Smart power grid data security access method and device and storage medium

By adopting zero-trust model, virtual control, dynamic authentication and intelligent voice interaction technology in the smart grid data access system, the security risks and efficiency problems of the smart grid data access system are solved, and efficient, secure and user-friendly data access is achieved.

CN119397571APending Publication Date: 2025-02-07BEIJING BOWANG KAIYUAN ENERGY TECH CO LTD +2
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202411503102.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-25
Publication Date
2025-02-07

AI Technical Summary

Technical Problem

Smart grid data access systems face security risks such as data leakage, illegal access and single point of failure, and cannot meet the requirements of the power industry for data access efficiency, convenience and security standards.

Method used

Adopt authentication control based on zero trust model, terminal interface virtual control, dynamic adaptive adjustment authentication and intelligent voice interaction technology, and data is realized through authentication control module, terminal interface virtual control module, dynamic adaptive adjustment authentication module and intelligent voice interaction module. secure access.

Benefits of technology

It effectively improves the security and access efficiency of power data, enhances the system's user experience and response capabilities, and makes data access more humane and intelligent.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119397571A_ABST
    Figure CN119397571A_ABST
Patent Text Reader

Abstract

The invention provides a smart power grid data security access method and device and a storage medium, and the method comprises the steps: authentication control: carrying out the verification and authorization of each data access based on a zero-trust model; the terminal interface virtual control module is used for generating a desktop terminal management and control platform and a virtual desktop for accessing power grid data based on the intelligent power grid data access architecture; dynamically and adaptively adjusting authentication, and dynamically adjusting an authentication strategy and access authority generated based on the identity parameters and the associated certificate according to the access behavior of the user and the change of the power grid data access environment; and intelligent voice interaction: based on a large language model, semantic understanding is performed on data input by the user, actual expectation of the user is generated, and intelligent voice feedback for questions asked by the user is completed. According to the method, the data access efficiency and safety can be improved, the operation and maintenance cost can be reduced, and the reliability of a power system is improved; the voice interaction enables the data access to be more humanized and intelligent.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of data security, and in particular to a method, device and storage medium for secure access to smart grid data. Background Art

[0002] With the rapid development of smart grid technology, the amount of data accumulated in the power marketing and distribution fields has increased dramatically, posing new challenges to data security access. Existing power marketing and distribution data access systems usually face security risks such as data leakage, illegal access, and single point failures, and cannot meet the power industry, especially the power service field, in terms of data access efficiency, convenience, and security standards.

[0003] On the one hand, the smart grid has better compatibility and openness, which undoubtedly increases the security risks of the system. There are information security risks in multiple power grid operation links such as power grid dispatching automation, smart substations, distribution network automation, power user information collection, and power supply voltage collection. The security of information systems and information networks has become the basis for ensuring the safe and stable operation of smart grids. In the prior art, in terms of security risk prevention of smart grids, patent CN110633956 A proposes an information security protection system for interactive service microgrids, which includes a data protection module for encrypting, storing, backing up and restoring data at each layer of the interactive service microgrid, encrypting data transmission between layers, and establishing a database connection pool structure between the application server and the database of the interactive service master station; an application protection module for identity authentication, user permissions and access control for the application server.

[0004] On the other hand, the power grid provides services to users, especially in the application scenario of providing remote online services, and there is a huge commercial demand for improving communication efficiency, improving interactive experience and intelligent tasks. Meeting this demand can help power grid companies better play their traditional advantages and further establish their brand image. The intelligent dialogue system based on large language models, which has developed rapidly recently, is an artificial intelligence system that uses natural language processing technology to establish human dialogues, aiming to enable computers to interact with humans in natural language, understand and answer users' questions as much as possible, provide useful information or execute instructions. However, these systems usually adopt a unified model and style, which cannot effectively adapt to the personalized needs of different users, and cannot effectively identify and respond to the emotional information contained in different questions. The invention patent No. CN101018259A discloses a system and method for telecommunications integrated information application services, which can enable users to realize a comprehensive information service that integrates number comprehensive information services and enterprise information services through voice interaction, Internet interaction and wireless interaction. Users can access the multimedia call center through the terminal and make query requests.

[0005] In view of the development status and needs of the industry, the corresponding technologies are continuously improving. As the industry demands become higher and more comprehensive, what needs special attention at present is that the user personal privacy protection issues that may be brought about by intelligent voice interaction technology have put forward higher requirements for power grid data security access technology. There are still many problems that need to be solved in providing high-efficiency, high-convenience, high-security standards, highly targeted, and timely and accurate response data systems. Summary of the invention

[0006] The purpose of the present disclosure is to provide a smart grid data security access method, device and storage medium, thereby overcoming one or more problems caused by the limitations and defects of related technologies at least to a certain extent.

[0007] A method for securely accessing smart grid data of the present invention comprises the following steps:

[0008] S110, authentication control, based on the zero trust model, verifies and authorizes each data access;

[0009] S120, terminal interface virtual control, based on the smart grid data access architecture, performs protection and control on the operation interface of the user terminal, generates a desktop terminal control platform and a virtual desktop for accessing grid data;

[0010] S130, dynamically and adaptively adjusting authentication, dynamically adjusting authentication strategies and access rights generated based on identity parameters and associated certificates according to user access behavior and changes in the power grid data access environment;

[0011] S140, intelligent voice interaction, based on a large language model, generates the user's actual expectations by semantically understanding the data input by the user, and completes intelligent voice feedback for the questions raised by the user.

[0012] Furthermore, the S110 authentication control step also includes the following sub-steps:

[0013] Step S1101, receiving and caching identity parameters of power grid users;

[0014] Step S1102, comparing the received and cached grid user identity parameters with the identity parameters stored in the database, and verifying the associated certificates of the identity parameters, and forming a current user identity parameter vector fusion based on the comparison and verification;

[0015] Step S1103, comparing the current user identity parameter vector fusion with the identity parameter vector fusion subset stored in the database, and sending the access rights to the access control unit of the user terminal if they are matched.

[0016] Furthermore, in step S1102, the method used to achieve the fusion of the current user identity parameter vector includes: concatenation, weighted average or function operation.

[0017] Furthermore, in step S120, based on the desktop terminal management and control platform, the operating system is virtualized and operated through cloud technology to generate a virtual desktop.

[0018] Furthermore, step S120 also includes the following steps:

[0019] Step S1201, based on zero trust technology, generating a zero trust gateway by continuously and dynamically evaluating the security status of the user terminal;

[0020] Step S1202: Based on the centralized management and control strategy, the zero-trust gateway connects the user terminal to the data service resources of the smart grid through the virtual desktop to complete the user terminal's secure access to data.

[0021] Furthermore, the security policy adopted in step S120 includes:

[0022] Manage terminal behavior monitoring strategies for user terminal network bandwidth usage, encrypted document permission management, behavior control strategies, and virus defense strategies.

[0023] Furthermore, step S130 also includes:

[0024] Use machine learning algorithms to intelligently adjust access permissions based on the user's historical access behavior and system status.

[0025] Furthermore, step S140 also includes sub-steps:

[0026] Step S1401, based on the large language model of the power grid data security access scenario, by judging the actual expected complexity, a problem complexity value is generated; by judging the emotional state of the voice input data, an urgency value is generated;

[0027] Step S1402, based on the problem complexity value and the urgency value, the intelligent voice response plan is set to complete the intelligent voice response to the question raised by the power grid user.

[0028] Furthermore, the method further includes step S150 of encrypting the user's access and operation data.

[0029] The present invention further provides a smart grid data security access device, which comprises:

[0030] Authentication control module, used to verify and authorize each data access based on the zero trust model;

[0031] The terminal interface virtual control module is used to protect and control the operation interface of the user terminal based on the smart grid data access architecture, generate a desktop terminal control platform and a virtual desktop for accessing grid data;

[0032] Dynamic adaptive authentication module, used to dynamically adjust the authentication strategy and access rights generated based on identity parameters and associated certificates according to the user's access behavior and changes in the power grid data access environment;

[0033] The intelligent voice interaction module is used to generate the user's actual expectations through semantic understanding of the user's input data based on the large language model, and provide intelligent voice feedback for the user's questions.

[0034] The present invention also provides a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the above-mentioned smart grid data security access method is implemented.

[0035] Compared with the prior art, the beneficial effects of the present invention are as follows: the smart grid data security access method is applicable to the smart security access system, scenarios and requirements of power distribution data, and can effectively improve the security and access efficiency of power data by combining advanced information technology and security strategies. It makes the power distribution data access system more intelligent, secure and efficient, and provides strong support for the digital transformation of the power industry. The introduction of voice interaction and emotion recognition technology will further enhance the user experience and responsiveness of the system, making data access more humane and intelligent. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The present disclosure may be more clearly understood from the following detailed description with reference to the accompanying drawings, in which:

[0037] Figure 1 is a flow chart of a method for securely accessing smart grid data according to an embodiment of the present invention;

[0038] Figure 2 Schematic diagram of a smart grid data security access device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0039] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in many forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be comprehensive and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted.

[0040] In addition, the described features, structures or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of the specific details, or other methods, components, materials, devices, steps, etc. may be adopted. In other cases, known structures, methods, devices, implementations, materials or operations are not shown or described in detail to avoid blurring the various aspects of the present disclosure.

[0041] The block diagrams shown in the accompanying drawings are only functional entities and do not necessarily correspond to physically independent entities. These functional entities can be implemented in software form, or these functional entities or parts of functional entities can be implemented in one or more software hardened modules, or these functional entities can be implemented in different networks and / or processor devices and / or microcontroller devices.

[0042] In the embodiment of the present disclosure, a method for securely accessing smart grid data is first provided; Figure 1 As shown, the smart grid data security access method includes the following steps:

[0043] Step S110, authentication control, based on the zero trust model, assumes that all network environments have potential threats, and strictly verifies and authorizes each data access;

[0044] In another embodiment, the authentication control step S110 further includes the following sub-steps:

[0045] Step S1101, receiving and caching the identity parameters of the power grid user; wherein, the identity parameters can be diversified, for example, when a user logs into the system for the first time, he can use multi-factor identity authentication technology, such as ID number, user number and mobile phone verification code, to ensure that only legitimate users can access; after the first authentication, fingerprint login, gesture password, voiceprint recognition and other methods can be reserved.

[0046] An important feature of the present invention is that it uses voiceprint recognition technology to identify, record and store the user's speaking speed, intonation and timbre, so as to predict the user's emotions during interaction in voice interaction applications, so as to better and more targetedly adjust the system's reply content and reply method.

[0047] Preferably, the present invention centrally manages the data generated in the process of users using the system, including power grid resource business objects, customer information data, and marketing and distribution relationship data, based on the marketing and distribution integration design of the microservice architecture, thereby improving the consistency and integrity of the data. The unified management of data facilitates the implementation of higher-standard security measures, which is conducive to improving the convenience and security of data use.

[0048] Step S1102, comparing the received and cached identity parameters of the power grid user with the identity parameters in the database, verifying the associated certificate of the identity parameters, and forming a current user identity parameter vector fusion based on the comparison and verification;

[0049] Step S1103, comparing the current user identity parameter vector fusion with the identity parameter vector fusion subset stored in the database, and sending the access rights to the access control unit of the user terminal if they are matched.

[0050] Preferably, in another embodiment, the identity parameter vector fusion may be, for example, fusion of parameter vectors related to a specific ID (such as a personal ID, user group ID, or item ID, etc.) with other feature vectors to form a more comprehensive representation. This fusion may be a simple concatenation, weighted average, or a more complex function operation, such as using an attention mechanism, a graph convolutional network, a long short-term memory network, a Transformer model operation, etc.

[0051] Step S120, terminal interface virtual control, based on the smart grid data access architecture, by protecting and controlling the operation interface of the user terminal, generating a desktop terminal control platform; based on the desktop terminal control platform, virtualizing the operating system through cloud technology to generate a virtual desktop;

[0052] In another preferred embodiment, the S120 virtual desktop control further includes the following sub-steps:

[0053] Step S1201, based on zero trust technology, generating a zero trust gateway by continuously and dynamically evaluating the security status of the user terminal;

[0054] Step S1202: Based on the centralized control strategy, the zero-trust gateway connects the user terminal to the data service resources of the smart grid through the virtual desktop to complete the secure access of the user terminal to the data;

[0055] In another preferred embodiment, the operation interface of the user terminal is protected and controlled, and the following security enhancement strategies may also be included in the process of generating a desktop terminal control platform:

[0056] Terminal behavior monitoring strategy implemented to manage network bandwidth usage of user terminals: First, set the traffic sampling threshold. Once the traffic exceeds the preset limit and lasts for a period of time, the system will automatically report relevant information. Subsequently, the reported current traffic data is summarized and sorted in real time so that network managers can quickly analyze whether there are network security incidents. In this way, it is possible to effectively prevent congestion and paralysis caused by high-bandwidth usage behaviors such as worms and downloads.

[0057] Implement the authority management and behavior control strategy for encrypted documents in smart grid data service resources: First, implement encrypted storage for core data to ensure the security of data stored on the server and prevent unauthorized dumping and leakage. Only authorized individuals can access this data. Next, classify and grade key data according to the enterprise's classification standards, allowing users to create personalized sensitive rule bases and customize the confidentiality of files. Finally, grant corresponding permissions to different institutions and personnel based on the classification and grading results of the data. To further improve security, when users access sensitive files, the user terminal device will automatically display a watermark to prevent information leakage.

[0058] Implement virus defense strategy: First, ensure that the virus definition database of the desktop terminal is refreshed regularly through an automated Internet update mechanism or manually executed by the administrator to maintain its latest status, so as to effectively defend against the latest malware threats. Second, establish a trusted file area to include files that are known to be safe and critical to the system. In this way, when performing virus scanning, the system will automatically mark these trusted files as safe, avoid false positives, and ensure the integrity and availability of self-developed programs and critical data.

[0059] Step S130 , dynamically and adaptively adjusting authentication, dynamically adjusting authentication policies and access rights generated based on identity parameters and associated certificates according to user access behavior and changes in the power grid data access environment.

[0060] In another embodiment, preferably, the system can dynamically assign access rights according to the user's role and attributes to achieve detailed permission management. Specifically, it can also include: using machine learning algorithms to intelligently adjust access rights, and intelligently adjust the settings of access rights according to the user's historical access behavior and system status. Preferably, the intelligent access right adjustment step includes: monitoring the threshold of the number of concurrent connections, the threshold of the client's large number of packet sending behavior, and the threshold of the client's traffic online. When behaviors exceeding these thresholds occur, management behaviors such as automatic alarm, automatic blocking, and client prompts are performed.

[0061] Step S140, intelligent voice interaction, based on a large language model, generates the user's actual expectations by semantically understanding the input data, and generates a question complexity value by judging the complexity of the actual expectations; including sub-steps:

[0062] Step S1401, based on the large language model of the power grid data security access scenario, the emotional state of the voice input data is judged to generate an urgency value;

[0063] Step S1402, based on the complexity value and urgency value of the question, the intelligent voice response plan is set to complete the intelligent voice response to the question raised by the power grid user.

[0064] In one embodiment, a large language model and knowledge graph are combined to achieve complex reasoning tasks and enhance the decision support capabilities of the intelligent access system. Specifically, voice tone and emotion recognition: advanced language models are used to identify the voice tone and emotions of the data access person, and then different response feedback content or adjustment of the response speed are given according to the user's emotional state. For example, when the system detects that the user's emotions are more urgent, the response speed can be accelerated; when the user's emotions are detected to be calmer, more detailed and comprehensive feedback can be provided.

[0065] In another embodiment, step S1401 includes: a linear attention mechanism (Linear Attention) based on the large language model Transformer architecture fine-tunes the large language model through historical interaction data, preset management rules and other data to generate a large language model based on a power grid data security access scenario.

[0066] The linear attention mechanism changes the way attention is calculated, reducing the computation complexity from O(n 2 ) is reduced to O(n), where n is the sequence length. The linear attention mechanism uses kernel functions (such as exponential kernels, Gaussian kernels, etc.) to approximate dot product attention, thereby avoiding explicit calculation of the attention matrix, which has obvious advantages in improving efficiency.

[0067] The calculation formula of the linear attention mechanism is: Attention(Q,K,V)=φ(Q)·(φ(K) T ·V)

[0068] Among them, φ is a kernel function, usually an exponential function or a Gaussian function.

[0069] Step S140 intelligent voice interaction provides a method for intelligent voice response based on a large language model of the power grid data security access scenario.

[0070] Preferably, a data encryption step S150 is also included to encrypt the user's access and operation data to ensure the security of the data during transmission, interaction and storage, and to ensure that the user's privacy is not threatened by security management and intelligent access.

[0071] Another embodiment of the present invention also provides a smart grid data security access device, such as Figure 2 As shown, it includes:

[0072] An authentication control module 210 is used to verify and authorize each data access based on a zero-trust model;

[0073] The terminal interface virtual control module 220 is used to protect and control the operation interface of the user terminal based on the smart grid data access architecture, and generate a desktop terminal control platform and a virtual desktop for accessing grid data;

[0074] A dynamic adaptive authentication module 230 is used to dynamically adjust the authentication strategy and access rights generated based on the identity parameters and associated certificates according to the user's access behavior and the changes in the power grid data access environment;

[0075] The intelligent voice interaction module 240 is used to generate the user's actual expectations based on the semantic understanding of the data input by the user based on the large language model, and complete the intelligent voice feedback for the questions raised by the user.

[0076] It also includes a data encryption module, which is used to encrypt user access and operation data to ensure the security of data during transmission, interaction and storage, and to ensure that user privacy is not threatened by security management and intelligent access.

[0077] Preferably, in the smart grid data access architecture, IPv6-based Internet of Things technology is adopted. By adding IP-based HPLC / RF communication units to the traditional power distribution equipment side, a safe and reliable communication network is built to achieve plug-and-play of distribution equipment by intelligent terminals and automatic discovery of downstream distribution equipment star and tree topologies.

[0078] Preferably, the storage and access of smart grid data is designed based on the marketing and distribution integration of the microservice architecture, which realizes the unified management of grid resource business objects, customer information data and marketing and distribution relationship data, and improves the consistency and integrity of the data.

[0079] Preferably, the smart grid data security access device of the present invention is constructed by using the marketing and distribution data fusion model based on graph computing to realize the fusion data model of the whole business system of marketing and distribution, achieve the effect of "model is business", and improve the efficiency and accuracy of data processing. Other corresponding modules or combinations for realizing the steps of the smart grid data security access method are not repeated.

[0080] The present invention also provides a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the above-mentioned smart grid data security access method is implemented.

[0081] The smart grid data security access method and device of the present invention are intended to ensure the confidentiality, stability and efficiency of data, while meeting the strict requirements of the power industry for data access. The present invention is applied to the intelligent and secure access scenario of power distribution data, and by combining advanced information technology and security strategies, it can effectively improve the security and access efficiency of power data. These advanced technologies include: IPv6 Internet of Things technology, graph computing technology, blockchain technology and privacy computing technology to achieve comprehensive interconnection, data fusion, immutability and privacy protection. The present invention makes the power distribution data access system more intelligent, secure and efficient, and provides strong support for the digital transformation of the power industry. The introduction of voice interaction and emotion recognition technology will further enhance the user experience and responsiveness of the system, making data access more humane and intelligent.

[0082] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0083] Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0084] The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

[0085] The method and apparatus of the present disclosure may be implemented in many ways. For example, the method and apparatus of the present disclosure may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above order of steps for the method is for illustration only, and the steps of the method of the present disclosure are not limited to the order specifically described above, unless otherwise specifically stated. In addition, in some embodiments, the present disclosure may also be implemented as a program recorded in a recording medium, which includes machine-readable instructions for implementing the method according to the present disclosure. Therefore, the present disclosure also covers a recording medium storing a program for executing the method according to the present disclosure.

[0086] It should also be noted that in the apparatus, device and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0087] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0088] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A method for secure access to smart grid data, characterized in that: Includes steps: S110, authentication control, based on the zero trust model, verifies and authorizes each data access; S120, terminal interface virtual control, based on the smart grid data access architecture, performs protection and control on the operation interface of the user terminal, generates a desktop terminal control platform and a virtual desktop for accessing grid data; S130, dynamically and adaptively adjusting authentication, dynamically adjusting authentication strategies and access rights generated based on identity parameters and associated certificates according to user access behavior and changes in the power grid data access environment; S140, intelligent voice interaction, based on a large language model, generates the user's actual expectations by semantically understanding the user's input data, and completes intelligent voice feedback for the user's questions; S150, encrypting the user's access and operation data.

2. The method according to claim 1, characterized in that: The S110 authentication control step also includes the following sub-steps: Step S1101, receiving and caching identity parameters of power grid users; Step S1102, comparing the received and cached grid user identity parameters with the identity parameters stored in the database, and verifying the associated certificates of the identity parameters, and forming a current user identity parameter vector fusion based on the comparison and verification; Step S1103, comparing the current user identity parameter vector fusion with the identity parameter vector fusion subset stored in the database, and sending the access rights to the access control unit of the user terminal if they are matched.

3. The method according to claim 2, characterized in that: In step S1102, the method used to achieve the fusion of the current user identity parameter vector includes: splicing, weighted average or function operation.

4. The method according to claim 1, characterized in that: In step S120, based on the desktop terminal management and control platform, the operating system is virtualized and operated through cloud technology to generate a virtual desktop.

5. The method according to claim 4, characterized in that Step S120 also includes the following steps: Step S1201, based on zero trust technology, generating a zero trust gateway by continuously and dynamically evaluating the security status of the user terminal; Step S1202: Based on the centralized management and control strategy, the zero-trust gateway connects the user terminal to the data service resources of the smart grid through the virtual desktop to complete the user terminal's secure access to data.

6. The method according to claim 4, characterized in that The security strategy adopted in step S120 includes: Manage terminal behavior monitoring strategies for user terminal network bandwidth usage, encrypted document permission management, behavior control strategies, and virus defense strategies.

7. The method according to claim 1, characterized in that Step S130 also includes: Use machine learning algorithms to intelligently adjust access permissions based on the user's historical access behavior and system status.

8. The method according to claim 1, characterized in that Step S140 also includes sub-steps: Step S1401, based on the large language model of the power grid data security access scenario, by judging the actual expected complexity, a problem complexity value is generated; by judging the emotional state of the voice input data, an urgency value is generated; Step S1402, based on the problem complexity value and the urgency value, the intelligent voice response plan is set to complete the intelligent voice response to the question raised by the power grid user.

9. A smart grid data security access device, characterized in that: include: Authentication control module, used to verify and authorize each data access based on the zero trust model; The terminal interface virtual control module is used to protect and control the operation interface of the user terminal based on the smart grid data access architecture, generate a desktop terminal control platform and a virtual desktop for accessing grid data; Dynamic adaptive authentication module, used to dynamically adjust the authentication strategy and access rights generated based on identity parameters and associated certificates according to the user's access behavior and changes in the power grid data access environment; The intelligent voice interaction module is used to generate the user's actual expectations through semantic understanding of the user's input data based on the large language model, and provide intelligent voice feedback for the user's questions.

10. A computer-readable storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the method described in any one of claims 1 to 8 is implemented.

Citation Information

Patent Citations

  • Telecom integrated information system and method

    CN101018259A