Power transmission line WAPI network terminal dynamic distributed authentication method and system

Abstract

The invention relates to a power transmission line WAPI network terminal dynamic distributed authentication method and system. The system comprises a plurality of WAPI terminals arranged on a plurality of iron towers in a power transmission line in a one-to-one correspondence mode. When the target WAPI terminal receives a preset instruction, the identification capability information of each WAPI terminal is generated based on the unique identifier of each WAPI terminal, and the identification capability information of each WAPI terminal is distributed to the corresponding WAPI terminal; wherein the target WAPI terminal is a WAPI terminal as a wireless access point (API) terminal in the plurality of WAPI terminals, and the identification capability information of each WAPI terminal is used for enabling the corresponding WAPI terminal to have an identity authentication function of identifying a server (AS); and when the plurality of WAPI terminals need to send an identity authentication request to an authentication server (AS) for identity authentication during networking, the identity authentication of the AS is completed in the WAPI terminals in parallel.

Description

Technical Field

[0001] The disclosed embodiments relate to the technical field of power transmission lines, and in particular to a method and system for dynamic distributed authentication of power transmission line WAPI network terminals. Background Art

[0002] At present, the use of traditional wireless communication for data transmission in transmission line monitoring relies more on the operator's communication base station. However, transmission lines are generally located in remote areas in the wild, and there may be no base stations near the power towers or the number is limited, making it difficult to fully cover and effectively monitor and transmit data. If new base stations are added specifically for transmission lines, too much unnecessary equipment cost will be added, and traditional wireless communication data transmission through the operator's network is difficult to ensure the security of power monitoring data.

[0003] A new solution is proposed in the related technology, which is to set up multiple WAPI terminals on multiple towers in the power transmission lines in the area where the communication base station is difficult to effectively cover to form a WAPI (Wireless LAN Authentication and Privacy Infrastructure) network, and to monitor data transmission based on the set WAPI terminal networking. This can avoid the problem of relying entirely on the operator's communication base stations and being unable to fully cover effective monitoring. At the same time, there is no need to add new base stations to increase unnecessary base station equipment costs, and it can ensure the security of power monitoring data transmission. WAPI technology usually adopts a ternary peer-to-peer security architecture, and its network authentication requires the participation of a remote authentication server AS (Authentication Server) located in the background. When each WAPI terminal accesses the network, it needs to transmit the authentication request to the AS for authentication, and the networking can be successfully achieved only after the authentication is passed.

[0004] Before multiple WAPI terminals are successfully networked, the identity authentication request of each WAPI terminal needs to be transmitted to the remote AS for authentication. In practice, each WAPI terminal on site always has the problem of startup and subsequent communication connection establishment speed, and the remote transmission process itself also takes a relatively long time, which greatly delays the transmission of the corresponding identity authentication request to the AS. As a whole, the AS authentication process of multiple WAPI terminals becomes slower, making it difficult to quickly realize authentication and timely return the monitoring data of the transmission line through successful networking. However, the real-time requirements for the returned data are very high when monitoring the transmission line. Summary of the invention

[0005] In order to solve the above technical problems or at least partially solve the above technical problems, the embodiments of the present disclosure provide a method and system for dynamic distributed authentication of power line WAPI network terminals.

[0006] In a first aspect, an embodiment of the present disclosure provides a dynamic distributed authentication system for WAPI network terminals in a power transmission line, the system comprising a plurality of WAPI terminals arranged one-to-one on a plurality of towers in a power transmission line;

[0007] When receiving the preset instruction, the target WAPI terminal generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal; wherein the target WAPI terminal is a WAPI terminal serving as a wireless access point AP among the multiple WAPI terminals, and the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS;

[0008] When the multiple WAPI terminals need to send identity authentication requests to the authentication server AS for identity authentication during networking, each of them completes the identity authentication of the AS in parallel within itself.

[0009] In one embodiment, each WAPI terminal has a built-in programmable chip module, and the authentication capability information of each WAPI terminal instructs the corresponding programmable chip module to use the authentication capability information and locally construct an identity authentication function of the authentication server AS through a software defined network.

[0010] In one embodiment, the programmable chip module is a chip module whose operating power consumption is lower than a preset power consumption value.

[0011] In one embodiment, the identity authentication function of the authentication server AS of each WAPI terminal is temporary.

[0012] In one embodiment, after the multiple WAPI terminals complete the AS identity authentication in parallel within themselves and the authentication result is passed, each of them uploads the transmission line monitoring data related to the tower where the multiple WAPI terminals are located through the WAPI network.

[0013] In one embodiment, the target WAPI terminal has a built-in or externally connected wireless communication module, the wireless communication module includes a 4G or 5G communication module, and the wireless communication module is communicatively connected to the power monitoring background server.

[0014] In one embodiment, the preset instruction at least includes a monitoring data return instruction issued by the power monitoring backend server.

[0015] In a second aspect, an embodiment of the present disclosure provides a method for dynamic distributed authentication of a WAPI network terminal of a transmission line, the method being applied to a plurality of WAPI terminals arranged one-to-one on a plurality of towers in a transmission line, comprising the following steps:

[0016] When receiving the preset instruction, the target WAPI terminal generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal; wherein the target WAPI terminal is a WAPI terminal serving as a wireless access point AP among the multiple WAPI terminals, and the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS;

[0017] When the multiple WAPI terminals need to send identity authentication requests to the authentication server AS for identity authentication during networking, each of them completes the identity authentication of the AS in parallel within itself.

[0018] In one embodiment, each WAPI terminal is built with a programmable chip module, and the programmable chip module uses the authentication capability information and constructs the identity authentication function of the authentication server AS locally through a software-defined network.

[0019] In one embodiment, the programmable chip module is a chip module whose operating power consumption is lower than a preset power consumption value.

[0020] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has the following advantages:

[0021] The embodiments of the present disclosure provide a method and system for dynamic distributed authentication of power line WAPI network terminals, wherein the target WAPI terminal generates identification capability information of each WAPI terminal based on the unique identifier of each WAPI terminal when receiving a preset instruction, and distributes the identification capability information of each WAPI terminal to the corresponding WAPI terminal; the target WAPI terminal is a WAPI terminal that serves as a wireless access point AP among the multiple WAPI terminals, and the identification capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of an authentication server AS; thereafter, when the multiple WAPI terminals need to send an identity authentication request to an authentication server AS for identity authentication during networking, each of the multiple WAPI terminals completes the identity authentication of the AS in parallel within itself. In this way, dynamic distributed AS authentication can be implemented locally on the WAPI terminal side of the transmission line tower. Each WAPI terminal can implement internal authentication in parallel without waiting for each other for unified authentication, and they do not rely on each other for authentication but are distributed and authenticated separately. That is, the problems of startup and subsequent communication connection establishment speed of each WAPI terminal on site can be ignored, and there is no need to remotely transmit the identity authentication request to the remote AS and remotely receive the authentication result. On the whole, multiple WAPI terminals can quickly implement the AS authentication process locally. In this way, authentication can be achieved very quickly and the monitoring data of the transmission line can be promptly returned through successful networking, meeting the high requirements for real-time data returned during transmission line monitoring. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0023] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0024] Figure 1 This is a schematic diagram of a dynamic distributed authentication system for a WAPI network terminal on a power transmission line according to an embodiment of the present disclosure;

[0025] Figure 2 A schematic diagram of constructing an AS identity authentication function for a WAPI terminal according to an embodiment of the present disclosure;

[0026] Figure 3 This is a flow chart of a method for dynamic distributed authentication of a power line WAPI network terminal according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0027] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0028] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0029] It should be understood that, in the following, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0030] Figure 1The present invention is a schematic diagram of a dynamic distributed authentication system for WAPI network terminals of a power transmission line according to an embodiment of the present invention. The system may include multiple WAPI terminals arranged one by one on multiple towers in the power transmission line. Exemplarily, the multiple towers may be towers with few nearby operator base stations, and the multiple towers are arranged in sequence. When establishing a communication connection, the multiple WAPI terminals may establish a communication connection step by step, that is, each adjacent two WAPI terminals establish a communication connection to form a topological structure in which multiple WAPI terminals are connected in sequence, but it is not limited thereto.

[0031] The target WAPI terminal is a WAPI terminal that serves as a wireless access point AP among the multiple WAPI terminals. The WAPI terminal that serves as a wireless access point AP may be Figure 1 The first WAPI terminal on the right side is shown in the figure, but not limited thereto. It can be determined based on on-site conditions such as the distance from the operator's base station and / or the location of each terminal.

[0032] In this embodiment, when the target WAPI terminal receives the preset instruction, it generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal; wherein the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS.

[0033] Exemplarily, the target WAPI terminal as a wireless access point AP can pre-store or communicate and interact to obtain the unique identification of each WAPI terminal such as the terminal name, unique code, etc. In one embodiment, the preset instruction can at least include but is not limited to the monitoring data return instruction issued by the power monitoring background server. When the target WAPI terminal receives the preset instruction such as the data return instruction, it generates the identification capability information of each WAPI terminal based on the unique identification of each WAPI terminal such as the terminal name and the unique code. The identification capability information is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS. After that, the target WAPI terminal distributes the generated identification capability information of each WAPI terminal to the corresponding WAPI terminal. That is to say, in this embodiment, the identity authentication function that originally needs to be completed by the remote AS is sent to each WAPI terminal locally through the target WAPI terminal, and the identity authentication of the AS is completed by each WAPI terminal itself, so that each WAPI terminal has the ability of the AS. The towers in the transmission line corresponding to each WAPI terminal are different, and the data returned is also different. In order to distinguish, the identification capability information generated for each WAPI terminal is slightly different, such as the unique identification of the terminal carried is different. In addition, the identification capability information includes information about the AS performing identity authentication, such as certificates, signatures, keys, etc., which are required for the corresponding WAPI terminal to build an identity authentication function. When multiple WAPI terminals need to send an identity authentication request to the authentication server AS for identity authentication during networking, each WAPI terminal can complete the AS identity authentication in parallel within itself. The identity authentication request may at least include the unique identification of the WAPI terminal and identity credentials such as a digital certificate. The specific authentication process can refer to the existing WAPI technology. In a specific example, each WAPI terminal can, for example, send an identity authentication request to an internal module for executing the identity authentication function of the AS, and receive the returned authentication result such as pass or fail information internally. If it passes, the networking is successful and the monitoring data can be returned.

[0034] In this embodiment, the AS of the back-end, i.e., the local end, is lightened and miniaturized and sunk to each WAPI terminal, which ultimately completes the authentication of a WAPI terminal to its identity. This authentication capability itself is not complicated, and specific reference is made to the prior art. After sinking, the scope of authentication is reduced, and each WAPI terminal only manages the small scope of the tower where it is located. It is dynamic, not immutable. For example, as the number of WAPI terminals entering the network increases or decreases, the dynamic changes enable it to have the capabilities of the AS.

[0035] The above scheme of this embodiment can realize dynamic distributed AS authentication locally on the side of the transmission line tower, that is, the WAPI terminal. Each WAPI terminal can realize internal authentication in parallel without waiting for each other for unified authentication, and they do not rely on each other for authentication but are distributed and authenticated separately. The problems of startup and subsequent communication connection establishment speed of each WAPI terminal on site can be ignored, and there is no need to remotely transmit the identity authentication request to the remote AS and remotely receive the authentication result. On the whole, multiple WAPI terminals can quickly realize the AS authentication process locally. In this way, authentication can be realized very quickly and the monitoring data of the transmission line can be returned in time through successful networking, meeting the high requirements for the real-time performance of the returned data during transmission line monitoring.

[0036] In this embodiment, since the AS capability is implemented locally in multiple WAPI terminals, in the identity authentication process of multiple WAPI terminals, in addition to paying attention to the authentication speed, that is, the problem of rapid authentication and authorization, it is also necessary to pay attention to the accuracy of the authentication result, such as reducing or avoiding the error probability when the AS capability is implemented locally in the WAPI terminal to improve the accuracy of the authentication result. Therefore, based on the above embodiment, in one embodiment, combined with reference to Figure 2 As shown in , each WAPI terminal may be built with a programmable chip module, and the identification capability information of each WAPI terminal indicates that the corresponding programmable chip module uses the identification capability information and constructs the identity authentication function of the identification server AS locally through a software-defined network. Exemplarily, the programmable chip module can define the functions it implements through software. In this embodiment, in addition to the built-in processor, each WAPI terminal may also have a pre-built-in programmable chip module, and then the processor controls the programmable chip module to use the identification capability information and construct the identity authentication function of the identification server AS locally through a software-defined network (SDN). That is, by borrowing mature software-defined network technology, the capabilities of AS are accurately delegated to the WAPI terminal. In other words, the capabilities of AS, namely the identity authentication function, are accurately implemented in the WAPI terminal through a software-defined network. In this way, the capabilities of AS can be easily, quickly and reliably implemented in WAPI terminals, reducing the time for dynamically building the identity authentication function of AS, so that the identity authentication of each WAPI terminal can be carried out in a timely and accurate manner, reducing or even avoiding errors in the authentication process, and then quickly realizing the accurate authentication of each WAPI terminal and returning the monitoring data of the transmission line in time through successful networking, meeting the high requirements for the real-time nature of the returned data during transmission line monitoring.

[0037] In one embodiment, the programmable chip module is a chip module whose working power consumption is lower than a preset power consumption value. Exemplarily, the preset power consumption value may be 10uA. Using a chip module with low power consumption can reduce the power consumption of the WAPI terminal, extend the working time, and reduce the frequency of battery replacement, thereby reducing the manpower and equipment costs consumed by replacement.

[0038] In one embodiment, the identity authentication function of the authentication server AS of each WAPI terminal is temporary. For example, after the WAPI terminal passes the AS identity authentication once, such as the first time, the identity authentication function of the AS of the WAPI terminal can be eliminated (such as eliminated in a software-defined network manner) or disabled, that is, the AS identity authentication function is temporarily possessed, and then no longer possessed. In this way, the overall power consumption of the WAPI terminal within a certain working time can be saved, and the identity authentication does not need to be performed every time data needs to be returned. In other embodiments, the identity authentication function of the AS can also be permanently possessed so that the identity authentication is performed every time data needs to be returned. This is a setting based on security considerations, and of course it is not limited to this.

[0039] In one embodiment, after the multiple WAPI terminals complete the AS identity authentication in parallel within themselves and the authentication result is passed, each of them uploads the transmission line monitoring data related to the tower where the multiple WAPI terminals are located through the WAPI network.

[0040] Exemplarily, each WAPI terminal can be connected to the monitoring equipment on its own tower, such as temperature and humidity sensors or cameras, to obtain transmission line monitoring data, and upload the transmission line monitoring data related to its own tower after identity authentication is passed, that is, the networking is successful. These transmission line monitoring data can be uniformly transmitted by the target WAPI terminal to the power monitoring background server.

[0041] In one embodiment, the target WAPI terminal has a built-in or externally connected wireless communication module, the wireless communication module includes a 4G or 5G communication module, and the wireless communication module is communicatively connected to the power monitoring background server.

[0042] Exemplarily, the 5G communication module can be connected to the target WAPI terminal for communication alone, or Figure 1 As shown in the figure, it is a module inside the target WAPI terminal and is connected to the target WAPI terminal for communication, such as being connected to the processor therein (not shown). A firewall or an isolation gateway can also be set between the 5G communication module and the power monitoring background server. These can be understood by referring to the prior art and will not be repeated here.

[0043] In a second aspect, the present disclosure provides a method for dynamic distributed authentication of a terminal in a WAPI network of a power line, which is applied to, for example, Figure 1Multiple WAPI terminals are arranged one by one on multiple towers in the transmission line shown in FIG. Figure 3 As shown in , the method may include the following steps:

[0044] Step S301: When receiving the preset instruction, the target WAPI terminal generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal. The target WAPI terminal is a WAPI terminal that serves as a wireless access point AP among the multiple WAPI terminals, and the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS.

[0045] Step S302: when the multiple WAPI terminals need to send identity authentication requests to the authentication server AS for identity authentication during networking, each of them completes the identity authentication of the AS in parallel within itself.

[0046] Exemplarily, the target WAPI terminal as a wireless access point AP can pre-store or communicate and interact to obtain the unique identification of each WAPI terminal such as the terminal name, unique code, etc. In one embodiment, the preset instruction can at least include but is not limited to the monitoring data return instruction issued by the power monitoring background server. When the target WAPI terminal receives the preset instruction such as the data return instruction, it generates the identification capability information of each WAPI terminal based on the unique identification of each WAPI terminal such as the terminal name and the unique code. The identification capability information is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS. After that, the target WAPI terminal distributes the generated identification capability information of each WAPI terminal to the corresponding WAPI terminal. That is to say, in this embodiment, the identity authentication function that originally needs to be completed by the remote AS is sent to each WAPI terminal locally through the target WAPI terminal, and the identity authentication of the AS is completed by each WAPI terminal itself, so that each WAPI terminal has the ability of the AS. The towers in the transmission line corresponding to each WAPI terminal are different, and the data returned is also different. In order to distinguish, the identification capability information generated for each WAPI terminal is slightly different, such as the unique identification of the terminal carried is different. In addition, the identification capability information includes information about the AS performing identity authentication, such as certificates, signatures, keys, etc., which are required for the corresponding WAPI terminal to build an identity authentication function. When multiple WAPI terminals need to send an identity authentication request to the authentication server AS for identity authentication during networking, each WAPI terminal can complete the AS identity authentication in parallel within itself. The identity authentication request may at least include the unique identification of the WAPI terminal and identity credentials such as a digital certificate. The specific authentication process can refer to the existing WAPI technology. In a specific example, each WAPI terminal can, for example, send an identity authentication request to an internal module for executing the identity authentication function of the AS, and receive the returned authentication result such as pass or fail information internally. If it passes, the networking is successful and the monitoring data can be returned.

[0047] The above scheme of this embodiment can realize dynamic distributed AS authentication locally on the side of the transmission line tower, that is, the WAPI terminal. Each WAPI terminal can realize internal authentication in parallel without waiting for each other for unified authentication, and they do not rely on each other for authentication but are distributed and authenticated separately. The problems of startup and subsequent communication connection establishment speed of each WAPI terminal on site can be ignored, and there is no need to remotely transmit the identity authentication request to the remote AS and remotely receive the authentication result. On the whole, multiple WAPI terminals can quickly realize the AS authentication process locally. In this way, authentication can be realized very quickly and the monitoring data of the transmission line can be returned in time through successful networking, meeting the high requirements for the real-time performance of the returned data during transmission line monitoring.

[0048] In this embodiment, since the AS capability is implemented locally on multiple WAPI terminals, in the identity authentication process of multiple WAPI terminals, in addition to paying attention to the authentication speed, that is, fast authentication and authorization, it is also necessary to pay attention to the accuracy of the authentication results, such as reducing or avoiding the error probability when the AS capability is implemented locally on the WAPI terminal to improve the accuracy of the authentication results.

[0049] Therefore, based on the above embodiments, in one embodiment, each WAPI terminal may be built with a programmable chip module, and the identification capability information of each WAPI terminal indicates that the corresponding programmable chip module uses the identification capability information and constructs the identity authentication function of the identification server AS locally through a software-defined network. Exemplarily, the programmable chip module can define the functions it implements through software. In this embodiment, a programmable chip module is pre-built in for each WAPI terminal, and then the programmable chip module uses the identification capability information and constructs the identity authentication function of the identification server AS locally through a software-defined network (SDN). That is, by borrowing mature software-defined network technology, the capabilities of AS are accurately delegated to the WAPI terminal. In other words, the capabilities of AS, namely the identity authentication function, are accurately implemented in the WAPI terminal through a software-defined network. In this way, the capabilities of AS can be easily, quickly and reliably implemented in WAPI terminals, reducing the time for dynamically building the identity authentication function of AS, so that the identity authentication of each WAPI terminal can be carried out in a timely and accurate manner, reducing or even avoiding errors in the authentication process, and then quickly realizing the accurate authentication of each WAPI terminal and returning the monitoring data of the transmission line in time through successful networking, meeting the high requirements for the real-time nature of the returned data during transmission line monitoring.

[0050] In one embodiment, the programmable chip module is a chip module whose working power consumption is lower than a preset power consumption value. Exemplarily, the preset power consumption value may be 10uA. Using a chip module with low power consumption can reduce the power consumption of the WAPI terminal, extend the working time, and reduce the frequency of battery replacement, thereby reducing the manpower and equipment costs consumed by replacement.

[0051] In one embodiment, the identity authentication function of the authentication server AS of each WAPI terminal is temporary.

[0052] In one embodiment, after the multiple WAPI terminals complete the AS identity authentication in parallel within themselves and the authentication result is passed, each of them uploads the transmission line monitoring data related to the tower where the multiple WAPI terminals are located through the WAPI network.

[0053] In one embodiment, the target WAPI terminal has a built-in or externally connected wireless communication module, the wireless communication module includes a 4G or 5G communication module, and the wireless communication module is communicatively connected to the power monitoring background server.

[0054] In one embodiment, the preset instruction at least includes a monitoring data return instruction issued by the power monitoring backend server.

[0055] It should be noted that, although the steps of the method in the present disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and / or one step may be decomposed into multiple steps for execution, etc. In addition, it is also easy to understand that these steps may be, for example, executed synchronously or asynchronously in multiple terminals, modules / processes / threads.

[0056] Regarding the method in the above embodiment, the specific manner of executing the operation in each step and the corresponding technical effects brought about have been described in detail in the embodiment of the system, and will not be elaborated here.

[0057] It should be noted that although several modules or units of the device / terminal for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiment of the present disclosure, the features and functions of two or more modules or units described above can be concretized in one module or unit. Conversely, the features and functions of a module or unit described above can be further divided into multiple modules or units for concretization. The components displayed as modules or units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the disclosed solution. Those of ordinary skill in the art can understand and implement it without paying creative work.

[0058] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0059] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A dynamic distributed authentication system for WAPI network terminals of power transmission lines, characterized in that: The system includes a plurality of WAPI terminals arranged one by one on a plurality of iron towers in a transmission line; When receiving the preset instruction, the target WAPI terminal generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal; wherein the target WAPI terminal is a WAPI terminal serving as a wireless access point AP among the multiple WAPI terminals, and the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS; When the multiple WAPI terminals need to send identity authentication requests to the authentication server AS for identity authentication during networking, each of them completes the identity authentication of the AS in parallel within itself.

2. The system according to claim 1, characterized in that Each WAPI terminal has a built-in programmable chip module. The authentication capability information of each WAPI terminal instructs the corresponding programmable chip module to use the authentication capability information and locally construct an identity authentication function of an authentication server AS through a software-defined network.

3. The system according to claim 1 or 2, characterized in that: The programmable chip module is a chip module whose working power consumption is lower than a preset power consumption value.

4. The system according to claim 1 or 2, characterized in that: The identity authentication function of the authentication server AS of each WAPI terminal is temporary.

5. The system according to claim 1 or 2, characterized in that: After the multiple WAPI terminals complete the AS identity authentication in parallel and the authentication result is passed, each of them uploads the transmission line monitoring data related to the tower where the multiple WAPI terminals are located through the WAPI network.

6. The system according to claim 1 or 2, characterized in that: The target WAPI terminal has a built-in or externally connected wireless communication module, the wireless communication module includes a 4G or 5G communication module, and the wireless communication module is communicatively connected to the power monitoring background server.

7. The system according to claim 6, characterized in that The preset instructions at least include monitoring data return instructions issued by the power monitoring background server.

8. A method for dynamic distributed authentication of WAPI network terminals in power transmission lines, characterized in that: The method is applied to multiple WAPI terminals arranged one by one on multiple towers in a transmission line, and includes the following steps: When receiving the preset instruction, the target WAPI terminal generates the authentication capability information of each WAPI terminal based on the unique identifier of each WAPI terminal, and distributes the authentication capability information of each WAPI terminal to the corresponding WAPI terminal; wherein the target WAPI terminal is a WAPI terminal serving as a wireless access point AP among the multiple WAPI terminals, and the authentication capability information of each WAPI terminal is used to enable the corresponding WAPI terminal to have the identity authentication function of the authentication server AS; When the multiple WAPI terminals need to send identity authentication requests to the authentication server AS for identity authentication during networking, each of them completes the identity authentication of the AS in parallel within itself.

9. The method according to claim 8, characterized in that Each WAPI terminal has a built-in programmable chip module, which uses the authentication capability information and constructs the identity authentication function of the authentication server AS locally through a software-defined network.

10. The method according to claim 8 or 9, characterized in that: The programmable chip module is a chip module whose working power consumption is lower than a preset power consumption value.

Images