Photovoltaic data security sharing method and system

Abstract

The invention discloses a photovoltaic data security sharing method and system, and the method comprises the steps: obtaining the equipment models and serial numbers of all photovoltaic equipment, and carrying out the credibility verification of the accessed photovoltaic equipment and a third-party aggregation platform through a credible computing technology; based on credible verification, a secret sharing technology is introduced, and an encryption key is managed; on the basis of key management, data are encrypted through an asymmetric encryption technology, and data aggregation is completed in a secret data state. According to the method, data security is protected by using trusted computing and asymmetric encryption, and secret key security is protected by introducing a secret sharing thought.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and in particular to a photovoltaic data security sharing method and system. Background Art

[0002] Guided by the goal of "carbon peak and carbon neutrality", my country's power industry has entered the development stage of building a new power system with new energy as the main body. The access of a large number of photovoltaic power generation devices has alleviated the power generation pressure of traditional power generation devices. At the same time, photovoltaics, as a clean energy, are more green and environmentally friendly and can reduce pollution to the environment. Photovoltaic equipment is deployed in the Internet area, and its data is aggregated by third-party aggregation agencies and enters the power grid, participating in the information interaction of the power grid and exerting the value of data.

[0003] However, there are many security and privacy protection issues in the process of sharing and aggregating photovoltaic data. For example, attackers may steal data during data transmission, malicious devices may access and tamper with data, and forge keys. Summary of the invention

[0004] The purpose of this section is to summarize some aspects of embodiments of the present invention and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the specification abstract and the invention title of this application to avoid blurring the purpose of this section, the specification abstract and the invention title, and such simplifications or omissions cannot be used to limit the scope of the present invention.

[0005] In view of the above existing problems, the present invention is proposed.

[0006] Therefore, the present invention provides a photovoltaic data security sharing method and system to solve the problems of data theft by attacks, data tampering by malicious devices, and key forgery during data transmission.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0008] In a first aspect, the present invention provides a photovoltaic data security sharing method, comprising:

[0009] Obtain the device models and serial numbers of all photovoltaic devices, and use trusted computing technology to perform trusted verification of connected photovoltaic devices and third-party aggregation platforms;

[0010] Based on trusted verification, secret sharing technology is introduced to manage encryption keys;

[0011] Based on key management, data is encrypted through asymmetric encryption technology, and data aggregation is completed in a confidential data state.

[0012] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0013] The trusted computing technology is used to verify the connected photovoltaic equipment and the third-party aggregation platform, including the following steps:

[0014] The root of trust performs self-checks before the system starts;

[0015] After the self-check passes, the trusted root begins to measure the system level by level;

[0016] The root of trust measures the BIOS;

[0017] After the measurement is passed, the BIOS obtains the measurement permission and continues to measure the next component;

[0018] After the BIOS measurement passes, the operating system loader obtains the measurement permission and measures the operating system kernel;

[0019] After the OS loader passes the measurement, the OS kernel obtains the measurement permission and measures other components in the boot process;

[0020] The results of each measurement step are stored in the trust root's register.

[0021] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0022] The introduction of secret sharing technology to manage encryption keys includes the following steps:

[0023] Generate a public-private key pair for each photovoltaic access device, denoted as PK 1 ,PK 2 , PK 3 …, PK n , S.K. 1 , S.K. 2 , S.K. 3 …, SK n ;

[0024] Generate public and private key pairs pk and sk for the third-party aggregation platform;

[0025] The public keys of photovoltaic equipment and third-party aggregation platforms are divided and stored in multiple key management agencies using secret sharing technology.

[0026] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0027] The method of using secret sharing technology to divide and disperse the storage in multiple key management agencies includes the following steps:

[0028] The public key of the photovoltaic equipment and the public key of the third-party aggregation platform are divided into m parts respectively, and it is assumed that t key management agencies are required to restore the real public key information;

[0029] Select a modulus P;

[0030] Select a key K that can obtain public key information;

[0031] Select m-1 random numbers a equal to P 1 ,a 2 ,...,a m-1 ;

[0032] By calculating the share y held by the i-th key management agency i , y i Distribute to m key management agencies, each key management agency cannot share its own y i ;

[0033] When the public key needs to be recovered, collect the shares y of at least t key management agencies i ;

[0034] Through these shares, using interpolation techniques, we can find K and a 1 ,a 2 ,...,a m-1 , restore the original public key information.

[0035] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0036] The calculation of the share y held by the i-th key management agency i It is expressed as:

[0037]

[0038] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0039] The method of encrypting data by asymmetric encryption technology and completing data aggregation in a secret data state includes the following steps:

[0040] Photovoltaic device i uses the third-party aggregation platform public key pk, uses asymmetric encryption technology to encrypt data, and uses its own private key SK i Sign the encrypted data;

[0041] The encrypted and signed data is uploaded to a third-party aggregation platform via the power wireless private network;

[0042] The third-party aggregation platform uses the photovoltaic equipment public key PK iVerify the signature. If the signature verification is successful, use its own private key sk to decrypt the data, complete the photovoltaic data aggregation processing, and upload the results to the power grid.

[0043] As a preferred solution of the photovoltaic data security sharing method described in the present invention, wherein:

[0044] The photovoltaic device i uses the third-party aggregation platform public key pk and asymmetric encryption technology to encrypt data expressed as:

[0045] C′ i =Enc pk (c i )

[0046] The use of its own private key SK i Signing encrypted data is represented as:

[0047]

[0048] The third-party aggregation platform uses the photovoltaic device public key PK i Verifying the signature is expressed as:

[0049]

[0050] The decrypted data using its own private key sk is expressed as:

[0051] c i =Dec pk (C′ i )

[0052] Among them, c i is the original data of photovoltaic device i, C′ i Encrypted data for photovoltaic device i.

[0053] In a second aspect, the present invention provides a photovoltaic data security sharing system, comprising:

[0054] Trusted verification module, used to obtain the equipment model and serial number of all photovoltaic equipment, and to perform trusted verification on connected photovoltaic equipment and third-party aggregation platforms through trusted computing technology;

[0055] The key management module is used to manage encryption keys based on trusted authentication and the introduction of secret sharing technology;

[0056] The data aggregation module is used to encrypt data based on key management through asymmetric encryption technology and complete data aggregation in a confidential data state.

[0057] In a third aspect, the present invention provides a computing device, comprising:

[0058] Memory, used to store programs;

[0059] The processor is used to execute the computer executable instructions, and the computer executable instructions, when executed by the processor, implement the steps of the photovoltaic data secure sharing method.

[0060] In a fourth aspect, the present invention provides a computer-readable storage medium, comprising: when the program is executed by a processor, the steps of implementing the photovoltaic data secure sharing method are implemented.

[0061] Beneficial effects of the present invention: The present invention builds a trusted execution environment in a photovoltaic embedded system through trusted computing technology, asymmetric encryption technology and secret sharing technology, ensures the trustworthiness of participating devices, uses asymmetric encryption technology to ensure that data aggregation calculations can be performed in a secret data state, ensures the security of data transmission and calculation processes, and uses secret sharing ideas to manage encryption keys to ensure key security and immunity to attacks, ensure photovoltaic data security, break down data sharing barriers, and maximize data value. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor. Among them:

[0063] Figure 1 A basic flow chart of a photovoltaic data security sharing method provided by an embodiment of the present invention;

[0064] Figure 2 A schematic diagram of a model of a photovoltaic data secure sharing method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0065] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0066] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0067] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0068] The present invention is described in detail with reference to schematic diagrams. When describing the embodiments of the present invention, for the sake of convenience, the cross-sectional diagrams showing the device structure will not be partially enlarged according to the general scale, and the schematic diagrams are only examples, which should not limit the scope of protection of the present invention. In addition, in actual production, the three-dimensional dimensions of length, width and depth should be included.

[0069] At the same time, in the description of the present invention, it should be noted that the directions or positional relationships indicated by the terms "upper, lower, inner and outer" are based on the directions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as limiting the present invention. In addition, the terms "first, second or third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0070] In the present invention, unless otherwise clearly specified and limited, the terms "install, connect, connect" should be understood in a broad sense, for example: it can be a fixed connection, a detachable connection or an integral connection; it can also be a mechanical connection, an electrical connection or a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0071] Example 1

[0072] Reference Figure 1 , as an embodiment of the present invention, provides a photovoltaic data security sharing method, comprising:

[0073] S1: Obtain the device models and serial numbers of all photovoltaic devices, and use trusted computing technology to perform trusted verification of connected photovoltaic devices and third-party aggregation platforms;

[0074] In the embodiment of the present application, trusted computing technology is used to perform trusted verification on the connected photovoltaic equipment and the third-party aggregation platform, including the following steps:

[0075] The root of trust performs self-checks before the system starts;

[0076] After the self-check passes, the trusted root begins to measure the system level by level;

[0077] The root of trust measures the BIOS;

[0078] After the measurement is passed, the BIOS obtains the measurement permission and continues to measure the next component;

[0079] After the BIOS measurement is passed, the OS loader obtains the measurement permission and measures the OS kernel;

[0080] After the OS loader passes the measurement, the OS kernel obtains the measurement permission and measures other components in the boot process;

[0081] The results of each measurement step are stored in the trust root's register.

[0082] S2: Based on trusted verification, secret sharing technology is introduced to manage encryption keys;

[0083] In the embodiment of the present application, secret sharing technology is introduced to manage encryption keys, including the following steps:

[0084] Generate a public-private key pair for each photovoltaic access device, denoted as PK 1 ,PK 2 , PK 3 …, PK n , S.K. 1 , S.K. 2 , S.K. 3 …, SK n ;

[0085] Generate public and private key pairs pk and sk for the third-party aggregation platform;

[0086] The public keys of photovoltaic equipment and third-party aggregation platforms are divided and stored in multiple key management agencies using secret sharing technology.

[0087] It should be noted that the public key of the third-party aggregation platform is used for photovoltaic equipment data encryption, the private key of the photovoltaic equipment is used for data signing, the private key of the third-party aggregation platform is used for data decryption, and the public key of the photovoltaic equipment is used for data verification to ensure data confidentiality, integrity and availability.

[0088] In the embodiment of the present application, secret sharing technology is used to divide and disperse the key management institutions, including the following steps:

[0089] The public key of the photovoltaic equipment and the public key of the third-party aggregation platform are divided into m parts respectively, and it is assumed that t key management agencies are required to restore the real public key information;

[0090] Select a modulus P;

[0091] Select a key K that can know the public key information;

[0092] Select m-1 random numbers a that are not greater than or equal to P 1 ,a 2 ,...,a m-1 ;

[0093] By calculating the share y held by the i-th key management agency i , y i Distribute to m key management agencies (i = 1, 2, ..., m), each key management agency cannot share its own y i ;

[0094] In the embodiment of the present application, the share y held by the i-th key management agency is calculated i It is expressed as:

[0095]

[0096] In the embodiment of the present application, when the public key needs to be restored, the following steps are included:

[0097] Collect the shares y of at least t key management agencies i ;

[0098] Using m key management authorities y i List the system of equations: There are m sets of equations in total.

[0099] Solve the system of equations to find K and a 1 ,a 2 ,...,a m-1 , thereby obtaining the public key information.

[0100] S3: Based on key management, data is encrypted through asymmetric encryption technology, and data aggregation is completed in a confidential data state.

[0101] In the embodiment of the present application, data is encrypted by asymmetric encryption technology, and data aggregation is completed in a secret data state, including the following steps:

[0102] Photovoltaic device i uses the third-party aggregation platform public key pk, uses asymmetric encryption technology to encrypt data, and uses its own private key SK i Sign the encrypted data;

[0103] Encryption: C′ i =Enc pk (c i )

[0104] sign:

[0105] Among them, c iis the original data of photovoltaic device i, C′ i Encrypted data for photovoltaic device i.

[0106] The encrypted and signed data is uploaded to a third-party aggregation platform via the power wireless private network;

[0107] The third-party aggregation platform uses the photovoltaic equipment public key PK i Verify the signature. If the signature verification is successful, use its own private key sk to decrypt and aggregate the photovoltaic data.

[0108] Signature Verification: Decryption after successful signature verification

[0109] Decryption: c i =Dec pk (C′ i )

[0110] Among them, c i is the original data of photovoltaic device i, C′ i Encrypted data for photovoltaic device i.

[0111] After the third-party aggregation platform obtains the data from each photovoltaic device, it aggregates the data and uploads it to the power grid. It can be used for power dispatching and distribution, user power consumption behavior analysis, power marketing strategy formulation and other businesses.

[0112] This embodiment also provides a photovoltaic data security sharing system, including:

[0113] Trusted verification module, used to obtain the equipment model and serial number of all photovoltaic equipment, and to perform trusted verification on connected photovoltaic equipment and third-party aggregation platforms through trusted computing technology;

[0114] The key management module is used to manage encryption keys based on trusted authentication and the introduction of secret sharing technology;

[0115] The data aggregation module is used to encrypt data based on key management through asymmetric encryption technology and complete data aggregation in a confidential data state.

[0116] Furthermore, it also includes:

[0117] Memory, used to store programs;

[0118] A processor is used to load the program to execute the photovoltaic data secure sharing method.

[0119] This embodiment also provides a computer-readable storage medium storing a program, and when the program is executed by a processor, the photovoltaic data secure sharing method is implemented.

[0120] The storage medium proposed in this embodiment and the photovoltaic data secure sharing method proposed in the above embodiment belong to the same inventive concept. The technical details not fully described in this embodiment can be referred to the above embodiment, and this embodiment has the same beneficial effects as the above embodiment.

[0121] Through the above description of the implementation methods, the technicians in the relevant field can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ReadOnly, Memory, ROM), random access memory (RandomAccess Memory, RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform the methods of various embodiments of the present invention.

[0122] Example 2

[0123] Reference Figure 2 , as an embodiment of the present invention, provides a photovoltaic data security sharing system, including a trusted verification module, a key management module and a data aggregation module;

[0124] In the embodiment of the present application, the photovoltaic data security sharing system is as follows: Figure 2 As shown, it includes four main participating parts: each photovoltaic device, a trusted system, a key management and a third-party aggregation platform. The photovoltaic device is the data owner and is responsible for providing data. The third-party aggregation platform is responsible for receiving photovoltaic data and aggregating and uploading it to the power grid to maximize the value of photovoltaic data. During the data transmission process, the present invention uses a trusted system to ensure the security and reliability of each photovoltaic device and the third-party aggregation platform, and uses a key management system to ensure the security of encryption keys.

[0125] In the embodiment of the present application, the trusted system is divided into a trusted root, trusted hardware and trusted software base from bottom to top; the trusted root relies on a trusted cryptographic module to perform trusted measurements on embedded devices inside photovoltaic equipment and third-party aggregation platforms. The trusted root starts before the CPU, performs a self-check, and then measures the BIOS. After the measurement passes, the BIOS obtains the measurement authority and measures the operating system loader OS loader. After success, the operating system loader OS loader obtains the measurement authority, measures the operating system kernel, builds a static trust chain, and stores the measurement value in the register of the trusted root. By checking one level at a time and trusting one level at a time, a complete trust chain is built to ensure that the connected photovoltaic equipment and third-party aggregation platform are trustworthy.

[0126] In the embodiment of the present application, the trusted verification module includes obtaining the device model and serial number of all photovoltaic devices, and performing trusted verification on the connected photovoltaic devices and the third-party aggregation platform through trusted computing technology;

[0127] In the embodiment of the present application, the key management module includes managing encryption keys based on trusted authentication and introducing secret sharing technology;

[0128] In an embodiment of the present application, generating a public-private key pair for data sharing participants includes generating a public-private key pair for each photovoltaic access device, and generating a public-private key pair pk and sk for a third-party aggregation platform, wherein the public key of the third-party aggregation platform is used for photovoltaic device data encryption, the photovoltaic device private key is used for data signing, the third-party aggregation platform private key is used for data decryption, and the photovoltaic device public key is used for data verification to ensure data confidentiality, integrity and availability.

[0129] In an embodiment of the present application, the public keys of the photovoltaic equipment and the third-party aggregation platform are divided and stored in multiple key management agencies using secret sharing technology to ensure the security of the public keys.

[0130] In an embodiment of the present application, the photovoltaic device uses the public key of the third-party aggregation platform to encrypt data with the help of asymmetric encryption technology, and uses its own private key to sign the encrypted data to ensure the security of the data.

[0131] In an embodiment of the present application, the encrypted and signed data is uploaded to a third-party aggregation platform via the power wireless private network.

[0132] In an embodiment of the present application, the third-party aggregation platform first uses the public key of the photovoltaic device to verify the signature to ensure that the data has not been tampered with; then it uses its own private key to decrypt the data, completes the photovoltaic data aggregation processing based on asymmetric encryption technology, and uploads the results to the power grid.

[0133] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A photovoltaic data security sharing method, characterized in that: include: Obtain the device models and serial numbers of all photovoltaic devices, and use trusted computing technology to perform trusted verification of connected photovoltaic devices and third-party aggregation platforms; Based on trusted verification, secret sharing technology is introduced to manage encryption keys; Based on key management, data is encrypted through asymmetric encryption technology, and data aggregation is completed in a confidential data state.

2. The photovoltaic data security sharing method according to claim 1, characterized in that: The trusted computing technology is used to verify the connected photovoltaic equipment and the third-party aggregation platform, including the following steps: The root of trust performs self-checks before the system starts; After the self-check passes, the trusted root begins to measure the system level by level; The root of trust measures the BIOS; After the measurement is passed, the BIOS obtains the measurement permission and continues to measure the next component; After the BIOS measurement passes, the operating system loader obtains the measurement permission and measures the operating system kernel; After the OS loader passes the measurement, the OS kernel obtains the measurement permission and measures other components in the boot process; The results of each measurement step are stored in the trust root's register.

3. The photovoltaic data security sharing method according to claim 1 or 2, characterized in that: The introduction of secret sharing technology to manage encryption keys includes the following steps: Generate a public and private key pair for each photovoltaic access device, represented as PK1, PK2, PK3..., PK n , SK1, SK2, SK3…, SK n ; Generate public and private key pairs pk and sk for the third-party aggregation platform; The public keys of photovoltaic equipment and third-party aggregation platforms are divided and stored in multiple key management agencies using secret sharing technology.

4. The photovoltaic data security sharing method according to claim 3, characterized in that: The method of using secret sharing technology to divide and disperse the storage in multiple key management agencies includes the following steps: The photovoltaic equipment public key and the third-party aggregation platform public key are divided into m parts respectively, and t key management agencies are set to obtain the real public key information; Select a modulus P; Select a key K that can obtain public key information; Select m-1 random numbers a1, a2, ..., a equal to P m-1 ; By calculating the share y held by the i-th key management agency i , y i Distribute to m key management agencies, each key management agency cannot share its own y i ; When the public key needs to be recovered, collect the shares y of at least t key management agencies i ; Through these shares, using interpolation techniques, we can find K and a1, a2, ..., a m-1 , restore the original public key information.

5. The photovoltaic data security sharing method according to claim 4, characterized in that: The calculation of the share y held by the i-th key management agency i It is expressed as:

6. The photovoltaic data secure sharing method according to claim 5, characterized in that: The method of encrypting data by asymmetric encryption technology and completing data aggregation in a secret data state includes the following steps: Photovoltaic device i uses the third-party aggregation platform public key pk, uses asymmetric encryption technology to encrypt data, and uses its own private key SK i Sign the encrypted data; The encrypted and signed data is uploaded to a third-party aggregation platform via the power wireless private network; The third-party aggregation platform uses the photovoltaic device public key Pk i Verify the signature. If the signature verification is successful, use its own private key sk to decrypt the data, complete the photovoltaic data aggregation processing, and upload the results to the power grid.

7. The photovoltaic data secure sharing method according to claim 6, characterized in that: The photovoltaic device i uses the third-party aggregation platform public key pk and asymmetric encryption technology to encrypt data expressed as: C′ i =Enc pk (c i ) The use of its own private key SK i Signing encrypted data is represented as: The third-party aggregation platform uses the photovoltaic device public key PK i Verifying the signature is expressed as: The decrypted data using its own private key sk is expressed as: c i =Dec pk (C′ i ) Among them, c i is the original data of photovoltaic device i, C′ i Encrypted data for photovoltaic device i.

8. A system based on the photovoltaic data security sharing method according to claim 1, characterized in that: Trusted verification module, used to obtain the equipment model and serial number of all photovoltaic equipment, and to perform trusted verification on connected photovoltaic equipment and third-party aggregation platforms through trusted computing technology; The key management module is used to manage encryption keys based on trusted authentication and the introduction of secret sharing technology; The data aggregation module is used to encrypt data based on key management through asymmetric encryption technology and complete data aggregation in a confidential data state.

9. An electronic device, characterized in that: include: Memory, used to store programs; A processor is used to load the program to execute the steps of the photovoltaic data secure sharing method according to any one of claims 1 to 7.

10. A computer-readable storage medium storing a program, characterized in that: When the program is executed by a processor, the steps of the photovoltaic data secure sharing method according to any one of claims 1 to 7 are implemented.

Images