A power grid project archive management method, system, storage medium and computer
By electronically signing and encrypting power grid engineering documents within the LAN, the risk of data leakage is reduced during Internet management, the problem of power grid engineering files being stolen on the Internet is solved, and the security of project secrets is ensured.
Patent Information
- Application Number
- CN202411542436.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-31
- Publication Date
- 2025-05-13
- Estimated Expiration
- 2044-10-31
AI Technical Summary
In the prior art, when power grid project archives are managed and approved through the online Internet, power grid project archives are very likely to be stolen on the Internet, resulting in the leakage of project secrets and causing huge losses to the business of the enterprise.
The power grid engineering documents are electronically signed, sealed and encrypted within the LAN to form an encrypted engineering document, and then obtained and decrypted through the Internet outside the LAN to sign and stamp.
By performing electronic signatures and encryption within the LAN, the risk of data leakage is reduced during Internet management and ensuring the security of power grid engineering files.
Smart Images

Figure CN119483972B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of file security management, and in particular to a power grid engineering archive management method, system, storage medium and computer. Background Art
[0002] Power grid engineering archives include documents in the whole process management of power grid basic engineering business and engineering projects, covering six major professional management documents: planning, technology, technical economy, safety, quality, and team. In the process of handling infrastructure engineering business, a large amount of data and files related to engineering archives will be generated; in the existing technology, online or offline document management methods are usually adopted, that is, internal document management and approval are realized offline through the local area network, and document approval and management are realized online through the Internet.
[0003] When power grid project archives are managed and approved online through the Internet, the power grid project archives are very likely to be stolen on the Internet, resulting in the leakage of power grid engineering secrets and causing huge losses to business operations. Summary of the invention
[0004] In order to solve the technical problem in the prior art that power grid project archives are very likely to be stolen on the Internet when power grid project archives are managed and approved online through the Internet, the present invention provides a power grid project archive management method, system, storage medium and computer.
[0005] The technical solution of the present invention to solve the above technical problems is as follows:
[0006] A power grid project archive management method comprises the following steps:
[0007] S1. Create power grid engineering documents;
[0008] S2. Signing and stamping the power grid engineering document using an electronic signature and an electronic seal in the local area network;
[0009] S3, encrypting the power grid engineering document in the local area network to obtain an encrypted engineering document;
[0010] S4. Obtaining the encrypted engineering document through the Internet outside the local area network, and decrypting the encrypted engineering document to obtain the power grid engineering document; wherein encrypting the power grid engineering document to obtain the encrypted engineering document specifically includes the following steps:
[0011] Creating a data block in the master data of the power grid engineering document;
[0012] Eliminating metadata in the power grid engineering document;
[0013] storing the metadata removed from the power grid engineering document into the data block of the master data to obtain the master data to be encrypted;
[0014] Acquire address information of the data block in the main data to be encrypted to obtain metadata to be encrypted;
[0015] Using the metadata to be encrypted as metadata and the main data to be encrypted as main data to construct a new document, to obtain a project document to be encrypted;
[0016] Encrypting the engineering document to be encrypted to obtain the encrypted engineering document;
[0017] S5. Sign and stamp the power grid engineering document obtained outside the local area network using the electronic signature and the electronic seal.
[0018] The beneficial effects of the present invention are: by directly performing intranet electronic signatures and electronic seals on power grid engineering documents in the local area network, only encrypted power grid engineering documents can be obtained on the external network through the Internet; the encrypted engineering documents obtained through the Internet need to be decrypted before signing and sealing; thereby reducing the risk of data leakage when power grid engineering documents are managed on the Internet.
[0019] Based on the above technical solution, the present invention can also be improved as follows.
[0020] Further, create the power grid engineering document. The specific steps are as follows:
[0021] S101. Construct multiple engineering document models in the local area network;
[0022] S102, creating a model database;
[0023] S103, storing the plurality of engineering document models in the model database;
[0024] S104: Select one or more of the engineering document models from the model database, and create the power grid engineering document using the selected one or more of the engineering document models as templates.
[0025] Furthermore, the power grid engineering document is signed and stamped using an electronic signature and an electronic seal in the local area network, specifically comprising the following steps:
[0026] S201. Create a first node and a second node on a first blockchain; wherein the first node is located in the local area network, and the second node is located outside the local area network; the electronic signature and the electronic seal are both issued by the first node;
[0027] S202: The second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0028] S203, obtaining the electronic signature and the electronic seal from the first node in the local area network;
[0029] S204: Sign and stamp the power grid engineering document using an electronic signature and an electronic seal.
[0030] Further, the power grid engineering document is encrypted in the local area network to obtain an encrypted engineering document, which specifically includes the following steps:
[0031] The first node issues a key;
[0032] The power grid engineering document is encrypted using the key in the local area network to obtain the encrypted engineering document.
[0033] Further, the key includes a public key and a private key;
[0034] The power grid engineering document is encrypted by using the key in the local area network to obtain the encrypted engineering document, and the specific steps are: the power grid engineering document is encrypted by using the public key in the local area network to obtain the encrypted engineering document;
[0035] Obtaining the encrypted engineering document through the Internet outside the local area network, and decrypting the encrypted engineering document to obtain the power grid engineering document, specifically includes the following steps:
[0036] S401. Create a second node on the first blockchain; wherein the second node is located outside the local area network;
[0037] S401, the second node obtains the private key, the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0038] S402, the second node issues the obtained private key to an Internet user outside the local area network;
[0039] S403, the Internet user outside the local area network obtains the encrypted engineering document through the Internet;
[0040] S404: The Internet user uses the private key to decrypt the encrypted engineering document to obtain the power grid engineering document.
[0041] Further, the power grid engineering document obtained outside the local area network is signed and stamped with the electronic signature and the electronic seal, which specifically includes the following steps:
[0042] S501, the second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0043] S502: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
[0044] Furthermore, the Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal, which specifically includes the following steps:
[0045] S601, creating a second blockchain;
[0046] S602, setting the second node and the Internet users outside the local area network on the second blockchain;
[0047] S603, the Internet user outside the local area network obtains the electronic signature and the electronic seal from the second node through the second blockchain smart contract;
[0048] S604: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
[0049] In order to solve the above technical problems, the present invention also provides a power grid project archive management system, and its specific technical contents are as follows:
[0050] A power grid engineering archive management system, which uses the above-mentioned power grid engineering archive management method to manage power grid engineering archives, comprises:
[0051] A local area network client is used to create a power grid engineering document; encrypt the power grid engineering document in the local area network to obtain an encrypted engineering document; and sign and stamp the power grid engineering document using an electronic signature and an electronic seal in the local area network;
[0052] A local area network server, establishing a local area network communication connection with the local area client, and used for storing the encrypted engineering document;
[0053] The Internet client obtains the encrypted engineering document through the Internet outside the local area network, and decrypts the encrypted engineering document to obtain the power grid engineering document; and the obtained power grid engineering document is signed and stamped with the electronic signature and the electronic seal.
[0054] In order to solve the above technical problems, the present invention also provides a storage medium, and its specific technical contents are as follows:
[0055] A storage medium stores a computer program or a computer instruction. When the computer program or the computer instruction is executed by a computer processor, the steps of the above-mentioned power grid engineering archive management method are implemented.
[0056] In order to solve the above technical problems, the present invention also provides a computer, and its specific technical contents are as follows:
[0057] A computer comprises a memory and one or more processors, wherein the memory stores executable codes, and when one or more of the processors execute the executable codes, the steps of the above-mentioned power grid engineering archive management method are implemented. BRIEF DESCRIPTION OF THE DRAWINGS
[0058] Figure 1 A flowchart of a power grid project archive management method according to an embodiment of the present invention;
[0059] Figure 2 A structural framework of a power grid project archive management system in an embodiment of the present invention Figure 1 ;
[0060] Figure 3 A structural framework of a power grid project archive management system in an embodiment of the present invention Figure 2 . DETAILED DESCRIPTION
[0061] The principles and features of the present invention are described below in conjunction with the accompanying drawings. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.
[0062] Example 1
[0063] like Figure 1 As shown, this embodiment provides a power grid project archive management method, comprising the following steps:
[0064] S1. Create power grid engineering documents;
[0065] Create power grid engineering documents. The specific steps are as follows:
[0066] S101. Construct multiple engineering document models in the local area network;
[0067] S102, creating a model database;
[0068] S103, storing the plurality of engineering document models in the model database;
[0069] S104: Select one or more of the engineering document models from the model database, and create the power grid engineering document using the selected one or more of the engineering document models as templates.
[0070] S2. Signing and stamping the power grid engineering document using an electronic signature and an electronic seal in the local area network;
[0071] The power grid engineering document is signed and stamped using an electronic signature and an electronic seal in the local area network, specifically including the following steps:
[0072] S201. Create a first node and a second node on a first blockchain; wherein the first node is located in the local area network, and the second node is located outside the local area network; the electronic signature and the electronic seal are both issued by the first node;
[0073] S202: The second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0074] S203, obtaining the electronic signature and the electronic seal from the first node in the local area network;
[0075] S204: Sign and stamp the power grid engineering document using an electronic signature and an electronic seal.
[0076] S3. Encrypting the power grid engineering document in the local area network to obtain an encrypted engineering document; wherein encrypting the power grid engineering document to obtain an encrypted engineering document specifically includes the following steps:
[0077] S301, creating a data block in the master data of the power grid engineering document;
[0078] S302, removing metadata from the power grid engineering document;
[0079] S303, storing the metadata removed from the power grid engineering document into the data block of the master data to obtain the master data to be encrypted;
[0080] S304, obtaining address information of the data block in the main data to be encrypted, and obtaining metadata to be encrypted;
[0081] S305, constructing a new document using the metadata to be encrypted as metadata and the main data to be encrypted as main data to obtain a project document to be encrypted;
[0082] S306, encrypting the engineering document to be encrypted to obtain the encrypted engineering document;
[0083] S307, encrypting the engineering document to be encrypted, and obtaining the encrypted engineering document comprises the following steps:
[0084] S308: The first node issues a key; wherein the key includes a public key and a private key;
[0085] S309, encrypting the engineering document to be encrypted by using the key in the local area network to obtain the encrypted engineering document;
[0086] The engineering document to be encrypted is encrypted by using the key in the local area network to obtain the encrypted engineering document. The specific steps are: the engineering document to be encrypted is encrypted by using the public key in the local area network to obtain the encrypted engineering document.
[0087] By putting the metadata of the original engineering document into the master data, and using the address information of the metadata in the master data as the metadata of the new document; and then encrypting the new document; the confidentiality is improved, and double encryption protection of the document is achieved. At the same time, since the construction of the new document is a fixed method, and the method of using key encryption is formulated by the key provider, if the key provider leaks the secret, the single key encryption or decryption method will also be leaked; therefore, the present invention adopts a technology that combines a fixed encryption method and a key encryption method, so that document users can obtain fixed encryption and decryption methods, that is, the creation process of the above-mentioned engineering document to be encrypted and the process of decrypting the engineering document to be encrypted into the power grid engineering document when authorized, and can obtain fixed encryption or decryption methods through identity authentication, and encrypt and decrypt power grid engineering documents by obtaining keys to implement key encryption or decryption methods. S4. Obtain the encrypted engineering document through the Internet outside the local area network, and decrypt the encrypted engineering document to obtain the power grid engineering document;
[0088] Obtaining the encrypted engineering document through the Internet outside the local area network, and decrypting the encrypted engineering document to obtain the power grid engineering document, specifically includes the following steps:
[0089] S401. Create a second node on the first blockchain; wherein the second node is located outside the local area network;
[0090] S401, the second node obtains the private key, the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0091] S402, the second node issues the obtained private key to an Internet user outside the local area network;
[0092] S403, the Internet user outside the local area network obtains the encrypted engineering document through the Internet;
[0093] S404: The Internet user uses the private key to decrypt the encrypted project document to obtain the power grid project document. The Internet user uses the private key to decrypt the encrypted project document to obtain the power grid project document, which specifically includes the following steps:
[0094] The Internet user uses the private key to decrypt the encrypted project document to obtain the project document to be encrypted;
[0095] Acquire the address information of the data block according to the metadata in the engineering document to be encrypted;
[0096] Query and obtain data in the data block in the master data in the engineering document to be encrypted according to the address information to obtain original metadata;
[0097] Deleting the data block in the master data in the engineering document to be encrypted to obtain the original master data;
[0098] A new document is constructed by using the original metadata as metadata and the original master data as master data to obtain the power grid engineering document.
[0099] S5. Sign and stamp the power grid engineering document obtained outside the local area network using the electronic signature and the electronic seal.
[0100] Further, the power grid engineering document obtained outside the local area network is signed and stamped with the electronic signature and the electronic seal, which specifically includes the following steps:
[0101] S501, the second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract;
[0102] S502: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
[0103] The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal, which specifically includes the following steps:
[0104] S601, creating a second blockchain;
[0105] S602, setting the second node and the Internet users outside the local area network on the second blockchain;
[0106] S603, the Internet user outside the local area network obtains the electronic signature and the electronic seal from the second node through the second blockchain smart contract;
[0107] S604: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
[0108] The present invention directly performs intranet electronic signature and electronic seal on power grid engineering documents in the local area network, while only the encrypted power grid engineering documents can be obtained through the Internet in the external network; the encrypted engineering documents obtained through the Internet need to be decrypted before signing and sealing; thus, the risk of data leakage is reduced when the power grid engineering documents are managed on the Internet. In combination with blockchain technology, the decryption key, electronic signature and electronic seal are issued to users on the Internet through the nodes on the blockchain, and the decentralization of the blockchain is utilized to improve the security of the key; at the same time, the data transmission operation of the encrypted power grid engineering documents is not performed between the first node and the second node on the first blockchain and the second blockchain, which ensures that other nodes on the first blockchain cannot obtain the encrypted power grid engineering documents, further improving the data security performance.
[0109] like Figure 2 As shown, in some other embodiments, a power grid project archive management system is also provided, which uses the above-mentioned power grid project archive management method to manage power grid project archives, including:
[0110] A local area network client is used to create a power grid engineering document; encrypt the power grid engineering document in the local area network to obtain an encrypted engineering document; and sign and stamp the power grid engineering document using an electronic signature and an electronic seal in the local area network;
[0111] A local area network server, establishing a local area network communication connection with the local area client, and used for storing the encrypted engineering document;
[0112] The Internet client obtains the encrypted engineering document through the Internet outside the local area network, and decrypts the encrypted engineering document to obtain the power grid engineering document; and the obtained power grid engineering document is signed and stamped with the electronic signature and the electronic seal. The power grid engineering document is signed and stamped with the electronic signature and the electronic seal, specifically: the power grid engineering document is signed with the electronic signature, and the power grid engineering document is stamped with the electronic seal.
[0113] like Figure 3As shown, the power grid project archive management system also includes a first node server and a second node server, the first node server and the local area network server and the local area network client are located in the same local area network, and the second node server and the Internet client are both located outside the local area network; the first node server and the second node server are located on the first blockchain; the second node server and the Internet client are located on the second blockchain; the Internet client located on the second blockchain establishes a communication connection with the local area network server through the Internet; specifically, the first node server is located at the first node or is the first node, and the second node server is located at the second node or is the second node;
[0114] The first node server issues the public key, the electronic signature and the electronic seal to the LAN client; the LAN client directly uses the public key to encrypt the power grid engineering document to obtain an encrypted engineering document; the LAN client directly stores the encrypted engineering document to the LAN server through the LAN; the first node server issues the private key, the electronic signature and the electronic seal to the second node server through the first blockchain smart contract; in the second blockchain, the Internet client obtains the private key, the electronic signature and the electronic seal from the second node server through the second blockchain smart contract; the Internet client directly obtains the encrypted engineering document from the LAN server through the Internet, and uses the private key to decrypt the encrypted engineering document to obtain the power grid engineering document; the Internet client uses the electronic signature and the electronic seal to sign and seal the power grid engineering document.
[0115] The embodiment of the present invention directly performs intranet electronic signature and electronic seal on the power grid engineering documents in the local area network, while only the encrypted power grid engineering documents can be obtained through the Internet; the encrypted engineering documents obtained through the Internet need to be decrypted before signing and sealing; thus, the risk of data leakage is reduced when the power grid engineering documents are managed on the Internet. Blockchain technology is used to improve the confidentiality of keys, electronic signatures and electronic seals; at the same time, since the documents in the local area network server are all encrypted documents, the documents obtained by the Internet client from the local area network server are encrypted documents, preventing the power grid engineering documents from being leaked from the Internet through the local area network server.
[0116] Example 2
[0117] Based on Example 1, this embodiment provides a storage medium, which stores a computer program or computer instructions. When the computer program or the computer instructions are executed by a computer processor, the steps of the above-mentioned power grid engineering archive management method are implemented.
[0118] The storage medium may be an internal storage unit of any device with data processing capability described in any of the foregoing embodiments, such as a hard disk or a memory. The storage medium may also be an external storage device of any device with data processing capability, such as a plug-in hard disk, a smart memory card, an SD card, a flash memory card, etc. equipped on the device. Furthermore, the storage medium may also include both an internal storage unit and an external storage device of any device with data processing capability. The computer-readable storage medium is used to store the computer program and other programs and data required by any device with data processing capability, and may also be used to temporarily store data that has been output or is to be output.
[0119] Example 3
[0120] Based on Example 1, this embodiment provides a computer, including a memory and one or more processors, wherein the memory stores executable code, and when one or more of the processors execute the executable code, the steps of the power grid engineering archive management method in Example 1 are implemented.
[0121] The memory may be an internal storage unit of any device with data processing capability described in any of the aforementioned embodiments, such as a hard disk or a memory. The memory may also be an external storage device of any device with data processing capability, such as a plug-in hard disk, a smart memory card, an SD card, a flash memory card, etc. equipped on the device. Furthermore, the memory may include both an internal storage unit and an external storage device of any device with data processing capability. The memory is used to store the computer program and other programs and data required by any device with data processing capability, and may also be used to temporarily store data that has been output or is to be output.
[0122] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the concept and principle of the present invention should be included in the protection scope of the present invention.
Claims
1. A power grid project archive management method, characterized in that: The steps include: S1. Create power grid engineering documents; S2. Signing and stamping the power grid engineering document using an electronic signature and an electronic seal in the local area network; S3, encrypting the power grid engineering document in the local area network to obtain an encrypted engineering document; The step of encrypting the power grid engineering document to obtain the encrypted engineering document specifically includes the following steps: Creating a data block in the master data of the power grid engineering document; Eliminating metadata in the power grid engineering document; storing the metadata removed from the power grid engineering document into the data block of the master data to obtain the master data to be encrypted; Acquire address information of the data block in the main data to be encrypted to obtain metadata to be encrypted; Using the metadata to be encrypted as metadata and the main data to be encrypted as main data to construct a new document, to obtain a project document to be encrypted; Encrypting the engineering document to be encrypted to obtain the encrypted engineering document; S4, obtaining the encrypted engineering document through the Internet outside the local area network, and decrypting the encrypted engineering document to obtain the power grid engineering document; S5. Sign and stamp the power grid engineering document obtained outside the local area network using the electronic signature and the electronic seal.
2. The power grid project archive management method according to claim 1, characterized in that: Create power grid engineering documents. The specific steps are as follows: S101. Construct multiple engineering document models in a local area network; S102, creating a model database; S103, storing the plurality of engineering document models in the model database; S104: Select one or more of the engineering document models from the model database, and create the power grid engineering document using the selected one or more of the engineering document models as templates.
3. The power grid project archive management method according to claim 1, characterized in that: The power grid engineering document is signed and stamped using an electronic signature and an electronic seal in the local area network, specifically including the following steps: S201. Create a first node and a second node on a first blockchain; wherein the first node is located in the local area network, and the second node is located outside the local area network; the electronic signature and the electronic seal are both issued by the first node; S202: The second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract; S203, obtaining the electronic signature and the electronic seal from the first node in the local area network; S204: Sign and stamp the power grid engineering document using an electronic signature and an electronic seal.
4. The power grid project archive management method according to claim 3, characterized in that: Encrypting the power grid engineering document in the local area network to obtain the encrypted engineering document specifically includes the following steps: The first node issues a key; The power grid engineering document is encrypted using the key in the local area network to obtain the encrypted engineering document.
5. The power grid engineering archive management method according to claim 4, characterized in that: The key includes a public key and a private key; The power grid engineering document is encrypted by using the key in the local area network to obtain the encrypted engineering document, and the specific steps are: the power grid engineering document is encrypted by using the public key in the local area network to obtain the encrypted engineering document; Obtaining the encrypted engineering document through the Internet outside the local area network, and decrypting the encrypted engineering document to obtain the power grid engineering document, specifically includes the following steps: S401. Create a second node on the first blockchain; wherein the second node is located outside the local area network; S401, the second node obtains the private key, the electronic signature and the electronic seal from the first node through the first blockchain smart contract; S402, the second node issues the obtained private key to an Internet user outside the local area network; S403, the Internet user outside the local area network obtains the encrypted engineering document through the Internet; S404: The Internet user uses the private key to decrypt the encrypted engineering document to obtain the power grid engineering document.
6. The power grid engineering archive management method according to claim 5, characterized in that: The power grid engineering document obtained outside the local area network is signed and stamped with the electronic signature and the electronic seal, specifically comprising the following steps: S501, the second node obtains the electronic signature and the electronic seal from the first node through the first blockchain smart contract; S502: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
7. The power grid engineering archive management method according to claim 5, characterized in that: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal, which specifically includes the following steps: S601, creating a second blockchain; S602, setting the second node and the Internet users outside the local area network on the second blockchain; S603, the Internet user outside the local area network obtains the electronic signature and the electronic seal from the second node through the second blockchain smart contract; S604: The Internet user outside the local area network signs and stamps the power grid engineering document using the electronic signature and the electronic seal.
8. A power grid project archive management system, characterized in that: The method for managing power grid project archives according to any one of claims 1 to 7 is used to manage power grid project archives, comprising: A local area network client is used to create a power grid engineering document; encrypt the power grid engineering document in the local area network to obtain an encrypted engineering document; and sign and stamp the power grid engineering document using an electronic signature and an electronic seal in the local area network; A local area network server, establishing a local area network communication connection with the local area network client, and used for storing the encrypted engineering document; The Internet client obtains the encrypted engineering document through the Internet outside the local area network, and decrypts the encrypted engineering document to obtain the power grid engineering document; and the obtained power grid engineering document is signed and stamped with the electronic signature and the electronic seal.
9. A storage medium, characterized in that: The storage medium stores a computer program or a computer instruction. When the computer program or the computer instruction is executed by a computer processor, the steps of the power grid engineering archive management method as described in any one of claims 1 to 7 are implemented.
10. A computer, characterized in that: It comprises a memory and one or more processors, wherein the memory stores executable code, and when one or more of the processors execute the executable code, the steps of the power grid engineering archive management method as described in any one of claims 1 to 7 are implemented.
Citation Information
Patent Citations
Electronic signature method, system and device based on blockchain and readable storage medium
CN112507391A
Information processing method and device, equipment, storage medium and product
CN116015898A