Intelligent centralized meter reading terminal and method for autonomously realizing certificate management and secure communication

Abstract

The invention provides an intelligent centralized meter reading terminal and method for autonomously realizing certificate management and secure communication, and the method comprises the following steps: before leaving a factory, the intelligent centralized meter reading terminal writes a Root CA certificate in a one-time programmable region, applies to the Root CA for taking the terminal as Sub CA, and generates a signature certificate at the same time; on site, the intelligent centralized meter reading terminal autonomously carries out certificate initialization on the intelligent electric meter registered for the first time, and two subsequent real-time communication parties carry out bidirectional authentication and negotiate a session key to carry out encryption communication. Through autonomous certificate management and secure communication, the intelligent centralized meter reading terminal can autonomously perform certificate management and control on the hung intelligent electric meter and realize secure communication, layered management of certificates and complete independence of information security of each management and control area are realized, and the system is safer and more reliable.

Description

Technical Field

[0001] The invention belongs to the field of intelligent meter reading terminals, and in particular relates to an intelligent meter reading terminal and method for autonomously realizing certificate management and secure communication. Background Art

[0002] Intelligent data collection terminals can realize remote monitoring and data collection, and improve work efficiency. In order to ensure the information security in the intelligent data collection process, it is necessary to use technical means to protect the data transmitted between terminal devices to prevent unauthorized access or data tampering and leakage. This involves encryption algorithms, access control, identity authentication and other technical means.

[0003] In order to ensure that user information and confidential data are effectively protected during the collection process, it is generally based on the PKI system. During the initial installation, the master station will distribute security certificates and initial keys to each terminal, including smart collection terminals and smart meter terminals, to achieve identity authentication, identity verification and encrypted communication in the subsequent communication process.

[0004] However, since the distribution and management of all certificates and keys of the entire system must be completed by the master station, the load on the master station is very heavy. Summary of the invention

[0005] The purpose of the present invention is to address the problem of excessive load on the certificate and key management master station, and to propose an intelligent meter reading terminal and method that can independently implement certificate management and secure communication, so that the intelligent meter reading terminal can independently manage certificates and securely communicate with the smart meters under its control during the entire life cycle without relying on the master station.

[0006] The technical solution of the present invention is:

[0007] The present invention provides a method for autonomously implementing certificate management and secure communication, comprising:

[0008] Step 1: The intelligent meter reading terminal writes the Root CA certificate into the one-time programmable area;

[0009] Step 2: The intelligent meter reading terminal applies to the Root CA to use the terminal as a Sub CA;

[0010] Step 3: The intelligent meter reading terminal generates a signature certificate by itself;

[0011] Step 4: The smart meter collection terminal independently initializes the certificate of the smart meter registered for the first time;

[0012] Step 5: The intelligent meter reading terminal and the smart meter perform two-way authentication and negotiate the session key for encrypted communication;

[0013] Step 6: The intelligent meter reading terminal autonomously and regularly checks the validity of its own and its subordinate smart meter certificates, and updates them in a timely manner.

[0014] Furthermore, in the step 1, the intelligent meter reading terminal writes the Root CA certificate in the one-time programmable area including:

[0015] The CA certificate of the entire system is used as the Root CA certificate and written into the one-time programmable area of ​​the intelligent meter reading terminal. After writing, it can only be read but not erased or written again;

[0016] The smart meters controlled by the smart meter reading terminal are also installed with the same Root CA when they leave the factory.

[0017] Furthermore, in step 2, the intelligent meter reading terminal applies to the Root CA to use the terminal as a Sub CA, including:

[0018] Step 201: The intelligent meter reading terminal generates an ECC key pair as the public and private key pair of Sub CA. SubCA and public key Q SubCA ;

[0019] Step 202: The intelligent meter reading terminal uses the key pair to generate a certificate request and applies to the Root CA to use the terminal as a Sub CA. The Sub CA certificate is used indefinitely, and the holder is named the system serial number of the intelligent meter reading terminal.

[0020] Step 203: the intelligent meter reading terminal obtains the Sub CA certificate from the Root CA, uses the public key in the Root CA certificate to verify the validity of the signature of the Sub CA certificate, and then imports the Sub CA certificate into the intelligent meter reading terminal.

[0021] Furthermore, in step 3, the intelligent meter reading terminal generates a signature certificate including:

[0022] Step 301: The intelligent meter reading terminal generates a pair of ECC key pairs as its own signature public and private key pairs, and the private key d us and public key Q us ;

[0023] Step 302: The intelligent collection terminal uses the private key d of Sub CA SubCA Sign your own public key Q us The scope and time of use of the public key are signed to generate the signature certificate CER of the intelligent meter reading terminal itself. us The certificate holder name and issuer are both the system serial number of the intelligent meter reading terminal.

[0024] Furthermore, in step 4, the smart meter collection terminal autonomously initializes the certificate of the first registered smart meter, including:

[0025] Step 401: the intelligent meter collection terminal receives the registration request of the smart meter and sends the Sub CA certificate obtained in step 203 to the smart meter; the smart meter uses the Root CA installed in the factory to verify the received Sub CA certificate. If the verification is successful, the Sub CA is saved and the process goes to step 402; otherwise, the registration fails;

[0026] Step 402: The smart meter generates an ECC key pair and initiates a certificate request to the smart meter collection terminal. The private key d vs and public key Q vs , initiate a certificate request CSR to the intelligent meter reading terminal VS , CSR VS The public key is Q vs , the holder is named as the serial number in the smart meter system;

[0027] Step 403: The intelligent meter reading terminal receives the certificate request CSR VS After that, parse the certificate request CSR VS After the validity is confirmed, the corresponding certificate CER is generated according to the request vs The certificate is signed with the Sub CA private key, and the issuer is the system serial number of the intelligent meter reading terminal;

[0028] Step 404: The intelligent meter reading terminal sends the certificate CER generated in step 403 vs Sent to the smart meter, the smart meter uses the public key in the Sub CA to create the certificate CER vs Verify and save CER if verification is successful vs Go to step 405, otherwise the registration fails;

[0029] Step 405: The intelligent meter reading terminal sends the certificate CER generated in step 302 us Sent to the smart meter; the smart meter uses the public key in the Sub CA saved in step 401 to CER us Verify and the registration is completed if the verification is successful;

[0030] Step 406: After receiving the registration success message, the intelligent meter reading terminal sends the certificate CER generated in step 403 to vs Bind and save with other registration information of smart meter, and the registration process ends;

[0031] Step 407: After registration is completed, encrypted communication is used between the smart meter reading terminal and the smart meter.

[0032] Furthermore, in step 5, the intelligent meter reading terminal and the smart meter perform two-way authentication and negotiate a session key for encrypted communication, including:

[0033] Step 501: The intelligent collection terminal generates a pair of temporary key pairs as key negotiation key pairs, and the private key d ukA and public key Q ukA , using the private key d generated in step 301 us The public key Q in the temporary negotiated key pair ukA And other information to establish the connection to sign to get the signature SIG ukA , the public key Q ukA Together with other information and signature SIG to establish the connection ukA Sent to the smart meter together;

[0034] Step 502: After receiving the connection establishment request, the smart meter uses the certificate CER us The public key Q in us Signature SIG ukA Perform signature verification and verify the public key Q ukA Perform public key validity verification. If the verification is successful, go to step 503. Otherwise, the connection establishment fails.

[0035] Step 503: The smart meter generates a pair of temporary key pairs as key negotiation key pairs, and the private key d vkA and public key Q vkA , the private key d vkA and the public key Q received in step 502 ukA Use the key negotiation method ECDH to calculate the negotiation key Z, and expand the key according to the key expansion information in the established connection to obtain the session key, and destroy the negotiation key Z and the private key d vkA , public key Q vkA ;

[0036] Step 504: Use the private key d generated in step 402 vs The public key Q in the temporary negotiated key pair vkA And other information of the connection establishment response is signed to obtain the signature SIG vkA , the public key Q vkA Together with other information and signature SIG of the connection establishment response vkA Send them to the intelligent meter reading terminal together;

[0037] Step 505: After receiving the connection establishment response, the intelligent meter reading terminal uses the certificate CER vs Q vs Signature SIG vkA Perform signature verification and verify the public key Q vkAPerform public key validity verification. If the verification is successful, go to step 506. Otherwise, the connection establishment fails.

[0038] Step 506: The intelligent collection terminal uses the public key Q received in step 505 vkA and the private key d generated in step 501 ukA , use the key negotiation method ECDH to calculate the negotiation key Z, expand the key according to the key extension information in the established connection to obtain the session key, and destroy the negotiation key Z and private key d ukA , public key Q ukA ;

[0039] Step 507: The intelligent meter reading terminal and the intelligent meter use the session key to communicate securely.

[0040] Furthermore, in step 6, the smart meter collection terminal autonomously and regularly checks the validity of its own and subordinate smart meter certificates, and updates them in a timely manner, including:

[0041] The intelligent meter reading terminal regularly checks its own signature certificate CER us Validity period. If it is insufficient, follow step 3 to regenerate a signature certificate CER us And update the certificates for all registered and managed smart meters;

[0042] The intelligent meter reading terminal regularly checks the signature certificates CER of all managed smart meters vs Validity period, if the CER of a smart meter vs If the validity period is insufficient, the intelligent meter reading terminal requires the smart meter to reapply for the certificate.

[0043] An intelligent meter reading terminal that autonomously implements certificate management and secure communication, the intelligent meter reading terminal comprising:

[0044] Root CA certificate management module: responsible for the management and control of Root CA certificates;

[0045] Sub CA certificate management module: responsible for the application and management of Sub CA certificates;

[0046] Signature certificate management module: responsible for the generation and control of signature certificates, and regular validity management;

[0047] Smart meter certificate management registration module: responsible for initializing the certificates of smart meters registered for the first time and performing validity management at regular intervals;

[0048] Secure communication module: responsible for two-way identity authentication of smart meters and negotiation of session keys for encrypted communication.

[0049] An electronic device, comprising:

[0050] a memory for storing instructions to be executed by one or more processors of the device;

[0051] and a processor for executing the instructions so that the electronic device executes the method for autonomously implementing certificate management and secure communication.

[0052] A computer-readable storage medium stores a computer program. When the computer program is executed by an electronic device, the electronic device executes the method for autonomously implementing certificate management and secure communication.

[0053] Beneficial effects of the present invention:

[0054] The intelligent centralized meter reading terminal and method for autonomously realizing certificate management and secure communication of the present invention solves the problem of excessive master station load caused by the distribution and management of all terminal certificates and keys of the entire system by the master station, and realizes hierarchical management of security information.

[0055] The intelligent meter reading terminal of the present invention registers itself as Sub CA, independently manages the certificates of all smart meters and realizes secure communication, so that the security management of the master station is only to the intelligent meter reading terminal, and there is no need to manage the certificates and communication keys of the smart meters; at the same time, the information security between the control areas of each intelligent meter reading terminal is completely independent, which is safer and more reliable. Other features and advantages of the present invention will be described in detail in the subsequent specific implementation method part. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The above and other objects, features and advantages of the present invention will become more apparent through a more detailed description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, wherein like reference numerals generally represent like components throughout the exemplary embodiments of the present invention.

[0057] Figure 1 A schematic diagram of certificate deployment according to an embodiment of the present invention is shown.

[0058] Figure 2 The figure shows a process of signing and certifying a smart meter registered for the first time by a smart meter meter collection terminal according to an embodiment of the present invention.

[0059] Figure 3 A communication process diagram for establishing a secure channel according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0060] The preferred embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the preferred embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited to the embodiments set forth herein.

[0061] Example 1

[0062] Figure 1 A schematic diagram of certificate deployment according to an embodiment of the present invention is shown.

[0063] The present invention provides a method for autonomously implementing certificate management and secure communication, which is used between an intelligent meter reading terminal and an intelligent meter. The method is implemented through the following six steps, and finally forms the attached Figure 1 Certificate deployment shown:

[0064] Step 1: Inside the factory, the intelligent meter reading terminal writes the Root CA certificate into the one-time programmable area:

[0065] The Root CA certificate is the CA certificate for the entire system. This CA certificate can be used indefinitely and cannot be replaced after being written. The smart meters controlled by the smart meter reading terminal are also installed with the same Root CA when they leave the factory.

[0066] Step 2: Inside the factory, the intelligent meter reading terminal applies to the Root CA to use the terminal as a Sub CA:

[0067] 2.1 The intelligent meter reading terminal generates a pair of ECC key pairs as the public and private key pairs of Sub CA. The private key d SubCA and public key Q SubCA ;

[0068] 2.2 The intelligent meter reading terminal uses the key pair generated in 2.1 to generate a certificate request CSR SubCA , apply to Root CA to use this terminal as Sub CA. The Sub CA certificate can be used indefinitely, and the holder is named as the system serial number of the intelligent meter reading terminal;

[0069] 2.3 The intelligent meter reading terminal finally obtains the Sub CA certificate from the ROOT CA, uses the PublicKey in the Root CA certificate to verify the validity of the signature of the Sub CA certificate, and imports the Sub CA certificate into the intelligent meter reading terminal.

[0070] Step 3: Inside the factory, the intelligent meter reading terminal generates a signature certificate:

[0071] 3.1 The intelligent meter reading terminal generates a pair of ECC key pairs in the factory as its own signature public and private key pairs, and the private key d us and public key Q us ;

[0072] 3.2 The intelligent meter reading terminal uses the private key d generated in 2.1 SubCA For the public key Q in 3.1 usThe scope of use and usage time of the public key are signed to generate the signature certificate CER of the intelligent meter reading terminal itself. us The certificate holder name and issuer are both the system serial number of the intelligent meter reading terminal.

[0073] Step 4, on-site, as shown in the attached Figure 2 As shown in the figure, the intelligent meter collection terminal initializes the certificate for the first registered smart meter:

[0074] 4.1 The intelligent meter reading terminal receives the registration request from the smart meter and sends the Sub CA certificate obtained in 2.3 to the smart meter. The smart meter uses the Root CA installed in the factory to verify the received Sub CA. If the verification is successful, go to 4.2, otherwise the registration fails.

[0075] 4.2 The smart meter generates a pair of ECC key pairs as its own signature public and private key pairs, the private key d vs and public key Q vs , initiate a certificate request CSR to the intelligent meter reading terminal VS , CSR VS The public key is Q vs , the holder is named as the serial number in the smart meter system;

[0076] 4.3 The intelligent meter reading terminal receives the certificate request CSR VS After parsing the validity of the certificate request, the corresponding certificate CER is generated according to the request vs The certificate is signed with the Sub CA private key, and the issuer is the system serial number of the intelligent meter reading terminal;

[0077] 4.4 The intelligent meter reading terminal will generate the certificate CER in 4.3 vs Sent to the smart meter, the smart meter uses the public key in the Sub CA certificate to authenticate the CER vs Verify and save CER if verification is successful vs And switch to 4.5, otherwise the registration will fail;

[0078] 4.5 The intelligent meter reading terminal will generate the CER in 3.2 us Sent to the smart meter; the smart meter uses the public key in the Sub CA certificate saved in 4.1 to authenticate the CER us Verify and the registration is completed if the verification is successful;

[0079] 4.6 After receiving the successful registration message, the intelligent meter reading terminal will send the certificate CER generated in 4.3 vs The registration process is completed after binding and saving with other registration information of the smart meter.

[0080] Step 5: On site, as attached Figure 3As shown in the figure, the intelligent meter reading terminal and the smart meter perform two-way authentication and negotiate the session key for encrypted communication:

[0081] 5.1 The intelligent meter reading terminal generates a temporary key pair as the key negotiation key pair, the private key d ukA and public key Q ukA , use the private key d generated in 3.1 us The public key Q in the temporary negotiated key pair ukA And other information to establish the connection to sign to get SIG ukA , Q ukA Together with other information and SIG to establish a connection ukA Sent to the smart meter together;

[0082] 5.2 After receiving the connection request, the smart meter uses the certificate CER us Q us About SIG ukA Perform signature verification and verify Q ukA Verify the validity of the public key. If the verification is successful, proceed to step 5.3. Otherwise, the connection establishment fails.

[0083] 5.3 The smart meter generates a temporary key pair as the key negotiation key pair, the private key d vkA and public key Q vkA , d vkA and Q received in 5.2 ukA Use ECDH to calculate the negotiated key Z, and then expand the key according to the key expansion information in the established connection to obtain the session key, destroy Z and d vkA Q vkA ;

[0084] 5.4 Use the private key d generated in 4.2 vs The public key Q in the temporary negotiated key pair vkA And other information of the connection response is signed to obtain SIG vkA , Q vkA Together with other information and SIG in the connection establishment response vkA Send them to the intelligent meter reading terminal together;

[0085] 5.5 After receiving the connection establishment response, the intelligent meter reading terminal uses the certificate CER vs Q vs About SIG vkA Perform signature verification and verify Q vkA Verify the validity of the public key. If the verification is successful, proceed to step 5.6. Otherwise, the connection establishment fails.

[0086] 5.6 Intelligent meter reading terminal uses the Q received in 5.5 vkA and d generated in 5.1ukA , use ECDH to calculate the negotiated key Z, expand the key according to the key expansion information in the established connection to obtain the session key, and destroy Z and d ukA Q ukA ;

[0087] 5.7 The intelligent meter reading terminal and the smart meter use session keys for secure communication.

[0088] Step 6: On-site, the intelligent meter reading terminal regularly checks the validity of its own and its subordinate smart meter certificates, and updates them in a timely manner.

[0089] The intelligent meter reading terminal regularly checks its own signature certificate CER us Validity period. If the validity period is less than 30 days, regenerate a CER according to step 3 us and issue CER to all registered smart meters us Certificate renewal;

[0090] The intelligent meter reading terminal regularly checks the CER of all managed smart meters vs Validity period, if the CER of a smart meter vs If the validity period is less than 30 days, the intelligent meter reading terminal will send a request to the smart meter to regenerate the CSR. The subsequent steps are the same as 4.2, 4.3, and 4.4.

[0091] Example 2

[0092] An intelligent meter reading terminal that autonomously implements certificate management and secure communication, the intelligent meter reading terminal comprising:

[0093] Root CA certificate management module: responsible for the management and control of Root CA certificates;

[0094] Sub CA certificate management module: responsible for the application and management of Sub CA certificates;

[0095] Signature certificate management module: responsible for the generation and control of signature certificates, and regular validity management;

[0096] Smart meter certificate management registration module: responsible for initializing the certificates of smart meters registered for the first time and performing validity management at regular intervals;

[0097] Secure communication module: responsible for two-way identity authentication of smart meters and negotiation of session keys for encrypted communication.

[0098] Example 3

[0099] An electronic device, comprising:

[0100] a memory for storing instructions to be executed by one or more processors of the device;

[0101] and a processor for executing the instructions so that the electronic device executes the method for autonomously implementing certificate management and secure communication.

[0102] Example 4

[0103] A computer-readable storage medium stores a computer program. When the computer program is executed by an electronic device, the electronic device executes the method for autonomously implementing certificate management and secure communication.

[0104] The embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments.

Claims

1. A method for autonomously implementing certificate management and secure communication, characterized in that: include: Step 1: The intelligent meter reading terminal writes the Root CA certificate into the one-time programmable area; Step 2: The intelligent meter reading terminal applies to the Root CA to use the terminal as a Sub CA; Step 3: The intelligent meter reading terminal generates a signature certificate by itself; Step 4: The smart meter collection terminal independently initializes the certificate of the smart meter registered for the first time; Step 5: The intelligent meter reading terminal and the smart meter perform two-way authentication and negotiate the session key for encrypted communication; Step 6: The intelligent meter reading terminal autonomously and regularly checks the validity of its own and its subordinate smart meter certificates, and updates them in a timely manner.

2. The method for autonomously implementing certificate management and secure communication according to claim 1, characterized in that In step 1, the intelligent meter reading terminal writes the Root CA certificate in the one-time programmable area including: The CA certificate of the entire system is used as the Root CA certificate and written into the one-time programmable area of ​​the intelligent meter reading terminal. After writing, it can only be read but not erased or written again; The smart meters controlled by the smart meter reading terminal are also installed with the same Root CA when they leave the factory.

3. The method for autonomously implementing certificate management and secure communication according to claim 1, characterized in that In step 2, the intelligent meter reading terminal applies to the Root CA to use the terminal as a Sub CA, including: Step 201: The intelligent meter reading terminal generates an ECC key pair as the public and private key pair of Sub CA. SubCA and public key Q SubCA ; Step 202: The intelligent meter reading terminal uses the key pair to generate a certificate request and applies to the Root CA to make the terminal a SubCA. The Sub CA certificate is used indefinitely, and the holder is named the system serial number of the intelligent meter reading terminal. Step 203: the intelligent meter reading terminal obtains the Sub CA certificate from the Root CA, uses the public key in the Root CA certificate to verify the validity of the signature of the Sub CA certificate, and then imports the Sub CA certificate into the intelligent meter reading terminal.

4. The method for autonomously implementing certificate management and secure communication according to claim 3, characterized in that In step 3, the intelligent meter reading terminal generates a signature certificate including: Step 301: The intelligent meter reading terminal generates a pair of ECC key pairs as its own signature public and private key pairs, and the private key d us and public key Q us ; Step 302: The intelligent collection terminal uses the private key d of Sub CA SubCA Sign your own public key Q us The scope and time of use of the public key are signed to generate the signature certificate CER of the intelligent meter reading terminal itself. us The certificate holder name and issuer are both the system serial number of the intelligent meter reading terminal.

5. The method for autonomously implementing certificate management and secure communication according to claim 4, characterized in that In step 4, the smart meter collection terminal autonomously initializes the certificate of the first registered smart meter, including: Step 401: the intelligent meter collection terminal receives the registration request of the smart meter and sends the Sub CA certificate obtained in step 203 to the smart meter; the smart meter uses the Root CA installed in the factory to verify the received Sub CA certificate. If the verification is successful, the Sub CA is saved and the process goes to step 402; otherwise, the registration fails; Step 402: The smart meter generates an ECC key pair and initiates a certificate request to the smart meter collection terminal. The private key d vs and public key Q vs , initiate a certificate request CSR to the intelligent meter reading terminal VS , CSR VS The public key is Q vs , the holder is named as the serial number in the smart meter system; Step 403: The intelligent meter reading terminal receives the certificate request CSR VS After that, parse the certificate request CSR VS After the validity is confirmed, the corresponding certificate CER is generated according to the request vs The certificate is signed with the Sub CA private key, and the issuer is the system serial number of the intelligent meter reading terminal; Step 404: The intelligent meter reading terminal sends the certificate CER generated in step 403 vs Sent to the smart meter, the smart meter uses the public key in the Sub CA to create the certificate CER vs Verify and save CER if verification succeeds vs Go to step 405, otherwise the registration fails; Step 405: The intelligent meter reading terminal sends the certificate CER generated in step 302 us Sent to the smart meter; the smart meter uses the public key in the Sub CA saved in step 401 to CER us Verify and the registration is completed if the verification is successful; Step 406: After receiving the registration success message, the intelligent meter reading terminal sends the certificate CER generated in step 403 to vs Bind and save with other registration information of smart meter, and the registration process ends; Step 407: After registration is completed, encrypted communication is used between the smart meter reading terminal and the smart meter.

6. The method for autonomously implementing certificate management and secure communication according to claim 5, characterized in that In step 5, the intelligent meter reading terminal and the smart meter perform two-way authentication and negotiate a session key for encrypted communication, including: Step 501: The intelligent collection terminal generates a pair of temporary key pairs as key negotiation key pairs, and the private key d ukA and public key Q ukA , using the private key d generated in step 301 us The public key Q in the temporary negotiated key pair ukA And other information to establish the connection to sign to get the signature SIG ukA , the public key Q ukA Together with other information and signature SIG to establish the connection ukA Sent to the smart meter together; Step 502: After receiving the connection establishment request, the smart meter uses the certificate CER us The public key Q in us Signature SIG ukA Perform signature verification and verify the public key Q ukA Perform public key validity verification. If the verification is successful, go to step 503. Otherwise, the connection establishment fails. Step 503: The smart meter generates a pair of temporary key pairs as key negotiation key pairs, and the private key d vkA and public key Q vkA , the private key d vkA and the public key Q received in step 502 ukA Use the key negotiation method ECDH to calculate the negotiation key Z, and expand the key according to the key expansion information in the established connection to obtain the session key, and destroy the negotiation key Z and the private key d vkA , public key Q vkA ; Step 504: Use the private key d generated in step 402 vs The public key Q in the temporary negotiated key pair vkA And other information of the connection establishment response is signed to obtain the signature SIG vkA , the public key Q vkA Together with other information and signature SIG of the connection establishment response vkA Send them to the intelligent meter reading terminal together; Step 505: After receiving the connection establishment response, the intelligent meter reading terminal uses the certificate CER vs Q vs Signature SIG vkA Perform signature verification and verify the public key Q vkA Perform public key validity verification. If the verification is successful, go to step 506. Otherwise, the connection establishment fails. Step 506: The intelligent collection terminal uses the public key Q received in step 505 vkA and the private key d generated in step 501 ukA , use the key negotiation method ECDH to calculate the negotiation key Z, expand the key according to the key extension information in the established connection to obtain the session key, and destroy the negotiation key Z and private key d ukA , public key Q ukA ; Step 507: The intelligent meter reading terminal and the intelligent meter use the session key to communicate securely.

7. The method for autonomously implementing certificate management and secure communication according to claim 6, characterized in that In step 6, the intelligent meter collection terminal autonomously and regularly checks the validity of its own and subordinate smart meter certificates, and updates them in a timely manner, including: The intelligent meter reading terminal regularly checks its own signature certificate CER us Validity period. If it is insufficient, follow step 3 to regenerate a signature certificate CER us And update the certificates for all registered and managed smart meters; The intelligent meter reading terminal regularly checks the signature certificates CER of all managed smart meters vs Validity period, if the CER of a smart meter vs If the validity period is insufficient, the intelligent meter reading terminal requires the smart meter to reapply for the certificate.

8. An intelligent meter reading terminal that can independently realize certificate management and secure communication, characterized in that: The intelligent meter reading terminal includes: Root CA certificate management module: responsible for the management and control of Root CA certificates; Sub CA certificate management module: responsible for the application and management of Sub CA certificates; Signature certificate management module: responsible for the generation and control of signature certificates, and regular validity management; Smart meter certificate management registration module: responsible for initializing the certificates of smart meters registered for the first time and performing validity management at regular intervals; Secure communication module: responsible for two-way identity authentication of smart meters and negotiation of session keys for encrypted communication.

9. An electronic device, characterized in that: include: a memory for storing instructions to be executed by one or more processors of the device; And a processor, used to execute the instructions so that the electronic device executes the method for autonomously implementing certificate management and secure communication as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by an electronic device, the electronic device executes the method for autonomously implementing certificate management and secure communication as described in any one of claims 1 to 7.

Images