Quantum encryption communication method, device and system for power feeder automation

Abstract

The invention provides a quantum encryption communication method for power feeder automation, and the method comprises the steps: a quantum security service platform generates a preset quantum key and a quantum session key, and carries out the distribution; establishing a quantum key transmission channel; the quantum encryption communication component obtains a preset quantum key, decrypts the encrypted quantum session key, and encrypts and decrypts the service data by using the quantum session key; the quantum security gateway at the power distribution automation master station side obtains a preset quantum key, decrypts the encrypted quantum session key, and encrypts and decrypts the service data by using the quantum session key; and establishing a VPN tunnel between the quantum security gateway and the quantum encryption communication component. According to the quantum encryption communication method, device and system for power feeder automation, the remote control function of the power feeder automation terminal is expanded, the communication safety is improved, the operation and maintenance efficiency and safety of power distribution automation are improved, and the operation and maintenance cost of a power distribution system is reduced.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and specifically to a quantum encryption communication method for power feeder automation in a power system and a device and system thereof. Background Art

[0002] When existing power feeder automation terminals communicate with distribution automation master stations through wireless public networks, they mainly rely on traditional encryption technology, resulting in power feeder automation terminals only having telemetry and telesignaling functions but not remote control functions, resulting in low efficiency and safety in distribution automation operation and maintenance.

[0003] In addition, there is no binding identity correspondence between the existing power feeder automation terminal or the communication module in the system and the power feeder automation terminal. External personnel can use the communication module to connect to illegal devices and attack the power network, causing great information security risks. Summary of the invention

[0004] This application is proposed based on the above-mentioned needs of the prior art. The technical problem to be solved by this application is to provide a quantum encryption communication method and its device and system for power feeder automation, which expands the remote control function of the power feeder automation terminal, improves the security of communication, improves the efficiency and safety of distribution automation operation and maintenance, and reduces the operation and maintenance cost of the power distribution system.

[0005] In order to solve the above problems, this application provides the following technical solutions.

[0006] The present application proposes a quantum encryption communication method for power feeder automation, comprising: a quantum security service platform generates preset quantum keys and quantum session keys, and distributes them; a quantum key transmission channel is established to complete the distribution and transmission of quantum session keys between the quantum security service platform and the quantum encryption communication component of the power feeder automation terminal and the quantum security gateway on the distribution automation master station side; the quantum encryption communication component obtains the preset quantum key and uses the preset quantum key to decrypt the obtained encrypted quantum session key to obtain the quantum session key; the quantum encryption communication component uses the quantum session key to encrypt and decrypt business data; the quantum security gateway on the distribution automation master station side obtains the preset quantum key and decrypts the obtained encrypted quantum session key to obtain the quantum session key; the quantum security gateway uses the quantum session key to encrypt and decrypt business data; a VPN tunnel is established between the quantum security gateway on the distribution automation master station side and the communication module in the quantum encryption communication component to realize data encryption transmission between the distribution automation master station and the power feeder automation terminal.

[0007] Furthermore, the quantum encryption communication component establishes an identity binding with the first power feeder automation terminal; when the quantum encryption communication component receives the business data generated by the current power feeder automation terminal, it determines whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component; if bound, the quantum encryption communication component establishes a first transmission channel with the quantum security service platform, the quantum encryption communication component applies to the quantum security service platform for a quantum session key, the quantum security service platform calls the preset quantum key to encrypt and transmit the quantum session key, and the quantum encryption communication component calls the preset quantum key to decrypt the encrypted quantum session key and store it in the cache area; if not bound, the network communication of the current power feeder automation terminal is interrupted.

[0008] Furthermore, the quantum encryption communication component establishes an identity binding with the first power feeder automation terminal, including: the first power feeder automation terminal is connected to the quantum security service platform for the first time through the quantum encryption communication component, and after identity authentication and establishment of an encrypted tunnel, the quantum encryption communication component saves the identity information of the first power feeder automation terminal, completing the identity binding of the first power feeder automation terminal and the quantum encryption communication component.

[0009] Furthermore, determining whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component includes obtaining the identity information of the current power feeder automation terminal through the quantum encryption communication component and comparing it with the identity information of the power feeder automation terminal stored therein; if the identity information is consistent, binding is determined; if the identity information is inconsistent, no binding is performed.

[0010] Furthermore, judging whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component also includes, when it is judged that no binding is established, the quantum encryption communication component self-checks whether other power feeder automation terminal identity information is already stored therein, and if so, terminates the network communication of the current power feeder automation terminal; if not, it indicates that the quantum encryption communication component is used for the first time, and can choose to establish a communication connection with the quantum security service platform and simultaneously establish an identity binding with the current power feeder automation terminal, or choose to interrupt the communication connection with the quantum security service platform.

[0011] Furthermore, the quantum encryption communication component obtains a preset quantum key, including that the quantum encryption communication component offline obtains the preset quantum key generated by the quantum security service platform and uses it as the preset quantum key, and stores it in encrypted form; when the quantum encryption communication component establishes the first transmission channel with the quantum security service platform, the quantum encryption communication component uses its preset quantum key to periodically apply to the quantum security service platform for and receive the quantum session key.

[0012] Furthermore, the establishment of the quantum key transmission channel also includes: when the quantum encryption communication component establishes the first transmission channel with the quantum security service platform, the quantum security gateway establishes the second transmission channel with the quantum security service platform, and the quantum security gateway applies to the quantum security service platform for and receives the quantum session key; when the quantum encryption communication component receives the encrypted quantum session key, after calling the preset quantum key to decrypt the encrypted quantum session key, the quantum encryption communication component calls the decrypted quantum session key to encrypt or decrypt plaintext data or encrypted business data; the quantum security gateway receives plaintext data or encrypted business data, and calls the quantum session key to encrypt the plaintext data or decrypt the encrypted business data.

[0013] Further, the quantum encryption communication method for power feeder automation also includes: data protocol conversion; the quantum security gateway and the quantum encryption communication component transmit through wireless communication; the quantum encryption communication component and the power feeder automation terminal transmit through wired serial port communication; when the quantum encryption communication component receives the business data sent by the power feeder automation terminal, it first converts it into IP data through protocol conversion, then encrypts the IP data using the quantum session password, and then sends the encrypted business data to the quantum security gateway through the VPN tunnel established with the quantum security gateway, and the quantum security gateway decrypts the received encrypted business data using the quantum session key and sends it to the distribution automation master station; when the quantum security gateway receives the data sent by the distribution automation master station, it first encrypts the data using the quantum session key, and then sends the encrypted data to the quantum encryption communication component through the VPN tunnel established with the quantum encryption communication component, the quantum encryption communication component decrypts the received encrypted data, and converts the decrypted data into serial port data through protocol conversion, and sends it to the power feeder automation terminal; the distribution automation master station receives the business data decrypted by the quantum security gateway; and / or the distribution automation master station sends control data to the quantum security gateway.

[0014] The present application also proposes a quantum encryption communication terminal for power feeder automation, comprising: a quantum encryption communication component and a power feeder automation terminal mainboard, wherein the power feeder automation terminal mainboard is provided with a data port; the quantum encryption communication component comprises: a main control board, which establishes a communication connection with the power feeder automation terminal mainboard through the data port; a communication module, which establishes data, signal transmission and connection with an external quantum security service platform and a quantum security gateway on the external distribution automation master station side; a quantum encryption VPN tunnel is established between the communication module and the external quantum security gateway to realize data quantum encryption transmission; at the same time, the communication module establishes a first transmission channel for quantum key distribution and transmission with the external quantum security service platform to realize the distribution and transmission of the quantum session key and the preset quantum key generated by the quantum security service platform; a storage module, which is responsible for storing the quantum session key, the preset quantum key and the ID information of the first power feeder automation terminal, and pre-stores the preset quantum key before recording the ID information of the first power feeder automation terminal; an encryption and decryption module, which uses the preset quantum key of the storage module to regularly obtain the quantum session key from the quantum security service platform, and uses the quantum session key to encrypt and decrypt data.

[0015] Furthermore, the quantum encryption communication terminal for power feeder automation also includes an analysis module, which is responsible for establishing or interrupting the network communication of the current power feeder automation terminal based on whether the ID information of the current power feeder automation terminal is consistent with the ID information of the first power feeder automation terminal.

[0016] Furthermore, the encryption and decryption module obtains the quantum session key by calling the preset quantum key in the storage module to decrypt the encrypted quantum session key; the encryption and decryption module uses the decrypted quantum session key to encrypt and decrypt the business data; when the quantum security service platform distributes the quantum session key to the communication module, the distributed quantum session key is first encrypted by the preset quantum key therein and then distributed to the communication module through the first transmission channel.

[0017] Furthermore, the storage module includes a memory card, and the quantum security service platform is provided with a physical interface matching the memory card.

[0018] Furthermore, the quantum encryption communication terminal for power feeder automation also includes: a protocol conversion module; the data port is a serial port; the communication module is a wireless communication module; the protocol conversion module is responsible for performing protocol conversion between the serial port data and the IP data of the wireless communication module.

[0019] The present application also proposes a quantum encryption communication system for power feeder automation, comprising: a quantum security service platform, which generates and distributes preset quantum keys and quantum session keys; a distribution automation master station; a quantum security gateway, which is located on the side of the distribution automation master station; and also includes the above-mentioned quantum encryption communication terminal for power feeder automation; the quantum security service platform, the quantum security gateway, the distribution automation master station and the quantum encryption communication terminal for power feeder automation perform data and signal transmission among the above-mentioned quantum encryption communication method.

[0020] The beneficial effects of this application include:

[0021] (1) By setting up quantum encryption communication components on the power feeder automation terminal, quantum key distribution and quantum encryption communication channels are established with the external quantum security service platform and the quantum security gateway on the distribution automation master station side, which strengthens the confidentiality and security of the power feeder automation terminal in power and signal transmission, solves the encryption problem of the distribution automation master station's remote control instructions to the power feeder automation terminal through the wireless public network, releases the remote control function of the power feeder automation terminal, improves the efficiency and safety of distribution automation operation and maintenance, and reduces operation and maintenance costs.

[0022] (2) By establishing an identity binding between the quantum encryption communication component and the legitimate power feeder automation terminal, when an outsider deploys the quantum encryption communication component to an illegal power feeder automation terminal, the communication network of the quantum encryption communication component is interrupted due to identity mismatch, that is, the transmission channel between the quantum encryption communication component and the quantum security service platform, and between the quantum encryption communication component and the quantum security gateway on the distribution automation master station side will be interrupted, so it is impossible to attack the intranet, thereby improving the security of network communication.

[0023] (3) The quantum encryption communication component and the quantum security service platform use the preset quantum key to encrypt and decrypt the quantum session key, thereby achieving the confidential distribution of the quantum session key and improving the security of communication.

[0024] (4) The interface between the quantum encryption communication component and the power feeder automation terminal can be designed in accordance with the unified standards of the power grid, so that the quantum encryption communication component can be seamlessly integrated with a variety of power feeder automation terminals to achieve plug-and-play, and support full-band wireless public networks, thereby adapting to various operator networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0026] Figure 1 It is a system block diagram of the quantum secure communication system in the specific implementation mode of this application.

[0027] Figure 2 It is a flow chart of the quantum encryption communication method for power feeder automation in the specific implementation manner of the present application.

[0028] Figure 3 It is a schematic diagram of the process of obtaining a quantum session key by a quantum encryption communication component in a specific implementation manner of the present application.

[0029] Figure 4 It is a schematic diagram of the encryption and decryption process of business data in the specific implementation method of this application.

[0030] Figure 5 It is a schematic diagram of the encryption and decryption process of control data in the specific implementation mode of this application.

[0031] Figure 6 It is a schematic diagram of the composition and connection method of the quantum encryption communication component in the specific implementation method of this application. DETAILED DESCRIPTION

[0032] The technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the embodiments described in this application are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of this application.

[0033] This specific implementation manner is described by taking a power system as an example.

[0034] like Figure 1 As shown, the present application proposes a quantum secure communication system, including a power feeder automation terminal 100, a quantum secure service platform 200, a quantum secure gateway 300 and a distribution automation master station 400.

[0035] The power feeder automation terminal 100 is a power device, which is set at a key node of the power system external network, and is used to monitor the status of the feeder in real time and perform control operations as needed to ensure the safe and stable operation of the power system. The power feeder automation terminal 100 includes a quantum encryption communication component 110. The power feeder automation terminal 100 obtains a quantum encryption function based on the quantum encryption communication component 110, so that it can receive a quantum session key, and call the quantum session key to encrypt and transmit business data such as fault inspection and monitoring to the power system intranet.

[0036] The quantum security service platform 200 is a network security service platform, which is set up in the intranet of the power system. It can generate and distribute quantum session keys and preset quantum keys according to the request of the quantum encryption communication component 110 or other power equipment, and can also monitor the generation and distribution of quantum session keys and preset quantum keys.

[0037] The quantum security gateway 300 is a network security device. The quantum security gateway 300 is connected to the power feeder automation terminal 100 through the external network and to the quantum security service platform 200 through the internal network. The quantum security gateway 300 is the entry device for the power feeder automation terminal 100 to access the internal network. In order to ensure the security of communication, the quantum security gateway 300 also has a quantum encryption function, which enables the quantum security communication system to call the quantum session key to encrypt and transmit business data.

[0038] The distribution automation master station 400 is set in the data center of the power system intranet, and can receive business data decrypted by the quantum security gateway 300 located on the side of the distribution automation master station 400.

[0039] like Figure 2 As shown, quantum encryption communication for power feeder automation includes the following steps:

[0040] S11: The quantum security service platform 200 generates preset quantum keys and quantum session keys, and distributes them.

[0041] S12: Establish a quantum key transmission channel to complete the distribution and transmission of quantum session keys between the quantum security service platform 200 and the quantum encryption communication component 110 of the power feeder automation terminal 100, and between the quantum security gateway 300 on the distribution automation master station side.

[0042] S13: The quantum encryption communication component 110 obtains a preset quantum key and uses the preset quantum key to decrypt the obtained encrypted quantum session key to obtain the quantum session key; the quantum encryption communication component 110 uses the quantum session key to encrypt and decrypt the business data.

[0043] S14: The quantum security gateway 300 on the distribution automation master station side obtains the preset quantum key, and then uses the preset quantum key to decrypt the obtained encrypted quantum session key to obtain the quantum session key, and uses the quantum session key to encrypt and decrypt the business data.

[0044] S15: Establish a VPN tunnel between the quantum security gateway 300 on the distribution automation master station side and the communication module in the quantum encryption communication component 110 to realize data encryption transmission between the distribution automation master station 400 and the power feeder automation terminal 100.

[0045] By setting a quantum encryption communication component 110 on the power feeder automation terminal 100, the power feeder automation terminal 100 obtains a quantum encryption function based on the quantum encryption communication component 110, and establishes a quantum key distribution and quantum encryption communication channel with the external quantum security service platform 200 and the quantum security gateway 300 on the distribution automation master station side, thereby strengthening the confidentiality and security of the power feeder automation terminal 100 in power and signal transmission, solving the encryption problem of the distribution automation master station 400's remote control instructions to the power feeder automation terminal 100 through the wireless public network, releasing the remote control function of the power feeder automation terminal 100, improving the efficiency and safety of distribution automation operation and maintenance, and reducing the operation and maintenance cost.

[0046] The interface connecting the quantum encryption communication component 110 and the power feeder automation terminal 100 can be designed in accordance with the unified standards of the power grid, so that the quantum encryption communication component 110 can be seamlessly integrated with a variety of power feeder automation terminals 100, achieving plug-and-play, and supporting full-band wireless public networks, thereby adapting to various operator networks.

[0047] like Figure 3 As shown, the quantum encryption communication component obtains the quantum session key including the following steps:

[0048] S21: The quantum encryption communication component 110 establishes identity binding with the first power feeder automation terminal.

[0049] S22: When the quantum encryption communication component 110 receives the business data generated by the current power feeder automation terminal, it is determined whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component 110.

[0050] S23: If bound, the quantum encryption communication component 110 establishes a first transmission channel with the quantum security service platform 200, the quantum encryption communication component 110 applies to the quantum security service platform 200 for a quantum session key, the quantum security service platform 200 calls the preset quantum key based on the first transmission channel and encrypts the quantum session key, the quantum encryption communication component 110 receives the encrypted quantum session key, calls the preset quantum key to decrypt the encrypted quantum session key, and stores it in the cache area.

[0051] S24: If not bound, the network communication of the current power feeder automation terminal is interrupted.

[0052] Among them, the first power feeder automation terminal is a legal power feeder automation terminal 100, and each first power feeder automation terminal has a one-to-one corresponding quantum encryption communication component 110. By establishing an identity binding between the quantum encryption communication component 110 and the legal power feeder automation terminal, when an outsider deploys the quantum encryption communication component 110 to an illegal power feeder automation terminal, due to the identity mismatch, the communication network of the quantum encryption communication component 110 is interrupted, that is, the transmission channel between the quantum encryption communication component 110 and the quantum security service platform 200, and between the quantum encryption communication component 110 and the quantum security gateway 300 on the distribution automation master station side will be interrupted, so the intranet cannot be attacked, thereby improving the security of network communication.

[0053] Specifically, in step S21, the quantum encryption communication component 110 establishes identity binding with the first power feeder automation terminal in the following manner: the first power feeder automation terminal connects to the quantum security service platform 200 for the first time through the quantum encryption communication component 110, performs identity authentication and establishes an encrypted tunnel, and then the quantum encryption communication component 110 saves the identity information of the first power feeder automation terminal, completing the identity binding of the first power feeder automation terminal 100 and the quantum encryption communication component 110. The identity information of the first power feeder automation terminal may include a device code, a serial number, a MAC address, and other unique identity information corresponding to the first power feeder automation terminal.

[0054] In step S22, the method for determining whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component 110 includes: obtaining the identity information of the current power feeder automation terminal through the quantum encryption communication component 110 and comparing it with the identity information of the power feeder automation terminal stored therein; if the identity information is consistent, binding is determined; if the identity information is inconsistent, no binding is performed.

[0055] In step S23, the quantum encryption communication component 110 obtains the preset quantum key and the quantum session key in the following manner: the quantum encryption communication component 110 obtains the preset quantum key generated by the quantum security service platform 200 offline and uses it as the preset quantum key, and stores it in encrypted form; when the quantum encryption communication component 110 establishes a first transmission channel with the quantum security service platform 200, the quantum encryption communication component 110 uses its preset quantum key to periodically apply for and receive the quantum session key from the quantum security service platform 200.

[0056] In step S24, when it is determined that the current power feeder automation terminal is not bound to the quantum encryption communication component 110, the quantum encryption communication component 110 can also self-check whether other power feeder automation terminal identity information is already stored therein. If so, the network communication of the current power feeder automation terminal is terminated; if not, it means that the quantum encryption communication component 110 is used for the first time, and can choose to establish a communication connection with the quantum security service platform 200 and simultaneously establish an identity binding with the current power feeder automation terminal, or choose to interrupt the communication connection with the quantum security service platform 200.

[0057] In this specific embodiment, when the quantum encryption communication component 110 establishes a first transmission channel with the quantum security service platform 200, the quantum security gateway 300 establishes a second transmission channel with the quantum security service platform 200, and the quantum security gateway 300 applies to and receives a quantum session key from the quantum security service platform 200; when the quantum encryption communication component 110 receives the encrypted quantum session key, after calling the preset quantum key to decrypt the encrypted quantum session key, the quantum encryption communication component 110 calls the decrypted quantum session key to encrypt or decrypt plaintext data or encrypted business data; the quantum security gateway 300 receives plaintext data or encrypted business data, and calls the quantum session key to encrypt the plaintext data or decrypt the encrypted business data.

[0058] like Figure 4 As shown, the business data transmission process includes the following steps:

[0059] S31: The quantum encryption communication component 110 receives the business data generated by the first power feeder automation terminal.

[0060] S32: The quantum encryption communication component 110 establishes a first transmission channel with the quantum security service platform 200. The quantum encryption communication component 110 applies to the quantum security service platform 200 for a quantum session key. The quantum security service platform 200 calls the preset quantum key based on the first transmission channel and encrypts the quantum session key. The quantum encryption communication component 110 receives the encrypted quantum session key and calls the preset quantum key to decrypt the encrypted quantum session key.

[0061] S33: The quantum security gateway 300 establishes a second transmission channel with the quantum security service platform 200, and the quantum security gateway 300 applies for and receives a quantum session key from the quantum security service platform 200.

[0062] S34: The quantum encryption communication component 110 uses the decrypted quantum session key to encrypt the business data.

[0063] S35: The quantum security gateway 300 receives the encrypted business data and calls the quantum session key to decrypt the encrypted business data.

[0064] S36: The distribution automation master station 400 receives the business data decrypted by the quantum security gateway 300.

[0065] The quantum encryption communication component 110 of the power feeder automation terminal 100 and the quantum security gateway 300 call the quantum session key to encrypt and decrypt the business data, and the quantum encryption communication component 110 receives the quantum session key in an encrypted transmission manner, thereby achieving absolutely secure confidential communication and improving the security of communication.

[0066] In this specific implementation, the distribution automation master station 400 can perform analysis based on business data to generate control data for controlling the power feeder automation terminal 100, and the plaintext data received by the above-mentioned quantum security gateway 300 includes the control data sent by the distribution automation master station 400.

[0067] like Figure 5 As shown, the encryption and decryption process of control data includes the following steps:

[0068] S41: The quantum security gateway 300 receives the control data generated by the distribution automation master station 400.

[0069] S42: The quantum encryption communication component 110 establishes a first transmission channel with the quantum security service platform 200. The quantum encryption communication component 110 applies to the quantum security service platform 200 for a quantum session key. The quantum security service platform 200 calls the preset quantum key based on the first transmission channel and encrypts the quantum session key. The quantum encryption communication component 110 receives the encrypted quantum session key and calls the preset quantum key to decrypt the encrypted quantum session key.

[0070] S43: The quantum security gateway 300 establishes a second transmission channel with the quantum security service platform 200, and the quantum security gateway 300 applies for and receives a quantum session key from the quantum security service platform 200.

[0071] S44: The quantum security gateway 300 uses the quantum session key to encrypt the control data.

[0072] S45: The quantum encryption communication component 110 receives the encrypted control data and calls the decrypted quantum session key to decrypt the encrypted control data.

[0073] S46: The first power feeder automation terminal receives the control data decrypted by the quantum encryption communication component 110.

[0074] In order to enable the business data and control data to be communicated and transmitted based on the network, the above encryption and decryption process also includes the step of performing data protocol conversion.

[0075] Specifically, the quantum security gateway 300 and the quantum encryption communication component 110 transmit via wireless communication, and the quantum encryption communication component 110 and the power feeder automation terminal 100 transmit via wired serial port communication. When the quantum encryption communication component 110 receives the business data sent by the power feeder automation terminal 100, it first converts it into IP data through protocol conversion, and then encrypts the IP data using the quantum session password, and then sends the encrypted business data to the quantum security gateway 300 through the VPN tunnel established with the quantum security gateway 300. The quantum security gateway 300 decrypts the received encrypted business data using the quantum session key and sends it to the distribution automation master station 400. The distribution automation master station 400 receives the business data decrypted by the quantum security gateway 300.

[0076] When the quantum security gateway 300 receives data from the distribution automation master station 400, it first encrypts the data using the quantum session key, and then sends the encrypted data to the quantum encryption communication component through the VPN tunnel established with the quantum encryption communication component 110. The quantum encryption communication component 110 decrypts the received encrypted data, converts the decrypted data into serial port data through protocol conversion, and sends it to the power feeder automation terminal 100. The distribution automation master station 400 sends control data to the quantum security gateway 300.

[0077] like Figure 6 As shown, the present application proposes a power feeder automation terminal 100, including a quantum encryption communication component 110 and a power feeder automation terminal mainboard 120. The power feeder automation terminal mainboard 120 is provided with a data port, and the quantum encryption communication component 110 includes a main control board 111, a communication module 112, a storage module 113, an analysis module 114 and an encryption and decryption module 115.

[0078] The main control board 111 establishes a communication connection with the power feeder automation terminal mainboard 120 through the data port to receive the service data generated by the power feeder automation terminal 100. The main control board 111 is also used to set other modules of the quantum encryption communication component 110, and each module interacts with each other through the main control board 111, so that the quantum encryption communication component 110 can coordinate and manage each module.

[0079] The communication module 112 is responsible for establishing data, signal transmission and connection with the external quantum security service platform 200 and the quantum security gateway 300 on the external distribution automation master station side; the communication module 112 can establish a quantum encryption VPN tunnel with the external quantum security gateway 300 to realize quantum encryption transmission of data; at the same time, the communication module 112 is also responsible for establishing the first transmission channel for quantum key distribution and transmission with the external quantum security service platform 200 to realize the distribution and transmission of the quantum session key and the preset quantum key generated by the quantum security service platform 200. The communication module 112 can be a wireless communication module based on 4G, 5G and other networks.

[0080] The storage module 113 is responsible for storing the quantum session key, the preset quantum key and the ID information of the first power feeder automation terminal, and pre-stores the preset quantum key before recording the ID information of the first power feeder automation terminal. The storage module 113 may include a memory card, and the quantum security service platform 200 is provided with a physical interface matching the memory card. For example, the storage module 113 is a TF card, i.e., a TransF l ash memory card. In order to obtain the preset quantum key before recording the ID of the first power feeder automation terminal, the TF card can be inserted into the corresponding physical interface of the quantum security service platform 200 to copy the quantum key generated by the quantum security service platform 200, and then the TF card is pulled out and inserted into the physical interface corresponding to the main control board 111, so that the quantum encryption communication component 110 pre-stores the preset quantum key.

[0081] The encryption and decryption module 115 uses the preset quantum key of the storage module 113 to periodically obtain the quantum session key from the quantum security service platform 200, and uses the quantum session key to encrypt and decrypt the data. Specifically, the encryption and decryption module 115 obtains the quantum session key by calling the preset quantum key in the storage module 113 to decrypt the encrypted quantum session key; the encryption and decryption module uses the decrypted quantum session key to encrypt and decrypt the data; when the quantum security service platform 200 distributes the quantum session key to the communication module 112, the distributed quantum session key is first encrypted by the preset quantum key therein and then distributed to the communication module 112 through the first transmission channel.

[0082] In this specific embodiment, the quantum encryption communication component 110 also includes the following Figure 5 The analysis module 114 is shown.

[0083] The analysis module 114 is responsible for establishing or interrupting the network communication of the current power feeder automation terminal according to whether the ID information of the current power feeder automation terminal is consistent with the ID of the first power feeder automation terminal. Specifically, the analysis module 114 can be a CPU with ID recognition and ID comparison functions, and can generate control instructions according to the comparison results, so as to control the communication module 112 to establish the first transmission channel with the quantum security service platform 200, or control the communication module 112 and the quantum security service platform 200 to interrupt the first transmission channel.

[0084] Furthermore, the quantum encryption communication component 110 may also include: Figure 5 In the protocol conversion module 117 shown, the data port of the main control board 111 is the serial port 116, the communication module 112 is a wireless communication module, and the protocol conversion module 117 is responsible for performing protocol conversion between the serial port data and the IP data of the wireless communication module. Specifically, the protocol conversion module 117 is used to convert the service data into an IP data packet, so that the service data received by the quantum encryption communication component 110 through the serial port 116 can be sent and received through the IP network after protocol conversion.

[0085] Based on the composition and connection mode of the above-mentioned quantum encryption communication component 110, the specific steps for the quantum encryption communication component 110 to obtain the quantum session key are as follows:

[0086] Obtaining a preset quantum key: inserting the storage card of the storage module 113 into the corresponding physical interface of the quantum security service platform 200, the quantum security service platform 200 generates a quantum key and transmits it to the storage card, then inserting the storage card into the storage module 113, the quantum encryption communication component 110 obtains the quantum key and uses it as a preset quantum key.

[0087] ID information binding: The quantum encryption communication component 110 is set in the first power feeder automation terminal. When the communication module 112 is connected to the quantum security service platform 200 for the first time, the storage module 113 records the ID information of the first power feeder automation terminal, and completes the binding of the first power feeder automation terminal and the quantum encryption communication component 110.

[0088] ID information comparison: When the serial port 116 receives the business data generated by the current power feeder automation terminal, the analysis module 114 identifies the ID information of the current power feeder automation terminal and compares it with the ID information of the first power feeder automation terminal recorded by the storage module 113 to determine whether the current power feeder automation terminal is bound to the quantum encryption communication component 110.

[0089] Obtaining the quantum session key: the analysis module 114 generates a control instruction according to the comparison result. If the comparison result is consistent, the analysis module 114 generates a corresponding control instruction to enable the communication module 112 to establish a first transmission channel with the quantum security service platform 200, and the quantum encryption communication component 110 applies for a quantum session key from the quantum security service platform 200. The quantum security service platform 200 receives the preset quantum key pre-stored in the storage module 113 based on the first transmission channel, and then the quantum security service platform 200 calls the preset quantum key to encrypt the quantum session key generated by it, and the communication module 112 receives the encrypted quantum session key, and the encrypted quantum session key is transmitted to the encryption and decryption module 115 via the main control board 111. The encryption and decryption module 115 decrypts the encrypted quantum session key, so that the quantum encryption communication component 110 obtains the decrypted quantum session key; when the communication module 112 establishes the first transmission channel with the quantum security service platform 200, the quantum security gateway 300 establishes a second transmission channel with the quantum security service platform 200, and the quantum security gateway 300 applies for and receives the quantum session key from the quantum security service platform 200.

[0090] Applying for and receiving preset quantum keys: The quantum encryption communication component 110 periodically sends an application to the quantum security service platform 200, so that the quantum security service platform 200 generates a quantum key, which is transmitted to the storage module 113 via the communication module 112 and the main control board 111 in turn. The quantum encryption communication component 110 uses the quantum key as a preset quantum key, so that the storage module 113 pre-stores sufficient preset quantum keys for encrypting and decrypting quantum session keys.

[0091] Business data reception and transmission and protocol conversion: The quantum encryption communication component 110 receives the business data generated by the first power feeder automation terminal through the serial port 116, and the business data is transmitted to the protocol conversion module 117 via the main control board 111. The protocol conversion module 117 converts the business data into IP data packets.

[0092] Business data encryption: The IP data packet of the business data is transmitted to the encryption and decryption module 115 via the main control board 111, and the encryption and decryption module 115 uses the decrypted quantum session key to encrypt the IP data packet of the business data.

[0093] Business data decryption: The quantum security gateway 300 receives the encrypted IP data packet of the business data and calls the quantum session key to decrypt it.

[0094] Plain text sending: The distribution automation master station 400 receives the IP data packet of the business data decrypted by the quantum security gateway 300.

[0095] Interrupting the first transmission channel: If the comparison results are inconsistent, the analysis module 114 generates a corresponding control instruction to interrupt the network communication between the communication module 112 and the quantum security service platform 200.

[0096] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. A quantum encryption communication method for power feeder automation, characterized in that: include: The quantum security service platform generates and distributes preset quantum keys and quantum session keys; Establish a quantum key transmission channel to complete the distribution and transmission of quantum session keys between the quantum security service platform and the quantum encryption communication components of the power feeder automation terminal and between the quantum security gateway on the distribution automation master station side; The quantum encryption communication component obtains a preset quantum key and uses the preset quantum key to decrypt the obtained encrypted quantum session key to obtain the quantum session key; the quantum encryption communication component uses the quantum session key to encrypt and decrypt the business data; The quantum security gateway on the distribution automation master station side obtains the preset quantum key and uses the preset quantum key to decrypt the obtained encrypted quantum session key to obtain the quantum session key; The quantum security gateway uses quantum session keys to encrypt and decrypt business data; A VPN tunnel is established between the quantum security gateway on the distribution automation master station side and the communication module in the quantum encryption communication component to realize data encryption transmission between the distribution automation master station and the power feeder automation terminal.

2. The quantum encryption communication method for power feeder automation according to claim 1, characterized in that: The quantum encryption communication component establishes identity binding with the first power feeder automation terminal; When the quantum encryption communication component receives the service data generated by the current power feeder automation terminal, it is determined whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component; If bound, the quantum encryption communication component establishes a first transmission channel with the quantum security service platform, the quantum encryption communication component applies to the quantum security service platform for a quantum session key, the quantum security service platform calls the preset quantum key to encrypt and transmit the quantum session key, and the quantum encryption communication component calls the preset quantum key to decrypt the encrypted quantum session key and store it in the cache area; If not bound, the network communication of the current power feeder automation terminal is interrupted.

3. The quantum encryption communication method for power feeder automation according to claim 2, characterized in that: The quantum encryption communication component establishes an identity binding with the first power feeder automation terminal, including: the first power feeder automation terminal is connected to the quantum security service platform for the first time through the quantum encryption communication component, and after identity authentication and establishment of an encrypted tunnel, the quantum encryption communication component saves the identity information of the first power feeder automation terminal to complete the identity binding of the first power feeder automation terminal and the quantum encryption communication component.

4. The quantum encryption communication method for power feeder automation according to claim 3 is characterized in that: Determining whether the current power feeder automation terminal has established an identity binding with the quantum encryption communication component includes obtaining the identity information of the current power feeder automation terminal through the quantum encryption communication component and comparing it with the identity information of the power feeder automation terminal stored therein. If the identity information is consistent, binding is determined; if the identity information is inconsistent, no binding is performed.

5. The method for quantum encryption communication of power feeder automation according to claim 4, characterized in that: Determining whether the current power feeder automation terminal has established identity binding with the quantum encryption communication component, further comprising, when it is determined that no binding has been established, the quantum encryption communication component self-checking whether other power feeder automation terminal identity information has been stored therein, and if so, terminating the network communication of the current power feeder automation terminal; If not, it means that the quantum encryption communication component is used for the first time. You can choose to establish a communication connection with the quantum security service platform and simultaneously establish an identity binding with the current power feeder automation terminal, or choose to disconnect the communication connection with the quantum security service platform.

6. The quantum encryption communication method for power feeder automation according to claim 4, characterized in that: The quantum encryption communication component obtains a preset quantum key, including: the quantum encryption communication component offline obtains the preset quantum key generated by the quantum security service platform and uses it as the preset quantum key, and stores it in encrypted form; when the quantum encryption communication component establishes the first transmission channel with the quantum security service platform, the quantum encryption communication component uses its preset quantum key to periodically apply to the quantum security service platform for and receive the quantum session key.

7. The quantum encryption communication method for power feeder automation according to claim 6, characterized in that: The establishing of the quantum key transmission channel further comprises: When the quantum encryption communication component establishes the first transmission channel with the quantum security service platform, the quantum security gateway establishes a second transmission channel with the quantum security service platform, and the quantum security gateway applies to the quantum security service platform for and receives the quantum session key; When the quantum encryption communication component receives the encrypted quantum session key, after calling the preset quantum key to decrypt the encrypted quantum session key, the quantum encryption communication component calls the decrypted quantum session key to encrypt or decrypt the plaintext data or encrypted business data; The quantum security gateway receives plaintext data or encrypted business data, and calls the quantum session key to encrypt the plaintext data or decrypt the encrypted business data.

8. The quantum encryption communication method for power feeder automation according to claim 7, characterized in that: Also includes: Data protocol conversion; The quantum security gateway and the quantum encryption communication component are transmitted via wireless communication; The quantum encryption communication component and the power feeder automation terminal communicate and transmit via a wired serial port; when the quantum encryption communication component receives the service data sent by the power feeder automation terminal, it first converts the service data into IP data through protocol conversion, then encrypts the IP data using a quantum session password, and then sends the encrypted service data to the quantum security gateway through a VPN tunnel established with the quantum security gateway. The quantum security gateway decrypts the received encrypted service data using a quantum session key and sends it to the distribution automation master station; When the quantum security gateway receives data from the distribution automation master station, it first encrypts the data using the quantum session key, and then sends the encrypted data to the quantum encryption communication component through the VPN tunnel established with the quantum encryption communication component. The quantum encryption communication component decrypts the received encrypted data, converts the decrypted data into serial port data through protocol conversion, and sends it to the power feeder automation terminal; The distribution automation master station receives the business data decrypted by the quantum security gateway; And / or the distribution automation master station sends control data to the quantum security gateway.

9. A quantum encryption communication terminal for power feeder automation, characterized in that: include: Quantum encryption communication components and power feeder automation terminal motherboards, among which, The power feeder automation terminal mainboard is provided with a data port; The quantum encryption communication component includes: A main control board, which establishes a communication connection with the power feeder automation terminal mainboard through a data port; A communication module, which establishes data and signal transmission and connection with an external quantum security service platform and a quantum security gateway on the external distribution automation master station side; a quantum encryption VPN tunnel is established between the communication module and the external quantum security gateway to realize quantum encryption data transmission; at the same time, the communication module establishes a first transmission channel for quantum key distribution and transmission with the external quantum security service platform to realize the distribution and transmission of quantum session keys and preset quantum keys generated by the quantum security service platform; A storage module, which is responsible for storing the quantum session key, the preset quantum key and the ID information of the first power feeder automation terminal, and pre-storing the preset quantum key before recording the ID information of the first power feeder automation terminal; The encryption and decryption module uses the preset quantum key of the storage module to regularly obtain the quantum session key from the quantum security service platform, and uses the quantum session key to encrypt and decrypt data.

10. The quantum encryption communication terminal for power feeder automation according to claim 9, characterized in that: It also includes an analysis module, which is responsible for establishing or interrupting the network communication of the current power feeder automation terminal according to whether the ID information of the current power feeder automation terminal is consistent with the ID information of the first power feeder automation terminal.

11. The quantum encryption communication terminal for power feeder automation according to claim 10, characterized in that: The encryption and decryption module obtains the quantum session key by calling the preset quantum key in the storage module to decrypt the encrypted quantum session key; the encryption and decryption module encrypts and decrypts the data using the decrypted quantum session key; When the quantum security service platform distributes the quantum session key to the communication module, the distributed quantum session key is first encrypted by the preset quantum key therein and then distributed to the communication module through the first transmission channel.

12. The quantum encryption communication terminal for power feeder automation according to claim 11, characterized in that: The storage module includes a storage card, and the quantum security service platform is provided with a physical interface matching the storage card.

13. The quantum encryption communication terminal for power feeder automation according to claim 12, characterized in that: Also includes: Protocol conversion module; The data port is a serial port; the communication module is a wireless communication module; The protocol conversion module is responsible for performing protocol conversion between serial port data and IP data of the wireless communication module.

14. A quantum encryption communication system for power feeder automation, characterized in that: include: Quantum security service platform, which generates and distributes preset quantum keys and quantum session keys; Distribution automation master station; Quantum security gateway, which is located at the distribution automation master station side; include The quantum encryption communication terminal for power feeder automation according to any one of claims 9 to 13; The quantum security service platform, quantum security gateway, distribution automation master station and power feeder automation quantum encryption communication terminals transmit data and signals through the quantum encryption communication method described in any one of claims 1 to 8.

Images