Intelligent micro network communication method based on NHRP protocol and intelligent micro network system
By adopting the NHRP protocol communication method in the smart microgrid and establishing a secure tunnel and keep-alive mechanism, the communication isolation and security issues in the smart microgrid are solved, and secure data transmission and hierarchical control are achieved.
Patent Information
- Application Number
- CN202510229232.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-02-28
- Publication Date
- 2025-10-17
- Estimated Expiration
- 2045-02-28
AI Technical Summary
The communication isolation between units in the smart microgrid is insufficient and dynamic boundary security isolation is difficult, which affects the communication security.
A communication method based on the NHRP protocol is adopted to achieve secure isolation and information interaction between the client and server in the smart microgrid by establishing permanent and temporary tunnels. NHRP registration request and address resolution request messages are used to establish and manage tunnels, and a keep-alive mechanism is combined to ensure the effectiveness and security of the tunnels.
It achieves secure isolation between units in the smart microgrid, ensures data communication security, prevents unauthorized access and data leakage, and supports hierarchical control and information exchange.
Smart Images

Figure CN119728308B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of communication technology, in particular to a smart microgrid communication method based on NHRP protocol and a smart microgrid system. BACKGROUND
[0002] At present, as an effective supplement to centralized power generation, distributed power generation and its system integration technology have become mature. The microgrid is a new energy transmission mode that increases the penetration rate of renewable energy and distributed energy in the energy supply system. Its components include different types of distributed energy resources (DER), various electric and / or thermal load user terminals, and related monitoring and protection devices. DER units are divided into two types: distributed generation (DG) or distributed storage (DS) with different capacities and characteristics. Smart microgrid is the intelligentization of microgrid, which is a fully automated power supply network. It is based on an integrated, high-speed two-way communication network, uses sensors to monitor the operating conditions of key equipment such as power generation, power transmission, power distribution, and power supply in real time, and ensures the two-way flow of current and information from the power plant to the user's electrical appliances. Then the obtained data is collected and integrated through the network system, so as to realize reliable, safe, economic, efficient, and environmentally friendly power grid, and optimize operation and management.
[0003] However, although the smart microgrid becomes more and more popular due to its flexible, economical, and efficient distributed power supply, there are problems such as insufficient communication isolation between units and difficulty in dynamic boundary security isolation, which affect the communication security. SUMMARY
[0004] To solve the above technical problems, the embodiments of the present application provide a smart microgrid communication method based on NHRP protocol and a smart microgrid system, which can improve the security of communication between units in the smart microgrid.
[0005] In a first aspect, the embodiments of the present application provide a smart microgrid communication method based on NHRP protocol, which is suitable for a first client in a smart microgrid, and the smart microgrid further includes a server. The method includes:
[0006] sending an NHRP registration request message to the server, wherein the NHRP registration request message is used to request to establish a first permanent tunnel;
[0007] performing a first operation in response to the NHRP registration response message returned by the server and representing that the first permanent tunnel is established, wherein the first operation comprises:
[0008] interacting information with the server via the first permanent tunnel, wherein the interacted information comprises control information sent by the server for controlling the first client.
[0009] Optionally, the first operation further comprises:
[0010] periodically sending a first keep-alive request message to the server;
[0011] wherein,
[0012] the NHRP registration request message carries information for indicating a first keep-alive duration;
[0013] the NHRP registration request message is further used for instructing the server to: in response to the NHRP registration request message or the first keep-alive request message, configure the first permanent tunnel to be in an active state, and start timing from zero, and when a first timing duration reaches the first keep-alive duration, adjust the first permanent tunnel from the active state to a dormant state, wherein the first permanent tunnel is configured to prohibit transmission of the interacted information when in the dormant state.
[0014] Optionally, the intelligent micro-network comprises a plurality of clients, the first client is any one of the plurality of clients, and the clients other than the first client are second clients.
[0015] For any second client, the method further comprises:
[0016] in a case where it is needed to send first data to the second client, sending an NHRP address resolution request message to the second client, wherein the NHRP address resolution request message is used for requesting to establish a temporary tunnel;
[0017] performing a second operation in response to an NHRP address resolution response message returned by the second client and representing that the temporary tunnel is established, wherein the second operation comprises:
[0018] sending the first data to the second client via the temporary tunnel.
[0019] Optionally, a second permanent tunnel is established between the server and each second client.
[0020] The sending of the NHRP address resolution request message to the second client comprises:
[0021] sending the NHRP address resolution request message to the server via the first permanent tunnel, so that the server forwards the NHRP address resolution request message to the second client via a corresponding second permanent tunnel.
[0022] Optionally, the NHRP address resolution request message carries a first address mapping table of the first client and a private network address of the second client, and the first address mapping table indicates a mapping relationship between a public network address and a private network address of the first client locally.
[0023] The NHRP address resolution response message carries a second address mapping table of the second client, and the second address mapping table indicates a mapping relationship between a public network address and a private network address of the second client locally.
[0024] Optionally, the second operation further includes:
[0025] If a keep-alive condition matched with the second client is met, a second keep-alive request message is sent to the second client.
[0026] The NHRP address resolution request message carries information for determining a second keep-alive duration, and the NHRP address resolution request message is further used to instruct the second client to: in response to the NHRP address resolution request message or the second keep-alive request message, start timing from zero, and delete the temporary tunnel when a second timing duration counted reaches the second keep-alive duration.
[0027] In a second aspect, an embodiment of the present application provides an intelligent microgrid communication method based on an NHRP protocol, which is suitable for a server in an intelligent microgrid, and the intelligent microgrid further includes a first client, and the method includes:
[0028] receiving an NHRP registration request message sent by the first client, wherein the NHRP registration request message is used to request establishment of a first permanent tunnel;
[0029] In a case where it is determined that the first permanent tunnel is established, returning an NHRP registration response message to the first client, the NHRP registration response message being used to represent that the first permanent tunnel is established, and performing a first operation, wherein the first operation includes:
[0030] interacting with the first client via the first permanent tunnel, and the information interacted includes control information sent by the server and used to control the first client.
[0031] Optionally, the NHRP registration request message carries information for indicating a first keep-alive time length, and the first operation further includes:
[0032] receiving a first keep-alive request message periodically sent by the first client;
[0033] In response to the NHRP registration request message or the first keep-alive request message, the first permanent tunnel is configured to be in an active state, and a first counting time length is counted from zero, and when the counted first counting time length reaches the first keep-alive time length, the first permanent tunnel is adjusted from the active state to a dormant state, wherein the first permanent tunnel is configured to prohibit transmission of the interacted information when in the dormant state.
[0034] Optionally, the intelligent micro network includes a plurality of clients, the first client is any one of the plurality of clients, and the clients other than the first client are second clients, and the server establishes a corresponding second permanent tunnel with each of the second clients.
[0035] The method further includes:
[0036] receiving, via the first permanent tunnel, an NHRP address resolution request message sent by the first client;
[0037] forwarding, to a second client matching the NHRP address resolution request message via a corresponding second permanent tunnel, the NHRP address resolution request message, wherein the NHRP address resolution request message is used to request establishment of a temporary tunnel between the second client and the first client.
[0038] In a third aspect, an embodiment of the present application provides an intelligent micro network system, including:
[0039] a first client configured to perform the intelligent micro network communication method based on the NHRP protocol according to any one of the first aspect; and
[0040] a server configured to perform the intelligent micro network communication method based on the NHRP protocol according to any one of the second aspect.
[0041] In summary, the embodiments of the present application have at least the following beneficial effects:
[0042] By using the security isolation technology in the NHRP protocol, the embodiments of the present application can realize security isolation in the intelligent micro network, establish a secure data channel between the client and the server in the intelligent micro network, ensure data communication security, facilitate hierarchical control in the intelligent micro network, and prevent unauthorized access and data leakage. BRIEF DESCRIPTION OF THE DRAWINGS
[0043] Figure 1 This is a flow chart of a smart microgrid communication method based on the NHRP protocol provided in an embodiment of the present application;
[0044] Figure 2 This is a schematic diagram of smart microgrid communication based on the NHRP protocol provided in an embodiment of the present application;
[0045] Figure 3 This is a schematic diagram of smart microgrid communication based on the NHRP protocol provided in an embodiment of the present application;
[0046] Figure 4 This is a flow chart of a smart microgrid communication method based on the NHRP protocol provided in an embodiment of the present application;
[0047] Figure 5 Schematic diagram of the smart microgrid system provided in an embodiment of the present application. DETAILED DESCRIPTION
[0048] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.
[0049] In the description of this application, the terms "first", "second", "third", etc. are used for descriptive purposes only and are not to be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, features defined as "first", "second", "third", etc. may explicitly or implicitly include one or more of such features. In the description of this application, unless otherwise specified, "multiple" means two or more. In the description of this application, the term "including" and its variations are open inclusions, i.e., "including but not limited to". The term "based on" means "at least partially based on". The term "according to" means "at least partially based on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one other embodiment"; the term "some embodiments" means "at least some embodiments".
[0050] In the description of the application, it is necessary to point out that, unless otherwise explicitly specified and limited, the terms "mounting", "connection", "connecting" should be understood broadly, for example, it can be fixed connection, or detachable connection, or integrally connected; it can be mechanical connection, or electrical connection; it can be directly connected, or indirectly connected through intermediate medium, or the communication inside two elements. For the person skilled in the art, the specific meaning of the above terms in the application can be understood according to the specific circumstances.
[0051] In the description of the application, it is necessary to point out that, unless otherwise defined, all the technical and scientific terms used in the application are the same as the meanings commonly understood by the person skilled in the art. The terms used in the specification of the application are only for the purpose of describing the specific embodiments, and are not intended to limit the application. For the person skilled in the art, the specific meaning of the above terms in the application can be understood according to the specific circumstances.
[0052] Some terms and concepts related to the embodiments of the application are explained below.
[0053] NHRP (Next Hop Resolution Protocol) is used for the source station (host or router) connected to the NBMA (Non-Broadcast Multi-Access Network) subnetwork to determine the internetwork layer address of the "NBMA next hop" and the NBMA subnet address to the target station. If the destination is connected to the NBMA subnet, the NBMA next hop is the target station; otherwise, the NBMA next hop is the nearest exit router from the NBMA subnet to the target station.
[0054] NHC is the abbreviation of "NHRP Client", which refers to a client device that initiates a query request to the NHS to obtain the optimal next hop address when it needs to send data packets to a remote network.
[0055] NHS is the abbreviation of "NHRP Server", which refers to a server that can respond to NHC queries and provide the required routing information. NHS is usually located in a strategic position that can reach the target network and has the latest routing information.
[0056] Smart microgrid: mainly divided into grid-connected and island microgrid, usually adopts dynamic control strategy, its dynamic control is a typical pyramid structure, the primary control is at the bottom, the uncertainty of load and the intermittent and low inertia characteristics of each distributed unit will reduce the primary control performance of microgrid. For island microgrid, the intermittent change of each distributed unit, performance degradation, etc. Will cause imbalance between supply and demand, leading to frequency deviation or even frequency instability, which is disastrous for microgrid. Through the adjustment of output voltage and frequency, the distribution of active power and reactive power of inverter structure output is realized. Since the primary control (primary control) brings voltage and frequency deviation to the microgrid system, the secondary control sets the corresponding rated value for compensation, so as to improve the stability of the system and improve the quality of electric energy. In addition, the secondary control (secondary control) of microgrid is a kind of monitoring control which uses measurement system, network system and communication system interface to quickly capture the dynamic of microgrid. The tertiary control takes reducing the operation cost of smart microgrid as the goal, which mainly coordinates the information exchange of power flow between the smart grid and the optimization scheduling of the internal system of microgrid. There may be a long geographical distance between the distributed energy units of smart microgrid, but information exchange is needed between the distributed energy units of smart microgrid to ensure the consistency of voltage and frequency between each other, so as to realize efficient power generation. At the same time, it is necessary to establish a safe isolation to prevent denial of service, fraud attacks, etc. In addition, a secure channel should be established between microgrids to facilitate the conversion to grid-connected operation mode.
[0057] In a first aspect, see Figure 1 , a flowchart of a smart microgrid communication method based on NHRP protocol is shown, which is suitable for a first client (i.e. a first NHC) in a smart microgrid, and the smart microgrid also includes a server (i.e. a NHS).
[0058] In one example, the smart microgrid can include a primary control unit, a secondary control unit for adjusting / controlling the primary control unit, and a tertiary control unit for adjusting / controlling the secondary control unit, so that the first client can be the primary control unit, and the server is the secondary control unit; the first client can be the secondary control unit, and the server is the tertiary control unit.
[0059] In one example, the smart microgrid can include at least one microgrid and a control center for controlling the microgrid, so that the first client can be one or more of the at least one microgrid, and the server is the control center.
[0060] The smart microgrid communication method based on NHRP protocol includes steps S101-S102, as follows:
[0061] S101, sending an NHRP registration request message to the server, wherein the NHRP registration request message is used to request establishment of a first permanent tunnel.
[0062] In one example, the NHRP registration request message carries a first address mapping table of the first client, and the first address mapping table indicates a mapping relationship between a public network address and a private network address of the first client, so that the NHRP registration request message can be used to instruct the server to store the first address mapping table to complete establishment of the first permanent tunnel.
[0063] In one example, the first address mapping table includes a dynamic type address mapping table and a static type address mapping table; in a case where the dynamic type address mapping table and the static type address mapping table are stored in the server, the first permanent tunnel is in an active state; in a case where the static type address mapping table is stored in the server and the dynamic type address mapping table is deleted, the first permanent tunnel is in a dormant state; in a case where the static type address mapping table and the dynamic type address mapping table are both deleted in the server, the first permanent tunnel is deleted, wherein the static type address mapping table in the server can be configured to be manually deleted in the server only by a user.
[0064] Further, in a case where the static type address mapping table stored in the server is configured as an offline state and the dynamic type address mapping table is deleted, the first permanent tunnel is in a dormant state.
[0065] In another example, when a configuration of the first client changes and cannot satisfy an online condition, the first client needs to modify static address mapping information (for example, a static type address mapping table) of the first client from an online state to an offline state, and send a first NHRP address mapping deletion request message to the server, so that the server deletes registration information (that is, a first address mapping table / static type address mapping table of the first client stored in the server) of the first client in response to the first NHRP address mapping deletion request message, and sends a first NHRP address mapping deletion response message to the first client.
[0066] S102, in response to the NHRP registration response message returned by the server and indicating that the first permanent tunnel is established, performing a first operation, wherein the first operation includes:
[0067] interacting with the server via the first permanent tunnel, wherein the information exchanged includes control information sent by the server to control the first client.
[0068] In the embodiment, the information interaction between different level units of the smart microgrid (i.e. between the primary control unit, the secondary control unit and the tertiary control unit, or between the microgrid and the control center) via the secure channel established based on the NHRP protocol can be implemented, so as to realize the safe isolation and information exchange between different level units of the smart microgrid.
[0069] In an optional implementation, the first operation further includes:
[0070] periodically sending a first keep-alive request message to the server; for example, the first keep-alive request message can be an NHRP message.
[0071] wherein,
[0072] The NHRP registration request message carries information for indicating a first keep-alive time length.
[0073] The NHRP registration request message is further used to instruct the server to: in response to the NHRP registration request message or the first keep-alive request message, configure the first permanent tunnel to be in an active state, and start timing from zero, when a first timing time length reaches the first keep-alive time length, adjust the first permanent tunnel from the active state to a dormant state, wherein the first permanent tunnel is configured to prohibit the transmission of the interacted information when in the dormant state.
[0074] It can be understood that in the embodiment, after the first permanent tunnel between the server and the first client is successfully established, the first permanent tunnel is in the active state, and thereafter the first client periodically sends the first keep-alive request message to the server to ensure that the first permanent tunnel is always available, and if the first client fails to send the first keep-alive request message in time, the server can also adjust the first permanent tunnel to the dormant state in time to ensure the effectiveness of the tunnel and reduce power consumption.
[0075] It should be noted that the server in the embodiment can refresh the timeout time corresponding to the first address mapping table of the first client in response to the first keep-alive request message to obtain a new address mapping table timeout time and return it to the first client, for example, refer to Figure 2 .
[0076] In an alternative embodiment, the smart micro network comprises a plurality of clients, the first client is any one of the plurality of clients, and the second client is any one of the plurality of clients other than the first client. In one example, the second client can have the same functions as the first client, and thus is not described herein.
[0077] For any one of the second clients, the method further comprises:
[0078] In a case where it is required to send first data to the second client, sending an NHRP address resolution request message to the second client, wherein the NHRP address resolution request message is used to request establishment of a temporary tunnel.
[0079] In response to an NHRP address resolution response message returned by the second client and used to represent that the temporary tunnel is established, performing a second operation, wherein the second operation comprises:
[0080] Sending the first data to the second client via the temporary tunnel.
[0081] It should be noted that the temporary tunnel in the embodiment can be configured to exist only when there is data flow, and if the temporary tunnel is idle for more than a certain time, the temporary tunnel will be deleted. If the two clients need to communicate again after the temporary tunnel is deleted, the temporary tunnel needs to be established again.
[0082] In one example, the NHRP address resolution request message can be used to instruct the second client to store a dynamic type address mapping table of the first client, and return a dynamic type address mapping table of the second client to the first client, so that the first client and each of the second clients store a dynamic type address mapping table of the other, thereby establishing a temporary tunnel. In this way, when the configuration of the first client changes and cannot meet the online condition, if the first client still stores a related dynamic type address mapping table, the first client can delete the related dynamic type address mapping table stored by itself, and send a second NHRP address resolution request message to the second client, so that the second client deletes the dynamic type address mapping table of the first client in response to the second NHRP address resolution request message.
[0083] In an alternative embodiment, the server and each of the second clients establish a corresponding second permanent tunnel. In one example, the second permanent tunnel can have the same functions as the first permanent tunnel, and the establishment method is the same as that of the first permanent tunnel, and thus is not described herein.
[0084] The sending the NHRP address resolution request message to the second client comprises:
[0085] The sending the NHRP address resolution request message to the second client via the first permanent tunnel, so that the server forwards the NHRP address resolution request message to the second client via the corresponding second permanent tunnel.
[0086] In one example, the exchanged information further comprises a first routing message sent by the first client, the first routing message carrying first subnet routing information of the first client, and the server and each of the second clients being associated with a corresponding second permanent tunnel, the first routing message being used to instruct the server to forward the first subnet routing information to the corresponding second client via each of the second permanent tunnels, and the server being configured to receive second subnet routing information from the corresponding second client via each of the second permanent tunnels, so that the exchanged information further comprises second subnet routing information of each of the second clients sent by the server. In this embodiment, each of the clients registered with the same server has its own subnet routing information, so as to construct the corresponding NHRP address resolution request message and / or NHRP address resolution response message in subsequent embodiments.
[0087] In an optional embodiment, the NHRP address resolution request message carries a first address mapping table of the first client and a private network address of the second client, and the first address mapping table indicates a mapping relationship between a public network address and a private network address of the first client.
[0088] The NHRP address resolution response message carries a second address mapping table of the second client, and the second address mapping table indicates a mapping relationship between a public network address and a private network address of the second client.
[0089] In this embodiment, the server can determine the second permanent tunnel corresponding to the second client according to the private network address of the second client, and then forwards the NHRP address resolution request message to the second client via the corresponding second permanent tunnel, so that the second client obtains the first address mapping table of the first client. Similarly, the first client can obtain the second address mapping table of the second client after receiving the NHRP address resolution response message, so that the first client and the second client can obtain the address information of the opposite end, so as to establish a temporary tunnel that enables the first client and the second client to directly exchange information.
[0090] In an alternative implementation, the second operation further comprises:
[0091] If the keep-alive condition matched with the second client is satisfied, a second keep-alive request message is sent to the second client. For example, the second keep-alive request message can be an NHRP message, and the keep-alive condition can include that a second data needs to be sent to the second client at a target time point, wherein the target time point is later than an end time point, and the end time point refers to a time point at which a second keep-alive duration has elapsed since the second client last received an NHRP address resolution request message or a second keep-alive request message, or a time point at which the second keep-alive duration has elapsed since the first client last sent an NHRP address resolution request message or a second keep-alive request message to the second client.
[0092] The NHRP address resolution request message carries information for determining the second keep-alive duration, and the NHRP address resolution request message is further used to instruct the second client to delete the temporary tunnel when a second counted duration reaches the second keep-alive duration, starting from zero, in response to the NHRP address resolution request message or the second keep-alive request message.
[0093] In an example, referring to Figure 3 The second client can also be configured to return a keep-alive response message to the first client in response to the second keep-alive request message, to inform the first client of the current state of the temporary tunnel.
[0094] In an example, to ensure the security of the device, the messages / information exchanged in any one or more embodiments of the present application can be selected to carry message authentication information. For example, when the NHC configures an NHRP message authentication key, the messages sent by the NHC can all carry plaintext key information, and the device receiving the sent messages can check the authentication payload. If the checking result indicates that the received message is consistent with the local configuration, the verification is successful, and the message is processed next. If the verification fails, the message is discarded. If neither the receiver nor the sender configures an authentication key, the exchanged messages do not need to be authenticated and can be directly processed.
[0095] The various types of messages involved in the embodiments of the present application are further explained and described below in combination with Table 1.
[0096] Table 1
[0097]
[0098] The advantages and effects of any one or more embodiments of the present application are as follows: 1) ensuring the security of data transmission between NHC and NHS (i.e. between adjacent control units of intelligent microgrid): if both NHC and NHS are configured with IPsec (Internet Protocol Security) service, the data packet or NHRP packet is sent from NHC to search for IPsec SA (IPsec Security Association) protecting the tunnel. If no IPsec SA is found, the NHC and NHS first perform IKE (Internet Key Exchange) initialization to negotiate IKE / IPsec SA, so that the NHRP packet, route information packet and data packet between NHC and NHS can be transmitted through IPsec encryption to ensure the security of data. The opposite end decrypts the received packet. If no IPsec service is configured, the packet can be sent directly. 2) ensuring the security of data transmission between NHCs (i.e. between intelligent microgrid groups): the IPsec secure channel has been established between NHC and NHS, so that the packet sent from NHC to NHS is encrypted by IPsec. If communication is needed between two NHCs, the NHRP address resolution request packet is sent to the opposite NHC, the packet is forwarded to the opposite NHC by NHS, and the opposite NHC decrypts the received packet to find that the local IPsec service is configured, so that IKE initialization is performed and IKE / IPsec SA is negotiated between the two NHCs. Therefore, the packet between NHC and NHC is protected by IPsec encryption. 3) ensuring the security of the device: the authentication information of the packet can be carried in the NHRP packet. When the NHC is configured with NHRP packet authentication key, the NHRP sends the packet with clear key information, and the device receiving the NHRP packet checks the authentication payload. If the received packet is consistent with the local configuration, the verification is successful, and the packet is processed. If the verification fails, the packet is discarded. 4) completing the security isolation between intelligent microgrid groups: the temporary communication tunnel and the establishment of the keep-alive mechanism between the units of the same stage intelligent microgrid complete the security isolation between intelligent microgrid groups. 5) completing the information exchange between different microgrids: the temporary communication tunnel is established between different intelligent microgrids to complete the secure information exchange.
[0099] In a second aspect, referring to Figure 4 , a flowchart of a NHRP protocol-based intelligent microgrid communication method provided by an embodiment of the present application is shown, which is suitable for a server in an intelligent microgrid, and the intelligent microgrid further includes a first client. The method includes steps S401-S402, which are as follows:
[0100] S401, receiving an NHRP registration request message sent by the first client, wherein the NHRP registration request message is used to request to establish a first permanent tunnel.
[0101] S402, in a case where it is determined that the first permanent tunnel is established, returning an NHRP registration response message to the first client, wherein the NHRP registration response message is used to represent that the first permanent tunnel is established, and performing a first operation, wherein the first operation comprises:
[0102] interacting information with the first client via the first permanent tunnel, wherein the interacted information comprises control information sent by the server and used to control the first client.
[0103] In an optional implementation, the NHRP registration request message carries information used to indicate a first keep-alive time length, and the first operation further comprises:
[0104] receiving a first keep-alive request message periodically sent by the first client.
[0105] in response to the NHRP registration request message or the first keep-alive request message, configuring the first permanent tunnel to be in an active state, and starting a first time length from zero, and when the first time length reaches the first keep-alive time length, adjusting the first permanent tunnel from the active state to a dormant state, wherein the first permanent tunnel is configured to prohibit transmission of the interacted information when in the dormant state, wherein the NHRP address resolution request message carries a first address mapping table of the first client and a private network address of the second client, the first address mapping table indicating a mapping relationship between a public network address and a private network address of the first client locally, and the NHRP address resolution response message carries a second address mapping table of the second client, the second address mapping table indicating a mapping relationship between a public network address and a private network address of the second client locally.
[0106] In an optional implementation, the intelligent micro-network comprises a plurality of clients, the first client is any one of the plurality of clients, and the clients other than the first client are second clients, and the server establishes a corresponding second permanent tunnel with each of the second clients.
[0107] The method further comprises:
[0108] receiving an NHRP address resolution request message sent by the first client via the first permanent tunnel.
[0109] For a second client matching the NHRP address resolution request message, the NHRP address resolution request message is forwarded to the second client via a corresponding second permanent tunnel, wherein the NHRP address resolution request message is used to request to establish a temporary tunnel between the second client and the first client.
[0110] In a third aspect, referring to Figure 5 , a structure diagram of an intelligent microgrid system is shown, the intelligent microgrid system comprises:
[0111] A first client 501 is configured to perform the intelligent microgrid communication method based on the NHRP protocol according to any one of the first aspect; and
[0112] A server 502 is configured to perform the intelligent microgrid communication method based on the NHRP protocol according to any one of the second aspect.
[0113] In summary, the embodiments of the present application have at least the following beneficial effects:
[0114] By using the security isolation technology in the NHRP protocol, the security isolation in the intelligent microgrid can be realized, and a secure data channel between the client and the server in the intelligent microgrid is established to ensure the security of data communication, facilitate the hierarchical control in the intelligent microgrid, and prevent unauthorized access and data leakage.
[0115] Through the above description of the embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software and necessary hardware platforms, and of course, it can also be implemented entirely by hardware. Based on such understanding, all or part of the technical solutions of the present application that contribute to the background art can be embodied in the form of a software product, which can be stored in a storage medium, such as a ROM (Read-Only Memory), a RAM (Random Access Memory), a magnetic disk, an optical disk, etc., and includes a number of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute the methods described in various embodiments or some parts of the embodiments.
[0116] The above is the preferred embodiment of the present application, and it should be pointed out that for those skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, which are also considered within the protection scope of the present application.
Claims
1. A smart microgrid communication method based on NHRP protocol, characterized in that: Applicable to a first client in a smart microgrid, the smart microgrid also including a server, the method comprising: Sending an NHRP registration request message to the server, wherein the NHRP registration request message is used to request establishment of a first permanent tunnel; In response to the NHRP registration response message returned by the server and indicating that the establishment of the first permanent tunnel is complete, performing a first operation, wherein the first operation includes: Exchanging information with the server via the first permanent tunnel, wherein the exchanged information includes control information sent by the server for controlling the first client; The first operation further includes: Periodically sending a first keep-alive request message to the server; in, The NHRP registration request message carries information indicating a first keep-alive duration; The NHRP registration request message is further used to instruct the server: in response to the NHRP registration request message or the first keep-alive request message, configure the first permanent tunnel to be in an active state, and start timing from zero, and when a first timing duration reaches the first keep-alive duration, adjust the first permanent tunnel from the active state to the dormant state, wherein the first permanent tunnel is configured to prohibit transmission of the exchanged information when in the dormant state; The first client configures an NHRP message authentication key, and both the NHRP registration request message and the first keep-alive request message carry plaintext key information; The smart microgrid includes a plurality of clients, the first client is any one of the plurality of clients, and the clients other than the first client are second clients. For any second client, the method further includes: When it is necessary to send the first data to the second client, sending an NHRP address resolution request message to the second client, wherein the NHRP address resolution request message is used to request establishment of a temporary tunnel; In response to the NHRP address resolution response message returned by the second client and indicating that the temporary tunnel is established, performing a second operation, wherein the second operation includes: Sending the first data to the second client via the temporary tunnel; Wherein, a corresponding second permanent tunnel is established between the server and each of the second clients; The sending of the NHRP address resolution request message to the second client includes: Sending the NHRP address resolution request message to the server via the first permanent tunnel, so that the server forwards the NHRP address resolution request message to the second client via the corresponding second permanent tunnel; in, The NHRP address resolution request message carries a first address mapping table of the first client and a private network address of the second client, where the first address mapping table indicates a mapping relationship between a local public network address and a private network address of the first client; The NHRP address resolution response message carries a second address mapping table of the second client, where the second address mapping table indicates a mapping relationship between a local public network address and a private network address of the second client; The second operation further includes: If the keep-alive condition matching the second client is met, sending a second keep-alive request message to the second client; The NHRP address resolution request message carries information for determining a second keep-alive duration, and the NHRP address resolution request message is further used to instruct the second client: in response to the NHRP address resolution request message or the second keep-alive request message, start timing from zero, and when the second timing duration reaches the second keep-alive duration, delete the temporary tunnel; The smart microgrid includes: a primary control unit, a secondary control unit for regulating / controlling the primary control unit, and a tertiary control unit for regulating / controlling the secondary control unit. When the first client is the primary control unit, the server is the secondary control unit; when the first client is the secondary control unit, the server is the tertiary control unit. Different smart microgrids exchange information by establishing temporary communication tunnels; If both the client and server are configured with the Internet Security Protocol service, the client searches for a security association protecting the tunnel when sending a data packet or NHRP packet. If no security association is found, the client and server initiate an Internet Key Exchange (IKE) and negotiate an IKE or security association. The secondary control is a monitoring control that uses the measurement system, network system and communication system interface to capture the dynamics of the microgrid in combination with the measurement data; The three-level control is aimed at reducing the operating cost of the smart microgrid, coordinating the information exchange of power flow between the microgrid and the large power grid, and optimizing the scheduling within the microgrid system. The temporary tunnel is configured to exist only when there is data traffic. If the temporary tunnel is idle for more than a certain period of time, the temporary tunnel will be deleted.
2. A smart microgrid communication method based on NHRP protocol, characterized in that: Applicable to a server in a smart microgrid, the smart microgrid further comprising a first client, the method comprising: receiving an NHRP registration request message sent by the first client, wherein the NHRP registration request message is used to request establishment of a first permanent tunnel; If it is determined that the first permanent tunnel is established, an NHRP registration response message indicating that the first permanent tunnel is established is returned to the first client, and a first operation is performed, where the first operation includes: Exchanging information with the first client via the first permanent tunnel, wherein the exchanged information includes control information sent by the server for controlling the first client; The NHRP registration request message carries information indicating a first keep-alive duration, and the first operation further includes: receiving a first keep-alive request message periodically sent by the first client; In response to the NHRP registration request message or the first keep-alive request message, configure the first permanent tunnel to be in an active state, and start timing from zero. When a first timing duration reaches the first keep-alive duration, adjust the first permanent tunnel from the active state to the dormant state, wherein the first permanent tunnel is configured to prohibit transmission of the exchanged information when in the dormant state; The first client configures an NHRP message authentication key, and both the NHRP registration request message and the first keep-alive request message carry plaintext key information; The smart microgrid includes a plurality of clients, the first client is any one of the plurality of clients, the clients other than the first client are second clients, and a corresponding second permanent tunnel is established between the server and each of the second clients; The method further comprises: receiving, via the first permanent tunnel, an NHRP address resolution request message sent by the first client; Forwarding the NHRP address resolution request message to a second client that matches the NHRP address resolution request message via a corresponding second permanent tunnel, wherein the NHRP address resolution request message is used to request establishment of a temporary tunnel between the second client and the first client; in, The NHRP address resolution request message carries a first address mapping table of the first client and a private network address of the second client, where the first address mapping table indicates a mapping relationship between a local public network address and a private network address of the first client; The smart microgrid includes: a primary control unit, a secondary control unit for regulating / controlling the primary control unit, and a tertiary control unit for regulating / controlling the secondary control unit. When the first client is the primary control unit, the server is the secondary control unit; when the first client is the secondary control unit, the server is the tertiary control unit. Different smart microgrids exchange information by establishing temporary communication tunnels; If both the client and server are configured with the Internet Security Protocol service, the client searches for a security association protecting the tunnel when sending a data packet or NHRP packet. If no security association is found, the client and server initiate an Internet Key Exchange (IKE) and negotiate an IKE or security association. The secondary control is a monitoring control that uses the measurement system, network system and communication system interface to capture the dynamics of the microgrid in combination with the measurement data; The three-level control is aimed at reducing the operating cost of the smart microgrid, coordinating the information exchange of power flow between the microgrid and the large power grid, and optimizing the scheduling within the microgrid system. The temporary tunnel is configured to exist only when there is data traffic. If the temporary tunnel is idle for more than a certain period of time, the temporary tunnel will be deleted.
3. An intelligent microgrid system, characterized in that: include: A first client, configured to execute the NHRP protocol-based smart microgrid communication method according to claim 1; as well as, The server is configured to execute the NHRP protocol-based smart microgrid communication method according to claim 2.
Citation Information
Patent Citations
Method and system for information interaction of power grid with safety certification
CN102110981A
Virtual power plant energy management platform
CN111049720A