Authentication and authorization method and related device for new energy station monitoring system
By calling Auth2 authentication and authentication services at the SpringCloud Getway layer of the monitoring system of the new energy station, the problem that the system cannot achieve unified security management is solved, and the system's security specifications and security management is realized, the system's stability and reliability are improved, and the development and maintenance costs are reduced.
Patent Information
- Application Number
- CN202411941353.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-26
- Publication Date
- 2025-04-04
AI Technical Summary
The existing new energy station monitoring system cannot achieve unified safety specifications and safety management, resulting in the inability to accurately locate safety issues, increasing the system development and maintenance costs.
Using an authentication and authentication method, the Auth2 authentication service and authentication service are called through SpringCloud Getway, and the client requests are authenticated and permissions are uniformly verified to ensure that only legal requests can be routed to the user resources of the new energy station monitoring system.
It realizes unified security specifications and security management of the monitoring system of new energy stations, and can intercept and filter invalid requests and malicious attacks, reduce system burden, improve system stability and reliability, and reduce development and maintenance costs.
Smart Images
Figure CN119766544A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the field of system safety technology, and in particular relates to an authentication and authorization method and related devices for a new energy station monitoring system. Background Art
[0002] The new energy station monitoring system uses technologies such as the Internet of Things, big data, cloud computing or artificial intelligence to conduct all-round, all-weather monitoring and management of new energy stations such as wind farms and photovoltaic power stations, realize real-time monitoring of the operating status and degradation of equipment in the station, and ensure the stable operation of the station.
[0003] At present, the existing new energy station monitoring system usually contains several subsystems. Only by ensuring the security of all subsystems can the security of the entire system be ensured. Among them, each subsystem generally develops relevant security strategies separately to ensure its own security. Due to the different security strategies between different subsystems, it is impossible to achieve unified safety specifications and security management, resulting in the inability to accurately locate safety issues, which increases the development and maintenance costs of the system. Summary of the invention
[0004] In response to the technical problems existing in the prior art, the present invention provides an authentication and authorization method and related devices for a new energy station monitoring system to solve the technical problem that the existing new energy station monitoring system cannot achieve unified safety specifications and safety management, resulting in the inability to accurately locate safety issues and increasing the development and maintenance costs of the system.
[0005] In order to achieve the above object, the technical solution adopted by the present invention is: The present invention provides an authentication and authorization method for a new energy station monitoring system, which is applied to SpringCloud Getway; the method comprises: Receive a client request; wherein the request header of the client request carries a Token; Calling the Auth2 authentication service to authenticate the client request; If the identity authentication is successful, the Auth2 authentication service is called to authenticate the client request; If the identity authentication fails, determine whether the client request is an illegal malicious attack; If the authentication is successful, the client request is routed to the user resources of the new energy station monitoring system.
[0006] Furthermore, the Token is issued by the new energy station monitoring system when the client accesses the new energy station monitoring system for the first time; wherein the Token includes user identity information, expiration time, issuance time and authorization scope.
[0007] Furthermore, the process of calling Auth2 to authenticate the client request is as follows: Obtain a Token from the request header of the client request; Parse the Token to obtain the user identity information carried in the client request; The user identity information carried in the client request is compared with the user information pre-stored in the new energy station monitoring system; if the comparison results are consistent, the identity authentication is passed; otherwise, the identity authentication fails.
[0008] Further, the process of calling the Auth2 authentication service to authenticate the client request is as follows: Obtain a Token from the request header of the client request; Parse the Token to obtain the authorization scope requested by the client; The authorization scope requested by the client is compared with the preset user system permissions; if the authorization scope requested by the client is within the preset user system permissions, the authentication is passed; otherwise, the authentication is not passed.
[0009] Furthermore, the process of determining whether the client request is an illegal malicious attack is as follows: Obtain a Token from the request header of the client request; Determine whether the format of the Token is correct; if not, it is an illegal malicious attack.
[0010] Furthermore, the process of routing the client request to the user resource of the new energy station monitoring system is as follows: The client request is redirected to the user resources of the new energy station monitoring system through a preset request chain.
[0011] The present invention also provides an authentication and authorization system for a new energy station monitoring system, which is applied to SpringCloud Getway; the system includes: A request receiving module, used to receive a client request; wherein the request header of the client request carries a Token; An identity authentication module is used to call the Auth2 authentication service to authenticate the client request; The authentication module is used to call the Auth2 authentication service to authenticate the client request if the identity authentication is passed; A malicious request judgment module is used to judge whether the client request is an illegal malicious attack if the identity authentication fails; The request forwarding module is used to route the client request to the user resources of the new energy station monitoring system if the authentication is passed.
[0012] The present invention also provides an authentication and authorization device for a new energy station monitoring system, comprising: a processor suitable for executing a computer program; A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by the processor, the authentication and authorization method for the new energy station monitoring system is executed.
[0013] The present invention also provides a computer-readable storage medium, which stores a computer program, characterized in that when the computer program is executed by a processor, it implements the authentication and authorization method for the new energy station monitoring system.
[0014] The present invention also provides a computer program product, characterized in that the computer program product includes a computer program, and when the computer program is executed by a processor, it implements the authentication and authorization method for the new energy station monitoring system.
[0015] Compared with the prior art, the present invention has the following beneficial effects: The authentication and authorization method for the new energy site monitoring system provided by the present invention uses Spring CloudGetway as the access entrance of the system, and performs identity authentication and unified authority verification on visitors by calling Auth2 authentication service and authentication service at the gateway layer, so as to intercept and filter invalid requests and malicious attacks, reduce the burden of the system, and improve the stability and reliability of the system; secondly, only legitimate requests that pass identity authentication and authorization can be routed to the user resources of the new energy site monitoring system, which ensures the availability and response speed of the service; visitors only need to carry Token in the request header to perform identity authentication and authorization, without the need for complex authentication and authorization processes, which simplifies the operation process; the present invention realizes the establishment of unified security specifications and security management of the new energy site monitoring system at the application level, which is convenient for accurately locating security issues, ensures the security of the system, and can greatly reduce the development and maintenance costs of the system.
[0016] The authentication and authorization system for a new energy station monitoring system, the authentication and authorization device for a new energy station monitoring system, the computer-readable storage medium and the computer program product provided by the present invention have all the advantages of the above-mentioned authentication and authorization method for a new energy station monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0018] Figure 1 A flow chart of an authentication and authorization method for a new energy station monitoring system provided in Example 1; Figure 2 A structural block diagram of an authentication and authorization system for a new energy station monitoring system provided in Example 2; Figure 3 This is a structural block diagram of the authentication and authorization device for the new energy station monitoring system provided in Example 3. DETAILED DESCRIPTION
[0019] In order to make the technical problems, technical solutions and beneficial effects solved by this application clearer, the technical solutions in the embodiments of this application will be described clearly and completely in combination with the drawings in the embodiments of this application; obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0020] Example 1 This embodiment 1 provides an authentication and authorization method for a new energy station monitoring system, and the method is applied to Spring Cloud Getway; as shown in the attached Figure 1 As shown, the authentication and authorization method for the new energy station monitoring system includes the following steps: Step 1: The client sends a client request to Spring Cloud Getway. Specifically, the process of the client sending a client request to Spring Cloud Getway is as follows: Step 11: The client requests user authorization.
[0021] Step 12: The user agrees to the authorization request of the authorization client on the authentication server, and returns an authorization code to the client; wherein the authentication server is the provider of the Auth2 authentication service.
[0022] Step 13: The client uses the authorization code to request an access token Taken from the authentication server.
[0023] Step 14: The client uses the access token Taken to initiate a client request to the Spring Cloud Getway.
[0024] It should be noted that the request header of the client request carries a Token, and the Token is issued by the new energy station monitoring system when the client accesses the new energy station monitoring system for the first time, and is added to the request header of the client request.
[0025] Preferably, the code implementation process of generating the Token is as follows: public String createToken(String clientId, String username, Set <string>scopes) { DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken("placeholder"); token.setExpiration(new Date(System.currentTimeMillis() + 60 *1000)); / / 10 minutes token.setScope(scopes); token.setTokenType(OAuth2AccessToken.BEARER_TYPE); token.setExpiresIn(60 * 10); / / 10 minutes / / Add additional information to token (claims) Map<String, Object> additionalInformation = new HashMap<>(); additionalInformation.put("client_id", clientId); token.setAdditionalInformation(additionalInformation); OAuth2Authentication authentication = new OAuth2Authentication(null,token); return tokenServices.createAccessToken(authentication).getValue(); } It should also be noted that the Token contains user identity information, expiration time, issuance time and authorization scope.
[0026] Step 2: When the client request arrives at Spring Cloud Getway, receive the client request.
[0027] Step 3: Call the Auth2 authentication service to authenticate the client request. If the authentication is successful, jump to step 4; if the authentication is unsuccessful, jump to step 5.
[0028] The steps of authenticating the client request are as follows: Step 31: Get the Token from the request header of the client request. Specifically, use Express, Flask, Spring Boot or JavaScript to get the Token from the request header of the client request.
[0029] Step 32: Parse the Token to obtain the user identity information carried in the client request.
[0030] Specifically, when parsing the Token, the Token is first split to obtain the header part, the payload part and the signature part; then, the payload part is parsed using Base64 decoding to obtain the original content of the header and the payload part; then, the signature part is verified using the algorithm and key specified in the header; after the signature verification is passed, the user identity information is extracted from the original content of the payload part, that is, the user identity information carried in the client request is obtained.
[0031] Step 33: compare the user identity information carried in the client request with the user information pre-stored in the new energy station monitoring system; if the comparison result is consistent, the identity authentication passes and jumps to step 4; otherwise, the identity authentication fails and jumps to step 5.
[0032] Step 4: Call the Auth2 authentication service to authenticate the client request. If the authentication is successful, jump to step 6; otherwise, the authentication fails.
[0033] Specifically, the process of authenticating the client request is as follows: Step 41: Get a Token from the request header of the client request.
[0034] Step 42: Parse the Token to obtain the authorization scope requested by the client. It should be noted that the process of parsing the Token to obtain the authorization scope requested by the client is basically similar to the operation in the above step 32, and will not be repeated here.
[0035] Step 43, compare the authorization scope of the client request with the preset user system permissions; if the authorization scope of the client request is within the preset user system permissions, the authentication passes and jumps to step 6; otherwise, the authentication fails and the client request is discarded.
[0036] In this embodiment 1, Auth2 authentication and authorization are two independent services. When a client requests, the filter of SpringCloud Getway intercepts the request, obtains the Token from the request header, and parses the Token. Then, the identity authentication service and the authorization service are called through the Spring Cloud microservice.
[0037] Step 5, determine whether the client request is an illegal malicious attack. When determining an illegal malicious attack, obtain a Token from the request header of the client request; determine whether the format of the Token is correct; if not, it is an illegal malicious attack, and the client request is added to the blacklist, and subsequent requests are rejected; or, count the same client request; based on the counting result of the same client request, determine whether the frequency of the same client request within a preset time period exceeds the preset frequency threshold; if it exceeds, the client request is an illegal malicious attack, and the client request is added to the blacklist, and subsequent requests are rejected.
[0038] Step 6: Routing the client request to the user resource of the new energy station monitoring system. Specifically, the client request is redirected to the user resource of the new energy station monitoring system through a preset request chain.
[0039] It should be noted that Spring Cloud Getway is started as an independent service and listens to a port; the port is configurable, such as port 80; the client request can be routed to the user resources of the new energy station monitoring system by redirecting the client request to the user resources of the new energy station monitoring system through a preset request chain by performing routing configuration in the application.yml configuration file of Spring Cloud Getway. Preferably, the routing configuration code is as follows: spring: cloud: gateway: routes: - id: after_route uri: https: / / example.org predicates: - Path= / mypath / ** It should also be noted that the routing configuration indicates that when the request path contains mypath, after identity authentication and authorization are passed, Spring Cloud Getway routes the client request to the backend service corresponding to the id after_route, and the backend service address is specified by the URI configuration.
[0040] In this embodiment 1, Spring Cloud Getway is used as the access entrance of the system. When the client request reaches Spring Cloud Getway, Spring Cloud Getway calls the Auth2 authentication and authorization service to perform identity authentication and authorization on the client request. When performing identity authentication, the Token carried in the client request is obtained and the Token is parsed to obtain the user identity information carried in the client request. By comparing the user identity information, it is determined whether the current client request is legal. If it is illegal, it is further determined whether the request is an illegal malicious attack, and if so, it is put into the blacklist. If the request is legal, the request is further authenticated. When performing authentication, the authorization scope of the client request is compared with the preset user system permissions. If the authentication is successful, the request is routed to the user resource, otherwise a client error message is returned.
[0041] The authentication and authorization method for the new energy station monitoring system described in this embodiment 1 uses the gateway as a unified access entrance for all subsystems of the new energy station monitoring system; when a user accesses the system, the gateway layer first obtains the user's unique identity information, and compares and confirms the identity information to determine whether the user is legal or illegal; if the user is legal, the user is allowed to pass and the request is routed to the corresponding system; if the user is illegal, the user's access is denied and an error message is returned; if the user is a malicious attack by an illegal user, the user is directly put into the blacklist; wherein, if the user identity authentication passes, the user's authority is checked, and if the authority check passes, the user is allowed to pass; otherwise, the user's access is denied and an error message is returned.
[0042] Example 2 As attached Figure 2 As shown, this embodiment 2 provides an authentication and authorization system for a new energy station monitoring system, including: a request receiving module, an identity authentication module, an authentication module, a malicious request judgment module and a request forwarding module.
[0043] A request receiving module is used to receive the client request when the client request arrives at Spring Cloud Getway; an identity authentication module is used to call the Auth2 authentication service to authenticate the client request; an authentication module is used to call the Auth2 authentication service to authenticate the client request if the identity authentication passes; a malicious request judgment module is used to judge whether the client request is an illegal malicious attack if the identity authentication fails; a request forwarding module is used to route the client request to the user resources of the new energy station monitoring system if the authentication passes.
[0044] Example 3 As attached Figure 3 As shown, this embodiment 3 provides an authentication and authorization device for a new energy station monitoring system, including: a memory for storing a computer program; a processor for implementing the steps of an authentication and authorization method for a new energy station monitoring system when executing the computer program.
[0045] When the processor executes the computer program, the steps of the above-mentioned authentication and authorization method for the new energy station monitoring system are implemented, for example: When the client request reaches Spring Cloud Getway, the client request is received; the Auth2 authentication service is called to authenticate the client request; if the authentication passes, the Auth2 authentication service is called to authenticate the client request; if the authentication fails, it is determined whether the client request is an illegal malicious attack; if the authentication passes, the client request is routed to the user resources of the new energy station monitoring system.
[0046] Alternatively, when the processor executes the computer program, the functions of each module in the above-mentioned authentication and authorization system for the new energy station monitoring system are realized, for example: A request receiving module is used to receive the client request when the client request arrives at Spring Cloud Getway; an identity authentication module is used to call the Auth2 authentication service to authenticate the client request; an authentication module is used to call the Auth2 authentication service to authenticate the client request if the identity authentication passes; a malicious request judgment module is used to judge whether the client request is an illegal malicious attack if the identity authentication fails; a request forwarding module is used to route the client request to the user resources of the new energy station monitoring system if the authentication passes.
[0047] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to complete the present invention. The one or more modules / units may be a series of computer program instruction segments capable of completing preset functions, and the instruction segments are used to describe the execution process of the computer program in the authentication and authorization device for the new energy station monitoring system.
[0048] For example, the computer program can be divided into a request receiving module, an identity authentication module, an authorization module, a malicious request judgment module and a request forwarding module, and the specific functions of each module are as follows: a request receiving module, used to receive the client request when the client request arrives at Spring Cloud Getway; an identity authentication module, used to call the Auth2 authentication service to authenticate the client request; an authentication module, used to call the Auth2 authentication service to authenticate the client request if the identity authentication passes; a malicious request judgment module, used to judge whether the client request is an illegal malicious attack if the identity authentication fails; a request forwarding module, used to route the client request to the user resources of the new energy station monitoring system if the authentication passes.
[0049] The authentication and authentication device for the new energy station monitoring system can be a computing device such as a desktop computer, a notebook, a PDA, and a cloud server. The authentication and authentication device for the new energy station monitoring system may include, but is not limited to, a processor and a memory. Those skilled in the art will appreciate that the above are examples of authentication and authentication devices for the new energy station monitoring system, and do not constitute a limitation on the authentication and authentication devices for the new energy station monitoring system. More components than the above may be included, or some components may be combined, or different components may be included. For example, the authentication and authentication device for the new energy station monitoring system may also include input and output devices, network access devices, buses, etc.
[0050] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The processor is the control center of the authentication and authorization device for the new energy station monitoring system, and uses various interfaces and lines to connect the various parts of the authentication and authorization device for the new energy station monitoring system.
[0051] The memory can be used to store the computer program and / or module, and the processor implements various functions of the authentication and authorization device for the new energy station monitoring system by running or executing the computer program and / or module stored in the memory and calling the data stored in the memory.
[0052] The memory may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the mobile phone (such as audio data, a phone book, etc.), etc. In addition, the memory may include a high-speed random access memory, and may also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (SmartMediaCard, SMC), a secure digital (SecureDigital, SD) card, a flash card (FlashCard), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.
[0053] Example 4 This embodiment 4 also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the authentication and authorization method for a new energy station monitoring system are implemented, for example: When the client request reaches Spring Cloud Getway, the client request is received; the Auth2 authentication service is called to authenticate the client request; if the authentication passes, the Auth2 authentication service is called to authenticate the client request; if the authentication fails, it is determined whether the client request is an illegal malicious attack; if the authentication passes, the client request is routed to the user resources of the new energy station monitoring system.
[0054] If the module / unit integrated with the authentication and authorization system for the new energy station monitoring system is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium.
[0055] Based on such understanding, the present invention implements all or part of the processes in the above-mentioned authentication and authorization method for the new energy station monitoring system, and can also be completed by instructing related hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, and when the computer program is executed by a processor, the steps of the above-mentioned authentication and authorization method for the new energy station monitoring system can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or preset intermediate form, etc.
[0056] The computer-readable storage medium may include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal and software distribution medium, etc.
[0057] It should be noted that the content contained in the computer-readable storage medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable storage media do not include electrical carrier signals and telecommunication signals.
[0058] Example 5 This embodiment 5 provides a computer product, which computer program product includes a computer program, which is stored in a computer-readable storage medium; the processor of the authentication and authentication device for the new energy station monitoring system reads the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the authentication and authentication device for the new energy station monitoring system can execute the authentication and authentication method for the new energy station monitoring system described in embodiment 1, which will not be repeated here.
[0059] It should be noted that a person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing related hardware through a computer program. The program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods.
[0060] The authentication and authorization method for the new energy station monitoring system described in the present invention uses Spring CloudGetway as the system access entrance, and implements identity authentication and unified authentication of visitors through Auth2 at the gateway layer to intercept and filter illegal requests, thereby effectively ensuring the security of the application system through technical means from the application level.
[0061] The above embodiment is only one of the implementation methods that can realize the technical solution of the present invention. The scope of protection claimed by the present invention is not limited only to this embodiment, but also includes changes, replacements and other implementation methods that can be easily thought of by any technician familiar with the technical field within the technical scope disclosed by the present invention.< / string>
Claims
1. A method for authentication and authorization of a new energy station monitoring system, characterized in that: Applied to SpringCloud Getway; the method includes: Receive a client request; wherein the request header of the client request carries a Token; Calling the Auth2 authentication service to authenticate the client request; If the identity authentication is successful, the Auth2 authentication service is called to authenticate the client request; If the identity authentication fails, determine whether the client request is an illegal malicious attack; If the authentication is successful, the client request is routed to the user resources of the new energy station monitoring system.
2. According to claim 1, a method for authentication and authorization of a new energy station monitoring system is characterized in that: The Token is issued by the new energy station monitoring system when the client accesses the new energy station monitoring system for the first time; wherein the Token includes user identity information, expiration time, issuance time and authorization scope.
3. The authentication and authorization method for a new energy station monitoring system according to claim 2 is characterized in that: The process of calling Auth2 to authenticate the client request is as follows: Obtain a Token from the request header of the client request; Parse the Token to obtain the user identity information carried in the client request; The user identity information carried in the client request is compared with the user information pre-stored in the new energy station monitoring system; if the comparison results are consistent, the identity authentication is passed; otherwise, the identity authentication fails.
4. The authentication and authorization method for a new energy station monitoring system according to claim 2, characterized in that: The process of calling the Auth2 authentication service to authenticate the client request is as follows: Obtain a Token from the request header of the client request; Parse the Token to obtain the authorization scope requested by the client; Compare the authorization scope requested by the client with the preset user system permissions; If the authorization scope requested by the client is within the preset user system authority, the authentication is passed; otherwise, the authentication is not passed.
5. The authentication and authorization method for a new energy station monitoring system according to claim 1, characterized in that: The process of determining whether the client request is an illegal malicious attack is as follows: Obtain a Token from the request header of the client request; Determine whether the format of the Token is correct; if not, it is an illegal malicious attack.
6. The authentication and authorization method for a new energy station monitoring system according to claim 1, characterized in that: The process of routing the client request to the user resource of the new energy station monitoring system is as follows: The client request is redirected to the user resources of the new energy station monitoring system through a preset request chain.
7. An authentication and authorization system for a new energy station monitoring system, characterized in that: Applied to SpringCloud Getway; the system includes: A request receiving module, used to receive a client request; wherein the request header of the client request carries a Token; An identity authentication module is used to call the Auth2 authentication service to authenticate the client request; The authentication module is used to call the Auth2 authentication service to authenticate the client request if the identity authentication is passed; A malicious request judgment module is used to judge whether the client request is an illegal malicious attack if the identity authentication fails; The request forwarding module is used to route the client request to the user resources of the new energy station monitoring system if the authentication is passed.
8. An authentication and authorization device for a new energy station monitoring system, characterized in that: include: a processor suitable for executing a computer program; A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by the processor, the authentication and authorization method for a new energy station monitoring system as described in any one of claims 1 to 6 is executed.
9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the authentication and authorization method for a new energy station monitoring system as described in any one of claims 1 to 6 is implemented.
10. A computer program product, characterized in that The computer program product includes a computer program, and when the computer program is executed by a processor, it implements the authentication and authorization method for a new energy station monitoring system as described in any one of claims 1 to 6.