage location, which solves the problem that the data may be illegally stolen during the transmission process, and improves the security of obtaining the target data from the storage location in the cloud. Finally, based on the access permission to the target data, the decryption key corresponding to the ciphertext is determined, and the ciphertext is decrypted based on the decryption key to obtain the target data. This ensures that the decryption key can be determined only when it is determined that the access permission to the target data is available, and the ciphertext can be decrypted based on the decryption key. This improves the security of the process of obtaining the target data and effectively prevents data leakage and illegal acquisition.

[0051] Figure 2 Another flowchart of the method for secure data acquisition of a virtual power plant provided in an embodiment of the present invention, this embodiment takes "when a user acquires the required target data based on the data security acquisition device of a virtual power plant" as an example, and takes "the method for generating a random sequence is a chaotic mapping algorithm" as an example, and based on the above embodiments and other optional methods, the steps of "before acquiring the random state information corresponding to the target data from the acquisition terminal", "determining the target storage location of the ciphertext in the cloud based on the random state information, and acquiring the ciphertext from the target storage location", "after determining the target storage location of the ciphertext in the cloud based on the random state information", and "after obtaining the target data" are described in detail. Figure 2 As shown, the method includes:

[0052] S201. Respond to a target data acquisition request initiated by a user.

[0053] Specifically, the user can initiate a request to obtain target data through a computer or server managed by the virtual power plant. The data security acquisition device of the virtual power plant configured in the computer or server will respond to the acquisition request for the target data initiated by the user.

[0054] S202: Obtain a data acquisition identifier determined for the user from the cloud.

[0055] The data acquisition identifier includes the user's acquisition authority.

[0056] Specifically, after responding to the target data acquisition request initiated by the user, the data security acquisition device of the virtual power plant will send a target data acquisition request to the cloud. The cloud determines the acquisition authority corresponding to the user according to the target data acquisition request, and sends the data acquisition identifier determined for the user to the data security acquisition device of the virtual power plant.

[0057] Exemplarily, obtaining a data acquisition identifier determined for a user from the cloud includes:

[0058] (1) Determine the user's identity information based on the target data acquisition request.

[0059] The user's identity information may include user name, user role, user affiliation and other information.

[0060] Specifically, before initiating a target data acquisition request, the user will log in. After logging in, the target data acquisition request can be initiated. The data security acquisition device of the virtual power plant responds to the target data acquisition request initiated by the user, and determines the user's identity information according to the initiator of the target data acquisition request.

[0061] (2) Send identity information to the cloud and receive a data acquisition identifier determined by the cloud.

[0062] The data acquisition identifier includes the user's acquisition authority determined by the cloud based on the identity information.

[0063] Specifically, an access control strategy is set in the cloud. For example, a role-based access control (RBAC) model is set in the cloud. When the cloud receives the identity information of the user sent by the data security acquisition device of the virtual power plant, the user's acquisition authority can be determined based on the user role in the identity information, and the data acquisition identifier carrying the user's acquisition authority is sent to the data security acquisition device of the virtual power plant.

[0064] Exemplarily, the user role may be an administrator, an operator, or an auditor, etc. Different roles have corresponding management access rights.

[0065] Exemplarily, the acquisition authority of the user determined in the data acquisition identifier may list the type, importance, and confidentiality level of the target data that the user can acquire.

[0066] S203: Determine the user's access rights to the target data according to the target data access request and the user's access rights.

[0067] Specifically, after the user's acquisition authority is determined, it may be determined whether the user has the acquisition authority for the target data based on the target data requested by the user in the target data acquisition request and the acquisition authority of the user.

[0068] Exemplarily, if the user's access permission is to obtain Class A, Class B and Class C data, and the target data is Class D, it can be determined that the user has no access permission to the target data; if the target data is Class C, it can be determined that the user has access permission to the target data.

[0069] In this embodiment, the user's identity information and the user's acquisition authority are determined through the target data acquisition request, and then the user's acquisition authority to the target data is determined based on the target data acquisition request and the user's acquisition authority. When the user needs to obtain the target data, the user's identity and acquisition authority are first authenticated, which preliminarily ensures the security of the data when it is acquired.

[0070] S204, determining whether the user has no authority to obtain the target data; if so, executing S205; if not, executing S206.

[0071] Specifically, if it is determined that the user does not have the right to obtain the target data, the user's failure information for obtaining the target data can be displayed. If it is determined that the user has the right to obtain the target data, a target data acquisition request carrying a data acquisition identifier is initiated to the acquisition terminal.

[0072] S205: Display the user's failure information in acquiring the target data.

[0073] The failure information includes the reason for the acquisition failure, such as the user's permission being no permission, the acquisition permission required for the target data, and other information.

[0074] Specifically, when it is determined that the user has no authority to obtain the target data, based on the security protection of the data, the system will stop responding to the user's request to obtain the target data and display the user's failure information to obtain the target data.

[0075] Optionally, the access behavior and related operations of the process of acquiring the target data can also be recorded to facilitate the audit and tracing of subsequent management personnel.

[0076] S206: Initiate a target data acquisition request carrying a data acquisition identifier to the acquisition terminal.

[0077] Specifically, when it is determined that the user has the authority to obtain the target data, a target data acquisition request carrying a data acquisition identifier can be initiated to the collection terminal, so that the collection terminal determines the user identity information based on the data acquisition identifier, and determines the target data to be obtained based on the target data acquisition request.

[0078] S207: Obtain random state information corresponding to the target data from the acquisition terminal.

[0079] Among them, in this embodiment, the method of generating random sequences is a chaotic mapping algorithm, the random state information is a chaotic state value obtained after calculating the ciphertext with the chaotic mapping algorithm, and the chaotic state value is used to indicate the target storage location of the ciphertext in the cloud.

[0080] Specifically, the acquisition terminal first determines the target data that the user needs to obtain according to the target data acquisition request, and then determines the random state information obtained by performing chaotic mapping encryption on the ciphertext encrypted by the target data.

[0081] Exemplarily, the calculation formula of the chaotic mapping algorithm for performing chaotic mapping encryption on the ciphertext is as follows:

[0082] U(t)=cos[a*cos -1 C(t)], a=4;

[0083] Among them, C(t) is the ciphertext of the target data at time t, and a is the order of the chaotic mapping calculation formula. Generally, a=4. U(t) is the chaotic state value corresponding to the target data. Generally, the range of U(t) is (-1,1), which is used to indicate the target storage location of the ciphertext in the cloud.

[0084] Exemplarily, the acquisition terminal can use the formula shown in the above formula to implement chaotic mapping encryption of the encrypted target data, and the encrypted U(t) is the chaotic state value. The chaotic state value is the secondary encrypted data after the ciphertext is encrypted by chaotic mapping and the state value indicating the target storage location in the cloud.

[0085] S208, receiving the position state value corresponding to each storage position in the cloud, and determining the target storage position of the ciphertext in the cloud according to the position state value and the chaos state value.

[0086] Specifically, each storage location in the cloud will correspond to a location state value. The location state value can be converted based on information such as the memory address of the storage location. Therefore, after determining the chaotic state value, the target storage location of the ciphertext in the cloud can be determined based on the chaotic state value and the location state value corresponding to each storage location.

[0087] Exemplarily, when the acquisition terminal determines the chaotic mapping value and stores each encrypted operating data in the cloud, it will generate a relationship table that maps the chaotic mapping value of the ciphertext of the operating data to the position state value of the storage location. The mapping relationship table records the one-to-one mapping relationship between the chaotic mapping value of the ciphertext of all operating data stored in the cloud and the position state value of the ciphertext storage location. The acquisition terminal will store the mapping relationship table in the data security acquisition device of the virtual power plant. Only users with the acquisition authority of the target data can obtain the mapping relationship table from the data security acquisition device of the virtual power plant. Therefore, when it is determined that the user has the acquisition authority to obtain the target data, the data security acquisition device of the virtual power plant can determine the mapping relationship between the position state value and the chaotic mapping value based on the mapping relationship table, and determine the position state value corresponding to the chaotic mapping value corresponding to the target data based on the mapping relationship, thereby determining the target storage location.

[0088] S209, obtaining ciphertext from the target storage location based on the inverse function of the chaotic mapping algorithm.

[0089] Specifically, after determining the target storage location of the ciphertext in the cloud, it is also necessary to decrypt the ciphertext encrypted by the chaotic mapping based on the inverse function of the chaotic mapping algorithm, and obtain the decrypted ciphertext of the target data from the target storage location.

[0090] For example, if data is directly obtained from the target storage location, only the ciphertext data encrypted by the chaotic map can be obtained. Therefore, it is necessary to obtain the ciphertext from the target storage location based on the inverse function of the chaotic map algorithm. The inverse function expression of the chaotic map algorithm is as follows:

[0091] C(t)=arccos[arccosU(t) / a] -1 ,a=4;

[0092] In this embodiment, the target storage location is first determined according to the location state value and the chaotic state value corresponding to each storage location in the cloud, and then the ciphertext is obtained from the target storage location based on the inverse function of the chaotic mapping algorithm. The security of obtaining the ciphertext from the target storage location is improved by requiring decryption when obtaining the ciphertext from the target storage location. In addition, the ciphertext can only be obtained from the target storage location by decryption based on the chaotic mapping. While using the chaotic mapping algorithm for secondary encryption and decryption, the randomness and diversity of the target storage location and the chaotic mapping value are improved.

[0093] S210. Determine the decryption key corresponding to the ciphertext.

[0094] Specifically, the data security acquisition device of the virtual power plant can determine whether the target data acquisition behavior meets the permission requirements based on the target data acquisition permission. If the permission requirements are met, the decryption key corresponding to the ciphertext can be determined according to the acquisition permission; if the permission requirements are not met, the decryption key corresponding to the ciphertext cannot be determined according to the acquisition permission.

[0095] S211. Enable data flow security monitoring, and determine security events based on the data flow security monitoring.

[0096] The security event is the user's operation recorded in the data flow security monitoring. In this embodiment, the security event can also be a monitoring event for data.

[0097] Specifically, after determining the target storage location of the ciphertext in the cloud based on the random state information, the monitoring of the data flow generated by the data transmission can be enabled. That is, the user's operation behavior is recorded, and the data transmission process is monitored. In addition, when the data flow security monitoring is enabled, the security event can be determined based on the data flow security monitoring. That is, it is determined whether the recorded user operation behavior is normal behavior or whether the data transmission process is a normal transmission process.

[0098] Optionally, data flow security monitoring can also be set up in the collection terminal and the cloud to monitor the data collection process, data processing process, data storage process, etc.

[0099] Optionally, data flow security monitoring can also perform intrusion detection, firewall detection, and security audit detection.

[0100] Optionally, security events may include data breakpoint monitoring, IoT terminal offline monitoring, data abnormal fluctuation monitoring, data storage space monitoring, and data computing efficiency monitoring. By monitoring the above situations, real-time assessment and early warning of the safety status of the virtual power plant can be achieved.

[0101] S212: Determine whether the security event is an abnormal event; if so, execute S213; if not, execute S214.

[0102] Specifically, data flow security monitoring records all processes related to data and user operations, and generates security events corresponding to the data flow. After obtaining a security event, it can be determined whether the security event is an abnormal event; if the security event is an abnormal event, the response to the user's operation will be stopped; if the security event is not an abnormal event, that is, the security event is a normal event, then after decrypting the ciphertext based on the decryption key, the security event is embedded in the target data to obtain the target data carrying the security event.

[0103] Exemplarily, abnormal events may include abnormal data breakpoints, IoT terminals being offline, abnormal data fluctuations, and illegal user operations.

[0104] Optionally, when a security incident is determined to be an abnormal incident, a security protection plan can also be taken to deal with the security threat.

[0105] S213. Stop responding to user operations.

[0106] Specifically, when a security event is determined to be an abnormal event, the system stops responding to the user's operation, thereby preventing the user from performing abnormal operations and ensuring data security. Optionally, a warning can be issued to the manager or management department, or the security event can be stored in the user's operation log for subsequent audit and tracing.

[0107] It is worth noting that S209-S210 and S211 are parallel steps, that is, when executing S209 and S210, S211 must be executed at the same time. That is, when obtaining the ciphertext from the target storage location and determining the decryption key corresponding to the ciphertext, the data flow security monitoring is turned on, and the process of obtaining the ciphertext from the target storage location and determining the decryption key of the ciphertext is monitored. And, after judging whether the security event is an abnormal event based on S212 and determining that the security event is not an abnormal event, S214 can be continued to be executed, and at the same time, the data flow security monitoring can continue to be turned on. Otherwise, S213 will be directly executed.

[0108] S214. Decrypt the ciphertext based on the decryption key and obtain target data carrying the security event.

[0109] Specifically, if the security event is not an abnormal event, that is, the security event is a normal event, the ciphertext can be decrypted based on the decryption key, and the security event can be embedded in the target data to obtain the target data carrying the security event. The security event is the user's operation after S208 recorded by the data flow security monitoring, and the data flow information corresponding to the target data.

[0110] In this embodiment, by enabling data flow security monitoring, determining security events based on data flow security monitoring, and determining whether the security events are abnormal events, data flow security monitoring is implemented after the target storage location of the target data in the cloud is determined. Through the security events obtained by data flow security monitoring, it is determined whether there are any illegal operations such as user stealing or tampering with data during the transmission of the target data from the cloud, thereby ensuring the security of the target data during transmission. At the same time, after determining that the security event is not an abnormal event, that is, after determining that the user has no illegal operations, the ciphertext is decrypted based on the decryption key to obtain the target data carrying the security event, further improving the security and integrity of the target data acquisition.

[0111] S215. Store the target data carrying the security event in the target local storage and at least one backup local storage.

[0112] The backup local storage is used to back up and store the target data, and to determine the consistency between the stored historical target data and the corresponding historical target data in the target local storage.

[0113] Specifically, the target data may be stored in the target local storage and other backup local storages for backing up the target data, and may also be stored in non-local storages.

[0114] Exemplarily, the target data can be stored in servers such as application servers, data servers, and optimization servers. Optionally, cross-storage of different physical partitions can be performed in different storage servers. The advantage of this is that if the data of a server is formatted, damaged, or down, the data can be read and restored through other storage servers to ensure the reliability and integrity of the operating data in the virtual power plant. Optionally, in order to prevent data leakage in data transmission between different storage servers, different authentication mechanisms can be set for different storage servers, such as PIN codes, SMS verification, etc., to ensure the security of data reading and writing operations and avoid arbitrary tampering by others, which affects data quality.

[0115] Optionally, the target data carrying the security event is stored in the target local storage and at least one backup local storage, and the security events carried by the target data in different storages can be used to determine whether the target data is processed in violation of the regulations. For example, if the security events of the target data in different storages are different, it can be determined that the target data is processed in violation of the regulations.

[0116] In this embodiment, by storing the target data carrying the security event in the target local storage and at least one backup local storage, cross-backup of the target data is achieved, and when one storage fails, the target data can be restored through other storages, thereby protecting the target data and preventing the loss of the target data. In addition, it is also possible to determine whether the security events corresponding to the target data in different storages are consistent through the target data carrying the security event, thereby determining whether the target data has been processed in violation of regulations, further ensuring the reliability of the target data.

[0117] The data security acquisition method for a virtual power plant provided by an embodiment of the present invention, on the one hand, responds to a target data acquisition request initiated by a user; obtains a data acquisition identifier determined for the user from the cloud; determines the user's target data acquisition authority based on the target data acquisition request and the user's acquisition authority; and, determines whether the user's target data acquisition authority is unauthorized, and if so, displays information about the user's failure to acquire the target data; if not, initiates a target data acquisition request carrying the data acquisition identifier to the acquisition terminal; that is, determines the user's identity information and the user's acquisition authority through the target data acquisition request, thereby determining the user's target data acquisition authority based on the target data acquisition request and the user's acquisition authority, thereby achieving authentication of the user's identity and acquisition authority when the user needs to acquire the target data, thereby preliminarily ensuring the security of the data when it is acquired. On the other hand, the random state information corresponding to the target data is obtained from the acquisition terminal; the position state value corresponding to each storage location in the cloud is received, and the target storage location of the ciphertext in the cloud is determined according to the position state value and the chaotic state value; the ciphertext is obtained from the target storage location based on the inverse function of the chaotic mapping algorithm; that is, the target storage location is first determined according to the position state value and the chaotic state value corresponding to each storage location in the cloud, and then the ciphertext is obtained from the target storage location based on the inverse function of the chaotic mapping algorithm, and the security of taking out the ciphertext from the target storage location is improved by the method that the ciphertext needs to be decrypted when taking out the ciphertext from the target storage location. In addition, the ciphertext can only be obtained from the target storage location by decryption based on the chaotic mapping, and the randomness and diversity of the target storage location and the chaotic mapping value are improved while using the chaotic mapping algorithm for secondary encryption and decryption. On the other hand, while obtaining the ciphertext from the target storage location based on the inverse function of the chaotic mapping algorithm and determining the decryption key corresponding to the ciphertext, data flow security monitoring is turned on, and security events are determined based on data flow security monitoring; it is determined whether the security event is an abnormal event; if so, the response to the user's operation is stopped; if not, the ciphertext is decrypted based on the decryption key, and the target data carrying the security event is obtained; that is, by turning on the data flow security monitoring, the security event is determined based on the data flow security monitoring, and it is determined whether the security event is an abnormal event, the data flow security monitoring is realized after the target storage location of the target data in the cloud is determined, and the security events obtained by the data flow security monitoring are determined to determine whether there are illegal operations such as user stealing or tampering with data during the transmission of the target data from the cloud, thereby ensuring the security of the target data during the transmission process. At the same time, after determining that the security event is not an abnormal event, that is, after determining that the user has no illegal operation behavior, the ciphertext is decrypted based on the decryption key to obtain the target data carrying the security event, further improving the security and integrity of the target data acquisition.Finally, the target data carrying the security event is stored in the target local storage and at least one backup local storage; that is, by storing the target data carrying the security event in the target local storage and at least one backup local storage, cross-backup of the target data is achieved, and when one storage fails, the target data can be restored through other storages, thereby protecting the target data and preventing the loss of the target data. In addition, the target data carrying the security event can be used to determine whether the security events corresponding to the target data in different storages are consistent, thereby determining whether the target data has been processed in violation of regulations, further ensuring the reliability of the target data.

[0118] Figure 3 A schematic diagram of the structure of a data security acquisition device for a virtual power plant provided by an embodiment of the present invention. Figure 3 As shown, the device comprises:

[0119] The acquisition module 301 is used to obtain random status information corresponding to the target data from the acquisition terminal, wherein the target data is the operating data of the virtual power plant, and the random status information is the location information stored in the cloud after the acquisition terminal generates a random sequence for the ciphertext obtained after encrypting the target data, indicating that the ciphertext is sent by the acquisition terminal to the cloud.

[0120] The determination module 302 is used to determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location.

[0121] The decryption module 303 is used to determine the decryption key corresponding to the ciphertext, and decrypt the ciphertext based on the decryption key to obtain the target data.

[0122] Optionally, before obtaining the random state information corresponding to the target data from the acquisition terminal, the acquisition module 301 is further used to:

[0123] Respond to the target data acquisition request initiated by the user; obtain the data acquisition identifier determined for the user from the cloud, wherein the data acquisition identifier includes the user's acquisition authority; initiate a target data acquisition request carrying the data acquisition identifier to the collection terminal.

[0124] Optionally, a data acquisition identifier determined for the user is acquired from the cloud, and the acquisition module 301 is specifically used to:

[0125] The user's identity information is determined according to the target data acquisition request; the identity information is sent to the cloud, and a data acquisition identifier determined by the cloud is received, wherein the data acquisition identifier includes the user's acquisition authority determined by the cloud according to the identity information.

[0126] Optionally, after obtaining the data acquisition identifier determined for the user from the cloud, the determination module 302 is further used to:

[0127] Determine the user's access rights to the target data based on the target data acquisition request and the user's access rights; if it is determined that the user has no access rights to the target data, display the user's failure information to obtain the target data;

[0128] A target data acquisition request carrying a data acquisition identifier is initiated to the acquisition terminal. The determination module 302 is specifically used to: if it is determined that the user has the right to acquire the target data, initiate a target data acquisition request carrying a data acquisition identifier to the acquisition terminal.

[0129] Optionally, the random sequence generation method is a chaotic mapping algorithm, the random state information is a chaotic state value obtained after the ciphertext is calculated by the chaotic mapping algorithm, and the chaotic state value is used to indicate the target storage location of the ciphertext in the cloud. The determination module 302 is specifically used for:

[0130] Receive the position state value corresponding to each storage position in the cloud, determine the target storage position of the ciphertext in the cloud according to the position state value and the chaotic state value; and obtain the ciphertext from the target storage position based on the inverse function of the chaotic mapping algorithm.

[0131] Optionally, after determining the target storage location of the ciphertext in the cloud based on the random state information, the determination module 302 is further configured to:

[0132] Enable data flow security monitoring and determine security events based on data flow security monitoring. Security events are user operations recorded by data flow security monitoring. If a security event is an abnormal event, stop responding to user operations.

[0133] The ciphertext is decrypted based on the decryption key to obtain the target data. The decryption module 303 is specifically used for: if the security event is a normal event, the ciphertext is decrypted based on the decryption key to obtain the target data carrying the security event.

[0134] Optionally, the device further includes a storage module, and after obtaining the target data, the storage module is further used to:

[0135] The target data carrying the security event is stored in a target local memory and at least one backup local memory, wherein the backup local memory is used to back up and store the target data and to determine the consistency between the stored historical target data and the corresponding historical target data in the target local memory.

[0136] The data security acquisition device for a virtual power plant provided in an embodiment of the present invention can execute the data security acquisition method for a virtual power plant provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0137] Figure 4A schematic diagram of the structure of an electronic device 10 provided for an embodiment of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0138] like Figure 4 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0139] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0140] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a data security acquisition method for a virtual power plant.

[0141] In some embodiments, the data security acquisition method of the virtual power plant can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the data security acquisition method of the virtual power plant described above can be performed. Alternatively, in other embodiments, the processor 11 can be configured to execute the data security acquisition method of the virtual power plant in any other appropriate manner (for example, by means of firmware).

[0142] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0143] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0144] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0145] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0146] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0147] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the respective computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0148] An embodiment of the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements the method for securely acquiring data of a virtual power plant as provided in any embodiment of the present invention.

[0149] In the process of implementation, the computer program product can be written in one or more programming languages ​​or a combination thereof to perform the computer program code of the present invention, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computer (for example, using an Internet service provider to connect through the Internet).

[0150] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0151] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for securely acquiring data of a virtual power plant, characterized in that: The method comprises: Obtain random state information corresponding to the target data from the acquisition terminal, wherein the target data is the operation data of the virtual power plant, and the random state information is the location information stored in the cloud after the acquisition terminal generates a random sequence for the ciphertext obtained after encrypting the target data, indicating that the ciphertext is sent by the acquisition terminal to the cloud; Determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location; A decryption key corresponding to the ciphertext is determined, and the ciphertext is decrypted based on the decryption key to obtain the target data.

2. The method for securely acquiring data of a virtual power plant according to claim 1, characterized in that: Before obtaining random state information corresponding to the target data from the acquisition terminal, the method further includes: Respond to the target data acquisition request initiated by the user; Acquire a data acquisition identifier determined for the user from the cloud, wherein the data acquisition identifier includes the acquisition authority of the user; A target data acquisition request carrying the data acquisition identifier is initiated to the acquisition terminal.

3. The method for securely acquiring data of a virtual power plant according to claim 2, characterized in that: The step of obtaining a data acquisition identifier determined for the user from the cloud comprises: Determining the identity information of the user according to the target data acquisition request; The identity information is sent to the cloud, and a data acquisition identifier determined by the cloud is received, wherein the data acquisition identifier includes the acquisition authority of the user determined by the cloud according to the identity information.

4. The method for securely acquiring data of a virtual power plant according to claim 2, characterized in that: After obtaining the data acquisition identifier determined for the user from the cloud, the method further includes: Determining the user's access rights to the target data according to the target data access request and the user's access rights; If it is determined that the user has no authority to obtain the target data, displaying failure information of the user in obtaining the target data; The initiating a target data acquisition request carrying the data acquisition identifier to the acquisition terminal includes: If it is determined that the user has the right to obtain the target data, a target data acquisition request carrying the data acquisition identifier is initiated to the acquisition terminal.

5. The method for securely acquiring data of a virtual power plant according to claim 1, characterized in that: The random sequence generation method is a chaotic mapping algorithm, the random state information is a chaotic state value obtained after the ciphertext is calculated by the chaotic mapping algorithm, and the chaotic state value is used to indicate the target storage location of the ciphertext in the cloud; The determining a target storage location of the ciphertext in the cloud based on the random state information, and obtaining the ciphertext from the target storage location, comprises: Receiving a location state value corresponding to each storage location in the cloud, and determining the target storage location of the ciphertext in the cloud according to the location state value and the chaotic state value; The ciphertext is obtained from the target storage location based on an inverse function of the chaotic mapping algorithm.

6. The method for securely acquiring data of a virtual power plant according to claim 1, characterized in that: After determining the target storage location of the ciphertext in the cloud based on the random state information, the method further includes: Enable data flow security monitoring, and determine security events based on the data flow security monitoring, where the security events are user operations recorded by the data flow security monitoring; If the security event is an abnormal event, stop responding to the user's operation; The decrypting the ciphertext based on the decryption key to obtain the target data includes: If the security event is a normal event, the ciphertext is decrypted based on the decryption key to obtain the target data carrying the security event.

7. The method for securely acquiring data of a virtual power plant according to claim 6, characterized in that: After obtaining the target data, the method further includes: The target data carrying the security event is stored in a target local memory and at least one backup local memory, wherein the backup local memory is used to back up and store the target data and to determine the consistency between the stored historical target data and the corresponding historical target data in the target local memory.

8. A data security acquisition device for a virtual power plant, characterized in that: The device comprises: An acquisition module, used for acquiring random state information corresponding to target data from a collection terminal, wherein the target data is the operation data of a virtual power plant, and the random state information is the location information stored in the cloud after the collection terminal generates a random sequence for the ciphertext obtained after encrypting the target data, indicating that the ciphertext is sent by the collection terminal to the cloud; A determination module, configured to determine a target storage location of the ciphertext in the cloud based on the random state information, and obtain the ciphertext from the target storage location; The decryption module is used to determine the decryption key corresponding to the ciphertext, and decrypt the ciphertext based on the decryption key to obtain the target data.

9. An electronic device, characterized in that: include: one or more processors; a memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the data security acquisition method for the virtual power plant as described in any one of claims 1 to 7.

10. A readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method for securely acquiring data of a virtual power plant as described in any one of claims 1 to 7 is implemented.

Images