A power grid upgrading mirror data transmission method and system

Abstract

The application discloses a power grid upgrading mirror data transmission method and system, the method comprising: a sending end generates a first key sequence and a second key sequence based on a preset iteration algorithm and two different initial iteration information; the sending end encrypts power grid upgrading mirror data based on the first key sequence and a first encryption algorithm to generate a first layer of encrypted data sequence; the sending end encrypts the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm to generate a second layer of encrypted data sequence; and a receiving end decrypts the second layer of encrypted data sequence based on the first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain power grid upgrading mirror data. Through the technical scheme of the embodiment of the application, the safe transmission of power grid upgrading mirror data is realized, the possibility of the encryption algorithm being violently cracked can be reduced, the safety of power grid upgrading mirror data transmission is improved, and the safety of power grid operation is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, in particular to a power grid upgrade mirror data transmission method and system. BACKGROUND

[0002] With the development of power technology, power grid equipment needs to be upgraded regularly to maintain its performance and safety. These upgrades usually involve transferring new operating system images to the device. However, due to the wide distribution of power grid equipment, and some devices may be located in remote or insecure places, the security of power grid upgrade mirror data needs to be ensured during transmission.

[0003] Currently, the traditional power grid upgrade mirror data transmission method usually uses a single encryption algorithm and key to encrypt the power grid upgrade mirror data to be transmitted. However, this traditional single encryption algorithm can often be brute-forced, and cannot guarantee the security of power grid upgrade mirror data transmission. The power grid upgrade mirror data often contains sensitive information, and once it is leaked, it cannot guarantee the safety of the power grid operation. SUMMARY

[0004] The present application provides a power grid upgrade mirror data transmission method and system to realize the secure transmission of power grid upgrade mirror data, which can reduce the possibility of brute-force cracking of encryption algorithms, improve the security of power grid upgrade mirror data transmission, and ensure the safety of the power grid operation.

[0005] In a first aspect, the present application provides a power grid upgrade mirror data transmission method, comprising:

[0006] The sending end generates different first and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and sends the first and second key sequences to the receiving end based on a secure key exchange protocol;

[0007] The sending end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and a first encryption algorithm to generate a first layer of encrypted data sequence;

[0008] The sending end encrypts the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm to generate a second layer of encrypted data sequence, and sends the second layer of encrypted data sequence to the receiving end;

[0009] The receiving end decrypts the received second layer of encrypted data sequence based on the received first and second key sequences, the first and second encryption algorithms to obtain the power grid upgrade mirror data.

[0010] In a second aspect, the embodiments of the present application also provide a power grid upgrade mirror data transmission system, the system comprising: a sending end and a receiving end; wherein

[0011] The sending end is configured to generate different first and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and send the first and second key sequences to the receiving end based on a secure key exchange protocol.

[0012] The sending end is configured to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and a first encryption algorithm, to generate a first layer of encrypted data sequence.

[0013] The sending end is configured to encrypt the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm, to generate a second layer of encrypted data sequence, and send the second layer of encrypted data sequence to the receiving end.

[0014] The receiving end is configured to decrypt the received second layer of encrypted data sequence based on the received first and second key sequences, the first and second encryption algorithms, to obtain the power grid upgrade mirror data.

[0015] The technical scheme of the embodiment of the present application is that the sending end generates different first key sequence and second key sequence based on preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol, which can ensure the security of the key in the transmission process, guarantee the uniqueness of different key sequences, and thus reduce the risk of repeated use of the key. The sending end encrypts the power grid upgrade image data to be transmitted based on the first key sequence and a first encryption algorithm, generates a first layer of encrypted data sequence, and preliminarily improves the security of the data. The sending end encrypts the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm, generates a second layer of encrypted data sequence, and sends the second layer of encrypted data sequence to the receiving end, and further improves the security of the data. The receiving end decrypts the received second layer of encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm, and obtains the power grid upgrade image data, which ensures the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. At the same time, the use of the secure key exchange protocol ensures the security of the key transmission, which can greatly reduce the possibility of brute force cracking of the encryption algorithm, improve the security of the power grid upgrade image data transmission, and further, through the double-layer decryption mechanism, the encrypted data is decrypted, which can guarantee the integrity and security of the data, ensure the security of the system, and improve the encryption and decryption efficiency.

[0016] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0018] Figure 1 is a flow chart of a power grid upgrade image data transmission method provided by the first embodiment of the present application;

[0019] Figure 2 is a flow chart of a power grid upgrade image data transmission method provided by the second embodiment of the present application;

[0020] Figure 3It is a structural schematic diagram of a power grid upgrading mirror data transmission system provided according to the third embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to enable persons skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by persons skilled in the art without creative work should fall within the protection scope of the present application.

[0022] It should be noted that the terms "target", "current" and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0023] Embodiment One

[0024] Figure 1 A flowchart of a power grid upgrading mirror data transmission method is provided for the first embodiment of the present application. The present embodiment can be applicable to the case of securely transmitting power grid upgrading mirror data. As shown in Figure 1 The method can be performed by a power grid upgrading mirror data transmission system, which can be realized in the form of hardware and / or software. As shown in Figure 1 The method specifically includes the following steps:

[0025] S110, the sending end generates different first key sequences and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and sends the first key sequences and the second key sequences to the receiving end based on a secure key exchange protocol.

[0026] The sending end can be an end that sends data to be transmitted to the receiving end. The preset iterative algorithm can be an algorithm for generating a numerical sequence. For example, the preset iterative algorithm can be a nonlinear iterative equation. The initial iteration information can be initial data or a state required for the preset iterative algorithm to start operation. The first key sequence can be a set of numerical sequences for generating a key obtained by iterative operation of the preset iterative algorithm. The second key sequence can be a set of numerical sequences for generating a key obtained by iterative operation of the preset iterative algorithm, which is different from the first key sequence. The secure key exchange protocol can be a protocol for securely exchanging a key between the sending end and the receiving end. The receiving end can be an end that receives encrypted data and decrypts the encrypted data.

[0027] Specifically, the sending end can provide two different initial iteration information for the preset iterative algorithm, and generate a first key sequence and a second key sequence that are different from each other and highly random and difficult to predict according to the different initial iteration information, thereby helping to enhance the security of the subsequent encryption process. The sending end sends the first key sequence and the second key sequence to the receiving end according to the secure key exchange protocol, which can ensure that the key sequence is not stolen or tampered with during transmission.

[0028] For example, the preset iterative algorithm can be as follows:

[0029] x n+1 = λx n (1-x n )

[0030] wherein the initial iteration information includes an initial state value x0 and a control parameter λ, x n is a state value of the preset iterative algorithm at the n th iteration, and x n+1 is a state value of the preset iterative algorithm at the n+1 th iteration.

[0031] For example, the "sending end generates a first key sequence and a second key sequence based on a preset iterative algorithm, a first initial condition, and a second initial condition" in S110 can include: generating a first state value sequence based on the preset iterative algorithm and the first initial iteration information in the preset iterative algorithm by iterative processing; generating a second state value sequence based on the preset iterative algorithm and the second initial iteration information in the preset iterative algorithm by iterative processing; and obtaining a first key sequence of a preset sequence length and a second key sequence of a preset sequence length by sequentially cutting the first state value sequence and the second state value sequence according to the preset sequence length.

[0032] The first state value sequence can refer to a series of state values generated by the sending end after iterative processing according to a preset iterative algorithm and first initial iterative information. The second state value sequence can refer to a series of state values generated by the sending end after iterative processing according to a preset iterative algorithm and second initial iterative information. The preset sequence length can refer to the length of the key sequence set in advance.

[0033] Specifically, the sending end inputs the first initial iterative information into the preset iterative algorithm, and generates a first state value sequence containing a plurality of highly random and unpredictable state values through multiple iterative processing. Similarly, the sending end inputs the second initial iterative information into the preset iterative algorithm, and generates a second state value sequence containing a plurality of highly random and unpredictable state values through multiple iterative processing. After generating the first state value sequence and the second state value sequence, the sending end extracts a subsequence of the preset sequence length from the first state value sequence and the second state value sequence in the order of front and back according to the preset sequence length, to obtain the first key sequence and the second key sequence, which can ensure that the subsequently generated key has a fixed length, thereby helping to simplify the subsequent encryption and decryption process.

[0034] For example, every 8 bits in the first state value sequence can be taken as a byte to form a first key sequence with a preset sequence length of 128 bits.

[0035] For example, the first state value sequence is generated based on the preset iterative algorithm and the first initial iterative information in the preset iterative algorithm, including: obtaining a first initial state value and a first parameter value of a control parameter based on the first initial iterative information in the preset iterative algorithm; performing a first iteration based on the first initial state value and the first parameter value of the control parameter to obtain a state value after the first iteration, and performing a next iteration based on the state value after the last iteration and the first parameter value of the control parameter to obtain a state value after the next iteration; combining the state value after each iteration based on a preset number of iterations to obtain the first state value sequence.

[0036] The first initial state value can refer to one or more values used to initialize the iteration process when the iterative algorithm starts to execute. The control parameter can refer to a set of parameters used to control the iteration process in the iterative algorithm, which can be a state value transformation rule. The first parameter value can refer to a specific value of the control parameter. The preset number of iterations can refer to the number of times the preset iterative algorithm is repeatedly executed.

[0037] Specifically, the sending end first reads the first initial iteration information defined in the preset iteration algorithm to obtain a first initial state value and a first parameter value of the control parameter. The sending end inputs the first initial state value and the first parameter value of the control parameter into the preset iteration algorithm to perform first iteration processing. The iteration algorithm calculates a new state value according to the input values, and takes the new state value as the input of the next iteration. After the first iteration, the sending end inputs the state value after each iteration (i.e., the result of the last iteration) and the first parameter value of the control parameter into the iteration algorithm again to perform the next iteration. After reaching the preset number of iterations, the sending end can combine the state values after each iteration in the iteration order to form a complete first state value sequence, which will serve as the basis for generating a first key sequence. By combining the state values after multiple iterations, a key sequence with sufficient length and complexity can be generated, and the randomness and unpredictability of the sequence make it difficult to be cracked or analyzed, thereby improving the security of encryption.

[0038] S120, the sending end encrypts the power grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequences.

[0039] The first encryption algorithm can be an algorithm for data encryption. For example, the first encryption algorithm can be an Advanced Encryption Standard (AES). The power grid upgrade mirror data can be a data copy created to maintain the consistency and integrity of the data during the power grid upgrade process. The first layer of encrypted data sequences can be the data sequence obtained after the data is encrypted using the first encryption algorithm.

[0040] Specifically, the sending end selects a first encryption algorithm (such as AES) and uses the first key sequence to encrypt the power grid upgrade mirror data to be transmitted to generate a first layer of encrypted data sequences, thereby providing preliminary data protection for the power grid upgrade mirror data to be transmitted. Even if the data is stolen during transmission, it cannot be decrypted without the corresponding key and encryption algorithm.

[0041] S130, the sending end encrypts the first layer of encrypted data sequences based on the second key sequence and the second encryption algorithm to generate a second layer of encrypted data sequences, and sends the second layer of encrypted data sequences to the receiving end.

[0042] The second encryption algorithm can be an algorithm for data encryption. For example, the second encryption algorithm can be a Rivest-Shamir-Adleman (RSA) asymmetric encryption algorithm. The second layer of encrypted data sequences can be the data sequence obtained after the data is encrypted using the second encryption algorithm.

[0043] Specifically, the sending end selects a second encryption algorithm (such as RSA) different from the first encryption algorithm, and uses a second key sequence to re-encrypt the first layer of encrypted data sequence, generating a second layer of encrypted data sequence, thereby increasing the difficulty of data cracking and further enhancing the confidentiality of the data. Even if the first layer of encryption is cracked, the attacker still needs to crack the second layer of encryption to obtain the original data. The sending end sends the second layer of encrypted data sequence to the receiving end. Since the data has been double-encrypted, it is difficult to be decrypted or to identify the original content even if it is stolen or tampered with during transmission, ensuring the security and integrity of the data during transmission and preventing the risk of data leakage or tampering.

[0044] For example, S130 can include: based on the second key sequence and the second encryption algorithm, generating a second public key sequence corresponding to the second encryption algorithm; based on the sequence length corresponding to the second public key sequence, performing block processing on the first layer of encrypted data sequence to obtain a plurality of encrypted data blocks with the same sequence length as the second public key sequence in the first layer of encrypted data sequence; based on the second public key sequence and the second encryption algorithm, performing data encryption processing on each encrypted data block to generate a second layer of encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0045] Wherein, the second public key sequence can refer to a public key generated by the sending end according to the second key sequence when using the second encryption algorithm. The encrypted data block can refer to a plurality of data segments with the same sequence length (or compatible) as the second public key sequence, which are divided from the first layer of encrypted data sequence in the encryption process.

[0046] Specifically, the sending end generates a corresponding second public key sequence using the second key sequence according to the requirements of the second encryption algorithm. This usually involves converting the second key sequence into an integer, and then applying the second encryption algorithm to generate the second public key sequence. This public key sequence will be used to encrypt the data, while the private key corresponding to the public key can be retained in the sending end for subsequent data decryption. The sending end determines the sequence length of the second public key sequence, i.e. the maximum data block size that the public key can handle. According to this length, the first layer of encrypted data sequence is block processed and divided into a plurality of encrypted data blocks with the same sequence length as the second public key sequence. The sending end uses the second public key sequence and the second encryption algorithm to encrypt each encrypted data block. The encrypted data block is combined into a second layer of encrypted data sequence, which is the final data to be sent to the receiving end. The sending end sends the second layer of encrypted data sequence to the receiving end through a secure communication channel, ensuring that each data block can be correctly processed by the second encryption algorithm, avoiding the problem of being unable to encrypt due to the data block being too large, and improving the security of the data.

[0047] Exemplarily, the second key sequence can be converted into an integer, and using the generated integer and parameters p, q, e, d required by the second encryption algorithm (taking RSA as an example), a public key and a private key pair of RSA are generated to obtain a second public key sequence; p and q are two prime numbers generated by a random generation algorithm; e is the exponent of the public key; d is the exponent of the private key, and exd≡1(mod(p-1)(q-1)) is satisfied.

[0048] In S140, the receiving end performs layered decryption on the received second-layer encrypted data sequence based on the received first key sequence, the received second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0049] Specifically, after receiving the second-layer encrypted data sequence, the receiving end first decrypts the received second-layer encrypted data sequence using the second key sequence and the second encryption algorithm to obtain a first-layer encrypted data sequence. Then, the receiving end decrypts the decrypted first-layer encrypted data sequence using the first key sequence and the first encryption algorithm to finally obtain the original power grid upgrade mirror data. Through the process of layered decryption, the correctness and integrity of the data can be ensured, and only the correct key and encryption algorithm can decrypt the data, thereby verifying the source and integrity of the data.

[0050] Exemplarily, S140 can include: decrypting the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm to obtain a first-layer encrypted data sequence; and decrypting the first-layer encrypted data sequence based on the received first key sequence and the first encryption algorithm to obtain the power grid upgrade mirror data.

[0051] Specifically, the receiving end first receives the second-layer encrypted data sequence sent by the sending end. The receiving end obtains the second key sequence and the second encryption algorithm corresponding to the second-layer encrypted data sequence. These keys and algorithms can be pre-distributed through a secure channel. The second-layer encrypted data sequence is decrypted using the second key sequence and the second encryption algorithm to obtain a first-layer encrypted data sequence. By decrypting using the second key sequence and the second encryption algorithm corresponding to the sending end, the security of the data in the transmission process can be ensured. The receiving end obtains the first key sequence and the first encryption algorithm corresponding to the first-layer encrypted data sequence. These keys and algorithms can also be pre-distributed through a secure channel. The first-layer encrypted data sequence is decrypted using the first key sequence and the first encryption algorithm, and the decrypted data is the original power grid upgrade mirror data. By decrypting the first-layer encrypted data sequence, the receiving end can restore the original power grid upgrade mirror data, and decryption using the first key sequence and the first encryption algorithm provides additional protection for the data, further enhancing the security of the data.

[0052] According to the received second key sequence and the second encryption algorithm, the received second layer encrypted data sequence is decrypted to obtain a first layer encrypted data sequence, including: based on the second key sequence and the second encryption algorithm, a second private key sequence corresponding to the second encryption algorithm is generated; based on a sequence length corresponding to the second private key sequence, the second layer encrypted data sequence is processed in blocks to obtain a plurality of to-be-decrypted data blocks in the second layer encrypted data sequence with the same sequence length as the second private key sequence; based on the second private key sequence and the second encryption algorithm, each to-be-decrypted data block is processed for data decryption to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

[0053] The second private key sequence can be a private key generated by the receiving end according to the second key sequence when the second encryption algorithm is used. The to-be-decrypted data block can be a data segment with the same length as the second private key sequence segmented from the second layer encrypted data sequence in the decryption process.

[0054] Specifically, the receiving end first receives the second key sequence and the second encryption algorithm distributed by the sending end through the secure channel. According to the requirements of the second encryption algorithm, the receiving end uses the second key sequence and the corresponding algorithm logic to generate a second private key sequence corresponding to the second encryption algorithm. By using the key sequence and the algorithm logic to generate the private key sequence, the flexibility of key management is increased, so that the receiving end can generate or update the private key as needed. After the receiving end obtains the second private key sequence, the sequence length thereof is determined, that is, the maximum data block size that can be processed by the private key. According to the private key sequence length, the second layer encrypted data sequence is processed in blocks, which is segmented into a plurality of to-be-decrypted data blocks with the same length as the private key sequence. Through the block processing, it is ensured that each to-be-decrypted data block can match the length of the private key sequence, so as to ensure the smooth progress of the decryption process and improve the decryption efficiency. The receiving end uses the second private key sequence and the second encryption algorithm to decrypt each to-be-decrypted data block. The decrypted data block is combined into a first layer encrypted data sequence. Through the decryption operation, the receiving end can restore the first layer encrypted data sequence to provide a basis for subsequent decryption.

[0055] The second encryption algorithm can be an RSA algorithm, and the receiving end can obtain a second private key sequence (d, n') corresponding to RSA, or generate the second private key sequence according to the second key sequence, where d is the exponent of the private key, n' is the modulus of the public key, n' = p x q, p and q are two prime numbers; the second layer encrypted data is decomposed into a plurality of data blocks, each data block has the same size as the block size used in the RSA public key encryption; each data block is decrypted according to the second key sequence.

[0056] The technical scheme of the embodiment of the present application can ensure the security of the key in the transmission process, guarantee the uniqueness of different key sequences, and thus reduce the risk of repeated use of the key. The sending end encrypts the power grid upgrade image data to be transmitted based on the first key sequence and the first encryption algorithm, generates a first layer of encrypted data sequence, and preliminarily improves the security of the data. The sending end encrypts the first layer of encrypted data sequence based on the second key sequence and the second encryption algorithm, generates a second layer of encrypted data sequence, and sends the second layer of encrypted data sequence to the receiving end, further improving the security of the data. The receiving end performs layered decryption on the received second layer of encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm, obtains the power grid upgrade image data, and ensures the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. At the same time, the use of the secure key exchange protocol ensures the security of the key transmission, can greatly reduce the possibility of brute force cracking of the encryption algorithm, improves the security of the power grid upgrade image data transmission, and further, through the double-layer decryption mechanism, the encrypted data is decrypted, which can guarantee the integrity and security of the data, ensures the security of the system, and improves the encryption and decryption efficiency.

[0057] It should be noted that after the above scheme completes the transmission of the power grid upgrade image data, the metadata corresponding to the power grid upgrade image data can also be encrypted and decrypted, realizing the function verification of the power grid upgrade image data. The metadata corresponding to the power grid upgrade image data can be data used to describe the power grid upgrade image data itself and its related attributes, which provides additional information about the power grid upgrade image data. Specifically, the sending end can generate a third key sequence according to a preset iteration algorithm and new initial iteration information, and send the third key sequence to the receiving end according to a secure key exchange protocol. The sending end encrypts the metadata corresponding to the power grid upgrade image data to be transmitted based on the third key sequence and a third encryption algorithm, generates an encrypted data sequence, and the receiving end decrypts the received encrypted data sequence based on the received third key sequence and the third encryption algorithm, obtains the metadata corresponding to the power grid upgrade image data, and verifies the metadata.

[0058] For example, the metadata can include a checksum or hash value that can be used to verify the integrity of the data. The receiving end can calculate the hash value of the decrypted data and compare it with the hash value provided in the metadata. If the two match, it means that the data has not been tampered with. The metadata can be digitally signed by the sender using a private key. The receiving end can use the sender's public key to verify the validity of the digital signature. If the signature verification passes, it means that the data comes from the sender and has not been tampered with.

[0059] Embodiment Two

[0060] Figure 2 A flowchart of an electrical grid upgrade mirror data transmission method provided for Embodiment Two of the present application, this embodiment is based on the above-mentioned embodiments, and optimizes the step of "the sender encrypts the electrical grid upgrade mirror data to be transmitted based on the first key sequence and the first encryption algorithm, generating a first layer of encrypted data sequence". The explanations of terms that are the same or corresponding in the above-mentioned embodiments will not be repeated here.

[0061] Referring to Figure 2 , another electrical grid upgrade mirror data transmission method provided by the present embodiment specifically includes the following steps:

[0062] S210, the sender generates different first key sequences and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and sends the first key sequence and the second key sequence to the receiving end based on a secure key exchange protocol.

[0063] S220, based on the sequence length corresponding to the first key sequence, the electrical grid upgrade mirror data to be transmitted is processed by block, and a plurality of encrypted data blocks with the same sequence length as the first key sequence in the electrical grid upgrade mirror data to be transmitted are obtained.

[0064] Specifically, the sender needs to determine the length of the first key sequence, which is usually related to the requirements of the encryption algorithm and the strategy of key management. Then, according to the length of the first key sequence, the sender divides the electrical grid upgrade mirror data to be transmitted into a plurality of encrypted data blocks with the same length as the first key sequence. Through block processing, it can be ensured that each encrypted data block can match the length of the first key sequence, so as to meet the requirements of the encryption algorithm, and then optimize the encryption process and improve the encryption efficiency.

[0065] S230, based on the first key sequence and the first encryption algorithm, each encrypted data block is processed by data encryption, and a first layer of encrypted data sequence corresponding to the electrical grid upgrade mirror data to be transmitted is generated.

[0066] Specifically, the sending end selects a suitable first encryption algorithm according to security requirements and characteristics of the encryption algorithm. Each to-be-encrypted data block is encrypted using the first key sequence and the first encryption algorithm. The encrypted data blocks are combined into a first-layer encrypted data sequence. Through the encryption processing, the confidentiality of the power grid upgrade mirror data in the transmission process can be ensured, and even if the data is intercepted, the attacker cannot easily decrypt the data blocks.

[0067] For example, S230 can include: after the current to-be-encrypted data block is encrypted, updating the current first key sequence based on a preset update algorithm, and performing data encryption processing on the next to-be-encrypted data block based on the first encryption algorithm and the updated first key sequence, until the data encryption operation on all to-be-encrypted data blocks is completed, obtaining the first-layer encrypted data sequence corresponding to the to-be-transmitted power grid upgrade mirror data.

[0068] Among them, the current to-be-encrypted data block can refer to the to-be-encrypted data block that is currently being prepared for encryption processing after the power grid upgrade mirror data is divided into multiple data blocks with the same length as the first key sequence. The preset update algorithm can be an algorithm for updating the key sequence, which processes the current key sequence according to certain rules and parameters to generate a new and more secure key sequence.

[0069] Specifically, the current to-be-encrypted data block is encrypted using the first key sequence and the first encryption algorithm. After the current to-be-encrypted data block is encrypted, the current first key sequence is updated based on a preset update algorithm to increase the complexity and security of the key. The next to-be-encrypted data block is encrypted using the updated first key sequence and the first encryption algorithm. Repeat the above steps until the data encryption operation on all to-be-encrypted data blocks is completed. All encrypted data blocks are combined in order to form a first-layer encrypted data sequence corresponding to the to-be-transmitted power grid upgrade mirror data. By continuously updating the key sequence, the difficulty of cracking the data can be greatly increased, thereby improving the security of the data. Even if a key is cracked, other data blocks remain secure due to the continuous updating of the key.

[0070] For example, the preset update algorithm can be as follows:

[0071]

[0072] Among them, is a control parameter, K n is the current first key sequence, K n+1 is the updated current first key sequence.

[0073] The preset update algorithm is used to update the current first key sequence, including: taking the current first key sequence as an initial state sequence of the preset update algorithm, determining a current state sequence of the preset update algorithm based on the initial state sequence and a control parameter value, and determining the current state sequence as an updated current first key sequence.

[0074] The current first key sequence can be a key sequence currently used for encrypting a current data block to be encrypted in an encryption process.

[0075] Specifically, the current first key sequence is taken as an initial state sequence of the preset update algorithm. This means that the current key sequence will be used as a starting point for the update process to generate a new, updated key sequence. Based on the initial state sequence and the control parameter value, the preset update algorithm is run to determine the current state sequence of the algorithm, ensuring that the generated key sequence has sufficient security and complexity. The current state sequence is determined as the updated current first key sequence, thereby obtaining a new, more secure key sequence for subsequent encryption operations. By continuously updating the key sequence, the complexity and unpredictability of the key are increased, thereby improving the security of the key and helping to prevent attackers from obtaining sensitive information through brute force cracking or analyzing the key pattern. Even if a certain key is cracked, the entire encryption system can still maintain high security due to the continuous updating of the key.

[0076] S240, the sending end encrypts the first layer encrypted data sequence based on the second key sequence and the second encryption algorithm to generate a second layer encrypted data sequence, and sends the second layer encrypted data sequence to the receiving end.

[0077] S250, the receiving end performs layered decryption on the received second layer encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm to obtain the power grid upgrade mirror data.

[0078] The technical scheme of the embodiment of the application simplifies the encryption process and improves the encryption efficiency by performing block processing on the power grid upgrade mirror data to be transmitted based on the sequence length corresponding to the first key sequence, and obtaining a plurality of encrypted data blocks in the power grid upgrade mirror data to be transmitted that have the same sequence length as the first key sequence. The data of each encrypted data block is encrypted based on the first key sequence and the first encryption algorithm to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted, ensuring the confidentiality and integrity of the data. Through block processing and data encryption processing, the sending end can ensure the security of the power grid upgrade mirror data to be transmitted during transmission. Even if part of the data is stolen or tampered with, the other part of the data remains encrypted, thereby protecting the security of the overall data.

[0079] Embodiment three

[0080] Figure 3 A structural schematic diagram of a power grid upgrade mirror data transmission system provided for embodiment three of the present application is shown. As shown in the figure, the system comprises a sending end 310 and a receiving end 320. Figure 3

[0081] The sending end 310 is configured to generate different first and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and send the first and second key sequences to the receiving end based on a secure key exchange protocol.

[0082] The sending end 310 is configured to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and a first encryption algorithm, to generate a first layer of encrypted data sequence.

[0083] The sending end 310 is configured to encrypt the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm, to generate a second layer of encrypted data sequence, and send the second layer of encrypted data sequence to the receiving end.

[0084] The receiving end 320 is configured to decrypt the received second layer of encrypted data sequence based on the received first and second key sequences, the first and second encryption algorithms, to obtain the power grid upgrade mirror data.

[0085] ​The technical scheme of the embodiment can ensure the security of the key in the transmission process, guarantee the uniqueness of different key sequences, and thus reduce the risk of repeated use of the key. The sending end encrypts the power grid upgrade image data to be transmitted based on the first key sequence and a first encryption algorithm, to generate a first layer of encrypted data sequence, and preliminarily improve the security of the data. The sending end encrypts the first layer of encrypted data sequence based on the second key sequence and a second encryption algorithm, to generate a second layer of encrypted data sequence, and sends the second layer of encrypted data sequence to the receiving end, and further improves the security of the data. The receiving end performs layered decryption on the received second layer of encrypted data sequence based on the received first key sequence, the second key sequence, the first encryption algorithm and the second encryption algorithm, to obtain the power grid upgrade image data, and ensures the correctness of the data source. Through the double-layer encryption mechanism, even if one layer of encryption is cracked, the other layer of encryption can still protect the confidentiality of the data. Meanwhile, the use of the secure key exchange protocol ensures the security of the key transmission, can greatly reduce the possibility of brute force cracking of the encryption algorithm, improves the security of the power grid upgrade image data transmission, and further, through the double-layer decryption mechanism, the encrypted data is decrypted, which can guarantee the integrity and security of the data, ensures the system security, and improves the encryption and decryption efficiency.

[0086] Optionally, the sending end 310 comprises:

[0087] The first sequence determination unit is configured to perform iterative processing based on a preset iterative algorithm and first initial iterative information in the preset iterative algorithm, to generate a first state value sequence.

[0088] The second sequence determination unit is configured to perform iterative processing based on a preset iterative algorithm and second initial iterative information in the preset iterative algorithm, to generate a second state value sequence.

[0089] The third sequence determination unit is configured to perform truncation on the first state value sequence and the second state value sequence in a front-rear order respectively based on a preset sequence length, to obtain a first key sequence of the preset sequence length and a second key sequence of the preset sequence length.

[0090] Optionally, the first sequence determining unit is specifically configured to: obtain a first initial state value and a first parameter value of the control parameter based on first initial iteration information in the preset iteration algorithm; perform a first iteration based on the first initial state value and the first parameter value of the control parameter to obtain a state value after the first iteration, and perform a next iteration based on a state value after a previous iteration and the first parameter value of the control parameter to obtain a state value after the next iteration; and combine the state values after each iteration based on a preset iteration number to obtain the first state value sequence.

[0091] Optionally, the sending end 310 further includes:

[0092] The block dividing unit is configured to divide the power grid upgrade mirror data to be transmitted based on a sequence length corresponding to the first key sequence to obtain a plurality of data blocks to be encrypted in the power grid upgrade mirror data to be transmitted and having the same sequence length as the first key sequence.

[0093] The encryption unit is configured to perform data encryption processing on each data block to be encrypted based on the first key sequence and the first encryption algorithm to generate a first layer of encrypted data sequences corresponding to the power grid upgrade mirror data to be transmitted.

[0094] Optionally, the encryption unit is specifically configured to: update the current first key sequence based on a preset update algorithm after the current data block to be encrypted is encrypted, and perform data encryption processing on a next data block to be encrypted based on the first encryption algorithm and the updated first key sequence until data encryption operations on all data blocks to be encrypted are completed to obtain the first layer of encrypted data sequences corresponding to the power grid upgrade mirror data to be transmitted.

[0095] Optionally, the encryption unit is further specifically configured to: take the current first key sequence as an initial state sequence of the preset update algorithm, determine a current state sequence of the preset update algorithm based on the initial state sequence and a control parameter value, and determine the current state sequence as the updated current first key sequence.

[0096] Optionally, the sending end 310 is further specifically configured to: generate a second public key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm; divide the first layer of encrypted data sequences based on a sequence length corresponding to the second public key sequence to obtain a plurality of data blocks to be encrypted in the first layer of encrypted data sequences and having the same sequence length as the second public key sequence; and perform data encryption processing on each data block to be encrypted based on the second public key sequence and the second encryption algorithm to generate a second layer of encrypted data sequences corresponding to the power grid upgrade mirror data to be transmitted.

[0097] Optionally, the receiving end 320 includes:

[0098] a first decryption unit, configured to decrypt the received second-layer encrypted data sequence based on the received second key sequence and the second encryption algorithm, to obtain a first-layer encrypted data sequence;

[0099] a second decryption unit, configured to decrypt the first-layer encrypted data sequence based on the received first key sequence and the first encryption algorithm, to obtain the power grid upgrade image data.

[0100] Optionally, the first decryption unit is specifically configured to: generate a second private key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm; perform block processing on the second-layer encrypted data sequence based on a sequence length corresponding to the second private key sequence, to obtain a plurality of to-be-decrypted data blocks in the second-layer encrypted data sequence, which have the same sequence length as the second private key sequence; and perform data decryption processing on each to-be-decrypted data block based on the second private key sequence and the second encryption algorithm, to generate the first-layer encrypted data sequence corresponding to the power grid upgrade image data to be transmitted.

[0101] The power grid upgrade image data transmission system provided in the embodiments of the present application can perform the power grid upgrade image data transmission method provided in any of the embodiments of the present application, and has the corresponding function modules and beneficial effects of performing the method.

[0102] Those skilled in the art should understand that each module or each step of the present application described above can be realized by a general computing device, which can be concentrated on a single computing device or distributed on a network composed of multiple computing devices. Alternatively, each module or each step can be realized by program code executable by a computing device, so that each module or each step can be stored in a storage device and executed by a computing device, or each module or each step can be manufactured into an individual integrated circuit module, or multiple modules or steps can be manufactured into a single integrated circuit module. Thus, the present application is not limited to any specific combination of hardware and software.

[0103] Note that the above are only the preferred embodiments of the present application and the technical principles applied. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and those skilled in the art can make various obvious changes, readjustments and substitutions without departing from the protection scope of the present application. Therefore, although the present application has been described in more detail through the above embodiments, the present application is not limited to the above embodiments, and can include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the appended claims.

Claims

1. A power grid upgrade mirror data transmission method, characterized in that, The method comprises the following steps: The sending end generates different first key sequences and second key sequences based on a preset iteration algorithm, two different initial iteration information in the preset iteration algorithm, and sends the first key sequences and the second key sequences to the receiving end based on a secure key exchange protocol; The sending end encrypts the power grid upgrading mirror data to be transmitted based on the first key sequences and a first encryption algorithm, and generates a first layer of encrypted data sequences; The sending end encrypts the first layer of encrypted data sequences based on the second key sequences and a second encryption algorithm, generates a second layer of encrypted data sequences, and sends the second layer of encrypted data sequences to the receiving end; The receiving end decrypts the received second layer of encrypted data sequences based on the received first key sequences, the second key sequences, the first encryption algorithm and the second encryption algorithm, and obtains the power grid upgrading mirror data; The sending end encrypts the power grid upgrading mirror data to be transmitted based on the first key sequences and a first encryption algorithm, and generates a first layer of encrypted data sequences, comprising: Based on the sequence length corresponding to the first key sequences, the power grid upgrading mirror data to be transmitted is processed by block, and a plurality of encrypted data blocks with the same sequence length as the first key sequences in the power grid upgrading mirror data to be transmitted are obtained; After the current encrypted data block is encrypted, the current first key sequence is updated based on a preset update algorithm, and the next encrypted data block is encrypted based on the first encryption algorithm and the updated first key sequence, until the data encryption operation of all encrypted data blocks is completed, and the first layer of encrypted data sequences corresponding to the power grid upgrading mirror data to be transmitted is obtained; The sending end encrypts the first layer of encrypted data sequences based on the second key sequences and a second encryption algorithm, generates a second layer of encrypted data sequences, and sends the second layer of encrypted data sequences to the receiving end, comprising: Based on the second key sequences and the second encryption algorithm, a second public key sequence corresponding to the second encryption algorithm is generated; Based on the sequence length corresponding to the second public key sequence, the first layer of encrypted data sequences is processed by block, and a plurality of encrypted data blocks with the same sequence length as the second public key sequence in the first layer of encrypted data sequences are obtained; Based on the second public key sequence and the second encryption algorithm, each encrypted data block is encrypted to generate a second layer of encrypted data sequences corresponding to the power grid upgrading mirror data to be transmitted.

2. The method of claim 1, wherein, The sending end generates first key sequences and second key sequences based on a preset iteration algorithm, a first initial condition and a second initial condition, comprising: Based on the preset iteration algorithm and the first initial iteration information in the preset iteration algorithm, a first state value sequence is generated by iteration processing; Based on the preset iteration algorithm and the second initial iteration information in the preset iteration algorithm, a second state value sequence is generated by iteration processing; The first state value sequence and the second state value sequence are intercepted in a front-rear order based on a preset sequence length, and the first key sequence of the preset sequence length and the second key sequence of the preset sequence length are obtained.

3. The method of claim 2, wherein, The first state value sequence is generated by performing iteration processing on the preset iteration algorithm and first initial iteration information in the preset iteration algorithm, including: Based on the first initial state value and the first parameter value of the control parameter, a first iteration is performed to obtain a state value after the first iteration, and a next iteration is performed based on the state value after the last iteration and the first parameter value of the control parameter to obtain a state value after the next iteration. Based on a preset iteration number, the state value after each iteration is combined to obtain the first state value sequence. The current first key sequence is updated based on the preset update algorithm, including:

4. The method of claim 1, wherein, The current first key sequence is taken as an initial state sequence of the preset update algorithm, and a current state sequence of the preset update algorithm is determined based on the initial state sequence and a control parameter value, and the current state sequence is determined as an updated current first key sequence. The receiving end performs layered decryption on the received second layer encrypted data sequence based on the received first key sequence, second key sequence, first encryption algorithm, and second encryption algorithm to obtain the power grid upgrade mirror data, including:

5. The method of claim 1, wherein, The received second layer encrypted data sequence is decrypted based on the received second key sequence and second encryption algorithm to obtain a first layer encrypted data sequence; The first layer encrypted data sequence is decrypted based on the received first key sequence and first encryption algorithm to obtain the power grid upgrade mirror data. The received second layer encrypted data sequence is decrypted based on the received second key sequence and second encryption algorithm to obtain a first layer encrypted data sequence, including:

6. The method of claim 5, wherein, Based on the second key sequence and the second encryption algorithm, a second private key sequence corresponding to the second encryption algorithm is generated; Based on the sequence length corresponding to the second private key sequence, the second layer encrypted data sequence is block-processed to obtain a plurality of to-be-decrypted data blocks in the second layer encrypted data sequence with the same sequence length as the second private key sequence; Based on the second private key sequence and the second encryption algorithm, each to-be-decrypted data block is decrypted to generate a first layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted. The system includes: a sending end and a receiving end; wherein, 7. A power grid upgrade mirroring data transmission system, characterized by, The sending end is configured to generate different first key sequences and second key sequences based on a preset iteration algorithm and two different initial iteration information in the preset iteration algorithm, and send the first key sequences and the second key sequences to the receiving end based on a secure key exchange protocol. ​ The sending end is configured to encrypt the power grid upgrade mirror data to be transmitted based on the first key sequence and a first encryption algorithm, to generate a first-layer encrypted data sequence; The sending end is configured to encrypt the first-layer encrypted data sequence based on the second key sequence and a second encryption algorithm, to generate a second-layer encrypted data sequence, and to send the second-layer encrypted data sequence to the receiving end; The receiving end is configured to perform layered decryption on the received second-layer encrypted data sequence based on the received first key sequence, the received second key sequence, the received first encryption algorithm, and the received second encryption algorithm, to obtain the power grid upgrade mirror data. The sending end comprises: The block unit is configured to perform block processing on the power grid upgrade mirror data to be transmitted based on a sequence length corresponding to the first key sequence, to obtain a plurality of encrypted data blocks in the power grid upgrade mirror data to be transmitted, each of which has the same sequence length as the first key sequence. The encryption unit is configured to update the current first key sequence based on a preset update algorithm after completing encryption of a current encrypted data block, to perform data encryption processing on a next encrypted data block based on the first encryption algorithm and the updated first key sequence, until data encryption operations on all encrypted data blocks are completed, to obtain a first-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted. The sending end is specifically configured to generate a second public key sequence corresponding to the second encryption algorithm based on the second key sequence and the second encryption algorithm, to perform block processing on the first-layer encrypted data sequence based on a sequence length corresponding to the second public key sequence, to obtain a plurality of encrypted data blocks in the first-layer encrypted data sequence, each of which has the same sequence length as the second public key sequence, and to perform data encryption processing on each encrypted data block based on the second public key sequence and the second encryption algorithm, to generate a second-layer encrypted data sequence corresponding to the power grid upgrade mirror data to be transmitted.

Images