Security encryption control method, system and storage medium for integrated earth-ground power information network

Abstract

The present invention discloses a secure encryption control method, system and storage medium for a space-ground integrated power information network, which relates to the technical field of power information security, and includes the following steps: constructing a space-ground integrated information network security attack logic library based on a five-tuple model, predicting potential attack information based on the information network security attack logic library; encrypting power information transmission data packets at potential attack locations using an AES algorithm; adding noise to the encrypted power information transmission data based on a differential privacy algorithm that fuses the potential attack risk level and the data sensitivity result. The method provided by the present invention determines the control gain of noise addition in the differential privacy algorithm based on the potential attack risk level and the sensitivity result, and the sensitivity result is determined based on the satellite observation trajectory, and finally realizes targeted processing of power information transmission data based on the potential attack risk level and the characteristics of the satellite constellation, thereby improving the security of the power system information transmission and access process.

Description

Technical Field

[0001] The present invention relates to the field of electric power information security technology, and in particular to a security encryption control method, system and storage medium for a ground-ground integrated electric power information network. Background Art

[0002] With the widespread application of power information systems, attacks on power information networks occur frequently, and various network attack methods and attack technologies emerge in an endless stream, posing a huge threat to the safe and stable operation of power systems. At the same time, a large amount of sensitive power data needs to be transmitted and stored in digital networks, including power grid operation status and user power consumption information. However, the security and confidentiality of these data face severe challenges. Unauthorized access, hacker attacks, and data leakage risks may lead to serious consequences, such as power system paralysis and user privacy leakage. The new power system has many nodes and generalized network boundaries. With the enhancement of satellite Internet information technology, it is vulnerable to network attack threats and there is a risk of privacy leakage. Compared with traditional network security, the new power system enabled by the integrated space-ground network will have more diverse attack exposure surfaces, and network security risks will present a new trend of multi-level, multi-angle, and high frequency. Therefore, studying effective data encryption control methods is of great significance for protecting sensitive data in power information systems.

[0003] In view of the particularity of the power industry, it is necessary to build massive connections based on new technologies such as space-ground integrated networks, narrowband Internet of Things, and low-power wide-area networks, so as to realize the deployment and communication of data acquisition and monitoring control systems, and also provide support for intelligent power consumption services. The space-ground integrated information network is a space-based network and a ground network composed of space satellite nodes interconnected. The integration and development of space-based networks and ground networks has increased the outstanding feature of wide-area network coverage. It has obvious advantages in realizing communication and information services in remote areas that are difficult to cover at sea, in the air, and in ground network systems. It has become an important development field for wide-area communication security and information applications.

[0004] Different from traditional ground communication networks, the integrated space-ground information network brings many security challenges due to its highly exposed network, high-speed node movement, and limited computing resources. Its communication process is extremely vulnerable to eavesdropping by third parties, and data security threats such as tampering of communications. In addition, the security of the key algorithm for encrypting network layer data in traditional technologies generally depends on the difficulty of solving mathematical models, and cannot guarantee communication security.

[0005] In view of this, it is necessary to propose a secure encryption control method, system and storage medium for a space-ground integrated power information network, and to design key management for a large amount of sensing, transmission and monitoring data in the new power system to improve the security of information transmission and access in the power system, as well as to enhance the technical issues of the new power system's ability to resist malicious electromagnetic attacks. Summary of the invention

[0006] The main purpose of the present invention is to provide a secure encryption control method, system and storage medium for a space-ground integrated power information network, aiming to solve the technical problem of low security in the prior art of transmitting and storing power system data based on a space-ground integrated network.

[0007] To achieve the above object, the present invention provides a method for secure encryption control of a ground-ground integrated power information network, comprising the steps of:

[0008] S100, constructing a space-ground integrated information network security attack logic library based on the quintuple model, predicting potential attack information based on the information network security attack logic library, wherein the potential attack information includes a potential attack location, a potential attack time node corresponding to the potential attack location, a potential attack mode, and a potential attack risk level ;

[0009] S200, uses the AES algorithm to encrypt power information transmission data packets at potential attack locations;

[0010] S300, based on differential privacy algorithm to integrate potential attack risk level Results with data sensitivity Noise is added to the encrypted power information transmission data, and the data sensitivity results are determined based on the satellite observation trajectory.

[0011] The expression for noise generation is:

[0012] ;

[0013] Where i represents the i-th system, Indicates that at the kth moment, is a natural number, Indicates that the i-th system is Noise generation at any time, represents the random vector of the i-th system and satisfies the Laplace distribution. The covariance of the Laplace distribution is , Ip represents the median of the Laplace distribution, Lap represents the Laplace distribution, , b is the scale function in the Laplace distribution, T represents the total time, For data sensitivity results, is the sum of the sensitivities, The risk level of potential attack.

[0014] Furthermore, in step S100:

[0015] S101, constructing a space-ground integrated network security ontology model based on the quintuple model, wherein the network security ontology model has log maintenance data;

[0016] S102, establishing a spatiotemporal combined attribute model according to the log maintenance data;

[0017] S103, predicting potential attack patterns based on the spatiotemporal set according to the spatiotemporal combined attribute model, and predicting potential attack time nodes based on a time series method;

[0018] S104: Determine a potential attack risk level corresponding to a potential attack position based on the potential attack mode and the potential attack time node.

[0019] Furthermore, the spatiotemporal combined attribute model includes a time attribute model and a space attribute model;

[0020] The timestamp, time interval, and occurrence frequency of potential attack events are predicted and obtained according to the time attribute model, where the calculation expression of the time interval is: , the expression of time window statistics is , is the i+1th moment, is the i-th moment, is the time interval, is the number of attack packets in the time window T, I is the indicator function, when When it belongs to the time window T, I takes the value of 1. When it does not belong to the time window T, the value of I is 0;

[0021] The geographical location, IP address and network topology location of potential attack events are predicted based on the spatial attribute model.

[0022] Furthermore, using the formula Calculate and obtain the current time interval The potential attack risk level Indicates the current time interval.

[0023] in, Sum the alarm information. Sum the security event information. represents the rth IP address, Indicates the start of the first IP address in the current time interval. Represents the alarm information of the same IP address within the current time interval. is the number of the mth security event in the current time interval, Represents different security information of the same IP address within the current time interval. represents the intensity of the mth security event in the current time interval, n represents the total number of IP addresses in the current time interval, α is the weight of the alarm information, and β is the weight of the security event.

[0024] Furthermore, step S200 specifically includes:

[0025] S201, using the AES encryption algorithm to encrypt the power information transmission data corresponding to the potential attack position, and performing a key expansion operation to obtain a round key;

[0026] S202, performing an initial round transformation, performing an XOR operation on the input plaintext block and the initial round key;

[0027] S203, encrypt multiple main rounds until entering the final round transformation, each main round encryption includes the steps of:

[0028] Use a fixed S-box to perform byte substitution on each byte of the state matrix;

[0029] Circularly shift each row in the state matrix to the left;

[0030] Perform a linear transformation on each column of the state matrix;

[0031] XOR the state matrix with the round key of the current round;

[0032] Repeat the steps until the final round of transformation is reached;

[0033] S204, performing the final round of transformation, specifically including the steps of:

[0034] Use a fixed S-box to perform byte substitution on each byte of the state matrix;

[0035] Circularly shift each row in the state matrix to the left;

[0036] The state matrix is ​​XORed with the round key of the current round. After the final round of transformation, the content of the state matrix is ​​the encrypted ciphertext block.

[0037] Further, Get the data sensitivity results, where sup represents the supremum, and Represent two different satellite observation tracks. Indicates observation conditions or observation operations, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates all , The trajectories are all in the satellite observation trajectory set within the scope of Indicates observation conditions In the observation condition set Within the operating range of || || h represents the norm under h metrics.

[0038] The present invention also provides a security encryption control system for a space-ground integrated power information network, comprising a microprocessor and a memory connected to each other, wherein the microprocessor is programmed or configured to execute the steps of the security encryption control method for the space-ground integrated power information network.

[0039] The present invention also provides a storage medium, in which the above-mentioned security encryption control method of the integrated earth-ground power information network is stored.

[0040] Compared with the prior art, the security encryption control method of the integrated earth-ground power information network provided by the present invention has the following beneficial effects:

[0041] The present invention provides a secure encryption control method for a space-ground integrated power information network. The method predicts potential attack information and obtains the degree of potential attack risk based on an information network security attack logic library; encrypts power information transmission data packets at potential attack locations using an AES algorithm; and adds noise to the encrypted power information transmission data based on a differential privacy algorithm that comprehensively controls the control gain and sensitivity results. In the process of encrypting power information transmission data using a double-layer encryption method, the sequence of attacks and the propagation relationship are derived based on the information network security attack logic library, thereby providing a prerequisite for subsequent noise addition. Specifically, the control gain of noise addition in the differential privacy algorithm is determined based on the degree of potential attack risk and the sensitivity result, and the sensitivity result is determined based on the satellite observation trajectory. Finally, targeted processing of power information transmission data is achieved based on the degree of potential attack risk and the characteristics of the satellite constellation, thereby improving the security of information transmission and access in the power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0043] Figure 1 It is a flow chart of the security encryption control method of the earth-sky integrated power information network of the present invention;

[0044] Figure 2 It is a schematic diagram of the data transmission process of the integrated space-ground network and the framework of possible attacks;

[0045] Figure 3 A schematic diagram of the framework for constructing a space-ground integrated information network security attack logic library;

[0046] Figure 4 This is a schematic diagram of the network structure of the security encryption control process under the ground integrated network.

[0047] The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings in conjunction with the embodiments. DETAILED DESCRIPTION

[0048] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0049] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0050] In addition, the descriptions of "first", "second", etc. in the present invention are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0051] Please refer to Figure 1 , Figure 2 , Figure 3 and Figure 4 The present invention provides a method for secure encryption control of a ground-earth integrated power information network, comprising the steps of:

[0052] S100, constructing a space-ground integrated information network security attack logic library (space-time combined attribute model) based on the quintuple model, predicting potential attack information based on the information network security attack logic library, the potential attack information including potential attack locations, potential attack time nodes corresponding to the potential attack locations, potential attack modes, and potential attack risk levels ;

[0053] S200, uses the AES algorithm to encrypt power information transmission data packets at potential attack locations;

[0054] S300, based on differential privacy algorithm to integrate potential attack risk level Results with data sensitivity Noise is added to the encrypted power information transmission data, and the data sensitivity result is determined according to the satellite observation trajectory. The expression for noise generation is:

[0055] ;

[0056] Where i represents the i-th system, Indicates that at the kth moment, is a natural number, Indicates that the i-th system is Noise generation at any time, represents the random vector of the i-th system and satisfies the Laplace distribution. The covariance of the Laplace distribution is , Ip represents the median of the Laplace distribution, Lap represents the Laplace distribution, , b is the scale function in the Laplace distribution, T Indicates the total time, For data sensitivity results, is the sum of the sensitivities, The risk level of potential attack.

[0057] The present invention provides a secure encryption control method for a space-ground integrated power information network. The method predicts potential attack information and obtains the degree of potential attack risk based on an information network security attack logic library; encrypts power information transmission data packets at potential attack locations using an AES algorithm; and adds noise to the encrypted power information transmission data based on a differential privacy algorithm that comprehensively controls the control gain and sensitivity results. In the process of encrypting power information transmission data using a double-layer encryption method, the sequence of attacks and the propagation relationship are derived based on the information network security attack logic library, thereby providing a prerequisite for subsequent noise addition. Specifically, the control gain of noise addition in the differential privacy algorithm is determined based on the degree of potential attack risk and the sensitivity result, and the sensitivity result is determined based on the satellite observation trajectory. Finally, targeted processing of power information transmission data is achieved based on the degree of potential attack risk and the characteristics of the satellite constellation, thereby improving the security of information transmission and access in the power system.

[0058] Understandably, is a random vector, each entry of which satisfies the iid Laplace distribution.

[0059] It can be understood that in the present invention, the sum of the alarm information and the security events is combined, and the comprehensive degree of risk is reflected by assigning appropriate weights to them respectively, and then the overall risk value is calculated, that is, the potential attack risk degree is obtained. .

[0060] It can be understood that the scheme of the present invention includes three links: building a space-ground integrated information network security attack logic library, AES algorithm encryption design, and differential privacy algorithm encryption control. AES is an advanced encryption standard, which is a symmetric encryption algorithm, that is, encryption and decryption use the same key. Based on the five-tuple model, a space-ground integrated network security attack logic library is built to obtain the time sequence of attacks and the propagation relationship of the constraint attacks. After providing the prerequisite for encryption, two layers of encryption are then performed through security encryption control. The first layer is AES algorithm encryption. Since the economic dispatch of the smart grid needs to use the space-ground integrated network to obtain real-time data, and most units are distributed power sources, in order to strengthen the security of the power information network, data privacy is double-protected by injecting noise, thereby improving the reliability and safety of power system operation. In specific implementation, AES encryption protects the confidentiality of data. When data is stored or transmitted, AES encryption is first used to ensure that the data is protected on the transmission link or storage medium. Even if the attacker obtains the data, it is difficult to decrypt; the second layer of differential privacy protects the sensitivity of the data. When using data for analysis, calculation or publishing statistical results, the differential privacy algorithm will process the data and add noise to prevent the leakage of information of a single user.

[0061] Further, in step S100, S101, a space-ground integrated network security ontology model is constructed based on the quintuple model, and the network security ontology model has log maintenance data; S102, a space-time combination attribute model is established according to the log maintenance data; S103, a potential attack mode is predicted based on a space-time set according to the space-time combination attribute model, and a potential attack time node is predicted based on a time series method; S104, a potential attack risk degree corresponding to a potential attack location is determined based on the predicted target attack mode and the predicted attack time node.

[0062] Furthermore, the spatiotemporal combined attribute model includes a time attribute model and a space attribute model;

[0063] The timestamp, time interval, and occurrence frequency of potential attack events are predicted and obtained according to the time attribute model, where the calculation expression of the time interval is: , the statistical expression of time window T is , is the i+1th moment, that is, the i+1th timestamp, is the i-th moment, i.e. the i-th timestamp, is the time interval, is the number of attack packets in the time window T, I is the indicator function, when When it belongs to the time window T, I takes the value of 1. When it does not belong to the time window T, the value of I is 0;

[0064] The geographical location, IP address and network topology location of potential attack events are predicted based on the spatial attribute model.

[0065] Furthermore, using the formula Calculate and obtain the current time interval The potential attack risk level Indicates the current time interval;

[0066] in, Sum the alarm information. Sum the security event information. represents the rth IP address, It means starting from the first IP address in the current time interval. Represents the same IP address in the current time interval Alarm information within the time period, is the number of the mth security event in the current time interval (given) time period, Represents the same IP address in the current time interval Different safety information in different time periods, Represents the intensity of the mth security event in a given time period, and n represents the current time interval The total number of IP addresses in the time period, α is the weight of the alarm information, and β is the weight of the security event. Optionally, r refers to different IP addresses, subscript m1 represents the number of the mth security event in a given time period, and subscript m2 represents the intensity of the mth security event in a given time period. Indicates the time dimension of security events and alarm information. n indicates the total number of IP addresses in the current time interval (given) time period.

[0067] In a specific embodiment of the present invention, first, a space-ground integrated network security ontology is constructed based on a five-tuple model, mainly including attacks, events, gateway stations, satellites, etc. The rules and constraints set by the ontology model are mainly derived from examples. Attacks are divided into network attacks and satellite-specific attacks. Network attacks mainly include DoS, FDI, etc. Satellite-specific attacks include physical attacks, laser blinding, and space debris attacks, etc. These attack types are mainly aimed at the physical characteristics and space environment of satellites. Preferably, in the protection strategy, the satellite system mainly needs to comprehensively consider the two aspects of network security and physical security. Satellite attack events are generally customized by the satellite's third-party management and control system by providing information such as satellite latitude and longitude, frequency band range, and forwarding bandwidth. The dynamic topological relationship between gateway stations, satellites, gateway stations, and satellites is provided by the dynamic reconstruction and security assurance system of the space-ground integrated information network. Data such as vulnerabilities, operating systems, application software, processes, registries, and files can be obtained in batches through web crawler tools. Next, a spatiotemporal attribute combination model is established. The spatiotemporal attribute combination model includes a time attribute model and a space attribute model. The time attribute includes the timestamp, time interval, and frequency of occurrence of the event, and the space attribute model includes the geographical location, IP address, and network topology location of the event. The spatiotemporal attribute combination model is a combination of the time attribute model and the space attribute model. Preferably, based on the spatiotemporal clustering algorithm, attack events (DOS, FDI) that appear in a concentrated manner in time and space are identified, and then the possible potential attack time period (potential attack time node) in the future is predicted based on the time series analysis. Then, the attack detection rules are defined according to the spatiotemporal attribute model (determine the potential attack category), and finally, the rule base needs to be updated regularly based on the latest spatiotemporal attribute data. Then, after the attack rules are represented by a multimodal data model, the time sequence of the attack and the propagation relationship of the constraint attack can be obtained; thus, the missing information node (potential attack location) is determined according to the constraint of the attack propagation relationship. The constraint condition of the attack propagation relationship is that the destination IP address of the previous node is the source IP address of the next node, and the source IP address of the next node is the destination IP address of the previous node. Next, based on the data input, the following describes how to handle special situations of the output alarms and security events. Within a certain time interval, the number of times a single IP node reports the same Snort alarm exceeds a specific value; the number of times the same alarm is generated for the same destination IP address is classified and counted. Finally, when the number is less than the threshold, the statistical results are cached and the next time window is entered.

[0068] In the present invention, the generation module of the model includes virtual network devices such as layer 2 switches, layer 3 switches, dynamic routing, public network routing, firewalls, Web application protection systems, etc., which can be connected and configured in the topology interface to finally generate the target network. The information network security attack logic library includes the collected system behavior data, log data and link data.

[0069] Furthermore, step S200 specifically includes:

[0070] Step S200 specifically includes:

[0071] S201, using the AES encryption algorithm to encrypt the power information transmission data corresponding to the potential attack position, and performing a key expansion operation to obtain a round key;

[0072] S202, performing an initial round transformation, performing an XOR operation on the input plaintext block and the initial round key;

[0073] S203, encrypt multiple main rounds until entering the final round transformation, each main round encryption includes the steps of:

[0074] Use a fixed S-box to perform byte substitution on each byte of the state matrix;

[0075] Circularly shift each row in the state matrix to the left;

[0076] Perform a linear transformation on each column of the state matrix;

[0077] XOR the state matrix with the round key of the current round;

[0078] Repeat the steps until the final round of transformation is reached;

[0079] S204, performing the final round of transformation, specifically including the steps of:

[0080] Use a fixed S-box to perform byte substitution on each byte of the state matrix;

[0081] Circularly shift each row in the state matrix to the left;

[0082] The state matrix is ​​XORed with the round key of the current round. After the final round of transformation, the content of the state matrix is ​​the encrypted ciphertext block.

[0083] In a specific embodiment of the present invention, step 1, first use key expansion to expand the initial key into multiple round keys, which will be used in each round of encryption. Among them, AES supports 128-bit, 192-bit and 256-bit key lengths. Next, perform an initial round transformation, and perform an XOR operation (XOR) on the input plaintext block and the initial round key. Step 2, encrypt multiple main rounds, the specific number of rounds depends on the key length, and each main round includes the following four processes: byte substitution, using a fixed S box to perform byte substitution on each byte of the state matrix; row shift, each row in the state matrix is ​​cyclically shifted to the left, and the number of bytes shifted depends on the row number; column confusion, each column of the state matrix is ​​linearly transformed; round key addition, the state matrix is ​​XORed with the round key of the current round. Step 3, finally perform a final round transformation, which is similar to the main round, but omits the "column confusion" step, and the final round includes: byte substitution, row shift and round key addition. After the final round, the content of the state matrix is ​​the encrypted ciphertext block.

[0084] Preferably, for a 16-byte key, the initial key is first divided into 4 groups, each column is a group, and the key is expanded using these four variables to satisfy the following formula:

[0085] ;

[0086] The conversion that g satisfies is: first shift W left by one byte, then perform S-box mapping. For values ​​with different digits, add 0 after the digits and perform XOR.

[0087] Preferably, for AES encryption, 128-bit keys are 10 rounds, 192-bit keys are 12 rounds, and 256-bit keys are 14 rounds. The S-box is a fixed nonlinear permutation table to improve the complexity and security of the cipher. The number of bytes shifted for row shifting depends on the row number: the first row remains unchanged, the second row is shifted left by one byte, the third row is shifted left by two bytes, and the fourth row is shifted left by three bytes.

[0088] Furthermore, using the formula Get the data sensitivity results, where sup represents the supremum, and Represent two different satellite observation tracks. Indicates observation conditions or observation operations, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates all , The trajectories are all in the satellite observation trajectory set within the scope of Indicates observation conditions In the observation condition set Within the operating range of , || ||h represents the norm under h metrics. Specifically As can be understood, sup represents the supremum, that is, among all possible , and In the present invention, the formula is used to try to find the situation that leads to the largest difference in trajectories, thereby measuring the maximum sensitivity. , They represent two different satellite observation tracks. represents an observation condition or observation operation, belonging to an observation condition set Ω. || ||h represents the norm under a certain metric, expressed as a trajectory , The distance value itself.

[0089] Optionally, since the measured data of the power grid is generally measured data, noise that obeys the Laplace distribution is added to the differential privacy mechanism to achieve differential privacy. Then the sensitivity is calculated, that is, the maximum possible impact of adding or removing a single data record on the query result.

[0090] The present invention also provides a security encryption control system for a space-ground integrated power information network, comprising a microprocessor and a memory connected to each other, wherein the microprocessor is programmed or configured to execute the steps of the security encryption control method for the space-ground integrated power information network.

[0091] The present invention also provides a storage medium, in which the above-mentioned security encryption control method of the integrated earth-ground power information network is stored.

[0092] Those skilled in the art should understand that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application can take the form of a computer program product implemented on one or more computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the process Figure 1 A process or multiple processes and / or boxes Figure 1 These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to work in a specific way, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which implements the functions specified in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide for implementing the process in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0093] The above is only a preferred embodiment of the present invention, and the protection scope of the present invention is not limited to the above embodiments. All technical solutions under the concept of the present invention belong to the protection scope of the present invention. It should be pointed out that for ordinary technicians in this technical field, some improvements and modifications without departing from the principle of the present invention should also be regarded as the protection scope of the present invention.

Claims

1. A security encryption control method for a space-ground integrated power information network, characterized in that: Includes steps: S100, constructing a space-ground integrated information network security attack logic library based on the quintuple model, predicting potential attack information based on the information network security attack logic library, wherein the potential attack information includes a potential attack location, a potential attack time node corresponding to the potential attack location, a potential attack mode, and a potential attack risk level ; S200, uses the AES algorithm to encrypt power information transmission data packets at potential attack locations; S300, based on differential privacy algorithm to integrate potential attack risk level Results with data sensitivity Noise is added to the encrypted power information transmission data, and the data sensitivity result is determined according to the satellite observation trajectory. The expression for noise generation is: ； Where i represents the i-th system, Indicates that at the kth moment, is a natural number, Indicates that the i-th system is Noise generation at any time, represents the random vector of the i-th system and satisfies the Laplace distribution. The covariance of the Laplace distribution is , Ip represents the median of the Laplace distribution, Lap represents the Laplace distribution, , b is the scale function in the Laplace distribution, T represents the total time, For data sensitivity results, is the sum of the sensitivities, The risk level of potential attack.

2. The method for secure encryption control of a space-ground integrated power information network according to claim 1, characterized in that: In step S100: S101, constructing a space-ground integrated network security ontology model based on the quintuple model, wherein the network security ontology model has log maintenance data; S102, establishing a spatiotemporal combined attribute model according to the log maintenance data; S103, predicting potential attack patterns based on the spatiotemporal set according to the spatiotemporal combined attribute model, and predicting potential attack time nodes based on a time series method; S104: Determine a potential attack risk level corresponding to a potential attack position based on the potential attack mode and the potential attack time node.

3. The method for secure encryption control of a space-ground integrated power information network according to claim 2 is characterized in that: The spatiotemporal combined attribute model includes a time attribute model and a space attribute model; The timestamp, time interval, and occurrence frequency of potential attack events are predicted and obtained according to the time attribute model, where the calculation expression of the time interval is: , the expression of time window statistics is , is the i+1th moment, is the i-th moment, is the time interval, is the number of attack packets in the time window T, I is the indicator function, when When it belongs to the time window T, I takes the value of 1. When it does not belong to the time window T, the value of I is 0; The geographical location, IP address and network topology location of potential attack events are predicted based on the spatial attribute model.

4. The method for secure encryption control of a space-ground integrated power information network according to claim 2 is characterized in that: Using formula Calculate and obtain the current time interval The potential attack risk level Indicates the current time interval; in, Sum the alarm information. Sum the security event information. represents the rth IP address, It means starting from the first IP address in the current time interval. Represents the alarm information of the same IP address within the current time interval. is the number of the mth security event in the current time interval, Represents different security information of the same IP address within the current time interval. represents the intensity of the mth security event in the current time interval, n represents the total number of IP addresses in the current time interval, α is the weight of the alarm information, and β is the weight of the security event.

5. The method for secure encryption control of a space-ground integrated power information network according to claim 1, characterized in that: Step S200 specifically includes: S201, using the AES encryption algorithm to encrypt the power information transmission data corresponding to the potential attack position, and performing a key expansion operation to obtain a round key; S202, performing an initial round transformation, performing an XOR operation on the input plaintext block and the initial round key; S203, encrypt multiple main rounds until entering the final round transformation, each main round encryption includes the steps of: Use a fixed S-box to perform byte substitution on each byte of the state matrix; Circularly shift each row in the state matrix to the left; Perform a linear transformation on each column of the state matrix; XOR the state matrix with the round key of the current round; Repeat the steps until the final round of transformation is reached; S204, performing the final round of transformation, specifically including the steps of: Use a fixed S-box to perform byte substitution on each byte of the state matrix; Circularly shift each row in the state matrix to the left; The state matrix is ​​XORed with the round key of the current round. After the final round of transformation, the content of the state matrix is ​​the encrypted ciphertext block.

6. The method for secure encryption control of a space-ground integrated power information network according to claim 1 is characterized in that: Using formula Get the data sensitivity result, where sup represents the supremum, and Represent two different satellite observation tracks. Indicates observation conditions or observation operations, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates that under observation conditions Lower observation trajectory In time The state of the point, Indicates all , The trajectories are all in the satellite observation trajectory set within the scope of Indicates observation conditions In the observation condition set Within the operating range of || || h represents the norm under h metrics.

7. A secure encryption control system for a ground-ground integrated power information network, characterized in that: It comprises a microprocessor and a memory connected to each other, and the microprocessor is programmed or configured to execute the steps of the security encryption control method of the space-ground integrated power information network as claimed in any one of claims 1 to 6.

8. A storage medium, characterized in that: The storage medium stores a security encryption control method for a space-ground integrated power information network according to any one of claims 1 to 6.

Images