Commercial load cluster data secure transmission method and system, and medium

Abstract

The invention relates to a commercial load cluster data secure transmission method and system, and a medium, and the method comprises the steps: collecting communication network parameter information of commercial load cluster data transmission, and calculating a link intrusion attack risk factor according to a link flow deviation; a minimum link intrusion attack degree risk factor is taken as an optimization target, and on the basis of satisfying a set time delay upper limit between end-to-end data transmission of the commercial load cluster, a minimum spanning tree algorithm is adopted to solve and generate a commercial load cluster multicast routing tree; and according to the data transmission type in the commercial load cluster, generating a data transmission path comprising a plurality of links in the multicast routing tree, encrypting the data in the commercial load cluster, and transmitting the encrypted data through the data transmission path. The method provided by the invention can effectively reduce the influence of the illegal link attack in the data transmission of the commercial load cluster, and improves the data transmission delay communication service quality of the commercial load cluster under the risk of the illegal link attack.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a commercial load cluster data secure transmission method and system, and a medium. Background Art

[0002] With the large-scale access of renewable energy to the power system, the randomness of the power grid source side has increased, and the safe and stable operation of the power grid has been greatly challenged. It is urgent to enhance the resilience of the safe and stable operation of the power grid by participating in interactive operations such as demand response. The commercial loads on the user side represented by air conditioners and electric vehicles in the distribution network have huge flexible adjustment capabilities and are important and available load resources for the utilization of power grid demand side resources. In the actual demand side resource utilization implementation plan, the location of commercial load resources is decentralized and the granularity of the dispatchable load capacity is small. It is necessary to use load aggregators such as virtual power plants to aggregate commercial loads to form load clusters, and coordinate and interact with the distribution network in the form of load clusters to realize demand side resource utilization. A large amount of data interaction transmission is required in the process of coordinated interaction with the distribution network through clusters. In the process of interactive transmission, the communication network faces security risks such as information theft, data tampering, and network denial of service attacks. Therefore, how to realize the secure communication transmission of information interaction of the distribution network load control business terminal is a key technical challenge. With the development of new information security technical methods, such as immune intrusion detection technology and hybrid encryption technology, the use of new information security technical methods for data transmission security protection in the coordinated interaction between commercial load clusters and distribution networks has become a new feasible technical route.

[0003] The security protection of the secure transmission of commercial load cluster data in traditional distribution networks mostly adopts the transmission method of encryption after application layer data single encryption algorithm, that is, the control terminal responsible for commercial load management (hereinafter referred to as commercial load terminal) is installed at the commercial load, and the commercial load cluster forms a cluster data transmission communication network with the distribution network commercial load cluster interactive collaborative control center (hereinafter referred to as load cluster cooperative control center) through the corresponding multiple commercial load terminals and their supporting communication networks; the information interaction between the commercial load terminal and the commercial load cooperative control center is achieved by encrypting the data and building a transmission path to achieve security protection. The above application layer data single encryption algorithm encryption transmission method still has security risks such as path network attacks. Summary of the invention

[0004] The present invention provides a commercial load cluster data security transmission method, system and medium. On the basis of using intrusion detection to perceive illegal attacks, communication network parameter information of commercial load cluster data transmission is obtained, the transmission link intrusion attack risk factor is calculated according to the link flow deviation, a multi-point to multi-point commercial load cluster multicast routing tree is established, and commercial load cluster data transmission is performed according to the multicast tree path; by selecting a low attack risk path for data transmission, the impact of link illegal attacks on commercial load cluster data transmission is effectively reduced, and the communication service quality of commercial load cluster data transmission delay is improved when the risk of link illegal attacks occurs.

[0005] The present invention solves the above technical problem with the following solution: A commercial load cluster data secure transmission method, comprising the following steps:

[0006] Collect communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster;

[0007] Generate a link intrusion attack risk factor based on communication network parameter information;

[0008] Based on the link intrusion attack risk factor, the average cumulative intrusion attack risk factor of the link is generated; taking the minimum link intrusion attack risk factor as the optimization goal, on the basis of meeting the upper limit of the end-to-end delay of the commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm;

[0009] According to the data transmission type in the commercial load cluster, a data transmission path including multiple links is generated in the multicast routing tree, and the data in the commercial load cluster is encrypted and then transmitted through the data transmission path.

[0010] Preferably, the method further includes: updating communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path when data transmission starts in the next processing cycle, and encrypting the data transmitted in the next processing cycle.

[0011] Preferably, the communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster is collected, including:

[0012] Assume that the number of network nodes N of the communication network for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for the interaction of the commercial load cluster, the processing cycle length is P, and the probe sampling time interval is H, then the total number of sampled data in each cycle is The current processing cycle number is recorded as No.k.

[0013] For each link l between node i and node j ij , collect the link communication data flow vector set of the M processing cycles before the current processing cycle at interval H Link communication data flow of the processing cycle at this moment where kM-1≤s≤k-1, Link l ij No.x sampled data flow values ​​in the previous No.s processing cycle; statistics on the link l between each pair of nodes i and j ij The average delay D ij .

[0014] Preferably, generating a link intrusion attack risk factor based on communication network parameter information includes:

[0015] The link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector The details are as follows:

[0016] By calculating the maximum value of No.x sampling data flow in the first M processing cycles and minimum data flow The set of link communication data flow vectors that make up the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector

[0017] in,

[0018]

[0019]

[0020] Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows:

[0021]

[0022]

[0023]

[0024] Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and The covariance of for The variance of for The variance of is the link intrusion attack risk factor.

[0025] Preferably, the link average cumulative intrusion attack risk factor is generated based on the link intrusion attack risk factor; taking the minimum link intrusion attack risk factor as the optimization goal, on the basis of satisfying the set upper limit of the end-to-end delay of the commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm, including:

[0026] Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor;

[0027] The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max ;

[0028] Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals, load cluster cooperative control center and the number of network nodes, and a multi-point to multi-point multicast routing tree is established between multiple commercial load terminals and a load cluster cooperative control center.

[0029] Preferably, according to the data transmission type in the commercial load cluster, a data transmission path including multiple links is generated in the multicast routing tree, the data in the commercial load cluster is encrypted and transmitted through the data transmission path, and when the data transmission of the next processing cycle starts, the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path are updated, and the data transmitted in the next processing cycle is encrypted and transmitted, including:

[0030] For unicast point-to-point data transmission between any two commercial load terminals, in the multicast routing tree, with the minimum unicast point-to-point as the goal, a tree algorithm is used to construct a unicast point-to-point data transmission path containing multiple links using the delay cost;

[0031] For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a data transmission path containing multiple link multicasts;

[0032] Set security encryption thresholds α and β, and calculate and filter out the maximum link intrusion attack risk factor from each link of the data transmission path

[0033] Based on the maximum link intrusion attack risk factor In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path;

[0034] Adaptive computational complexity encryption is performed on commercial load cluster data according to the following three situations: Case 1: When Use low computational complexity encryption algorithms (such as 128-bit AES algorithm) to encrypt commercial load cluster data; Case 2: When Use a medium computational complexity encryption algorithm (such as the RC5 algorithm) to encrypt the commercial load cluster data; Case 3: When Use high computational complexity encryption algorithms (such as the IDEA algorithm) to encrypt commercial load cluster data;

[0035] When data transmission starts in the next processing cycle, communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and data transmitted in the next processing cycle is encrypted.

[0036] The present invention also provides a commercial load cluster data security transmission system, comprising:

[0037] A communication network parameter information collection module is used to collect communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster;

[0038] A link intrusion attack risk factor generation module, used to generate a link intrusion attack risk factor based on communication network parameter information;

[0039] The multicast routing tree generation module is used to generate the average cumulative intrusion attack risk factor of the link based on the link intrusion attack risk factor; taking the minimum link intrusion attack risk factor as the optimization goal, on the basis of meeting the upper limit of the end-to-end delay of the commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm;

[0040] The data encryption transmission module is used to generate a data transmission path containing multiple links in the multicast routing tree according to the data transmission type in the commercial load cluster, and encrypt the data in the commercial load cluster and transmit it through the data transmission path.

[0041] Preferably, the data encryption transmission module is also used to update the communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path when the data transmission of the next processing cycle starts, and encrypt the data transmitted in the next processing cycle.

[0042] Preferably, the communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster is collected, including:

[0043] Setting the number of network nodes of the communication network for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for interaction between the commercial load clusters;

[0044] For each link l between node i and node j ij , according to the interval T, the link communication data flow vector set of the first M processing cycles relative to the current processing cycle is collected Link communication data flow of the processing cycle at this moment and link l between each pair of nodes i and j ij The average delay D ij .

[0045] Preferably, generating a link intrusion attack risk factor based on communication network parameter information includes:

[0046] Calculate the link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector

[0047] Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows:

[0048]

[0049]

[0050]

[0051] Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and The covariance of for The variance of for The variance of is the link intrusion attack risk factor.

[0052] Preferably, the link average cumulative intrusion attack risk factor is generated based on the link intrusion attack risk factor; taking the minimum link intrusion attack risk factor as the optimization goal, on the basis of satisfying the set upper limit of the end-to-end delay of the commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm, including:

[0053] Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor;

[0054] The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max ;

[0055] Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals, load cluster cooperative control center and the number of network nodes, and a multi-point to multi-point multicast routing tree is established between multiple commercial load terminals and a load cluster cooperative control center.

[0056] Preferably, according to the data transmission type in the commercial load cluster, a data transmission path including multiple links is generated in the multicast routing tree, the data in the commercial load cluster is encrypted and transmitted through the data transmission path, and when the data transmission of the next processing cycle starts, the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path are updated, and the data transmitted in the next processing cycle is encrypted and transmitted, including:

[0057] For unicast point-to-point data transmission between any two commercial load terminals, in the multicast routing tree, with the minimum unicast point-to-point as the goal, a tree algorithm is used to construct a unicast point-to-point data transmission path containing multiple links using the delay cost;

[0058] For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a data transmission path containing multiple link multicasts;

[0059] Set security encryption thresholds α and β, and calculate and filter out the maximum link intrusion attack risk factor from each link of the data transmission path

[0060] Based on the maximum link intrusion attack risk factor a Q max In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path;

[0061] When data transmission starts in the next processing cycle, communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and data transmitted in the next processing cycle is encrypted.

[0062] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for securely transmitting data of a commercial load cluster as described above is implemented.

[0063] The present invention also provides an electronic device, comprising a memory and a processor: the memory is used to store computer executable instructions, the processor is used to execute the computer executable instructions, and when the computer executable instructions are executed by the processor, a commercial load cluster data secure transmission method as described above is implemented.

[0064] The beneficial effects of the present invention are as follows: based on the use of intrusion detection to perceive illegal attacks, communication network parameter information of commercial load cluster data transmission is obtained, a link intrusion attack risk factor is generated according to the link flow deviation, and a multi-point to multi-point commercial load cluster multicast routing tree is established with the minimum average cumulative intrusion attack risk factor of the link as the optimization goal, thereby effectively reducing the impact of link illegal attacks on commercial load cluster data transmission; commercial load cluster data transmission is carried out according to the multicast tree path to meet different types of point-to-multipoint data transmission requirements, and the communication service quality of commercial load cluster data transmission delay is improved when the risk of link illegal attacks occurs; at the same time, different encryption methods are used for data transmission according to the risk level to further improve the security of data transmission.

[0065] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention and implement it according to the contents of the specification, the following is a detailed description of the preferred embodiments of the present invention in conjunction with the accompanying drawings. The specific implementation of the present invention is given in detail by the following embodiments and their accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0067] Figure 1 A flow chart of a commercial load cluster data security transmission method provided in Example 1;

[0068] Figure 2 A module diagram of a commercial load cluster data security transmission system provided in Example 2. DETAILED DESCRIPTION

[0069] The principles and features of the present invention are described below in conjunction with the accompanying drawings. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.

[0070] like Figure 1 As shown, a commercial load cluster data secure transmission method includes the following steps:

[0071] S1. Collect the communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster, as follows:

[0072] Assume that the number of network nodes N=20, the processing cycle length P=6min, and the probe sampling time interval H=1s for the communication network for data transmission between multiple commercial load terminals W corresponding to the commercial load cluster and the load cluster cooperative control center s for the commercial load cluster interaction, then the total number of sampled data in each cycle is The current processing cycle number is recorded as No.k.

[0073] For each link l between node i and node j ij , collect the link communication data flow vector set of No.k+M-1 to No.k-1 of the first M=25 processing cycles relative to the current processing cycle at interval H Link communication data flow of the processing cycle at this moment where kM-1≤s≤k-1, Link l ij No.x sampled data flow values ​​in the previous No.s processing cycle; statistics on the link l between each pair of nodes i and j ij The average delay D ij .

[0074] S2. Generate a link intrusion attack risk factor based on the communication network parameter information, as follows:

[0075] The link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector The details are as follows:

[0076] By calculating the maximum value of No.x sampling data flow in the first M processing cycles and minimum data flow The set of link communication data flow vectors that make up the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector

[0077] in,

[0078]

[0079]

[0080] Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows:

[0081]

[0082]

[0083]

[0084] Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and The covariance of for The variance of for The variance of is the link intrusion attack risk factor.

[0085] S3. Based on the link intrusion attack risk factor, generate the average cumulative intrusion attack risk factor of the link; take the minimum link intrusion attack risk factor as the optimization goal, and on the basis of meeting the upper limit of the end-to-end delay of the commercial load cluster data transmission, generate the commercial load cluster multicast routing tree by using the minimum spanning tree algorithm;

[0086] Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor;

[0087] The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max =50ms~300ms;

[0088] Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals W, load cluster cooperative control center s and the number of network nodes N, and a multi-point to multi-point multicast routing tree T is established between multiple commercial load terminals W and a load cluster cooperative control center S.

[0089] S4. According to the data transmission type in the commercial load cluster, a data transmission path including multiple links is generated in the multicast routing tree. The data in the commercial load cluster is encrypted and transmitted through the data transmission path. When the data transmission of the next processing cycle starts, the communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and the data transmitted in the next processing cycle is encrypted and transmitted. The details are as follows:

[0090] 4.1 In the current No.k processing cycle, the data transmission path Q is constructed according to the following two cases: Case 1: For unicast point-to-point data transmission between any two commercial load terminals, within the multicast routing tree, with the minimum unicast point-to-point as the goal, a delay cost tree algorithm (Dijkstra algorithm based on link delay is used in this example) is used to construct a unicast point-to-point data transmission path containing multiple links; Case 2: For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a multicast data transmission path containing multiple links;

[0091] 4.2 Set the security encryption threshold α (value range 0.1 ~ 0.3) and β (value range 0.4 ~ 0.6), and calculate and select the maximum link intrusion attack risk factor from each link of the data transmission path

[0092] 4.3 Risk Factor Based on Maximum Link Intrusion Attack In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path;

[0093] Adaptive computational complexity encryption is performed on commercial load cluster data according to the following three situations: Situation 1: When Use low computational complexity encryption algorithms (such as 128-bit AES algorithm) to encrypt commercial load cluster data; Case 2: When Use a medium computational complexity encryption algorithm (such as the RC5 algorithm) to encrypt the commercial load cluster data; Case 3: When Use high computational complexity encryption algorithms (such as the IDEA algorithm) to encrypt commercial load cluster data;

[0094] When the data of the next processing cycle k+1 starts to be transmitted, the communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and the data of the next processing cycle k+1 is encrypted for transmission.

[0095] Example 2

[0096] like Figure 2 As shown, this embodiment provides a commercial load cluster data security transmission system, including:

[0097] A communication network parameter information collection module is used to collect communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster;

[0098] A link intrusion attack risk factor generation module, used to generate a link intrusion attack risk factor based on communication network parameter information;

[0099] The multicast routing tree generation module is used to generate the average cumulative intrusion attack risk factor of the link based on the link intrusion attack risk factor; taking the minimum link intrusion attack risk factor as the optimization goal, on the basis of meeting the upper limit of the end-to-end delay of the commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm;

[0100] The data encryption transmission module is used to generate a data transmission path containing multiple links in the multicast routing tree according to the data transmission type in the commercial load cluster, encrypt the data in the commercial load cluster and transmit it through the data transmission path. When the data transmission starts in the next processing cycle, the communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated to encrypt the data transmitted in the next processing cycle.

[0101] The communication network parameter information for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for interaction of the commercial load cluster includes:

[0102] Setting the number of network nodes of the communication network for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for interaction between the commercial load clusters;

[0103] For each link l between node i and node j ij , according to the interval T, the link communication data flow vector set of the first M processing cycles relative to the current processing cycle is collected Link communication data flow of the processing cycle at this moment and link l between each pair of nodes i and j ij The average delay D ij .

[0104] The generating of the link intrusion attack risk factor based on the communication network parameter information includes:

[0105] Calculate the link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector

[0106] Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows:

[0107]

[0108]

[0109]

[0110] Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and The covariance of for The variance of for The variance of is the link intrusion attack risk factor.

[0111] The method generates a link average cumulative intrusion attack risk factor based on the link intrusion attack risk factor; takes the minimum link intrusion attack risk factor as the optimization goal, and generates a commercial load cluster multicast routing tree by using a minimum spanning tree algorithm on the basis of satisfying the set upper limit of the end-to-end delay of commercial load cluster data transmission, including:

[0112] Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor;

[0113] The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max ;

[0114] Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals, load cluster cooperative control center and the number of network nodes, and a multi-point to multi-point multicast routing tree is established between multiple commercial load terminals and a load cluster cooperative control center.

[0115] The method generates a data transmission path including multiple links in a multicast routing tree according to the data transmission type in the commercial load cluster, encrypts the data in the commercial load cluster and transmits it through the data transmission path, updates the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path when the data transmission starts in the next processing cycle, and encrypts the data to be transmitted in the next processing cycle, including:

[0116] For unicast point-to-point data transmission between any two commercial load terminals, in the multicast routing tree, with the minimum unicast point-to-point as the goal, a tree algorithm is used to construct a unicast point-to-point data transmission path containing multiple links using the delay cost;

[0117] For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a data transmission path containing multiple link multicasts;

[0118] Set security encryption thresholds α and β, and calculate and filter out the maximum link intrusion attack risk factor from each link of the data transmission path

[0119] Based on the maximum link intrusion attack risk factor In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path;

[0120] When data transmission starts in the next processing cycle, communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and data transmitted in the next processing cycle is encrypted.

[0121] Example 3

[0122] This embodiment provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program. When the computer program is executed by a processor, a commercial load cluster data secure transmission method as described in Embodiment 1 is implemented.

[0123] Example 4

[0124] The present invention also provides an electronic device, comprising a memory and a processor: the memory is used to store computer-executable instructions, the processor is used to execute the computer-executable instructions, and when the computer-executable instructions are executed by the processor, a commercial load cluster data secure transmission method as described in Example 1 is implemented.

[0125] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0126] The present disclosure is described with reference to flowcharts and / or block diagrams of methods, devices (systems) and computer program products according to embodiments of the present disclosure. It should be understood that each process and / or block in the flowchart and / or block diagram and the combination of processes and / or blocks in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0127] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1A function specified in one or more boxes.

[0128] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0129] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Any ordinary technician in the industry can smoothly implement the present invention as shown in the drawings and described above. However, any equivalent changes, modifications and evolutions made by technicians familiar with the profession without departing from the scope of the technical solution of the present invention using the technical content disclosed above are all equivalent embodiments of the present invention. At the same time, any equivalent changes, modifications and evolutions made to the above embodiments based on the essential technology of the present invention are still within the protection scope of the technical solution of the present invention.

Claims

1. A commercial load cluster data security transmission method, characterized in that: The following steps are involved: Collect communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster; Generate a link intrusion attack risk factor based on communication network parameter information; Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor; Taking the minimum risk factor of link intrusion attack as the optimization goal, on the basis of meeting the upper limit of the end-to-end delay of commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm. According to the data transmission type in the commercial load cluster, a data transmission path including multiple links is generated in the multicast routing tree, and the data in the commercial load cluster is encrypted and then transmitted through the data transmission path.

2. A commercial load cluster data security transmission method according to claim 1, characterized in that: The method further includes: when the data of the next processing cycle starts to be transmitted, updating the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path, and encrypting the data transmitted in the next processing cycle.

3. A commercial load cluster data secure transmission method according to claim 1, characterized in that: The communication network parameter information for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster is collected, including: Setting the number of network nodes of the communication network for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for interaction between the commercial load clusters; For each link l between node i and node j ij , according to the interval T, the link communication data flow vector set of the first M processing cycles relative to the current processing cycle is collected Link communication data flow of the processing cycle at this moment and link l between each pair of nodes i and j ij The average delay D ij .

4. A commercial load cluster data secure transmission method according to claim 3, characterized in that: The generating of the link intrusion attack risk factor based on the communication network parameter information includes: Calculate the link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows: Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and covariance; σ(F ij norm ) is F ij norm The variance of for The variance of is the link intrusion attack risk factor.

5. A commercial load cluster data secure transmission method according to claim 1, characterized in that: The method generates a link average cumulative intrusion attack risk factor based on the link intrusion attack risk factor; takes the minimum link intrusion attack risk factor as the optimization goal, and generates a commercial load cluster multicast routing tree by using a minimum spanning tree algorithm on the basis of satisfying the set upper limit of the end-to-end delay of commercial load cluster data transmission, including: Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor; The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max ; Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals, load cluster cooperative control center and the number of network nodes, and a multi-point to multi-point multicast routing tree is established between multiple commercial load terminals and a load cluster cooperative control center.

6. A commercial load cluster data secure transmission method according to claim 5, characterized in that: The method generates a data transmission path including multiple links in a multicast routing tree according to the data transmission type in the commercial load cluster, encrypts the data in the commercial load cluster and transmits it through the data transmission path, updates the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path when the data transmission starts in the next processing cycle, and encrypts the data to be transmitted in the next processing cycle, including: For unicast point-to-point data transmission between any two commercial load terminals, in the multicast routing tree, with the minimum unicast point-to-point as the goal, a tree algorithm is used to construct a unicast point-to-point data transmission path containing multiple links using the delay cost; For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a data transmission path containing multiple link multicasts; Set security encryption thresholds α and β, and calculate and filter out the maximum link intrusion attack risk factor from each link of the data transmission path Based on the maximum link intrusion attack risk factor In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path; When data transmission starts in the next processing cycle, communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and data transmitted in the next processing cycle is encrypted.

7. A commercial load cluster data security transmission system, characterized in that: include: A communication network parameter information collection module is used to collect communication network parameter information of data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster; A link intrusion attack risk factor generation module, used to generate a link intrusion attack risk factor based on communication network parameter information; A multicast routing tree generation module, used to generate a link average cumulative intrusion attack risk factor based on the link intrusion attack risk factor; Taking the minimum risk factor of link intrusion attack as the optimization goal, on the basis of meeting the upper limit of the end-to-end delay of commercial load cluster data transmission, the commercial load cluster multicast routing tree is generated by using the minimum spanning tree algorithm. The data encryption transmission module is used to generate a data transmission path containing multiple links in the multicast routing tree according to the data transmission type in the commercial load cluster, and encrypt the data in the commercial load cluster and transmit it through the data transmission path.

8. A commercial load cluster data security transmission system according to claim 7, characterized in that: The data encryption transmission module also includes: when the data transmission of the next processing cycle starts, it is used to update the communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path, and encrypt the data transmitted in the next processing cycle.

9. A commercial load cluster data security transmission system according to claim 7, characterized in that: The communication network parameter information for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center interacting with the commercial load cluster is collected, including: Setting the number of network nodes of the communication network for data transmission between multiple commercial load terminals corresponding to the commercial load cluster and the load cluster cooperative control center for interaction between the commercial load clusters; For each link l between node i and node j ij , according to the interval T, the link communication data flow vector set of the first M processing cycles relative to the current processing cycle is collected Link communication data flow of the processing cycle at this moment and link l between each pair of nodes i and j ij The average delay D ij .

10. A commercial load cluster data security transmission system according to claim 9, characterized in that: The generating of the link intrusion attack risk factor based on the communication network parameter information includes: Calculate the link communication data flow vector set of the first M processing cycles The maximum envelope vector corresponding to the flow curve value and the minimum envelope vector Based on the maximum envelope vector Minimum envelope vector Link communication data flow of the processing cycle at this moment Generate the link intrusion attack risk factor, the formula is as follows: Where: Link l ij Normal mode communication data flow vector, for and The mutual correlation coefficient of for and The covariance of for The variance of for The variance of is the link intrusion attack risk factor.

11. A commercial load cluster data security transmission system according to claim 7, characterized in that: The method generates a link average cumulative intrusion attack risk factor based on the link intrusion attack risk factor; takes the minimum link intrusion attack risk factor as the optimization goal, and generates a commercial load cluster multicast routing tree by using a minimum spanning tree algorithm on the basis of satisfying the set upper limit of the end-to-end delay of commercial load cluster data transmission, including: Based on the link intrusion attack risk factor, generate the link average cumulative intrusion attack risk factor; The upper limit of the end-to-end delay C between commercial load cluster data transmission is set max ; Taking the minimum risk factor of link intrusion attack as the optimization goal, the upper limit of the end-to-end delay C between commercial load cluster data transmission is met. max On this basis, the PRIM minimum spanning tree method is used to solve the minimum spanning tree including multiple commercial load terminals, load cluster cooperative control center and the number of network nodes, and a multi-point to multi-point multicast routing tree is established between multiple commercial load terminals and a load cluster cooperative control center.

12. A commercial load cluster data security transmission system according to claim 11, characterized in that: The method generates a data transmission path including multiple links in a multicast routing tree according to the data transmission type in the commercial load cluster, encrypts the data in the commercial load cluster and transmits it through the data transmission path, updates the communication network parameter information, the link intrusion attack risk factor, the multicast routing tree and the data transmission path when the data transmission starts in the next processing cycle, and encrypts the data to be transmitted in the next processing cycle, including: For unicast point-to-point data transmission between any two commercial load terminals, in the multicast routing tree, with the minimum unicast point-to-point as the goal, a tree algorithm is used to construct a unicast point-to-point data transmission path containing multiple links using the delay cost; For multicast data transmission between any commercial load terminal and the load cluster coordination center, a multicast routing tree link is used to construct a data transmission path containing multiple link multicasts; Set security encryption thresholds α and β, and calculate and filter out the maximum link intrusion attack risk factor from each link of the data transmission path Based on the maximum link intrusion attack risk factor In relation to the size of the security encryption thresholds α and β, encryption algorithms of different strengths are set up to encrypt the commercial load cluster data, and the encrypted commercial load cluster data is transmitted through the data transmission path; When data transmission starts in the next processing cycle, communication network parameter information, link intrusion attack risk factor, multicast routing tree and data transmission path are updated, and data transmitted in the next processing cycle is encrypted.

13. A computer storage medium, wherein the computer readable storage medium stores a computer program, characterized in that: When the computer program is executed by a processor, the method for securely transmitting data of a commercial load cluster as claimed in any one of claims 1 to 6 is implemented.

14. An electronic device, characterized in that: It comprises a memory and a processor: the memory is used to store computer executable instructions, the processor is used to execute the computer executable instructions, and when the computer executable instructions are executed by the processor, the commercial load cluster data security transmission method as described in any one of claims 1-6 is implemented.

Images