Power distribution network automation communication module, master station and terminal encryption communication method

Abstract

The invention discloses a power distribution network automation communication module and a master station and terminal encryption communication method. The module comprises an MCU, a RedCap module and a security chip. The MCU is respectively in communication connection with the RedCap module and the security chip; the MCU is used for sending a request instruction, forwarding information and receiving data information; the RedCap module is in communication connection with a mobile communication network and is used for realizing 5G lightweight communication; and the security chip is used for encrypting data and decrypting a ciphertext by adopting a preset national cryptographic algorithm so as to realize key storage and management. The technical problems that an existing power distribution network automation scheme based on the 5G technology is high in complexity, large in power consumption and difficult to adapt to actual application scene requirements can be solved.

Description

Technical Field

[0001] The present application relates to the field of power distribution network communication technology, and in particular to a power distribution network automation communication module, a master station and a terminal encryption communication method. Background Art

[0002] Distribution automation is the basis for realizing smart distribution network. Smart distribution network relies on various electrical information collected by distribution automation system and realizes related advanced applications on this basis. Distribution automation is a modern information management system that integrates computer technology, data transmission, remote / automatic control technology, modern equipment and management. With the rapid development and widespread use of automation and intelligent technology, it has become an inevitable development trend of distribution network industry to apply it in the construction of distribution network to improve power supply quality, power supply reliability and user experience. Distribution network automation system generally includes: distribution master station, distribution substation, distribution remote terminal (FTU, DTU, TTU, etc.) and communication network. Among them, distribution terminal is the on-site monitoring and control equipment of distribution automation, and its reliability is crucial to distribution automation.

[0003] At present, distribution automation equipment is widely used. For the safe and stable operation of the power system, it is necessary to ensure the security and reliability of the power grid data acquisition and monitoring and control information transmission such as current and voltage, switch position, equipment status and control commands. The communication between the distribution automation terminal and the master station adopts the internationally accepted open protocol, lacks a security mechanism, and has a large security risk. Therefore, the distribution network now adopts the distribution network security protection terminal added to the distribution automation equipment end. The distribution network security protection terminal usually provides wireless / wired communication functions and security protection functions for the distribution automation equipment. Security protection functions include security authentication and encrypted communication.

[0004] Due to the large number of power distribution equipment and their wide distribution, it is inconvenient and costly to lay wired access cables, so many power distribution equipment use 2G / 3G / 4G mobile communication access. Since the power distribution business has high requirements for communication latency and reliability, and with the development of the power distribution business, the requirements for security, bandwidth, business isolation, etc. are also increasing, so 2G / 3G / 4G is gradually unable to adapt to the needs of the power distribution business, and 5G technology is gradually being introduced in the power distribution field. With the application of 5G technology in the power distribution field, the high complexity, high cost, large size and high power consumption of 5G terminals and modules have gradually become prominent, limiting the promotion of 5G technology in the power distribution field. Summary of the invention

[0005] The present application provides a distribution network automation communication module, a master station and a terminal encryption communication method, which are used to solve the technical problems that the existing distribution network automation solutions based on 5G technology have high complexity, high power consumption, and are difficult to adapt to the needs of actual application scenarios.

[0006] In view of this, the first aspect of the present application provides a distribution network automation communication module, including: an MCU, a RedCap module and a security chip;

[0007] The MCU is respectively connected to the RedCap module and the security chip for communication;

[0008] The MCU is used to send request instructions, forward information and receive data information;

[0009] The RedCap module is connected to the mobile communication network for realizing 5G lightweight communication;

[0010] The security chip is used to encrypt data and decrypt ciphertext using a preset national secret algorithm to achieve key storage and management.

[0011] Preferably, the RedCap module is connected to the distribution network automation master station through a mobile communication network;

[0012] The MCU is connected to a power distribution network automation terminal.

[0013] A second aspect of the present application provides a distribution network automation master station encryption communication method, which is implemented by using any distribution network automation communication module of the first aspect, including:

[0014] After the RedCap module dials up to the Internet successfully, a security chip generates signature encryption information, the signature encryption information including a first temporary key, a first random number, an identity ID and a module certificate;

[0015] Sending a key negotiation request to the distribution network automation master station according to the signature encryption information through the MCU and the RedCap module, and receiving a key negotiation response actively returned by the distribution network automation, wherein the key negotiation response includes a second temporary key and a second random number;

[0016] Decrypting the key negotiation response through a security chip, verifying the digital signature using a master station certificate, and generating a session key according to the first temporary key and the second temporary key;

[0017] Encrypted communication is achieved based on the session key.

[0018] Preferably, after the RedCap module dials up to the Internet successfully, the signature encryption information is generated by the security chip, including:

[0019] After the RedCap module dials up to the Internet successfully, the security chip generates a first temporary key, a first random number, an identity ID and a module certificate;

[0020] Using the first temporary key to symmetrically encrypt the identity ID, the first random number and the module certificate to obtain symmetrically encrypted information;

[0021] Asymmetrically encrypt the first temporary key using the public key of the master station certificate to obtain asymmetrically encrypted information;

[0022] The first temporary key, the first random number, the identity ID and the module certificate are digitally signed, and signature encryption information is generated by combining the symmetric encryption information and the asymmetric encryption information.

[0023] Preferably, after the RedCap module dials up to the Internet successfully, the security chip generates signature encryption information, and the method also includes:

[0024] Sending a dial request to the RedCap module via the MCU;

[0025] After the RedCap module receives the dial-up request, it sends a dial-up Internet access request to the mobile communication network;

[0026] After receiving the dial notification information, it is sent to the MCU.

[0027] Preferably, the sending of a key negotiation request to a distribution network automation master station through the MCU and the RedCap module according to the signature encryption information, and receiving a key negotiation response actively returned by the distribution network automation, further comprises:

[0028] After receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number;

[0029] The second random number is symmetrically encrypted using the second temporary key, and the second temporary key is asymmetrically encrypted using the public key of the module certificate to obtain master station encryption information;

[0030] After the second temporary key and the second random number are digitally signed, a key negotiation response is generated in combination with the master station encryption information.

[0031] Preferably, after receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number, including:

[0032] After receiving the key negotiation request, the distribution network automation master station decrypts the first random number, the identity ID and the module certificate from the key negotiation request using the first temporary key;

[0033] After verifying the module certificate and the digital signature, a second temporary key and a second random number are randomly generated.

[0034] Preferably, the key negotiation response is decrypted by a security chip, and the digital signature is verified using a master station certificate, and a session key is generated according to the first temporary key and the second temporary key, and the method also includes:

[0035] The master station certificate is configured in the distribution network automation master station by using a configuration tool.

[0036] A third aspect of the present application provides a method for encrypted communication between a distribution network automation terminal and a master station, which is implemented by using any one of the distribution network automation communication modules of the first aspect, and includes:

[0037] In response to a plaintext request from a distribution network automation terminal, the preset plaintext data is encrypted by a security chip using a session key to obtain encrypted data;

[0038] After packaging the encrypted data into an encrypted request message, the encrypted request message is sent to the distribution network automation master station through the RedCap module, and an encrypted response message returned by the distribution network automation master station is received;

[0039] Forwarding the data to be decrypted in the encrypted response message to the security chip through the RedCap module, and decrypting the data through the security chip to obtain plaintext response data;

[0040] The plain text response data is packaged into a plain text response message by the MCU and then sent to the distribution network automation terminal.

[0041] Preferably, in response to the plaintext request of the distribution network automation terminal, encrypting the preset plaintext data by using a session key through a security chip to obtain encrypted data includes:

[0042] Send a plain text request message to the MCU through the distribution network automation terminal;

[0043] The MCU sends the preset plaintext data to be encrypted in the plaintext request message to the security chip;

[0044] The preset plaintext data is encrypted by using a session key through a security chip to obtain encrypted data.

[0045] It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

[0046] In the present application, a distribution network automation communication module is provided, including: an MCU, a RedCap module and a security chip; the MCU is respectively connected to the RedCap module and the security chip for communication; the MCU is used to send request instructions, forward information and receive data information; the RedCap module is connected to the mobile communication network for communication to realize 5G lightweight communication; the security chip is used to encrypt data using a preset national secret algorithm, decrypt ciphertext, and realize key storage and management.

[0047] The present application provides a distribution network automation communication module, which uses a module composed of RedCap chips to replace the existing 4G / 5G communication module, and can provide 5G lightweight mobile communication for terminals or master stations; moreover, compared with 4G technology, it reduces communication delay and improves reliability and security; compared with 5G technology, it can reduce the complexity, size and power consumption of the terminal, and is more suitable for the application environment of the distribution network, which is conducive to the promotion and popularization of technical solutions. Therefore, the present application can solve the technical problems that the existing distribution network automation solutions based on 5G technology have high complexity, high power consumption, and are difficult to adapt to the needs of actual application scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A schematic diagram of the structure of a distribution network automation communication module provided in an embodiment of the present application;

[0049] Figure 2 A schematic diagram of the structure of the distribution network automation communication module provided in the embodiment of the present application being applied between the distribution network automation terminal and the master station;

[0050] Figure 3 A schematic diagram of a flow chart of a distribution network automation master station encryption communication method provided in an embodiment of the present application;

[0051] Figure 4 A schematic diagram of the encrypted communication interaction process of the distribution network automation master station provided in an embodiment of the present application;

[0052] Figure 5 A schematic diagram of a flow chart of a method for encrypted communication between a distribution network automation terminal and a master station provided in an embodiment of the present application;

[0053] Figure 6 A schematic diagram of the encrypted communication interaction process between the distribution network automation terminal and the master station provided in an embodiment of the present application. DETAILED DESCRIPTION

[0054] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0055] For easier understanding, see Figure 1 , an embodiment of a distribution network automation communication module provided in the present application includes: an MCU, a RedCap module and a security chip;

[0056] The MCU is connected to the RedCap module and the security chip respectively;

[0057] MCU is used to send request instructions, forward information and receive data information;

[0058] The RedCap module is connected to the mobile communication network to achieve 5G lightweight communication;

[0059] The security chip is used to encrypt data using a preset national secret algorithm, decrypt ciphertext, and implement key storage and management.

[0060] Further, the RedCap module is connected to the distribution network automation master station through a mobile communication network;

[0061] The MCU is connected to the distribution network automation terminal.

[0062] Please note that Figure 1 , in addition to the MCU, RedCap module and security chip, it also includes the necessary power supply, SIM card and antenna of the system; and the MCU also needs the necessary internal and external network interfaces, serial ports and debug ports, and the RedCap module needs to set up an antenna interface, etc. Among them, the MCU is the main control unit and the main processor, which is responsible for the implementation of the overall logic of the distribution network security communication module, the coordination and management of software and hardware resources. The Redcap module is a 5G lightweight communication module that realizes light 5G mobile communication. The security chip provides encryption and decryption, key storage and management functions based on the national secret algorithm. The SIM card is used for mobile network dial-up access. Antenna interface: connect to the antenna. The internal network port can support the access of the distribution network automation terminal and upload data. The external network port can be connected to the uplink network, and the distribution network security communication module can also be connected to the main station through the wired network. In addition, the distribution network automation terminal can be accessed through the serial port and upload data. The debug port is used for equipment debugging.

[0063] See also Figure 2The distribution network automation communication module in this embodiment is located between the terminal and the master station in the distribution network, and is used to achieve fast encrypted communication with security and reliability. Specifically, after the distribution network automation communication module is turned on, a dial-up request is initiated, the mobile network is accessed, the mobile network is assigned an IP, and the IP is assigned to the distribution network automation terminal. The distribution network automation communication module initiates key negotiation to the master station to establish a secure communication tunnel, wherein key generation, key storage, data encryption, data decryption, digital signature generation, digital signature verification and other operations are completed by the security chip. When the master station sends data to the distribution network automation terminal, the distribution network automation communication module receives the encrypted data sent by the master station through the Redcap module, decrypts the encrypted data through the security chip, and sends the plaintext data to the distribution network automation terminal through the serial port or the intranet port for corresponding business processing. When the distribution network automation terminal sends data to the master station, the distribution network automation communication module receives the plaintext data sent from the serial port or the intranet port by the distribution network automation terminal, encrypts the data, and sends it to the master station through the Redcap module, and the master station decrypts the data and performs corresponding business processing.

[0064] The embodiment of the present application provides a distribution network automation communication module, which uses a module composed of RedCap chips to replace the existing 4G / 5G communication module, and can provide 5G lightweight mobile communication for terminals or master stations; moreover, compared with 4G technology, it reduces communication delay and improves reliability and security; compared with 5G technology, it can reduce the complexity, size and power consumption of the terminal, and is more suitable for the application environment of the distribution network, which is conducive to the promotion and popularization of technical solutions. Therefore, the embodiment of the present application can solve the technical problems that the existing distribution network automation solutions based on 5G technology have high complexity, high power consumption, etc., and are difficult to adapt to the needs of actual application scenarios.

[0065] For easier understanding, see Figure 3 The present application provides an embodiment of a distribution network automation master station encryption communication method, which is implemented by using any one of the distribution network automation communication modules in the above module embodiments, including:

[0066] Step 201: after the RedCap module dials up to the Internet successfully, a security chip generates signature encryption information, the signature encryption information includes a first temporary key, a first random number, an identity ID and a module certificate;

[0067] Step 202: Send a key negotiation request to the distribution network automation master station through the MCU and the RedCap module according to the signature encryption information, and receive a key negotiation response actively returned by the distribution network automation, where the key negotiation response includes a second temporary key and a second random number;

[0068] Step 203: decrypt the key negotiation response through the security chip, verify the digital signature using the master station certificate, and generate a session key based on the first temporary key and the second temporary key;

[0069] Step 204: Implement encrypted communication based on the session key.

[0070] Furthermore, step 201 includes:

[0071] After the RedCap module dials up to the Internet successfully, the security chip generates a first temporary key, a first random number, an identity ID and a module certificate;

[0072] Using the first temporary key to symmetrically encrypt the identity ID, the first random number and the module certificate to obtain symmetrically encrypted information;

[0073] Asymmetrically encrypt the first temporary key using the public key of the master station certificate to obtain asymmetrically encrypted information;

[0074] The first temporary key, the first random number, the identity ID and the module certificate are digitally signed, and the signature encryption information is generated by combining the symmetric encryption information and the asymmetric encryption information.

[0075] Furthermore, step 201, before that, also includes:

[0076] Send a dial request to the RedCap module via the MCU;

[0077] After receiving the dial-up request, the RedCap module sends a dial-up Internet access request to the mobile communication network;

[0078] After receiving the dial notification information, it is sent to the MCU.

[0079] Furthermore, step 202 further includes:

[0080] After receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number;

[0081] The second random number is symmetrically encrypted using the second temporary key, and the second temporary key is asymmetrically encrypted using the public key of the module certificate to obtain the master station encryption information;

[0082] After the second temporary key and the second random number are digitally signed, a key negotiation response is generated in combination with the master station encryption information.

[0083] Further, after receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number, including:

[0084] After receiving the key negotiation request, the distribution network automation master station decrypts the first random number, the identity ID and the module certificate from the key negotiation request using the first temporary key;

[0085] After verifying the module certificate and the digital signature, a second temporary key and a second random number are randomly generated.

[0086] Furthermore, step 203, before that, also includes:

[0087] Use the configuration tool to configure the master certificate in the distribution network automation master.

[0088] It should be noted that before the encrypted communication interaction, the master station certificate can be configured for the distribution network automation master station for subsequent use; the same preparation that needs to be made before the interaction is to generate a key pair of public key and private key, export the public key to the certificate center to issue a digital certificate for the distribution network automation communication module, and then import it into the module.

[0089] For details, please refer to Figure 4 Before encrypted communication, the MCU in the distribution network automation communication module needs to send a dial-up Internet access instruction to the Redcap module; then the Redcap module sends a dial-up Internet access request to the mobile communication network and waits for the mobile communication network to reply with a dial-up success message, and the Redcap module returns this information to the MCU; thus completing the dial-up Internet access.

[0090] After dialing up to the Internet successfully, encrypted communication interaction can be carried out. During this process, the security chip in the distribution network automation communication module can generate the key information required for encrypted communication, namely the first temporary key, the first random number, the identity ID and the module certificate; at the same time, the first temporary key will be directly used to symmetric encrypt the identity ID, the first random number and the module certificate, and the first temporary key will be asymmetrically encrypted using the public key of the pre-configured master station certificate; and the generated signature encryption information can be sent to the MCU in the communication module after the digital signature operation is performed on all the above information, and then forwarded to the RedCap module through the MCU; it can be understood that the signature encryption information in the forwarding process is sent in the form of a key negotiation request. The RedCap module can cooperate with the mobile communication network to realize lightweight 5G communication and send the key negotiation request to the distribution network automation master station.

[0091] After receiving the key negotiation request, the distribution network automation master station will use the master station private key to decrypt it, and obtain the first module certificate and digital signature; then randomly generate a second temporary key and a second random number; and use the second temporary key to symmetric encrypt the second random number, and use the public key of the communication module certificate to asymmetric encrypt the second temporary key; similarly, after digital signing, the key negotiation response information can be obtained and returned to the RedCap module.

[0092] After receiving the key negotiation response, the RedCap module will forward it to the security chip through the MCU, and the security chip will use the module private key for decryption analysis; after decryption, digital signature verification is mainly required. If the verification passes, a session key can be generated based on the first temporary key and the second temporary key for subsequent encrypted communications.

[0093] For easier understanding, see Figure 5 The present application also provides an embodiment of a method for encrypted communication between a distribution network automation terminal and a master station, which is implemented by using any one of the distribution network automation communication modules in the above module embodiments, including:

[0094] Step 301: In response to a plaintext request from a distribution network automation terminal, a security chip is used to encrypt preset plaintext data using a session key to obtain encrypted data;

[0095] Step 302: After the encrypted data is packaged into an encrypted request message, the encrypted request message is sent to the distribution network automation master station through the RedCap module, and an encrypted response message returned by the distribution network automation master station is received;

[0096] Step 303: forward the data to be decrypted in the encrypted response message to the security chip through the RedCap module, and decrypt the data through the security chip to obtain the plaintext response data;

[0097] Step 304: The MCU packages the plain text response data into a plain text response message and sends it to the distribution network automation terminal.

[0098] Further, step 301 includes:

[0099] Send a plain text request message to the MCU through the distribution network automation terminal;

[0100] The MCU sends the preset plaintext data to be encrypted in the plaintext request message to the security chip;

[0101] The preset plaintext data is encrypted by using a session key through a security chip to obtain encrypted data.

[0102] Please note that Figure 6, the distribution network automation terminal can send a plaintext request message to the MCU in the distribution network automation communication module; the distribution network automation communication module will send the plaintext data to be encrypted to the security chip according to the received request message, triggering the security chip to encrypt the preset plaintext data through the session key to generate encrypted data. After the encrypted data is packaged into an encrypted request message by the MCU, it is forwarded to the RedCap module; the encrypted request message is forwarded to the distribution network automation master station through the RedCap module, and the encrypted response message returned by the distribution network automation master station is received to realize lightweight 5G communication. The RedCap module will convert the encrypted response message into the data to be decrypted through the MCU and send it to the security chip, which will decrypt it and generate plaintext response data. The MCU will obtain the plaintext response data, package it into a plaintext response message, and return it to the distribution network automation terminal.

[0103] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0104] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0105] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0106] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions for executing all or part of the steps of the method described in each embodiment of the present application through a computer device (which can be a personal computer, server, or network device, etc.). The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (full name in English: Read-Only Memory, English abbreviation: ROM), random access memory (full name in English: Random Access Memory, English abbreviation: RAM), disk or optical disk and other media that can store program codes.

[0107] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A distribution network automation communication module, characterized in that: include: MCU, RedCap module and security chip; The MCU is respectively connected to the RedCap module and the security chip for communication; The MCU is used to send request instructions, forward information and receive data information; The RedCap module is connected to the mobile communication network for realizing 5G lightweight communication; The security chip is used to encrypt data and decrypt ciphertext using a preset national secret algorithm to achieve key storage and management.

2. The distribution network automation communication module according to claim 1, characterized in that: The RedCap module is connected to the distribution network automation master station through a mobile communication network; The MCU is connected to a power distribution network automation terminal.

3. A distribution network automation master station encryption communication method, implemented by using any one of the distribution network automation communication modules in claims 1-2, characterized in that: include: After the RedCap module dials up to the Internet successfully, a security chip generates signature encryption information, wherein the signature encryption information includes a first temporary key, a first random number, an identity ID and a module certificate; Sending a key negotiation request to the distribution network automation master station according to the signature encryption information through the MCU and the RedCap module, and receiving a key negotiation response actively returned by the distribution network automation, wherein the key negotiation response includes a second temporary key and a second random number; Decrypting the key negotiation response through a security chip, verifying the digital signature using a master station certificate, and generating a session key according to the first temporary key and the second temporary key; Encrypted communication is achieved based on the session key.

4. The distribution network automation master station encryption communication method according to claim 3, characterized in that: After the RedCap module dials up to the Internet successfully, the security chip generates signature encryption information, including: After the RedCap module dials up to the Internet successfully, the security chip generates a first temporary key, a first random number, an identity ID and a module certificate; Using the first temporary key to symmetrically encrypt the identity ID, the first random number and the module certificate to obtain symmetrically encrypted information; Asymmetrically encrypt the first temporary key using the public key of the master station certificate to obtain asymmetrically encrypted information; The first temporary key, the first random number, the identity ID and the module certificate are digitally signed, and signature encryption information is generated by combining the symmetric encryption information and the asymmetric encryption information.

5. The distribution network automation master station encryption communication method according to claim 3, characterized in that: After the RedCap module dials up to the Internet successfully, the security chip generates signature encryption information, which also includes: Sending a dial request to the RedCap module via the MCU; After the RedCap module receives the dial-up request, it sends a dial-up Internet access request to the mobile communication network; After receiving the dial notification information, it is sent to the MCU.

6. The distribution network automation master station encryption communication method according to claim 3, characterized in that: The method of sending a key negotiation request to the distribution network automation master station according to the signature encryption information through the MCU and the RedCap module, and receiving a key negotiation response actively returned by the distribution network automation, further includes: After receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number; The second random number is symmetrically encrypted using the second temporary key, and the second temporary key is asymmetrically encrypted using the public key of the module certificate to obtain master station encryption information; After the second temporary key and the second random number are digitally signed, a key negotiation response is generated in combination with the master station encryption information.

7. The distribution network automation master station encryption communication method according to claim 6, characterized in that: After receiving the key negotiation request, the distribution network automation master station decrypts the key negotiation request and randomly generates a second temporary key and a second random number, including: After receiving the key negotiation request, the distribution network automation master station decrypts the first random number, the identity ID and the module certificate from the key negotiation request using the first temporary key; After verifying the module certificate and the digital signature, a second temporary key and a second random number are randomly generated.

8. The distribution network automation master station encryption communication method according to claim 3, characterized in that: The step of decrypting the key negotiation response by the security chip, verifying the digital signature by using the master station certificate, and generating a session key according to the first temporary key and the second temporary key further includes: The master station certificate is configured in the distribution network automation master station by using a configuration tool.

9. A method for encrypted communication between a distribution network automation terminal and a master station, implemented by using any one of the distribution network automation communication modules in claims 1-2, characterized in that: include: In response to a plaintext request from a distribution network automation terminal, the preset plaintext data is encrypted by a security chip using a session key to obtain encrypted data; After packaging the encrypted data into an encrypted request message, the encrypted request message is sent to the distribution network automation master station through the RedCap module, and an encrypted response message returned by the distribution network automation master station is received; Forwarding the data to be decrypted in the encrypted response message to the security chip through the RedCap module, and decrypting the data through the security chip to obtain plaintext response data; The plain text response data is packaged into a plain text response message by the MCU and then sent to the distribution network automation terminal.

10. The method for encrypted communication between a distribution network automation terminal and a master station according to claim 9, characterized in that: The method of responding to the plaintext request of the distribution network automation terminal, encrypting the preset plaintext data by using the session key through the security chip to obtain the encrypted data, includes: Send a plain text request message to the MCU through the distribution network automation terminal; The MCU sends the preset plaintext data to be encrypted in the plaintext request message to the security chip; The preset plaintext data is encrypted by using a session key through a security chip to obtain encrypted data.

Images