Power grid upgrading mirror image data transmission method and system

Abstract

The invention discloses a power grid upgrading mirror image data transmission method and system, and the method comprises the steps that a transmitting end generates a first key sequence and a second key sequence based on a preset iteration algorithm and two different pieces of initial iteration information; the sending end encrypts the power grid upgrading mirror image data based on the first key sequence and a first encryption algorithm to generate a first layer of encrypted data sequence; the sending end encrypts the first-layer encrypted data sequence based on a second key sequence and a second encryption algorithm to generate a second-layer encrypted data sequence; and the receiving end performs hierarchical decryption on the second-layer encrypted data sequence based on the first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrading mirror image data. Through the technical scheme of the embodiment of the invention, safe transmission of the power grid upgrading mirror image data is realized, the possibility that an encryption algorithm is cracked by brute force can be reduced, the transmission safety of the power grid upgrading mirror image data is improved, and the operation safety of a power grid is ensured.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method and system for power grid upgrade mirror data transmission. Background Art

[0002] As power technology develops, grid equipment requires regular software upgrades to maintain its performance and security. These upgrades usually involve transferring new operating system images to the devices. However, since grid equipment is widely distributed and some equipment may be located in remote or unsafe places, the security of grid upgrade image data needs to be ensured during the transmission process.

[0003] At present, the traditional transmission method of power grid upgrade mirror data usually uses a single encryption algorithm and key to encrypt the power grid upgrade mirror data to be transmitted. However, this traditional single encryption algorithm can often be cracked by brute force, and cannot guarantee the security of power grid upgrade mirror data transmission. Power grid upgrade mirror data often contains sensitive information. Once leaked, the security of power grid operation cannot be guaranteed. Summary of the invention

[0004] The present invention provides a power grid upgrade mirror data transmission method and system to achieve secure transmission of power grid upgrade mirror data, which can reduce the possibility of encryption algorithm being brute force cracked, improve the security of power grid upgrade mirror data transmission, and ensure the security of power grid operation.

[0005] In a first aspect, an embodiment of the present invention provides a method for transmitting mirrored data for power grid upgrade, including:

[0006] The sending end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol;

[0007] The transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence;

[0008] The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end;

[0009] The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0010] In a second aspect, an embodiment of the present invention further provides a power grid upgrade mirror data transmission system, the system comprising: a transmitting end and a receiving end; wherein,

[0011] The sending end is used to generate different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and send the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol;

[0012] The transmitting end is used to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence;

[0013] The sending end is used to encrypt the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and send the second-layer encrypted data sequence to the receiving end;

[0014] The receiving end is used to perform hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0015] According to the technical solution of the embodiment of the present invention, the transmitting end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol, which can ensure the security of the key during transmission and the uniqueness of different key sequences, thereby reducing the risk of key reuse. The transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first-layer encrypted data sequence, thereby preliminarily improving the security of the data. The transmitting end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end, thereby further improving the security of the data. The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data, thereby ensuring the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. At the same time, the use of the secure key exchange protocol also ensures the security of key transmission, which can greatly reduce the possibility of the encryption algorithm being brute-force cracked and improve the security of power grid upgrade mirror data transmission. Furthermore, the decryption of encrypted data through the double-layer decryption mechanism can ensure the integrity and security of the data, while ensuring the security of the system, the efficiency of encryption and decryption is improved.

[0016] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 is a flowchart of a power grid upgrade mirror data transmission method provided according to the first embodiment of the present invention;

[0019] Figure 2 is a flowchart of a power grid upgrade mirror data transmission method provided according to Embodiment 2 of the present invention;

[0020] Figure 3It is a structural diagram of a power grid upgrade mirror data transmission system provided according to Embodiment 3 of the present invention. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0022] It should be noted that the terms "target", "current", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0023] Embodiment 1

[0024] Figure 1 A flowchart of a method for transmitting power grid upgrade mirror data is provided for the first embodiment of the present invention. This embodiment is applicable to the case where power grid upgrade mirror data is securely transmitted. Figure 1 As shown, the method can be performed by a power grid upgrade mirror data transmission system, and the power grid upgrade mirror data transmission system can be implemented in the form of hardware and / or software. Figure 1 As shown, the method specifically comprises the following steps:

[0025] S110. The sending end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol.

[0026] Among them, the sending end may refer to an end that sends the data to be transmitted to the receiving end. The preset iterative algorithm may refer to an algorithm for generating a numerical sequence. For example, the preset iterative algorithm may be a nonlinear iterative equation. The initial iteration information may refer to the initial data or state required for the preset iterative algorithm to start operation. The first key sequence may refer to a set of numerical sequences for generating keys obtained by iteratively operating the preset iterative algorithm. The second key sequence may refer to a set of numerical sequences for generating keys obtained by iteratively operating the preset iterative algorithm and different from the first key sequence. The secure key exchange protocol may refer to a protocol for securely exchanging keys between a sending end and a receiving end. The receiving end may refer to an end that receives encrypted data and decrypts it.

[0027] Specifically, the sending end can provide two different initial iteration information for the preset iteration algorithm, and generate different highly random and unpredictable first key sequences and second key sequences according to the different initial iteration information, thereby helping to enhance the security of the subsequent encryption process. The sending end sends the first key sequence and the second key sequence to the receiving end according to the secure key exchange protocol, which can ensure that the key sequence is not stolen or tampered with during the transmission process.

[0028] Exemplarily, the preset iterative algorithm may be as follows:

[0029] x n+1 =λx n (1-x n )

[0030] Among them, the initial iteration information includes the initial state value x 0 and control parameters λ, x n is the state value of the preset iterative algorithm at the nth iteration, x n+1 It is the state value of the preset iterative algorithm at the n+1th iteration.

[0031] Exemplarily, "the sending end generates a first key sequence and a second key sequence based on a preset iterative algorithm, a first initial condition and a second initial condition" in S110 may include: iterative processing based on a preset iterative algorithm and first initial iterative information in the preset iterative algorithm to generate a first state value sequence; iterative processing based on a preset iterative algorithm and second initial iterative information in the preset iterative algorithm to generate a second state value sequence; based on a preset sequence length, intercepting the first state value sequence and the second state value sequence in a front-to-back order, respectively, to obtain a first key sequence of a preset sequence length and a second key sequence of a preset sequence length.

[0032] The first state value sequence may refer to a series of state values ​​generated by the transmitter after iterative processing according to a preset iterative algorithm and the first initial iterative information. The second state value sequence may refer to a series of state values ​​generated by the transmitter after iterative processing according to a preset iterative algorithm and the second initial iterative information. The preset sequence length may refer to the length of a preset key sequence.

[0033] Specifically, the transmitting end inputs the first initial iteration information into the preset iteration algorithm, and generates a first state value sequence including multiple highly random and difficult to predict state values ​​through multiple iterations. Similar to the generation of the first state value sequence, the transmitting end inputs the second initial iteration information into the preset iteration algorithm, and generates a second state value sequence including multiple highly random and difficult to predict state values ​​through multiple iterations. After the first state value sequence and the second state value sequence are generated, the transmitting end intercepts subsequences of preset sequence lengths from the first state value sequence and the second state value sequence in a front-to-back order according to the preset sequence length to obtain the first key sequence and the second key sequence, which can ensure that the subsequently generated keys have a fixed length, thereby helping to simplify the subsequent encryption and decryption process.

[0034] Exemplarily, every 8 bits in the first state value sequence may be taken as a byte to form a first key sequence with a preset sequence length of 128 bits.

[0035] Exemplarily, iterative processing is performed based on a preset iterative algorithm and the first initial iterative information in the preset iterative algorithm to generate a first state value sequence, including: obtaining a first initial state value and a first parameter value of a control parameter based on the first initial iterative information in the preset iterative algorithm; performing a first iteration based on the first initial state value and the first parameter value of the control parameter to obtain a state value after the first iteration, and performing a next iteration based on the state value after the previous iteration and the first parameter value of the control parameter to obtain a state value after the next iteration; and combining the state values ​​after each iteration based on a preset number of iterations to obtain a first state value sequence.

[0036] The first initial state value may refer to one or more values ​​used to initialize the iterative process when the iterative algorithm starts to execute. The control parameter may refer to a set of parameters used to control the iterative process in the iterative algorithm, and the parameter may be a state value transformation rule. The first parameter value may refer to a specific value of the control parameter. The preset number of iterations may refer to the preset number of repeated executions of the preset iterative algorithm.

[0037] Specifically, the sending end first reads the first initial iteration information defined in the preset iteration algorithm to obtain the first initial state value and the first parameter value of the control parameter. The sending end inputs the first initial state value and the first parameter value of the control parameter into the preset iteration algorithm for the first iteration. The iteration algorithm calculates a new state value based on these input values ​​and uses the new state value as the input for the next iteration. After the first iteration, the sending end inputs the state value after each iteration (i.e., the result of the previous iteration) and the first parameter value of the control parameter into the iteration algorithm again for the next iteration. After reaching the preset number of iterations, the sending end can combine the state value after each iteration in the iteration order to form a complete first state value sequence, which will serve as the basis for generating the first key sequence. By combining the state values ​​after multiple iterations, a key sequence with sufficient length and complexity can be generated, and the randomness and unpredictability of the sequence make it difficult to be cracked or analyzed, thereby improving the security of encryption.

[0038] S120: The sending end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first-layer encrypted data sequence.

[0039] The first encryption algorithm may refer to an algorithm for data encryption. For example, the first encryption algorithm may be a symmetric encryption algorithm (Advanced Encryption Standard, AES). The power grid upgrade mirror data may refer to a data copy created during the power grid upgrade process to maintain data consistency and integrity. The first layer of encrypted data sequence may refer to a data sequence obtained after encrypting the data using the first encryption algorithm.

[0040] Specifically, the sending end selects a first encryption algorithm (such as AES) and uses a first key sequence to encrypt the power grid upgrade image data to be transmitted to generate a first-layer encrypted data sequence, thereby providing preliminary data protection for the power grid upgrade image data to be transmitted. Even if the data is stolen during the transmission process, the data cannot be decrypted without the corresponding key and encryption algorithm.

[0041] S130: The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end.

[0042] The second encryption algorithm may refer to an algorithm for data encryption. For example, the second encryption algorithm may be an asymmetric encryption algorithm (Rivest-Shamir-Adleman, RSA). The second layer of encrypted data sequence may refer to a data sequence obtained after encrypting data using the second encryption algorithm.

[0043] Specifically, the sender selects a second encryption algorithm (such as RSA) that is different from the first encryption algorithm, and uses the second key sequence to re-encrypt the first-layer encrypted data sequence to generate a second-layer encrypted data sequence, thereby increasing the difficulty of data cracking and further enhancing the confidentiality of the data. Even if the first layer of encryption is cracked, the attacker still needs to crack the second layer of encryption to obtain the original data. The sender sends the second layer of encrypted data sequence to the receiver. Since the data has been double-encrypted, it is difficult to decrypt or identify the original content even if it is stolen or tampered with during transmission, ensuring the security and integrity of the data during transmission and preventing the risk of data leakage or tampering.

[0044] Exemplarily, S130 may include: generating a second public key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm; performing block processing on the first-layer encrypted data sequence based on the sequence length corresponding to the second public key sequence, and obtaining multiple data blocks to be encrypted in the first-layer encrypted data sequence with the same sequence length as the second public key sequence; performing data encryption processing on each data block to be encrypted based on the second public key sequence and the second encryption algorithm, and generating a second-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0045] The second public key sequence may refer to a public key generated by the sender according to the second key sequence when the second encryption algorithm is used. The data block to be encrypted may refer to a plurality of data fragments having the same length (or compatible with) the second public key sequence into which the first layer encrypted data sequence is divided during the encryption process.

[0046] Specifically, the sender uses the second key sequence to generate the corresponding second public key sequence according to the requirements of the second encryption algorithm. This usually involves converting the second key sequence into an integer, and then applying the second encryption algorithm to generate the second public key sequence. This public key sequence will be used to encrypt data, and the private key corresponding to the public key can be retained in the sender for subsequent data decryption. The sender determines the sequence length of the second public key sequence, that is, the maximum data block size that the public key can handle. According to this length, the first-layer encrypted data sequence is processed in blocks, and it is divided into multiple data blocks to be encrypted with the same sequence length as the second public key sequence. The sender uses the second public key sequence and the second encryption algorithm to encrypt each data block to be encrypted. The encrypted data blocks are combined into a second-layer encrypted data sequence, which is the data to be sent to the receiving end in the end. The sender sends the second-layer encrypted data sequence to the receiving end through a secure communication channel to ensure that each data block can be correctly processed by the second encryption algorithm, avoiding the problem of being unable to encrypt due to the large size of the data block, and improving the security of the data.

[0047] Exemplarily, the second key sequence can be converted into an integer, and the generated integer and the parameters p, q, e, and d required by the second encryption algorithm (taking RSA as an example) are used to generate the RSA public key and private key pair to obtain the second public key sequence; wherein p and q are two prime numbers generated by a random generation algorithm; e is the exponent of the public key; d is the exponent of the private key, satisfying e×d≡1(mod(p-1)(q-1)).

[0048] S140. The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm, and the second encryption algorithm to obtain power grid upgrade mirror data.

[0049] Specifically, after receiving the second-layer encrypted data sequence, the receiving end first uses the second key sequence and the second encryption algorithm to decrypt the received second-layer encrypted data sequence to obtain the first-layer encrypted data sequence. Then, the first key sequence and the first encryption algorithm are used to decrypt the decrypted first-layer encrypted data sequence, and finally the original power grid upgrade mirror data is obtained. The correctness and integrity of the data can be ensured through the layered decryption process. Only with the correct key and encryption algorithm can the data be decrypted, thereby verifying the source and integrity of the data.

[0050] Exemplarily, S140 may include: decrypting the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm to obtain the first-layer encrypted data sequence; decrypting the first-layer encrypted data sequence based on the received first key sequence and the first encryption algorithm to obtain the power grid upgrade mirror data.

[0051] Specifically, the receiving end first receives the second layer of encrypted data sequence sent by the sending end. The receiving end obtains the second key sequence and the second encryption algorithm corresponding to the second layer of encrypted data sequence. These keys and algorithms may be pre-distributed through a secure channel. The second layer of encrypted data sequence is decrypted using the second key sequence and the second encryption algorithm to obtain the first layer of encrypted data sequence. By using the second key sequence and the second encryption algorithm corresponding to the sending end for decryption, the security of the data during transmission can be ensured. The receiving end obtains the first key sequence and the first encryption algorithm corresponding to the first layer of encrypted data sequence. These keys and algorithms may also be pre-distributed through a secure channel. The first layer of encrypted data sequence is decrypted using the first key sequence and the first encryption algorithm, and the decrypted data is the original power grid upgrade image data. By decrypting the first layer of encrypted data sequence, the receiving end can restore the original power grid upgrade image data, and use the first key sequence and the first encryption algorithm for decryption to provide additional protection for the data and further enhance the security of the data.

[0052] Exemplarily, based on the received second key sequence and the second encryption algorithm, the received second-layer encrypted data sequence is decrypted to obtain the first-layer encrypted data sequence, including: based on the second key sequence and the second encryption algorithm, generating a second private key sequence corresponding to the second encryption algorithm; based on the sequence length corresponding to the second private key sequence, performing block processing on the second-layer encrypted data sequence to obtain a plurality of data blocks to be decrypted in the second-layer encrypted data sequence with the same sequence length as the second private key sequence; based on the second private key sequence and the second encryption algorithm, performing data decryption processing on each data block to be decrypted to generate a first-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0053] The second private key sequence may refer to a private key generated by the receiving end according to the second key sequence when the second encryption algorithm is used. The data block to be decrypted may refer to a data fragment having the same length as the second private key sequence, which is separated from the second layer encrypted data sequence during the decryption process.

[0054] Specifically, the receiving end first receives the second key sequence and the second encryption algorithm distributed by the sending end through a secure channel. According to the requirements of the second encryption algorithm, the receiving end uses the second key sequence and the corresponding algorithm logic to generate the second private key sequence corresponding to the second encryption algorithm. By using the key sequence and the algorithm logic to generate the private key sequence, the flexibility of key management is increased, so that the receiving end can generate or update the private key as needed. After the receiving end obtains the second private key sequence, it determines its sequence length, that is, the maximum data block size that the private key can process. According to the length of the private key sequence, the second-layer encrypted data sequence is processed in blocks, and it is divided into multiple data blocks to be decrypted with the same length as the private key sequence. Through the block processing, it is ensured that each data block to be decrypted can match the length of the private key sequence, thereby ensuring the smooth progress of the decryption process and improving the decryption efficiency. The receiving end uses the second private key sequence and the second encryption algorithm to decrypt each data block to be decrypted. The decrypted data blocks are combined into the first-layer encrypted data sequence. Through the decryption operation, the receiving end can restore the first-layer encrypted data sequence, providing a basis for subsequent decryption.

[0055] Exemplarily, the second encryption algorithm can be an RSA algorithm, and the receiving end can obtain the second private key sequence (d, n') corresponding to the RSA, or generate it according to the second key sequence, where d is the exponent of the private key, n' is the modulus of the public key, n'=p×q, p and q are two prime numbers; decompose the second-layer encrypted data into multiple data blocks, and the size of each data block is the same as the block size used for RSA public key encryption; and decrypt each data block according to the second key sequence.

[0056] According to the technical solution of the embodiment of the present invention, the sending end generates different first key sequences and second key sequences based on the preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and sends the first key sequence and the second key sequence to the receiving end based on the secure key exchange protocol, which can ensure the security of the key during the transmission process and the uniqueness of different key sequences, thereby reducing the risk of the key being reused. The sending end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first-layer encrypted data sequence, thereby preliminarily improving the security of the data. The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end, thereby further improving the security of the data. The receiving end decrypts the received second-layer encrypted data sequence in layers based on the received first key sequence, the second key sequence, the first encryption algorithm, and the second encryption algorithm to obtain the power grid upgrade mirror data, thereby ensuring the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. At the same time, the use of the secure key exchange protocol also ensures the security of key transmission, which can greatly reduce the possibility of the encryption algorithm being brute-force cracked and improve the security of power grid upgrade mirror data transmission. Furthermore, the decryption of encrypted data through the double-layer decryption mechanism can ensure the integrity and security of the data, while ensuring the security of the system, the efficiency of encryption and decryption is improved.

[0057] It should be noted that, after completing the transmission of the power grid upgrade mirror data, the above scheme can also encrypt, transmit and decrypt the metadata corresponding to the power grid upgrade mirror data to achieve functional verification of the power grid upgrade mirror data, wherein the metadata corresponding to the power grid upgrade mirror data can refer to data used to describe the power grid upgrade mirror data itself and its related attributes, and these data provide additional information about the power grid upgrade mirror data. Specifically, the sending end can generate a third key sequence according to a preset iteration algorithm and new initial iteration information, and send the third key sequence to the receiving end according to a secure key exchange protocol; the sending end performs block encryption on the metadata corresponding to the power grid upgrade mirror data to be transmitted based on the third key sequence and the third encryption algorithm to generate an encrypted data sequence; the receiving end decrypts the received encrypted data sequence based on the received third key sequence and the third encryption algorithm to obtain the metadata corresponding to the power grid upgrade mirror data, and verifies the metadata.

[0058] For example, the metadata may contain a checksum or hash value that can be used to verify the integrity of the data. The receiver can calculate the hash value of the decrypted data and compare it with the hash value provided in the metadata. If the two match, it means that the data has not been tampered with. The metadata may be digitally signed by the sender using a private key. The receiver can use the sender's public key to verify the validity of the digital signature. If the signature verification passes, it means that the data came from the sender and has not been tampered with.

[0059] Embodiment 2

[0060] Figure 2 This is a flowchart of a method for transmitting power grid upgrade mirror data provided in Embodiment 2 of the present invention. Based on the above embodiments, this embodiment optimizes the step of "the transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence". The explanations of the terms that are the same or corresponding to the above embodiments are not repeated here.

[0061] See also Figure 2 Another power grid upgrade mirror data transmission method provided in this embodiment specifically includes the following steps:

[0062] S210. The sending end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol.

[0063] S220 . Based on the sequence length corresponding to the first key sequence, block processing is performed on the power grid upgrade mirror data to be transmitted to obtain a plurality of data blocks to be encrypted having the same sequence length as the first key sequence in the power grid upgrade mirror data to be transmitted.

[0064] Specifically, the sending end needs to determine the length of the first key sequence, which is usually related to the requirements of the encryption algorithm and the key management strategy. Then, according to the length of the first key sequence, the sending end divides the power grid upgrade image data to be transmitted into multiple encrypted data blocks with the same length as the first key sequence. Through block processing, it can be ensured that each encrypted data block can match the length of the first key sequence, thereby meeting the requirements of the encryption algorithm, thereby optimizing the encryption process and improving encryption efficiency.

[0065] S230: Based on the first key sequence and the first encryption algorithm, perform data encryption processing on each data block to be encrypted to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0066] Specifically, the sending end selects a suitable first encryption algorithm according to security requirements and characteristics of the encryption algorithm. Each data block to be encrypted is encrypted using the first key sequence and the first encryption algorithm. The encrypted data blocks are combined into a first layer of encrypted data sequence. Through encryption processing, the confidentiality of the power grid upgrade mirror data during transmission can be ensured, and even if the data is intercepted, the attacker cannot easily decrypt the data block.

[0067] Exemplarily, S230 may include: after the encryption of the current data block to be encrypted is completed, updating the current first key sequence based on a preset update algorithm, and performing data encryption processing on the next data block to be encrypted based on the first encryption algorithm and the updated first key sequence, until the data encryption operation on all data blocks to be encrypted is completed, and the first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted is obtained.

[0068] The current data block to be encrypted may refer to a data block to be encrypted that is currently being prepared for encryption after the power grid upgrade mirror data is divided into multiple data blocks with the same length as the first key sequence. The preset update algorithm may refer to an algorithm for updating the key sequence, which processes the current key sequence according to certain rules and parameters to generate a new, more secure key sequence.

[0069] Specifically, the current data block to be encrypted is encrypted using the first key sequence and the first encryption algorithm. After the encryption of the current data block to be encrypted is completed, the current first key sequence is updated based on the preset update algorithm to increase the complexity and security of the key. The next data block to be encrypted is encrypted using the updated first key sequence and the first encryption algorithm. Repeat the above steps until the data encryption operation for all data blocks to be encrypted is completed. All encrypted data blocks are combined in sequence to form a first layer of encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted. By continuously updating the key sequence, the difficulty of cracking the data can be greatly increased, thereby improving the security of the data. Even if a key is cracked, other data blocks remain safe due to the continuous updating of the key.

[0070] Exemplarily, the preset update algorithm may be as follows:

[0071]

[0072] in, is the control parameter, K n is the current first key sequence, K n+1 The updated current first key sequence.

[0073] Exemplarily, updating the current first key sequence based on a preset update algorithm includes: using the current first key sequence as the initial state sequence of the preset update algorithm, determining the current state sequence of the preset update algorithm based on the initial state sequence and a control parameter value, and determining the current state sequence as the updated current first key sequence.

[0074] The current first key sequence may refer to a key sequence currently being used to encrypt the current data block to be encrypted during the encryption process.

[0075] Specifically, the current first key sequence is used as the initial state sequence of the preset update algorithm. This means that the current key sequence will be used as the starting point of the update process to generate a new, updated key sequence. Based on the initial state sequence and the control parameter value, the preset update algorithm is run to determine the current state sequence of the algorithm to ensure that the generated key sequence has sufficient security and complexity. The current state sequence is determined as the updated current first key sequence, thereby obtaining a new, more secure key sequence for subsequent encryption operations. By continuously updating the key sequence, the complexity and unpredictability of the key are increased, thereby improving the security of the key, helping to prevent attackers from obtaining sensitive information through brute force cracking or analyzing the key pattern. Even if a key is cracked, the entire encryption system can still maintain a high level of security due to the continuous updating of the key.

[0076] S240: The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end.

[0077] S250. The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm, and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0078] The technical solution of the embodiment of the present invention performs block processing on the power grid upgrade mirror data to be transmitted based on the sequence length corresponding to the first key sequence, and obtains multiple data blocks to be encrypted in the power grid upgrade mirror data to be transmitted with the same sequence length as the first key sequence, thereby simplifying the encryption process and improving encryption efficiency. Based on the first key sequence and the first encryption algorithm, data encryption processing is performed on each data block to be encrypted to generate a first-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted, thereby ensuring the confidentiality and integrity of the data. Through block processing and data encryption processing, the sending end can ensure the security of the power grid upgrade mirror data to be transmitted during the transmission process. Even if part of the data is stolen or tampered with, the data of other parts still remain encrypted, thereby protecting the security of the overall data.

[0079] Embodiment 3

[0080] Figure 3 This is a schematic diagram of the structure of a power grid upgrade mirror data transmission system provided by the third embodiment of the present invention. Figure 3 As shown, the system includes: a transmitting end 310 and a receiving end 320.

[0081] The sending end 310 is used to generate different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and send the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol;

[0082] The transmitting end 310 is used to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence;

[0083] The sending end 310 is used to encrypt the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and send the second-layer encrypted data sequence to the receiving end;

[0084] The receiving end 320 is used to perform hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0085] In the technical solution of this embodiment, the transmitting end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol, which can ensure the security of the key during transmission and the uniqueness of different key sequences, thereby reducing the risk of key reuse. The transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first-layer encrypted data sequence, thereby preliminarily improving the security of the data. The transmitting end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end, thereby further improving the security of the data. The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm, and the second encryption algorithm to obtain the power grid upgrade mirror data, thereby ensuring the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. At the same time, the use of the secure key exchange protocol also ensures the security of key transmission, which can greatly reduce the possibility of the encryption algorithm being brute-force cracked and improve the security of power grid upgrade mirror data transmission. Furthermore, the decryption of encrypted data through the double-layer decryption mechanism can ensure the integrity and security of the data, while ensuring the security of the system, the efficiency of encryption and decryption is improved.

[0086] Optionally, the sending end 310 includes:

[0087] A first sequence determining unit, configured to perform iterative processing based on a preset iterative algorithm and first initial iterative information in the preset iterative algorithm to generate a first state value sequence;

[0088] A second sequence determining unit, configured to perform iterative processing based on a preset iterative algorithm and second initial iterative information in the preset iterative algorithm to generate a second state value sequence;

[0089] The third sequence determination unit is used to intercept the first state value sequence and the second state value sequence in a front-to-back order based on a preset sequence length to obtain a first key sequence of the preset sequence length and a second key sequence of the preset sequence length.

[0090] Optionally, the first sequence determination unit is specifically used to: obtain a first initial state value and a first parameter value of a control parameter based on the first initial iteration information in the preset iterative algorithm; perform a first iteration based on the first initial state value and the first parameter value of the control parameter to obtain a state value after the first iteration, and perform a next iteration based on the state value after the previous iteration and the first parameter value of the control parameter to obtain a state value after the next iteration; and combine the state values ​​after each iteration based on a preset number of iterations to obtain a first state value sequence.

[0091] Optionally, the transmitting end 310 further includes:

[0092] A block division unit, configured to perform block processing on the power grid upgrade mirror data to be transmitted based on the sequence length corresponding to the first key sequence, and obtain a plurality of data blocks to be encrypted in the power grid upgrade mirror data to be transmitted, which have the same sequence length as the first key sequence;

[0093] The encryption unit is used to perform data encryption processing on each data block to be encrypted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0094] Optionally, the encryption unit is specifically used to: after the encryption of the current data block to be encrypted is completed, update the current first key sequence based on a preset update algorithm, and based on the first encryption algorithm and the updated first key sequence, perform data encryption processing on the next data block to be encrypted, until the data encryption operation on all data blocks to be encrypted is completed, and the first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted is obtained.

[0095] Optionally, the encryption unit is further specifically used to: use the current first key sequence as the initial state sequence of the preset update algorithm, determine the current state sequence of the preset update algorithm based on the initial state sequence and the control parameter value, and determine the current state sequence as the updated current first key sequence.

[0096] Optionally, the sending end 310 is further specifically used to: generate a second public key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm; perform block processing on the first-layer encrypted data sequence based on the sequence length corresponding to the second public key sequence, and obtain multiple data blocks to be encrypted in the first-layer encrypted data sequence with the same sequence length as the second public key sequence; perform data encryption processing on each data block to be encrypted based on the second public key sequence and the second encryption algorithm, and generate a second-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0097] Optionally, the receiving end 320 includes:

[0098] a first decryption unit, configured to decrypt the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm to obtain a first-layer encrypted data sequence;

[0099] The second decryption unit is used to decrypt the first layer encrypted data sequence based on the received first key sequence and the first encryption algorithm to obtain the power grid upgrade mirror data.

[0100] Optionally, the first decryption unit is specifically used to: generate a second private key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm; based on the sequence length corresponding to the second private key sequence, perform block processing on the second-layer encrypted data sequence to obtain a plurality of data blocks to be decrypted in the second-layer encrypted data sequence with the same sequence length as the second private key sequence; based on the second private key sequence and the second encryption algorithm, perform data decryption processing on each data block to be decrypted to generate a first-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0101] The power grid upgrade mirror data transmission system provided in the embodiment of the present invention can execute the power grid upgrade mirror data transmission method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0102] It should be understood by those skilled in the art that the modules or steps of the present invention described above can be implemented by a general-purpose computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, optionally, they can be implemented by a program code executable by a computer device, so that they can be stored in a storage device and executed by the computing device, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0103] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A power grid upgrade mirror data transmission method, characterized in that: include: The sending end generates different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol; The transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence; The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end; The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

2. The method according to claim 1, characterized in that The transmitting end generates a first key sequence and a second key sequence based on a preset iterative algorithm, a first initial condition and a second initial condition, including: Performing iterative processing based on a preset iterative algorithm and first initial iterative information in the preset iterative algorithm to generate a first state value sequence; Performing iterative processing based on a preset iterative algorithm and second initial iterative information in the preset iterative algorithm to generate a second state value sequence; Based on a preset sequence length, the first state value sequence and the second state value sequence are respectively intercepted in a front-to-back order to obtain a first key sequence of the preset sequence length and a second key sequence of the preset sequence length.

3. The method according to claim 2, characterized in that The iterative processing based on the preset iterative algorithm and the first initial iterative information in the preset iterative algorithm to generate a first state value sequence includes: Based on the first initial iteration information in the preset iterative algorithm, obtaining a first initial state value and a first parameter value of a control parameter; Performing a first iteration based on the first initial state value and the first parameter value of the control parameter to obtain a state value after the first iteration, and performing a next iteration based on the state value after the previous iteration and the first parameter value of the control parameter to obtain a state value after the next iteration; Based on a preset number of iterations, the state values ​​after each iteration are combined to obtain a first state value sequence.

4. The method according to claim 1, characterized in that: The transmitting end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence, including: Based on the sequence length corresponding to the first key sequence, the power grid upgrade mirror data to be transmitted is processed in blocks to obtain a plurality of data blocks to be encrypted in the power grid upgrade mirror data to be transmitted, which have the same sequence length as the first key sequence; Based on the first key sequence and the first encryption algorithm, data encryption processing is performed on each data block to be encrypted to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

5. The method according to claim 4, characterized in that The step of performing data encryption processing on each data block to be encrypted based on the first key sequence and the first encryption algorithm to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted includes: After the encryption of the current data block to be encrypted is completed, the current first key sequence is updated based on the preset update algorithm, and the next data block to be encrypted is encrypted based on the first encryption algorithm and the updated first key sequence, until the data encryption operation of all data blocks to be encrypted is completed, and the first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted is obtained.

6. The method according to claim 5, characterized in that The updating of the current first key sequence based on a preset update algorithm includes: The current first key sequence is used as the initial state sequence of the preset update algorithm, the current state sequence of the preset update algorithm is determined based on the initial state sequence and the control parameter value, and the current state sequence is determined as the updated current first key sequence.

7. The method according to claim 1, characterized in that The sending end encrypts the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and sends the second-layer encrypted data sequence to the receiving end, including: Based on the second key sequence and the second encryption algorithm, generate a second public key sequence corresponding to the second encryption algorithm; Based on the sequence length corresponding to the second public key sequence, the first-layer encrypted data sequence is processed into blocks to obtain a plurality of to-be-encrypted data blocks in the first-layer encrypted data sequence having the same sequence length as the second public key sequence; Based on the second public key sequence and the second encryption algorithm, data encryption processing is performed on each data block to be encrypted to generate a second layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

8. The method according to claim 1, characterized in that: The receiving end performs hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm, and the second encryption algorithm to obtain the power grid upgrade mirror data, including: decrypting the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm to obtain a first-layer encrypted data sequence; Based on the received first key sequence and the first encryption algorithm, the first layer encrypted data sequence is decrypted to obtain the power grid upgrade mirror data.

9. The method according to claim 8, characterized in that The decrypting the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm to obtain the first-layer encrypted data sequence includes: Based on the second key sequence and the second encryption algorithm, generate a second private key sequence corresponding to the second encryption algorithm; Based on the sequence length corresponding to the second private key sequence, the second-layer encrypted data sequence is processed into blocks to obtain a plurality of to-be-decrypted data blocks having the same sequence length as the second private key sequence in the second-layer encrypted data sequence; Based on the second private key sequence and the second encryption algorithm, data decryption processing is performed on each data block to be decrypted to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

10. A power grid upgrade mirror data transmission system, characterized in that: The system comprises: a transmitting end and a receiving end; wherein, The sending end is used to generate different first key sequences and second key sequences based on a preset iterative algorithm and two different initial iteration information in the preset iterative algorithm, and send the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol; The transmitting end is used to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequence; The sending end is used to encrypt the first-layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second-layer encrypted data sequence, and send the second-layer encrypted data sequence to the receiving end; The receiving end is used to perform hierarchical decryption on the received second-layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

Images