A method and system for secure management of electric energy meter data

Abstract

The present invention discloses a method and system for the security management of electric energy meter data, which relates to the field of data management technology. The method comprises: extracting multi-dimensional security influencing factors for the security management requirements of electric energy meter data to obtain multi-dimensional data security influencing factors; conducting multi-dimensional security level assessment on the collected and recorded data set to obtain a set of security levels for electric energy meter data; constructing a conventional management channel for electric energy meter data and an encryption management channel for electric energy meter data; obtaining a set of encrypted channel hierarchical links; constructing a data security management channel mechanism; obtaining target electric energy meter data, performing branch mapping matching, and obtaining a result of the security management of electric energy meter data. The method solves the technical problem that the existing electric energy meter data management cannot flexibly respond to the security management requirements of electric energy meter data in different scenarios, which leads to a low degree of refinement and insufficient efficiency in the management of safety influencing factors of electric energy meters, and achieves the technical effect of improving the efficiency, security and accuracy of electric energy meter data processing.

Description

Technical Field

[0001] The present application relates to the field related to data management technology, and specifically to a method and system for secure management of electric energy meter data. Background Art

[0002] Electricity meters are not only used to measure users' electricity consumption, but are also widely used in data collection, remote monitoring, power dispatching, energy management and other links. Electricity meter data mainly includes key information such as users' electricity consumption, time period, power, load, etc. The security management of electricity meter data is increasingly becoming one of the core challenges in the construction of smart grids. However, traditional electricity meter data management solutions are mostly single static encryption, focusing only on basic encryption and transmission security issues, ignoring the hierarchical management requirements of electricity meter data in different application scenarios, and the encryption level matching issues under different security requirements. It fails to carry out refined security management of the multi-dimensional security influencing factors of electricity meter data, and cannot flexibly respond to the security management requirements of electricity meter data in different scenarios.

[0003] Therefore, at the current stage, the technologies related to electricity meter data security management are unable to flexibly respond to the security management needs of electricity meter data in different scenarios, which in turn leads to technical problems such as low level of refinement and insufficient efficiency in the management of factors affecting electricity meter safety. Summary of the invention

[0004] The present application provides a method and system for safe management of electricity meter data, thereby solving the technical problem that the existing electricity meter data management cannot flexibly respond to the safety management needs of electricity meter data in different scenarios, which in turn leads to low level of refinement and insufficient efficiency in the management of safety influencing factors of the electricity meter, and achieves the technical effect of improving the efficiency, safety and accuracy of electricity meter data processing.

[0005] The present application provides a method for data security management of electric energy meters, the method comprising: extracting multidimensional security influencing factors of electric energy meter data security management requirements to obtain multidimensional data security influencing factors, and designing data multidimensional security level assessment rules based on the multidimensional data security influencing factors; obtaining a collection and recording data set of a target electric energy meter, and performing multidimensional security level assessment on the collection and recording data set according to the data multidimensional security level assessment rules to obtain a data security level set of the electric energy meter; setting a security encryption level discrimination benchmark based on the data security level set of the electric energy meter, and constructing a conventional management channel for electric energy meter data and an encryption management channel for electric energy meter data according to the security encryption level discrimination benchmark; grading the encryption management channel for electric energy meter data according to the data security level set of the electric energy meter, and obtaining a hierarchical link set of encryption channels; constructing a data security management channel mechanism based on the conventional management channel for electric energy meter data and the encryption management channel for electric energy meter data, and the hierarchical link set of encryption channels; obtaining target electric energy meter data, triggering the data security management channel mechanism to perform branch mapping matching based on the target electric energy meter data, and obtaining a data security management result of the electric energy meter data.

[0006] In a possible implementation, the design obtains data multidimensional security level assessment rules and performs the following processing: the power expert group assigns weights to each influencing factor in the multidimensional data security influencing factors in turn to obtain an initial multidimensional influencing factor weight set; based on the initial multidimensional influencing factor weight set, an initial security influencing factor matrix set is generated, wherein the behavioral influencing factor dimension of the security influencing factor matrix set is listed as the influencing factor weights of each dimension; based on the power expert group, the initial security influencing factor matrix is ​​subjected to deviation calculation fusion to obtain a security influencing factor reference matrix; the weights of each factor in the security influencing factor reference matrix are used as security level assessment coefficients, and the multidimensional data security influencing factors are used as security level assessment indicators, to design and obtain the data multidimensional security level assessment rules.

[0007] In a possible implementation, the safety influencing factor reference matrix is ​​obtained by performing the following processing: mapping deviation calculation is performed on each element in the initial safety influencing factor matrix set to obtain an influencing factor weight deviation parameter; the power expert group re-assigns factor weights based on the influencing factor weight deviation parameter until a preset deviation threshold is met to obtain an available safety influencing factor matrix set; an empirical evaluation is performed on the power expert group to obtain an expert power experience set, and an empirical credible coefficient matrix is ​​generated based on the expert power experience set; and a weighted calculation is performed on the available safety influencing factor matrix set based on the empirical credible coefficient matrix to obtain the safety influencing factor reference matrix.

[0008] In a possible implementation, the step of obtaining the encrypted channel hierarchical link set also includes performing the following processing: hierarchically dividing the electric meter data encryption management channel according to the electric meter data security level set to obtain a hierarchical encrypted channel set; performing management mechanism analysis on the collected record data set to determine the meter data management element information, where the meter data management element information includes data transmission, data storage, data backup, and data authority access and modification; performing encryption management analysis on the hierarchical encrypted channel set in turn based on the meter data management element information to obtain a hierarchical channel element encryption management algorithm set; performing element node mapping configuration on the hierarchical encrypted channel set based on the hierarchical channel element encryption management algorithm set to obtain the encrypted channel hierarchical link set.

[0009] In a possible implementation, the step of obtaining a set of encryption management algorithms for hierarchical channel elements further includes: constructing a list of encryption processing algorithms for data management elements based on the meter data management element information, wherein the list of encryption processing algorithms for data management elements includes a set of encryption processing algorithms corresponding to each meter data management element; performing encryption level evaluation and algorithm application matching on the list of encryption processing algorithms for data management elements based on the meter data management element information to obtain a set of encryption processing algorithms available for hierarchical channels; performing meter data characteristic analysis on the set of hierarchical encryption channels to obtain meter data characteristic information for hierarchical channels; and performing optimization based on the hierarchical channel meter data characteristic information and the set of encryption processing algorithms available for hierarchical channels to obtain a set of encryption management algorithms for hierarchical channel elements.

[0010] In a possible implementation, the obtaining of the electric energy meter data security management result also performs the following processing: based on the target electric energy meter data, the data security management channel mechanism is triggered to perform channel mapping matching to obtain data matching branch channel information; the data matching branch channel information is associated with the data processing volume to obtain the amount of data to be processed by the branch channel; based on the amount of data to be processed by the branch channel, the data matching branch channel information is balanced analyzed and expanded to obtain data target branch channel information; based on the data target branch channel information, the target electric energy meter data is processed to obtain the electric energy meter data security management result.

[0011] In a possible implementation, the data target branch channel information is obtained and the following processing is also performed: based on the amount of data to be processed on the branch channel, a processing time analysis is performed on the data matching branch channel information to obtain branch channel processing time parameters; the data matching branch channel information is difference-matched and marked by the branch channel processing time parameters to determine the branch channel to be expanded and the channel time delay parameters; based on the channel time delay parameters, the branch channel to be expanded is computing resource balanced expansion to obtain extended additional channel information; based on the data matching branch channel information and the extended additional channel information, the data target branch channel information is obtained.

[0012] The present application also provides an electric energy meter data security management system, including: a multi-dimensional security influencing factor extraction module, which is used to extract multi-dimensional security influencing factors for the electric energy meter data security management requirements, obtain multi-dimensional data security influencing factors, and design and obtain data multi-dimensional security level evaluation rules based on the multi-dimensional data security influencing factors; a multi-dimensional security level evaluation module, which is used to obtain a collection record data set of a target electric energy meter, perform a multi-dimensional security level evaluation on the collection record data set according to the data multi-dimensional security level evaluation rules, and obtain an electric energy meter data security level set; an electric energy meter data management channel construction module, which is used to set a security encryption level judgment benchmark based on the electric energy meter data security level set, and according to the security encryption etc. The invention relates to a method for obtaining a conventional management channel for electric energy meter data and an encrypted management channel for electric energy meter data according to the security level set of the electric energy meter data, and obtaining a hierarchical link set of encrypted channels; a data security management channel mechanism construction module, which is used to construct a data security management channel mechanism based on the conventional management channel for electric energy meter data and the encrypted management channel for electric energy meter data, as well as the hierarchical link set of encrypted channels; and an electric energy meter data security management result acquisition module, which is used to obtain target electric energy meter data, trigger the data security management channel mechanism based on the target electric energy meter data to perform branch mapping matching, and obtain the electric energy meter data security management result.

[0013] The electric energy meter data security management method and system proposed in this application is intended to extract multi-dimensional security influencing factors for the electric energy meter data security management needs and obtain multi-dimensional data security influencing factors; perform multi-dimensional security level assessment on the collected and recorded data set to obtain a set of electric energy meter data security levels; construct a conventional management channel for electric energy meter data and an encryption management channel for electric energy meter data; obtain a set of encrypted channel hierarchical links; construct a data security management channel mechanism; obtain target electric energy meter data, perform branch mapping matching, and obtain electric energy meter data security management results. This solves the technical problem that the existing electric energy meter data management cannot flexibly respond to the security management needs of electric energy meter data in different scenarios, which leads to a low level of refinement and insufficient efficiency in the management of electric energy meter security influencing factors, and achieves the technical effect of improving the efficiency, security and accuracy of electric energy meter data processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the technical solution of the embodiment of the present disclosure, the accompanying drawings of the embodiment of the present disclosure will be briefly introduced below. A flow chart is used in the present application to illustrate the operations performed by the system according to the embodiment of the present application. It should be understood that the preceding or following operations are not necessarily performed accurately in order. On the contrary, various steps can be processed in reverse order or simultaneously as needed. At the same time, other operations can also be added to these processes, or one or more operations can be removed from these processes.

[0015] Figure 1 A schematic flow chart of a method for secure management of electric energy meter data provided in an embodiment of the present application.

[0016] Figure 2 A schematic diagram of the structure of an electric energy meter data security management system provided in an embodiment of the present application.

[0017] Explanation of the accompanying drawings: multi-dimensional security influencing factor extraction module 10, multi-dimensional security level assessment module 20, electric energy meter data management channel construction module 30, encrypted channel hierarchical link set acquisition module 40, data security management channel mechanism construction module 50, electric energy meter data security management result acquisition module 60. DETAILED DESCRIPTION

[0018] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below.

[0019] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0020] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict, and the terms "first\second" involved are merely to distinguish similar objects and do not represent a specific ordering of objects. The terms "including" and "having" and any variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or modules that are not clearly listed or inherent to these processes, methods, products, or devices. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by technicians in the technical field of this application. The terms used herein are for the purpose of describing the embodiments of the present application only.

[0021] The present application embodiment provides a method for secure management of electric energy meter data, such as Figure 1 As shown, the method includes:

[0022] Step S100, extracting multi-dimensional security influencing factors of the electric energy meter data security management requirements, obtaining multi-dimensional data security influencing factors, and designing data multi-dimensional security level assessment rules based on the multi-dimensional data security influencing factors.

[0023] Preferably, the key factors affecting the security of electricity meter data are analyzed and identified from multiple perspectives according to the security management requirements of electricity meter data, wherein the electricity meter data involves security requirements of multiple links such as collection, transmission, storage and processing, and then multi-dimensional data security influencing factors are obtained, mainly including data sensitivity. The data collected by the electricity meter may contain the user's privacy information, such as the user's electricity consumption, electricity consumption time, etc., which may expose the user's living habits; data transmission path. The electricity meter data is usually transmitted to the power company server through multiple nodes. During the transmission process, different nodes may face different security risks, such as network attacks, data theft, etc.; user privacy requirements. Different users may have different requirements for data privacy. Some users may have higher requirements for data security, while some users may accept standard security protection measures; equipment environment, the physical environment in which the electricity meter is installed (such as whether it is in a public area); network security, the network to which the electricity meter is connected (such as whether it is transmitted through a secure network).

[0024] Preferably, after identifying the security influencing factors of multiple dimensions, a multi-dimensional security level evaluation rule is designed to evaluate the security level of the electric energy meter data according to these security influencing factors, mainly to classify and grade different security requirements so as to set corresponding security protection measures for each type of data. Specifically, weights are assigned to different security influencing factors so that each dimension can be reasonably considered when evaluating the security level of the data. For example, data sensitivity may be more important than transmission path security, and the weight may be higher in the evaluation; according to the multi-dimensional influencing factor score of each data set, the data is divided into different security levels, for example, sensitive data, data transmitted through an insecure network, and data in a high-risk physical environment may be evaluated as a high security level, while low-sensitivity data of ordinary users may be evaluated as a low security level; finally, a specific security level standard is set according to the combination of multi-dimensional influencing factors, for example, when a certain data has high sensitivity, low transmission path security, and high user privacy requirements, it is evaluated as requiring the highest level of encryption and protection. Through the design of multi-dimensional security level evaluation rules, hierarchical management of the security level of the electric energy meter data is achieved, ensuring that electric energy meter data of different types and different security requirements can be protected at the corresponding level.

[0025] Step S100 further includes step S110, in which the power expert group assigns weights to each influencing factor in the multidimensional data security influencing factor in turn to obtain an initial multidimensional influencing factor weight set; step S120, generating an initial security influencing factor matrix set based on the initial multidimensional influencing factor weight set, wherein the behavioral influencing factor dimension of the security influencing factor matrix set is listed as the influencing factor weight of each dimension; step S130, based on the power expert group, performing deviation calculation fusion on the initial security influencing factor matrix to obtain a security influencing factor reference matrix; step S140, using the weight of each factor in the security influencing factor reference matrix as a security level assessment coefficient, and the multidimensional data security influencing factor as a security level assessment indicator, to design and obtain the data multidimensional security level assessment rule.

[0026] Preferably, the power expert group scores and assigns weights to the relative importance of each security influencing factor based on their professional knowledge in actual business needs, technical standards, risk assessment, etc. For example, some data (such as user privacy data) may be more important than the physical security of the equipment, so data sensitivity may be assigned a higher weight. An initial weight is assigned to each security influencing factor to obtain an initial multidimensional influencing factor weight set, and then a corresponding security influencing factor matrix set is generated based on the weight set, i.e., the initial security influencing factor matrix set, which represents the multidimensional security influencing factors in a structured manner. The rows of the matrix represent different influencing factor dimensions, such as data sensitivity, transmission path security, user privacy requirements, etc., and the columns of the matrix are the influencing factor weights of the corresponding dimensions assigned by the expert group.

[0027] Preferably, the initial safety influencing factor matrix is ​​subjected to deviation calculation and fusion according to the power expert group. Specifically, after the expert group assigns preliminary weights to the influencing factors, the possible deviations or changes of each factor in the evaluation process are further calculated, the evaluation differences between different experts are considered and these deviations are comprehensively calculated, and the initial weights are optimized according to the actual situation of the multidimensional data influencing factors to ensure that the final weights can more accurately reflect the importance of each safety influencing factor. After the deviation calculation and fusion, a safety influencing factor reference matrix is ​​obtained, which can more accurately represent the importance of each safety influencing factor; finally, the multidimensional data safety influencing factors are used as security level evaluation indicators, and the weights corresponding to each factor are used as security level evaluation coefficients. Based on the evaluation indicators and evaluation coefficients, data multidimensional security level evaluation rules are designed, and multidimensional weighted evaluation of the electric energy meter data is performed according to the evaluation rules. The data security level of the electric energy meter is accurately classified, thereby realizing hierarchical management of different data of the electric energy meter and determining appropriate encryption measures.

[0028] Step S130 further includes step S131, mapping deviation calculation of each element in the initial safety influencing factor matrix set to obtain an influencing factor weight deviation parameter; step S132, the power expert group re-assigns factor weights based on the influencing factor weight deviation parameter until a preset deviation threshold is met to obtain an available safety influencing factor matrix set; step S133, performing an empirical evaluation on the power expert group to obtain an expert power experience set, and generating an empirical credible coefficient matrix based on the expert power experience set; step S134, performing a weighted calculation on the available safety influencing factor matrix set based on the empirical credible coefficient matrix to obtain the safety influencing factor reference matrix.

[0029] Preferably, the mapping deviation calculation refers to evaluating the deviation between each element (i.e., weight value) in the initial security influencing factor matrix set and the ideal value, detecting whether the initial weight value has excessive deviation or unreasonable distribution, and obtaining the influencing factor weight deviation parameter, which is used to represent the difference between each weight value and the expected value or standard value. The larger the deviation parameter, the greater the difference between the weight and the ideal value; the weighting results of each expert may differ too much. In order to ensure the credibility of the results, multiple weight assignments are required until the experts' assignments are not much different. Specifically, after the expert group obtains the deviation parameters, they readjust the weight of each influencing factor according to these parameters to make the weight value more reasonable and closer to the actual situation or ideal value. During the reassignment process, the expert group will continue to adjust the weight until the deviation value of each influencing factor is within an acceptable range, that is, it meets the preset deviation threshold, thereby obtaining an available security influencing factor matrix set.

[0030] Preferably, the experience and judgment of the power expert group are evaluated, and the experience values ​​of the experts on different security influencing factors are quantified. Through experience evaluation, it is ensured that the feedback of the experts has sufficient credibility, and an expert power experience set is obtained. These experience values ​​reflect the level of professional knowledge and judgment of the experts in different dimensions. For example, some experts may have more experience in data transmission security, while other experts may have a deeper understanding of user privacy protection; finally, based on the expert power experience set, an experience credibility coefficient matrix is ​​generated, and a certain credibility weight is assigned to the judgment of each expert. The more experienced the expert is, the greater the proportion of his or her opinions and feedback in the weighted calculation. Finally, the available security influencing factor matrix set is weighted according to the experience credibility coefficient matrix, that is, the weighted calculation and fusion of the weighted information of each expert is performed as the final weight information of each security factor to generate a security influencing factor reference matrix.

[0031] Step S200, obtaining a collection record data set of a target electric energy meter, performing a multi-dimensional security level assessment on the collection record data set according to the multi-dimensional security level assessment rule of the data, and obtaining a data security level set of the electric energy meter.

[0032] Preferably, a collection record data set of the target electric energy meter is obtained, where the collection record data set refers to all data records collected by the electric energy meter during its normal operation, including basic information of the electric energy meter, such as meter type, meter number, meter installation location, meter manufacturer, etc.; meter measurement data, such as electric energy, voltage, current, power factor, frequency and other parameters, reflecting the working status and power consumption of the electric energy meter; meter event records, such as power outage events, overload events, short circuit events, etc., recording abnormal conditions and fault conditions of the electric energy meter; meter operating status, such as the switch status and working mode of the electric energy meter, reflecting the operating status and power consumption of the electric energy meter; meter environmental parameters, such as temperature, humidity, air pressure and other environmental parameters, reflecting the working environment and safety status of the electric energy meter; meter communication status, such as the signal strength of the communication module, the connection status of the communication module, etc., reflecting the communication status and data transmission status of the electric energy meter.

[0033] Preferably, a multi-dimensional security level assessment is performed on the collected record data set according to the data multi-dimensional security level assessment rules, that is, the security of the data is judged from multiple dimensions. Specifically, each dimension has different influencing factors and weights. The security of the data will be comprehensively scored through these dimensions. Different data types may have different assessment results. Through the pre-set assessment rules, different types of electric energy meter data are assigned security levels. Finally, the electric energy meter data security level set is obtained, which contains the security level information of all data in the collected record data set. Each data will be assigned to a specific security level according to its security assessment result, such as low, medium, and high security levels. The low security level is used for those insensitive or unimportant data, which can be managed and transmitted in a conventional way; the data of the medium security level involves certain privacy or commercial secrets and needs to be protected by appropriate encryption measures; the data of the high security level is very sensitive (such as user privacy information or real-time monitoring data), and strict encryption and transmission protection measures are required. By assigning each piece of data of the electric energy meter to the corresponding security level set, different protection measures can be taken according to different security levels, such as encryption strength, access control, etc., to ensure that each type of data is protected in accordance with its security requirements.

[0034] Step S300: Based on the electric energy meter data security level set, a security encryption level determination criterion is set; and according to the security encryption level determination criterion, a conventional management channel for electric energy meter data and an encryption management channel for electric energy meter data are constructed.

[0035] Preferably, a security encryption level discrimination benchmark is set according to the security level set of the electric energy meter data, that is, the encryption method required for the data is determined according to the security level of the electric energy meter data, and a corresponding encryption level is assigned to each security level of the electric energy meter data, thereby constructing a conventional management channel for the electric energy meter data and an encryption management channel for the electric energy meter data. For example, data with a low security level may be public or less sensitive information (such as electricity price information, standard electricity consumption records, etc.), so encryption may not be required during transmission and storage, or the most basic security protection method may be used. If the risk is assessed to be low, the conventional management channel for the electric energy meter data is used for processing, thereby reducing unnecessary encryption processing and improving data transmission efficiency. Data with a medium security level or a high security level is more sensitive and may involve user privacy or key business data (such as user electricity usage habits, real-time electricity load, billing information and other sensitive data). The electric energy meter data encryption management channel is used for processing. Data with a medium security level is appropriately encrypted, such as symmetric encryption, to ensure that it is not tampered with or leaked. Data with a high security level is processed using a stricter encryption method (such as asymmetric encryption, double-layer encryption, etc.) to ensure its security throughout its life cycle. Taking appropriate encryption or management methods for different data ensures data security and avoids resource waste and efficiency loss caused by excessive encryption.

[0036] Step S400: classify the electric energy meter data encryption management channel according to the electric energy meter data security level set to obtain an encryption channel classification link set.

[0037] Preferably, according to the different security levels of the electricity meter data, the data is divided into corresponding encryption channels, and these encryption channels are further refined and hierarchically managed. Due to different data security requirements, different channels may need to adopt different levels of encryption methods. Specifically, by grading the encryption management channels, the appropriate encryption method can be dynamically selected according to the security requirements of different data to ensure that sensitive data is adequately protected, while ordinary data can adopt encryption methods with lower resource consumption, and finally a set of encrypted channel hierarchical links is obtained. The encrypted channel hierarchical link means that in the encryption management channel, different data are managed through different transmission and processing links according to their security levels. The link classification can be understood as different data paths, and each path uses different encryption and security protection mechanisms.

[0038] Step S400 further includes step S410, hierarchically dividing the electricity meter data encryption management channel according to the electricity meter data security level set to obtain a hierarchical encryption channel set; step S420, performing management mechanism analysis on the collected record data set to determine the meter data management element information, the meter data management element information includes data transmission, data storage, data backup, and data authority access and modification; step S430, based on the meter data management element information, performing encryption management analysis on the hierarchical encryption channel set in turn to obtain a hierarchical channel element encryption management algorithm set; step S440, performing element node mapping configuration on the hierarchical encryption channel set based on the hierarchical channel element encryption management algorithm set to obtain the encrypted channel hierarchical link set.

[0039] Preferably, according to the different security levels of the electricity meter data, the encryption management channel is divided into multiple different levels of channels. For example, high-level data needs to be transmitted and stored through a strong encryption channel, while low-level data can be processed through a lightweight encryption channel to ensure a balance between data security and efficiency, thereby achieving targeted data protection. Then, the trust management mechanism of the electricity meter collection and recording data set is analyzed to determine the meter data management element information, including data transmission, data storage, data backup, and data permission access and modification. Specifically, data transmission, how the electricity meter data is transmitted between different nodes, whether it is securely encrypted, and whether the nodes in the transmission path are safe; data storage, how the data is stored locally or in a cloud server, whether encrypted storage is required, and how to ensure data integrity; data backup, data backup strategy, how to recover in the event of a failure or data loss, and how to ensure the security of the backup data; data permission access and modification, who has the authority to access and modify this data, how to control access rights, and how to record and prevent unauthorized modifications.

[0040] Preferably, according to the determined information of the meter data management elements, the hierarchical encryption channel is analyzed in detail, and the corresponding encryption management strategy is formulated. Specifically, the different levels of encryption channels are analyzed and processed in turn for each management element, and the encryption processing algorithms corresponding to the different levels of encryption channels, including data transmission, data storage, data backup, and data permission access and modification, are obtained, so as to obtain a set of hierarchical channel element encryption management algorithms. For example, for data transmission, a transport layer encryption algorithm (such as TLS, IPSec) is used, for data storage, a file-level encryption or database encryption algorithm is used, for data backup, an encryption backup strategy is used to ensure the security of backup data, and for permission access, encryption management is performed in combination with identity authentication and permission control mechanisms. Then, the corresponding hierarchical channels are mapped and configured with the hierarchical channel element encryption management algorithm set, that is, each data management element (such as transmission, storage, backup, and access rights) is mapped to a specific encryption channel, and the processing node of the encryption channel is determined. Finally, the set of encrypted channel hierarchical links is obtained, which is a refinement of the hierarchical encryption channel. Each link represents the encryption protection method of the entire process of data of different security levels from collection to transmission, storage, backup, and access. Different links will select different encryption strengths, transmission protocols, and storage methods according to the security level of the data.

[0041] Step S430 further includes step S431, constructing a data management element encryption processing algorithm list according to the meter data management element information, the data management element encryption processing algorithm list including a set of encryption processing algorithms corresponding to each meter data management element; step S432, performing encryption level assessment and algorithm application matching on the data management element encryption processing algorithm list based on the meter data management element information to obtain a set of encryption processing algorithms available for a hierarchical channel; step S433, performing meter data characteristic analysis on the hierarchical encryption channel set respectively to obtain hierarchical channel meter data characteristic information; step S434, performing optimization based on the hierarchical channel meter data characteristic information and the set of encryption processing algorithms available for the hierarchical channel to obtain a set of encryption management algorithms for hierarchical channel elements.

[0042] Preferably, a list of encryption processing algorithms for data management elements is constructed based on the information of meter data management elements. Each meter data management element will have a corresponding encryption processing algorithm, including a set of encryption processing algorithms corresponding to each meter data management element, such as data transmission using TLS, IPSec and other transmission encryption protocols, data storage using AES encryption, disk encryption, etc., data backup using encrypted backup methods (such as SSL encrypted transmission of backup data), data authority management using identity authentication, authority control mechanisms (such as RSA encryption, two-factor authentication, etc.). By constructing this list, the most suitable encryption processing algorithm can be assigned to different data management elements, thereby providing targeted protection for different links, and then the required encryption level is evaluated according to the security requirements of each meter data management element, and then each data management element is matched with a suitable encryption algorithm according to the encryption level, to ensure that each meter data management element selects the most suitable encryption algorithm according to its needs, thereby improving the effectiveness and efficiency of encryption.

[0043] Preferably, the meter data characteristic analysis is performed on the hierarchical encryption channel set, that is, the meter data is analyzed in detail to extract characteristic information related to the data, such as the type of data (such as real-time data, historical records), data flow, data transmission frequency, sensitivity, etc., so as to obtain the hierarchical channel meter data characteristic information, which can better understand the nature of the data in each encryption channel and be used to guide the application of encryption algorithms. For example, real-time data may require a faster encryption algorithm, while storage data may require a more complex encryption strategy. Finally, the optimization is performed based on the characteristics of the meter data and the determined encryption processing algorithm, that is, among the available encryption algorithms, the encryption algorithm that best suits the current data characteristics and security requirements is selected. For example, real-time data requires a faster encryption algorithm, and lightweight symmetric encryption may be preferred; for data that needs to be stored for a long time, a stronger encryption algorithm (such as asymmetric encryption) may be preferred. Finally, a hierarchical channel element encryption management algorithm set is obtained to determine which specific encryption algorithms to use for each encryption channel, including all encryption algorithms and their applicable encryption channels.

[0044] Step S500: construct a data security management channel mechanism based on the conventional management channel and the encrypted management channel of the electric energy meter data, and the encrypted channel hierarchical link set.

[0045] Preferably, by integrating conventional management channels, encryption management channels and encryption channel hierarchical link sets, a data security management channel mechanism is constructed, which includes data transmission, storage, backup, access control and other links, and provides the most suitable security management channel for each data type. Specifically, according to the security level of the data, the data is divided into low, medium and high levels. According to the classification of the data, a conventional management channel or an encryption management channel is selected. Low-security level data uses the conventional management channel, and medium- and high-security level data uses the encryption management channel. For the data entering the encryption management channel, a suitable encryption link is further selected, and the data is encrypted, transmitted and processed through the encryption method specified in the link set. In the entire data processing process, the confidentiality, integrity and availability of the data are guaranteed. For high-security level data, the system will take more stringent security measures, such as multi-layer encryption, access permission control, etc. By constructing a data security management channel mechanism, targeted security processing is provided for each type of data, ensuring the efficient use of system resources, while ensuring the security of data in transmission, storage and other links. By combining conventional management channels and encryption management channels, and through the refinement of hierarchical link sets, refined data management can be achieved.

[0046] Step S600: acquiring target electric energy meter data, triggering the data security management channel mechanism to perform branch mapping matching based on the target electric energy meter data, and obtaining an electric energy meter data security management result.

[0047] Preferably, the power data of the target electric energy meter is collected, and the data security management channel mechanism is triggered according to the electric energy meter data to perform branch mapping and matching, that is, according to the different types and security requirements of the electric energy meter data, the most suitable management channel or link is matched for processing. The data security management channel mechanism includes multiple branches, each branch handles different levels of security requirements and encryption methods. Specifically, it is determined whether to use a conventional management channel or an encrypted management channel according to the security level of the data. The data type (such as power consumption, equipment status, etc.) will be mapped to the corresponding encryption processing method, and finally the electric energy meter data security management result is output, which may include whether the data is encrypted, which encryption method is used, whether the security of data transmission is guaranteed, whether access rights are restricted, etc., to ensure that each electric energy meter data can be processed in a targeted and highly secure manner.

[0048] Step S600 further includes step S610, triggering the data security management channel mechanism to perform channel mapping matching based on the target electric energy meter data to obtain data matching branch channel information; step S620, associating the data processing volume of the data matching branch channel information to obtain the amount of data to be processed by the branch channel; step S630, performing balanced analysis and expansion on the data matching branch channel information based on the amount of data to be processed by the branch channel to obtain data target branch channel information; step S640, processing the target electric energy meter data based on the data target branch channel information to obtain the electric energy meter data security management result.

[0049] Preferably, after acquiring the target electric energy meter data, the security management channel mechanism is triggered, and the electric energy meter data is matched to a suitable management channel according to its type, sensitivity and security requirements, and the data matching branch channel information is obtained, including whether encryption is required, encryption level, data transmission path, etc., and then the data matching branch channel information is associated with the data processing volume, that is, the specific processing requirements of these data are analyzed, including the amount of data to be processed, data transmission frequency and data storage requirements, etc., and then the amount of data to be processed by the branch channel is obtained, that is, the total amount of electric energy meter data that needs to be processed through a certain branch channel. Each channel may process multiple data at the same time, so it is necessary to optimize the configuration according to the load and capacity of each channel, better plan the resource allocation of each channel, and ensure that the channel load is not too high or too low; then the data matching branch channel information is balanced according to the amount of data to be processed by the branch channel. Analysis Expand and optimize the resource allocation of each branch channel to ensure that different channels can reasonably distribute the load, avoid overloading of a certain channel or slow processing speed, improve the overall operation efficiency, and obtain the data target branch channel information, which is the result of the balanced analysis expansion, indicating that the data will be processed through the optimized channel to ensure the load balance of each channel, avoid performance bottlenecks, ensure the reasonable allocation of resources, and make the data processing process more efficient and stable; finally, the data target branch channel information is used to actually process the target electric energy meter data, including data encryption, transmission, storage and authority management, and then generate the electric energy meter data security management results, indicating that the data has been processed according to the predetermined security management mechanism, such as confirming whether the data has been encrypted, whether it is safely transmitted, whether the storage is appropriate, and whether the access rights are correctly set, to ensure the integrity, confidentiality and availability of the electric energy meter data.

[0050] Step S630 further includes step S631, performing a processing time analysis on the data matching branch channel information based on the amount of data to be processed in the branch channel to obtain branch channel processing time parameters; step S632, performing a difference comparison mark on the data matching branch channel information through the branch channel processing time parameters to determine the branch channel to be expanded and the channel time delay parameters; step S633, performing a computing resource balancing expansion on the branch channel to be expanded based on the channel time delay parameters to obtain extended additional channel information; step S634, obtaining the data target branch channel information based on the data matching branch channel information and the extended additional channel information.

[0051] Preferably, processing timeliness analysis refers to analyzing the processing capacity and timeliness of each branch channel according to the amount of data to be processed on the channel, determining the speed, delay and system response time of data processing in the channel, and obtaining the branch channel processing timeliness parameter through the timeliness analysis result, which quantifies the timeliness indicators such as time efficiency and delay of each channel when processing the current amount of data. For example, the delay of a branch channel in processing data may be relatively large, and the corresponding timeliness information is recorded. Then, the branch channel processing timeliness parameter is used to perform a difference comparison and marking of the data matching branch channel information to identify which channels have a processing efficiency lower than expected or a delay. During the comparison process, channels with low processing efficiency and large timeliness delay are marked as channels to be expanded. At the same time, the channel timeliness delay parameter is obtained, which quantifies the delay of channel processing, indicating the actual delay time of the channel when processing the current amount of data, which helps to further determine whether it is necessary to expand computing resources or allocate more channel processing capacity.

[0052] Preferably, computing resources are balanced and expanded for the branch channel to be expanded according to the channel aging delay parameter, that is, the remaining unused available computing resources are used for temporary channel additional expansion, and computing resources are dynamically adjusted to alleviate processing delays or overloaded channels. For example, more processing power is allocated to the channel, or part of the data tasks are allocated to other idle channels to ensure that the channel load is balanced, so as to obtain extended additional channel information, which is the result of balanced expansion. Additional computing resources or newly opened additional processing channels are added to the branch channel to be expanded, such as adding new processing nodes or balancing tasks to channels with less load, to ensure load balance of each channel, avoid overload of a single channel, and improve data processing efficiency; finally, the data matching branch channel information and the extended additional channel information are combined to obtain data target branch channel information, which is the optimized path ultimately used to process the electric energy meter data. After dynamic balanced expansion, these channels can process data more efficiently and reduce delays and overloads.

[0053] In the above, refer to Figure 1A method for securely managing electric energy meter data according to an embodiment of the present invention is described in detail. Figure 2 An electric energy meter data security management system according to an embodiment of the present invention is described.

[0054] According to an embodiment of the present invention, an electric energy meter data security management system is used to solve the technical problem that the existing electric energy meter data management cannot flexibly respond to the security management requirements of electric energy meter data in different scenarios, which leads to the low degree of refinement and insufficient efficiency of the management of electric energy meter security influencing factors, and achieves the technical effect of improving the efficiency, security and accuracy of electric energy meter data processing. An electric energy meter data security management system includes: a multi-dimensional security influencing factor extraction module 10, a multi-dimensional security level evaluation module 20, an electric energy meter data management channel construction module 30, an encrypted channel hierarchical link set acquisition module 40, a data security management channel mechanism construction module 50, and an electric energy meter data security management result acquisition module 60.

[0055] The multidimensional security influencing factor extraction module 10 is used to extract the multidimensional security influencing factors of the electric energy meter data security management requirements, obtain the multidimensional data security influencing factors, and design and obtain the data multidimensional security level evaluation rules based on the multidimensional data security influencing factors; the multidimensional security level evaluation module 20 is used to obtain the target electric energy meter collection and recording data set, perform multidimensional security level evaluation on the collection and recording data set according to the data multidimensional security level evaluation rules, and obtain the electric energy meter data security level set; the electric energy meter data management channel construction module 30 is used to set the security encryption level judgment benchmark based on the electric energy meter data security level set, and construct the electric energy meter data according to the security encryption level judgment benchmark. According to the conventional management channel and the electric energy meter data encryption management channel; the encryption channel hierarchical link set acquisition module 40 is used to classify the electric energy meter data encryption management channel according to the electric energy meter data security level set, and obtain the encryption channel hierarchical link set; the data security management channel mechanism construction module 50 is used to construct a data security management channel mechanism based on the electric energy meter data conventional management channel and the electric energy meter data encryption management channel, and the encryption channel hierarchical link set; the electric energy meter data security management result acquisition module 60 is used to obtain the target electric energy meter data, trigger the data security management channel mechanism based on the target electric energy meter data to perform branch mapping matching, and obtain the electric energy meter data security management result.

[0056] The specific configuration of the multidimensional security influencing factor extraction module 10 will be described in detail below. The multidimensional security influencing factor extraction module 10 further includes: assigning weights to each influencing factor in the multidimensional data security influencing factor in turn through the power expert group to obtain an initial multidimensional influencing factor weight set; generating an initial security influencing factor matrix set based on the initial multidimensional influencing factor weight set, wherein the behavioral influencing factor dimension of the security influencing factor matrix set is listed as the weight of the influencing factor of each dimension; performing deviation calculation fusion on the initial security influencing factor matrix based on the power expert group to obtain a security influencing factor reference matrix; using the weights of each factor in the security influencing factor reference matrix as a security level assessment coefficient, and the multidimensional data security influencing factor as a security level assessment indicator, and designing and obtaining the data multidimensional security level assessment rule.

[0057] The specific configuration of the multi-dimensional safety influencing factor extraction module 10 will be described in detail below. The multi-dimensional safety influencing factor extraction module 10 further includes: performing a mapping deviation calculation on each element in the initial safety influencing factor matrix set to obtain an influencing factor weight deviation parameter; the power expert group re-assigns factor weights based on the influencing factor weight deviation parameter until a preset deviation threshold is met to obtain an available safety influencing factor matrix set; performing an empirical evaluation on the power expert group to obtain an expert power experience set, and generating an empirical credible coefficient matrix based on the expert power experience set; performing a weighted calculation on the available safety influencing factor matrix set based on the empirical credible coefficient matrix to obtain the safety influencing factor reference matrix.

[0058] The specific configuration of the encrypted channel hierarchical link set acquisition module 40 will be described in detail below. The encrypted channel hierarchical link set acquisition module 40 may further include: hierarchically dividing the electric energy meter data encryption management channel according to the electric energy meter data security level set to obtain a hierarchical encrypted channel set; performing management mechanism analysis on the collected record data set to determine the meter data management element information, the meter data management element information includes data transmission, data storage, data backup, and data authority access and modification; performing encryption management analysis on the hierarchical encrypted channel set in turn based on the meter data management element information to obtain a hierarchical channel element encryption management algorithm set; performing element node mapping configuration on the hierarchical encrypted channel set based on the hierarchical channel element encryption management algorithm set to obtain the encrypted channel hierarchical link set.

[0059] The specific configuration of the encrypted channel hierarchical link set acquisition module 40 will be described in detail below. The encrypted channel hierarchical link set acquisition module 40 may further include: constructing a data management element encryption processing algorithm list according to the meter data management element information, the data management element encryption processing algorithm list including the encryption processing algorithm set corresponding to each meter data management element; performing encryption level evaluation and algorithm application matching on the data management element encryption processing algorithm list based on the meter data management element information to obtain the set of encryption processing algorithms available for the hierarchical channel; performing meter data characteristic analysis on the hierarchical encryption channel set respectively to obtain the hierarchical channel meter data characteristic information; performing optimization based on the hierarchical channel meter data characteristic information and the set of encryption processing algorithms available for the hierarchical channel to obtain the hierarchical channel element encryption management algorithm set.

[0060] The specific configuration of the electric energy meter data security management result acquisition module 60 will be described in detail below. The electric energy meter data security management result acquisition module 60 further includes: triggering the data security management channel mechanism to perform channel mapping matching based on the target electric energy meter data to obtain data matching branch channel information; associating the data processing volume of the data matching branch channel information to obtain the amount of data to be processed by the branch channel; performing balanced analysis and expansion on the data matching branch channel information based on the amount of data to be processed by the branch channel to obtain data target branch channel information; processing the target electric energy meter data based on the data target branch channel information to obtain the electric energy meter data security management result.

[0061] The specific configuration of the electric energy meter data security management result acquisition module 60 will be described in detail below. The electric energy meter data security management result acquisition module 60 further includes: performing a processing timeliness analysis on the data matching branch channel information based on the amount of data to be processed on the branch channel to obtain a branch channel processing timeliness parameter; performing a difference comparison mark on the data matching branch channel information through the branch channel processing timeliness parameter to determine the branch channel to be expanded and the channel timeliness delay parameter; performing a balanced expansion of computing resources on the branch channel to be expanded based on the channel timeliness delay parameter to obtain extended additional channel information; obtaining the data target branch channel information according to the data matching branch channel information and the extended additional channel information.

[0062] An electric energy meter data security management system provided in an embodiment of the present invention can execute an electric energy meter data security management method provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0063] Although the present application makes various references to certain modules in the system according to the embodiments of the present application, any number of different modules may be used and run on the user terminal and / or server, and the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0064] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A method for secure management of electric energy meter data, characterized in that: The method comprises: Extracting multi-dimensional security influencing factors from the data security management requirements of the electric energy meter to obtain the multi-dimensional data security influencing factors, and designing and obtaining data multi-dimensional security level assessment rules based on the multi-dimensional data security influencing factors; Acquire a collection record data set of a target electric energy meter, perform a multi-dimensional security level assessment on the collection record data set according to the multi-dimensional security level assessment rule of the data, and obtain a data security level set of the electric energy meter; Based on the electric energy meter data security level set, a security encryption level discrimination standard is set, and according to the security encryption level discrimination standard, a conventional management channel for electric energy meter data and an encryption management channel for electric energy meter data are constructed; Classifying the electric energy meter data encryption management channel according to the electric energy meter data security level set, and obtaining an encryption channel classification link set; Based on the conventional management channel of the electric energy meter data and the encrypted management channel of the electric energy meter data, and the hierarchical link set of the encrypted channel, a data security management channel mechanism is constructed; Acquire target electric energy meter data, trigger the data security management channel mechanism to perform branch mapping matching based on the target electric energy meter data, and obtain the electric energy meter data security management result; The design obtains data multi-dimensional security level assessment rules, including: The power expert group sequentially assigns weights to each of the multidimensional data security influencing factors to obtain an initial multidimensional influencing factor weight set; Generate an initial security influencing factor matrix set according to the initial multi-dimensional influencing factor weight set, wherein the behavioral influencing factor dimension of the security influencing factor matrix set is listed as the influencing factor weight of each dimension; Based on the electric power expert group, the initial safety influencing factor matrix is ​​subjected to deviation calculation fusion to obtain a safety influencing factor reference matrix; The weight of each factor in the security influencing factor reference matrix is ​​used as a security level assessment coefficient, and the multidimensional data security influencing factor is used as a security level assessment indicator to design and obtain the data multidimensional security level assessment rule; The obtaining of the safety influencing factor reference matrix includes: Performing mapping deviation calculation on each element in the initial safety influencing factor matrix set to obtain an influencing factor weight deviation parameter; The power expert group re-assigns the factor weights based on the influencing factor weight deviation parameter until a preset deviation threshold is met to obtain a set of available safety influencing factor matrices; Performing experience evaluation on the power expert group to obtain an expert power experience set, and generating an experience credibility coefficient matrix based on the expert power experience set; Performing weighted calculation on the available security influencing factor matrix set based on the empirical credibility coefficient matrix to obtain the security influencing factor reference matrix; The step of obtaining the encrypted channel hierarchical link set includes: hierarchically divide the electric energy meter data encryption management channel according to the electric energy meter data security level set to obtain a hierarchical encryption channel set; Performing management mechanism analysis on the collected record data set to determine meter data management element information, wherein the meter data management element information includes data transmission, data storage, data backup, and data authority access and modification; Based on the meter data management element information, encryption management analysis is performed on the hierarchical encryption channel set in sequence to obtain a hierarchical channel element encryption management algorithm set; Based on the hierarchical channel element encryption management algorithm set, element node mapping configuration is performed on the hierarchical encrypted channel set to obtain the encrypted channel hierarchical link set; The obtaining of the electric energy meter data security management result includes: Triggering the data security management channel mechanism to perform channel mapping matching based on the target electric energy meter data to obtain data matching branch channel information; Associating the data processing volume with the data matching branch channel information to obtain the data volume to be processed by the branch channel; Based on the amount of data to be processed in the branch channel, the data matching branch channel information is balanced analyzed and expanded to obtain data target branch channel information; The target electric energy meter data is processed based on the data target branch channel information to obtain the electric energy meter data security management result.

2. The method for secure management of electric energy meter data according to claim 1, characterized in that: The step of obtaining a set of hierarchical channel element encryption management algorithms includes: According to the meter data management element information, a data management element encryption processing algorithm list is constructed, wherein the data management element encryption processing algorithm list includes a set of encryption processing algorithms corresponding to each meter data management element; Based on the meter data management element information, encryption level evaluation and algorithm application matching are performed on the data management element encryption processing algorithm list to obtain a set of encryption processing algorithms available for hierarchical channels; Performing meter data characteristic analysis on the hierarchical encrypted channel sets respectively to obtain hierarchical channel meter data characteristic information; Based on the hierarchical channel electric meter data characteristic information and the hierarchical channel available encryption processing algorithm set, a hierarchical channel element encryption management algorithm set is obtained.

3. The method for secure management of electric energy meter data according to claim 1, characterized in that: The obtaining of data target branch channel information includes: Based on the amount of data to be processed in the branch channel, a processing timeliness analysis is performed on the data matching branch channel information to obtain a branch channel processing timeliness parameter; Performing a difference comparison mark on the data matching branch channel information through the branch channel processing aging parameter, and determining the branch channel to be expanded and the channel aging delay parameter; Based on the channel aging delay parameter, computing resource balancing expansion is performed on the branch channel to be expanded to obtain extended additional channel information; The data target branch channel information is obtained according to the data matching branch channel information and the extended additional channel information.

4. An electric energy meter data security management system, characterized in that: The system is used to implement the electric energy meter data security management method according to any one of claims 1 to 3, and the system comprises: A multidimensional security influencing factor extraction module is used to extract multidimensional security influencing factors for the data security management requirements of the electric energy meter, obtain multidimensional data security influencing factors, and design and obtain data multidimensional security level assessment rules based on the multidimensional data security influencing factors; A multi-dimensional security level assessment module is used to obtain a collection record data set of a target electric energy meter, perform a multi-dimensional security level assessment on the collection record data set according to the multi-dimensional security level assessment rule of the data, and obtain a data security level set of the electric energy meter; An electric energy meter data management channel construction module, used to set a security encryption level determination criterion based on the electric energy meter data security level set, and to construct an electric energy meter data conventional management channel and an electric energy meter data encryption management channel according to the security encryption level determination criterion; An encryption channel hierarchical link set acquisition module is used to classify the electric energy meter data encryption management channel according to the electric energy meter data security level set to acquire an encryption channel hierarchical link set; A data security management channel mechanism construction module, used to construct a data security management channel mechanism based on the conventional management channel of the electric energy meter data and the encryption management channel of the electric energy meter data, and the hierarchical link set of the encryption channel; The electric energy meter data security management result acquisition module is used to obtain target electric energy meter data, trigger the data security management channel mechanism based on the target electric energy meter data to perform branch mapping matching, and obtain the electric energy meter data security management result.

Images