Block chain-based power Internet of Things equipment data access management method and system

Abstract

The invention discloses an electric power Internet of Things equipment data access management method and system based on a block chain, and relates to the technical field of data access management, and the method comprises the steps: obtaining electric power Internet of Things equipment information, obtaining electric power Internet of Things equipment data according to the electric power Internet of Things equipment information, obtaining an equipment data importance index according to the electric power Internet of Things equipment data, and judging whether the access user has the data access permission or not according to the data access basic index. According to the method, the importance of the power Internet of Things equipment data is accurately evaluated through the equipment data importance index, the authority of the access user is adjusted through the data access environment coefficient, and the access authority of the access user is evaluated through the data access basic index, so that the data access management efficiency is improved; through the data access security index, the data access request of the access user is managed, and the reliability and stability of the power Internet of Things equipment data are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data access management, and in particular to a method and system for data access management of electric power Internet of Things devices based on blockchain. Background Art

[0002] With the rapid development of power systems, the demand for monitoring power systems is also increasing. The construction of a cloud-based visualization platform can enable more intuitive and accurate monitoring of power equipment. However, due to the large amount of data and number of IoT devices, it is difficult to adapt to the needs of users for flexible control of IoT devices, such as the management of permissions for each user and each type of equipment.

[0003] At present, the access management of power Internet of Things device data still has problems such as the inability to accurately assess the importance of power equipment data based on the data attribute information of the power Internet of Things device data, the inability to analyze the data access environment based on the specific information of the accessing user, the inability to accurately assess the access rights of the accessing user, and the inability to accurately assess the security status of data access. Summary of the invention

[0004] In order to solve the above technical problems, a blockchain-based power Internet of Things device data access management method and system are provided. This technical solution solves the problems raised in the above background technology that the importance of power equipment data cannot be accurately evaluated based on the data attribute information of the power Internet of Things device data, the data access environment cannot be analyzed based on the specific information of the accessing user, the access rights of the accessing user cannot be accurately evaluated, and the security status of data access cannot be accurately evaluated.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] The data access management method of power Internet of Things equipment based on blockchain includes:

[0007] Obtaining power Internet of Things device information, wherein the power Internet of Things device information includes device specification information, device operating status information, and device geographic information;

[0008] According to the power Internet of Things device information, the power Internet of Things device data is obtained, wherein the power Internet of Things device data includes power system operation data, power system sensitive data, power system operation data and environmental data;

[0009] Obtain important indexes of equipment data based on power IoT equipment data;

[0010] Acquire access user information, wherein the access user information includes access address information and user identity information;

[0011] According to the access user information, target access data information is obtained, wherein the target access data information includes target access data geographic information and target access data type information;

[0012] Obtaining a data access environment coefficient according to target access data information and access address information;

[0013] According to the data access environment coefficient and user identity information, a data access basic index is obtained;

[0014] According to the data access basic index, determine whether the accessing user has the data access right. If not, deny the user's data access request. If yes, obtain the data access security index according to the data access environment coefficient, device data importance index and user identity information.

[0015] According to the data access security index, it is determined whether the data access request of the access user is approved. If so, the user data access is successful. If not, the user data access request is rejected.

[0016] Preferably, obtaining the device data importance index according to the power Internet of Things device data specifically includes:

[0017] Obtain data geographic attribute information based on power IoT device data;

[0018] Acquire power network information, wherein the power network information includes power regional distribution information and regional power data corresponding to each region;

[0019] Obtain basic index of equipment data based on power network information and data geographic attribute information;

[0020] Obtain important indexes of equipment data based on basic indexes of equipment data and data of power IoT equipment;

[0021] The calculation formula of the equipment data basic index is:

[0022]

[0023] In the formula, is the device data basic index of the i-th power IoT device data, S i is the area of ​​the power region to which the data of the ith power IoT device belongs, D i is the total power of the power area to which the data of the ith power IoT device belongs, S0 is the total area of ​​the power network, and D0 is the total power of the power network;

[0024] The calculation formula of the equipment data importance index is:

[0025]

[0026] Where Q(i) is the device data importance index of the i-th power IoT device data, α i is the data volume of the ith power IoT device, τ i represents the data type influence coefficient, where if the data of the i-th power IoT device is environmental data, then τ i =1, if the data of the ith power IoT device is the power system operation data, then τ i =2, if the data of the ith power IoT device is the power system operation data, then τ i =3, if the data of the ith power IoT device is sensitive data of the power system, then τ i =5.

[0027] Preferably, judging whether the accessing user has the data access right according to the data access basic index specifically includes:

[0028] According to the target access data information, obtain the target access data geographic information;

[0029] Obtain data access environment coefficients based on target access data geographic information and access address information;

[0030] According to the data access environment coefficient and user identity information, a data access basic index is obtained;

[0031] Based on data access management requirements, obtain the data access basic index threshold;

[0032] According to the data access basic index and the data access basic index threshold, determine whether the access user has the data access permission. If the data access basic index is lower than the data access basic index threshold, the access user does not have the access permission, and the user's data access request is rejected.

[0033] If the data access basic index is higher than the data access basic index threshold, the data access security index is obtained according to the data access environment coefficient, the device data importance index and the user identity information;

[0034] The calculation formula of the data access environment coefficient is:

[0035]

[0036] Where E is the data access environment coefficient, L is the distance between the target access data geographic location and the access address, σ(1, μ) represents the data coherence index between the target access data geographic location and the access address, where μ is the number of power zones between the target access data geographic location and the access address. If the target access data geographic location and the access address are in the same power zone, then σ(1, μ) = 1; if the target access data geographic location and the access address are in different power zones, then σ(1, μ) = e -μ .

[0037] Preferably, obtaining the data access basic index according to the data access environment coefficient and the user identity information specifically includes:

[0038] According to the user identity information, based on the data access management authority allocation, the user identity authority information is obtained;

[0039] According to the data access environment coefficient and user identity authority information, the data access basic index is obtained;

[0040] The calculation formula of the data access basic index is:

[0041]

[0042] Where R is the data access basic index, E is the data access environment coefficient, A is the access user identity basic authority index, B(T, T1, T2) is the access user login time difference index, where T is the access user login time, (T1, T2) is the access user standard login time range, if T∈(T1, T2), then B(T, T1, T2)=1, if but b is the login time difference sensitivity coefficient.

[0043] Preferably, judging whether to approve the data access request of the access user according to the data access security index specifically includes:

[0044] According to the target access data information, acquiring target access data association information, wherein the target access data association information indicates a mutual association state of the target access data;

[0045] Acquire user access operation information according to the access user information, wherein the user access operation information indicates access operation information requested by the user to perform on the data;

[0046] Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the user access operation information;

[0047] Based on the data access security index, determine whether to approve the data access request of the access user.

[0048] Preferably, judging whether to approve the data access request of the access user according to the data access security index specifically includes:

[0049] According to the user access operation information, based on the operation permission requirement analysis, the access operation sensitivity coefficient is obtained;

[0050] Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient;

[0051] Based on data access management requirements, obtain the data access security index threshold;

[0052] According to the data access security index and the data access security index threshold, determine whether to approve the data access request of the access user; if the data access security index is lower than the data access security index threshold, the data access request of the access user is rejected;

[0053] If the data access security index is higher than the data access security index threshold, the data access request of the access user is approved;

[0054] Wherein, based on the data access management requirements, the access operation sensitivity coefficient threshold is obtained;

[0055] According to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, it is determined whether the access operation behavior of the access user shall be included in the third-party monitoring mechanism. If the access operation sensitivity coefficient exceeds the access operation sensitivity coefficient threshold, the access operation behavior of the access user shall be subject to third-party monitoring;

[0056] The calculation formula of access operation sensitivity coefficient is:

[0057]

[0058] Where k is the access operation sensitivity coefficient, δ j is the permission requirement index of the i-th access operation of the access user, Q(j) is the device data importance index of the target data of the j-th access operation of the access user;

[0059] The calculation formula of data access security index is:

[0060]

[0061] Where W(s) is the data access security index of the sth target access data of the access user, Q s The device data importance index for accessing the sth target access data of the user, ε gsis the power Internet of Things device distance of the g-th target access data associated with the s-th target access data of the access user, and θ is the power Internet of Things device data distance influence coefficient.

[0062] Furthermore, a blockchain-based power Internet of Things device data access management system is proposed to implement the above-mentioned management method, including:

[0063] A main control module, the main control module is used to determine whether the access user has the data access right according to the data access basic index and the data access basic index threshold, determine whether the data access request of the access user is approved according to the data access security index and the data access security index threshold, determine whether the access operation behavior of the access user is added to the third-party monitoring mechanism according to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, obtain the user identity authority information based on the user identity information and the data access management authority allocation, obtain the target access data association information according to the target access data information, and conduct third-party monitoring of the access operation behavior of the access user;

[0064] An information acquisition module, the information acquisition module is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data based on the power Internet of Things device information, acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information based on the access user information;

[0065] An evaluation module, wherein the evaluation module is used to obtain a basic index of device data according to power network information and data geographic attribute information, obtain a device data importance index according to the basic index of device data and power Internet of Things device data, obtain a data access environment coefficient according to target access data geographic information and access address information, obtain a data access basic index according to the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on operation authority requirement analysis according to user access operation information, and obtain a data access security index according to the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient;

[0066] A display module interacts with the main control module and is used to display power Internet of Things device data, device data importance index, target access data association information, data access basic index, user access operation information and data access security index.

[0067] Optionally, the main control module specifically includes:

[0068] A control unit, the control unit is used to obtain user identity authority information based on data access management authority allocation according to user identity information, obtain target access data association information according to target access data information, and perform third-party monitoring of access operation behavior of access users;

[0069] An information receiving unit, which interacts with the information acquisition module and the evaluation module to receive data and transmit it to the judgment unit;

[0070] A judgment unit, wherein the judgment unit is used to judge whether the accessing user has the data access right based on the data access basic index and the data access basic index threshold, judge whether the data access request of the accessing user is approved based on the data access security index and the data access security index threshold, and judge whether the access operation behavior of the accessing user is included in the third-party monitoring mechanism based on the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold.

[0071] Optionally, the information acquisition module specifically includes:

[0072] A first acquisition unit, the first acquisition unit is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, and acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data according to the power Internet of Things device information;

[0073] The second acquisition unit is used to acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information according to the access user information.

[0074] Optionally, the evaluation module specifically includes:

[0075] A data evaluation unit, the data evaluation unit is used to obtain a basic index of device data according to the power network information and the data geographic attribute information, and to obtain an important index of device data according to the basic index of device data and the power Internet of Things device data;

[0076] An access assessment unit, wherein the access assessment unit is used to obtain a data access environment coefficient based on target access data geographic information and access address information, obtain a data access basic index based on the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on user access operation information and based on operation authority requirement analysis, and obtain a data access security index based on the data access environment coefficient, device data importance index, target access data association information and access operation sensitivity coefficient.

[0077] Compared with the prior art, the present invention has the following beneficial effects:

[0078] The present invention proposes a data access management method and system for power Internet of Things devices based on blockchain. The importance of power Internet of Things device data is accurately evaluated through the device data importance index, and the permissions of access users are adjusted through the data access environment coefficient to achieve accurate analysis of the permissions of access users. The access permissions of access users are evaluated through the data access basic index, thereby improving the data access management efficiency. The data access requests of access users are managed through the data access security index, thereby ensuring the reliability and stability of power Internet of Things device data. BRIEF DESCRIPTION OF THE DRAWINGS

[0079] Figure 1 This is a flow chart of the data access management method for power Internet of Things devices based on blockchain proposed by the present invention;

[0080] Figure 2 A flowchart for obtaining a basic index for data access in the present invention;

[0081] Figure 3 A flowchart for obtaining a data access security index in the present invention;

[0082] Figure 4 This is a structural block diagram of the blockchain-based power Internet of Things equipment data access management system proposed in this invention. DETAILED DESCRIPTION

[0083] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0084] Reference Figure 1 - Figure 3 As shown, the blockchain-based power Internet of Things device data access management method in an embodiment of the present invention includes:

[0085] S100: Acquire power Internet of Things device information, where the power Internet of Things device information includes device specification information, device operating status information, and device geographic information;

[0086] S200: acquiring power Internet of Things device data according to the power Internet of Things device information, where the power Internet of Things device data includes power system operation data, power system sensitive data, power system operation data and environmental data;

[0087] S300: Obtain important indexes of device data based on power IoT device data;

[0088] Specifically, based on the power IoT device data, important device data indexes are obtained, including:

[0089] Obtain data geographic attribute information based on power IoT device data;

[0090] Acquire power network information, wherein the power network information includes power regional distribution information and regional power data corresponding to each region;

[0091] Obtain basic index of equipment data based on power network information and data geographic attribute information;

[0092] Obtain important indexes of equipment data based on basic indexes of equipment data and data of power IoT equipment;

[0093] The calculation formula of the equipment data basic index is:

[0094]

[0095] In the formula, is the device data basic index of the i-th power IoT device data, S i is the area of ​​the power region to which the data of the ith power IoT device belongs, D i is the total power of the power area to which the data of the ith power IoT device belongs, S0 is the total area of ​​the power network, and D0 is the total power of the power network;

[0096] The calculation formula of the equipment data importance index is:

[0097]

[0098] Where Q(i) is the device data importance index of the i-th power IoT device data, α i is the data volume of the ith power IoT device, τ i represents the data type influence coefficient, where if the data of the i-th power IoT device is environmental data, then τ i =1, if the data of the ith power IoT device is the power system operation data, then τ i =2, if the data of the ith power IoT device is the power system operation data, then τ i =3, if the data of the ith power IoT device is sensitive data of the power system, then τ i =5.

[0099] In this solution, the data geographic attribute information is obtained through the power Internet of Things device data, and the device data basic index is obtained based on the power network information and the data geographic attribute information. The device data importance index is obtained based on the device data basic index and the power Internet of Things device data. The important status of the power Internet of Things device data is accurately evaluated through the device data importance index, thereby improving the efficiency of data access management;

[0100] It is understandable that different types of power Internet of Things data contain different amounts of information and require completely different access permissions. In this embodiment, the ambient temperature, ambient humidity and ambient air pressure monitored by the power Internet of Things devices are used as environmental data, the operation logs, maintenance records and equipment configurations of the power equipment are used as power system operation data, the real-time power load, grid status and power equipment operating status are used as power system operation data, and the specific power consumption information of the region, including the name, address and historical power consumption of specific electricity users, is used as sensitive data of the power system.

[0101] S400: Acquire access user information, where the access user information includes access address information and user identity information;

[0102] S500: acquiring target access data information according to access user information, wherein the target access data information includes target access data geographic information and target access data type information;

[0103] S600: Obtaining a data access environment coefficient according to target access data information and access address information;

[0104] S700: Obtaining a data access basic index according to the data access environment coefficient and user identity information;

[0105] S800: judging whether the accessing user has the data access right according to the data access basic index, and if not, denying the user's data access request; if yes, obtaining the data access security index according to the data access environment coefficient, the device data importance index and the user identity information;

[0106] Specifically, the data access basic index is used to determine whether the accessing user has the data access permission, including:

[0107] According to the target access data information, obtain the target access data geographic information;

[0108] Obtain data access environment coefficients based on target access data geographic information and access address information;

[0109] According to the data access environment coefficient and user identity information, a data access basic index is obtained;

[0110] Based on data access management requirements, obtain the data access basic index threshold;

[0111] According to the data access basic index and the data access basic index threshold, determine whether the access user has the data access permission. If the data access basic index is lower than the data access basic index threshold, the access user does not have the access permission, and the user's data access request is rejected.

[0112] If the data access basic index is higher than the data access basic index threshold, the data access security index is obtained according to the data access environment coefficient, the device data importance index and the user identity information;

[0113] The calculation formula of the data access environment coefficient is:

[0114]

[0115] Where E is the data access environment coefficient, L is the distance between the target access data geographic location and the access address, σ(1, μ) represents the data coherence index between the target access data geographic location and the access address, where μ is the number of power zones between the target access data geographic location and the access address. If the target access data geographic location and the access address are in the same power zone, then σ(1, μ) = 1; if the target access data geographic location and the access address are in different power zones, then σ(1, μ) = e -μ .

[0116] Specifically, according to the data access environment coefficient and user identity information, the data access basic index is obtained, including:

[0117] According to the user identity information, based on the data access management authority allocation, the user identity authority information is obtained;

[0118] According to the data access environment coefficient and user identity authority information, the data access basic index is obtained;

[0119] The calculation formula of the data access basic index is:

[0120]

[0121] Where R is the data access basic index, E is the data access environment coefficient, A is the access user identity basic authority index, B(T, T1, T2) is the access user login time difference index, where T is the access user login time, (T1, T2) is the access user standard login time range, if T∈(T1, T2), then B(T, T1, T2)=1, if but b is the login time difference sensitivity coefficient.

[0122] In this solution, the data access environment coefficient is obtained through the target access data geographic information and access address information, and the data access basic index is obtained based on the data access environment coefficient and user identity information. According to the data access basic index and the data access basic index threshold, it is judged whether the access user has the data access right. The access user's rights are adjusted through the data access environment coefficient, and the access user's access rights are accurately evaluated through the data access basic index.

[0123] It is understandable that different access user identities have different permissions. Different data access basic permission indexes are given according to different access user identities. The data access basic permission index of the access user is adjusted according to the access address and the target access data address to obtain the data access basic index. For example, if the access user is an electric maintenance personnel, the access address is located in area A of the electric power network, and the target access data is the electric power Internet of Things device data in area B of the electric power network, then the access user may be abnormal, and the access user's access rights are reduced to avoid data leakage and tampering.

[0124] It should be noted that, in this embodiment, the access rights of the accessing user are analyzed through the data access basic index, which does not involve specific analysis of the attributes of the target access data, thereby improving the efficiency of data access management and reducing resource costs.

[0125] S900: judging whether the data access request of the access user is approved according to the data access security index, if so, the user data access is successful, if not, the user data access request is rejected.

[0126] Specifically, based on the data access security index, it is determined whether the data access request of the access user is approved, including:

[0127] According to the target access data information, acquiring target access data association information, wherein the target access data association information indicates a mutual association state of the target access data;

[0128] Acquire user access operation information according to the access user information, wherein the user access operation information indicates access operation information requested by the user to perform on the data;

[0129] Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the user access operation information;

[0130] Based on the data access security index, determine whether to approve the data access request of the access user.

[0131] Specifically, judging whether to approve the data access request of the access user according to the data access security index includes:

[0132] According to the user access operation information, based on the operation permission requirement analysis, the access operation sensitivity coefficient is obtained;

[0133] Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient;

[0134] Based on data access management requirements, obtain the data access security index threshold;

[0135] According to the data access security index and the data access security index threshold, determine whether to approve the data access request of the access user; if the data access security index is lower than the data access security index threshold, the data access request of the access user is rejected;

[0136] If the data access security index is higher than the data access security index threshold, the data access request of the access user is approved;

[0137] Wherein, based on the data access management requirements, the access operation sensitivity coefficient threshold is obtained;

[0138] According to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, it is determined whether the access operation behavior of the access user shall be included in the third-party monitoring mechanism. If the access operation sensitivity coefficient exceeds the access operation sensitivity coefficient threshold, the access operation behavior of the access user shall be subject to third-party monitoring;

[0139] The calculation formula of access operation sensitivity coefficient is:

[0140]

[0141] Where k is the access operation sensitivity coefficient, δ j is the permission requirement index of the i-th access operation of the access user, Q(j) is the device data importance index of the target data of the j-th access operation of the access user;

[0142] The calculation formula of data access security index is:

[0143]

[0144] Where W(s) is the data access security index of the sth target access data of the access user, Q s The device data importance index for accessing the sth target access data of the user, ε gs is the power Internet of Things device distance of the g-th target access data associated with the s-th target access data of the access user, and θ is the power Internet of Things device data distance influence coefficient.

[0145] In this scheme, the target access data association information is obtained through the target access data information, the access operation sensitivity coefficient is obtained based on the user access operation information and the operation authority requirement analysis, the data access security index is obtained based on the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient, and the data access security index is used to determine whether the data access request of the access user is approved based on the data access security index and the data access security index threshold, and whether the access operation behavior of the access user is added to the third-party monitoring mechanism based on the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold. If the access operation sensitivity coefficient exceeds the access operation sensitivity coefficient threshold, the access operation behavior of the access user is subject to third-party monitoring;

[0146] It is understandable that when it comes to sensitive access operations involving some power IoT device data, that is, reading, changing or adjusting some sensitive data of the power system or power IoT devices, even if the access user has sufficient permissions, for the sake of data security and stability, a third party needs to be added to monitor the access operations of the access user to avoid anomalies.

[0147] Reference Figure 4 As shown, further, combined with the above-mentioned blockchain-based power Internet of Things device data access management method, a blockchain-based power Internet of Things device data access management system is proposed, including:

[0148] A main control module, the main control module is used to determine whether the access user has the data access right according to the data access basic index and the data access basic index threshold, determine whether the data access request of the access user is approved according to the data access security index and the data access security index threshold, determine whether the access operation behavior of the access user is added to the third-party monitoring mechanism according to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, obtain the user identity authority information based on the user identity information and the data access management authority allocation, obtain the target access data association information according to the target access data information, and conduct third-party monitoring of the access operation behavior of the access user;

[0149] An information acquisition module, the information acquisition module is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data based on the power Internet of Things device information, acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information based on the access user information;

[0150] An evaluation module, wherein the evaluation module is used to obtain a basic index of device data according to power network information and data geographic attribute information, obtain a device data importance index according to the basic index of device data and power Internet of Things device data, obtain a data access environment coefficient according to target access data geographic information and access address information, obtain a data access basic index according to the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on operation authority requirement analysis according to user access operation information, and obtain a data access security index according to the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient;

[0151] A display module interacts with the main control module and is used to display power Internet of Things device data, device data importance index, target access data association information, data access basic index, user access operation information and data access security index.

[0152] Main control module, specifically including:

[0153] A control unit, the control unit is used to obtain user identity authority information based on data access management authority allocation according to user identity information, obtain target access data association information according to target access data information, and perform third-party monitoring of access operation behavior of access users;

[0154] An information receiving unit, which interacts with the information acquisition module and the evaluation module to receive data and transmit it to the judgment unit;

[0155] A judgment unit, wherein the judgment unit is used to judge whether the accessing user has the data access right based on the data access basic index and the data access basic index threshold, judge whether the data access request of the accessing user is approved based on the data access security index and the data access security index threshold, and judge whether the access operation behavior of the accessing user is included in the third-party monitoring mechanism based on the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold.

[0156] Information acquisition module, specifically including:

[0157] A first acquisition unit, the first acquisition unit is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, and acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data according to the power Internet of Things device information;

[0158] The second acquisition unit is used to acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information according to the access user information.

[0159] Evaluation module. It includes:

[0160] A data evaluation unit, the data evaluation unit is used to obtain a basic index of device data according to the power network information and the data geographic attribute information, and to obtain an important index of device data according to the basic index of device data and the power Internet of Things device data;

[0161] An access assessment unit, wherein the access assessment unit is used to obtain a data access environment coefficient based on target access data geographic information and access address information, obtain a data access basic index based on the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on user access operation information and based on operation authority requirement analysis, and obtain a data access security index based on the data access environment coefficient, device data importance index, target access data association information and access operation sensitivity coefficient.

[0162] To sum up, the advantages of the present invention are: obtaining the basic index of device data through power network information and data geographic attribute information, obtaining the device data importance index according to the basic index of device data and power Internet of Things device data, accurately evaluating the importance of power Internet of Things device data through the device data importance index, obtaining the data access environment coefficient through the target access data geographic information and access address information, adjusting the permissions of the accessing user through the data access environment coefficient, obtaining the data access basic index according to the data access environment coefficient and user identity information, evaluating the access permissions of the accessing user through the data access basic index, obtaining the access operation sensitivity coefficient based on the operation permission requirement analysis through the user access operation information, obtaining the data access security index according to the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient, managing the data access requests of the accessing user through the data access security index, and ensuring the reliability and stability of the power Internet of Things device data.

[0163] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A data access management method for power Internet of Things devices based on blockchain, characterized in that: include: Obtaining power Internet of Things device information, wherein the power Internet of Things device information includes device specification information, device operating status information, and device geographic information; According to the power Internet of Things device information, the power Internet of Things device data is obtained, wherein the power Internet of Things device data includes power system operation data, power system sensitive data, power system operation data and environmental data; Obtain important indexes of equipment data based on power IoT equipment data; Acquire access user information, wherein the access user information includes access address information and user identity information; According to the access user information, target access data information is obtained, wherein the target access data information includes target access data geographic information and target access data type information; Obtaining a data access environment coefficient according to target access data information and access address information; According to the data access environment coefficient and user identity information, a data access basic index is obtained; According to the data access basic index, determine whether the accessing user has the data access right. If not, deny the user's data access request. If yes, obtain the data access security index according to the data access environment coefficient, device data importance index and user identity information. According to the data access security index, it is determined whether the data access request of the access user is approved. If so, the user data access is successful. If not, the user data access request is rejected.

2. According to the blockchain-based power Internet of Things device data access management method according to claim 1, it is characterized in that: The obtaining of important indexes of device data according to the power Internet of Things device data specifically includes: Obtain data geographic attribute information based on power IoT device data; Acquire power network information, wherein the power network information includes power regional distribution information and regional power data corresponding to each region; Obtain basic index of equipment data based on power network information and data geographic attribute information; Obtain important indexes of equipment data based on basic indexes of equipment data and data of power IoT equipment; The calculation formula of the equipment data basic index is: In the formula, is the device data basic index of the i-th power IoT device data, S i is the area of ​​the power region to which the data of the ith power IoT device belongs, D i is the total power of the power area to which the data of the ith power IoT device belongs, S0 is the total area of ​​the power network, and D0 is the total power of the power network; The calculation formula of the equipment data importance index is: Where Q(i) is the device data importance index of the i-th power IoT device data, α i is the data volume of the ith power IoT device, τ i represents the data type influence coefficient, where if the data of the i-th power IoT device is environmental data, then τ i =1, if the data of the ith power IoT device is the power system operation data, then τ i =2, if the data of the ith power IoT device is the power system operation data, then τ i =3, if the data of the ith power IoT device is sensitive data of the power system, then τ i =5.

3. According to the blockchain-based power Internet of Things device data access management method according to claim 1, it is characterized in that: The step of judging whether the accessing user has the data access permission according to the data access basic index specifically includes: According to the target access data information, obtain the target access data geographic information; Obtain data access environment coefficients based on target access data geographic information and access address information; According to the data access environment coefficient and user identity information, a data access basic index is obtained; Based on data access management requirements, obtain the data access basic index threshold; According to the data access basic index and the data access basic index threshold, determine whether the accessing user has the data access permission. If the data access basic index is lower than the data access basic index threshold, the accessing user does not have the access permission, and the user's data access request is rejected. If the data access basic index is higher than the data access basic index threshold, the data access security index is obtained according to the data access environment coefficient, the device data importance index and the user identity information; The calculation formula of the data access environment coefficient is: Where E is the data access environment coefficient, L is the distance between the target access data geographic location and the access address, σ(1, μ) represents the data coherence index between the target access data geographic location and the access address, where μ is the number of power zones between the target access data geographic location and the access address. If the target access data geographic location and the access address are in the same power zone, then σ(1, μ) = 1; if the target access data geographic location and the access address are in different power zones, then σ(1, μ) = e -μ .

4. The method for data access management of power Internet of Things devices based on blockchain according to claim 3 is characterized in that: The step of obtaining the data access basic index according to the data access environment coefficient and the user identity information specifically includes: According to the user identity information, based on the data access management authority allocation, the user identity authority information is obtained; According to the data access environment coefficient and user identity authority information, the data access basic index is obtained; The calculation formula of the data access basic index is: Where R is the data access basic index, E is the data access environment coefficient, A is the access user identity basic authority index, B(T, T1, T2) is the access user login time difference index, where T is the access user login time, (T1, T2) is the access user standard login time range, if T∈(T1, T2), then B(T, T1, T2)=1, if but b is the login time difference sensitivity coefficient.

5. The method for data access management of power Internet of Things devices based on blockchain according to claim 1 is characterized in that: The step of judging whether to approve the data access request of the access user according to the data access security index specifically includes: According to the target access data information, acquiring target access data association information, wherein the target access data association information indicates a mutual association state of the target access data; Acquire user access operation information according to the access user information, wherein the user access operation information indicates access operation information requested by the user to perform on the data; Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the user access operation information; Based on the data access security index, determine whether to approve the data access request of the access user.

6. The method for data access management of power Internet of Things devices based on blockchain according to claim 5 is characterized in that: The step of judging whether to approve the data access request of the access user according to the data access security index specifically includes: According to the user access operation information, based on the operation permission requirement analysis, the access operation sensitivity coefficient is obtained; Obtain the data access security index based on the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient; Based on data access management requirements, obtain the data access security index threshold; According to the data access security index and the data access security index threshold, determine whether to approve the data access request of the access user; if the data access security index is lower than the data access security index threshold, the data access request of the access user is rejected; If the data access security index is higher than the data access security index threshold, the data access request of the access user is approved; Wherein, based on the data access management requirements, the access operation sensitivity coefficient threshold is obtained; According to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, it is determined whether the access operation behavior of the access user shall be included in the third-party monitoring mechanism. If the access operation sensitivity coefficient exceeds the access operation sensitivity coefficient threshold, the access operation behavior of the access user shall be subject to third-party monitoring; The calculation formula of access operation sensitivity coefficient is: Where k is the access operation sensitivity coefficient, δ j is the permission requirement index of the i-th access operation of the access user, Q(j) is the device data importance index of the target data of the j-th access operation of the access user; The calculation formula of data access security index is: Where W(s) is the data access security index of the sth target access data of the access user, Q s The device data importance index for accessing the sth target access data of the user, ε gs is the power Internet of Things device distance of the g-th target access data associated with the s-th target access data of the access user, and θ is the power Internet of Things device data distance influence coefficient.

7. A blockchain-based power Internet of Things device data access management system, used to implement the management method according to any one of claims 1 to 6, characterized in that: include: A main control module, the main control module is used to determine whether the access user has the data access right according to the data access basic index and the data access basic index threshold, determine whether the data access request of the access user is approved according to the data access security index and the data access security index threshold, determine whether the access operation behavior of the access user is added to the third-party monitoring mechanism according to the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold, obtain the user identity authority information based on the user identity information and the data access management authority allocation, obtain the target access data association information according to the target access data information, and conduct third-party monitoring of the access operation behavior of the access user; An information acquisition module, the information acquisition module is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data based on the power Internet of Things device information, acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information based on the access user information; An evaluation module, wherein the evaluation module is used to obtain a basic index of device data according to power network information and data geographic attribute information, obtain a device data importance index according to the basic index of device data and power Internet of Things device data, obtain a data access environment coefficient according to target access data geographic information and access address information, obtain a data access basic index according to the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on operation authority requirement analysis according to user access operation information, and obtain a data access security index according to the data access environment coefficient, the device data importance index, the target access data association information and the access operation sensitivity coefficient; A display module interacts with the main control module and is used to display power Internet of Things device data, device data importance index, target access data association information, data access basic index, user access operation information and data access security index.

8. The blockchain-based power Internet of Things device data access management system according to claim 7 is characterized in that: The main control module specifically includes: A control unit, the control unit is used to obtain user identity authority information based on data access management authority allocation according to user identity information, obtain target access data association information according to target access data information, and perform third-party monitoring of access operation behavior of access users; An information receiving unit, which interacts with the information acquisition module and the evaluation module to receive data and transmit it to the judgment unit; A judgment unit, wherein the judgment unit is used to judge whether the accessing user has the data access right based on the data access basic index and the data access basic index threshold, judge whether the data access request of the accessing user is approved based on the data access security index and the data access security index threshold, and judge whether the access operation behavior of the accessing user is included in the third-party monitoring mechanism based on the access operation sensitivity coefficient and the access operation sensitivity coefficient threshold.

9. The blockchain-based power Internet of Things device data access management system according to claim 7 is characterized in that: The information acquisition module specifically includes: A first acquisition unit, the first acquisition unit is used to acquire power Internet of Things device information, device specification information, device operation status information and device geographic information, and acquire power Internet of Things device data, power system operation data, power system sensitive data, power system operation data and environmental data according to the power Internet of Things device information; The second acquisition unit is used to acquire access user information, access address information and user identity information, and acquire target access data information, target access data geographic information and target access data type information according to the access user information.

10. The blockchain-based power Internet of Things device data access management system according to claim 7 is characterized in that: The evaluation module specifically includes: A data evaluation unit, the data evaluation unit is used to obtain a basic index of device data according to the power network information and the data geographic attribute information, and to obtain an important index of device data according to the basic index of device data and the power Internet of Things device data; An access assessment unit, wherein the access assessment unit is used to obtain a data access environment coefficient based on target access data geographic information and access address information, obtain a data access basic index based on the data access environment coefficient and user identity information, obtain an access operation sensitivity coefficient based on user access operation information and based on operation authority requirement analysis, and obtain a data access security index based on the data access environment coefficient, device data importance index, target access data association information and access operation sensitivity coefficient.

Images