Switching device data encryption processing method and switching device
By evaluating the load level of the intelligent processing unit and edge communication node in the switching device, dynamically allocating data encryption processing tasks, the problem that switching devices in the prior art are difficult to meet the network security encryption requirements, and the hardware cost is achieved In the case, rationally allocate computing resources to meet the effectiveness of network security requirements.
Patent Information
- Application Number
- CN202411886705.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-20
- Publication Date
- 2025-02-14
AI Technical Summary
Due to the limitations of self-power supply and low power consumption, the existing switching devices have limited computing capabilities of their own intelligent processing units, making it difficult to meet the requirements of network security for data storage and transmission encryption while ensuring basic measurement and protection functions.
The data encryption processing tasks are dynamically allocated by evaluating the load levels of the intelligent processing unit and edge communication nodes. If the load level of the intelligent processing unit is within a preset security range, the intelligent processing unit will perform the data encryption processing task; otherwise, it will be handed over to the edge communication node with the lowest current load level.
Rationally allocate computing resources, take into account economic and performance requirements, and meet the relevant requirements of network security for data storage and transmission encryption without increasing the hardware costs of the original controller.
Smart Images
Figure CN119449477A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to a data encryption processing method, and in particular to a switch device data encryption processing method. Background Art
[0002] With the rapid development of information and communication technology, traditional power grids are gradually evolving into smart grids, and more and more distribution components are connected to the Internet through the Internet of Everything. On the one hand, this realizes the two-way flow of power grids and information, integrates power grid resources more efficiently, improves the operability, predictability, and maintainability of the power grid, and greatly improves reliability and efficiency; on the other hand, the large-scale introduction of the network has also led to the exposure of massive amounts of power equipment data on the Internet. If the encryption of storage and transmission is not properly processed, it may cause the leakage of important data at the least, and more seriously, it may be used and attacked by criminals, causing instability or even paralysis of the power grid, seriously endangering the normal operation of the social economy.
[0003] As an important part of power distribution components, switch devices, such as intelligent circuit breakers, are no longer just capable of simply disconnecting and connecting load circuits. The relevant requirements for network security are becoming more and more urgent. How to store and encrypt the data of power equipment before network transmission has become a problem that such switch devices must face. However, due to the limitations of self-power supply and low power consumption, the computing power of the intelligent processing unit of some switch devices is limited. How to ensure the basic measurement and protection functions while meeting the requirements of network security storage and transmission encryption? These encryption requirements often consume a lot of computing resources. Summary of the invention
[0004] The technical problem to be solved by the present invention is to overcome the shortcomings of the prior art and provide a data encryption processing method for a switch device, which dynamically allocates data encryption processing tasks based on load level evaluation of intelligent processing units and edge communication nodes, thereby allocating computing resources more reasonably and securely.
[0005] The present invention specifically adopts the following technical solutions to solve the above technical problems: A method for data encryption processing of a switch device, wherein the switch device comprises an intelligent processing unit and a group of edge communication nodes which are communicatively connected to the intelligent processing unit; the intelligent processing unit dynamically allocates data encryption processing tasks according to its own load level: if the load level of the intelligent processing unit is within a preset safety range, the data encryption processing task is executed by the intelligent processing unit; otherwise, the data encryption processing task is executed by the edge communication node with the lowest current load level.
[0006] Based on the same inventive concept, the following technical solutions can also be obtained: A switch device comprises an intelligent processing unit and a group of edge communication nodes communicatively connected to the intelligent processing unit, wherein the intelligent processing unit comprises a measurement protection module for performing a measurement protection function and a data encryption module for performing data encryption processing; the intelligent processing unit further comprises: A load monitoring module is used to evaluate the load level of the intelligent processing unit itself and receive the current load level information of the edge communication node; The encryption task dynamic allocation module is used to dynamically allocate data encryption processing tasks according to the load level of the intelligent processing unit itself: if the load level of the intelligent processing unit is within a preset safety range, the intelligent processing unit will execute the data encryption processing task; otherwise, the data encryption processing task will be executed by the edge communication node with the lowest current load level.
[0007] Compared with the prior art, the technical solution of the present invention has the following beneficial effects: The present invention monitors the load level of each computing device in the switch device, dynamically allocates data encryption processing tasks, and rationally allocates computing resources; it takes into account both economy and performance requirements, and can meet network security requirements for data storage and transmission encryption without increasing the hardware cost of the original controller. BRIEF DESCRIPTION OF THE DRAWINGS
[0008] Figure 1 is a structural block diagram of the switch device of the present invention; Figure 2 This is a schematic diagram of the working process of the intelligent controller; Figure 3 Schematic diagram of the workflow of edge communication nodes. DETAILED DESCRIPTION
[0009] In view of the shortcomings of the existing technology, the solution of the present invention is to make full use of the computing power of the edge communication nodes in the switch device, dynamically allocate data encryption processing tasks and rationally allocate computing resources by monitoring the load level of each computing device in the switch device.
[0010] The present invention specifically adopts the following technical solutions to solve the above technical problems: A method for data encryption processing of a switch device, wherein the switch device comprises an intelligent processing unit and a group of edge communication nodes which are communicatively connected to the intelligent processing unit; the intelligent processing unit dynamically allocates data encryption processing tasks according to its own load level: if the load level of the intelligent processing unit is within a preset safety range, the data encryption processing task is executed by the intelligent processing unit; otherwise, the data encryption processing task is executed by the edge communication node with the lowest current load level.
[0011] Based on the same inventive concept, the following technical solutions can also be obtained: A switch device comprises an intelligent processing unit and a group of edge communication nodes communicatively connected to the intelligent processing unit, wherein the intelligent processing unit comprises a measurement protection module for performing a measurement protection function and a data encryption module for performing data encryption processing; the intelligent processing unit further comprises: A load monitoring module is used to evaluate the load level of the intelligent processing unit itself and receive the current load level information of the edge communication node; The encryption task dynamic allocation module is used to dynamically allocate data encryption processing tasks according to the load level of the intelligent processing unit itself: if the load level of the intelligent processing unit is within a preset safety range, the intelligent processing unit will execute the data encryption processing task; otherwise, the data encryption processing task will be executed by the edge communication node with the lowest current load level.
[0012] In order to facilitate public understanding, the technical solution of the present invention is described in detail below through a specific embodiment and in conjunction with the accompanying drawings: The switch device of this embodiment is an intelligent circuit breaker. Figure 1 As shown, it includes an intelligent controller and a group of edge communication nodes that are communicatively connected to the intelligent processing unit.
[0013] Among them, the intelligent controller is provided with: a measurement protection module for performing measurement protection functions, a data encryption module for performing data encryption processing, a load monitoring module for evaluating the load level of the intelligent processing unit itself and receiving the current load level information of the edge communication node, and an encryption task dynamic allocation module for dynamically allocating data encryption processing tasks according to the load level of the intelligent processing unit itself.
[0014] The edge communication node is provided with: a communication processing module for processing the communication request and response of the host computer to the circuit breaker data, a load evaluation module for evaluating the load level of the edge communication node itself, and a data encryption module for performing data encryption processing tasks.
[0015] The data encryption module in the intelligent controller and edge communication node uses the encryption algorithm set by the system to encrypt the data, such as the commonly used SHA, SM2, SM3, SM4, RSA and other encryption algorithms.
[0016] Intelligent controllers and edge communication nodes can use various existing load level assessment methods to assess and measure their own load levels according to actual needs, such as using MCU utilization, memory usage, I / O occupancy, processor temperature, power consumption and other indicators for measurement.
[0017] The basic working process of intelligent controller is as follows: Figure 2 As shown, the data encryption process is as follows: Step 1: Evaluate the load status of the intelligent controller itself; if the load level is less than the threshold, go to step 2, otherwise go to step 3; Step 2: The intelligent controller itself performs data encryption processing and then goes to step 6; Step 3: Receive and sort the load status of edge communication node devices; Step 4: Send the data to be encrypted to the corresponding edge communication node device according to the sorting result; Step 5: Wait for the edge communication node device to return the encryption result; Step 6: The data encryption process ends.
[0018] The basic workflow of each edge communication node is as follows: Figure 3 As shown in the figure, the data encryption process is as follows: Step 1: Evaluate the load status of the system and transmit the evaluation results to the intelligent controller; Step 2: Determine whether an encryption task request from the intelligent controller is received, if yes, go to step 3, otherwise, go to step 6; Step 3: receiving the encrypted data sent by the intelligent controller; Step 4: Encrypt the data to be encrypted; Step 5: Return the encrypted data to the intelligent controller; Step 6. End.
Claims
1. A method for data encryption processing of a switch device, wherein the switch device has an intelligent processing unit and a group of edge communication nodes connected to the intelligent processing unit; characterized in that: The intelligent processing unit dynamically allocates data encryption processing tasks according to its own load level: if the load level of the intelligent processing unit is within a preset safety range, the data encryption processing task will be executed by the intelligent processing unit; otherwise, the data encryption processing task will be executed by the edge communication node with the lowest current load level.
2. A switch device, comprising an intelligent processing unit and a group of edge communication nodes communicatively connected to the intelligent processing unit, wherein the intelligent processing unit comprises a measurement protection module for performing measurement protection functions and a data encryption module for performing data encryption processing; characterized in that: The intelligent processing unit also includes: A load monitoring module is used to evaluate the load level of the intelligent processing unit itself and receive the current load level information of the edge communication node; The encryption task dynamic allocation module is used to dynamically allocate data encryption processing tasks according to the load level of the intelligent processing unit itself: if the load level of the intelligent processing unit is within a preset safety range, the intelligent processing unit will execute the data encryption processing task; otherwise, the data encryption processing task will be executed by the edge communication node with the lowest current load level.