Power data transmission system and method of distributed power supply

Abstract

The invention discloses an electric power data transmission system and method for a distributed power supply, and the system comprises distributed power supply nodes, an electric power data collection node, and an electric power dispatching center node. The distributed power supply nodes are arranged in the area where the distributed power supply is located to receive the operation data of the distributed power supply, and the electric power data collection node is arranged to receive the operation data and the equipment information of the distributed power supply. And encrypting the operation data and the equipment information by using a session key provided by the power dispatching center node, and then transmitting the encrypted operation data and equipment information to the power dispatching center node, so that the power dispatching center node verifies and decrypts the equipment label and the encrypted operation data. Therefore, the data transmission security protection cost is effectively reduced, encryption protection can be carried out on the operation data of the distributed power supply, and stable operation of a power system is effectively guaranteed.

Description

Technical Field

[0001] The present invention relates to the technical field of safe power data transmission, and in particular to a power data transmission system and method for a distributed power source. Background Art

[0002] In the field of electricity, with the continuous expansion of distributed new energy scenarios such as wind power and photovoltaics, there are more and more distributed new energy constructions such as wind power and photovoltaics. Among them, many wind farms have emerged in the field of wind power, and multiple wind turbines are standing in each field in an orderly manner; in the field of photovoltaics, there are both large-scale centralized power stations and decentralized photovoltaic power generation systems scattered in homes, factories and other places. The development and application of these new energy sources have spawned many power supply nodes. The significant feature of wind power and photovoltaic power generation is its volatility. The power generation and current parameters of each node fluctuate all the time with the changes in wind direction, light intensity, and the electricity demand of homes and factories, which undoubtedly brings great challenges to power dispatching. Therefore, when making decisions such as power dispatching, modern power dispatching centers must rely heavily on the operating data of distributed power sources to ensure the stable operation of the power system.

[0003] However, unlike the centralized management and protection systems that thermal power and hydropower rely on, distributed power sources are significantly decentralized in terms of geographical distribution and network architecture, and their security boundaries are relatively vague, making them more likely to become targets of potential attacks when transmitting data to the dispatch center. In addition, due to the trade-off of economic benefits, some nodes often find it difficult to bear the high cost of data protection measures, which undoubtedly further exacerbates the complexity and difficulty of power system security protection. Summary of the invention

[0004] The embodiments of the present invention provide a distributed power source power data transmission system and method, which not only effectively reduces the cost of data transmission security protection, but also can encrypt and protect the operating data of the distributed power source, effectively ensuring the stable operation of the power system.

[0005] An embodiment of the present invention provides a distributed power source power data transmission system, comprising: a distributed power source node, a power data collection node, and a power dispatch center node;

[0006] The distributed power source node is used to obtain the operation data of the distributed power source terminals in its area, and send the operation data and the device information of the distributed power source terminals corresponding to the operation data to the power data collection node;

[0007] The power data collection node is used to generate a first private key and a first public key, and send the first public key to the power dispatching center;

[0008] The power dispatch center node is used to generate a session key, and use the first public key to encrypt the session key to generate an encrypted session key, and then send the encrypted session key to the power data collection node;

[0009] The power data collection node is further used to use the first private key to decrypt the encrypted session key to obtain a session key, and use the session key to encrypt the device information and the operation data respectively to generate a device tag and encrypted operation data;

[0010] The device tag and the encrypted operation data are transmitted to the power dispatching center, so that the power dispatching center verifies and decrypts the device tag and the encrypted operation data.

[0011] Furthermore, the distributed power supply node sends the operation data and the device information of the distributed power supply terminal corresponding to the operation data to the power data collection node, including:

[0012] Get the preset second public key;

[0013] Using the second public key to encrypt the operation data and the device information to generate encrypted data to be transmitted;

[0014] The encrypted data to be transmitted is sent to the power data collection node, so that the power data collection node uses a preset second private key to decrypt the encrypted data to be transmitted to obtain the operating data and the device information; wherein the second public key and the second private key are a pair of keys preset in the distributed power supply node and the power data collection node respectively.

[0015] Furthermore, the power data collection node transmits the device tag and the encrypted operation data to the power dispatching center, including:

[0016] Using the SM3 algorithm, hashing the device tag and the encrypted operation data to generate a target hash value;

[0017] The target hash value, the device tag, and the encrypted operation data are transmitted to the power dispatching center.

[0018] Furthermore, the power dispatching center verifies and decrypts the device tag and the encrypted operation data, including:

[0019] Obtaining device information to be verified of several distributed power supply terminals;

[0020] The session key is used to encrypt the device information to be verified, and a plurality of device tags to be verified are generated;

[0021] Performing hash processing on the device tag to be verified and the encrypted operation data to generate a number of hash values ​​to be verified;

[0022] Matching the target hash value with a plurality of the hash values ​​to be verified;

[0023] When it is confirmed that there is a hash value to be verified that completely matches the target hash value, it is confirmed that the device tag and the encrypted operating data have not been tampered with, and the encrypted operating data is decrypted to obtain the operating data.

[0024] Furthermore, the power data collection node generates a first private key and a first public key, including:

[0025] A pair of keys is generated using the SM2 algorithm; wherein the keys include: a first private key and a first public key.

[0026] Furthermore, the power dispatch center node generates a session key, including:

[0027] A session key is generated using the SM4 algorithm.

[0028] Another embodiment of the present invention provides a method for transmitting power data of a distributed power source, which is applied to a power data collection node in any one of the above-mentioned embodiments of the invention, comprising:

[0029] Obtaining operation data and device information of a distributed power supply terminal, and generating a first private key and a first public key;

[0030] Sending the first public key to the power dispatching center, so that the power dispatching center uses the first public key to encrypt the preset session key, generate the encrypted session key and feedback it;

[0031] Decrypting the encrypted session key using the first private key to obtain a session key, and encrypting the device information and the operation data using the session key to generate a device tag and encrypted operation data;

[0032] The device tag and the encrypted operation data are transmitted to the power dispatching center, so that the power dispatching center node verifies and decrypts the device tag and the encrypted operation data.

[0033] Furthermore, the obtaining of the operating data and equipment information of the distributed power supply terminal includes:

[0034] Acquire encrypted data to be transmitted; wherein the encrypted data to be transmitted is generated by encrypting the operation data and device information of the distributed power terminal by the distributed power node in the area where the distributed power terminal is located using a preset second public key;

[0035] The encrypted data to be transmitted is decrypted using a preset second private key to obtain the operating data and the device information.

[0036] Furthermore, the transmitting the device tag and the encrypted operation data to the power dispatching center includes:

[0037] Using the SM3 algorithm, hashing the device tag and the encrypted operation data to generate a target hash value;

[0038] The target hash value, the device tag, and the encrypted operation data are transmitted to the power dispatching center.

[0039] The following beneficial effects are achieved by implementing the present invention:

[0040] The present invention discloses a distributed power source power data transmission system and method, the system includes: a distributed power source node, a power data collection node, and a power dispatch center node; the present invention sets a distributed power source node in a distributed power source area for receiving the operation data of the distributed power source, and sets a power data collection node for receiving the operation data and device information of the distributed power source, and uses the session key provided by the power dispatch center node to encrypt the operation data and device information, and then transmits the encrypted operation data and device information to the power dispatch center node, so that the power dispatch center node verifies and decrypts the device tag and the encrypted operation data. Therefore, the present invention collects the operation data of the distributed power sources in the area by setting a power data collection node, and then encrypts the data transmission with the power dispatch center through the power data collection node, which does not need to encrypt and protect each distributed power source node, reduces the cost of data transmission security protection, and can ensure the safety and reliability of the operation data received by the power dispatch center, thereby effectively ensuring the stable operation of the power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a structural schematic diagram of a power data transmission system of a distributed power source provided by an embodiment of the present invention.

[0042] Figure 2 It is a flow chart of a power data transmission method of a distributed power source provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0044] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by technicians in the technical field to which this application belongs; the terms used herein are only for the purpose of describing specific embodiments and are not intended to limit this application; the terms "including" and "having" in the specification and claims of this application and the above-mentioned figure descriptions and any variations thereof are intended to cover non-exclusive inclusions.

[0045] In the description of the embodiments of the present application, the technical terms "first", "second", etc. are only used to distinguish different objects, and cannot be understood as indicating or implying relative importance or implicitly indicating the number, specific order or primary and secondary relationship of the indicated technical features. In the description of the embodiments of the present application, the meaning of "multiple" is more than two, unless otherwise clearly and specifically defined.

[0046] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0047] In the description of the embodiments of the present application, the term "and / or" is only a description of the association relationship of the associated objects, indicating that there may be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0048] In the description of the embodiments of the present application, the term "multiple" refers to more than two (including two). Similarly, "multiple groups" refers to more than two groups (including two groups), and "multiple pieces" refers to more than two pieces (including two pieces).

[0049] In the description of the embodiments of the present application, unless otherwise clearly specified and limited, technical terms such as "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, and it can be the internal connection of two elements or the interaction relationship between two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the embodiments of the present application can be understood according to the specific circumstances.

[0050] See also Figure 1 , is a schematic diagram of the structure of a power data transmission system of a distributed power source provided by an embodiment of the present invention, comprising: a distributed power source node 101, a power data collection node 102, and a power dispatching center node 103;

[0051] The distributed power source node 101 is used to obtain the operation data of the distributed power source terminals in its area, and send the operation data and the device information of the distributed power source terminals corresponding to the operation data to the power data collection node 102;

[0052] In a preferred embodiment of the present invention, since the distributed power terminals are dispersed both geographically and on the network, this embodiment divides the distributed power terminals into several areas according to the geographical distribution of the distributed power terminals, and sets a distributed power node 101 in each area, and collects and monitors the operation data of several distributed power terminals in the area in real time through wireless communication or wired communication, such as voltage, current, power, etc. And the equipment information of several distributed power sources in the area is pre-stored in the distributed power node 101, such as equipment type, physical address, service time, etc. The distributed power can also send its own equipment information to the distributed power node 101 when sending the operation data to the distributed power node 101.

[0053] It is understandable that, since the distributed power supply terminals are dispersed both geographically and on the network, there are many distributed power supply nodes 101. To save costs, the distributed power supply nodes 101 use devices with limited computing and storage resources.

[0054] Preferably, the distributed power supply node 101 sends the operation data and the device information of the distributed power supply terminal corresponding to the operation data to the power data collection node 102, including:

[0055] Get the preset second public key;

[0056] Using the second public key to encrypt the operation data and the device information to generate encrypted data to be transmitted;

[0057] The encrypted data to be transmitted is sent to the power data collection node 102, so that the power data collection node 102 uses a preset second private key to decrypt the encrypted data to be transmitted to obtain the operating data and the device information; wherein the second public key and the second private key are a pair of keys preset in the distributed power supply node 101 and the power data collection node 102 respectively.

[0058] In a preferred embodiment of the present invention, in order to ensure the security of data transmission between the distributed power supply node 101 and the power data collection node 102, this embodiment pre-sets a second public key in the distributed power supply node 101 to encrypt the collected operation data and device information, and pre-sets a second private key in the power data collection node 102 to decrypt the encrypted data sent by the distributed power supply node 101. Since the computing power of the distributed power supply node 101 is limited, this embodiment can also use lightweight cryptographic algorithms, such as CLEF IA, LB lock, Piccolo, etc., to encrypt and transmit the operation data and device information.

[0059] The power data collection node 102 is used to generate a first private key and a first public key, and send the first public key to the power dispatching center;

[0060] Preferably, the power data collection node 102 generates a first private key and a first public key, including:

[0061] A pair of keys is generated using the SM2 algorithm; wherein the keys include: a first private key and a first public key.

[0062] In a preferred embodiment of the present invention, the power data collection node 102 is located in different levels of the power system, responsible for collecting and integrating the scattered data from different distributed power sources (such as smart meters, sensors, etc.), and performing corresponding calculation, encryption, and data transmission tasks. In order to improve data security, this embodiment uses the SM2 algorithm to generate the first private key and the first public key. It can be understood that SM2 is an asymmetric encryption algorithm based on elliptic curve cryptography (ECC) for realizing digital signatures, key negotiation and other functions. The session key of the power dispatching center is obtained by transmitting the generated first public key to the power dispatching center.

[0063] The power dispatch center node 103 is used to generate a session key, and use the first public key to encrypt the session key to generate an encrypted session key, and then send the encrypted session key to the power data collection node 102;

[0064] Preferably, the power dispatching center node 103 generates a session key, including:

[0065] A session key is generated using the SM4 algorithm.

[0066] In a preferred embodiment of the present invention, the SM4 algorithm is a symmetric encryption algorithm suitable for various occasions requiring high-security encryption. This embodiment encrypts and transmits device information and operation data by transmitting the session key generated by the power dispatching center node 103 to the power data collection node 102.

[0067] The power data collection node 102 is further used to decrypt the encrypted session key using the first private key to obtain a session key, and use the session key to encrypt the device information and the operation data respectively to generate a device tag and encrypted operation data;

[0068] The device tag and the encrypted operation data are transmitted to the power dispatching center, so that the power dispatching center verifies and decrypts the device tag and the encrypted operation data.

[0069] Preferably, the power data collection node 102 transmits the device tag and the encrypted operation data to the power dispatching center, including:

[0070] Using the SM3 algorithm, hashing the device tag and the encrypted operation data to generate a target hash value;

[0071] The target hash value, the device tag, and the encrypted operation data are transmitted to the power dispatching center.

[0072] In a preferred embodiment of the present invention, in order to prevent the encrypted encrypted operation data and device tags from being tampered with during transmission, this embodiment also adopts the SM3 algorithm to hash the device tags and encrypted operation data to generate a target hash value, so that the power dispatching center node 103 can confirm whether the received encrypted operation data is safe and accurate based on the target hash value.

[0073] Preferably, the power dispatching center 103 verifies and decrypts the device tag and the encrypted operation data, including:

[0074] Obtaining device information to be verified of several distributed power supply terminals;

[0075] The session key is used to encrypt the device information to be verified, and a plurality of device tags to be verified are generated;

[0076] Performing hash processing on the device tag to be verified and the encrypted operation data to generate a number of hash values ​​to be verified;

[0077] Matching the target hash value with a plurality of the hash values ​​to be verified;

[0078] When it is confirmed that there is a hash value to be verified that completely matches the target hash value, it is confirmed that the device tag and the encrypted operating data have not been tampered with, and the encrypted operating data is decrypted to obtain the operating data.

[0079] Preferably, the power dispatching center 103, after matching the target hash value with the plurality of hash values ​​to be verified, further comprises:

[0080] When it is confirmed that the plurality of hash values ​​to be verified do not match the target hash value, it is confirmed that the device tag and the encrypted operating data are tampered with, and the device tag and the encrypted operating data are discarded.

[0081] In a preferred embodiment of the present invention, when the power dispatching center 103 receives the target hash value, device tag, and encrypted operation data transmitted by the power data collection node 102, it will obtain the device information of several distributed power terminals pre-stored in the database, and use the session key to encrypt the device information to be verified, generate several device tags to be verified, and then hash the device tags to be verified with the encrypted operation data to generate several hash values ​​to be verified, and finally match the target hash value with the several hash values ​​to be verified. When the encrypted operation data or device tag has not been tampered with, there must be a hash value to be verified that completely matches the target hash value. When it is confirmed that there is a hash value to be verified that completely matches the target hash value, the encrypted operation data can be decrypted to obtain the operation data. It can be understood that in order to reduce data processing time and save computing resources, this embodiment also obtains the device information to be verified of the distributed power terminals in its area according to the power data collection node 102, so as to save time and computing resources for subsequent encryption and matching processes.

[0082] Furthermore, in order to further ensure data security, a power parameter analysis system based on deep learning is deployed in the power dispatching center 103. Combined with parameters such as wind speed and sunshine in the weather forecast, data anomalies are analyzed in the dispatching center. Then, a combination of cryptographic technology analysis and manual inspection is used to find attacked nodes and make timely corrections to ensure the reliability of power grid operation.

[0083] This embodiment provides a distributed power source power data transmission system, including: distributed power source nodes, power data collection nodes, and power dispatch center nodes; by setting distributed power source nodes in the area where the distributed power source is located to receive the operating data of the distributed power source, and setting a power data collection node for receiving the operating data and device information of the distributed power source, and using the session key provided by the power dispatch center node to encrypt the operating data and device information, and then transmit the encrypted operating data and device information to the power dispatch center node, so that the power dispatch center node verifies and decrypts the device tag and the encrypted operating data. Therefore, this embodiment not only effectively reduces the cost of data transmission security protection, but also encrypts and protects the operating data of the distributed power source, effectively ensuring the stable operation of the power system.

[0084] See also Figure 2 , is a flow chart of a method for transmitting power data of a distributed power source provided by an embodiment of the present invention, comprising:

[0085] S1. Obtaining operation data and device information of a distributed power supply terminal, and generating a first private key and a first public key;

[0086] Preferably, the obtaining of the operating data and equipment information of the distributed power supply terminal includes:

[0087] S11, obtaining encrypted data to be transmitted; wherein the encrypted data to be transmitted is generated by encrypting the operation data and device information of the distributed power terminal by the distributed power node in the area where the distributed power terminal is located using a preset second public key;

[0088] S12: Decrypt the encrypted data to be transmitted using a preset second private key to obtain the operating data and the device information.

[0089] S2. Sending the first public key to the electric power dispatching center, so that the electric power dispatching center uses the first public key to encrypt a preset session key, generates an encrypted session key and feeds it back;

[0090] S3. Decrypt the encrypted session key using the first private key to obtain a session key, and use the session key to encrypt the device information and the operation data respectively to generate a device tag and encrypted operation data;

[0091] S4. Transmitting the device tag and the encrypted operation data to the power dispatching center, so that the power dispatching center node verifies and decrypts the device tag and the encrypted operation data.

[0092] Preferably, the transmitting the device tag and the encrypted operation data to the power dispatching center includes:

[0093] S41, using SM3 algorithm to perform hash processing on the device tag and the encrypted operation data to generate a target hash value;

[0094] S42, transmitting the target hash value, the device tag, and the encrypted operation data to the power dispatching center.

[0095] This embodiment provides a method for transmitting power data of a distributed power source, by setting a distributed power source node in the area where the distributed power source is located to receive the operating data of the distributed power source, and setting a power data collection node for receiving the operating data and device information of the distributed power source, and using the session key provided by the power dispatching center node to encrypt the operating data and device information, and then transmitting the encrypted operating data and device information to the power dispatching center node, so that the power dispatching center node verifies and decrypts the device tag and the encrypted operating data. Therefore, this embodiment not only effectively reduces the cost of data transmission security protection, but also encrypts and protects the operating data of the distributed power source, effectively ensuring the stable operation of the power system.

[0096] The above is a preferred embodiment of the present invention. It should be pointed out that a person skilled in the art can make several improvements and modifications without departing from the principle of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A distributed power source power data transmission system, characterized in that: include: Distributed power generation nodes, power data collection nodes, and power dispatch center nodes; The distributed power source node is used to obtain the operation data of the distributed power source terminals in its area, and send the operation data and the device information of the distributed power source terminals corresponding to the operation data to the power data collection node; The power data collection node is used to generate a first private key and a first public key, and send the first public key to the power dispatching center; The power dispatch center node is used to generate a session key, and use the first public key to encrypt the session key to generate an encrypted session key, and then send the encrypted session key to the power data collection node; The power data collection node is further used to use the first private key to decrypt the encrypted session key to obtain a session key, and use the session key to encrypt the device information and the operation data respectively to generate a device tag and encrypted operation data; The device tag and the encrypted operation data are transmitted to the power dispatching center, so that the power dispatching center verifies and decrypts the device tag and the encrypted operation data.

2. A distributed power source power data transmission system as claimed in claim 1, characterized in that: The distributed power source node sends the operation data and the device information of the distributed power source terminal corresponding to the operation data to the power data collection node, including: Get the preset second public key; Using the second public key to encrypt the operation data and the device information to generate encrypted data to be transmitted; The encrypted data to be transmitted is sent to the power data collection node, so that the power data collection node uses a preset second private key to decrypt the encrypted data to be transmitted to obtain the operating data and the device information; wherein the second public key and the second private key are a pair of keys preset in the distributed power supply node and the power data collection node respectively.

3. A distributed power source power data transmission system as claimed in claim 2, characterized in that: The power data collection node transmits the device tag and the encrypted operation data to the power dispatching center, including: Using the SM3 algorithm, hashing the device tag and the encrypted operation data to generate a target hash value; The target hash value, the device tag, and the encrypted operation data are transmitted to the power dispatching center.

4. A distributed power source power data transmission system as claimed in claim 3, characterized in that: The power dispatching center verifies and decrypts the device tag and the encrypted operation data, including: Obtaining device information to be verified of several distributed power supply terminals; The session key is used to encrypt the device information to be verified, and a plurality of device tags to be verified are generated; Performing hash processing on the device tag to be verified and the encrypted operation data to generate a number of hash values ​​to be verified; Matching the target hash value with a plurality of the hash values ​​to be verified; When it is confirmed that there is a hash value to be verified that completely matches the target hash value, it is confirmed that the device tag and the encrypted operating data have not been tampered with, and the encrypted operating data is decrypted to obtain the operating data.

5. A distributed power source power data transmission system as claimed in claim 4, characterized in that: The electric power dispatching center, after matching the target hash value with the plurality of hash values ​​to be verified, further includes: When it is confirmed that the plurality of hash values ​​to be verified do not match the target hash value, it is confirmed that the device tag and the encrypted operating data are tampered with, and the device tag and the encrypted operating data are discarded.

6. The distributed power source power data transmission system according to claim 1, characterized in that: The power data collection node generates a first private key and a first public key, including: A pair of keys is generated using the SM2 algorithm; wherein the keys include: a first private key and a first public key.

7. The distributed power source power data transmission system according to claim 1, characterized in that: The power dispatch center node generates a session key, including: A session key is generated using the SM4 algorithm.

8. A method for transmitting power data of a distributed power source, characterized in that: The power data collection node as claimed in any one of claims 1 to 7 comprises: Obtaining operation data and device information of a distributed power supply terminal, and generating a first private key and a first public key; Sending the first public key to the power dispatching center, so that the power dispatching center uses the first public key to encrypt the preset session key, generate the encrypted session key and feed it back; Decrypting the encrypted session key using the first private key to obtain a session key, and encrypting the device information and the operation data using the session key to generate a device tag and encrypted operation data; The device tag and the encrypted operation data are transmitted to the power dispatching center, so that the power dispatching center node verifies and decrypts the device tag and the encrypted operation data.

9. A method for transmitting power data of a distributed power source as claimed in claim 8, characterized in that: The obtaining of the operating data and equipment information of the distributed power supply terminal includes: Acquire encrypted data to be transmitted; wherein the encrypted data to be transmitted is generated by encrypting the operation data and device information of the distributed power terminal by the distributed power node in the area where the distributed power terminal is located using a preset second public key; The encrypted data to be transmitted is decrypted using a preset second private key to obtain the operating data and the device information.

10. A method for transmitting power data of a distributed power source according to claim 9, characterized in that: The transmitting the device tag and the encrypted operation data to the power dispatching center includes: Using the SM3 algorithm, hashing the device tag and the encrypted operation data to generate a target hash value; The target hash value, the device tag, and the encrypted operation data are transmitted to the power dispatching center.

Images