Relay protection device authentication method and system

Abstract

The invention discloses a relay protection device authentication method and system, and belongs to the technical field of power equipment control, and the relay protection device authentication method comprises the following steps: 1) a client obtains a hardware identification code and encrypted public key data of a device from a relay protection device end; 2) the client sends the received hardware identification code and the encryption public key of the device to a server for registration request, and the server sends a registration code to the client according to the registration request; and 3) the client forwards the registration code to the relay protection device end, and the relay protection device end solidifies the registration code into the license file. The client side, the relay protection device side and the server side are all automatically connected and work according to the method, the registration process does not need manual interference, that is, no person can touch the whole registration process of the registration code, the measure not only plays a role in secrecy, but also can avoid the risk that manual operation is prone to making mistakes, and the efficiency of obtaining the registration code is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of power equipment control, and in particular relates to a relay protection device authentication method and system. Background Art

[0002] With the large-scale construction and application of digital intelligent substations in China, the hardware and software of relay protection devices are inevitably available through various channels, which makes it possible to obtain relay protection devices with the same functions as genuine products through counterfeiting, but the counterfeit protection devices are difficult to guarantee in terms of safety and all aspects. At the same time, such relay protection devices cannot be uniformly upgraded and maintained during use, and the protection of power transmission and distribution equipment using these devices cannot be effectively and reliably guaranteed. At the same time, this behavior also affects the legitimate rights and interests of relay protection device manufacturers. In short, non-genuine protection devices are very harmful. At present, the identification of whether a product is genuine mainly depends on the manufacturer's customized authentication code, that is, according to the unique coding method, some authentication codes are edited, but the confidentiality of this authentication code is very poor. The staff of the factory can easily obtain these coding rules, and it is easy to forge this authentication code with the coding rules; that is, the security of this authentication code must be based on the relevant personnel not leaking secrets, so this anti-counterfeiting authentication method is very unsafe.

[0003] In summary, the existing anti-counterfeiting authentication code has poor confidentiality and is easy to be forged, which makes it difficult for users to distinguish the authenticity of the protection device. Summary of the invention

[0004] The purpose of the present invention is to provide a relay protection device authentication method and system to solve the technical problem in the prior art that the anti-counterfeiting authentication code has poor confidentiality and is easy to be forged, making it difficult for users to distinguish the authenticity of the protection device.

[0005] To achieve the above-mentioned purpose, the present invention provides a technical solution of a relay protection device authentication method and system:

[0006] A relay protection device authentication method includes the following steps: 1) using a client to send a query message to a relay protection device end, the relay protection device end sends a device information message to the client according to the received query message, the device information message includes the hardware identification code and encrypted public key data of the relay protection device; 2) the client sends the received hardware identification code and encrypted public key of the relay protection device to a server end for a registration request, the server encrypts the corresponding hardware identification code with the public key according to the registration request to obtain a corresponding registration code, and sends the registration code to the client end; 3) the client forwards the registration code to the corresponding relay protection device end, the relay protection device end decrypts the received registration code with its own private key, compares the decrypted registration code with the hardware identification code, and if they are consistent, fixes the registration code into a license file and sends a registration success message to the client end.

[0007] The beneficial effects are as follows: the client is mainly responsible for starting the registration and forwarding the information of the relay protection device and the server, the server is mainly responsible for generating the corresponding registration code by encryption according to the hardware identification code of the device, and the relay protection device is responsible for storing and decrypting the registration code. First of all, the registration code is generated by asymmetric encryption, and the reliability of encryption is stronger than that of the existing technology. The client, the relay protection device and the server are all automatically connected and work according to this method, and the registration process does not require human intervention, that is, no one can access the entire process of registration code registration, which not only plays a confidentiality role, but also avoids the risk of human error, thereby improving the efficiency of obtaining registration codes.

[0008] As a further improvement, in step 1), the relay protection device end and the client end are in the same local area network, and the client end sends a query message to the relay protection device end in the same local area network by broadcasting.

[0009] The beneficial effect is that the client and the relay protection device do not need to establish fixed connection channels one by one, which reduces the cost of establishing and maintaining the connection.

[0010] As a further improvement, in step 1), the reply message sent by the relay protection device to the client also includes registration status data. When the registration status data is unregistered, the client sends a registration request to the server.

[0011] The beneficial effect is that the client only sends a registration request to the server for an unregistered relay protection device, thereby avoiding repeated requests to a registered relay protection device and wasting resources.

[0012] As a further improvement, in step 3), when the client forwards the registration code to the relay protection device via broadcast, the registration code and the corresponding hardware identification code are packaged together and sent to the relay protection device. The relay protection device determines whether the received registration code is the registration code of the local device by identifying the hardware identification code.

[0013] The beneficial effect is: the communication overhead between the client and the device is reduced by broadcasting, and the registration code carries the hardware identification code data for identification by the relay protection device.

[0014] As a further improvement, in step 2), the client creates a device data list according to the received reply message, and the client sends a registration request to the server in a serial manner.

[0015] The beneficial effect is that the total time of serial communication is shorter than that of sending requests one by one, which improves the communication efficiency and reduces the communication overhead.

[0016] The present invention also discloses a relay protection device authentication system, including a client, a server and a relay protection device, wherein the client is respectively connected to the server and the relay protection device for communication: the client, the server and the relay protection device are used to process the automatic registration and authentication method of the relay protection device. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flowchart of the relay protection device authentication method of the present invention;

[0018] Figure 2 It is a query message format table diagram of the relay protection device authentication method of the present invention;

[0019] Figure 3 It is a diagram of the device information message format of the relay protection device authentication method of the present invention;

[0020] Figure 4 The format table of the client registration request message of the relay protection device authentication method of the present invention;

[0021] Figure 5 The server registration code message format table diagram of the relay protection device authentication method of the present invention;

[0022] Figure 6 A table showing the format of a registration code message sent by a client of the relay protection device authentication method of the present invention;

[0023] Figure 7 The present invention is a diagram of the device registration confirmation message format of the relay protection device authentication method. DETAILED DESCRIPTION

[0024] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention, that is, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. The components of the embodiments of the present invention described and shown in the drawings herein can be arranged and designed in various different configurations.

[0025] Relay protection device authentication method embodiment:

[0026] like Figure 1 As shown, the relay protection device authentication method includes the following steps:

[0027] 1) If Figure 2 As shown, the client sends a query message to the relay protection device, and the relay protection device sends a device information message to the client according to the query message, such as Figure 3 As shown, the device information message includes the hardware identification code, encrypted public key data and registration status data of the device. Among them, the initial IP and Mac address of all protection devices on the relay protection device side are the same, and the devices need to be distinguished by the hardware identification code. Specifically, the authentication client sends a query message to the bound network card broadcast device; the protection relay protection device side receives the query message, and packages the hardware identification code, encrypted public key and the current registration status of the device into the device information message broadcast and sends it back to the authentication client; the client records the received device information in turn, including the hardware identification code and encrypted public key.

[0028] 2) The device information message sent by the relay protection device to the client also includes registration status data. When the registration status data is unregistered, the client sends a registration request to the server. Figure 4 As shown, the authentication client creates a device information list, and in a serial manner, packages the hardware identification code and public key of the unregistered device into a registration request message, and sends it to the authentication server, such as Figure 5 As shown, the authentication server uses the public key to asymmetrically encrypt the hardware identification code and then transmits the encrypted hardware identification code back to the client. The client does not process the encrypted content, and the encryption and decryption process only exists between the relay protection device and the server.

[0029] Specifically, the authentication client sends the hardware identification code and the encrypted public key to the authentication server via a registration request message; the server encrypts the hardware identification code using the public key and sends the encrypted identification code back to the client as a registration code.

[0030] 3) If Figure 6As shown, the client forwards the registration code to the relay protection device through broadcasting. The relay protection device uses the private key to decrypt the received registration code and compares the decrypted registration code with the local hardware identification code, such as Figure 7 If they are consistent, the registration code is solidified into the license file and a registration success message is sent to the client.

[0031] A number of protection devices with the same IP and Mac address can simultaneously initiate registration with the remote server host through the LAN client. There is no need to assign an independent IP and Mac to each device, and there is no need to establish a fixed connection with the client. Specifically, the client will receive the registration code message from the server, combine it with the hardware identification code, and broadcast it to the LAN; after the device receives the registration code message, it will determine whether it is its own registration code message based on the hardware identification code in the message. If so, it will use the private key to decrypt the registration code and compare the decrypted identification code with the local identification code; if the comparison results are consistent, it is considered that the server registration authentication has been passed, and the registration code will be solidified into the local license file.

[0032] This application is applicable to the automatic deployment of factory registration and certification strategies for relay protection devices to ensure the safety, reliability and legality of factory products and provide users with guaranteed products. The registration process needs to be automated to avoid errors caused by human involvement.

[0033] In addition, if someone can crack the registration system, it is also necessary to crack the client, relay protection device and server to obtain the registration code rules. This method increases the cost of counterfeiting. This is because although the client has access to the hardware identification code and registration code, the client itself does not have the encryption and decryption functions and the private key used to decrypt the registration code is not accessible to the client. Therefore, even if the client is cracked, it cannot obtain the method of generating the registration code; the server only has the encryption function, cannot decrypt and cannot access the private key. Similarly, cracking the server can only obtain the encrypted registration code, but cannot obtain the registration code rules; the relay protection device can only decrypt but not encrypt, that is, it cannot generate the registration code, that is, cracking the relay protection device cannot obtain the registration code rules.

[0034] Relay protection device certification system implementation example:

[0035] The relay protection device registration code generation system includes a client, a server and a relay protection device. The client is respectively connected to the server and the relay protection device for communication: the client, the server and the relay protection device are used to process the above-mentioned relay protection device authentication method embodiment. This embodiment refers to the above-mentioned relay protection device authentication method embodiment and will not be repeated here.

[0036] Finally, it should be noted that the above is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention is described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions recorded in the aforementioned embodiments without creative work, or replace some of the technical features therein with equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present invention shall be included in the protection scope of the present invention.

Claims

1. A relay protection device authentication method, characterized in that: The steps include: 1) Using the client to send a query message to the relay protection device, the relay protection device sends a device information message to the client according to the received query message, and the device information message includes the hardware identification code and encrypted public key data of the relay protection device; 2) The client sends the received hardware identification code and encrypted public key of the relay protection device to the server to make a registration request. The server encrypts the corresponding hardware identification code with the public key according to the registration request to obtain the corresponding registration code, and sends the registration code to the client; 3) The client forwards the registration code to the corresponding relay protection device. The relay protection device uses its own private key to decrypt the received registration code and compares the decrypted registration code with the hardware identification code. If they are consistent, the registration code is solidified into the license file and a registration success message is sent to the client.

2. The relay protection device authentication method according to claim 1, characterized in that: In step 1), the relay protection device and the client are in the same local area network, and the client sends a query message to the relay protection device in the same local area network by broadcasting.

3. The relay protection device authentication method according to claim 2, characterized in that: In step 1), the device information message sent by the relay protection device to the client also includes registration status data. When the registration status data is unregistered, the client sends a registration request to the server.

4. The relay protection device authentication method according to claim 2, characterized in that: In step 3), when the client forwards the registration code to the relay protection device via broadcast, the registration code and the corresponding hardware identification code are packaged and sent to the relay protection device. The relay protection device determines whether the received registration code is the registration code of the local device by identifying the hardware identification code.

5. The relay protection device authentication method according to claim 1, characterized in that: In step 2), the client creates a device data list according to the received reply message, and sends a registration request to the server in a serial manner.

6. A relay protection device authentication system, characterized in that: It includes a client, a server and a relay protection device, and the client is respectively connected to the server and the relay protection device for communication: the client, the server and the relay protection device are used to process the relay protection device authentication method described in any one of claims 1-5.

Images