Power grid access method and system

Abstract

The invention discloses a power grid access method and system. The method comprises the following steps: a power distribution network generates first verification information and sends the first verification information to a wireless communication module; receiving second verification information sent by the wireless communication module, verifying the second verification information, establishing connection with the wireless communication module after the verification is passed, and generating a shared session key; the wireless communication module receives and verifies the first verification information, generates second verification information after verification is passed, and sends the second verification information to the power distribution network; and the anomaly detection module performs data transmission anomaly detection on the power distribution network and the wireless communication module, and generates an optimization scheme according to a detection result. According to the method, through dual verification, a strict access process is ensured, the access security is ensured, and meanwhile, the transmitted data is encrypted and decrypted by exchanging and sharing a session key, so that the reliability of data transmission between the two is ensured.

Description

Technical Field

[0001] The present invention relates to the field of power grid communication security technology, and in particular to a power grid access method and system. Background Art

[0002] In smart grid and distribution network automation systems, micropower wireless communication modules play a vital role. They are responsible for transmitting key operating data and instructions between distribution equipment to ensure the safe, stable and efficient operation of the power grid.

[0003] However, the existing micro-power wireless communication modules and distribution network centers have an imperfect access authentication mechanism, which affects the availability and reliability of wireless communication modules, may lead to the leakage and tampering of power grid data, and even cause power grid failures and safety accidents. Especially with the expansion of power grid scale and the increase of complexity, the security and reliability of wireless communication modules face more severe challenges. Summary of the invention

[0004] The present invention provides a power grid access method and system to solve the problem of unsafe power grid communication.

[0005] According to one aspect of the present invention, there is provided a grid access method, comprising:

[0006] The distribution network generates first verification information and sends the first verification information to the wireless communication module; and receives second verification information sent by the wireless communication module and verifies the second verification information. After the verification is passed, a connection is established with the wireless communication module and a shared session key is generated; the first verification information is used to verify whether the wireless communication module can establish a connection with the distribution network; the second verification information is used to verify whether the wireless communication module is the communication module that currently needs to transmit data with the distribution network;

[0007] The wireless communication module receives and verifies the first verification information, generates second verification information after the verification is passed, and sends it to the power distribution network;

[0008] The anomaly detection module performs data transmission anomaly detection on the power distribution network and the wireless communication module, and generates an optimization plan according to the detection results.

[0009] According to another aspect of the present invention, a power grid access system is provided, comprising: a target management device, a self-service terminal cabinet and a metering device; wherein:

[0010] The distribution network is configured to generate first verification information and send the first verification information to the wireless communication module; and receive second verification information sent by the wireless communication module, and verify the second verification information, and after the verification is passed, establish a connection with the wireless communication module; the first verification information is used to verify whether the wireless communication module can establish a connection with the distribution network; the second verification information is used to verify whether the wireless communication module is a communication module that currently needs to transmit data with the distribution network;

[0011] The wireless communication module is configured to receive and verify the first verification information, and after verification, generate second verification information and send it to the power distribution network;

[0012] The anomaly detection module is configured to perform data transmission anomaly detection on the power distribution network and the wireless communication module, and generate an optimization plan based on the detection results.

[0013] The technical solution of the embodiment of the present invention verifies the wireless communication module according to the first verification information generated by the distribution network. After the verification is passed, the distribution network receives the second verification information sent by the wireless communication module and verifies the second verification information. After the verification is passed, a connection with the wireless communication module is established, and a shared session key is generated to encrypt and / or decrypt the transmitted data. This method uses double verification, and only after the verification is passed, access is granted, which ensures a strict access process and the security of the access; the exchange of shared session keys is used to encrypt and decrypt the transmitted data to ensure the reliability of data transmission between the two.

[0014] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0016] Figure 1 A flow chart of a power grid access method provided by an embodiment of the present invention;

[0017] Figure 2 A schematic diagram of the structure of a power grid access system provided by an embodiment of the present invention;

[0018] Figure 3A schematic diagram of the structure of another power grid access system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0019] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0020] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0021] Figure 1 This is a flow chart of a grid access method provided by an embodiment of the present invention. This embodiment is applicable to the case where a distribution network and a wireless communication module communicate with each other. The method can be executed by a grid access device, which can be implemented in the form of hardware and / or software. The grid access device can be configured in any electronic device with network communication function. Figure 1 As shown, the method includes:

[0022] S110, the distribution network generates first verification information and sends the first verification information to the wireless communication module; and receives second verification information sent by the wireless communication module and verifies the second verification information. After the verification is passed, a connection is established with the wireless communication module and a shared session key is generated.

[0023] The first verification information is used to verify whether the wireless communication module can establish a connection with the power distribution network.

[0024] The second verification information is used to verify whether the wireless communication module is a communication module that currently needs to perform data transmission with the power distribution network.

[0025] The shared session key is used to encrypt and / or decrypt data transmitted bidirectionally between the power distribution network and the wireless communication module.

[0026] Furthermore, the shared session key is updated from time to time.

[0027] Specifically, after receiving the data transmission instruction, the distribution network will generate the first verification information and send the first verification information to the wireless communication module. Also, when the distribution network receives the second verification information sent by the wireless communication module, it decrypts the second verification information through the public key and verifies the decrypted second verification information. If the verification is successful, a connection is established with the wireless communication module and a shared session key is generated; if the verification fails, an early warning is issued to indicate that other devices may be involved in the connection.

[0028] S120, the wireless communication module receives and verifies the first verification information, generates second verification information after the verification is passed, and sends it to the distribution network.

[0029] Specifically, the wireless communication module receives the first verification information sent by the distribution network, decrypts the first verification information through the private key, verifies the obtained first time information, generates second verification information if the verification passes, and sends the second verification information to the distribution network; if the verification fails, an early warning is issued.

[0030] S130, the anomaly detection module performs data transmission anomaly detection on the distribution network and the wireless communication module, and generates an optimization plan based on the detection results.

[0031] Specifically, the anomaly detection module obtains the data transmission volume, response time and data packet format generated during the data transmission process, and uses anomaly detection rules or machine learning algorithms to analyze the obtained data such as data transmission volume, response time and data packet format, identify the existing anomalies, and generate anomaly optimization plans based on the anomalies.

[0032] Optionally, generating first verification information and sending the first verification information to the wireless communication module includes steps A1-A2:

[0033] Step A1: Obtain first time information of the distribution network, and encrypt the first time information and random information using a public key to obtain first verification information.

[0034] The first time information is the time information recorded when the wireless communication module establishes a connection with the power distribution network in a historical time period.

[0035] Furthermore, the first time information will be updated along with the connection establishment process.

[0036] The random information is a randomly generated number combination. For example, the random information may be: "abcdef123456".

[0037] The public key is generated by the RSA-2048-bit key generation algorithm. The RSA-2048-bit key generation algorithm generates a public key and a private key in the security chip of the wireless communication module, stores the generated private key in the security chip, and sends the public key to the distribution network.

[0038] Furthermore, the private key is used to sign or decrypt data, and the public key is used to verify the target identity and encrypt data.

[0039] In the above steps, the private key is stored in the EEPROM of the wireless communication module, which can isolate the private key inside the wireless communication module and ensure the reliability of storage.

[0040] Specifically, the time information corresponding to when the distribution network receives the connection instruction with the wireless communication module is used as the first time information. The first time information and the random information are encrypted by a public key, and the encrypted information is used as the first verification information.

[0041] Exemplarily, the first time information and the random information may be expressed as: “{timestamp:'XXXX-XX-XXTSS:FF:MMZ', nonce:'abcdef123456'}”.

[0042] Step A2: transmitting the first verification information to the wireless communication module.

[0043] Specifically, the acquired first verification information is sent to the wireless communication module.

[0044] Optionally, receiving the second verification information sent by the wireless communication module, and verifying the second verification information, and after the verification is passed, establishing a connection with the wireless communication module, further comprising steps B1-B4:

[0045] Step B1: If the distribution network receives the second verification information, the second verification information is decrypted using the public key to obtain the target identifier and the second time information.

[0046] The second time information is the time information recorded when the wireless communication module establishes a connection with the power distribution network in a historical time period, and the second time information may be the same as or different from the first time information.

[0047] Among them, the target identifier is used to uniquely identify the wireless communication module, and the obtained target identifier is stored in the EEPROM of the wireless communication module, or other non-volatile memory, to ensure that the identity information can be retained even if the wireless communication module is powered off.

[0048] Furthermore, encryption technology (such as AES) is used to encrypt the storage area, and access control policies are set to prevent unauthorized access.

[0049] For example, the target identifier may be represented as “123e4567-e89b-12d3-a456-426614174000”.

[0050] Furthermore, the target identifier can be obtained through a unique identity identifier (UUID) generation tool, wherein the unique identity identifier (UUID) generation tool can be UUID Generator software or library function or UUID Version 4.

[0051] In the above steps, the target identifier is stored in the EEPROM of the wireless communication module, which can isolate the private target identifier inside the wireless communication module and ensure the reliability of storage.

[0052] Specifically, if the distribution network receives the second verification information sent back by the wireless communication module, the second verification information is decrypted by using the public key to obtain the target identifier and the second time information.

[0053] Step B2: Determine time verification information based on the second time information and the preset time combination.

[0054] The time verification information is used to indicate when the second time information is valid.

[0055] Specifically, the second time information is compared with the preset time combination. If the second time information is the same as one of the time data in the preset time combination, it means that the wireless communication module and the power distribution network have established a connection at the historical moment corresponding to the moment, and the verification is successful. The second time information is then compared with the current time information. If the difference between the two is within the preset time range, the verification is successful, and the time verification information is that the second time information is valid; if the difference between the two is outside the preset time range, the verification fails, and the time verification information is that the second time information is invalid.

[0056] Step B3: Determine the connection result according to the time verification information and the target identifier.

[0057] The connection result is used to indicate whether a data transmission relationship with the wireless communication module is established.

[0058] Specifically, if the time verification information shows that the second time information is valid, and the target identifier is the target identifier of the wireless communication module that has established a connection as recorded in the distribution network, the connection result is agreement to establish the connection; if the time verification information shows that the second time information is invalid, the connection result is rejection of the connection.

[0059] Furthermore, if the acquired target identifier is from the wireless communication module that establishes the connection for the first time, the target identifier of the wireless communication module is recorded, and a prompt is popped up to alert the staff whether to confirm the establishment of the connection.

[0060] Step B4: establishing a connection relationship with the wireless communication module according to the connection result.

[0061] Specifically, if the connection result is that the connection is agreed to be established, the connection between the wireless communication module and the power distribution network is directly established; if the connection result is that the connection is refused to be established, an early warning is issued.

[0062] Optionally, the shared session key establishment process includes steps C1-C4:

[0063] Step C1, determining a first parameter.

[0064] The first parameter is an arbitrarily selected prime number.

[0065] Specifically, a prime number is arbitrarily selected as the first parameter.

[0066] Step C2: Select a second parameter from the multiplication group of the first parameter.

[0067] The multiplication group of the first parameter is obtained by multiplying each element in a set of positive integers that are less than the first parameter and coprime to the first parameter.

[0068] Specifically, positive integers that are less than the first parameter and are relatively prime to the first parameter are grouped into a set, and elements in the set are multiplied in pairs to obtain a multiplication group. A number is randomly selected from the multiplication group as the second parameter.

[0069] Step C3: Generate a first public key and a second public key according to the first parameter and the second parameter.

[0070] Specifically, a first private key and a second private key are randomly generated. A first public key is generated according to the obtained first private key, the first parameter and the second parameter; and a second public key is generated according to the obtained second private key, the first parameter and the second parameter.

[0071] The first private key is generated by the power distribution network. Exemplarily, the value range of the first private key a is usually an integer between 1 and p-2.

[0072] The second private key is generated by the wireless communication module. Exemplarily, the value range of the second private key b is usually an integer between 1 and p-2.

[0073] Exemplarily, the first public key can be expressed by the following formula:

[0074] A=g a mod p

[0075] Among them, p is the first parameter; a is the first private key.

[0076] Exemplarily, the second public key can be expressed by the following formula:

[0077] B=g b mod p

[0078] Among them, p is the first parameter; b is the second private key.

[0079] Step C4: Generate a shared session key based on the first public key and the second public key.

[0080] Specifically, the first public key is sent to the wireless communication module, and after receiving the first public key, the wireless communication module calculates the first public key to obtain a first shared session key. The second public key is sent to the distribution network, and after receiving the second public key, the distribution network calculates the second public key to obtain a second shared session key.

[0081] Exemplarily, the first shared session key may be expressed by the following formula:

[0082] S=A b mod p=(g a ) b mod p = g ab mod p.

[0083] Exemplarily, the second shared session key may be expressed by the following formula:

[0084] S=B a mod p=(g b ) a mod p = g ab mod p.

[0085] Furthermore, due to g ab The calculation results of mod p are the same, so S is used as the shared session key of the distribution network and the wireless communication module.

[0086] Exemplarily, the shared session key may be expressed as: “SessionKeyABCD”.

[0087] The above steps and the generation of the shared session key can ensure the confidentiality and integrity of data during transmission and effectively prevent the risk of data leakage and tampering.

[0088] Optionally, receiving and verifying the first verification information, after the verification is passed, generating second verification information and sending it to the distribution network, including steps D1-D4:

[0089] Step D1: If the wireless communication module receives the first verification information, the first verification information is decrypted by using the private key to obtain the first time information.

[0090] Specifically, after receiving the first verification information, the wireless communication module decrypts the first verification information using the public key. If the decryption is successful, the first time information is obtained; if the decryption fails, an early warning is issued.

[0091] Step D2: verify the first time information through a preset time combination, and if the verification passes, obtain the second time information.

[0092] The preset time combination is a plurality of time data randomly recorded during the process of establishing a connection between the wireless communication module and the power distribution network.

[0093] Specifically, the first time information obtained is compared with the preset time combination. If the first time information is the same as one of the time data in the preset time combination, it is considered that the wireless communication module and the distribution network have established a connection, and the verification is successful. If the verification is successful, the current time is obtained as the second time information. If the verification fails, it is confirmed whether the distribution network is connected for the first time. If it is the first connection, the early warning indicates to verify the distribution network. If the verification is successful, the connection is directly established; if it is not the first connection, it means that there is a delay in the transmission process, and an early warning is directly issued.

[0094] In the above steps, the acquisition of the second time information can further enhance the strength of mutual verification between the power distribution network and the wireless communication module when establishing communication, thereby further enhancing security.

[0095] Step D3: Sign the second time information and the target identifier using a private key to obtain second verification information.

[0096] Specifically, the second time information and the target identifier are added to the first verification information, and encrypted and signed using a private key to obtain the second verification information.

[0097] Exemplarily, the second verification information may be expressed as: “{timestamp1:'XXXX-XX-XXTSS:FF:MMZ', nonce:'abcdef123456', Sign:Signature123, UUID:123e4567-e89b-12d3-a456-426614174000, timestamp2:'YYYY-YY-YYTTSS:FF:MMZ'}”.

[0098] Step D4: Send the second verification information to the distribution network.

[0099] Specifically, the wireless communication module sends the second verification information to the power distribution network.

[0100] Optionally, verifying the first time information by using a preset time combination includes steps E1-E4:

[0101] Step E1: If the preset time combination includes the first time information, the current time is obtained.

[0102] Specifically, if the preset time combination includes the first time information, the current time information of the wireless communication module is acquired.

[0103] Step E2: Subtract the first time information from the current time to obtain the difference time.

[0104] Specifically, the first time information is subtracted from the current time, and the difference is used as the difference time.

[0105] Step E3: If the difference time is within the preset time range, the verification is passed.

[0106] Specifically, if the difference time is included in the preset time range, it indicates that there is no delay in sending the first verification information, and the verification is passed.

[0107] For example, if the preset time range is 0 to 0.1 s and the difference time is 0.05 s, the difference time is within the preset time range, and the verification is passed.

[0108] Step E4: If the difference is outside the preset time range, the verification fails and an early warning is issued.

[0109] Specifically, if the difference time is within a preset time range, it indicates that there is a delay in sending the first verification information, and the verification fails.

[0110] For example, if the preset time range is 0-0.1s and the difference time is 0.5s, the verification fails if the difference time is outside the preset time range.

[0111] Optionally, data transmission anomaly detection is performed on the distribution network and the wireless communication module, and an optimization plan is generated according to the detection results, including steps F1-F4:

[0112] Step F1: Perform an abnormality detection on the data transmission process to obtain a detection result.

[0113] Specifically, anomaly detection is performed on the data transmission volume, response time and data packet format generated during the data transmission process, and anomaly detection results are generated.

[0114] Exemplarily, the detection method may be: using preset anomaly detection rules (such as threshold detection, pattern matching, etc.) or machine learning algorithms (such as random forest, neural network, etc.).

[0115] Step F2: perform a trust evaluation based on the detection result to obtain a trust level.

[0116] Specifically, a trust evaluation is performed based on the abnormal data included in the detection result, and the evaluation result is quantified to obtain a trust level.

[0117] Step F3: Matching optimization solutions according to the trust level and detection results.

[0118] Specifically, an optimization solution is matched from a preset optimization solution library according to the trust level and the detection result.

[0119] Among them, the preset optimization solution library consists of trust levels, detection results and optimization solutions.

[0120] For example, if the trust level is A and the detection result is a Class B anomaly, then the optimization solution is a Class I solution; if the trust level is S and the detection result is a Class B anomaly, then the optimization solution is a Class III solution.

[0121] Step F4: Optimize the data transmission process according to the optimization scheme.

[0122] Specifically, the corresponding exception is optimized according to the obtained optimization solution.

[0123] The above steps use preset anomaly detection rules or machine learning algorithms to analyze and score the trustworthiness of the data transmission process, which can timely detect and deal with potential security threats and further ensure the security and reliability of data transmission.

[0124] The technical solution of this embodiment verifies the wireless communication module according to the first verification information generated by the distribution network. After the verification is passed, the distribution network receives the second verification information sent by the wireless communication module and verifies the second verification information. After the verification is passed, a connection with the wireless communication module is established, and a shared session key is generated to encrypt and / or decrypt the transmitted data. This method uses double verification, and only allows access after the verification is passed, ensuring a strict access process and ensuring the security of the access; it uses the exchange of shared session keys to encrypt and decrypt the transmitted data to ensure the reliability of data transmission between the two.

[0125] Figure 2 The schematic diagram of the structure of a power grid access system provided by an embodiment of the present invention is applicable to the management of by-product materials generated by the power generation industry. Figure 2 As shown, the grid access system 1 includes: a distribution network 2, a wireless transmission module 3 and an abnormality detection module 4; wherein,

[0126] The distribution network 2 is configured to generate first verification information and send the first verification information to the wireless communication module 3; and receive second verification information sent by the wireless communication module 3, and verify the second verification information. After the verification is passed, a connection is established with the wireless communication module 33; the first verification information is used to verify whether the wireless communication module 3 can establish a connection with the distribution network 2; the second verification information is used to verify whether the wireless communication module 3 is a communication module that currently needs to transmit data with the distribution network 2;

[0127] The wireless communication module 3 is configured to receive and verify the first verification information, and after the verification is passed, generate the second verification information and send it to the distribution network 2;

[0128] The anomaly detection module 4 is configured to perform data transmission anomaly detection on the distribution network 2 and the wireless communication module 3, and generate an optimization plan based on the detection results.

[0129] Optionally, the grid access system 1 further includes:

[0130] The shared session key generation module 5 is used to generate a shared session key; the shared session key is used to encrypt and / or decrypt data bidirectionally transmitted between the power distribution network 2 and the wireless communication module 3.

[0131] Optionally, the grid access system 1 further includes:

[0132] The key generation module 6 is used to generate a public key and a private key, and send the public key to the distribution network 2 and the private key to the wireless communication module 3.

[0133] For example, Figure 3 As shown, the grid access system 1 includes: a distribution network 2, a wireless transmission module 3, an anomaly detection module 4, a shared session key generation module 5 and a key generation module 6.

[0134] Through the above description of the implementation method, the technicians in the relevant field can clearly understand that the embodiments of the present invention can be implemented by means of software and necessary general hardware, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the embodiments of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, server, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0135] It is worth noting that in the embodiment of the above system, the various structures included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of the various functional structures are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0136] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the embodiments of the present invention are described in more detail through the above embodiments, the embodiments of the present invention are not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A method for accessing a power grid, characterized in that: include: The distribution network generates first verification information and sends the first verification information to the wireless communication module; and, receiving the second verification information sent by the wireless communication module, and verifying the second verification information. After the verification is passed, establishing a connection with the wireless communication module and generating a shared session key; the first verification information is used to verify whether the wireless communication module can establish a connection with the power distribution network; the second verification information is used to verify whether the wireless communication module is the communication module that currently needs to transmit data with the power distribution network; The wireless communication module receives and verifies the first verification information, generates second verification information after the verification is passed, and sends it to the power distribution network; The anomaly detection module performs data transmission anomaly detection on the power distribution network and the wireless communication module, and generates an optimization plan according to the detection results.

2. The method according to claim 1, characterized in that The generating of the first verification information and sending the first verification information to the wireless communication module includes: Obtaining first time information of the distribution network, and encrypting the first time information and random information by a public key to obtain first verification information; the first time information is the time information recorded when the wireless communication module and the distribution network establish a connection in a historical time period; the random information is a randomly generated digital combination; The first verification information is transmitted to the wireless communication module.

3. The method according to claim 1, characterized in that: The receiving the second verification information sent by the wireless communication module, verifying the second verification information, and establishing a connection with the wireless communication module after the verification passes, further includes: If the distribution network receives the second verification information, the second verification information is decrypted by the public key to obtain the target identifier and the second time information; the second time information is the time information recorded when the wireless communication module and the distribution network establish a connection in the historical time period, and the second time information may be the same as the first time information or different; the target identifier is used to uniquely identify the wireless communication module; Determine time verification information according to the combination of the second time information and the preset time; the time verification information is used to indicate when the second time information is valid; Determine a connection result according to the time verification information and the target identifier; the connection result is used to indicate whether a data transmission relationship with the wireless communication module is established; A connection relationship with the wireless communication module is established according to the connection result.

4. The method according to claim 1, characterized in that: The process of establishing a shared session key includes: Determine a first parameter; the first parameter is an arbitrarily selected prime number; Selecting a second parameter from a multiplication group of the first parameter; the multiplication group of the first parameter is obtained by multiplying each element in a set of positive integers that are less than the first parameter and coprime to the first parameter; Generate a first public key and a second public key according to the first parameter and the second parameter; A shared session key is generated according to the first public key and the second public key.

5. The method according to claim 1, characterized in that The receiving and verifying the first verification information, generating second verification information after the verification is passed, and sending the second verification information to the distribution network, comprises: If the wireless communication module receives the first verification information, the first verification information is decrypted by using the private key to obtain the first time information; Verifying the first time information through a preset time combination, and if the verification passes, obtaining the second time information; The second time information and the target identifier are signed by a private key to obtain second verification information; The second verification information is sent to the power distribution network.

6. The method according to claim 5, characterized in that The verifying the first time information by using a preset time combination includes: If the preset time combination contains the first time information, the current time is obtained; Subtract the first time information from the current time to obtain a difference time; If the difference time is within the preset time range, the verification is passed; If the difference is outside the preset time range, the verification fails and an early warning is issued.

7. The method according to claim 1, characterized in that The performing of data transmission anomaly detection on the power distribution network and the wireless communication module, and generating an optimization plan according to the detection result, comprises: Perform anomaly detection on the data transmission process and obtain the detection result; Performing a trust evaluation based on the detection results to obtain a trust level; Matching an optimization solution according to the trust level and the detection result; The data transmission process is optimized according to the optimization scheme.

8. A power grid access system, characterized in that: The system includes: a power distribution network, a wireless communication module and an abnormality detection module; wherein, The distribution network is configured to generate first verification information and send the first verification information to the wireless communication module; and receive second verification information sent by the wireless communication module, and verify the second verification information, and after the verification is passed, establish a connection with the wireless communication module; the first verification information is used to verify whether the wireless communication module can establish a connection with the distribution network; the second verification information is used to verify whether the wireless communication module is a communication module that currently needs to transmit data with the distribution network; The wireless communication module is configured to receive and verify the first verification information, and after verification, generate second verification information and send it to the distribution network; The anomaly detection module is configured to perform data transmission anomaly detection on the power distribution network and the wireless communication module, and generate an optimization plan based on the detection results.

9. The system according to claim 8, characterized in that The grid access system further includes: The shared session key generation module is used to generate a shared session key; the shared session key is used to encrypt and / or decrypt data bidirectionally transmitted between the power distribution network and the wireless communication module.

10. The system according to claim 8, characterized in that The grid access system further includes: The key generation module is used to generate a public key and a private key, and send the public key to the power distribution network and the private key to the wireless communication module.

Images