Power monitoring system communication node information exchange method, device, equipment and medium
By adopting a dual -linear pairing theoretical distribution and exchange secret share in the power monitoring system, the lack of security mechanisms for centralized nodes are solved, and the system's high scalability and security are achieved, and the key leakage and verification information are avoided. Caused safety risk.
Patent Information
- Application Number
- CN202411897247.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-23
- Publication Date
- 2025-01-21
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The existing power monitoring system lacks a security mechanism without a center node during information exchange, which causes the security of the entire system to be threatened when the central node is compromised, and the leakage of keys or outdated verification information will lead to system security risks.
Using a dual -linear pairing theory, the secret share is distributed to the communication nodes in the power monitoring system, and the secret share exchange and reconstruction sharing information are performed through nodes with cooperative relationships to achieve security information sharing and collaboration between nodes.
With the participation of the unable to credit center, the scalability and security of the communication system has been improved, and the security risks caused by key leakage or verification information are avoided.
Smart Images

Figure CN119341848A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field related to automation control, and specifically relates to a method, device, equipment and medium for exchanging information between communication nodes of an electric power monitoring system. Background Art
[0002] As the scale of power grids expands and their complexity increases, information sharing and exchange between communication nodes in power monitoring systems need to be secure.
[0003] In the related technology, when the power monitoring system exchanges information, it is necessary to ensure security functions such as security authentication and data encryption between nodes. The current security processing method is mainly based on the central node of the system to encrypt the data of each node. It can be seen that in the power monitoring system, all security-related operations and decisions are carried out through the central node. Once the central node is breached, the security of the entire system will be threatened. With the expansion of the scale of the power communication system, the amount of data processed by the central node has increased exponentially. When each node is sharing data, the central node must encrypt the data before the data is exchanged to ensure security. This results in each node having no security guarantee for the data, and it is impossible to achieve secret share sharing and collaboration between nodes, resulting in low system security, which is easy to cause security risks to the system due to key leakage or outdated verification information. Summary of the invention
[0004] The present invention provides a method for exchanging information among communication nodes of an electric power monitoring system. Based on the bilinear pairing theory, the method realizes the decentralized storage of secret information in multiple nodes and the secure joining and exiting of nodes in the communication system without the participation of a trusted center, thereby improving the scalability of the communication system.
[0005] Methods include: S1: Distribute secret shares to communication nodes in the power monitoring system; S2: Exchange secret shares based on communication nodes with cooperative completion relationship and reconstruct shared information; S3: Update the secret share and verification information; S4: Verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; delete the untrustworthy communication node or the exited communication node from the legal node set.
[0006] Preferably, step S1 further includes: S11: Define the power monitoring system N Legal communication nodes, set D Represents the set of legal nodes in the system, the set I Represents the set of untrustworthy nodes in the system; Set the system threshold to t, 1 ≤ t ≤ N ; Arbitrary choice of cyclic additive group G A generator of 1 P ; Random Selection N different large integers ID i , 1 ≤ i ≤ N ; Identify the communication node U i Publicly identifiable information; S12: Communication Node U i In the cyclic addition group G 1 Randomly selected t Value F i0 , F i1 , …, F it-1 Construct a ( t- 1) Private key generating polynomial of order , and keep its polynomial coefficients secret, where the polynomial coefficients are F i0 , F i1 , …, F it-1 ∈ G 1; S13: Node U i Using the formula Calculate the public information of the private key generator polynomial , 1≤ i ≤ N , 0≤ j < t , and publish it; S14: Node U i Using the formula Compute secret exchange information , 1≤ i ≤ N , 1≤ j ≤ N , sending secret exchange information to another communication node through a secure channel U j ; S15, Node U i Using the formula Calculate the secret share held , 1≤ i ≤ N ; S16, Power Monitoring System Utilization Formula Calculate the relevant verification information required to verify the correctness of the secret shares sent by each communication node , 0≤ i < t and publish it; S17, power monitoring system using formula Calculate the verification information required to verify the correctness of the shared secret reconstructed by the cooperation of each communication node and publish it.
[0007] Preferably, step S14 further includes: Communication Node U j After receiving the secret exchange information, use the formula Verify secret exchange information Correctness; If the secret exchange value information is correct, it will be kept confidential.
[0008] Preferably, in step S2, reconstructing the shared information includes the following steps: Any m Legitimate communication nodes cooperate with each other to exchange the shadow secrets held by each node ;in, t ≤ m ≤ N ; After the communication nodes participating in the reconstruction process obtain the secret shares of other communication nodes, they use the formula Verify the correctness of the secret shares of other communication nodes; If the secret shares obtained are all correct, through the formula Reconstructing the shared secret , using the formula Verify shared secret correctness.
[0009] Preferably, step S3 further includes: S31, in the cyclic additive group G 1, communication node U i Random Selection t -1 value g i1 , g i2 , …, g it-1 Construct a ( t-1) Update the polynomial with a secret share whose constant term is 0 ; The polynomial coefficients are g i1 ,g i2 ,…, g it-1 ∈ G 1; S32, Node U i Using the formula Update the public verification information of the polynomial , and open to other nodes; 1≤ i ≤ N , 1≤ j < t ; S33, Node U i Using the formula Calculate secret update information , 1≤ i ≤ N , 1≤ j ≤ N ; Secret update information is sent through a secure channel Send to another legitimate communication node U j ; S34, Node U i Using the formula Calculate the updated secret share ,in, is the original secret share; S35, Node U i Using the formula , and update public information Calculate and update the secret share verification information, where is the original secret share verification information, Verify the information for the new secret share.
[0010] Preferably, in step S33, the communication node U j Receive secret updates G ij Then, using the formula Verify its correctness; If the secret update information is correct, it is encrypted and saved.
[0011] Preferably, step S4 further includes: S41, randomly select a large integer ID r Identify the newly added communication node U r Publicly identifiable information; S42, for each legitimate communication node U i ∈ D Randomly construct a ( t- 1) Add polynomials to nodes of order ; ( t- 1) The node polynomial of order is added to satisfy θ i ( ID r )=0, and h i0 , h i1 , …, h it-1 ∈ G 1; Communication node U i The coefficients of the secret polynomial are h i0 , h i1 , …, h it-1 ; S43, legal node U i Using the formula Calculate the public verification information of the newly added polynomial , 1≤ i ≤ N , 0≤ j < t , and make it public to other nodes; S44, legal node U i Using the formula Calculate new exchange information , 1≤ i ≤ N , 1≤ j ≤ N , and sent to another legitimate communication node via a secure channel U j ; Legitimate communication nodes U j Receive new exchange information Then, through the formula Verify correctness; if the newly added exchange information is correct, keep it confidential; S45, the power monitoring system publishes new public information based on the nodeQ ij , using the formula Calculate and verify the relevant verification information required for the correctness of the pseudo-secret shares sent by each communication node , 0≤ i < t , and then publish it; S46, newly added communication node U r Choose Any m legitimate communication nodes, obtain the pseudo-secret share of the legitimate communication nodes through a secure channel , 1≤ i ≤ m , and using the formula Verify correctness; If the obtained pseudo-secret shares are all correct, then use the formula Calculate the secret share held ; S47, when there is a distrusted communication node or a withdrawn communication node in the power monitoring system, the distrusted communication node or the withdrawn communication node is removed from the legal node set D , and add the untrusted communication node or the exited communication node to the untrusted node set respectively, and perform secret share update on other legitimate nodes in the system.
[0012] The present application also provides a communication node information exchange device for a power monitoring system, the device comprising: A share distribution module, used to distribute secret shares to communication nodes in the power monitoring system; The exchange and reconstruction module exchanges secret shares based on the communication nodes with cooperative completion relationship and reconstructs the shared information; An information disclosure module is used to disclose the verification information required in the secret sharing process to each node in the communication system; An information update module, used to update secret shares and verification information; The verification and deletion module is used to verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; remove the untrustworthy communication node or the exited communication node from the legal node set. D Delete it.
[0013] According to another embodiment of the present application, an electronic device is provided, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the steps of the method for exchanging information among communication nodes of the power monitoring system when executing the program.
[0014] According to another embodiment of the present application, a storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for exchanging information among communication nodes of the power monitoring system are implemented.
[0015] It can be seen from the above technical solutions that the present invention has the following advantages: In the information exchange method of communication nodes in the power monitoring system involved in the present application, each communication node will receive a corresponding secret share. The communication nodes with a cooperative relationship in the system exchange secret shares according to a predetermined protocol. By exchanging secret shares, the nodes can jointly reconstruct the original shared information or key. Information sharing and collaboration between nodes are achieved to improve the security of the system. The present application can also avoid security risks caused by key leakage or outdated verification information by regularly updating secret shares and verification information.
[0016] When a new node joins the power monitoring system, the identity information of the new node can be verified. After the verification, the identity information of the new node will be made public and added to the set of legal nodes. At the same time, the corresponding secret share is distributed to the new node so that it can participate in the subsequent information exchange and key management process. For communication nodes that lose trust or withdraw, they will be deleted from the set of legal nodes and their secret shares will be revoked. Ensure the legitimacy and security of communication nodes in the power monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] In order to more clearly illustrate the technical solution of the present invention, the accompanying drawings required for use in the description will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.
[0018] Figure 1 It is a flow chart of the information exchange method of communication nodes in the power monitoring system; Figure 2 This is a flow chart of an embodiment of a method for exchanging information between communication nodes in a power monitoring system; Figure 3 It is a schematic diagram of the information exchange device of the communication node of the power monitoring system; Figure 4 Schematic diagram of an electronic device. DETAILED DESCRIPTION
[0019] The method for exchanging information between communication nodes in a power monitoring system provided in the present application is a method for exchanging information safely and effectively between communication nodes in a power monitoring system.
[0020] In this application, the communication nodes in the power monitoring system can also be nodes that perform identity information definition or identity information identification. Define and identify each communication node, including legitimate nodes and untrustworthy nodes or abnormal nodes. Each node will be given a unique identity to facilitate identification and tracking in the system.
[0021] In order to ensure the security of communication, the present application configures a secret share distribution mechanism. The secret share distribution mechanism is used to allocate secret shares to each node, and the shares together constitute the complete secret of the system.
[0022] Only when a certain number of legitimate nodes cooperate can the complete secret be reconstructed, thus ensuring the security of information. Communication nodes can exchange information, specifically data exchange communication.
[0023] In the present application, the communication information in the power monitoring system can be protected by encryption to prevent illegal interception or tampering. The communication nodes in the power monitoring system can share information so that each node can obtain the required information.
[0024] In the present application, the information in the power monitoring system is also updated, which may be updated regularly, and the correctness of the updated information is verified, which may be achieved through the cooperation and verification mechanism between nodes.
[0025] For new nodes joining, identity verification can be performed and the corresponding secret shares can be distributed. For untrustworthy nodes or abnormal nodes, they can be deleted in time.
[0026] The specific steps of the method for exchanging information between communication nodes of the power monitoring system are described in detail below. For the purpose of illustration rather than limitation, specific details such as specific system structures and technologies are proposed to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application can also be implemented in other embodiments without these specific details.
[0027] The phrases such as "one embodiment" or "some embodiments" described in the present application mean that the specific features, structures or characteristics described in the embodiment are included in one or more embodiments of the present application. Therefore, the phrases such as "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments" etc. that appear in different places in the present application do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways.
[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0029] See also Figure 1 The figure is a flow chart of a method for exchanging information between communication nodes of a power monitoring system in a specific embodiment, the method comprising: S1: Distribute secret shares to communication nodes in the power monitoring system.
[0030] In some embodiments, the secret share may be generated based on an encryption algorithm to ensure the security and randomness of the secret share.
[0031] The distribution of secret shares can be transmitted to each communication node through a selected distribution channel based on the SSL / TLS protocol. After receiving the secret shares, the communication nodes verify them to ensure their integrity and correctness.
[0032] In this embodiment, each communication node receives a corresponding secret share. The secret share can be used to build a distributed key management system to ensure the security and integrity of system data. By combining the secret shares of multiple nodes, the original key or shared information can be reconstructed for data encryption, decryption or verification.
[0033] It can be seen that in this embodiment, each communication node holds a secret share, thereby enhancing the overall security of the system, preventing the leakage of the entire system key due to a single point failure, and improving the fault tolerance and robustness of the system.
[0034] S2: Exchange secret shares based on communication nodes with cooperative completion relationship and reconstruct shared information.
[0035] In some embodiments, legitimate nodes exchange secret shares and use a preset algorithm to verify the correctness of the secret shares of other nodes. If all secret shares are correct, the shared secret is reconstructed and its correctness is verified.
[0036] It should be noted that the communication nodes with cooperative relationships exchange secret shares according to a predetermined protocol. By exchanging secret shares, the nodes can jointly reconstruct the original shared information or key, realize information sharing and collaboration between nodes, and improve the security of the system.
[0037] S3: Update the secret share and verification information.
[0038] In this embodiment, a new secret share can be constructed, and the polynomial can be updated, and the updated public verification information can be calculated and published. The calculated secret update information is sent to the corresponding legal node through a secure channel.
[0039] For this embodiment, methods such as regenerating secret shares, distributing new shares to nodes, and updating verification information may be involved. By regularly updating secret shares and verification information, security risks caused by key leakage or outdated verification information can also be avoided.
[0040] S4: Verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; delete the untrustworthy communication node or the exited communication node from the legal node set.
[0041] In this embodiment, when a new node joins the power monitoring system, the identity information of the new node can be verified. After the verification is passed, the identity information of the new node will be made public and added to the set of legal nodes. At the same time, the corresponding secret share is distributed to the new node so that it can participate in the subsequent information exchange and key management process.
[0042] For communication nodes that lose trust or withdraw, they will be deleted from the set of legal nodes and their secret shares will be revoked, ensuring the legitimacy and security of communication nodes in the power monitoring system.
[0043] The method for exchanging information between communication nodes of the power monitoring system involved in this embodiment verifies the identity information of the new node and distributes the secret share, so that the system can ensure that the new node can safely participate in the information exchange and key management process. At the same time, by deleting the untrustworthy or exiting nodes, the system can maintain the overall security and stability of the system. The security and credibility of the system are improved, and the security and integrity of the data during the transmission process are ensured. At the same time, by dynamically managing the node set, it can adapt to different security requirements and environmental changes.
[0044] Further, as a refinement and extension of the specific implementation of the above embodiment, in order to fully illustrate the specific implementation process of step S1 in this embodiment, a more specific implementation process of step S1 is given below. The communication node secret share distribution steps in step S1 are as follows: S11, define the system N Legal nodes, set D Represents the set of legal nodes in the system, the set I Represents the set of untrusted nodes in the system.
[0045] In this embodiment, the system threshold value is set to t ( 1 ≤ t ≤ N ).
[0046] It should be noted that any cyclic additive group G A generator of 1 P . Randomly select N different large integers ID i ( 1 ≤ i ≤ N ) identifies nodes in the system U i publicly identifiable information.
[0047] S12: Communication Node U i In the cyclic addition group G 1 Randomly selected t Value F i0 , F i1 , …, F it-1 Construct a ( t- 1) Private key generating polynomial of order , and keep its polynomial coefficients secret, where the polynomial coefficients are F i0 , F i1 , …, F it-1 ∈ G 1; S13: Node U i Using the formula Calculate the public information of the private key generator polynomial , 1≤ i ≤ N , 0≤ j < t , and make it public; S14: Node U i Using the formula Compute secret exchange information X ij , 1≤ i ≤ N , 1≤ j ≤ N , sending secret exchange information to another communication node through a secure channel U j ; S15, Node U i Using the formula Calculate the secret share held S i, 1≤ i ≤ N ; S16, Power Monitoring System Utilization Formula Calculate the relevant verification information required to verify the correctness of the secret shares sent by each communication node , 0≤ i < t and publish it; S17, power monitoring system using formula Calculate the verification information required to verify the correctness of the shared secret reconstructed by the cooperation of each communication node E and publish it.
[0048] In an embodiment of the present invention, based on step S2, a possible embodiment is given below to illustrate its specific implementation scheme in a non-limiting manner.
[0049] The shared information reconstruction method in step S2 is as follows: S21, any m ( t ≤ m ≤ N ) legitimate nodes collaborate with each other to exchange the shadow secrets held by each node S i .
[0050] After the nodes participating in the reconstruction process in this embodiment obtain the secret shares of other nodes, they use the formula Verify the correctness of other nodes' secret shares.
[0051] S22, if the secret shares obtained are all correct, then the formula Reconstructing the shared secret , using the formula Verify shared secret correctness.
[0052] In some specific embodiments, the method for updating the secret share and verification information in step S3 is as follows: S31, in the cyclic additive group G 1, communication node U i Random Selection t -1 value g i1 , g i2 , …, g it-1 Construct a ( t- 1) Update the polynomial with a secret share whose constant term is 0 ; The polynomial coefficients are gi1 ,g i2 ,…, g it-1 ∈ G 1; S32, Node U i Using the formula Update the public verification information of the polynomial , and open to other nodes; 1≤ i ≤ N , 1≤ j < t ; S33, Node U i Using the formula Calculate secret update information , 1≤ i ≤ N , 1≤ j ≤ N ; Secret update information is sent through a secure channel Send to another legitimate communication node U j ; S34, Node U i Using the formula Calculate the updated secret share ,in, is the original secret share; S35, Node U i Using the formula , and update public information Calculate and update the secret share verification information, where is the original secret share verification information, Verify the information for the new secret share.
[0053] In some specific embodiments, the communication node secure joining and exiting method in step S4 is as follows: S41, newly added node U r Pick a large integer at random ID r ( ID r With other nodes ID are all different) to identify their public identity information.
[0054] S42, each legal node in the system U i ∈ DRandomly construct a ( t- 1) Add polynomials to nodes of order , the node newly added polynomial can satisfy ,and h i0 , h i1 , …, h it-1 ∈ G 1.
[0055] node U i Keep the polynomial coefficients secret h i0 , h i1 , …, h it-1 .
[0056] S43, legal node U i Using the formula Calculate the public verification information of the newly added polynomial Q ij (1≤ i ≤ N , 0≤ j < t ), and make it public to other nodes.
[0057] S44, legal node U i Using the formula Calculate new exchange information H ij (1≤ i ≤ N , 1≤ j ≤ N ), and sent to other legitimate nodes in the system through a secure channel U j .node U j Receive new exchange information from other legitimate nodes in the system H ij Then, through the formula Verify the correctness. If the newly added exchange information is correct, keep it confidential.
[0058] S45, the power monitoring system publishes new public information based on the node Q ij , using the formula Calculate the relevant verification information required to verify the correctness of the pseudo-secret shares sent by each node w i (0≤ i< t ) and then publish it.
[0059] S46, new node U r Select any m ( t≤m≤N ) legitimate nodes, obtain their pseudo-secret shares through a secure channel (1≤ i ≤ m ), and use the formula Verify the correctness. If the obtained pseudo-secret shares are correct, use the formula Calculate the secret share held .
[0060] S47, when there is a distrusted communication node or a withdrawn communication node in the power monitoring system, the distrusted communication node or the withdrawn communication node is deleted from the legal node set D, and the distrusted communication node or the withdrawn communication node is added to the distrusted node set respectively, and the secret share update is performed on other legal nodes in the system. After deleting the distrusted node, the secret share update operation is performed on other legal nodes in the system.
[0061] In this embodiment, when a new node joins the power monitoring system, the identity information of the new node can be verified. After the verification is passed, the identity information of the new node will be made public and added to the set of legal nodes. At the same time, the corresponding secret share is distributed to the new node so that it can participate in the subsequent information exchange and key management process. For communication nodes that lose trust or withdraw, they will be deleted from the set of legal nodes and their secret shares will be revoked. Ensure the legitimacy and security of communication nodes in the power monitoring system.
[0062] The following is an embodiment of the power monitoring system communication node information exchange device provided in the embodiment of the present disclosure. The device and the power monitoring system communication node information exchange method of the above-mentioned embodiments belong to the same inventive concept. For details not described in detail in the embodiment of the power monitoring system communication node information exchange device, please refer to the embodiment of the above-mentioned power monitoring system communication node information exchange method.
[0063] like Figure 3 As shown, the device comprises: A share distribution module, used to distribute secret shares to communication nodes in the power monitoring system; The exchange and reconstruction module exchanges secret shares based on the communication nodes with cooperative completion relationship and reconstructs the shared information; An information update module, used to update secret shares and verification information; An information disclosure module is used to disclose the verification information required in the secret sharing process to each node in the communication system; The verification and deletion module is used to verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; remove the untrustworthy communication node or the exited communication node from the legal node set. D Delete it.
[0064] Based on the above-mentioned method for exchanging information between communication nodes of a power monitoring system, this embodiment further provides an electronic device, such as Figure 4 As shown, it includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, the steps of the method for information exchange of communication nodes in the power monitoring system are implemented.
[0065] Of course, a display unit may also be included as needed to display method process information.
[0066] In the embodiment of the present application, the processor 101 can be implemented by using at least one of an application-specific integrated circuit (ASIC), a digital signal processor (DSP), a processor, a controller, a microcontroller, a microprocessor, and an electronic unit designed to perform the functions described herein. In some cases, such an implementation can be implemented in a controller. For software implementation, implementations such as processes or functions can be implemented with separate software modules that allow execution of at least one function or operation. The software code can be implemented by a software application (or program) written in any appropriate programming language, and the software code can be stored in a memory and executed by a controller.
[0067] The display unit 102 is used to display information input by the user or information provided to the user. The display unit 102 may include a display panel, which may be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like.
[0068] The memory 103 can be used to store software programs and various data. The memory 103 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.
[0069] The present application also provides a storage medium, in which a program product capable of implementing the steps of the method for exchanging information between communication nodes of a power monitoring system of the present specification is stored. In some possible implementations, various aspects of the present disclosure may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to cause the terminal device to execute the steps of various exemplary implementations of the present disclosure described in the above “Exemplary Method” section of the present specification.
[0070] The storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can be, for example, but not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.
[0071] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A method for exchanging information between communication nodes of a power monitoring system, characterized in that: Methods include: S1: Distribute secret shares to communication nodes in the power monitoring system; S2: Exchange secret shares based on communication nodes with cooperative completion relationship and reconstruct shared information; S3: Update the secret share and verification information; S4: Verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; delete the untrustworthy communication node or the exited communication node from the legal node set.
2. The method for exchanging information among communication nodes of a power monitoring system according to claim 1, characterized in that: Step S1 also includes: S11: Define the power monitoring system N Legal communication nodes, set D Represents the set of legal nodes in the system, the set I Represents the set of untrustworthy nodes in the system; Set the system threshold to t , 1 ≤ t ≤ N ; Arbitrary choice of cyclic additive group G A generator of 1 P ; Random Selection N different large integers ID i , 1 ≤ i ≤ N ; Identify the communication node U i Publicly identifiable information; S12: Communication Node U i In the cyclic addition group G 1 Randomly selected t Value F i0 , F i1 , …, F it-1 Construct a ( t- 1) Private key generating polynomial of order , and keep its polynomial coefficients secret, where the polynomial coefficients are F i0 , F i1 , …, F it-1 ∈ G 1; S13: Node U i Using the formula Calculate the public information of the private key generator polynomial , 1≤ i ≤ N , 0≤ j < t , and make it public; S14: Node U i Using the formula Compute secret exchange information , 1≤ i ≤ N , 1≤ j ≤ N , sending secret exchange information to another communication node through a secure channel U j ; S15, Node U i Using the formula Calculate the secret share held , 1≤ i ≤ N ; S16, Power Monitoring System Utilization Formula Calculate the relevant verification information required to verify the correctness of the secret shares sent by each communication node , 0≤ i < t and publish it; S17, Power Monitoring System Utilization Formula Calculate the verification information required to verify the correctness of the shared secret reconstructed by the cooperation of each communication node and publish it.
3. The method for exchanging information among communication nodes of a power monitoring system according to claim 2, characterized in that: Step S14 also includes: Communication Node U j After receiving the secret exchange information, use the formula Verify secret exchange information Correctness; If the secret exchange value information is correct, it will be kept confidential.
4. The method for exchanging information among communication nodes of a power monitoring system according to claim 1 or 2, characterized in that: In step S2, reconstructing the shared information includes the following steps: Any m Legitimate communication nodes cooperate with each other to exchange the shadow secrets held by each node ;in, t ≤ m ≤ N ; After the communication nodes participating in the reconstruction process obtain the secret shares of other communication nodes, they use the formula Verify the correctness of the secret shares of other communication nodes; If the secret shares obtained are all correct, through the formula Reconstructing the shared secret , using the formula Verify shared secret correctness.
5. The method for exchanging information among communication nodes of a power monitoring system according to claim 1 or 2, characterized in that: Step S3 also includes: S31, in the cyclic additive group G 1, communication node U i Random Selection t -1 value g i1 , g i2 , …, g it-1 Construct a ( t- 1) Update the polynomial with a secret share whose constant term is 0 ; The polynomial coefficients are g i1 ,g i2 ,…,g it-1 ∈ G 1; S32, Node U i Using the formula Update the public verification information of the polynomial , and open to other nodes; 1≤ i ≤ N , 1≤ j < t ; S33, Node U i Using the formula Calculate secret update information , 1≤ i ≤ N , 1≤ j ≤ N ; Secret update information is sent through a secure channel Send to another legitimate communication node U j ; S34, Node U i Using the formula Calculate the updated secret share ,in, is the original secret share; S35, Node U i Using the formula , and update public information Calculate and update the secret share verification information, where is the original secret share verification information, Verify the information for the new secret share.
6. The method for exchanging information among communication nodes of a power monitoring system according to claim 5, characterized in that: In step S33, the communication node U j Receive secret updates G ij Then, using the formula Verify its correctness; If the secret update information is correct, it is encrypted and saved.
7. The method for exchanging information among communication nodes of a power monitoring system according to claim 1 or 2, characterized in that: Step S4 also includes: S41, randomly select a large integer ID r Identify the newly added communication node U r Publicly identifiable information; S42, for each legitimate communication node U i ∈ D Randomly construct a ( t- 1) Add polynomials to nodes of order ; ( t- 1) The node polynomial of order is added to satisfy θ i ( ID r )=0, and h i0 , h i1 , …, h it-1 ∈ G 1; Communication node U i The coefficients of the secret polynomial are h i0 , h i1 , …, h it-1 ; S43, legal node U i Using the formula Calculate the public verification information of the newly added polynomial , 1≤ i ≤ N , 0≤ j < t , and make it public to other nodes; S44, legal node U i Using the formula Calculate new exchange information , 1≤ i ≤ N , 1≤ j ≤ N , and sent to another legitimate communication node via a secure channel U j ; Legitimate communication nodes U j Receive new exchange information Then, through the formula Verify correctness; if the newly added exchange information is correct, keep it confidential; S45, the power monitoring system publishes new public information based on the node Q ij , using the formula Calculate and verify the relevant verification information required for the correctness of the pseudo-secret shares sent by each communication node , 0≤ i < t , and then publish it; S46, newly added communication node U r Choose Any m legitimate communication nodes, obtain the pseudo-secret share of the legitimate communication nodes through a secure channel , 1≤ i ≤ m , and using the formula Verify correctness; If the obtained pseudo-secret shares are all correct, then use the formula Calculate the secret share held ; S47, when there is a distrusted communication node or a withdrawn communication node in the power monitoring system, the distrusted communication node or the withdrawn communication node is removed from the legal node set D , and add the untrusted communication node or the exited communication node to the untrusted node set respectively, and perform secret share update on other legitimate nodes in the system.
8. A communication node information exchange device for a power monitoring system, characterized in that: The device is used to implement the method for exchanging information between communication nodes of a power monitoring system according to any one of claims 1 to 7; the device comprises: A share distribution module, used to distribute secret shares to communication nodes in the power monitoring system; The exchange and reconstruction module exchanges secret shares based on the communication nodes with cooperative completion relationship and reconstructs the shared information; An information disclosure module is used to disclose the verification information required in the secret sharing process to each node in the communication system; An information update module, used to update secret shares and verification information; The verification and deletion module is used to verify the identity information of the newly added communication node, make the identity public, and distribute the secret share; remove the untrustworthy communication node or the exited communication node from the legal node set. D Delete it.
9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the method for exchanging information among communication nodes of a power monitoring system as described in any one of claims 1 to 7 are implemented.
10. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for exchanging information among communication nodes of a power monitoring system as claimed in any one of claims 1 to 7 are implemented.
Citation Information
Patent Citations
Blockchain multi-party data sharing method based on secret sharing technology
CN110740033A
Data sharing method and system based on secret sharing
CN117527221A