Data security relay device for hydrogen-electricity-heat comprehensive energy station and data transmission method of data security relay device

Abstract

The invention discloses a data security relay device for a hydrogen-electricity-heat comprehensive energy station. The data security relay device comprises a data encryption module, a multi-layer firewall module, a data buffering and cache management module, a dynamic routing selection module, a redundant backup system and a user identity verification module. User data enters the data encryption module through the input port, and the data encryption module encrypts the data by adopting a hierarchical encryption algorithm and transmits the encrypted data to the multi-layer firewall module. The multi-layer firewall module receives and filters malicious traffic and illegal data packets, deeply detects data and analyzes traffic during transmission, and ensures the security and compliance of the data during transmission. Encrypted data filtered by a firewall enters a data buffering and cache management module, a buffering queue temporarily stores the data, and a cache management unit optimizes a data transmission path through an intelligent cache management algorithm and reduces delay and packet loss; the network monitoring unit collects current network state information in real time, the routing decision engine calculates an optimal transmission path based on a dynamic routing selection algorithm, and the routing adjustment module dynamically adjusts a data transmission path to ensure efficient transmission.

Description

Technical Field

[0001] The present invention relates to the field of hydrogen energy stations, and in particular to a data security relay device and a data transmission method thereof for a hydrogen electric and thermal integrated energy station. Background Art

[0002] As a new type of energy supply system, the hydrogen-electric-thermal integrated energy station integrates multiple subsystems such as hydrogen production, power management and thermal energy distribution. Efficient and reliable data exchange is required between these subsystems to ensure the coordinated operation of the energy station.

[0003] However, the existing data transmission methods have the following technical problems:

[0004] 1. Slow data transmission speed: The performance of traditional data transmission protocols has significantly decreased in a high-concurrency environment and cannot meet the needs of real-time data exchange. This leads to delayed transmission of key data, affecting the system's response speed and overall operating efficiency.

[0005] 2. Vulnerable to network attacks: The data transmission of energy stations faces various network threats such as DDoS attacks and man-in-the-middle attacks, which may lead to sensitive data leakage or system paralysis, seriously threatening the operational security of energy stations.

[0006] 3. Data loss: Due to network instability or equipment failure, packet loss occurs during data transmission, affecting the data integrity and reliability of the energy station. This not only reduces the operating efficiency of the system, but may also cause safety hazards.

[0007] Therefore, there is an urgent need for a data security relay device that can improve data transmission speed, enhance data security and ensure data integrity, so as to solve the deficiencies in the existing technology and ensure the efficient and safe operation of hydrogen-electric-thermal integrated energy stations. Summary of the invention

[0008] The purpose of the present invention is to provide a data security relay device and a data transmission method for a hydrogen-electric-thermal integrated energy station, so as to solve the problems of slow data transmission speed, susceptibility to network attacks and data loss in the prior art, and to improve the security, stability and efficiency of data transmission in the energy station.

[0009] The above technical objectives of the present invention are achieved through the following technical solutions:

[0010] A data security relay device for a hydrogen-electric-thermal integrated energy station, comprising:

[0011] The data encryption module is used to encrypt the input data and is responsible for generating, distributing and managing encryption keys to ensure secure storage and dynamic update of the keys;

[0012] Multi-layer firewall module, used to receive and filter malicious traffic and illegal data packets, conduct in-depth data inspection and traffic analysis during transmission, and ensure data security and compliance when sent;

[0013] The data buffer and cache management module uses ring buffer technology for high-concurrency data storage and fast reading, realizes intelligent cache allocation and dynamic adjustment, optimizes data transmission paths, and reduces delays and packet loss;

[0014] The dynamic routing selection module is used to collect network status information in real time, calculate and select the optimal data transmission path based on the self-developed dynamic routing algorithm, and dynamically adjust the data transmission path according to the real-time network status to ensure efficient transmission;

[0015] Redundant backup system, with preset backup strategies, automatically switches to the backup device when data transmission fails, ensuring uninterrupted data transmission;

[0016] The user authentication module supports multiple authentication methods and is used to process user authentication requests to ensure that only authorized users can access the relay device.

[0017] Furthermore, the data security relay device also includes

[0018] The anomaly detection and response module is used to monitor anomalies in the data transmission process in real time and automatically trigger corresponding security policies based on the detected anomalies;

[0019] The log management and audit module is used to record all data transmission and access operation logs, and safely store log data to support subsequent auditing and troubleshooting.

[0020] Furthermore, the data encryption module includes

[0021] The encryption engine unit encrypts the received data using the following layered encryption algorithm;

[0022]

[0023] Wherein, E(D) is the encrypted data, D is the original data, K1, K2 and K3 are encryption keys; the specific encryption processing steps are as follows:

[0024] S1. Perform an XOR operation on the original data D and the key K1 to generate intermediate data;

[0025] S2. Apply the SHA256 hash algorithm to the intermediate data to generate a hash value;

[0026] S3. concatenate the hash value with the key K2 as input for AES encryption;

[0027] S4. Use key K3 to perform AES encryption on the concatenated data to generate the final encrypted data E(D);

[0028] The key management unit is used to generate, distribute and manage encryption keys, ensuring the secure storage and dynamic update of keys.

[0029] Furthermore, the data buffering and cache management module improves the hit rate of data cache and reduces transmission delay through the following intelligent cache management algorithm;

[0030]

[0031] Among them, D i is the i-th data in the cache; PredictAccess(D i ) is the pair of data D i The predicted access probability; θ is the access probability threshold, which is dynamically adjusted according to the system load;

[0032] The specific steps are as follows:

[0033] S1. Data access prediction: Use historical data access patterns to predict the future access probability of each data in the current cache;

[0034] S2. Cache decision: Based on the prediction result and the set threshold θ, decide whether to keep or eliminate the data in the cache;

[0035] S3. Dynamic adjustment: Dynamically adjust the threshold θ and cache strategy according to the system operation status and data access changes.

[0036] Furthermore, the working process of the dynamic routing selection module is as follows:

[0037] The specific optimal data transmission path selection process is as follows:

[0038] S1. Network status collection: real-time collection of delay, bandwidth and load information of each path;

[0039] S2. Indicator standardization: standardize the collected indicators to ensure that the dimensions of different indicators are consistent;

[0040] S3. Comprehensive score calculation: Calculate the comprehensive score of each path according to the following formula;

[0041]

[0042] Among them, β1, β2, and β3 are weight coefficients, which are dynamically adjusted according to actual needs; Latency (Path) is the path delay, and the smaller the value, the better; Bandwidth (Path) is the path bandwidth, and the larger the value, the better; Load (Path) is the path load, and the smaller the value, the better;

[0043] S4. Optimal path selection: Select the path with the highest comprehensive score as the current data transmission path;

[0044] S5. Dynamic path adjustment: Recalculate and adjust the data transmission path regularly or when the network status changes.

[0045] A data transmission method for a data security relay device of a hydrogen-electric-thermal integrated energy station comprises the following steps:

[0046] S1. Data reception and encryption:

[0047] User data enters the data encryption module through the input port. The data encryption module uses a layered encryption algorithm to encrypt the data and transmits the encrypted data to the multi-layer firewall module;

[0048] S2. Threat Detection and Filtering:

[0049] When data is input, the input firewall performs preliminary filtering to block malicious traffic and illegal data packets; in the data transmission path, the transmission firewall performs in-depth detection and traffic analysis to block potential threats, and finally the data passes through the output firewall to ensure the security and compliance of outbound data;

[0050] S3. Data buffering and management:

[0051] The encrypted and firewall-filtered data enters the data buffer and cache management module, where the buffer queue temporarily stores the data. The cache management unit optimizes the data transmission path through an intelligent cache management algorithm to reduce delays and packet loss.

[0052] S3. Dynamic routing selection:

[0053] The network monitoring unit collects the current network status information in real time. The routing decision engine calculates the optimal transmission path based on the dynamic routing selection algorithm. The routing adjustment module dynamically adjusts the data transmission path to ensure efficient transmission.

[0054] S4. Data transfer and backup:

[0055] When data is transmitted to the target subsystem via the selected path, the redundant backup system backs up the transmitted data in real time to ensure that the data is not lost when the main device fails.

[0056] Furthermore, the output transmission method further comprises the following steps:

[0057] S5. User Authentication:

[0058] When users access the data relay device, they need to pass the multi-factor authentication of the user identity verification module;

[0059] After passing the verification, users can access and operate the data;

[0060] S6. Anomaly detection and response:

[0061] The anomaly detection and response module continuously monitors anomalies in the data transmission process. Once an anomaly is detected, the response strategy engine immediately takes corresponding measures;

[0062] S7.Log management and auditing:

[0063] All data transmission and access operations are recorded by the log management and audit module; the recorded logs can be used for subsequent security audits and troubleshooting to improve the maintainability and security of the system.

[0064] In summary, the present invention has the following beneficial effects:

[0065] 1. Multi-layer firewall architecture:

[0066] The unique multi-layer firewall design performs data filtering and threat detection at the input, transmission and output levels, forming multiple security barriers to improve overall security. Each layer of the firewall adopts different detection strategies, such as the input layer focuses on filtering malicious traffic, the transmission layer performs deep packet inspection, and the output layer ensures data compliance.

[0067] 2. Efficient data buffer management:

[0068] It uses advanced ring buffer technology to support high-concurrency data storage and fast reading. The intelligent cache management algorithm combines prediction and priority mechanisms to improve cache hit rate and reduce data transmission delay.

[0069] 3. Self-developed encryption and routing algorithms:

[0070] The hierarchical data encryption algorithm combines symmetric encryption and hash encryption to provide multiple data relays to adapt to complex network environments. The multi-index optimized dynamic routing selection algorithm comprehensively considers latency, bandwidth and load to achieve optimal path selection and improve data transmission efficiency.

[0071] 4. Redundant backup and fast failover mechanism:

[0072] The main and backup devices adopt hot backup or cold backup strategies to ensure that when the main device fails, the backup device can quickly take over and ensure the continuity and stability of data transmission. The fault detection and switching unit adopts real-time monitoring and automatic switching mechanisms to shorten the fault response time and improve system reliability.

[0073] 5. Anomaly detection and response mechanism:

[0074] Real-time monitoring of abnormal situations during data transmission, and the use of intelligent response strategies to automatically trigger current limiting, blocking or alarm measures to prevent data leakage and system damage. The anomaly detection algorithm combines machine learning technology with self-learning and adaptive capabilities to improve detection accuracy and response speed.

[0075] 6. Log management and auditing functions:

[0076] Comprehensive log recording and management, supporting detailed operation records and data transmission logs, facilitating subsequent security audits and troubleshooting. The log management module uses secure storage and encryption technology to prevent log data from being tampered with or leaked. BRIEF DESCRIPTION OF THE DRAWINGS

[0077] Figure 1 It is a schematic diagram of the data security relay device described in the present invention.

[0078] Figure 2 It is a schematic diagram of the data encryption module described in the present invention.

[0079] Figure 3 It is a schematic diagram of the multi-layer firewall module described in the present invention.

[0080] Figure 4 It is a schematic diagram of the data buffering and cache management module described in the present invention.

[0081] Figure 5 It is a schematic diagram of the dynamic routing selection module described in the present invention.

[0082] Figure 6 It is a schematic diagram of the redundant backup system described in the present invention.

[0083] Figure 7 Schematic diagram of the anomaly detection and response module of the present invention.

[0084] Figure 8 It is a schematic diagram of the user identity authentication module of the present invention.

[0085] Fig. 9 It is a schematic diagram of the log management and audit module described in the present invention. DETAILED DESCRIPTION

[0086] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the present invention is further described below in conjunction with illustrations and specific embodiments.

[0087] like Figures 1 to 9 As shown, the present invention proposes a data security relay device for a hydrogen-electric-thermal integrated energy station, comprising

[0088] The data encryption module is used to encrypt the input data and is responsible for generating, distributing and managing encryption keys to ensure secure storage and dynamic update of the keys;

[0089] Multi-layer firewall module, used to receive and filter malicious traffic and illegal data packets, conduct in-depth data inspection and traffic analysis during transmission, and ensure data security and compliance when sent;

[0090] The data buffer and cache management module uses ring buffer technology for high-concurrency data storage and fast reading, realizes intelligent cache allocation and dynamic adjustment, optimizes data transmission paths, and reduces delays and packet loss;

[0091] The dynamic routing selection module is used to collect network status information in real time, calculate and select the optimal data transmission path based on the self-developed dynamic routing algorithm, and dynamically adjust the data transmission path according to the real-time network status to ensure efficient transmission;

[0092] Redundant backup system, with preset backup strategies, automatically switches to the backup device when data transmission fails, ensuring uninterrupted data transmission;

[0093] The user authentication module supports multiple authentication methods and is used to process user authentication requests to ensure that only authorized users can access the relay device.

[0094] The data security relay device also includes

[0095] The anomaly detection and response module is used to monitor anomalies in the data transmission process in real time and automatically trigger corresponding security policies based on the detected anomalies;

[0096] The log management and audit module is used to record all data transmission and access operation logs, and safely store log data to support subsequent auditing and troubleshooting.

[0097] The data encryption module comprises

[0098] The encryption engine unit encrypts the received data using the following layered encryption algorithm;

[0099]

[0100] Wherein, E(D) is the encrypted data, D is the original data, K1, K2 and K3 are encryption keys; the specific encryption processing steps are as follows:

[0101] S1. Perform an XOR operation on the original data D and the key K1 to generate intermediate data;

[0102] S2. Apply the SHA256 hash algorithm to the intermediate data to generate a hash value;

[0103] S3. concatenate the hash value with the key K2 as input for AES encryption;

[0104] S4. Use key K3 to perform AES encryption on the concatenated data to generate the final encrypted data E(D);

[0105] The key management unit is used to generate, distribute and manage encryption keys, ensuring the secure storage and dynamic update of keys.

[0106] The data buffering and cache management module improves the hit rate of data cache and reduces transmission delay through the following intelligent cache management algorithm;

[0107]

[0108] Among them, D i is the i-th data in the cache; PredictAccess(D i ) is the pair of data D i The predicted access probability; θ is the access probability threshold, which is dynamically adjusted according to the system load;

[0109] The specific steps are as follows:

[0110] S1. Data access prediction: Use historical data access patterns to predict the future access probability of each data in the current cache;

[0111] S2. Cache decision: Based on the prediction result and the set threshold θ, decide whether to keep or eliminate the data in the cache;

[0112] S3. Dynamic adjustment: Dynamically adjust the threshold θ and cache strategy according to the system operation status and data access changes.

[0113] The optimal data transmission path selection process of the dynamic routing selection module is as follows:

[0114] S1. Network status collection: collect the delay, bandwidth and load information of each path in real time.

[0115] S2. Indicator standardization: standardize the collected indicators to ensure that the dimensions of different indicators are consistent;

[0116] S3. Comprehensive score calculation: Calculate the comprehensive score of each path according to the following formula;

[0117]

[0118] Among them, β1, β2, and β3 are weight coefficients, which are dynamically adjusted according to actual needs; Latency (Path) is the path delay, and the smaller the value, the better; Bandwidth (Path) is the path bandwidth, and the larger the value, the better;

[0119] Load(Path) is the path load. The smaller the value, the better.

[0120] S4. Optimal path selection: Select the path with the highest comprehensive score as the current data transmission path;

[0121] S5. Dynamic path adjustment: Recalculate and adjust the data transmission path regularly or when the network status changes.

[0122] A data transmission method for a data security relay device of a hydrogen-electric-thermal integrated energy station comprises the following steps:

[0123] S1. Data reception and encryption:

[0124] User data enters the data encryption module through the input port. The data encryption module uses a layered encryption algorithm to encrypt the data and transmits the encrypted data to the multi-layer firewall module;

[0125] S2. Threat Detection and Filtering:

[0126] When data is input, the input firewall performs preliminary filtering to block malicious traffic and illegal data packets; in the data transmission path, the transmission firewall performs in-depth detection and traffic analysis to block potential threats, and finally the data passes through the output firewall to ensure the security and compliance of outbound data;

[0127] S3. Data buffering and management:

[0128] The encrypted and firewall-filtered data enters the data buffer and cache management module, where the buffer queue temporarily stores the data. The cache management unit optimizes the data transmission path through an intelligent cache management algorithm to reduce delays and packet loss.

[0129] S3. Dynamic routing selection:

[0130] The network monitoring unit collects the current network status information in real time. The routing decision engine calculates the optimal transmission path based on the dynamic routing selection algorithm. The routing adjustment module dynamically adjusts the data transmission path to ensure efficient transmission.

[0131] S4. Data transfer and backup:

[0132] When data is transmitted to the target subsystem via the selected path, the redundant backup system backs up the transmitted data in real time to ensure that the data is not lost when the main device fails.

[0133] The output transmission method further comprises the following steps:

[0134] S5. User Authentication:

[0135] When users access the data relay device, they need to pass the multi-factor authentication of the user identity verification module;

[0136] After passing the verification, users can access and operate the data;

[0137] S6. Anomaly detection and response:

[0138] The anomaly detection and response module continuously monitors anomalies in the data transmission process. Once an anomaly is detected, the response strategy engine immediately takes corresponding measures;

[0139] S7.Log management and auditing:

[0140] All data transmission and access operations are recorded by the log management and audit module; the recorded logs can be used for subsequent security audits and troubleshooting to improve the maintainability and security of the system.

[0141] In this document, the directions or positional relationships indicated by terms such as "up", "down", "front", "back", "left", "right", "top", "bottom", "inside", "outside", "vertical", and "horizontal" are based on the directions or positional relationships shown in the accompanying drawings and are only for the clarity of expressing the technical solutions and the convenience of description, and therefore should not be understood as limitations of the present invention.

[0142] In this document, the terms "comprises," "comprising," or any other variations thereof, are intended to cover a non-exclusive inclusion of elements other than those listed and may also include additional elements not expressly listed.

[0143] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. The present invention may have various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention that requires relaying. The scope of the present invention requires relaying to be defined by the attached claims and their equivalents.

Claims

1. A data security relay device for a hydrogen-electric-thermal integrated energy station, characterized in that: include The data encryption module is used to encrypt the input data and is responsible for generating, distributing and managing encryption keys to ensure secure storage and dynamic update of the keys; Multi-layer firewall module, used to receive and filter malicious traffic and illegal data packets, conduct in-depth data inspection and traffic analysis during transmission, and ensure data security and compliance when sent; The data buffer and cache management module uses ring buffer technology for high-concurrency data storage and fast reading, realizes intelligent cache allocation and dynamic adjustment, optimizes data transmission paths, and reduces delays and packet loss; The dynamic routing selection module is used to collect network status information in real time, calculate and select the optimal data transmission path based on the self-developed dynamic routing algorithm, and dynamically adjust the data transmission path according to the real-time network status to ensure efficient transmission; Redundant backup system, with preset backup strategies, automatically switches to the backup device when data transmission fails, ensuring uninterrupted data transmission; The user authentication module supports multiple authentication methods and is used to process user authentication requests to ensure that only authorized users can access the relay device.

2. The data security relay device for a hydrogen-electric-thermal integrated energy station according to claim 1 is characterized in that: The data security relay device also includes The anomaly detection and response module is used to monitor anomalies in the data transmission process in real time and automatically trigger corresponding security policies based on the detected anomalies; The log management and audit module is used to record all data transmission and access operation logs, and safely store log data to support subsequent auditing and troubleshooting.

3. The data security relay device for a hydrogen-electric-thermal integrated energy station according to claim 1 is characterized in that: The data encryption module comprises The encryption engine unit encrypts the received data using the following layered encryption algorithm; Wherein, E(D) is the encrypted data, D is the original data, K1, K2 and K3 are encryption keys; the specific encryption processing steps are as follows: S1. Perform an XOR operation on the original data D and the key K1 to generate intermediate data; S2. Apply the SHA256 hash algorithm to the intermediate data to generate a hash value; S3. concatenate the hash value with the key K2 as input for AES encryption; S4. Use key K3 to perform AES encryption on the concatenated data to generate the final encrypted data E(D); The key management unit is used to generate, distribute and manage encryption keys, ensuring the secure storage and dynamic update of keys.

4. The data security relay device for a hydrogen-electric-thermal integrated energy station according to claim 1 is characterized in that: The data buffering and cache management module improves the hit rate of data cache and reduces transmission delay through the following intelligent cache management algorithm; Among them, D i is the i-th data in the cache; PredictAccess(D i ) is the pair of data D i The predicted access probability; θ is the access probability threshold, which is dynamically adjusted according to the system load; The specific steps are as follows: S1. Data access prediction: Use historical data access patterns to predict the future access probability of each data in the current cache; S2. Cache decision: Based on the prediction result and the set threshold θ, decide whether to keep or eliminate the data in the cache; S3. Dynamic adjustment: Dynamically adjust the threshold θ and cache strategy according to the system operation status and data access changes.

5. The data security relay device for a hydrogen-electric-thermal integrated energy station according to claim 1 is characterized in that: The optimal data transmission path selection process of the dynamic routing selection module is as follows: S1. Network status collection: real-time collection of delay, bandwidth and load information of each path; S2. Indicator standardization: standardize the collected indicators to ensure that the dimensions of different indicators are consistent; S3. Comprehensive score calculation: Calculate the comprehensive score of each path according to the following formula; Among them, β1, β2, and β3 are weight coefficients, which are dynamically adjusted according to actual needs; Latency (Path) is the path delay, and the smaller the value, the better; Bandwidth (Path) is the path bandwidth, and the larger the value, the better; Load (Path) is the path load, and the smaller the value, the better; S4. Optimal path selection: Select the path with the highest comprehensive score as the current data transmission path; S5. Dynamic path adjustment: Recalculate and adjust the data transmission path regularly or when the network status changes.

6. A data transmission method for a hydrogen-electric-thermal integrated energy station, comprising a data security relay device as claimed in any one of claims 1 to 5, characterized in that: The steps include: S1. Data reception and encryption: User data enters the data encryption module through the input port. The data encryption module uses a layered encryption algorithm to encrypt the data and transmits the encrypted data to the multi-layer firewall module; S2. Threat Detection and Filtering: When data is input, the input firewall performs preliminary filtering to block malicious traffic and illegal data packets; in the data transmission path, the transmission firewall performs in-depth detection and traffic analysis to block potential threats, and finally the data passes through the output firewall to ensure the security and compliance of outbound data; S3. Data buffering and management: The encrypted and firewall-filtered data enters the data buffer and cache management module, where the buffer queue temporarily stores the data. The cache management unit optimizes the data transmission path through an intelligent cache management algorithm to reduce delays and packet loss. S3. Dynamic routing selection: The network monitoring unit collects the current network status information in real time. The routing decision engine calculates the optimal transmission path based on the dynamic routing selection algorithm. The routing adjustment module dynamically adjusts the data transmission path to ensure efficient transmission. S4. Data transfer and backup: When data is transmitted to the target subsystem via the selected path, the redundant backup system backs up the transmitted data in real time to ensure that the data is not lost when the main device fails.

7. The data transmission method for a hydrogen-electric-thermal integrated energy station according to claim 6, characterized in that: The following steps are also included: S5. User Authentication: When users access the data relay device, they need to pass the multi-factor authentication of the user identity verification module; After passing the verification, users can access and operate the data; S6. Anomaly detection and response: The anomaly detection and response module continuously monitors anomalies in the data transmission process. Once an anomaly is detected, the response strategy engine immediately takes corresponding measures; S7.Log management and auditing: All data transmission and access operations are recorded by the log management and audit module; the recorded logs can be used for subsequent security audits and troubleshooting to improve the maintainability and security of the system.

Images