Multi-energy intelligent measurement terminal security authentication method and system

Abstract

The invention provides a security authentication method and system for a multi-energy intelligent measurement terminal, and belongs to the technical field of power grids. Wherein the terminal is additionally provided with a unified data transmission system; the authentication method comprises the following steps of: encrypting bidirectional communication between the intelligent measurement master station and the first intelligent measurement terminal by adopting an asymmetric encryption algorithm; the two-way communication between the intelligent measurement master station and the second intelligent measurement terminal is encrypted by adopting a dynamic encryption algorithm; and the intelligent measurement master station issues a power distribution instruction by comparing the authentication information of each intelligent measurement terminal. According to the invention, by integrating a unified data transmission system, efficient multi-access requests are realized, and communication interfaces and data transmission rates of different devices are fully considered; and a differential communication encryption strategy is set, and an asymmetric encryption form and a dynamic encryption form are respectively adopted, so that the communication security of a high-value side and the system efficiency of a high-frequency access side are ensured to meet requirements, and the method is more suitable for a multi-requirement power distribution scene.

Description

Technical Field

[0001] The present invention relates to the field of power grid technology, and in particular to a multi-energy intelligent measurement terminal security authentication method and system. Background Art

[0002] In recent years, new energy power generation technology has become increasingly mature, forming complementary advantages with the existing power system. Among them, one of the main disadvantages of new energy power generation is that its power generation is volatile, especially the volatility of solar energy and wind energy. Therefore, the problem of insufficient stability of new energy power supply can be compensated by traditional power grids. At the same time, relying on the environmental protection attributes of new energy power generation, it can reduce overall carbon emissions and gradually reduce the harm of traditional fossil energy to the environment.

[0003] On this basis, in order to better realize the grid-connected power generation of new energy, we need to rely on one of the emerging technologies: smart grid.

[0004] Smart grid is the intelligent upgrade of traditional power grid. At present, the development of smart grid is still in its infancy. Due to the enhanced networking properties, the power distribution terminal interfaces are numerous, the equipment types are many, the network connections are complex, the protocols are large, and the equipment resources are limited. On the one hand, it causes problems such as a wide range of network attacks and difficulties in analyzing equipment behavior, making the power grid extremely vulnerable to attacks during operation; on the other hand, the access to new energy is complex, the equipment interfaces and data formats are different, and the stability and connection efficiency are not high.

[0005] On this basis, it is also necessary to explore a security authentication system and method for the master station and power terminal that can ensure the stability and security of data communication, while improving system efficiency through differentiated settings. Summary of the invention

[0006] In order to overcome the shortcomings of the prior art, the present invention provides a multi-energy intelligent measurement terminal security authentication method and system, the system includes an intelligent measurement master station, an intelligent measurement terminal, an energy storage unit, a power generation unit and a power supply unit; The intelligent measurement terminal is provided with a first intelligent measurement terminal and a second intelligent measurement terminal; the intelligent measurement master station is connected to the first and second intelligent measurement terminals respectively; The first intelligent measurement terminal is connected to the energy storage unit and the power generation unit respectively; the second intelligent measurement terminal is connected to the power supply unit; The first intelligent measurement terminal is integrated with a unified data transmission system; The second intelligent measurement terminal is provided with a time-of-use electricity price setting module and the dedicated transformer fee control module; the time-of-use electricity price setting module is provided with a human-computer interaction interface for displaying the time-of-use electricity price and receiving the user's electricity consumption plan parameter setting information; the dedicated transformer fee control module is provided with an intelligent meter for billing and power restriction processing; The intelligent measurement master station and the intelligent measurement terminal are integrated with authentication modules for encrypting two-way communication.

[0007] Preferably, the energy storage unit is an energy storage power station; the power generation unit is a combination of one or more of a solar power station, a biomass power station, a wind power station, and a geothermal power station; and the power supply unit is a charging pile.

[0008] On the other hand, the present invention also provides an encrypted communication authentication method based on the multi-energy intelligent measurement terminal security authentication system, and the communication authentication steps include: The first intelligent measurement terminal is connected to the energy storage unit and / or the power generation unit through a unified data transmission system; The bidirectional communication between the intelligent measurement master station and the first intelligent measurement terminal is encrypted by an asymmetric encryption algorithm and decrypted by a corresponding authentication module; The two-way communication between the intelligent measurement master station and the second intelligent measurement terminal is encrypted by a dynamic encryption algorithm and decrypted by a corresponding authentication module; The intelligent measurement master station sends power distribution instructions by comparing the authentication information of each intelligent measurement terminal.

[0009] Preferably, the unified data transmission system is connected to the energy storage unit and / or the power generation unit through interfaces, and packages and transmits the request information and device information to the authentication module of the first intelligent measurement terminal.

[0010] Preferably, the intelligent measurement master station exchanges public keys with the first intelligent measurement terminal before communicating.

[0011] Preferably, the dynamic encryption algorithm adopts a double-layer encryption mechanism.

[0012] Preferably, the dynamic encryption algorithm is a timestamp-based XOR algorithm; The timestamp is added with the estimated or predetermined time period of the intelligent measurement master station and the second intelligent measurement terminal before the encryption operation; The authentication module adds the time period to the timestamp before performing the decryption operation, and then performs XOR decryption.

[0013] The present invention adopts the above-mentioned multi-energy intelligent measurement terminal security authentication method and system, which has the following beneficial effects compared with the prior art: The present invention integrates a unified data transmission system in the first intelligent measurement terminal to achieve efficient multi-access requests, fully considers the communication interfaces and data transmission rates of different devices, and ensures that subsequent modules can be stably connected with various new energy devices; and then sets differentiated communication encryption strategies, and adopts asymmetric encryption in the communication between the intelligent measurement master station and the first intelligent measurement terminal, thereby protecting the security of authentication information; combined with the use of dynamic encryption in the communication between the intelligent measurement master station and the second intelligent measurement terminal, it is ensured that the system efficiency during high-frequency access meets the requirements, and is more suitable for multi-demand power distribution scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0015] Figure 1 It is a system diagram in a specific embodiment of the present invention. Implementation

[0016] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] The existing intelligent distribution network system is mainly composed of three parts: intelligent measurement master station, communication system, and automated monitoring terminal (intelligent measurement terminal) equipment, thus forming a complete information transmission and processing system to achieve remote management of distribution network operation.

[0018] like Figure 1 As shown, the present invention provides a multi-energy intelligent measurement terminal security authentication system, which includes an intelligent measurement master station, an intelligent measurement terminal, an energy storage unit, a power generation unit and a power supply unit.

[0019] The intelligent measurement terminal includes a first intelligent measurement terminal and a second intelligent measurement terminal. The intelligent measurement terminal is a distributed design, and multiple terminals can be connected to a single master station, which are respectively close to the power generation side and the power supply side. In this embodiment, for the convenience of explanation, the design system includes a first intelligent measurement terminal and n second intelligent measurement terminals, all of which are connected to the intelligent measurement master station.

[0020] The first intelligent measuring terminal serves as a power access terminal, and is connected to the energy storage unit and the power generation unit respectively; preferably, the energy storage unit is an energy storage power station; the power generation unit is one or more combinations of a solar power station, a biomass power station, a wind power station, and a geothermal power station.

[0021] The second intelligent measuring terminal is connected to the power supply unit; preferably, specifically to the power supply unit, this embodiment takes a common charging pile as an example, wherein m charging piles are distributed in a smart parking lot and connected to the second intelligent measuring terminal, which is responsible for providing charging power to the electric vehicle.

[0022] The first intelligent measurement terminal is integrated with a unified data transmission system (UTS), which is a commercially available network application integration solution. Its main function is file transfer, especially cross-platform database transmission and publishing. It can well meet the access conditions of different new energy power generation equipment or systems and cope with different data formats and transmission rates.

[0023] The second intelligent measuring terminal is provided with a time-of-use electricity price setting module and a special transformer fee control module; the time-of-use electricity price setting module is provided with a human-computer interaction interface, including a display and input devices (one or more combinations of keyboard, mouse, button, touch screen, etc.), which are used to display the time-of-use electricity price and receive the user's electricity consumption plan parameter setting information, so that the system allows users to set flexible electricity consumption strategies and parameters based on time-of-use electricity prices according to actual needs, so as to adapt to the electricity consumption demand in different time periods and realize the efficient use and reasonable allocation of electric energy; the special transformer fee control module is provided with a smart meter, which can remotely disconnect the power switch through the smart meter to perform power restriction processing after the preset conditions (arrears or arrears reaching a preset amount) are triggered.

[0024] The intelligent measurement master station and the intelligent measurement terminal are integrated with an authentication module for encrypting two-way communication; wherein the authentication module is also provided with an encryption module and a decryption module.

[0025] On the other hand, the present invention also provides a communication method according to the above system, wherein the communication authentication step comprises: Since the side where the power generation unit and the energy storage unit are located is a high-value target, it is necessary to focus on encrypting the communication, so the classic asymmetric encryption communication method is adopted in this embodiment. Therefore, the first intelligent measurement terminal and the intelligent measurement master station each generate a public key and a private key, and store the private key to exchange the public key, so as to meet the prerequisites for encrypted communication. Furthermore, according to the classic communication scheme, a third-party authoritative certificate management agency can be added to replace the public key with a certificate containing the public key, thereby avoiding some attack methods.

[0026] The first intelligent measurement terminal is connected to photovoltaic power stations, wind power stations and other new energy power generation units and energy storage power stations through a unified data transmission system, and the request information and equipment information are packaged and transmitted to the authentication module of the first intelligent measurement terminal for encryption processing.

[0027] The first intelligent measurement terminal encrypts the packaged information through the public key of the master station and adds a random value to the digital signature. The random value and a timestamp parameter used to indicate the request time are added during the signature to ensure that the signature is unpredictable. The random value is converted through a hash algorithm and encrypted in the summary and sent to the recipient. After the recipient verifies the signature, the random value is recorded and a validity period t (s) is set. The record is deleted after being stored for more than t seconds. If the ciphertext with the same random value and timestamp appears within t time, it can be judged as a retransmission attack, which can avoid retransmission attacks. The intelligent measurement master station decrypts the plaintext through the authentication module.

[0028] Since the side where the power supply unit (charging pile 1-charging pile m) is located is a high-frequency access (charging plug-in) target, the system efficiency must be considered while encrypting the communication. Therefore, in this embodiment, the two-way communication between the intelligent measurement master station and the second intelligent measurement terminal is encrypted using a dynamic encryption algorithm and decrypted by the corresponding authentication module; preferably, the dynamic encryption algorithm adopts a double-layer encryption mechanism, wherein the dynamic encryption algorithm of this embodiment is an XOR algorithm based on a timestamp; In order to further increase the difficulty of cracking, the timestamp string can be encrypted twice before the XOR operation. Specifically, a pre-agreed time period is added, such as a fixed increase of 0.5h, to obtain a new timestamp string, and the new string is used for XOR operation to obtain the ciphertext, and the ciphertext is packaged and sent with the original timestamp. After receiving the ciphertext, the receiver uses the timestamp and the pre-agreed time period to decrypt the timestamp used for encryption, and then obtains the real authentication information through XOR decryption. This design can maintain high communication efficiency while encrypting, saving steps and computing resources.

[0029] The intelligent measurement master station sends power distribution instructions by comparing the authentication information of each intelligent measurement terminal.

[0030] The principles and implementation methods of the present invention are described in this article using specific examples. The description of the above embodiments is only used to help understand the method and core idea of ​​the present invention. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A multi-energy intelligent measurement terminal security authentication system, including an intelligent measurement master station, an intelligent measurement terminal, an energy storage unit, a power generation unit and a power supply unit; It is characterized in that The intelligent measurement terminal is provided with a first intelligent measurement terminal and a second intelligent measurement terminal; the intelligent measurement master station is connected to the first and second intelligent measurement terminals respectively; The first intelligent measurement terminal is connected to the energy storage unit and the power generation unit respectively; the second intelligent measurement terminal is connected to the power supply unit; The first intelligent measurement terminal is integrated with a unified data transmission system; The second intelligent measurement terminal is provided with a time-of-use electricity price setting module and the dedicated transformer fee control module; the time-of-use electricity price setting module is provided with a human-computer interaction interface for displaying the time-of-use electricity price and receiving the user's electricity consumption plan parameter setting information; the dedicated transformer fee control module is provided with an intelligent meter for billing and power restriction processing; The intelligent measurement master station and the intelligent measurement terminal are integrated with authentication modules for encrypting two-way communication.

2. The multi-energy intelligent measurement terminal security authentication system according to claim 1 is characterized in that: The energy storage unit is an energy storage power station; the power generation unit is a combination of one or more of a solar power station, a biomass power station, a wind power station, and a geothermal power station; and the power supply unit is a charging pile.

3. The communication method of the multi-energy intelligent measurement terminal security authentication system according to claim 1 or 2, characterized in that: The communication authentication steps include: The first intelligent measurement terminal is connected to the energy storage unit and / or the power generation unit through a unified data transmission system; The bidirectional communication between the intelligent measurement master station and the first intelligent measurement terminal is encrypted by an asymmetric encryption algorithm and decrypted by a corresponding authentication module; The two-way communication between the intelligent measurement master station and the second intelligent measurement terminal is encrypted by a dynamic encryption algorithm and decrypted by a corresponding authentication module; The intelligent measurement master station sends power distribution instructions by comparing the authentication information of each intelligent measurement terminal.

4. The communication method of the multi-energy intelligent measurement terminal security authentication system according to claim 3, characterized in that: The unified data transmission system is connected to the energy storage unit and / or the power generation unit through interfaces, and packages and transmits the request information and device information to the authentication module of the first intelligent measurement terminal.

5. The communication method of the multi-energy intelligent measurement terminal security authentication system according to claim 3, characterized in that: The intelligent measurement master station exchanges public keys with the first intelligent measurement terminal before communicating.

6. The communication method of the multi-energy intelligent measurement terminal security authentication system according to claim 3, characterized in that: The dynamic encryption algorithm adopts a double-layer encryption mechanism.

7. The communication method of the multi-energy intelligent measurement terminal security authentication system according to claim 6, characterized in that: The dynamic encryption algorithm is an XOR algorithm based on timestamp; The timestamp is added with the estimated or predetermined time period of the intelligent measurement master station and the second intelligent measurement terminal before the encryption operation; The authentication module adds the time period to the timestamp before performing the decryption operation, and then performs XOR decryption.

Images