Protection method of power Internet of Things terminal and related product

Abstract

The invention discloses a protection method of an electric power Internet of Things terminal and a related product, which can be applied to the technical field of electric power terminal equipment, and the method comprises the following steps: in response to a service request initiated by target edge computing equipment, performing identity verification on the target edge computing equipment based on a block chain network, and obtaining a verification result; if the verification result passes, constructing a data link between the target edge computing device and a cloud network; encrypting acquisition data corresponding to the service request based on a block chain encryption algorithm; and transmitting the encrypted acquisition data to the cloud network through the data link for storage. Thus, identity authentication of the decentralized device is performed based on the block chain, illegal devices are prevented from accessing the power Internet of Things system, encryption transmission is performed on the transmission data in combination with the block chain encryption algorithm, and the security of the data is improved.

Description

Technical Field

[0001] The present application relates to the technical field of power terminal equipment, and in particular to a protection method for power Internet of Things terminals and related products. Background Art

[0002] With the rapid development of the power Internet of Things, the informatization and intelligence level of the power system continues to improve. It can be connected to the Internet through various sensors, controllers and smart devices to achieve data monitoring.

[0003] Power IoT terminal devices refer to computing and sensing devices deployed at the edge of the power IoT system, which can directly interact with power equipment and systems and are responsible for data collection, processing and transmission. Traditional power IoT systems usually adopt a centralized management model, and the existing protection methods for power IoT terminals use user names, passwords and other easily cracked methods for identity authentication. This leads to the problem of low data security.

[0004] Therefore, how to improve data security is an issue that technical personnel in this field need to solve urgently. Summary of the invention

[0005] Based on the above problems, the present application provides a protection method and related products for power Internet of Things terminals, which performs identity authentication of decentralized devices based on blockchain, prevents illegal devices from accessing the power Internet of Things system, and encrypts the transmitted data in combination with the blockchain encryption algorithm, thereby improving the security of the data.

[0006] In a first aspect, an embodiment of the present application provides a protection method for a power Internet of Things terminal, including:

[0007] In response to a service request initiated by a target edge computing device, authenticate the target edge computing device based on a blockchain network and obtain a verification result;

[0008] If the verification result passes, a data link between the target edge computing device and the cloud network is established;

[0009] Encrypting the collected data corresponding to the business request based on a blockchain encryption algorithm;

[0010] The encrypted collected data is transmitted to the cloud network through the data link for storage.

[0011] Optionally, the authenticating the target edge computing device based on the blockchain network includes:

[0012] Obtain a target unique identifier corresponding to the target edge computing device;

[0013] Based on the blockchain network, query whether the target unique identification code exists in the information storage unit on the blockchain; the information storage unit pre-stores the unique identification codes corresponding to all identity-compliant edge computing devices.

[0014] Optionally, the method for generating the unique identifier includes:

[0015] Extract features of each identity-compliant edge computing device to obtain multi-dimensional composite information corresponding to each identity-compliant edge computing device;

[0016] Based on the multi-dimensional composite information corresponding to each of the identity-compliant edge computing devices, a unique identification code corresponding to each of the identity-compliant edge computing devices is generated.

[0017] Optionally, before establishing the data link between the target edge computing device and the cloud network, the process further includes:

[0018] Determine a target trust level of the target edge computing device; the trust level is generated and recorded in an information storage unit on the blockchain based on a secure trust computing algorithm by analyzing context information corresponding to each edge computing device;

[0019] Returning access rights for the target edge computing device based on the target trust level;

[0020] The step of establishing a data link between the target edge computing device and the cloud network includes:

[0021] Based on the access permission, a data link is constructed between the target computing device and a protected resource module corresponding to the access permission.

[0022] Optionally, the method further includes:

[0023] Obtaining all behavior information of the target edge computing device;

[0024] The access rights corresponding to the target edge computing device are adjusted based on the behavior information and recorded in the information storage unit on the blockchain.

[0025] Optionally, the method further includes:

[0026] If the target trust level of the target edge computing device is lower than a preset trust threshold and / or the current behavior information is abnormal, the authorization relationship between the target edge computing device and the corresponding access permission is revoked.

[0027] Optionally, the method further includes:

[0028] In response to the access request of the target operator, the target operator is authenticated based on the blockchain network and a verification result is obtained;

[0029] If the verification result is passed, a data link between the target operator and the cloud network is established;

[0030] The access data corresponding to the access request is sent to the target operator through the data link.

[0031] In a second aspect, an embodiment of the present application provides a protection device for a power Internet of Things terminal, including:

[0032] An identity verification module, configured to respond to a service request initiated by a target edge computing device, verify the identity of the target edge computing device based on a blockchain network, and obtain a verification result;

[0033] A construction module, configured to construct a data link between the target edge computing device and the cloud network if the verification result passes;

[0034] A data encryption module, used to encrypt the collected data corresponding to the business request based on a blockchain encryption algorithm;

[0035] The data transmission module is used to transmit the encrypted collected data to the cloud network through the data link for storage.

[0036] In a third aspect, an embodiment of the present application provides a protection device for a power Internet of Things terminal, including:

[0037] Memory for storing computer programs;

[0038] A processor is used to implement the steps of the protection method for the power Internet of Things terminal as described above when executing the computer program.

[0039] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the protection method for the electric power Internet of Things terminal as described above are implemented.

[0040] It can be seen from the above technical solutions that compared with the prior art, the present application has the following advantages:

[0041] This application first responds to the business request initiated by the target edge computing device, authenticates the target edge computing device based on the blockchain network, and obtains the verification result. If the verification result is passed, a data link is established between the target edge computing device and the cloud network. Then, the collected data corresponding to the business request is encrypted based on the blockchain encryption algorithm. Finally, the encrypted collected data is transmitted to the cloud network through the data link for storage. In this way, the identity authentication of decentralized devices based on blockchain prevents illegal devices from accessing the power Internet of Things system, and the transmission data is encrypted and transmitted in combination with the blockchain encryption algorithm, thereby improving the security of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 A flowchart of a protection method for a power Internet of Things terminal provided in an embodiment of the present application;

[0043] Figure 2 A schematic diagram of the structure of a protection device for an electric power Internet of Things terminal provided in an embodiment of the present application. DETAILED DESCRIPTION

[0044] As mentioned above, the data security in the existing power Internet of Things system is low. Specifically, the existing power Internet of Things system usually adopts a centralized management mode, and all devices and data are centrally managed, which makes it easy to become an attack target. Then, the existing identity authentication methods include user names, passwords, and digital certificates, but this method is vulnerable to brute force cracking and man-in-the-middle attacks. In addition, the existing methods often use SSL / TLS protocols or other encryption algorithms to encrypt data, which still has certain limitations when facing APT. This leads to the problem of low data security in the power Internet of Things system.

[0045] In order to solve the above problems, the embodiment of the present application provides a protection method for an electric power Internet of Things terminal, including: first responding to a service request initiated by a target edge computing device, authenticating the target edge computing device based on a blockchain network, and obtaining a verification result. If the verification result passes, a data link is established between the target edge computing device and the cloud network. Then, the collected data corresponding to the service request is encrypted based on the blockchain encryption algorithm. Finally, the encrypted collected data is transmitted to the cloud network through a data link for storage.

[0046] In this way, decentralized device identity authentication based on blockchain prevents illegal devices from accessing the power Internet of Things system, and the transmitted data is encrypted in combination with the blockchain encryption algorithm, thereby improving data security.

[0047] It should be noted that the protection method and related products of a power Internet of Things terminal provided by this application can be applied to the technical field of power terminal equipment. The above is only an example and does not limit the application field of the protection method and related products of a power Internet of Things terminal provided by this application.

[0048] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] The embodiment of the present application constructs a decentralized power Internet of Things terminal protection system, including edge computing devices, operators, permission management smart contracts (protection devices for power Internet of Things terminals), dynamic permission allocation modules, continuous identity authentication mechanisms, security trust computing algorithms, and device and user information storage units. Specifically, in the power Internet of Things environment, the edge computing device is responsible for initiating business requests, while the operator proposes data access requirements. The permission management smart contract is responsible for receiving requests from edge computing devices or operators and processing them according to preset rules. The continuous identity authentication mechanism ensures the real-time and accuracy of the operator's identity. The dynamic permission allocation module dynamically configures corresponding access rights for edge computing devices or operators based on the current security context and policy. The security trust computing algorithm is based on blockchain technology, comprehensively considers the identity information of edge computing devices and operators and historical behavior data, and evaluates security trust. The device and user information storage unit maintains an information storage unit containing detailed information of edge computing devices and operators.

[0050] Figure 1 A flowchart of a protection method for a power Internet of Things terminal provided in an embodiment of the present application. Figure 1 As shown, a protection method for a power Internet of Things terminal provided in an embodiment of the present application may include:

[0051] S101: In response to a service request initiated by a target edge computing device, authenticate the target edge computing device based on a blockchain network and obtain a verification result.

[0052] In actual applications, the edge computing device is responsible for initiating business requests and transmitting the data collected from the power equipment to the cloud network. The operator obtains the corresponding data from the cloud network by making an access request. The target edge computing device is one of all edge computing devices. When it initiates a business request, the protection device of the power Internet of Things terminal needs to perceive it and respond actively. Among them, the business request generally includes the identity of the requester, the resource information required to be accessed, and the type of operation. Specifically, the protection device of the power Internet of Things terminal will respond to the business request of the target edge computing device, and confirm whether the identity of the requester is legal by querying the information storage unit on the blockchain based on the identity in its business request. When the identity authentication is illegal, the verification result fails, the subsequent data processing is stopped, and feedback is given.

[0053] In addition, since the methods for authenticating the target edge computing device are different, the embodiments of the present application can illustrate a possible authentication method.

[0054] In one embodiment, the authentication of the target edge computing device based on the blockchain network includes:

[0055] Obtain a target unique identifier corresponding to the target edge computing device;

[0056] Based on the blockchain network, query whether the target unique identification code exists in the information storage unit on the blockchain; the information storage unit pre-stores the unique identification codes corresponding to all identity-compliant edge computing devices.

[0057] In practical applications, the unique identifier can be written into the business request as the identity of the edge computing device. After obtaining the target unique identifier corresponding to the target edge computing device, the protection device of the power Internet of Things terminal can compare it with the unique identification code in the information storage unit on the blockchain. If the information storage unit has the same unique identification code as the target unique identifier, it indicates that the identity authentication of the target edge computing device is legal and the verification result is passed. It can be understood that the unique identification codes corresponding to all the edge computing devices with compliant identities are pre-stored in the information storage unit.

[0058] In addition, since the methods of generating a unique identifier are not the same, the embodiment of the present application can illustrate a possible generation method.

[0059] In one embodiment, the method for generating the unique identifier includes:

[0060] Extract features of each identity-compliant edge computing device to obtain multi-dimensional composite information corresponding to each identity-compliant edge computing device;

[0061] Based on the multi-dimensional composite information corresponding to each of the identity-compliant edge computing devices, a unique identification code corresponding to each of the identity-compliant edge computing devices is generated.

[0062] In practical applications, this application abandons the traditional identification method based on the factory equipment number to generate the identification code. Instead, through in-depth feature analysis of each identity-compliant edge computing device, multi-dimensional composite information corresponding to each edge computing device is collected, and the corresponding feature information is converted into an internationally accepted device identification code. During the conversion process, the collected multi-dimensional composite information is used to calculate the unique identification code corresponding to each identity-compliant edge computing device through blockchain technology. The multi-dimensional composite information includes operating system type, real-time version, application characteristics for processing sensitive data, and user behavior patterns. The unique identification code corresponding to each identity-compliant edge computing device is stored in the information storage unit for subsequent identity authentication.

[0063] In combination with the above, the identity authentication process can be that the target edge computing device initiates an identity authentication application, and the protection device of the power Internet of Things terminal first sends the target unique identification code corresponding to the target edge computing device to the information storage unit, and generates a corresponding feature analysis data table. Then, by querying the device identification code of the target edge computing device, the device identification code is reversely analyzed through hashing, decryption, decompression and other operations on the blockchain to restore the feature analysis data table of the target edge computing device. Finally, the restored feature analysis data table is compared with the features provided in the application. If the comparison is successful, the identity authentication is passed, and it is allowed to apply for resources or perform operations; otherwise, its application is rejected.

[0064] S102: If the verification result passes, a data link is established between the target edge computing device and the cloud network.

[0065] In actual applications, if the identity authentication result of the target edge computing device is passed, it means that the target edge computing device can establish a data link with the network end and upload the processed data through a wired or wireless network. The network end includes a cloud network or a data center.

[0066] In addition, since the verification methods are not the same, the embodiment of the present application can illustrate a possible verification method.

[0067] In one embodiment, before building a data link between the target edge computing device and the cloud network, the method further includes:

[0068] Determine a target trust level of the target edge computing device; the trust level is generated and recorded in an information storage unit on the blockchain based on a secure trust computing algorithm by analyzing context information corresponding to each edge computing device;

[0069] Returning access rights for the target edge computing device based on the target trust level;

[0070] The step of establishing a data link between the target edge computing device and the cloud network includes:

[0071] Based on the access permission, a data link is constructed between the target computing device and a protected resource module corresponding to the access permission.

[0072] In practical applications, the protection device of the power Internet of Things terminal needs to dynamically control the access rights of the target edge computing device in addition to authenticating the identity of the target edge computing device. Among them, the information storage unit also records the trust levels corresponding to all edge computing devices with compliant identities. Different trust levels correspond to different access rights. For example, assuming that there are protected resource modules A, B, and C in the cloud network, the trust levels include high, medium, and low. It can be set that the low trust level does not have access rights, the medium trust level can access A, and the high trust level can access ABC. In this way, the correspondence between the customized trust level and the protected resource module can be stored in the information storage unit. Specifically, after the protection device of the power Internet of Things terminal verifies that the identity of the requester (target edge computing device) is legitimate, it further verifies whether the requester has the authority to access the required resources (determine the target trust level corresponding to the target edge computing device). Then, based on the corresponding relationship recorded in the information storage unit, the access rights corresponding to the target trust level are determined and returned to the target edge computing device, and a data link between the target computing device and the protected resource module corresponding to the access rights is constructed.

[0073] S103: Encrypt the collected data corresponding to the business request based on the blockchain encryption algorithm.

[0074] In practical applications, the embodiment of the present application uses a blockchain encryption algorithm to encrypt the transmission data between the target edge computing device and the business opportunity system (cloud network) to ensure the confidentiality and integrity of the data.

[0075] S104: Transmitting the encrypted collected data to the cloud network via the data link for storage.

[0076] In actual applications, the protection device of the power Internet of Things terminal is based on the data link between the target computing device and the cloud network. It sends the encrypted collected data to the protected resource module corresponding to the access rights of the target computing device through wired or wireless means for storage to complete data transmission.

[0077] In addition, since the adjustment methods of access rights are not the same, the embodiment of the present application can illustrate a possible adjustment method.

[0078] In one embodiment, the method further comprises:

[0079] Obtaining all behavior information of the target edge computing device;

[0080] The access rights corresponding to the target edge computing device are adjusted based on the behavior information and recorded in the information storage unit on the blockchain.

[0081] In practical applications, the embodiment of the present application provides a dynamic and fine-grained permission management strategy. Based on the dynamic authorization model, the dynamic authorization dynamically adjusts the respective permission allocation according to the real-time trust evaluation results of the device and the user, thereby automatically updating the access rights of the device and the user without manual intervention by the administrator. This mechanism supports fine-grained permission allocation based on various attribute information such as device characteristics, user behavior, resource type, etc. And make full use of the transparency and immutability of blockchain technology to ensure the fairness and security of the permission allocation process. When a large number of identity-compliant edge computing devices are stored in the information storage unit, the dynamic authorization model will assign corresponding roles to them through the blockchain smart contract according to the initialization rules after confirming the operator's identity information, thereby realizing the initialization permission allocation, and starting real-time monitoring of each identity-compliant edge computing device for continuous trust evaluation. Specifically, taking the target edge computing device requesting to upload collected data as an example, the protection device of the power Internet of Things terminal will obtain all the behavior information of the target edge computing device during the entire data upload process and record it in the blockchain. The dynamic authorization model is based on blockchain technology. Through the secure trust computing algorithm, it comprehensively considers all the behavior information of the target edge computing device (through the flow detection and analysis tools, intrusion detection systems, data acquisition modules and behavior tracking and statistical tools deployed in the power Internet of Things, key user context information and behavior status data such as access flow value, network status, data packet transmission rate, packet loss rate, etc.), so as to obtain the trust value of the target edge computing device. Then, the trust value and risk value of the target edge computing device are comprehensively evaluated to obtain its corresponding target trust level. Then, combined with the correspondence between the above-mentioned pre-stored access rights and trust levels, the current access rights of the target edge computing device are determined, adjusted and recorded in the information storage unit on the blockchain. In addition, the risk value is calculated by the pre-defined mapping relationship between user behavior and internal risk, combined with the normality of user behavior.

[0082] In addition, since the processing methods corresponding to different trust levels and different behavior information are not exactly the same, the embodiment of the present application can illustrate a possible processing method.

[0083] In one embodiment, the method further comprises:

[0084] If the target trust level of the target edge computing device is lower than a preset trust threshold and / or the current behavior information is abnormal, the authorization relationship between the target edge computing device and the corresponding access permission is revoked.

[0085] In practical applications, a trust threshold can be preset to determine the authorization relationship of the visitor. Specifically, taking the target edge computing device as an example, the protection device of the power Internet of Things terminal can be based on a dynamic authorization model to detect abnormal behavior according to the historical and current behavior data of the target edge computing device. If the calculation result shows that the trust level of the target edge computing device is lower than the preset trust threshold and / or the current behavior information is abnormal, the authorization relationship between it and the corresponding authority is automatically revoked through the blockchain (that is, the authorization relationship between the target edge computing device and the corresponding access rights is revoked). For example, the original trust level of the target edge computing device is medium, and it can access the protected resource module A. If it is detected that the target edge computing device has abnormal behavior information and / or the current trust level of the target edge computing device is low through a comprehensive evaluation of the trust level, the access rights between it and the protected resource module A are automatically revoked through the blockchain, and the emergency response mechanism is triggered to isolate and repair the abnormal device.

[0086] In addition, since the sender of the request is different, when the sender of the request is the manipulator, the method further includes:

[0087] In response to the access request of the target operator, the target operator is authenticated based on the blockchain network and a verification result is obtained;

[0088] If the verification result is passed, a data link between the target operator and the cloud network is established;

[0089] The access data corresponding to the access request is sent to the target operator through the data link.

[0090] In actual applications, it is not only edge computing devices that send requests to the cloud network, but also operators. Operators usually make data access requests to the cloud network, that is, send access requests, and then read the stored data. The target operator is one of many operators. When the target operator initiates an access request, the protection device of the power Internet of Things terminal also needs to sense and actively respond. Then, the target operator is authenticated in the same way as the edge computing device. When the verification result passes, the target trust level of the target operator is determined, and the corresponding access rights of the target operator are returned. Finally, a data link is constructed between the target operator and the protected resource module corresponding to its access rights, and the access data corresponding to the access request is returned to the target operator.

[0091] To summarize, the present application first responds to the business request initiated by the target edge computing device, authenticates the target edge computing device based on the blockchain network, and obtains the verification result. If the verification result is passed, a data link is established between the target edge computing device and the cloud network. Then, the collected data corresponding to the business request is encrypted based on the blockchain encryption algorithm. Finally, the encrypted collected data is transmitted to the cloud network through the data link for storage. In this way, the identity authentication of decentralized devices is performed based on the blockchain, which prevents illegal devices from accessing the power Internet of Things system, and the transmission data is encrypted and transmitted in combination with the blockchain encryption algorithm, thereby improving the security of the data.

[0092] Figure 2 A schematic diagram of the structure of a protection device for a power Internet of Things terminal provided in an embodiment of the present application. Figure 2 As shown, the protection device 200 of the power Internet of Things terminal provided in the embodiment of the present application includes:

[0093] The identity verification module 201 is used to respond to the service request initiated by the target edge computing device, verify the identity of the target edge computing device based on the blockchain network, and obtain a verification result;

[0094] A construction module 202 is used to construct a data link between the target edge computing device and the cloud network if the verification result passes;

[0095] A data encryption module 203 is used to encrypt the collected data corresponding to the business request based on a blockchain encryption algorithm;

[0096] The data transmission module 204 is used to transmit the encrypted collected data to the cloud network through the data link for storage.

[0097] As an implementation method, regarding how to authenticate the target edge computing device, the above-mentioned authentication module 201 is specifically used for:

[0098] Obtain a target unique identifier corresponding to the target edge computing device;

[0099] Based on the blockchain network, query whether the target unique identification code exists in the information storage unit on the blockchain; the information storage unit pre-stores the unique identification codes corresponding to all identity-compliant edge computing devices.

[0100] As an implementation method, with respect to how to generate a unique identifier, the protection device 200 of the power Internet of Things terminal further includes: a generation module;

[0101] A generation module is used to extract features of each identity-compliant edge computing device to obtain multi-dimensional composite information corresponding to each identity-compliant edge computing device;

[0102] Based on the multi-dimensional composite information corresponding to each of the identity-compliant edge computing devices, a unique identification code corresponding to each of the identity-compliant edge computing devices is generated.

[0103] As an implementation method, with respect to how to determine the access rights of the target edge computing device, the protection device 200 of the power Internet of Things terminal further includes: an access rights module;

[0104] An authority access module, used to determine a target trust level of the target edge computing device; the trust level is generated and recorded in an information storage unit on the blockchain based on a secure trust computing algorithm by analyzing the context information corresponding to each edge computing device;

[0105] Based on the target trust level, access permissions are returned for the target edge computing device.

[0106] As an implementation method, regarding how to construct a data link, the construction module 202 is specifically used to:

[0107] Based on the access permission, a data link is constructed between the target computing device and a protected resource module corresponding to the access permission.

[0108] As an implementation method, with respect to how to adjust access rights, the protection device 200 of the power Internet of Things terminal further includes: an adjustment module;

[0109] An adjustment module, used to obtain all behavior information of the target edge computing device;

[0110] The access rights corresponding to the target edge computing device are adjusted based on the behavior information and recorded in the information storage unit on the blockchain.

[0111] As an implementation method, with respect to how to process service requests of edge computing devices corresponding to different target trust levels, the protection device 200 of the power Internet of Things terminal further includes: a processing module;

[0112] A processing module is used to revoke the authorization relationship between the target edge computing device and the corresponding access permission when the target trust level of the target edge computing device is lower than a preset trust threshold and / or the current behavior information is abnormal.

[0113] As an implementation method, when processing an operator's access request, the identity verification module 201 is further used to respond to the target operator's access request, verify the identity of the target operator based on the blockchain network, and obtain a verification result;

[0114] The construction module 202 is further used to construct a data link between the target operator and the cloud network if the verification result passes;

[0115] The data transmission module 204 is further configured to send the access data corresponding to the access request to the target operator via the data link.

[0116] To summarize, the present application first responds to the business request initiated by the target edge computing device, authenticates the target edge computing device based on the blockchain network, and obtains the verification result. If the verification result is passed, a data link is established between the target edge computing device and the cloud network. Then, the collected data corresponding to the business request is encrypted based on the blockchain encryption algorithm. Finally, the encrypted collected data is transmitted to the cloud network through the data link for storage. In this way, the identity authentication of decentralized devices is performed based on the blockchain, which prevents illegal devices from accessing the power Internet of Things system, and the transmission data is encrypted and transmitted in combination with the blockchain encryption algorithm, thereby improving the security of the data.

[0117] In addition, the present application also provides a protection device for a power Internet of Things terminal, including:

[0118] Memory for storing computer programs;

[0119] A processor is used to implement the steps of the protection method for the electric power Internet of Things terminal as described in any of the above items when executing the computer program.

[0120] In addition, the present application also provides a readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the protection method for the electric power Internet of Things terminal as described in any of the above items are implemented.

[0121] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A protection method for a power Internet of Things terminal, characterized in that: The method comprises: In response to a service request initiated by a target edge computing device, authenticate the target edge computing device based on a blockchain network and obtain a verification result; If the verification result passes, a data link between the target edge computing device and the cloud network is established; Encrypting the collected data corresponding to the business request based on a blockchain encryption algorithm; The encrypted collected data is transmitted to the cloud network through the data link for storage.

2. The method according to claim 1, characterized in that: The authenticating the target edge computing device based on the blockchain network includes: Obtain a target unique identifier corresponding to the target edge computing device; Based on the blockchain network, query whether the target unique identification code exists in the information storage unit on the blockchain; the information storage unit pre-stores the unique identification codes corresponding to all identity-compliant edge computing devices.

3. The method according to claim 2, characterized in that The method for generating the unique identifier includes: Extract features of each identity-compliant edge computing device to obtain multi-dimensional composite information corresponding to each identity-compliant edge computing device; Based on the multi-dimensional composite information corresponding to each of the identity-compliant edge computing devices, a unique identification code corresponding to each of the identity-compliant edge computing devices is generated.

4. The method according to claim 1, characterized in that Before building the data link between the target edge computing device and the cloud network, the method further includes: Determine a target trust level of the target edge computing device; the trust level is generated and recorded in an information storage unit on the blockchain based on a secure trust computing algorithm by analyzing context information corresponding to each edge computing device; Returning access rights for the target edge computing device based on the target trust level; The step of establishing a data link between the target edge computing device and the cloud network includes: Based on the access permission, a data link is constructed between the target computing device and a protected resource module corresponding to the access permission.

5. The method according to claim 4, characterized in that The method further comprises: Obtaining all behavior information of the target edge computing device; The access rights corresponding to the target edge computing device are adjusted based on the behavior information and recorded in the information storage unit on the blockchain.

6. The method according to claim 5, characterized in that The method further comprises: If the target trust level of the target edge computing device is lower than a preset trust threshold and / or the current behavior information is abnormal, the authorization relationship between the target edge computing device and the corresponding access permission is revoked.

7. The method according to claim 1, characterized in that The method further comprises: In response to the access request of the target operator, the target operator is authenticated based on the blockchain network and a verification result is obtained; If the verification result is passed, a data link between the target operator and the cloud network is established; The access data corresponding to the access request is sent to the target operator through the data link.

8. A protection device for a power Internet of Things terminal, characterized in that: include: An identity verification module, configured to respond to a service request initiated by a target edge computing device, verify the identity of the target edge computing device based on a blockchain network, and obtain a verification result; A construction module, configured to construct a data link between the target edge computing device and the cloud network if the verification result passes; A data encryption module, used to encrypt the collected data corresponding to the business request based on a blockchain encryption algorithm; The data transmission module is used to transmit the encrypted collected data to the cloud network through the data link for storage.

9. A protection device for a power Internet of Things terminal, characterized in that: include: Memory for storing computer programs; A processor, used to implement the steps of the protection method for the electric power Internet of Things terminal as described in any one of claims 1 to 7 when executing the computer program.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the protection method for the electric power Internet of Things terminal as claimed in any one of claims 1 to 7 are implemented.

Images