Multi-level safety protection system and method based on electric power internet of things operating system

Abstract

The embodiment of the invention discloses a multi-level safety protection system and method based on an electric power internet of things operating system. The system comprises a security module, a firmware integrity verification module, a kernel protection module and a file encryption module. The security module is used for performing security protection on security startup, isolation, intelligence and network in the electric power internet of things operation system; the firmware integrity verification module is used for performing integrity check on firmware of the electric power Internet of Things operating system and protecting a kernel, a memory, process management and files of the electric power Internet of Things operating system at the same time; and thus, protection in the starting and running processes of the electric power internet-of-things operation system is facilitated. The security protection system is established on the underlying security of the electric power Internet of Things operating system, is beneficial to the construction of an omnibearing protection mechanism of the electric power Internet of Things operating system, and prevents the electric power Internet of Things operating system from being attacked and data from being stolen.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of system security protection technology, and in particular to a multi-level security protection system and method based on a power Internet of Things operating system. Background Art

[0002] The power Internet of Things operating system can usually provide system support for the power system. The power Internet of Things operating system can realize the interconnection and interoperability of power equipment of different types and brands.

[0003] The power Internet of Things operating system covers large and small power equipment through a set of systems, breaking the information islands between previous equipment and ensuring that data between different devices can be interoperable; at the same time, the power Internet of Things operating system can realize program version upgrades and updates of power equipment by building the power Hongmeng application market, and completely realizes the self-optimization and update function. However, the power Internet of Things operating system in the existing technology usually has poor protection effects in terms of startup and operation protection when the system is started and running, and it is necessary to build a comprehensive system protection mechanism based on the power Internet of Things operating system to prevent the system from being attacked and data from being stolen.

[0004] Therefore, how to build a comprehensive system protection mechanism is a technical problem that needs to be solved urgently by technical personnel in this field. Summary of the invention

[0005] The embodiment of the present invention provides a multi-level security protection system and method based on the power Internet of Things operating system, which is conducive to building a comprehensive power Internet of Things operating system protection mechanism by establishing a security protection system on the underlying security of the power Internet of Things operating system, and preventing the power Internet of Things operating system from being attacked and data from being stolen.

[0006] In a first aspect, an embodiment of the present invention provides a multi-level security protection system based on an electric power Internet of Things operating system, the security protection system comprising: a security module, a firmware integrity verification module, a kernel protection module and a file encryption module; the security module is connected to the firmware integrity verification module by means of data interaction, and the kernel protection module is connected to the firmware integrity verification module and the file encryption module by means of data interaction; wherein,

[0007] The security module is used to provide security protection for the safe startup, isolation, intelligence and network of the power Internet of Things operating system;

[0008] The firmware integrity verification module is used to perform integrity check on the system firmware of the power Internet of Things operating system to ensure that the firmware has not been tampered with or damaged;

[0009] The kernel protection module is used to protect the kernel of the power Internet of Things operating system from attacks and prevent kernel-level vulnerabilities from being exploited.

[0010] In a second aspect, an embodiment of the present invention further provides a multi-level security protection method based on an electric power Internet of Things operating system, wherein the multi-level security protection method based on an electric power Internet of Things operating system is applied to a multi-level security protection system based on an electric power Internet of Things operating system, comprising:

[0011] When the power IoT operating system is started, the device authentication module is used to check the digital signature of the boot loader. If the digital signature does not match or does not exist, the startup of the power IoT operating system is stopped and an early warning is issued.

[0012] During the startup process of the power Internet of Things operating system, the firmware integrity verification module is used to check the integrity of the firmware startup components, and the firmware digital summary generated by the hash algorithm is compared with the pre-stored summary. When the firmware digital summary is inconsistent with the pre-stored summary, an early warning is issued and the operation of the power Internet of Things operating system is blocked;

[0013] During the startup process of the power IoT operating system, the kernel code monitoring and kernel permission management included in the kernel protection module are used to protect the kernel of the power IoT operating system, and the memory security module is used to protect the memory of the power IoT operating system;

[0014] After the power Internet of Things operating system is started, the process management module is used to create, review, monitor and terminate the process of the power Internet of Things operating system, so that the startup process of the power Internet of Things operating system runs normally;

[0015] During the operation of the power Internet of Things operating system, the security module is used for network protection and to collect threat intelligence, and the data backup and recovery module is used to perform data backup operations on the device information obtained in the power Internet of Things operating system to complete the multi-level protection startup and operation of the power Internet of Things operating system.

[0016] The embodiment of the present invention provides a multi-level security protection system and method based on the power Internet of Things operating system, wherein the security protection system includes a security module, a firmware integrity verification module, a kernel protection module, and a file encryption module. The security module performs security protection on the secure startup, isolation, intelligence, and network in the power Internet of Things operating system; the firmware integrity verification module performs an integrity check on the firmware of the power Internet of Things operating system, and at the same time protects the kernel, memory, process management, and files of the power Internet of Things operating system; thereby facilitating protection during the startup and operation of the power Internet of Things operating system. The security protection system is built on the underlying security of the power Internet of Things operating system, which is conducive to building a comprehensive power Internet of Things operating system protection mechanism to prevent the power Internet of Things operating system from being attacked and data from being stolen. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Other features, objects and advantages of the present invention will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings. The drawings are only for the purpose of illustrating preferred embodiments and are not to be considered as limiting the present invention. Also, the same reference symbols are used throughout the drawings to represent the same parts. In the drawings:

[0018] Figure 1 It is a structural schematic diagram of a multi-level security protection system based on a power Internet of Things operating system provided in an embodiment of the present invention;

[0019] Figure 2 A schematic diagram of the structure of a security module provided in an embodiment of the present invention;

[0020] Figure 3 A flowchart of a multi-level security protection method based on a power Internet of Things operating system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0022] Before discussing the exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow charts describe the operations (or steps) as sequential processes, many of the operations (or steps) therein can be implemented in parallel, concurrently or simultaneously. In addition, the order of the operations can be rearranged. The process can be terminated when its operation is completed, but can also have additional steps not included in the accompanying drawings. The process can correspond to a method, function, procedure, subroutine, subprogram, etc.

[0023] Among them, the acquisition, storage, use and processing of data in the technical solution of this application are in compliance with the relevant provisions of national laws and regulations. It should be noted that in the embodiments of this application, some existing solutions in the industry such as certain software, components or models may be mentioned, which should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of this application, but it does not mean that the applicant has or will necessarily use the solution.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein.

[0025] Embodiment 1

[0026] Figure 1 is a schematic diagram of the structure of a multi-level security protection system based on the power Internet of Things operating system provided in an embodiment of the present invention. This embodiment is applicable to the case where multi-level security protection is performed on the power Internet of Things operating system, such as Figure 1 As shown, the multi-level security protection system 100 based on the power Internet of Things operating system provided in the embodiment of the present invention may include: a security module 110, a firmware integrity verification module 120, a kernel protection module 130 and a file encryption module 140; the security module 110 is connected to the firmware integrity verification module 120 by data interaction, and the kernel protection module 130 is connected to the firmware integrity verification module 120 and the file encryption module 140 by data interaction; wherein,

[0027] The security module 110 is used to provide security protection for the secure startup, isolation, intelligence and network of the power IoT operating system;

[0028] The firmware integrity verification module 120 is used to perform integrity check on the system firmware of the power IoT operating system to ensure that the firmware has not been tampered with or damaged;

[0029] The kernel protection module 130 is used to protect the kernel of the power Internet of Things operating system from attacks and prevent kernel-level vulnerabilities from being exploited.

[0030] The power Internet of Things operating system may refer to the power Hongmeng system. The embodiment of the present invention takes the power Hongmeng system as an example to construct a security protection system to provide multi-level security protection for the power Hongmeng system. The security protection system is built on the underlying security of the power Internet of Things operating system, which facilitates the construction of a comprehensive system protection mechanism to prevent the power Internet of Things operating system from being attacked and data from being stolen.

[0031] The security module is connected to the firmware integrity verification module through data interaction to provide security protection for the secure startup, isolation, intelligence and network of the power Internet of Things operating system.

[0032] The firmware integrity verification module ensures that the power Internet of Things operating system firmware has not been modified before startup through the firmware signature and verification mechanism, which is beneficial to maintaining the basic security and stability of the power Internet of Things operating system; the firmware integrity verification module can also use the hash algorithm to generate a digital summary of the firmware.

[0033] The kernel protection module is connected with the firmware integrity verification module and the file encryption module through data interaction, which helps prevent malware or attackers from exploiting kernel vulnerabilities to attack. It is also helpful to strengthen the security mechanism of the kernel of the power Internet of Things operating system and improve the overall security of the power Internet of Things operating system.

[0034] An embodiment of the present invention provides a multi-level security protection system based on the power Internet of Things operating system, and the security protection system includes a security module, a firmware integrity verification module, a kernel protection module, and a file encryption module. The security module performs security protection on the secure startup, isolation, intelligence, and network in the power Internet of Things operating system; the firmware integrity verification module performs an integrity check on the firmware of the power Internet of Things operating system, and at the same time protects the kernel, memory, process management, and files of the power Internet of Things operating system; thereby facilitating protection during the startup and operation of the power Internet of Things operating system. The security protection system is built on the underlying security of the power Internet of Things operating system, which is conducive to building a comprehensive power Internet of Things operating system protection mechanism to prevent the power Internet of Things operating system from being attacked and data from being stolen.

[0035] Embodiment 2

[0036] The embodiment of the present invention further optimizes the above embodiment on the basis of the above embodiment, and the embodiment of the present invention can be combined with each optional solution in one or more of the above embodiments. The multi-level security protection system based on the power Internet of Things operating system provided in the embodiment of the present invention is shown in FIG. Figure 1 The security protection system also includes a memory security module 150, a process management module 160, a device authentication module 170 and a data backup and recovery module 180; wherein,

[0037] A memory security module 150, used to protect the memory of the power IoT operating system from attacks and exploits by malicious software;

[0038] The process management module 160 is used to monitor and manage the processes of the power Internet of Things operating system to prevent the operation and spread of malicious processes;

[0039] The device authentication module 170 is used to authenticate and authorize devices connected to the power IoT operating system to prevent unauthorized devices from accessing;

[0040] The data backup and recovery module 180 is used to regularly back up the power Internet of Things operating system data and store it in a safe and reliable storage medium.

[0041] The memory security module 150 is used to protect the memory of the power IoT operating system from attacks and exploits by malicious software. The memory security module uses address space layout randomization and data execution protection to protect the memory. The memory security module protects the memory by implementing security measures such as memory isolation, memory leak detection and abnormal access, which is conducive to preventing memory overflow attacks and code injection attacks.

[0042] The kernel protection module and memory security module can use access control list algorithm, randomization algorithm and data execution protection algorithm to protect the kernel and memory of the power IoT operating system. Among them, the access control list algorithm is used to implement kernel-level access control, limit access to key system resources and address space layout; the randomization algorithm is used to prevent buffer overflow attacks, and increase the difficulty of attacks by randomizing program memory layout; the data execution protection algorithm is used to prevent code from being executed from non-executable memory areas, thereby preventing certain types of attacks.

[0043] Process management module 160 is used to monitor and manage system processes to prevent the operation and spread of malicious processes. The process management module uses process isolation and permission control to manage, which is conducive to preventing malicious processes from occupying system resources or performing malicious operations, limiting process permissions and interactions, and preventing malicious behavior between processes.

[0044] The device authentication module 170 is used to authenticate and authorize devices connected to the system to prevent unauthorized devices from accessing. The device authentication module uses device fingerprints and digital certificates to authenticate devices, thereby preventing unauthorized devices from accessing the power IoT operating system and causing security risks.

[0045] The data backup and recovery module 180 is used to regularly back up system data and store it in a safe and reliable storage medium, which is conducive to quickly recovering data in case of data loss or damage to reduce losses. It is convenient to provide data security for the power Internet of Things operating system and ensure that business operations can be quickly restored in the event of an attack or failure.

[0046] Specifically, the memory security module is connected to the security module through data transmission, the process management module is connected to the device authentication module and the data backup and recovery module through data transfer, and the kernel protection module is connected to the data backup and recovery module through data interaction, thereby providing security protection for the power Internet of Things operating system.

[0047] The security protection system provided by the embodiment of the present invention also includes a memory security module, a process management module, a device authentication module, and a data backup and recovery module. The memory security module protects the memory of the power Internet of Things operating system from attacks and exploits by malicious software; the process management module is connected to the device authentication module and the data backup and recovery module by data transmission to prevent malicious processes from occupying system resources or performing malicious operations, and to limit the permissions and interactions of processes, so as to prevent malicious behavior between processes; the device authentication module authenticates and authorizes devices connected to the power Internet of Things operating system to prevent unauthorized devices from accessing; the data backup and recovery module regularly backs up the data of the power Internet of Things operating system and stores it in a safe and reliable storage medium, so as to provide data security for the power Internet of Things operating system and ensure that business operations can be quickly restored in the event of an attack or failure.

[0048] Embodiment 3

[0049] The embodiment of the present invention further optimizes the above embodiment on the basis of the above embodiment, and the embodiment of the present invention can be combined with each optional solution in one or more of the above embodiments. The multi-level security protection system based on the power Internet of Things operating system provided in the embodiment of the present invention is shown in FIG. Figure 2 , the security module 110 includes a secure boot unit 111 and a secure isolation unit 112; wherein,

[0050] The secure startup unit 111 is responsible for performing security verification when the power Internet of Things operating system is started;

[0051] The security isolation unit 112 is used to create at least two security domains in the power Internet of Things operating system to establish resource isolation at different security levels.

[0052] Among them, the secure boot unit is responsible for performing security verification when the power Internet of Things operating system is started, ensuring that only authorized and verified boot loaders and operating systems can run, which helps prevent malicious software from attacking during the startup phase of the power Internet of Things operating system.

[0053] The security isolation unit is used to create multiple security domains in the power Internet of Things operating system to achieve resource isolation at different security levels. This is beneficial for preventing cross-domain attacks and data leakage through strict access control and policy management, and is convenient for improving the anti-attack capability of the power Internet of Things operating system. Even if a security domain is attacked, it can effectively prevent the attack from spreading to the entire power Internet of Things operating system.

[0054] Optionally, the security module 110 further includes a threat intelligence unit 113 and a network security unit 114; wherein,

[0055] The threat intelligence unit 113 is used to collect and analyze security threat intelligence in real time around the world; wherein the security threat intelligence includes malware samples, attack patterns, and vulnerability information;

[0056] The network security unit 114 is used to protect the power Internet of Things operating system from network attacks and ensure the network communication security of the power Internet of Things operating system; wherein the network security unit adopts any one of a firewall, an intrusion detection system and an intrusion prevention system for network security protection.

[0057] The threat intelligence unit is used to collect and analyze security threat intelligence from around the world in real time. Security threat intelligence includes malware samples, attack patterns, and vulnerability information. It is helpful to provide early warning of potential security threats through intelligent analysis, provide decision support for system protection, and thus help enhance the system's predictability and initiative, enabling the system to take preventive measures before threats occur and reduce the risk of attacks.

[0058] The network security unit is used to protect the system from network attacks and ensure the security of the system network communication. The network security unit provides network security protection by using firewalls, intrusion detection systems and intrusion prevention systems; the network security unit is conducive to monitoring and filtering network traffic to prevent malicious network attacks.

[0059] Specifically, the secure boot unit is connected to the secure isolation unit through data interaction, and the secure boot unit is connected to the threat intelligence unit and the network security unit through data transmission. The network security unit uses encryption algorithms and intrusion detection algorithms for computing protection; such as the encryption algorithms used in the TLS / SSL protocol, which are used to protect the security and integrity of network communication data; the intrusion detection algorithm is an algorithm based on machine learning and statistical analysis, which is used to detect abnormal patterns in network traffic and thus identify potential network attacks.

[0060] The security module provided by the embodiment of the present invention includes a secure boot unit, a secure isolation unit, a threat intelligence unit and a network security unit. The secure boot unit is connected to the secure isolation unit by data interaction, and the secure boot unit is connected to the threat intelligence unit and the network security unit by data transmission, so as to provide security protection for the secure boot, isolation, intelligence and network of the power Internet of Things operating system.

[0061] Embodiment 4

[0062] Figure 3This is a flowchart of a multi-level security protection method based on the power Internet of Things operating system provided in an embodiment of the present invention. The embodiment of the present invention can be applied to the case where multi-level security protection is performed on the power Internet of Things operating system. This method can be executed by the multi-level security protection system based on the power Internet of Things operating system provided in any embodiment of the present invention. Figure 3 As shown, the multi-level security protection method based on the power Internet of Things operating system provided in the embodiment of the present invention specifically includes the following steps:

[0063] S310: When the power Internet of Things operating system is started, the digital signature of the boot loader is checked using the device authentication module. When the digital signature does not match or does not exist, the startup of the power Internet of Things operating system is stopped and an early warning is issued.

[0064] Among them, when the power Internet of Things operating system is started, the device authentication module is first used to check the digital signature of the boot loader. If the signature does not match or does not exist, the power Internet of Things operating system will stop starting and prompt an error.

[0065] S320. During the startup process of the power Internet of Things operating system, a firmware integrity verification module is used to perform integrity verification on the firmware startup components, and the firmware digital summary generated by the hash algorithm is compared with the pre-stored summary. When the firmware digital summary is inconsistent with the pre-stored summary, an early warning is issued and the operation of the power Internet of Things operating system is blocked.

[0066] Among them, during the startup process of the power Internet of Things operating system, the firmware integrity verification module is used to check the integrity of the firmware startup components one by one, and the hash algorithm is used to compare the calculated values. At the same time, during the startup process of the power Internet of Things operating system, the device integrity of the power Internet of Things operating system firmware is verified, and the digital summary of the firmware generated by the hash algorithm is compared with the pre-stored summary. When there is an inconsistency between the two, the power Internet of Things operating system will trigger an alarm and then prevent the system from running.

[0067] S330. During the startup of the power Internet of Things operating system, the kernel code monitoring and kernel permission management included in the kernel protection module are used to protect the kernel of the power Internet of Things operating system, and the memory security module is used to protect the memory of the power Internet of Things operating system.

[0068] Among them, during the startup process of the power Internet of Things operating system, kernel and memory protection take effect at the same time, using kernel code monitoring and kernel permission management to protect the kernel, and at the same time setting protection for memory addresses and encrypting data to protect the system's kernel and memory, and then encrypt and protect the files in the system.

[0069] Based on the above embodiment, optionally, the kernel code monitoring and kernel permission management included in the kernel protection module are used to protect the kernel of the power Internet of Things operating system, including but not limited to steps A1-A2:

[0070] Step A1: using the kernel code monitoring included in the kernel protection module to monitor the integrity of the kernel code in real time; wherein a kernel-level monitoring program is installed in the kernel protection module, and when the monitoring program detects that there is a write operation in the kernel code segment, it is determined that there is a potential attack behavior;

[0071] Step A2: The target process is authorized using the kernel permission management included in the kernel protection module; the target process can obtain kernel permissions.

[0072] Among them, kernel code monitoring monitors the integrity of kernel code in real time by installing a kernel-level monitoring program. When the monitoring program detects a write operation in the kernel code segment, it determines it as a potential attack behavior. Kernel permission management ensures that only authorized processes can obtain the necessary kernel permissions.

[0073] Based on the above embodiment, optionally, the method further comprises using a file encryption module to encrypt and protect files in the power IoT operating system, and the encryption protection specifically includes but is not limited to steps B1-B3:

[0074] Step B1: Generate a file encryption key according to specific encryption algorithm requirements;

[0075] Step B2: Use the file encryption key to encrypt the files in the power IoT operating system, and store the encrypted files in a ciphertext form on a storage medium;

[0076] Step B3: Using key encryption key technology, encrypt the file encryption key and store it in the system key library.

[0077] The file encryption module is used to protect the memory address in the power IoT operating system and encrypt the data to protect the system kernel and memory, and then encrypt the files in the system. In memory data encryption, the encryption algorithm is used to encrypt and store sensitive memory data, and the encryption key in the memory is strictly protected.

[0078] S340: After the power Internet of Things operating system is started, a process management module is used to create, review, monitor, and terminate the process of the power Internet of Things operating system, so that the startup process of the power Internet of Things operating system runs normally.

[0079] On the basis of the above embodiment, optionally, the process management module is used to create, review, monitor and terminate the process of the power Internet of Things operating system, so that the startup process of the power Internet of Things operating system runs normally, including but not limited to steps C1-C3:

[0080] Step C1: obtaining the subject of the process creation and the source information of the executable file of the process, and refusing to create the process if the source information is not credible;

[0081] Step C2: continuously monitoring the resource usage of the process to monitor the operation of the process; the resource usage includes memory usage and CPU usage;

[0082] Step C3: When the process terminates normally or abnormally, the occupied resources are automatically cleaned up; the automatic cleaning of occupied resources includes releasing memory space and closing file handles.

[0083] Among them, after the power Internet of Things operating system is started, the process of the power Internet of Things operating system is created for review, operation monitoring and termination cleaning, so that the startup process of the power Internet of Things operating system proceeds normally. The process creation review operation mode is that when there is a new process creation request, the system will review the subject of the creation process and the source information of the executable file of the process; when the source is untrustworthy, the system will refuse to create the process. The process operation monitoring operation mode is to continuously monitor the resource usage of the process, including the CPU usage rate and memory usage. The process termination cleaning operation mode is that when the process terminates normally or abnormally, the system will clean up the occupied resources, including releasing memory space and closing file handles.

[0084] S350. During the operation of the power Internet of Things operating system, a security module is used to perform network protection and collect threat intelligence, and a data backup and recovery module is used to perform data backup operations on device information obtained in the power Internet of Things operating system to complete the multi-level protection startup and operation of the power Internet of Things operating system.

[0085] Among them, the network in which the power Internet of Things operating system is running is protected by security measures, and then the threat intelligence is collected through the network. At the same time, the device information obtained in the power Internet of Things operating system is backed up to complete the multi-level protection startup and operation of the power Internet of Things operating system.

[0086] The multi-level security protection method based on the power Internet of Things operating system provided in the embodiments of the present invention can be applied to the multi-level security protection system based on the power Internet of Things operating system provided in any of the above embodiments of the present invention, and has the corresponding functions and beneficial effects of the multi-level security protection system based on the power Internet of Things operating system. For technical details not described in detail in the above embodiments, please refer to the multi-level security protection system based on the power Internet of Things operating system provided in any embodiment of the present application.

[0087] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0088] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A multi-level security protection system based on the power Internet of Things operating system, characterized in that: The security protection system includes: a security module, a firmware integrity verification module, a kernel protection module and a file encryption module; the security module is connected to the firmware integrity verification module through data interaction, and the kernel protection module is connected to the firmware integrity verification module and the file encryption module through data interaction; wherein, The security module is used to provide security protection for the safe startup, isolation, intelligence and network of the power Internet of Things operating system; The firmware integrity verification module is used to perform integrity check on the system firmware of the power Internet of Things operating system to ensure that the firmware has not been tampered with or damaged; The kernel protection module is used to protect the kernel of the power Internet of Things operating system from attacks and prevent kernel-level vulnerabilities from being exploited.

2. The system according to claim 1, characterized in that The security protection system also includes a memory security module, a process management module, a device authentication module and a data backup and recovery module; wherein, Memory security module, used to protect the memory of the power IoT operating system from attacks and exploits by malicious software; The process management module is used to monitor and manage the processes of the power IoT operating system to prevent the operation and spread of malicious processes; Device authentication module, used to authenticate and authorize devices connected to the power IoT operating system to prevent unauthorized devices from accessing; The data backup and recovery module is used to regularly back up the power Internet of Things operating system data and store it in a safe and reliable storage medium.

3. The system according to claim 2, characterized in that The memory security module is connected to the security module through data transmission, the process management module is connected to the device authentication module and the data backup and recovery module through data transfer, and the kernel protection module is connected to the data backup and recovery module through data interaction.

4. The system according to claim 1, characterized in that The security module includes a secure boot unit and a secure isolation unit; wherein, The secure boot unit is responsible for performing security verification when the power IoT operating system is started; The security isolation unit is used to create at least two security domains in the power Internet of Things operating system to build resource isolation at different security levels.

5. The system according to claim 4, characterized in that The security module also includes a threat intelligence unit and a network security unit; wherein, The threat intelligence unit is used to collect and analyze security threat intelligence in real time around the world; wherein the security threat intelligence includes malware samples, attack patterns, and vulnerability information; The network security unit is used to protect the power Internet of Things operating system from network attacks and ensure the network communication security of the power Internet of Things operating system; wherein the network security unit adopts any one of a firewall, an intrusion detection system and an intrusion prevention system to perform network security protection.

6. The system according to claim 5, characterized in that The secure boot unit is connected to the secure isolation unit by means of data interaction, and the secure boot unit is connected to the threat intelligence unit and the network security unit by means of data transmission.

7. A multi-level security protection method based on the power Internet of Things operating system, characterized in that: The multi-level security protection method based on the power Internet of Things operating system is applied to a multi-level security protection system based on the power Internet of Things operating system, including: When the power IoT operating system is started, the device authentication module is used to check the digital signature of the boot loader. If the digital signature does not match or does not exist, the startup of the power IoT operating system is stopped and an early warning is issued. During the startup process of the power Internet of Things operating system, the firmware integrity verification module is used to check the integrity of the firmware startup components, and the firmware digital summary generated by the hash algorithm is compared with the pre-stored summary. When the firmware digital summary is inconsistent with the pre-stored summary, an early warning is issued and the operation of the power Internet of Things operating system is blocked; During the startup process of the power IoT operating system, the kernel code monitoring and kernel permission management included in the kernel protection module are used to protect the kernel of the power IoT operating system, and the memory security module is used to protect the memory of the power IoT operating system; After the power Internet of Things operating system is started, the process management module is used to create, review, monitor and terminate the process of the power Internet of Things operating system, so that the startup process of the power Internet of Things operating system runs normally; During the operation of the power Internet of Things operating system, the security module is used for network protection and to collect threat intelligence, and the data backup and recovery module is used to perform data backup operations on the device information obtained in the power Internet of Things operating system to complete the multi-level protection startup and operation of the power Internet of Things operating system.

8. The method according to claim 7, characterized in that The kernel code monitoring and kernel permission management included in the kernel protection module are used to protect the kernel of the power Internet of Things operating system, including: The kernel code monitoring included in the kernel protection module is used to monitor the integrity of the kernel code in real time; wherein, a kernel-level monitoring program is installed in the kernel protection module, and when the monitoring program detects that there is a write operation in the kernel code segment, it is determined that there is a potential attack behavior; The target process is authorized using the kernel permission management included in the kernel protection module; the target process can obtain kernel permissions.

9. The method according to claim 7, characterized in that: The process management module is used to create, review, monitor and terminate the process of the power Internet of Things operating system, so that the startup process of the power Internet of Things operating system runs normally, including: Obtaining the subject of the process creation and the source information of the executable file of the process, and refusing to create the process if the source information is unreliable; Continuously monitor the resource usage of the process to monitor the operation of the process; the resource usage includes memory usage and CPU usage; When a process terminates normally or abnormally, occupied resources are automatically cleaned up; the automatic cleaning of occupied resources includes releasing memory space and closing file handles.

10. The method according to claim 7, characterized in that The method further includes using a file encryption module to encrypt and protect files in the power IoT operating system, and the encryption protection specifically includes: Generate file encryption keys based on specific encryption algorithm requirements; Use the file encryption key to encrypt the files in the Power IoT operating system, and store the encrypted files in ciphertext on the storage medium; Using key encryption key technology, the file encryption key is encrypted and stored in the system key library.

Images