Electric power data storage system and method based on cloud computing

Abstract

The invention relates to an electric power data storage system and method based on cloud computing. The method comprises the steps of 1, preprocessing electric power data; 2, a user who joins in the node equipment needs to register and log in the node equipment; step 3, power data encryption processing; and step 4, data storage. The node devices are used as a ring closest to the data source, the adjacent node devices in a certain area are connected through the information channels to form the node storage system, part of data is calculated and locally stored through the node devices, low-delay message response of a terminal user can be achieved, and the user experience is improved. In addition, anonymous identity verification can be realized while data integrity and authenticity are ensured, distributed storage of sub-keys is realized by using a tamper-proof block chain, a single-point fault problem and heavy key management are avoided, the encryption signature proxy server performs homomorphic encryption on the data, and data security is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of power data processing, and in particular to a power data storage system and method based on cloud computing. Background Art

[0002] With the rapid development of the power Internet of Things in recent years, the number of terminal devices in the power grid has increased rapidly, which has also led to a significant increase in the amount of data generated by the power grid. Accurate processing of information is the basis for flexible supply and demand interaction. With the increase in information volume and the decentralization of information sources, it has become increasingly complex and difficult to effectively realize supply and demand interaction. At present, cloud computing is the main method for processing power system data. Cloud computing integrates computing devices through cloud platforms to form a cloud computing resource pool. Users upload data to the cloud and store it. After the cloud completes the calculation, the data is returned to the user side. However, with the continuous increase in terminal devices, the scale and complexity of data continue to rise. The data processing and decision-making capabilities of cloud computing have been greatly challenged. The shortcomings of cloud computing such as insufficient scalability and extended response time are also increasingly exposed, which seriously affects the processing and storage efficiency of power data. Using node devices to calculate power data is a new technology, but because the data received by the node devices contains a large number of generators, key equipment, user privacy, and confidential data, the leakage of these data will cause huge security threats. Node devices do not have the information protection capabilities of cloud computing platforms. Therefore, node devices are currently a key target of information attacks, which brings huge challenges to the information protection capabilities of node devices. Therefore, there is an urgent need for a new power data storage system and method based on cloud computing, in order to effectively improve the timeliness of the system, reduce the computing workload of the cloud platform, and ensure the security of power data. Summary of the invention

[0003] 1. Technical issues to be solved

[0004] Based on the technical problems existing in the above-mentioned prior art that the traditional cloud computing method is difficult to adapt to massive power data, the storage and call delay of power data is high, the calculation amount is large, and the data security is poor, the present invention proposes a power data storage system and method based on cloud computing, which improves the scalability and data throughput of cloud computing storage of power data, has better timeliness and convenience for the storage of power data, and can reduce the calculation amount of the cloud platform and ensure the security of power data.

[0005] (II) Technical solution

[0006] The present invention provides the following technical solution: a method for storing power data, comprising:

[0007] Step 1: Power data preprocessing: Power data preprocessing mainly involves encrypting the power data uploaded from the power supply and power consumption terminal layer to the node device layer, and then uploading the processed data to the cloud for calculation;

[0008] Step 2: Users who want to join the node device need to register and log in to the node device;

[0009] Step 3: Power data encryption processing. After the node device layer receives a set of subkeys submitted by the terminal device, it will first verify the signature of each subkey. After the signature verification is passed, the encryption signature proxy server will use its own symmetric encryption key to decrypt the ciphertext. Only when the number of subkeys exceeds the preset threshold can the complete signature private key be restored. Before the power data is uploaded to the node device for processing, the encryption signature proxy server will homomorphically encrypt the power data. The encryption signature proxy server uses the restored signature private key to sign the power data. After the node device receives the ciphertext data sent by the proxy server, it processes the ciphertext.

[0010] In step 4, the node device will immediately send the processed data to the terminal. The terminal can better understand the operating status of the terminal based on these power data. The node device layer will decrypt the private data and upload it to the cloud platform layer. The cloud platform layer will classify and analyze the data to form statistical data, which will be stored in the cloud platform layer.

[0011] Furthermore, in step one, the node device mainly includes a key generator and an encryption proxy server. The key generator is responsible for distributing subkeys within the management domain. After the key generator divides the signature private key into several subkeys, it submits the encrypted subkeys to the consensus node for storage in different blocks of the blockchain, and submits the unencrypted signature private key to the encryption signature proxy server; in order to ensure the integrity and authenticity of the data generated by the node device and prevent the semi-trusted edge node from leaking the user's privacy when processing the user data, the encryption signature proxy server will perform homomorphic encryption and proxy signing on the data before sending it to the cloud platform layer to ensure the integrity of the data. At the same time, the user's privacy will not be leaked during the data processing stage.

[0012] Furthermore, the key generator generates a signature public key and a signature private key. The signature private key is used to sign the power data, while the signature public key is open to the outside world. Any user can use the public key to verify the integrity and authenticity of the power data; the key generator divides the signature private key into b sub-keys, at least k of which are required to restore the complete private key. After the key generator encrypts the sub-key with its own symmetric encryption key, it sends the ciphertext to the blockchain layer and stores the b sub-keys in different blocks.

[0013] Furthermore, the step 1 comprises:

[0014] Step S1.1, the key generator generates a signature public key and a signature private key. The key generator randomly selects two unequal prime numbers h and q, calculates n = h × q, and sets an Euler function: φ(n) = (h-1) * (q-1), randomly selects an integer e that is prime to φ(n) in the interval [1, φ(n)], and finds an integer d that satisfies (exd) mod φ(n) = 1. Finally, according to the above calculation, the public key PK = {n, e} and the private key SK = {n, d};

[0015] Step S1.2, homomorphic encryption key pair generation, the key generator randomly selects two prime numbers p1 and q1, calculates n1 = p1 × q1 and λ = lcm(p1-1, q1-1), lcm represents the least common multiple to be solved, and the key generator randomly selects The integer g, gcd represents the greatest common divisor to be solved. According to the above formula, PK u ={n1,g}.SK u ={λ};

[0016] Step S1.3, the key generator divides its birthday signature private key SK = {n, d} into multiple sub-keys. The key generator randomly selects k-1 random numbers a1...a k-1 , let a0=SK, construct the polynomial as follows: f(x)=a0+a1x+a2x 2 +......a k-1 x k-1 , take any number b x1…x b Substitute them into the polynomial to get f(x1)...f(xb), and the key generator can obtain b sub-keys m1=(x1,f(x1))...m b =(x b ,f(x b )), the key generator uses the symmetric key to generate each message according to formula C m1 =E Kpkc (m i ),i∈[1,b] to encrypt, and obtain the ciphertext set Dat={C m1 ......C mb}.

[0017] Step S1.4, the key generator first uses the algorithm to generate a complete signature δ for the ciphertext set After completing the signature, the key generator obtains the complete signature key generator of the ciphertext set Dat, and then the key generator encrypts the ciphertext set Dat using its own symmetric encryption key K and uses the public key PK of the proxy server EThe symmetric key K of the encryption key generator is then used to encrypt the encrypted information set. The encrypted information set is then sent to the encryption proxy server. After receiving the encrypted information set Set, the encryption proxy server will first use its own private key SK E To decrypt K K , and further obtain Dat = {C m1 ......C mb ,δ Dat}, the encryption proxy server will ensure the integrity and authenticity of the subkey by verifying the correctness of the complete signature.

[0018] Furthermore, in step 2, the key generator will maintain an identity authentication library to ensure that every user is a legitimate user. In order to achieve anonymous identity authentication, only users who meet the pre-set access control permissions can request the blockchain to obtain the ciphertext of the subkey.

[0019] A power data storage system, the power data storage system comprising: a cloud platform layer, a blockchain layer, a node device layer, and a power supply and power consumption terminal layer, the cloud platform layer comprising a cloud computing center, a cloud data center, and a resource pool, and the node device layer comprising a key generator and an encryption proxy server.

[0020] Furthermore, the node device layer includes smart meters, smart cameras, smart collectors, and drones.

[0021] (III) Beneficial effects

[0022] Compared with the prior art, the present invention utilizes node devices as the link closest to the data source. Node devices receive massive amounts of data generated in real time by the power system all the time. By connecting adjacent node devices in a certain area through information paths, a node storage system is formed. Node devices are used to calculate and store part of the data locally, which can achieve low-latency message response for terminal users. It can also achieve anonymous identity authentication while ensuring data integrity and authenticity. The tamper-proof blockchain is used to achieve distributed storage of subkeys, avoiding single point failure problems and cumbersome key management. The encrypted signature proxy server will perform homomorphic encryption on the data to ensure data security. Therefore, the present invention can effectively improve the timeliness of the system, reduce the amount of calculation of the cloud platform, and ensure the security of power data. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 This is a flow chart of the power data storage method in the present invention;

[0024] Figure 2 This is a flow chart of power data encryption in the present invention. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0026] In the description of the present invention, it should be understood that the terms "center", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside" and "outside" etc., indicating directions or positional relationships, are based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore should not be understood as a limitation on the present invention.

[0027] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a direct connection, or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0028] The present invention proposes a power data storage system and method based on cloud computing. The power data storage system consists of four layers, namely, a cloud platform layer, a blockchain layer, a node device layer, and a power supply and power consumption terminal layer. The cloud platform layer includes a cloud computing center, a cloud data center, and a resource pool. The cloud platform layer manages global information. As the top layer of the entire storage system, it has the advantages of strong computing power, large storage space, and a wide control range. It is responsible for allocating resources of each device in the node device layer and coordinating with the node devices to solve some complex data processing problems, wherein the cloud computing center is configured with computing resources. The cloud platform layer communicates data with the node device layer. The node device layer includes node devices with data processing application functions such as smart meters, smart cameras, smart collectors, and drones. Such node devices play the roles of edge computing, edge gateways, and edge servers, and integrate a series of data processing applications and communication functions, and can provide a variety of data computing services and power data storage services locally. The power supply and power consumption terminal layer includes photovoltaic power stations, electric vehicles, wind power stations, etc. The terminal layer generates power data and uploads the power data to the node device layer for processing, and is also used to execute commands issued by the node device layer and the cloud platform layer.

[0029] Based on the above-mentioned power data storage system, the present invention also proposes a power data storage method. Figure 1 , 2 As shown, the power data storage method adopts the following steps:

[0030] Step 1: Power data preprocessing

[0031] Power data preprocessing mainly involves encrypting and fusing the power data uploaded from the power supply and power consumption terminal layer to the node device layer, and then uploading the fused data that does not contain privacy information to the cloud for calculation. Some highly sensitive data can also be calculated and stored locally at the node device layer.

[0032] Among them, the node device mainly includes a key generator and an encryption proxy server. The key generator is responsible for the distribution of sub-keys within the management domain. Specifically, the key generator has the signature private key of the domain. After the key generator divides the signature private key into several sub-keys, it submits the encrypted sub-keys to the consensus node for storage in different blocks of the blockchain, and submits the unencrypted signature private key to the encryption signature proxy server; in order to ensure the integrity and authenticity of the data generated by the node device, and prevent the semi-trusted edge node from leaking the user's privacy when processing user data, the encryption signature proxy server will perform homomorphic encryption and proxy signing on the data before sending it to the cloud platform layer to ensure the integrity of the data, and at the same time, the user's privacy will not be leaked during the data processing stage.

[0033] In this step, the node device layer takes the following main steps: the key generator generates a signature public key and a signature private key. The signature private key is used to sign the power data, while the signature public key is open to the outside world. Any user can use the public key to verify the integrity and authenticity of the power data.

[0034] The key generator divides the signature private key into b sub-keys, at least k of which are needed to recover the complete private key. After the key generator encrypts the sub-key with its own symmetric encryption key, it sends the ciphertext to the blockchain layer and stores the b sub-keys in different blocks.

[0035] Step S1.1, the key generator generates a signature public key and a signature private key. The key generator randomly selects two unequal prime numbers h and q, calculates n = h × q, and sets an Euler function: φ(n) = (h-1) * (q-1). Randomly select an integer e that is prime to φ(n) in the interval [1, φ(n)], and find an integer d that satisfies (exd) mod φ(n) = 1. Finally, according to the above calculation, the public key PK = {n, e} and the private key SK = {n, d}.

[0036] Step S1.2, homomorphic encryption key pair generation, the key generator randomly selects two prime numbers p1 and q1, calculates n1 = p1 × q1 and λ = lcm(p1-1, q1-1), lcm represents the least common multiple to be solved, and the key generator randomly selects The integer g, gcd represents the greatest common divisor to be solved. According to the above formula, PK u ={n1,g}.SK u ={λ}.

[0037] Step S1.3, the key generator divides its birthday signature private key SK = {n, d} into multiple sub-keys. The key generator randomly selects k-1 random numbers a1...a k-1 , let a0=SK, construct the polynomial as follows: f(x)=a0+a1x+a2x 2 +......a k-1 x k-1 , take any number b x1…x b Substitute them into the polynomial to get f(x1)...f(xb), and the key generator can obtain b sub-keys m1=(x1,f(x1))...m b =(x b ,f(x b )), the key generator uses the symmetric key to generate each message according to formula C m1 =E Kpkc (m i ),i∈[1,b] to encrypt, and obtain the ciphertext set Dat={C m1 ......C mb}.

[0038] Step S1.4, the key generator first uses the algorithm to generate a complete signature δ for the ciphertext set After completing the signature, the key generator obtains the complete signature key generator of the ciphertext set Dat. Then, the key generator encrypts the ciphertext set Dat using its own symmetric encryption key K and uses the public key PK of the proxy server. E The symmetric key K of the encryption key generator is then used to encrypt the encrypted information set. The encrypted information set is then sent to the encryption proxy server. After receiving the encrypted information set Set, the encryption proxy server will first use its own private key SK E To decrypt K K , and further obtain Dat = {C m1 ......C mb ,δ Dat The encryption proxy server will ensure the integrity and authenticity of the subkey by verifying the correctness of the complete signature.

[0039] After the complete signature verification is successful, since the encryption proxy server needs to store each subkey in a different block of the blockchain, it will then generate a signature for each subkey according to the signature extraction algorithm. The encryption proxy server can generate a signature for each encrypted subkey C mi Generate the corresponding extraction signature δ mi The encryption proxy server stores each subkey and its signature in different blocks of the blockchain.

[0040] Step 2: Users who want to join the node device need to register and log in to the node device. The key generator will maintain an identity authentication library to ensure that each user is a legitimate user. In order to achieve anonymous identity authentication, only users who meet the pre-set access control permissions can request the blockchain to obtain the ciphertext of the subkey. In order to achieve their own anonymous identity authentication, each user can randomly apply to the blockchain for the ciphertext of the node device's subkey. To recover the complete signature private key, the user needs to make a request to the blockchain to obtain at least k of the subkeys.

[0041] Since the subkeys stored in the blockchain are encrypted, users cannot recover the complete signature private key to sign by simply obtaining the subkey. This mechanism can prevent collusion attacks to a certain extent. Users only need to convert the subkey set Dat = {Cm1…, Cm k}, the user's public key, and the collected data are submitted to the encryption proxy server, which decrypts and restores the complete signature private key to implement the proxy signature. Since the verification data only needs the public key of the key generator, the user's identity information will not be revealed, so anonymous identity authentication can be achieved. Whether it is applying for a key operation or submitting a key to implement a proxy signature operation, it will be recorded to form a corresponding operation log. When a malicious user is found to have violated the corresponding operation, it will be tracked.

[0042] Step 3: After the encrypted signature proxy server receives a set of subkeys submitted by the terminal device, it will first verify the signature of each subkey. After the signature verification is passed, the encrypted signature proxy server will use its own symmetric encryption key to decrypt the ciphertext. Only when the number of subkeys exceeds the preset threshold can the complete signature private key be restored. Before the power data is uploaded to the node device for processing, the encrypted signature proxy server will homomorphically encrypt the power data. The encrypted signature proxy server uses the restored signature private key to sign the power data. After the node device receives the ciphertext data sent by the proxy server, it will process the ciphertext in a timely manner, thereby ensuring the timeliness of the power data processing.

[0043] Step 4: Storage of power data. The node device will immediately send the processed timely data to the terminal, and the terminal can better understand the operation status of the terminal based on these power data. The node device layer will decrypt the private data and upload it to the cloud platform layer. The cloud platform layer will classify and analyze the data to form statistical data, which will be stored in the cloud platform layer.

[0044] After the statistical data is stored in the cloud, the shared data set will be returned to the user. The user will submit the received shared data and subkey ciphertext to the encryption signature proxy server. The encryption signature proxy server first decrypts and recovers the complete signature private key based on the subkey, and then uses the signature private key to sign the storage address of the cloud statistical data to generate a signature. The encryption signature proxy server will submit the signature index to the consensus node. If more than 50% of the consensus nodes agree, it means that the new block has been successfully created.

[0045] The blockchain defines which data users can obtain the index stored in the blockchain. As long as the conditions are met, they will be automatically induced to send the index to the user who requests sharing.

[0046] According to the index, users will obtain shared data and signatures. Users first verify the correctness of the index signature, and then find the data in the cloud based on the shared data to achieve data sharing. In this stage, all user operations will be saved and recorded in the blockchain network for traceability.

[0047] In the present invention, the node device is used as the link closest to the data source. The node device receives the massive data generated by the power system in real time all the time. By connecting the adjacent node devices in a certain area through information paths, a node storage system is formed. The node device is used to calculate and locally store part of the data, which can achieve low-latency message response for terminal users. It can also achieve anonymous identity authentication while ensuring data integrity and authenticity. The tamper-proof blockchain is used to achieve distributed storage of subkeys, avoiding single point failure problems and cumbersome key management. The encrypted signature proxy server will perform homomorphic encryption on the data to ensure data security. Therefore, the present invention can effectively improve the timeliness of the system, reduce the amount of calculation of the cloud platform, and ensure the security of power data.

[0048] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for storing electric power data, characterized in that: include: Step 1: Power data preprocessing: Power data preprocessing mainly involves encrypting the power data uploaded from the power supply and power consumption terminal layer to the node device layer, and then uploading the processed data to the cloud for calculation; Step 2: Users who want to join the node device need to register and log in to the node device; Step 3: Decryption of power data. After the node device layer receives a set of subkeys submitted by the terminal device, it will first verify the signature of each subkey. After the signature verification is passed, the encryption signature proxy server will use its own symmetric encryption key to decrypt the ciphertext. Only when the number of subkeys exceeds the preset threshold can the complete signature private key be restored. Before the power data is uploaded to the node device for processing, the encryption signature proxy server will homomorphically encrypt the power data. The encryption signature proxy server uses the restored signature private key to sign the power data. After the node device receives the ciphertext data sent by the proxy server, it processes the ciphertext. Step 4: Storage of power data. The node device will immediately send the processed data to the terminal. The terminal can better understand the operating status of the terminal based on the power data. The node device layer will decrypt the private data and upload it to the cloud platform layer. The cloud platform layer will classify and analyze the data to form statistical data, which will be stored in the cloud platform layer.

2. The method for storing electric power data according to claim 1, characterized in that: In step one, the node device mainly includes a key generator and an encryption proxy server. The key generator is responsible for distributing subkeys within the management domain. After the key generator divides the signature private key into several subkeys, it submits the encrypted subkeys to the consensus node for storage in different blocks of the blockchain, and submits the unencrypted signature private key to the encryption signature proxy server. In order to ensure the integrity and authenticity of the data generated by the node device and prevent the semi-trusted edge node from leaking the user's privacy when processing user data, the encryption signature proxy server will perform homomorphic encryption and proxy signing on the data before sending it to the cloud platform layer to ensure the integrity of the data. At the same time, the user's privacy will not be leaked during the data processing stage.

3. The method for storing electric power data according to claim 2, characterized in that: The key generator generates a signature public key and a signature private key. The signature private key is used to sign the power data, while the signature public key is open to the outside world. Any user can use the public key to verify the integrity and authenticity of the power data. The key generator divides the signature private key into b sub-keys, at least k of which are required to restore the complete private key. After the key generator encrypts the sub-key with its own symmetric encryption key, it sends the ciphertext to the blockchain layer and stores the b sub-keys in different blocks.

4. The method for storing electric power data according to claim 3, characterized in that: The step one comprises: Step S1.1, the key generator generates a signature public key and a signature private key. The key generator randomly selects two unequal prime numbers h and q, calculates n = h × q, and sets an Euler function: φ(n) = (h-1)*(q-1). In the interval [1, φ(n)], an integer e that is prime to φ(n) is randomly selected, and an integer d that satisfies (exd) mod φ(n) = 1 is found. Finally, according to the above calculation, the public key PK = {n, e} and the private key SK = {n, d} are obtained. Step S1.2, homomorphic encryption key pair generation, the key generator randomly selects two prime numbers p1 and q1, calculates n1 = p1 × q1 and λ = lcm(p1-1, q1-1), lcm represents the least common multiple to be solved, and the key generator randomly selects The integer g, gcd represents the greatest common divisor to be solved. According to the above formula, PK u ={n1,g}.SK u ={λ}; Step S1.3, the key generator divides its birthday signature private key SK = {n, d} into multiple sub-keys. The key generator randomly selects k-1 random numbers a1...a k-1 , let a0=SK, construct the polynomial as follows: f(x)=a0+a1x+a2x 2 +......a k- 1x k-1 , take any number b x1…x b Substitute them into the polynomial to get f(x1)...f(xb), and the key generator can obtain b sub-keys m1=(x1,f(x1))...m b =(x b ,f(x b )), the key generator uses the symmetric key to generate each message according to formula C m1 =E Kpkc (m i ),i∈[1,b] to encrypt, and obtain the ciphertext set Dat={C m1 ......C mb }. Step S1.4, the key generator first uses the algorithm to generate a complete signature δ for the ciphertext set After completing the signature, the key generator obtains the complete signature key generator of the ciphertext set Dat, and then the key generator encrypts the ciphertext set Dat using its own symmetric encryption key K and uses the public key PK of the proxy server E The symmetric key K of the encryption key generator is then used to encrypt the encrypted information set. The encrypted information set is then sent to the encryption proxy server. After receiving the encrypted information set Set, the encryption proxy server will first use its own private key SK E To decrypt K K , and further obtain Dat = {C m1 ......C mb ,δ Dat }, the encryption proxy server will ensure the integrity and authenticity of the subkey by verifying the correctness of the complete signature.

5. The method for storing electric power data according to claim 1, characterized in that: In step 2, the key generator will maintain an identity authentication library to ensure that every user is a legitimate user. In order to achieve anonymous identity authentication, only users who meet the pre-set access control permissions can request the blockchain to obtain the ciphertext of the subkey.

6. An electric power data storage system using the method according to any one of claims 1 to 5, characterized in that: The power data storage system includes: a cloud platform layer, a blockchain layer, a node device layer, and a power supply and power consumption terminal layer. The cloud platform layer includes a cloud computing center, a cloud data center, and a resource pool. The node device layer includes a key generator and an encryption proxy server.

7. The power data storage system according to claim 6, characterized in that: The node device layer includes smart meters, smart cameras, smart collectors, and drones.

Images