Multi-terminal security intelligent measurement system and communication method

Abstract

The invention provides a multi-terminal safety intelligent measurement system and a communication method, and belongs to the technical field of power grids. The system comprises an intelligent measurement terminal, a trusted third party and multiple terminals, and encryption two-way communication is carried out; the method comprises the following steps: requesting connection, and establishing an asymmetric encryption communication network; distributing the authority of the terminal according to the authentication information; sending an operation instruction and information confirmation; and recording a log, and tracking an abnormal event. According to the method, the communication security is protected by connecting various user side terminals and trusted third parties in combination with an asymmetric encryption algorithm, and authentication and corresponding permission configuration are performed according to reserved information, so that the security is improved, basic conditions for self-service configuration of a power supply scene are provided, the flexibility of the system is improved, and user requirements are met; in combination with log records, potential security threats can be found as soon as possible, and user rights and interests are guaranteed.

Description

Technical Field

[0001] The present invention relates to the technical field of power grids, and in particular to a multi-terminal secure intelligent measurement system and a communication method. Background Art

[0002] Smart grid, also known as "Grid 2.0", is mainly built on the basis of high-speed two-way communication network. The structure is set up by connecting intelligent measurement terminals through the main station. Through information design, remote intelligent control of the intelligent measurement terminals of the power grid can be realized. It is not only more economical and efficient, but also can provide power quality that meets user needs according to needs. It also allows users to customize different electricity consumption strategies and support the access of various different forms of power generation. On the one hand, it can achieve the purpose of energy conservation and emission reduction, and on the other hand, it can optimize the grid structure to maintain overall stability.

[0003] The existing intelligent distribution network still has deficiencies in intelligence and security. First of all, in remote control, due to the high pressure of communication security, the current main remote control strategy is mainly concentrated between the master station and each intelligent measurement terminal, and is protected by mature encryption algorithms; although this technical solution has realized the basis of intelligent control, the user side still lacks corresponding control strategies and degrees of freedom, and can only perform basic operations through the quick query and payment windows provided by major platforms. At the same time, the information chain node can only be the master station, resulting in poor communication efficiency, and it is not possible to customize power consumption strategies or switch on and off by self-service. Secondly, the user side has always demanded: hope that multiple terminals can access the power supply network, and perform self-service operations according to different permissions, so as to support time-of-use electricity prices, special transformer fee control and wide access to new energy, etc., but due to the lack of corresponding encryption and verification means, security and reliability cannot be guaranteed, resulting in the idea of ​​diversified operation terminals being shelved.

[0004] On this basis, it is also necessary to explore a secure communication system and method between the intelligent measurement terminal and different user terminals. Summary of the invention

[0005] In order to overcome the deficiencies of the prior art, the present invention provides a multi-terminal secure intelligent measurement system, which mainly includes an intelligent measurement terminal; The system also includes a variety of terminals and trusted third parties, and the various terminals and the trusted third parties all communicate with the intelligent measurement terminal in encrypted two-way communication; The intelligent measurement terminal is provided with a time-of-use electricity price setting module; the time-of-use electricity price setting module is used to display the time-of-use electricity price and receive the user's electricity consumption plan parameter setting information; The intelligent measurement terminal is also provided with a dedicated transformer fee control module; the dedicated transformer fee control module is provided with an intelligent meter for remote power restriction processing; The various terminals transfer the time-of-use electricity price setting module and the dedicated transformer fee control module through the control system of the intelligent measurement terminal.

[0006] Preferably, the multiple terminals include multiple combinations of smart mobile phones, computers, servers or remote control centers.

[0007] On the other hand, the present invention also provides a multi-terminal secure intelligent measurement system communication method, the method comprising: S1. When the terminal requests a connection for the first time, it sends a request message including authentication information to the intelligent measurement terminal; after the intelligent measurement terminal compares the authentication information with the reserved information, it establishes an asymmetric encryption communication network with the terminal and the trusted third party, and stores the digital certificate in the trusted third party for management; S2, the intelligent measurement terminal allocates permissions to the terminal according to the authentication information; S3, after the terminal sends the operation instruction to the intelligent measurement terminal, the intelligent measurement terminal stores the operation instruction and then sends the dynamically encrypted confirmation information; after the user confirms the confirmation information, the terminal sends the dynamically encrypted confirmation instruction to the intelligent measurement terminal; after receiving the confirmation instruction, the intelligent measurement terminal performs the corresponding operation; S4. The intelligent measurement terminal records the access log of the terminal and tracks abnormal events.

[0008] Preferably, in S1, the reserved information includes login accounts, passwords and device information set when the terminals are registered; and the authentication information includes the device information of the terminals and the corresponding login accounts and passwords.

[0009] Preferably, in S2, the intelligent measurement terminal sends a corresponding electronic operation manual to the terminal according to the authentication information.

[0010] Preferably, it also includes a verification terminal; In the S3: The intelligent measurement terminal sends the confirmation information to the verification terminal; After the user confirms the confirmation information, the confirmation instruction is sent to the intelligent measurement terminal through the verification terminal.

[0011] Preferably, the verification terminal is one of a smart mobile phone, a tablet computer, a portable computer or a portable communication device with a built-in communication and encryption module.

[0012] Preferably, in S3, the dynamic encryption algorithm is a time-based XOR encryption algorithm.

[0013] Preferably, in S4, the abnormal events include off-site login, frequent login or operation, illegal access or one or more combinations thereof.

[0014] The present invention adopts the above-mentioned multi-terminal security intelligent measurement system and communication method, which has the following beneficial effects compared with the prior art: The present invention protects communication security by connecting to multiple user-side terminals and trusted third parties, combining an asymmetric encryption algorithm, and performs authentication and configures corresponding permissions based on reserved information. This not only increases security, but also provides the basic conditions for self-service configuration of power supply scenarios, improves the flexibility of the system, and meets user needs. Combined with log records, potential security threats can be discovered early to protect user rights and interests. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0016] Figure 1 It is a system diagram in a specific embodiment of the present invention; Figure 2 A diagram showing the relationship between reserved information transmission in a specific embodiment of the present invention; Figure 3 It is a flow chart of the method in a specific embodiment of the present invention. Implementation

[0017] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0018] like Figure 1 As shown, the present invention provides a multi-terminal safe intelligent measurement system, which mainly includes intelligent measurement terminals, and the intelligent measurement terminals are connected to the main station on the one hand, and connected to power equipment 1-equipment z on the other hand, thereby forming an existing intelligent distribution network.

[0019] Furthermore, the system also includes terminal 1-terminal n and a trusted third party. Preferably, each terminal is a device for displaying on the user side and remotely sending control instructions, which can be a smart mobile phone, computer, server or remote control center in the user's hand, and corresponding software is integrated therein, such as special software in a smart mobile phone, or platform widgets (such as: WeChat applets), etc.; and power grid special software integrated in the operating system of a computer, server and remote control center, etc.; at the same time, customized portable communication devices with embedded communication and encryption modules can also be selected. There is no specific limitation in this embodiment, and users can select according to their needs.

[0020] The above-mentioned terminals and trusted third parties all perform encrypted two-way communication with the intelligent measurement terminal, wherein the trusted third party is a certificate management agency trusted by both parties of the main communication.

[0021] The intelligent measuring terminal is also provided with a time-of-use electricity price setting module, which includes a human-computer interaction interface and an integrated information entry module, which is mainly used to display the time-of-use electricity price and receive the user's electricity consumption plan parameter setting information.

[0022] The intelligent measurement terminal is also equipped with a special transformer fee control module. The main body of the special transformer fee control module is a smart meter, which can be used for remote power restriction processing and can also send reminder information according to preset conditions.

[0023] The above-mentioned terminals can all transfer the time-of-use electricity price setting module and the dedicated transformer fee control module through the control system of the intelligent measurement terminal, thereby realizing the basic conditions for the user-side terminal to access electricity consumption data and send instructions.

[0024] On the other hand, the present invention provides a corresponding communication method based on the aforementioned multi-terminal security intelligent measurement system, such as Figure 3 As shown, it mainly includes: S1. Preferably, before the user terminal requests to connect to the intelligent measurement terminal for the first time, Figure 2 As shown, first, the user operates the terminal to upload the terminal information as reserved information to the intelligent measurement main station through a third party (such as a communication operator) with a multi-layer encrypted communication network, and the main station verifies and sends the intelligent measurement terminal, which also includes the login account (ID), password (PassWord) and device identification of the terminal device set by each terminal user when registering. The authentication information includes the device information of the terminal and the corresponding login account and password. When the terminal requests a connection to the intelligent measurement terminal for the first time, it first sends a request message to the intelligent measurement terminal, and includes authentication information, which includes the aforementioned login account (ID), password (PassWord) and device identification of the terminal device. The intelligent measurement terminal compares the authentication information with the reserved information, and returns a failure message and records it when it is inconsistent; if the information is consistent, it establishes an asymmetric encryption communication network with the terminal and the trusted third party, and stores the digital certificate for communication in the trusted third party for unified management.

[0025] S2. The intelligent measurement terminal allocates terminal permissions according to the authentication information, implements a flexible permission control strategy, and determines the access and operation permissions of the user or terminal in the system according to the identity and role of the user or terminal; it can be understood as providing different permission combinations such as information access, data operation, and remote power control according to the terminal confidentiality performance and user identity, so as to avoid terminals that are vulnerable to attack or hijacking from obtaining higher permissions, thereby improving network security; preferably, the intelligent measurement terminal sends the corresponding electronic operation manual to the terminal according to the authentication information, so as to provide training for the terminal users, strengthen their cognition and operation skills of multi-terminal secure access, and avoid security problems caused by human operation.

[0026] S3. Preferably, the user is also provided with a verification terminal during the preliminary registration, which may be a smart mobile phone, a tablet computer, a portable computer or a portable communication device with a built-in communication and encryption module, so that it can be carried with the user and corresponding software is installed therein for receiving and sending information.

[0027] After the user terminal sends an operation instruction to the intelligent measurement terminal, the intelligent measurement terminal stores the operation instruction and then sends a dynamically encrypted confirmation message to the verification terminal; after the user confirms the confirmation message at the verification terminal, the verification terminal sends a dynamically encrypted confirmation instruction to the intelligent measurement terminal; after receiving the confirmation instruction, the intelligent measurement terminal performs the corresponding operation; Furthermore, the aforementioned dynamic encryption algorithm is a time-based XOR encryption algorithm.

[0028] S4. The intelligent measurement terminal records the terminal access log and tracks abnormal events; records the logs of multiple terminal accesses, including logins, operations, data access, etc., in order to track and analyze security events, and audit the logs when necessary to identify potential security threats; preferably, abnormal events include remote logins, exceeding the preset number of logins or operations within a fixed time period (frequent logins or operations), and illegal access.

[0029] Furthermore, a firmware update mechanism for the intelligent measurement terminal can be designed to ensure that the firmware is upgraded in time to fix vulnerabilities, and a remote monitoring module can be embedded to regularly scan the terminal's storage documents and operating system logs to promptly detect and handle abnormal situations, and connect multiple terminals to log auditing.

[0030] The principles and implementation methods of the present invention are described in this article using specific examples. The description of the above embodiments is only used to help understand the method and core idea of ​​the present invention. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A multi-terminal security intelligent measurement system, including an intelligent measurement terminal; It is characterized in that It also includes a variety of terminals and trusted third parties, and the various terminals and the trusted third parties all communicate with the smart measurement terminal in encrypted two-way communication; The intelligent measurement terminal is provided with a time-of-use electricity price setting module; the time-of-use electricity price setting module is used to display the time-of-use electricity price and receive the user's electricity consumption plan parameter setting information; The intelligent measurement terminal is also provided with a dedicated transformer fee control module; the dedicated transformer fee control module is provided with an intelligent meter for remote power restriction processing; The various terminals transfer the time-of-use electricity price setting module and the dedicated transformer fee control module through the control system of the intelligent measurement terminal.

2. The multi-terminal security intelligent measurement system according to claim 1, characterized in that: The various terminals include various combinations of smart mobile phones, computers, servers or remote control centers.

3. A multi-terminal secure intelligent measurement system communication method, characterized in that: Methods include: S1. When the terminal requests a connection for the first time, it sends a request message to the intelligent measurement terminal, which includes authentication information; After comparing the authentication information with the reserved information, the intelligent measurement terminal establishes an asymmetric encryption communication network with the terminal and the trusted third party, and stores the digital certificate in the trusted third party for management; S2, the intelligent measurement terminal allocates permissions to the terminal according to the authentication information; S3, after the terminal sends the operation instruction to the intelligent measurement terminal, the intelligent measurement terminal stores the operation instruction and then sends the dynamically encrypted confirmation information; after the user confirms the confirmation information, the terminal sends the dynamically encrypted confirmation instruction to the intelligent measurement terminal; after receiving the confirmation instruction, the intelligent measurement terminal performs the corresponding operation; S4. The intelligent measurement terminal records the access log of the terminal and tracks abnormal events.

4. The multi-terminal secure intelligent measurement system communication method according to claim 3, characterized in that: In S1, the reserved information includes login accounts, passwords and device information set when the terminals are registered; the authentication information includes the device information of the terminals and the corresponding login accounts and passwords.

5. The multi-terminal secure intelligent measurement system communication method according to claim 3, characterized in that: In S2, the intelligent measurement terminal sends a corresponding electronic operation manual to the terminal according to the authentication information.

6. The multi-terminal secure intelligent measurement system communication method according to claim 3, characterized in that: Also includes a verification terminal; In the S3: The intelligent measurement terminal sends the confirmation information to the verification terminal; After the user confirms the confirmation information, the confirmation instruction is sent to the intelligent measurement terminal through the verification terminal.

7. The multi-terminal secure intelligent measurement system communication method according to claim 6, characterized in that: The verification terminal is a smart mobile phone, a tablet computer, a portable computer or a portable communication device with a built-in communication and encryption module.

8. The multi-terminal secure intelligent measurement system communication method according to claim 3, characterized in that: In S3, the dynamic encryption algorithm is a time-based XOR encryption algorithm.

9. The multi-terminal secure intelligent measurement system communication method according to claim 3, characterized in that: In S4, the abnormal events include remote login, frequent login or operation, illegal access or one or more combinations thereof.

Images