Authentication system and method of power distribution intelligent anti-misoperation terminal

Abstract

The invention discloses an authentication system and method for a power distribution intelligent anti-misoperation terminal. The system comprises a multi-factor authentication unit which is used for biological feature recognition, equipment authentication and password authentication when the power distribution intelligent anti-error terminal is authenticated; the block chain network unit is used for deploying block chain nodes; the authentication information and the operation information of the power distribution intelligent anti-misoperation terminal are uploaded to a block chain; the exception handling and log recording unit is used for handling exceptions during authentication and operation of the intelligent power distribution anti-misoperation terminal; and generating a log record according to information generated during authentication and operation of the intelligent power distribution anti-misoperation terminal. According to the technical scheme, the advantages of multi-factor authentication and the blockchain technology are combined, accurate verification of the user identity and strict control of the authority are achieved, meanwhile, the authenticity and non-tampering performance of the data are ensured, and the safety problem of the power distribution intelligent anti-misoperation terminal is solved.

Description

Technical Field

[0001] The present invention relates to the technical field of power distribution, and in particular to an authentication system and method for a power distribution intelligent anti-error terminal. Background Art

[0002] As the level of intelligence and automation of power systems continues to improve, distribution intelligent error-proof terminals, as an important part of the power system, undertake the key task of ensuring safe, reliable and efficient power operation.

[0003] Traditional authentication methods for intelligent power distribution terminals mainly rely on a single authentication method, such as username and password. However, this method has many security risks. Usernames and passwords are easy to guess or crack, allowing unauthorized users to access and operate the terminal, thus causing security incidents.

[0004] In summary, in order to solve the safety problem of the intelligent anti-error terminal for power distribution, an innovative authentication method is needed to solve the safety problem of the intelligent anti-error terminal for power distribution. Summary of the invention

[0005] The present invention provides an authentication system and method for an intelligent power distribution anti-error terminal, which solves the safety problem of the intelligent power distribution anti-error terminal.

[0006] According to one aspect of the present invention, there is provided an authentication system for a power distribution intelligent anti-error terminal, comprising:

[0007] Multi-factor authentication unit, used for biometric identification, device authentication and password authentication during authentication of intelligent anti-mistake terminals for power distribution;

[0008] A blockchain network unit, used to deploy blockchain nodes; upload the authentication information and operation information of the power distribution intelligent anti-error terminal to the blockchain;

[0009] The exception handling and log recording unit is used to handle the abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generate log records according to the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

[0010] Optionally, the multi-factor authentication unit includes:

[0011] At least one biometric feature recognition module, wherein each of the biometric feature recognition modules corresponds to a biometric feature recognition method, and is used to perform feature comparison with the authentication biometric feature information provided by the user during authentication by using at least one pre-recorded biometric feature information, and determine that the biometric feature recognition result is passed when the comparison result is consistent;

[0012] A device authentication module, used for authenticating the device to be authenticated provided by the user when the biometric identification result is passed, and determining that the device authentication result is passed when the device to be authenticated has a corresponding relationship with the biometric information and is paired with the power distribution intelligent anti-error terminal;

[0013] The password verification module is used to authenticate the password input by the user when both the biometric recognition result and the device authentication result are passed, and determine that the authentication is passed when the authentication is passed.

[0014] Optionally, the blockchain network unit includes:

[0015] A blockchain node deployment module, used to deploy blockchain nodes between the power distribution intelligent anti-error terminal and an external server to form a blockchain network;

[0016] An authentication information uploading module is used to encrypt the user's biometric information, device authentication information and password verification results and upload them to the blockchain network when the user is authenticated;

[0017] The operation record chain module is used to upload the user's operation record on the power distribution intelligent error prevention terminal to the blockchain network.

[0018] Optionally, the authentication information chain module is used to pre-process the biometric information, the device authentication information and the password verification result to construct a first transaction including a user unique identifier, a biometric information hash value, a device authentication information hash value and a password verification result;

[0019] The first transaction is signed with a private key and uploaded to the blockchain network via a P2P network.

[0020] Optionally, the operation record on-chain module is used to perform pre-processing and construct a second transaction after the operation record is generated;

[0021] The second transaction is signed with a private key and uploaded to the blockchain network, so that the nodes in the blockchain network perform consensus processing and store the second transaction in the blockchain.

[0022] Optionally, the exception handling and log recording unit is used to perform fault handling when a fault occurs in the power distribution intelligent error prevention terminal during the operation of the user; when the upload of the operation record to the blockchain network fails, perform a preset failure handling process.

[0023] Optionally, the exception handling and logging unit is used to generate a log record using the following information:

[0024] Authentication related information, including user identity information, authentication time, authentication method, authentication result and authentication device information;

[0025] Operation-related information, including operation time, operation type, operation object, operation result, and terminal status during the operation.

[0026] Exception handling information, including the time when the exception occurred, the type of exception that occurred, and the handling result.

[0027] According to another aspect of the present invention, there is provided an authentication method for a power distribution intelligent anti-error terminal, comprising:

[0028] The multi-factor authentication unit performs biometric identification, device authentication, and password authentication during the authentication of the intelligent anti-mistake terminal for power distribution;

[0029] The blockchain network unit deploys blockchain nodes; the authentication information and operation information of the power distribution intelligent anti-error terminal are uploaded to the blockchain;

[0030] The exception handling and log recording unit handles the abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generates log records according to the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

[0031] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0032] At least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the authentication method of the power distribution intelligent anti-error terminal described in any embodiment of the present invention.

[0033] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the authentication method of the power distribution intelligent anti-error terminal described in any embodiment of the present invention when executed.

[0034] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the authentication method of the power distribution intelligent anti-error terminal described in any embodiment of the present invention is implemented.

[0035] The technical solution of the embodiment of the present invention combines the advantages of multi-factor authentication and blockchain technology to achieve accurate verification of user identity and strict control of permissions, while ensuring the authenticity and non-tamperability of data to solve the security problem of the intelligent anti-error terminal for power distribution.

[0036] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0038] Figure 1 It is a structural schematic diagram of an authentication system for a power distribution intelligent anti-error terminal provided in Embodiment 1 of the present invention;

[0039] Figure 2 It is a structural diagram of a multi-factor authentication unit provided in Embodiment 1 of the present invention;

[0040] Figure 3 This is a schematic diagram of the structure of a blockchain network unit provided in Embodiment 1 of the present invention;

[0041] Figure 4 This is a flow chart of an authentication method for a power distribution intelligent anti-error terminal provided in Embodiment 2 of the present invention;

[0042] Figure 5 It is a structural schematic diagram of an electronic device for implementing the authentication method of the power distribution intelligent anti-error terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0043] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0044] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0045] Embodiment 1

[0046] Figure 1 1 is a schematic diagram of the structure of an authentication system for a power distribution intelligent anti-error terminal provided in the first embodiment of the present invention. Figure 1 As shown, the system includes:

[0047] The multi-factor authentication unit 110 is used for biometric identification, device authentication and password authentication during authentication of the intelligent anti-mistake terminal for power distribution.

[0048] The blockchain network unit 120 is used to deploy blockchain nodes; and upload the authentication information and operation information of the power distribution intelligent anti-error terminal to the blockchain.

[0049] The exception handling and log recording unit 130 is used to handle abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generate log records based on the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

[0050] Figure 2 Schematic diagram of a multi-factor authentication unit provided in Embodiment 1 of the present invention. Figure 2 As shown, the multi-factor authentication unit 200 includes:

[0051] At least one biometric identification module 210, wherein each biometric identification module corresponds to a biometric identification method, and is used to perform feature comparison on the authentication biometric information provided by the user during authentication through at least one pre-entered biometric information, and determine that the biometric identification result is passed when the comparison result is consistent.

[0052] The device authentication module 220 is used to authenticate the device to be authenticated provided by the user when the biometric identification result is passed. When the device to be authenticated has a corresponding relationship with the biometric information and is paired with the power distribution intelligent anti-error terminal, the device authentication result is determined to be passed.

[0053] The password verification module 230 is used to authenticate the password input by the user when both the biometric identification result and the device authentication result are passed, and determine that the authentication is passed when the authentication is passed.

[0054] Integrate biometric recognition modules on the intelligent power distribution anti-error terminal, including but not limited to fingerprint recognition sensors, facial recognition cameras, etc., to accurately collect users' biometric information. When users authenticate, the biometric recognition process is automatically triggered. Users place their fingers on the fingerprint recognition sensor or face the facial recognition camera to start collecting biometric information.

[0055] The collected biometric information first goes through the preprocessing stage. For fingerprint images, image enhancement is performed to remove noise interference, highlight the ridge and valley features of the fingerprint, and then the key feature point information is extracted through the feature extraction algorithm; for facial images, facial feature point positioning, image normalization and other operations are performed to extract facial geometric features, texture features, etc. The preprocessed feature information will be converted into a digital format for subsequent comparison and verification.

[0056] Biometric data is encrypted and stored locally. Advanced encryption algorithms, such as AES encryption algorithm, are used to encrypt biometric templates to ensure data security during storage and prevent biometric information from being illegally obtained and abused. Encrypted biometric templates are stored in a secure storage area of ​​the terminal and can only be accessed and decrypted by authorized programs and operations.

[0057] The preprocessed biometric information is compared with the user's biometric template stored in the system. The comparison algorithm calculates the similarity between the collected biometrics and the template based on techniques such as feature point matching or feature vector similarity calculation. For example, in fingerprint recognition, the location, direction, and type of fingerprint feature points are compared to calculate the similarity score; in facial recognition, the distance of facial feature vectors is compared.

[0058] If the similarity exceeds the preset threshold, the user's identity verification is considered to have passed; otherwise, the identity verification is considered to have failed. The verification results will be fed back to the user in a timely manner, and relevant information will be recorded in the log for subsequent auditing and analysis.

[0059] After biometric identification, users need to use specific authentication devices (such as smart bracelets, mobile phone apps, etc.) to pair and authenticate with the power distribution intelligent anti-error terminal. The authentication device needs to be pre-registered in the system. During the registration process, users need to provide personal identity information (such as name, ID number, contact information, etc.) and bind the authentication device to their user account. At the same time, the system will record the unique identifier of the authentication device (such as device serial number, MAC address, etc.) and bind the user's biometric information for subsequent device identification and authentication.

[0060] When using an authentication device for authentication, the user first needs to enable the corresponding communication function on the authentication device, such as Bluetooth or NFC (near field communication). After enabling, the authentication device begins to search for nearby intelligent power distribution anti-misuse terminals. When the terminal is turned on, it will periodically send out specific signals or broadcasts, including the terminal's identification information. When the authentication device searches for the target terminal, the user confirms the establishment of the connection on the authentication device.

[0061] After the connection is successfully established, when the user attempts to access the intelligent power distribution error prevention terminal or performs an operation that requires authentication, the terminal will send an identity authentication request to the authentication device. After receiving the request, the authentication device prompts the user to perform an identity confirmation operation. The user can perform identity authentication by entering a preset password or performing biometric recognition (such as fingerprint recognition, facial recognition, etc., if the authentication device supports it). The authentication device encrypts the verification information and sends it back to the intelligent power distribution error prevention terminal.

[0062] After receiving the verification information, the terminal decrypts and verifies it. If the verification information is correct and matches the preset user information and device information, the user identity authentication is considered to be successful. Otherwise, the identity authentication is considered to have failed and the user's access or operation request is denied. At the same time, the terminal records the relevant information of the device authentication into the log, including the authentication time, authentication device information, authentication results, etc.

[0063] After successful biometric identification and device authentication, the user is required to enter the preset password for final verification. The password is stored and transmitted using a high-strength encryption algorithm to ensure the security of the password.

[0064] The system supports regular password changes and complexity requirements. Administrators can set password validity periods, for example, forcing users to change their passwords every three months. At the same time, password complexity is regulated, requiring passwords to contain a combination of letters, numbers, and special characters, and to meet certain requirements for length (such as more than 8 characters) to improve password security and reduce the risk of brute force cracking. Information related to password changes and complexity settings will also be recorded in the system log for easy management and auditing.

[0065] Figure 3 This is a schematic diagram of the structure of a blockchain network unit provided by Embodiment 1 of the present invention. Figure 3 As shown, the blockchain network unit 300 includes:

[0066] The blockchain node deployment module 310 is used to deploy blockchain nodes between the power distribution intelligent anti-error terminal and the external server to form a blockchain network;

[0067] The authentication information uploading module 320 is used to encrypt the user's biometric information, device authentication information and password verification results and upload them to the blockchain network when the user is authenticated;

[0068] The operation record uploading module 330 is used to upload the user's operation record in the power distribution intelligent error prevention terminal to the blockchain network.

[0069] Deploy blockchain nodes between the intelligent power distribution error prevention terminal and the remote server to form a blockchain network. Blockchain nodes are responsible for storing and verifying the user's authentication information and operation records. Blockchain nodes adopt a distributed architecture to ensure redundant storage and security of data. At the same time, the blockchain network adopts consensus algorithms (such as PoW, PoS, etc.) to ensure the consistency and non-tamperability of data. When the user authenticates, the intelligent power distribution error prevention terminal uploads the user's biometric information, device authentication information, password verification results and other authentication information to the blockchain network for storage and verification. When the user operates the intelligent power distribution error prevention terminal, the system uploads the operation records (such as operation time, operation type, operation results, etc.) to the blockchain network for storage and traceability.

[0070] In the embodiment of the present invention, the authentication information chain module is used to pre-process the biometric information, the device authentication information and the password verification result to construct a first transaction including the user unique identifier, the biometric information hash value, the device authentication information hash value and the password verification result;

[0071] The first transaction is signed with a private key and uploaded to the blockchain network through the P2P network.

[0072] The intelligent anti-error terminal for power distribution builds a transaction based on the pre-processed authentication information. The transaction structure includes the user's unique identifier, which is used to uniquely identify the user in the blockchain network; the hash value of the biometric information, which is calculated by the hash algorithm, which can represent the characteristics of the biometric information and protect the user's privacy; the hash value of the device authentication information, which is hashed to ensure that the information is secure and cannot be tampered with; the password verification result, which clarifies the password verification in this authentication. In addition, the transaction may also include a timestamp to record the generation time of the authentication information, as well as other necessary auxiliary information (such as the transaction sequence number, etc.) to ensure the integrity and traceability of the transaction.

[0073] The system uses the private key to sign the constructed transaction. The private key is the identity of the system in the blockchain network. The signing process uses asymmetric encryption technology to ensure the integrity and authenticity of the transaction. The signed transaction is non-repudiable, that is, only the terminal with the corresponding public key (paired with the private key) can generate the signature, which also ensures that the transaction has not been tampered with during transmission. The signed transaction will be packaged into a data packet and prepared to be uploaded to the blockchain network.

[0074] The data packet is uploaded to the accounting node in the blockchain network through the P2P (peer-to-peer) network. The P2P network ensures the rapid dissemination and decentralized storage of transaction information, improving the reliability and anti-attack capability of the system. After receiving the transaction data packet, the accounting node first verifies the signature of the transaction to confirm the source and integrity of the transaction. If the signature verification passes, the accounting node puts the transaction into the local transaction pool and waits for subsequent verification and consensus processing to ensure the validity and legitimacy of the transaction.

[0075] The accounting nodes in the blockchain network conduct a comprehensive verification of the uploaded transactions. The verification includes checking whether the signature of the transaction is valid, that is, verifying whether the signature is generated by the terminal with the corresponding private key through the public key; checking whether the structure of the transaction conforms to the format specified by the blockchain network, ensuring that the transaction contains the necessary information and is in the correct format; comparing the user identifier, biometric information hash value, device authentication information hash value and password verification results in the transaction to see if they meet the logic and security requirements, and preventing maliciously constructed transactions from entering the blockchain.

[0076] If the transaction is verified, the blockchain network starts the consensus mechanism (such as proof of work PoW, proof of stake PoS, etc.). Taking PoW as an example, the accounting nodes need to compete for the right to record by calculating complex mathematical problems (hash puzzles). The first node to solve the problem will obtain the right to record. Other nodes verify whether the calculation result of the node is correct. If it is correct, all nodes reach a consensus on the transaction content, ensuring that all nodes in the blockchain network record the same transaction information and maintaining the consistency and immutability of the data. Once a consensus is reached, the transaction is added to the end of the blockchain to form a new block. In addition to the authentication transaction information, the block also contains the hash value of the previous block. The hash chain connects each block to form an immutable blockchain data structure. The new block will be broadcast in the blockchain network, and all nodes will synchronously update the local blockchain copy, so that the transaction information is permanently stored in the blockchain network, realizing the distributed and decentralized storage of authentication information, and providing a reliable data source for subsequent queries and verifications.

[0077] In the embodiment of the present invention, the operation record chaining module is used to perform preprocessing and construct a second transaction after generating the operation record;

[0078] After signing the second transaction with the private key, it will be uploaded to the blockchain network, so that the nodes in the blockchain network can perform consensus processing and store the second transaction in the blockchain.

[0079] When users operate through the intelligent power distribution error prevention terminal, the system will capture and record relevant information of the operation in real time. This information includes but is not limited to the operation time, operation type (such as switch operation, parameter setting, etc.), operation object (such as specific power distribution equipment), operation result (such as success, failure, abnormality, etc.) and related user information (such as user ID, user name, etc.).

[0080] The system will pre-process the collected operation records, including data cleaning, format conversion, timestamp addition and other steps to ensure the accuracy and consistency of the data. At the same time, in order to protect user privacy and data security, the system will encrypt sensitive information.

[0081] The system constructs a transaction based on the preprocessed operation record. This transaction contains all relevant information of the operation record and is packaged in a format that the blockchain network can recognize and process.

[0082] Before the transaction is uploaded, the system will use the private key to sign the transaction to ensure the integrity and authenticity of the transaction. At the same time, the system will also verify the transaction to ensure that it complies with the transaction rules and format requirements of the blockchain network.

[0083] The signed and verified transactions will be uploaded to the blockchain network through the P2P network to ensure that the transactions can be quickly propagated to each node in the blockchain network. The nodes in the blockchain network will conduct consensus processing on the uploaded transactions to ensure that all nodes reach an agreement on the content of the transaction.

[0084] In an embodiment of the present invention, the exception handling and log recording unit is used to perform fault handling when a fault occurs in the power distribution intelligent error prevention terminal during the operation of the user; when the upload of the operation record to the blockchain network fails, a preset failure handling process is performed.

[0085] When the biometric recognition module fails to collect biometric features (such as fingerprints, facial images, etc.) due to sensor failure, poor image quality (such as blurred fingerprints, facial occlusion, etc.), or feature comparison similarity not reaching the preset threshold, the system can take the following measures:

[0086] Provide users with clear and explicit error prompts to inform them of the reason why biometric recognition failed, such as "Fingerprint recognition failed, please reposition your finger to ensure that the fingerprint is clear and complete" or "Face recognition failed, the face image is not clear, please adjust the posture or lighting and try again."

[0087] Enable the retry mechanism to allow users to re-perform biometric recognition operations within a certain number of times (such as 3 times), and set an appropriate interval time (such as 5 seconds) between each retry to avoid system overload or misjudgment due to frequent user operations.

[0088] If the user successfully passes the biometric recognition within the number of retries, the subsequent authentication process will continue; if it fails after the number of retries, the system will terminate the authentication process and record the detailed failure reason and related information (such as time, location, device number, user ID, etc.) in the log. At the same time, further measures can be taken according to the system settings, such as locking the terminal for a certain period of time, notifying the administrator, etc.

[0089] During the pairing or authentication process between the authentication device (such as a smart bracelet, mobile phone APP) and the power distribution intelligent anti-error terminal, if there is a communication failure (such as Bluetooth connection interruption, signal interference, etc.), the device is not registered or the registration information does not match, the device authentication information verification fails, etc., resulting in device authentication failure, the system can perform the following operations:

[0090] Feedback information about device authentication failure to the user, prompting the user to check the connection status between the authentication device and the terminal, such as "Bluetooth connection failed, please make sure the smart bracelet is turned on and within the effective range, and then try pairing again" or "Device authentication failed, please confirm that the device you are using has been correctly registered in the system."

[0091] Guide the user to perform troubleshooting steps, such as restarting the authentication device, checking the terminal Bluetooth settings, etc. If the problem is still not solved, the system will try to re-establish the communication connection or re-initiate the authentication request, which can be repeated a certain number of times (such as 2 times).

[0092] If the device authentication fails after multiple attempts, the system terminates the authentication process, records the detailed failure information in the log, and may take measures such as limiting the number of subsequent authentication attempts for the device and sending alerts to relevant technical support personnel to handle the device authentication problem in a timely manner.

[0093] Password verification failure processing: When the password entered by the user does not match the preset password, the system can perform the following operations:

[0094] Display a password error prompt to the user to inform the user that the password is incorrect, and remind the user to pay attention to the password case, whether the keyboard caps lock is turned on, and other factors that may lead to password input errors, such as "The password is incorrect, please re-enter the password, and note that the password is case-sensitive."

[0095] The time when password verification failed, user account and other information are recorded in the log. If the password is entered incorrectly for multiple times (such as 5 times) in a row, the system can temporarily lock the user account for a certain period of time (such as 15 minutes) to prevent brute force password cracking, and at the same time prompt the user that the account has been locked and the unlocking time.

[0096] During the period when the user account is locked, further authentication requests from the user will be rejected until the lockout time ends. The user can re-verify the password after unlocking. If the password verification is successful, the subsequent authentication process will continue; if it fails again, the above process will be repeated.

[0097] When the user is operating the intelligent power distribution error prevention terminal (such as switch operation, parameter setting, etc.), if the terminal freezes, freezes, or becomes unresponsive, the system can take the following measures:

[0098] First, try to automatically restart the terminal-related operation modules or processes to restore normal operation of the terminal. At the same time, display a prompt message "The system is processing, please wait" to the user to avoid repeated operations by the user.

[0099] If the automatic restart operation module or process fails to restore normal operation, the system will record detailed fault information (including operation type, operation time, terminal status, etc.) in the log and send an alarm notification to the administrator to inform him of the terminal operation failure so that the administrator can perform on-site maintenance or remote diagnosis in time.

[0100] When uploading operation records to the blockchain network, if the upload fails due to network interruption, busy blockchain nodes, data format errors, etc., the system can perform the following operations:

[0101] Feedback to the user about the failure to upload the operation record, inform the user that the operation record failed to be successfully stored, and prompt the user with possible reasons, such as "network connection is abnormal, operation record upload failed, please check the network settings and try again" or "blockchain node is busy, uploading operation record is blocked, please try again later."

[0102] The system automatically performs a certain number of retries (such as 3 times), with an appropriate interval (such as 10 seconds) between each retry, and tries to upload the operation record again after adjusting the network parameters or optimizing the data format to increase the probability of successful upload.

[0103] If the upload fails after multiple retries, the system will temporarily store the operation record in the local cache and continue to monitor the network status and blockchain node status. Once conditions permit (such as the network returns to normal, the blockchain node load is reduced), the operation record will be taken out from the local cache for upload to ensure the integrity and traceability of the operation record. At the same time, the detailed upload failure information and retry process will be recorded in the log for subsequent analysis and troubleshooting.

[0104] In an embodiment of the present invention, the exception handling and log recording unit is used to generate a log record through the following information:

[0105] Authentication related information, including user identity information, authentication time, authentication method, authentication result and authentication device information;

[0106] Operation-related information, including operation time, operation type, operation object, operation result, and terminal status during the operation.

[0107] Exception handling information, including the time when the exception occurred, the type of exception that occurred, and the handling result.

[0108] The system records all key information during the authentication and operation process, including but not limited to the following:

[0109] Authentication-related information: user identity information (such as user name, user ID, biometric template identification, etc.), authentication time, authentication method (details of each link such as biometric recognition, device authentication, password verification, etc.), authentication result (success or failure and reason for failure), authentication device information (device model, device number, device connection status, etc.).

[0110] Operation-related information: operation time, operation type (specific description of operation behavior, such as closing operation, adjusting voltage parameters, etc.), operation object (name and number of the distribution equipment involved), operation result (success, failure, abnormality and other details), terminal status during operation (such as system load, network connection status, etc.).

[0111] Exception handling information: the time and type of the exception (specific type of authentication exception or operation exception), handling process (measures taken, number of retries, prompt information, etc.), and handling results (whether the exception is resolved, whether it affects subsequent processes, etc.).

[0112] Log storage and management: Log records are stored in a safe and reliable way, such as encrypted storage in a local database or dedicated storage device to prevent log information from being tampered with or leaked. At the same time, the system supports classified management of log records, and stores them according to time, user, operation type and other dimensions for quick query and retrieval.

[0113] The system provides log query and export functions. Authorized personnel (such as administrators and security auditors) can query log records of specific time periods, specific users or specific operation types as needed to conduct troubleshooting, security audits, performance analysis, etc. By analyzing log records, potential security risks, performance bottlenecks or user operation habits of the system can be discovered, providing a basis for system optimization and improvement. For example, by analyzing the reasons for frequent authentication failures, targeted security measures can be strengthened or the authentication process can be improved; according to the operation records, the frequency of users' use of different functions can be analyzed to optimize the terminal operation interface design, etc.

[0114] The present invention aims to design an authentication system for power distribution intelligent anti-error terminal based on multi-factor authentication and blockchain technology. By combining biometric recognition, device authentication and blockchain technology, accurate verification of user identity and strict control of authority can be achieved to ensure the safe operation of the power distribution intelligent anti-error terminal.

[0115] Embodiment 2

[0116] Figure 4 FIG. 1 is a flow chart of an authentication method for a power distribution intelligent anti-error terminal provided in Embodiment 2 of the present invention. Figure 4 As shown, the method includes:

[0117] S410, the multi-factor authentication unit performs biometric identification, device authentication and password authentication during authentication of the power distribution intelligent anti-error terminal.

[0118] S420, the blockchain network unit deploys blockchain nodes; and uploads the authentication information and operation information of the power distribution intelligent anti-error terminal to the blockchain.

[0119] S430, the exception processing and log recording unit processes the abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generates a log record according to the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

[0120] As the information interaction, execution process and other contents between the units in the above method are based on the same concept as those in the first embodiment of the present invention, the specific contents can be found in the description of the first embodiment of the present invention and will not be repeated here.

[0121] Embodiment 3

[0122] Figure 5A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0123] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0124] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0125] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the authentication method of the intelligent anti-error terminal of power distribution.

[0126] In some embodiments, the authentication method of the intelligent power distribution error prevention terminal can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the authentication method of the intelligent power distribution error prevention terminal described above can be executed. Alternatively, in other embodiments, the processor 11 can be configured to execute the authentication method of the intelligent power distribution error prevention terminal in any other appropriate manner (for example, by means of firmware).

[0127] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0128] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0129] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0130] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0131] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0132] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0133] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0134] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An authentication system for intelligent anti-error terminal of power distribution, characterized in that: include: Multi-factor authentication unit, used for biometric identification, device authentication and password authentication during authentication of intelligent anti-mistake terminals for power distribution; Blockchain network unit, used to deploy blockchain nodes; Upload the authentication information and operation information of the power distribution intelligent anti-error terminal to the blockchain; The exception handling and log recording unit is used to handle the abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generate log records according to the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

2. The system according to claim 1, characterized in that The multi-factor authentication unit comprises: At least one biometric feature recognition module, wherein each of the biometric feature recognition modules corresponds to a biometric feature recognition method, and is used to perform feature comparison with the authentication biometric feature information provided by the user during authentication by using at least one pre-recorded biometric feature information, and determine that the biometric feature recognition result is passed when the comparison result is consistent; A device authentication module, used for authenticating the device to be authenticated provided by the user when the biometric identification result is passed, and determining that the device authentication result is passed when the device to be authenticated has a corresponding relationship with the biometric information and is paired with the power distribution intelligent anti-error terminal; The password verification module is used to authenticate the password input by the user when both the biometric recognition result and the device authentication result are passed, and determine that the authentication is passed when the authentication is passed.

3. The system according to claim 1, characterized in that The blockchain network unit includes: A blockchain node deployment module, used to deploy blockchain nodes between the power distribution intelligent anti-error terminal and an external server to form a blockchain network; An authentication information uploading module is used to encrypt the user's biometric information, device authentication information and password verification results and upload them to the blockchain network when the user is authenticated; The operation record chain module is used to upload the user's operation record on the power distribution intelligent error prevention terminal to the blockchain network.

4. The system according to claim 3, characterized in that The authentication information chain module is used to pre-process the biometric information, the device authentication information and the password verification result to construct a first transaction including a user unique identifier, a biometric information hash value, a device authentication information hash value and a password verification result; The first transaction is signed with a private key and uploaded to the blockchain network via a P2P network.

5. The system according to claim 3, characterized in that The operation record chaining module is used to perform preprocessing and construct a second transaction after the operation record is generated; The second transaction is signed with a private key and uploaded to the blockchain network, so that the nodes in the blockchain network perform consensus processing and store the second transaction in the blockchain.

6. The system according to claim 1, characterized in that The exception handling and log recording unit is used to perform fault handling when a fault occurs in the power distribution intelligent error prevention terminal during the operation of the user; when the upload of the operation record to the blockchain network fails, a preset failure handling process is performed.

7. The system according to claim 1, characterized in that The exception handling and logging unit is used to generate log records based on the following information: Authentication related information, including user identity information, authentication time, authentication method, authentication result and authentication device information; Operation-related information, including operation time, operation type, operation object, operation result, and terminal status during the operation. Exception handling information, including the time when the exception occurred, the type of exception that occurred, and the handling result.

8. An authentication method for a power distribution intelligent anti-error terminal, characterized in that: include: The multi-factor authentication unit performs biometric identification, device authentication, and password authentication during the authentication of the intelligent anti-mistake terminal for power distribution; The blockchain network unit deploys blockchain nodes; Upload the authentication information and operation information of the power distribution intelligent anti-error terminal to the blockchain; The exception handling and log recording unit handles the abnormal situations during the authentication and operation of the power distribution intelligent anti-error terminal; and generates log records according to the information generated during the authentication and operation of the power distribution intelligent anti-error terminal.

9. An electronic device, characterized in that: The electronic device comprises: At least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the authentication method of the intelligent anti-error terminal for power distribution as described in claim 8.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to implement the authentication method of the power distribution intelligent anti-error terminal according to claim 8 when the processor executes them.

11. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the authentication method of the intelligent anti-error terminal for power distribution according to claim 8 is implemented.

Images