Quantum encryption system for realizing low-voltage transformer area data based on HPLC networking

Abstract

The invention discloses a quantum encryption system for realizing low-voltage transformer area data based on HPLC networking, which comprises a side, an end side and an encryption management module, the encryption management module comprises an encryption management module head end and an encryption management module tail end, the side comprises a side control module, the end side comprises an end side control module, and the encryption management module tail end comprises an end side control module. The head end of the encryption management module comprises a head end control module, a head end communication module and an encryption chip, and the tail end of the encryption management module comprises a tail end control module, a tail end communication module and an encryption chip. According to the invention, the encryption chip and the communication module are managed through the MCU, and the encryption service is decoupled from the side end equipment, so that the encryption mode of the low-voltage transformer area can be arbitrarily configured, namely the encryption mode type and whether encryption is needed or not, and the low-voltage transformer area service is non-inductive; the difficulty of upgrading and reconstruction of the stock unencrypted low-voltage transformer area is greatly reduced, and the problems caused by mismatching of encryption modes of the side equipment and the end equipment are greatly reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of power systems, and in particular to a quantum encryption system for realizing low-voltage area data based on HPLC networking. Background Art

[0002] With the development of various technologies in low-voltage areas, especially the access of distributed power sources, the types of end-side devices have increased. At present, most of the communications between the edges of the existing low-voltage areas do not use data encryption. Based on the urgent need for data encryption in low-voltage areas, edge and end products integrate encryption chips in themselves, and their respective CPUs manage and interact with each other. This method has the following two problems: 1) It is difficult to replace the encryption chip after it is damaged, and the only option is to replace the device; 2) The encryption methods of the edge and tail devices must match completely, otherwise communication will not be possible. Summary of the invention

[0003] The purpose of the present invention is to provide a quantum encryption system for low-voltage area data based on HPLC networking to solve the problems in the above-mentioned background technology.

[0004] To achieve the above object, the technical solution adopted by the present invention is:

[0005] A quantum encryption system for low-voltage area data based on HPLC networking, including an edge side, an end side and an encryption management module, the encryption management module including an encryption management module head end and an encryption management module tail end, the edge side including an edge side control module, the end side including an end side control module, the encryption management module head end including a head end control module, a head end communication module and an encryption chip, the encryption management module tail end including a tail end control module, a tail end communication module and an encryption chip, a link is established between the edge side and the end side through the encryption management module to perform data communication, and the communication process is as follows:

[0006] The encryption management module head end and the encryption management module tail end perform encryption information exchange and authentication through the communication module;

[0007] The encryption management module head end receives the service data request from the edge side, and the service data request interacts with the encryption chip to encrypt the data, and then sends it out through the head end communication module;

[0008] The tail end of the encryption management module receives the encrypted information from the head end communication module through the tail end communication module, and interacts with the encryption chip to decrypt the encrypted information, and transmits the decrypted plain text data request to the end side;

[0009] The end side processes the plaintext data request to generate a plaintext reply, and sends the plaintext reply to the encryption management module tail end, encrypts it through the encryption chip, and then sends it out through the tail end communication module;

[0010] The head end of the encryption management module receives the encryption information from the tail end communication module through the head end communication module, and interacts with the encryption chip to decrypt the encrypted information, and the decrypted data is sent back to the side.

[0011] Further, the encryption information interaction and authentication between the encryption management module head end and the encryption management module tail end includes the following steps:

[0012] The encryption management module headend sends the network access information to the encryption management module headend, and the encryption management module headend processes the random number signature information;

[0013] The encryption management module headend issues certificate information, and the encryption management module tailend receives and stores the certificate;

[0014] The encryption management module tail end confirms the certificate information, and the encryption management module head end generates the key.

[0015] Furthermore, the edge-side control module, the end-side control module, the head-end control module, and the tail-end control module all use MCU.

[0016] Furthermore, the encryption management module head end is integrated into the CCO, and the encryption management module tail end is integrated into the STA.

[0017] Furthermore, the CCO communicates with the STA via a power carrier.

[0018] Furthermore, the head-end control module interacts with the encryption chip via SPI.

[0019] Furthermore, the side control module interacts with the head-end control module via UART.

[0020] Furthermore, the end-side control module interacts with the tail-end control module via UART.

[0021] Beneficial effects:

[0022] The present invention manages the encryption chip and communication module (STA and CCO) through the MCU, decoupling the encryption service from the edge device, so that the low-voltage area encryption method can be arbitrarily configured, that is, the type of encryption method and whether encryption is required, without being noticed by the low-voltage area service, which greatly reduces the difficulty of upgrading and transforming the existing non-encrypted low-voltage areas and the problems caused by the mismatch between the encryption methods of the edge equipment and the end equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 is a system block diagram of the present invention;

[0024] Figure 2 is a flow chart of the present invention;

[0025] Figure 3 It is the encrypted communication flow chart of the present invention.

[0026] Figure 4 It is a flow chart of interaction between the encryption management module head end and the encryption management module tail end of the present invention. DETAILED DESCRIPTION

[0027] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in many forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this application will be comprehensive and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted.

[0028] In addition, described feature, structure or characteristic can be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present application. However, those skilled in the art will appreciate that the technical scheme of the present application can be put into practice without one or more of the specific details, or other methods, components, devices, steps, etc. can be adopted. In other cases, known methods, devices, realizations or operations are not shown or described in detail to avoid blurring the various aspects of the application.

[0029] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities may be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0030] The flowcharts shown in the accompanying drawings are only exemplary and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps can be decomposed, and some operations / steps can be combined or partially combined, so the actual execution order may change according to actual conditions.

[0031] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0032] Before describing the embodiments of the present application, some terms or concepts involved in the embodiments of the present application are explained.

[0033] UART: UART (Universal Asynchronous Receiver-Transmitter) is an asynchronous serial communication interface used to send and receive data between computers and other devices. It uses a separate line to transmit data and clock signals, and an additional line for synchronization.

[0034] MCU: MCU (Microcontroller Unit) is a controller, also known as a single-chip microcomputer, which integrates multiple functional modules such as CPU, RAM, ROM, I / O interface and peripherals, and can realize functions such as data processing, timing control, communication, and interrupt processing.

[0035] SPI: SPI (Serial Peripheral Interface) is a synchronous serial communication interface bus used to transmit data and address information simultaneously on one bus. SPI uses four wires for communication: SCK (Serial Clock), MOSI (Master Out Slave In), MISO (Master In Slave Out), and SS (Slave Select). During SPI communication, the master device controls the clock signal and reads or writes data by sending commands to the slave device.

[0036] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0037] Example

[0038] A quantum encryption system for low-voltage area data based on HPLC networking, such as Figures 1 to 3 As shown, it includes an edge side, an end side and an encryption management module, the encryption management module includes an encryption management module head end and an encryption management module tail end, the edge side includes an edge side control module, the end side includes an end side control module, the encryption management module head end includes a head end control module, a head end communication module and an encryption chip, the encryption management module tail end includes a tail end control module, a tail end communication module and an encryption chip, a link is established between the edge side and the end side through the encryption management module to perform data communication, and the communication process is as follows:

[0039] S100, the encryption management module head end and the encryption management module tail end perform encryption information exchange and authentication through a communication module.

[0040] S200, the encryption management module head end receives a business data request from the edge side, the business data request interacts with the encryption chip to encrypt the data, and then sends it out through the head end communication module.

[0041] S300, the encryption management module receives the encryption information from the head-end communication module at the tail end through the tail-end communication module, and interacts the encryption information with the encryption chip to decrypt the data, and transmits the decrypted plaintext data request to the end side.

[0042] S400, the end side processes the plaintext data request to generate a plaintext reply, and sends the plaintext reply to the encryption management module end, encrypts it through the encryption chip, and then sends it out through the end communication module.

[0043] S500, the encryption management module head end receives the encryption information from the tail end communication module through the head end communication module, and interacts with the encryption chip to decrypt the encrypted information, and transmits the decrypted data reply to the edge side.

[0044] Specifically, in this embodiment, in order to better realize the confidentiality and security of data information in the low-voltage area, a flexibly replaceable encryption management module for the low-voltage area based on HPLC networking is proposed, including an encryption management module head end and an encryption management module tail end, thereby avoiding adding encryption chips to the edge and end side devices for encryption processing, so that the edge and end side can focus more on their own function realization. Specifically, the encryption management module head end interacts with the edge side, mainly processing encryption information, such as certificate file reception, etc., and the encryption management module tail end interacts with the end side device, and also mainly processes encryption information, such as issuing certificate file information, etc.

[0045] The encryption information exchange and authentication between the encryption management module head end and the encryption management module tail end include the following steps: Figure 4 As shown,

[0046] S101, the encryption management module headend sends the network access information to the encryption management module headend, and the encryption management module headend processes the random number signature information;

[0047] S102, the encryption management module head end issues certificate information, and the encryption management module tail end receives and stores the certificate;

[0048] S103, the encryption management module tail end confirms the certificate information, and the encryption management module head end generates a key.

[0049] In this embodiment, the edge-side control module, the end-side control module, the head-end control module, and the tail-end control module all adopt MCU.

[0050] In this embodiment, the encryption management module head end is integrated into the CCO, and the encryption management module tail end is integrated into the STA. The head end communication module realizes the communication function through the CCO, and the tail end communication module realizes the communication function through the STA, and the CCO and the STA communicate through the power carrier.

[0051] In this embodiment, the head-end control module interacts with the encryption chip via SPI.

[0052] In this embodiment, the side control module interacts with the head-end control module via UART, and the end-side control module interacts with the tail-end control module via UART.

[0053] The quantum encryption system for realizing low-voltage area data based on HPLC networking in the present invention is composed of an MCU and an encryption chip, and the encryption management module is integrated in CCO and STA. For the encryption transformation and upgrade of the existing area, the CCO and STA with the encryption management module can be directly replaced. For the new area, the CCO and STA with the encryption management module can be directly adapted. The later maintenance processing only needs to be performed on the communication module.

[0054] Although the embodiments of the present invention are described in the specification, these embodiments are only for reference and should not limit the protection scope of the present invention. Various omissions, substitutions and changes within the scope of the present invention should be included in the protection scope of the present invention.

Claims

1. A quantum encryption system for low-voltage area data based on HPLC networking, characterized by: It includes an edge side, an end side and an encryption management module, the encryption management module includes an encryption management module head end and an encryption management module tail end, the edge side includes an edge side control module, the end side includes an end side control module, the encryption management module head end includes a head end control module, a head end communication module and an encryption chip, the encryption management module tail end includes a tail end control module, a tail end communication module and an encryption chip, a link is established between the edge side and the end side through the encryption management module to perform data communication, and the communication process is as follows: The encryption management module head end and the encryption management module tail end perform encryption information exchange and authentication through the communication module; The encryption management module head end receives the service data request from the edge side, and the service data request interacts with the encryption chip to encrypt the data, and then sends it out through the head end communication module; The tail end of the encryption management module receives the encrypted information from the head end communication module through the tail end communication module, and interacts with the encryption chip to decrypt the encrypted information, and transmits the decrypted plain text data request to the end side; The end side processes the plaintext data request to generate a plaintext reply, and sends the plaintext reply to the encryption management module tail end, encrypts it through the encryption chip, and then sends it out through the tail end communication module; The head end of the encryption management module receives the encryption information from the tail end communication module through the head end communication module, and interacts with the encryption chip to decrypt the encrypted information, and the decrypted data is sent back to the side.

2. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1, characterized in that: The encryption information exchange and authentication between the encryption management module head end and the encryption management module tail end includes the following steps: The encryption management module headend sends the network access information to the encryption management module headend, and the encryption management module headend processes the random number signature information; The encryption management module headend issues certificate information, and the encryption management module tailend receives and stores the certificate; The encryption management module tail end confirms the certificate information, and the encryption management module head end generates the key.

3. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1 is characterized in that: The edge control module, the end control module, the head-end control module, and the tail-end control module all use MCU.

4. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1 is characterized in that: The encryption management module head end is integrated in the CCO, and the encryption management module tail end is integrated in the STA.

5. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 4 is characterized in that: The CCO and the STA communicate with each other via a power carrier.

6. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1 is characterized in that: The head-end control module interacts with the encryption chip via SPI.

7. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1 is characterized in that: The side control module interacts with the head-end control module via UART.

8. The quantum encryption system for realizing low-voltage area data based on HPLC networking according to claim 1 is characterized in that: The end-side control module interacts with the tail-end control module via UART.

Images