Communication method for electric power acquisition terminal and quantum encryption module

Abstract

The invention relates to a communication method for an electric power acquisition terminal and a quantum encryption module, which solves the problems caused by incompatibility of quantum communication technologies in the prior art, and adopts the technical scheme that a quantum key is generated through the quantum encryption module; encrypting a first communication message of the master station based on the quantum key to form a second communication message; sending the second communication message to the power acquisition terminal based on a communication protocol; the second communication message is decrypted through a quantum encryption module communicating with the electric power acquisition terminal, and the first communication message is formed; the power acquisition terminal checks and / or processes the first communication message to form a third communication message; encrypting the third communication message through a quantum encryption module communicating with the power acquisition terminal to form a fourth communication message; and sending the fourth communication message to a master station based on a communication protocol. The method has the advantages that a communication protocol compatible with hardware of the power acquisition terminal is formed, it is ensured that the communication protocol is consistent with a communication hardware interface protocol of the power acquisition terminal, the method is compatible with an existing power acquisition terminal, and it is ensured that encryption and decryption operation can be conducted by means of original logic on the power acquisition terminal through little modification or without modification.

Description

Technical Field

[0001] The present invention relates to the field of communications, and in particular to a communication method between a power collection terminal and a quantum encryption module. Background Art

[0002] Quantum communication is an important branch of quantum information science. It refers to a form of communication that uses the principles of quantum mechanics to manipulate quantum states, which can effectively solve information security problems. Quantum communication uses the principles of quantum mechanics to manipulate quantum states and exchange information between two locations. Quantum communication has four parts: quantum entanglement, quantum no-cloning theorem, secret key distribution, and teleportation, making quantum communication a strictly secure communication method that can effectively solve information security problems. Unlike traditional cryptography, quantum key distribution is the product of the combination of cryptography and quantum mechanics. It uses quantum states as information carriers and uses some basic physical principles of quantum mechanics to transmit and protect information.

[0003] There are two existing quantum communication schemes:

[0004] The first solution is a direct communication solution, namely teleportation, which uses quantum superposition and quantum entanglement effects to transmit information, and directly transmits information using quantum communication. This solution is also called quantum teleportation, which is to instantly transfer the unknown quantum state of a particle in place A to another particle in place B. This solution is still in the theoretical stage.

[0005] The second scheme is the indirect communication scheme, also known as the quantum key distribution scheme, which has been widely used and is being vigorously developed. Indirect communication has two channels: one is the classical channel, which uses ordinary wired or wireless methods to send ciphertext; the other is the quantum channel, which is specifically used to generate keys. Every time a message is sent, both parties in communication must regenerate a new key, that is, the encryption key is different each time, realizing the "one-time one-key" message sending, and it can also detect whether there is an eavesdropper during the key sending process, so it can achieve absolutely safe and reliable communication in principle. At present, the so-called quantum communication is generally a scheme for distributing keys through quantum channels. All walks of life are optimistic about the development of quantum communication. At this stage, quantum encryption technology is achieved by the complementary traditional communication technology and quantum communication technology.

[0006] With the rapid development of intelligent power systems and Internet of Things technology, quantum encryption technology is also widely used in power. Power collection terminals play an increasingly important role in power systems. In existing power systems, the communication between power collection terminals and master stations mostly uses traditional encryption methods. However, with the continuous upgrading of network attack methods, encryption methods may no longer be safe when facing the threat of quantum computing. Traditional communication methods face security risks during data transmission, such as data leakage and tampering. Therefore, the use of quantum encryption technology has become an important means to improve the security of power communications.

[0007] At present, the encryption method of the power collection terminal adopts the traditional embedded security access module chip (chip using the embedded secure access module Embedded Secure Access Module, i.e. ESAM chip) encryption and decryption method, sends the plain text to the encryption machine, generates ciphertext, transmits the ciphertext to the terminal, and the terminal transfers the ciphertext to the ESAM chip, which decrypts it and transmits the data to the host computer after decryption.

[0008] Since quantum communication technology is used for the first time in electricity collection terminals, the interfaces of quantum modules of quantum communication development companies are not unified and there are incompatibility issues, making it difficult to apply them universally. It is necessary to change the hardware of the electricity collection terminal to adapt to the connected quantum module. However, changing the hardware of the electricity collection terminal is not only time-consuming and labor-intensive, but also increases the cost of use. Summary of the invention

[0009] The purpose of the present invention is to solve the above-mentioned problems existing in the prior art and provide a communication method for a power collection terminal and a quantum encryption module, forming a communication protocol compatible with the power collection terminal hardware, ensuring that the communication protocol is consistent with the communication hardware interface protocol of the power collection terminal, and compatible with the existing power collection terminal, so as to ensure that the original logic on the power collection terminal can be used for encryption and decryption operations with little or no modification, and on the basis of ensuring the communication speed and data stability, it can also improve the security, reliability and efficiency of communication.

[0010] The above technical objectives of the present invention are mainly solved by the following technical solutions:

[0011] A communication method for a power collection terminal and a quantum encryption module, characterized by comprising:

[0012] Generate quantum keys through quantum encryption modules;

[0013] Encrypting the first communication message of the master station based on the quantum key to form a second communication message;

[0014] Sending the second communication message to the power collection terminal based on the communication protocol;

[0015] Decrypting the second communication message through a quantum encryption module that communicates with the power collection terminal to form the first communication message;

[0016] The power collection terminal checks and / or processes the first communication message to form a third communication message;

[0017] The third communication message is encrypted by a quantum encryption module that communicates with the power collection terminal to form a fourth communication message;

[0018] The fourth communication message is sent to the main station based on the communication protocol.

[0019] The difference between this technical solution and the prior art is that a new communication protocol is formed to solve the problem of incompatibility of existing power collection terminals. This technical solution forms a communication protocol that is compatible with the existing power collection terminal hardware, ensures that the communication protocol is consistent with the communication hardware interface protocol of the power collection terminal, and is compatible with the existing power collection terminal, so as to ensure that the original logic on the power collection terminal can be used for encryption and decryption operations with little or no modification, and on the basis of ensuring the communication speed and data stability, it can also improve the security, reliability and efficiency of communication.

[0020] As a further improvement and supplement to the above technical solution, the present invention adopts the following technical measures:

[0021] The communication protocol includes:

[0022] Setting the initial state: initializing the SPI interface of the power collection terminal, assigning an initialization value, and the master station is ready to send a data packet of a communication message;

[0023] Confirming the initial state: the power collection terminal receives and confirms the initialization value, and if the initialization value is consistent with the expectation, the power collection terminal starts to wait for receiving the data packet of the communication message;

[0024] Start data packet transmission: the master station starts to transmit data packets of communication messages to the power collection terminal;

[0025] Waiting for and confirming the frame header byte: the power collection terminal starts to receive the data packet and starts to check the frame header byte of the data packet;

[0026] Reading status word: when the frame header byte is consistent with the expectation, the power collection terminal continues to complete the data packet reception;

[0027] Confirm the status word: when the status word is consistent with the expectation, the power collection terminal feeds back the status word confirmation, and the master station confirms the status word;

[0028] Read and process data. Based on the status word confirmation, the power collection terminal starts to read and process data;

[0029] Update the initialization value of the SPI interface;

[0030] Sending an end character: The power collection terminal sends an end character to the master station to indicate that the data packet exchange is completed.

[0031] Preferably, when confirming the initial state, the initialization value of the SPI interface is set to SSN=0; when updating the initialization value of the SPI interface, the initialization value of the SPI interface is updated to SSN=1.

[0032] Preferably, the communication protocol includes: a sending protocol and a returning protocol.

[0033] Preferably, the sending protocol includes:

[0034] Protocol header HEAD: used to identify the start and type of the communication protocol;

[0035] Control word CLA: used to specify the type of subsequent data or operation instructions;

[0036] The length of the subsequent data field INS;

[0037] Data bit P: There are several data bits P, each used to indicate a specific parameter or option;

[0038] Repeated data length LEN: used to indicate the length of repeated data;

[0039] Data field: It is a number of fields used to represent the actual information to be transmitted.

[0040] Cyclic redundancy check code CRC: used to detect errors in data transmission;

[0041] Protocol tail TAIL: used to mark the end of the communication protocol.

[0042] Preferably, the return protocol includes:

[0043] Protocol header HEAD: used to identify the start and type of the communication protocol;

[0044] Status word field SW: it is a number and is used to indicate the result or status of the operation;

[0045] Repeated data length LEN: used to indicate the length of repeated data;

[0046] Data field: It is a number of fields used to represent the actual information to be transmitted.

[0047] Cyclic redundancy check code CRC: used to detect errors in data transmission;

[0048] Protocol tail TAIL: used to mark the end of the communication protocol.

[0049] Preferably, before generating the quantum key,

[0050] The quantum encryption module of the power collection terminal and the master station perform identity authentication to ensure the legitimacy of the identities of both parties in communication;

[0051] Based on the legitimate identities of both parties, the two parties negotiate a session key for communication through a quantum key negotiation protocol;

[0052] Based on the session key, the quantum key is generated by a quantum encryption module.

[0053] Preferably, the communication interfaces of the power collection terminal and the quantum encryption module both adopt SPI interfaces, so that the power collection terminal and the quantum encryption module communicate through a SPI line.

[0054] Preferably, the SPI line is an SPI four-wire bus, which is used for a compatibility output / input signal line MOSI line, and the MOSI line is a dual-pin MOSI line.

[0055] The chip of the quantum encryption module is an 8-pin packaged ESAM chip.

[0056] The beneficial effects of the present invention are as follows: the technical solution forms a communication protocol that is compatible with the existing power collection terminal hardware, ensures that the communication protocol is consistent with the communication hardware interface protocol of the power collection terminal, and is compatible with the existing power collection terminal, so as to ensure that the original logic on the power collection terminal can be used for encryption and decryption operations with little or no modification, and on the basis of ensuring the communication speed and data stability, it can also improve the security, reliability and efficiency of communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 It is a schematic diagram of a process of the present invention. DETAILED DESCRIPTION

[0058] The technical solution of the present invention is further specifically described below through embodiments and in conjunction with the accompanying drawings.

[0059] Embodiment: A communication method for a power collection terminal and a quantum encryption module, the steps comprising:

[0060] Generate quantum keys through quantum encryption modules;

[0061] Encrypting the first communication message of the master station based on the quantum key to form a second communication message;

[0062] Sending the second communication message to the power collection terminal based on the communication protocol;

[0063] Decrypting the second communication message through a quantum encryption module that communicates with the power collection terminal to form the first communication message;

[0064] The power collection terminal checks and / or processes the first communication message to form a third communication message;

[0065] The third communication message is encrypted by a quantum encryption module that communicates with the power collection terminal to form a fourth communication message;

[0066] The fourth communication message is sent to the main station based on the communication protocol.

[0067] In this technical solution, a communication protocol is formed to ensure that the communication protocol is consistent with the communication hardware interface protocol of the power collection terminal, so that the existing power collection terminal hardware is compatible with the quantum encryption module, so as to ensure that the original logic on the power collection terminal can be used for encryption and decryption operations with little or no modification, thereby ensuring the communication speed and data stability, and thereby improving the security, reliability and efficiency of communication.

[0068] In this technical solution, the technical means for the quantum encryption module to generate quantum keys, encrypt communication messages, and decrypt communication messages are existing technologies. Therefore, this article will not further explain how the quantum encryption module performs encryption and decryption.

[0069] In this technical solution, if Figure 1 As shown, the communication protocol includes:

[0070] Setting the initial state: initializing the SPI interface of the power collection terminal, assigning an initialization value, and the master station is ready to send a data packet of a communication message;

[0071] Confirming the initial state: the power collection terminal receives and confirms the initialization value, and if the initialization value is consistent with the expectation, the power collection terminal starts to wait for receiving the data packet of the communication message;

[0072] Start data packet transmission: the master station starts to transmit data packets of communication messages to the power collection terminal;

[0073] Waiting for and confirming the frame header byte: the power collection terminal starts to receive the data packet and starts to check the frame header byte of the data packet;

[0074] Reading status word: when the frame header byte is consistent with the expectation, the power collection terminal continues to complete the data packet reception;

[0075] Confirm the status word: when the status word is consistent with the expectation, the power collection terminal feeds back the status word confirmation, and the master station confirms the status word;

[0076] Read and process data. Based on the status word confirmation, the power collection terminal starts to read and process data;

[0077] Update the initialization value of the SPI interface;

[0078] Sending an end character: The power collection terminal sends an end character to the master station to indicate that the data packet exchange is completed.

[0079] In the technical solution, when confirming the initial state, the initialization value of the SPI interface is set to SSN=0; when updating the initialization value of the SPI interface, the initialization value of the SPI interface is updated to SSN=1.

[0080] In this technical solution, the communication protocol includes: a sending protocol and a returning protocol.

[0081] The sending protocol includes:

[0082] Protocol header HEAD: used to identify the start and type of the communication protocol;

[0083] Control word CLA: used to specify the type of subsequent data or operation instructions;

[0084] The length of the subsequent data field INS;

[0085] Data bit P: There are several data bits P, each used to indicate a specific parameter or option;

[0086] Repeated data length LEN: used to indicate the length of repeated data;

[0087] Data field: It is a number of fields used to represent the actual information to be transmitted.

[0088] Cyclic redundancy check code CRC: used to detect errors in data transmission;

[0089] Protocol tail TAIL: used to mark the end of the communication protocol.

[0090] Preferably, the return protocol includes:

[0091] Protocol header HEAD: used to identify the start and type of the communication protocol;

[0092] Status word field SW: it is a number and is used to indicate the result or status of the operation;

[0093] Repeated data length LEN: used to indicate the length of repeated data;

[0094] Data field: It is a number of fields used to represent the actual information to be transmitted.

[0095] Cyclic redundancy check code CRC: used to detect errors in data transmission;

[0096] Protocol tail TAIL: used to mark the end of the communication protocol.

[0097] Preferably, before generating the quantum key,

[0098] The quantum encryption module of the power collection terminal and the master station perform identity authentication to ensure the legitimacy of the identities of both parties in communication;

[0099] Based on the legitimate identities of both parties, the two parties negotiate a session key for communication through a quantum key negotiation protocol;

[0100] Based on the session key, the quantum key is generated by a quantum encryption module.

[0101] In practical applications, the power collection terminal communicates with the quantum encryption module via an SPI line.

[0102] In practical applications, the SPI line is an SPI four-wire bus, which is used for compatibility with the output / input signal line MOSI line, and the MOSI line is a double-pin MOSI line.

[0103] In practical applications, the chip of the quantum encryption module is an 8-pin packaged ESAM chip.

[0104] A summary of the above technical solutions is given below:

[0105] The technical solution involves a communication method for a power collection terminal and a quantum encryption module: the steps include:

[0106] 1. Hardware Design

[0107] The communication interface between the power collection terminal and the quantum encryption module is designed as an SPI interface. At the same time, the power supply and ground are designed to communicate through the SPI four-wire bus, which is compatible with the output / input signal line MOSI. In this technical solution, the MISO line is a double-pin MOSI line. The entire quantum encryption module chip adopts a standard 8-pin package. The ESAM chip

[0108] 2. Generation and distribution of quantum keys

[0109] Use quantum random numbers to generate highly secure quantum keys through quantum encryption modules;

[0110] Through the quantum key distribution network, the quantum key is securely distributed to the quantum encryption module of the power collection terminal.

[0111] 3. Authentication and key negotiation

[0112] Before communication begins, the quantum encryption module of the power collection terminal and the master station perform identity authentication to ensure the legitimacy of the identities of both communicating parties. The two parties negotiate the session key for this communication through the quantum key negotiation protocol.

[0113] 4. Communication message decryption

[0114] After the first communication message of the master station is transmitted to the power collection terminal through the network or serial port, it is forwarded to the quantum encryption module through SPI (Serial Peripheral Interface, a high-speed, full-duplex, synchronous serial communication interface, including SPI interface and SPI line), and the second communication message is returned to the terminal body through SPI after decryption by the quantum encryption module; after processing the data, the power collection terminal transmits the response data (i.e., the third communication message) to the quantum encryption module for encryption and then transmits the fourth communication message to the master station.

[0115] Regarding, communication message encryption:

[0116] The power collection terminal processes the data decrypted in step 4 and gives the processing result (i.e., forming a third communication message). The third communication message is transmitted to the quantum encryption module for encryption via SPI, and a ciphertext (i.e., the fourth communication message) is generated for the power collection terminal, which is then transmitted to the main station via the uplink communication channel of the power collection terminal.

[0117] About downlink communication:

[0118] The power collection terminal generates an unencrypted downlink message (i.e., the third communication message), transmits it to the quantum encryption module for encryption via SPI, and then transmits the message (i.e., the fourth communication message) to the power collection terminal via SPI. The power collection terminal transmits it to the quantum meter or quantum controlled circuit breaker via the downlink port. The quantum meter or quantum circuit breaker generates a feedback message, which is received by the power collection terminal through the port.

[0119] Next, a specific case is given to illustrate the above technical solution (in this case, the characters that appear, such as: 0xAA55, 0xAA, 0x55 can also be other corresponding characters agreed upon):

[0120] 1. Set the initialization state

[0121] The device (master station, power collection terminal, quantum encryption module) first enters the SPI interface initialization state and sets the SPI slave select signal (SSN) to 0. This step is the starting point of the initialization process and prepares for subsequent data transmission.

[0122] 2. Sending Data Packets

[0123] The device (including the master station sending data packets to the power collection terminal or the power collection terminal sending data packets to the master station) starts sending a series of data packets. Each data packet contains the following fields:

[0124] o Protocol header sequence number: 0xAA55 is used to identify the beginning of the data packet.

[0125] o Control word (CLA): used to specify the type of subsequent data or operation instructions.

[0126] o Data length (INS): indicates the length of the subsequent data field.

[0127] o Data bits (P1 and P2): Two data bits (the number of data bits can be more than two, depending on the actual situation) are used to provide additional parameters or options.

[0128] o Data length (LEN1, LEN2):

[0129] o CRC Cyclic Redundancy Check Code: Cyclic Redundancy Check Code, used to detect errors during data transmission.

[0130] 2. Wait and confirm the frame header byte

[0131] After the device sends the data packet, it waits to receive the first frame header byte (SSN). If the received frame header byte is correct (i.e. 0xAA), it proceeds to the next step; otherwise, it resends the data packet. This step ensures the accuracy and reliability of data transmission.

[0132] 3. Read status word

[0133] During the transmission process, the device reads two status words (status word 1 and status word 2). These two status words may be used to indicate the status or result of data transmission. If both status word 1 and status word 2 are expected values ​​(such as 0xAA and 0x55), proceed to the next step; otherwise, you may need to resend the data packet or perform error handling.

[0134] 3. Read and process data

[0135] When all data packets are successfully sent and confirmed, the device starts to read information such as SW1, SW2, LEN1, LEN2, DATA, and CRC. This information may contain the results of the operation or the data to be transmitted. After reading the data, the device will update the SSN value to 1 to indicate that the SPI interface has been initialized.

[0136] 4. End:

[0137] The process ends when the end character 0x55AA is read.

[0138] 5. Finally, the whole process ends with the word "end". At this point, the SPI interface has been initialized and is ready for subsequent data transmission operations.

[0139] Among them, the SPI communication protocol and process can also be expressed in a table:

[0140] Sending Agreement

[0141]

[0142] Return Agreement

[0143]

[0144] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. In the above embodiments, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A communication method for a power collection terminal and a quantum encryption module, characterized in that include: Generate quantum keys through quantum encryption modules; Encrypting the first communication message of the master station based on the quantum key to form a second communication message; Sending the second communication message to the power collection terminal based on the communication protocol; Decrypting the second communication message through a quantum encryption module that communicates with the power collection terminal to form the first communication message; The power collection terminal checks and / or processes the first communication message to form a third communication message; The third communication message is encrypted by a quantum encryption module that communicates with the power collection terminal to form a fourth communication message; The fourth communication message is sent to the main station based on the communication protocol.

2. The communication method for a power collection terminal and a quantum encryption module according to claim 1, characterized in that The communication protocol includes: Setting the initial state: initializing the SPI interface of the power collection terminal, assigning an initialization value, and the master station is ready to send a data packet of a communication message; Confirming the initial state: the power collection terminal receives and confirms the initialization value, and if the initialization value is consistent with the expectation, the power collection terminal starts to wait for receiving the data packet of the communication message; Start data packet transmission: the master station starts to transmit data packets of communication messages to the power collection terminal; Waiting for and confirming the frame header byte: the power collection terminal starts to receive the data packet and starts to check the frame header byte of the data packet; Reading status word: when the frame header byte is consistent with the expectation, the power collection terminal continues to complete the data packet reception; Confirm the status word: when the status word is consistent with the expectation, the power collection terminal feeds back the status word confirmation, and the master station confirms the status word; Read and process data. Based on the status word confirmation, the power collection terminal starts to read and process data; Update the initialization value of the SPI interface; Sending an end character: The power collection terminal sends an end character to the master station to indicate that the data packet exchange is completed.

3. The communication method for the power collection terminal and the quantum encryption module according to claim 2 is characterized in that When confirming the initial state, the initialization value of the SPI interface is set to SSN=0; when updating the initialization value of the SPI interface, the initialization value of the SPI interface is updated to SSN=1.

4. The communication method for a power collection terminal and a quantum encryption module according to claim 2, characterized in that The communication protocol includes: a sending protocol and a returning protocol.

5. The communication method for the power collection terminal and the quantum encryption module according to claim 4 is characterized in that The sending protocol includes: Protocol header HEAD: used to identify the start and type of the communication protocol; Control word CLA: used to specify the type of subsequent data or operation instructions; The length of the subsequent data field INS; Data bit P: There are several data bits P, each used to indicate a specific parameter or option; Repeated data length LEN: used to indicate the length of repeated data; Data field: It is a number of fields used to represent the actual information to be transmitted. Cyclic redundancy check code CRC: used to detect errors in data transmission; Protocol tail TAIL: used to mark the end of the communication protocol.

6. The communication method for a power collection terminal and a quantum encryption module according to claim 4, characterized in that The return protocol includes: Protocol header HEAD: used to identify the start and type of the communication protocol; Status word field SW: it is a number and is used to indicate the result or status of the operation; Repeated data length LEN: used to indicate the length of repeated data; Data field: It is a number of fields used to represent the actual information to be transmitted. Cyclic redundancy check code CRC: used to detect errors in data transmission; Protocol tail TAIL: used to mark the end of the communication protocol.

7. The communication method for a power collection terminal and a quantum encryption module according to claim 1, characterized in that Before generating the quantum key, The quantum encryption module of the power collection terminal and the master station perform identity authentication to ensure the legitimacy of the identities of both parties in communication; Based on the legitimate identities of both parties, the two parties negotiate a session key for communication through a quantum key negotiation protocol; Based on the session key, the quantum key is generated by a quantum encryption module.

8. The communication method for a power collection terminal and a quantum encryption module according to claim 1, characterized in that The communication interfaces of the power collection terminal and the quantum encryption module both adopt SPI interfaces, so that the power collection terminal and the quantum encryption module communicate through the SPI line.

9. The communication method for a power collection terminal and a quantum encryption module according to claim 8, characterized in that The SPI line is an SPI four-wire bus, which is used for compatibility with the output / input signal line MOSI line, and the MOSI line is a double-pin MOSI line.

10. The communication method between the power collection terminal and the quantum encryption module according to any one of claims 1 to 9, characterized in that The chip of the quantum encryption module is an 8-pin packaged ESAM chip.

Images