Network communication encryption and authentication method and device based on power edge terminal

Abstract

The embodiment of the invention discloses a network communication encryption and authentication method and device based on a power edge terminal. A specific embodiment of the method comprises the following steps: in response to determining that a power edge terminal receives a power data communication request, monitoring channel states of all current authorized frequency bands to obtain a channel state group; selecting a channel state meeting a target communication condition from the channel state group as a target channel state; establishing a transmission communication channel with the power edge terminal through a communication channel corresponding to the target channel state; generating a power information transmission key pair in response to a received power information inspection request of the power edge terminal; and in response to receiving the encrypted power information of the power edge terminal, decrypting the encrypted power information, and performing information abnormality identification on the decrypted power information. According to the embodiment, the power information transmission efficiency is improved, the confidentiality of power data transmission is improved, and the data verification efficiency is also improved.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the computer field, and in particular to a network communication encryption and authentication method and device based on a power edge terminal. Background Art

[0002] In the operation and management of power systems, intelligent devices play an increasingly important role, especially power edge access intelligent devices. These devices play a vital role in all aspects of the power system and greatly improve the intelligence level of the power system.

[0003] Smart distribution rooms are a representative example of the widespread application of smart devices at the edge of the power grid. Smart distribution rooms can achieve real-time monitoring and transmission of power data, providing strong data support for the operation and management of the power system. Sensors and switchgear are also widely used in power systems. They can monitor the status of the power system in real time, detect problems in a timely manner and handle them, thus ensuring the stable operation of the power system.

[0004] As the construction of the power distribution Internet of Things advances, millions of power distribution equipment, electrical quantity sensors, and state quantity sensors will be connected to the Internet of Things, generating massive amounts of heterogeneous power distribution and consumption data. The collection, transmission, and calculation of these data will put tremendous pressure on the communication channel and the main station storage and computing system, and also put forward higher requirements for transmission bandwidth and timeliness. However, the traditional centralized processing mode with cloud computing model as the core cannot meet the needs of efficient processing of edge device data due to its shortcomings such as insufficient real-time performance, insufficient bandwidth, high energy consumption, and disadvantages for data security and privacy. In addition, data is easily tampered with during the circulation process, making it difficult to determine whether the data is true.

[0005] The above information disclosed in this Background section is only for enhancement of understanding of the background of the inventive concept and therefore it may contain information that does not form the prior art that is already known in this country to a person of ordinary skill in the art. Summary of the invention

[0006] The content of this disclosure is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this disclosure is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0007] Some embodiments of the present disclosure propose network communication encryption and authentication methods, devices, electronic devices and computer-readable media based on power edge terminals to solve one or more of the technical problems mentioned in the above background technology section.

[0008] In a first aspect, some embodiments of the present disclosure provide a network communication encryption and authentication method based on a power edge terminal, the method comprising: in response to determining that the power edge terminal has received a power data communication request, monitoring the channel status of all currently authorized frequency bands to obtain a channel state group; selecting a channel state that meets the target communication conditions from the above channel state group as a target channel state; establishing a transmission communication channel with the above power edge terminal through a communication channel corresponding to the above target channel state, and sending communication confirmation information to the above power edge terminal; in response to receiving a power information verification request from the above power edge terminal, generating a power information transmission key pair, and sending an information transmission public key in the above power information transmission key pair to the above power edge terminal; in response to receiving encrypted power information from the above power edge terminal, decrypting the above encrypted power information, and identifying information anomalies on the decrypted power information to obtain a power information anomaly identification result; in response to determining that the above power information anomaly identification result indicates no anomaly, sending no anomaly indication information to the above power edge terminal, and storing the above decrypted power information in a local database.

[0009] In a second aspect, some embodiments of the present disclosure provide a network communication encryption and authentication device based on a power edge terminal, the device comprising: a monitoring unit, configured to monitor the channel status of all currently authorized frequency bands in response to determining that the power edge terminal has received a power data communication request, and obtain a channel status group; a selection unit, configured to select a channel state that meets the target communication condition from the above channel status group as a target channel state; an establishment unit, configured to establish a transmission communication channel with the above power edge terminal through a communication channel corresponding to the above target channel state, and send communication confirmation information to the above power edge terminal; a sending unit, configured In response to receiving a power information verification request from the power edge terminal, the power edge terminal generates a power information transmission key pair, and sends the information transmission public key in the power information transmission key pair to the power edge terminal; the identification unit is configured to, in response to receiving the encrypted power information from the power edge terminal, decrypt the encrypted power information, and identify the information anomaly of the decrypted power information to obtain a power information anomaly identification result; the storage unit is configured to, in response to determining that the power information anomaly identification result indicates no anomaly, send no anomaly indication information to the power edge terminal, and store the decrypted power information in a local database.

[0010] In a third aspect, some embodiments of the present disclosure provide an electronic device comprising: one or more processors; a storage device on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any implementation manner of the above-mentioned first aspect.

[0011] In a fourth aspect, some embodiments of the present disclosure provide a computer-readable medium having a computer program stored thereon, wherein when the program is executed by a processor, the method described in any implementation manner of the above-mentioned first aspect is implemented.

[0012] The above-mentioned embodiments of the present disclosure have the following beneficial effects: through the network communication encryption and authentication method based on the power edge terminal of some embodiments of the present disclosure, the efficiency of power information transmission is accelerated, the confidentiality of power data transmission is improved, and the efficiency of data verification is also improved. First, in response to determining that the power edge terminal receives a power data communication request, the channel status of all currently authorized frequency bands is monitored to obtain a channel state group. Secondly, a channel state that meets the target communication conditions is selected from the above channel state group as the target channel state. Thus, a channel with a good signal can be selected as a transmission channel. Then, through the communication channel corresponding to the above target channel state, a transmission communication channel with the above power edge terminal is established, and the communication confirmation information is sent to the above power edge terminal. Afterwards, in response to receiving the power information verification request of the above power edge terminal, a power information transmission key pair is generated, and the information transmission public key in the above power information transmission key pair is sent to the above power edge terminal. Thus, it is convenient to encrypt the information transmitted by the power edge terminal, and the private key is at the other end, which improves the security of the information. Then, in response to receiving the encrypted power information from the power edge terminal, the encrypted power information is decrypted, and the decrypted power information is identified for information anomalies to obtain power information anomaly identification results. Finally, in response to determining that the power information anomaly identification results indicate that there is no anomaly, a no anomaly indication message is sent to the power edge terminal, and the decrypted power information is stored in a local database. As a result, the power information transmission efficiency is accelerated, the confidentiality of power data transmission is improved, and the efficiency of data verification is also improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that components and elements are not necessarily drawn to scale.

[0014] Figure 1 is a flow chart of some embodiments of a network communication encryption and authentication method based on a power edge terminal according to the present disclosure; Figure 2 It is a structural schematic diagram of some embodiments of the network communication encryption and authentication device based on the power edge terminal according to the present disclosure; Figure 3 It is a schematic diagram of the structure of an electronic device suitable for implementing some embodiments of the present disclosure. DETAILED DESCRIPTION

[0015] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0016] It should also be noted that, for ease of description, only the parts related to the invention are shown in the drawings. In the absence of conflict, the embodiments and features in the embodiments of the present disclosure can be combined with each other.

[0017] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0018] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0019] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0020] The present disclosure will be described in detail below with reference to the accompanying drawings and in conjunction with embodiments.

[0021] Figure 1 The flowchart of some embodiments of the network communication encryption and authentication method based on the power edge terminal according to the present disclosure is shown. The process 100 of some embodiments of the network communication encryption and authentication method based on the power edge terminal according to the present disclosure is shown. The network communication encryption and authentication method based on the power edge terminal includes the following steps: Step 101 : in response to determining that a power edge terminal receives a power data communication request, monitoring the channel status of all currently authorized frequency bands to obtain a channel status group.

[0022] In some embodiments, the execution subject (e.g., a computing device) of the network communication encryption and authentication method based on the power edge terminal can monitor the channel status of all current authorized frequency bands in response to determining that the power edge terminal has received a power data communication request, and obtain a channel status group. For example, the channel status of all current authorized frequency bands can be monitored through the associated NR-U base station to obtain a channel status group. ‌NR-U base station‌ refers to a 5G base station operating in an unlicensed spectrum, and its full name is 5G New Radio in Unlicensed Spectrum (5G NR-U). The channel status may refer to whether the channel of the communication signal frequency band can meet the information transmission conditions. For example, the information transmission condition may be: the signal value of the communication channel is greater than or equal to the preset signal value. The power edge terminal may be a terminal for collecting power field data. For example, the power edge terminal may be a device such as a power meter / voltmeter. The power data communication request may refer to a request to transmit the collected power information.

[0023] Step 102: Select a channel state that meets the target communication condition from the channel state group as the target channel state.

[0024] In some embodiments, the execution subject may select a channel state that meets the target communication condition from the channel state group as the target channel state. The target communication condition may be: the channel state group indicates that communication is possible and the communication signal is optimal.

[0025] Step 103: establish a transmission communication channel with the power edge terminal through the communication channel corresponding to the target channel state, and send communication confirmation information to the power edge terminal.

[0026] In some embodiments, the execution subject may establish a transmission communication channel with the power edge terminal through the communication channel corresponding to the target channel state, and send communication confirmation information to the power edge terminal. That is, the power edge terminal may be instructed to access a channel (communication channel) in the same signal frequency band as the execution subject. That is, access the communication channel corresponding to the target channel state. Here, the method of establishing the transmission communication channel is not limited. The communication confirmation information may indicate information that informs the power edge terminal that information transmission can be performed.

[0027] Step 104, in response to receiving the power information verification request from the power edge terminal, generating a power information transmission key pair, and sending the information transmission public key in the power information transmission key pair to the power edge terminal.

[0028] In some embodiments, the execution subject may generate a power information transmission key pair in response to receiving a power information verification request from the power edge terminal, and send the information transmission public key in the power information transmission key pair to the power edge terminal. The power information verification request may refer to a request to verify the transmitted power information. The power information transmission key pair may be a key pair (public key and private key) randomly generated by a key generation algorithm. The information transmission public key may represent the public key in the key pair.

[0029] Step 105, in response to receiving the encrypted power information from the power edge terminal, decrypting the encrypted power information, and identifying information anomalies on the decrypted power information to obtain a power information anomaly identification result.

[0030] In some embodiments, the above-mentioned execution subject may, in response to receiving the encrypted power information from the above-mentioned power edge terminal, decrypt the above-mentioned encrypted power information, and identify the information anomaly of the decrypted power information to obtain the power information anomaly identification result. The encrypted power information may refer to the power information encrypted by the power edge terminal through the information transmission public key. The power information may be power data information collected by the power edge terminal (for example, it may include the power consumption and electricity charges of each user, or the voltage data of each transformer in the region). For example, the above-mentioned encrypted power information can be decrypted by the private key in the power information transmission key pair to obtain the decrypted power information.

[0031] For another example, the decrypted power information can be identified for information anomalies through a pre-established interval table of each power indicator to obtain a power information anomaly identification result. For example, it is determined whether the power cardboard in each power information is within the corresponding interval. The power information anomaly identification result can indicate whether there are abnormal power indicators / data in the decrypted power information.

[0032] In practice, the above-mentioned execution subject can identify the abnormality of the decrypted power information through the following steps to obtain the abnormality identification result of the power information: In the first step, the decrypted power information is input into the abnormal power information feature generation model corresponding to the abnormal information feature indication information to obtain the abnormal power information feature. The abnormal power information feature generation model can be a pre-trained neural network model that takes power information as input and abnormal power information features as output. For example, the abnormal power information feature generation model can be a GPT model.

[0033] In the second step, the above abnormal power information features are input into the power information abnormality recognition model corresponding to the abnormal power information recognition configuration information to obtain the power information abnormality recognition result. The power information abnormality recognition model can be a pre-trained neural network model that takes the abnormal power information features as input and the power information abnormality recognition result as output. For example, a GPT model.

[0034] The abnormal power information feature generation model and the power information anomaly recognition model can be trained by the following steps: The first step is to determine the initial abnormal information characteristic indication information and the initial abnormal power information identification configuration information corresponding to the power information verification service.

[0035] Among them, the power information verification service may be a service that requires power data verification. For example, the power information verification service may include: user power consumption verification, regional voltage stability verification, and line loss verification. The initial abnormal power information identification configuration information may be abnormal power information identification configuration information before each training step is performed. The abnormal power information identification configuration information may be information for configuring an abnormal power information identification method. The abnormal power information identification configuration information may include: an information identification feature type set, a data anomaly threshold set, and an abnormal type identification method identification set. The data identification feature type in the data identification feature type set may characterize the type of data corresponding to the feature required when performing abnormal data identification. The data anomaly threshold included in the data anomaly threshold set may be a threshold for characterizing power information anomalies of the corresponding data type. The abnormal type identification method identifier in the abnormal type identification method identifier set may be a unique identifier of the abnormal type identification method. The abnormal type identification method may be a classification method for detecting abnormal types of power information. The classification method may be: Lightgbm (Light GradientBoosting Machine) machine learning model, LOF (Local Outlier Factor), support vector machine, Autoencoder. The above-mentioned abnormality type may be: abnormality, no abnormality. The above-mentioned initial abnormal information feature indication information may be the abnormal information feature indication information before each execution of the training step. The above-mentioned abnormal information feature indication information may be information used to indicate the features required for extracting the abnormal power information feature recognition model. The above-mentioned initial abnormal information feature indication information may include: a power indicator keyword text set, an abnormal value type set, and value fluctuation information.

[0036] In the second step, the target sample power information is input into the initial abnormal power information feature recognition model corresponding to the initial abnormal information feature indication information to obtain the abnormal features of the sample power information. The target sample power information may be a power information sample corresponding to the power information verification service. The initial abnormal power information feature recognition model corresponding to the initial abnormal information feature indication information may be: a feature extraction model for extracting the features indicated by the initial abnormal information feature indication information in the target sample power information. The above-mentioned initial abnormal power information feature recognition model may be a GPT model.

[0037] In the third step, according to the initial power information abnormality recognition model corresponding to the initial abnormal power information recognition configuration information, the abnormality recognition processing is performed on the abnormal characteristics of the sample power information to obtain the abnormality recognition result of the sample power information. Wherein, the initial power information abnormality recognition model includes: an abnormal factor information recognition network and an information abnormality type recognition network corresponding to the initial abnormal power information recognition configuration information. Wherein, the initial power information abnormality recognition model can be a model for identifying whether the abnormal characteristics of the sample power information are abnormal. The abnormal recognition result of the sample power information can characterize whether the abnormal characteristics of the corresponding sample power information are abnormal. The initial power information abnormality recognition model corresponding to the initial abnormal power information recognition configuration information can be: each abnormal type recognition method adopted by the initial power information abnormality recognition model and each data abnormality threshold used during recognition exist in the initial abnormal power information recognition configuration information. Wherein, the abnormal factor information recognition network can be a model for automatically generating data abnormality factor information. The abnormal factor can be a factor of the abnormal sample power information. The abnormal factor information recognition network can be a GPT model. The information abnormality type recognition network corresponding to the initial abnormal power information recognition configuration information can be: a model corresponding to at least one abnormal type recognition method among each abnormal type recognition method corresponding to the initial abnormal power information recognition configuration information. Each abnormal type identification method corresponding to the initial abnormal power information identification configuration information may be: each abnormal type identification method corresponding to the abnormal type identification method identifier set included in the initial abnormal power information identification configuration information.

[0038] The third step may include the following sub-steps: In the first sub-step, the abnormal characteristics of the sample power information are input into the abnormal information type recognition network to obtain the abnormal type of the sample power information. The abnormal type of the sample power information can characterize whether the abnormal characteristics of the sample power information are abnormal. The abnormal type of the sample power information can be: abnormal or no abnormal.

[0039] In the second sub-step, in response to determining that the abnormal type of the sample power information meets the abnormal type condition, the abnormal characteristics of the sample power information are input into the abnormal factor information identification network to obtain sample abnormal factor information. The abnormal type condition may be: the abnormal type of the sample power information represents that the data is abnormal.

[0040] The third sub-step is to combine the above-mentioned sample power information anomaly type and the above-mentioned sample anomaly factor information into a sample power information anomaly identification result.

[0041] The fourth step is to determine the difference between the abnormal identification result of the sample power information and the sample label corresponding to the target sample power information. The difference between the abnormal identification result of the sample power information and the sample label corresponding to the target sample power information can be determined by a preset loss function. The preset loss function can be a cross entropy loss function or a hinge loss function.

[0042] In the fifth step, in response to determining that the above-mentioned difference value is less than or equal to the preset difference value, the initial abnormal information feature indication information and the initial abnormal power information identification configuration information are respectively determined as the abnormal information feature indication information and the abnormal power information identification configuration information, and the initial abnormal power information feature recognition model and the initial power information abnormality recognition model are respectively determined as the trained abnormal power information feature recognition model and the power information abnormality recognition model.

[0043] Thus, the trained abnormal power information feature recognition model corresponding to the abnormal information feature indication information and the power information abnormality recognition model corresponding to the abnormal power information recognition configuration information can be obtained, which can be used to identify abnormal power information. Also, when training the power information abnormality recognition model, not only the abnormal power information feature recognition model corresponding to the abnormal information feature indication information automatically mines and generates feature information containing more features for abnormal power information recognition, but also an abnormality recognition strategy is set, thereby improving the accuracy of the trained power information abnormality recognition model. Therefore, when abnormal power information is recognized through the trained power information abnormality recognition model, the accuracy of identifying abnormal power information can be improved.

[0044] Step 106, in response to determining that the power information abnormality identification result indicates no abnormality, sending no abnormality indication information to the power edge terminal, and storing the decrypted power information in a local database.

[0045] In some embodiments, the execution subject may send no-abnormality indication information to the power edge terminal in response to determining that the power information abnormality identification result indicates no abnormality, and store the decrypted power information in a local database. The no-abnormality indication information may indicate that the power information has no abnormality.

[0046] Optionally, in response to receiving power query information sent by the power access terminal, a power query field set is parsed from the power query information.

[0047] In some embodiments, the above-mentioned execution subject may parse out a power query field set from the power query information in response to receiving the power query information sent by the power access terminal. The power query information may represent query information for querying a certain power data. The power query field may be a field corresponding to the power key query data in the power query information. For example, the power query field set may include: a power data type query field and a power data period query field.

[0048] Optionally, the above-mentioned power query field set is converted into a power information query statement in a target format.

[0049] In some embodiments, the execution entity may convert the power query field set into a power information query statement in a target format, which may be a SQL statement format.

[0050] Optionally, according to the query field set corresponding to the local database, field correction is performed on the power query field in the above power query field set to generate a power query correction field set, and a database power query statement corresponding to the above power query correction field set is generated.

[0051] In some embodiments, the above-mentioned execution entity can perform field correction on the power query field in the above-mentioned power query field set according to the query field set corresponding to the local database to generate a power query correction field set, and generate a database power query statement corresponding to the above-mentioned power query correction field set.

[0052] In practice, the execution subject may perform field correction on the power query field in the power query field set to generate a power query correction field set by following the steps below: In the first step, the above power query field set is divided into a character power query field set and a non-character power query field set.

[0053] In the second step, for each character power query field in the character power query field set, the following processing steps are performed: 1. Determine whether there is a query field corresponding to the character power query field in the query field set. A keyword matching algorithm may be used to determine whether there is a query field corresponding to the character power query field in the query field set. The keyword matching algorithm may be a pre-set algorithm for field matching based on keywords. For example, the keyword matching algorithm may be an AC (Aho-Corasick automaton).

[0054] 2. In response to determining that it does not exist, determine whether there is a query field in the query field set whose vector similarity corresponding to the character power query field satisfies a preset similarity condition. The vector similarity can represent the semantic similarity between the character power query field and the query field. The greater the vector similarity, the higher the corresponding semantic similarity. The preset similarity condition can be that the vector similarity is the highest and the vector similarity is greater than a predetermined similarity threshold.

[0055] 3. In response to determining that there is a query field that meets the preset similarity condition, the character power query field is modified according to the query field that meets the preset similarity condition to obtain a character power query modification field. For example, the execution subject may replace the character power query field with a query field of the preset similarity condition to obtain a character power query modification field.

[0056] The third step is to combine each character power query correction field with the non-character power query field set to form a power query correction field set.

[0057] Optionally, execute the above database power query statement to obtain power data query information.

[0058] In some embodiments, the execution entity may execute the database power query statement to obtain power data query information.

[0059] In practice, the execution subject can execute the above database power query statement through the following steps: The first step is to execute the above database power query statement to generate the database power query statement execution result.

[0060] In the second step, in response to determining that the execution result of the above database power query statement indicates execution failure, a processing step is executed: The first sub-step is to extract fields from the above database power query statement to generate an extracted field set.

[0061] The second sub-step is to adjust the extracted fields in the extracted field set according to the query field set to obtain an adjusted field set, wherein the adjusted field can be a field that is adjusted to the extracted field and matches the query field.

[0062] The third sub-step is to generate a power query adjustment statement corresponding to the above adjustment field set. The adjustment fields in the adjustment field set may be combined into a statement to generate a power query adjustment statement.

[0063] The fourth sub-step is to execute the above power query adjustment statement to generate a power query adjustment statement execution result, wherein the power query adjustment statement execution result can indicate whether the power query adjustment statement fails to execute.

[0064] In a third step, in response to determining that the execution result of the power query adjustment statement indicates successful execution, power data query information corresponding to the power query adjustment statement is obtained.

[0065] Optionally, the power data query information is sent to the power access terminal.

[0066] In some embodiments, the execution entity may send the power data query information to the power access terminal.

[0067] As a result, the accuracy of query statement generation is improved, and the efficiency and accuracy of querying power information are ensured. When it is determined that the execution result of the power query adjustment statement indicates that the statement execution failed, the field set is queried to adjust each extracted field to generate a more accurate query statement, further improving the accuracy of power information query.

[0068] Further references Figure 2 As an implementation of the methods shown in the above figures, the present disclosure provides some embodiments of a network communication encryption and authentication device based on a power edge terminal. These embodiments of the network communication encryption and authentication device based on a power edge terminal are similar to Figure 1 Corresponding to the method embodiments shown, the network communication encryption and authentication device based on the power edge terminal can be specifically applied to various electronic devices.

[0069] like Figure 2As shown, a network communication encryption and authentication device 200 based on a power edge terminal in some embodiments includes: a monitoring unit 201 , a selection unit 202 , an establishment unit 203 , a sending unit 204 , an identification unit 205 and a storage unit 206 . Among them, the monitoring unit 201 is configured to monitor the channel status of all currently authorized frequency bands in response to determining that the power edge terminal has received a power data communication request, and obtain a channel state group; the selection unit 202 is configured to select a channel state that meets the target communication condition from the above channel state group as the target channel state; the establishment unit 203 is configured to establish a transmission communication channel with the above power edge terminal through the communication channel corresponding to the above target channel state, and send the communication confirmation information to the above power edge terminal; the sending unit 204 is configured to generate a power information transmission key pair in response to receiving a power information verification request from the above power edge terminal, and send the information transmission public key in the above power information transmission key pair to the above power edge terminal; the identification unit 205 is configured to decrypt the above encrypted power information in response to receiving the encrypted power information from the above power edge terminal, and perform information anomaly identification on the decrypted power information to obtain a power information anomaly identification result; the storage unit 206 is configured to send no anomaly indication information to the above power edge terminal in response to determining that the above power information anomaly identification result indicates no anomaly, and store the above decrypted power information in a local database.

[0070] It can be understood that the units and references recorded in the network communication encryption and authentication device 200 based on the power edge terminal Figure 1 Therefore, the operations, features and beneficial effects described above for the method are also applicable to the network communication encryption and authentication device 200 based on the power edge terminal and the units contained therein, and will not be repeated here.

[0071] Reference below Figure 3 , which shows a schematic diagram of the structure of an electronic device 300 (e.g., a computing device) suitable for implementing some embodiments of the present disclosure. The electronic devices in some embodiments of the present disclosure may include, but are not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 3 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0072] like Figure 3As shown, the electronic device 300 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 301, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 302 or a program loaded from a storage device 308 to a random access memory (RAM) 303. In the RAM 303, various programs and data required for the operation of the electronic device 300 are also stored. The processing device 301, the ROM 302, and the RAM 303 are connected to each other via a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0073] Typically, the following devices may be connected to the I / O interface 305: an input device 306 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 307 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 308 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 309. The communication device 309 may allow the electronic device 300 to communicate with other devices wirelessly or by wire to exchange data. Figure 3 The electronic device 300 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead. Figure 3 Each block shown in the figure may represent one device, or may represent multiple devices as required.

[0074] In particular, according to some embodiments of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, some embodiments of the present disclosure include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In some such embodiments, the computer program can be downloaded and installed from the network through the communication device 309, or installed from the storage device 308, or installed from the ROM 302. When the computer program is executed by the processing device 301, the above-mentioned functions defined in the method of some embodiments of the present disclosure are executed.

[0075] It should be noted that the computer-readable medium recorded in some embodiments of the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In some embodiments of the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, device or device. In some embodiments of the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0076] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0077] The computer-readable medium may be included in the electronic device; or it may exist independently without being installed in the electronic device. The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: in response to determining that the power edge terminal receives a power data communication request, monitors the channel status of all current authorized frequency bands to obtain a channel status group; selects a channel status that meets the target communication condition from the channel status group as a target channel status; establishes a transmission communication channel with the power edge terminal through the communication channel corresponding to the target channel status, and sends the communication confirmation information to the power edge terminal; in response to receiving a power information verification request from the power edge terminal, generates a power information transmission key pair, and sends the information transmission public key in the power information transmission key pair to the power edge terminal; in response to receiving the encrypted power information from the power edge terminal, decrypts the encrypted power information, and identifies the information anomaly of the decrypted power information to obtain the power information anomaly identification result; in response to determining that the power information anomaly identification result indicates no anomaly, sends no anomaly indication information to the power edge terminal, and stores the decrypted power information in a local database.

[0078] Computer program code for performing the operations of some embodiments of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0079] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0080] The units described in some embodiments of the present disclosure may be implemented by software or by hardware. The described units may also be provided in a processor, for example, may be described as: a processor comprising: a monitoring unit, a selection unit, an establishment unit, a sending unit, an identification unit and a storage unit. Among them, the names of these units do not constitute a limitation on the unit itself under certain circumstances. For example, the monitoring unit may also be described as "a unit that monitors the channel status of all currently authorized frequency bands and obtains a channel status group in response to determining that the power edge terminal has received a power data communication request."

[0081] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0082] The above descriptions are only some preferred embodiments of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the embodiments of the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above inventive concept. For example, the above features are replaced with (but not limited to) technical features with similar functions disclosed in the embodiments of the present disclosure.

Claims

1. A network communication encryption and authentication method based on a power edge terminal, comprising: In response to determining that the power edge terminal receives the power data communication request, monitoring the channel status of all currently authorized frequency bands to obtain a channel status group; Selecting a channel state that meets the target communication condition from the channel state group as a target channel state; Establishing a transmission communication channel with the power edge terminal through a communication channel corresponding to the target channel state, and sending communication confirmation information to the power edge terminal; In response to receiving a power information verification request from the power edge terminal, generating a power information transmission key pair, and sending an information transmission public key in the power information transmission key pair to the power edge terminal; In response to receiving the encrypted power information from the power edge terminal, decrypting the encrypted power information, and performing information anomaly identification on the decrypted power information to obtain a power information anomaly identification result; In response to determining that the power information abnormality identification result indicates no abnormality, sending no abnormality indication information to the power edge terminal, and storing the decrypted power information in a local database.

2. The method according to claim 1, wherein: The performing information anomaly identification on the decrypted power information to obtain the power information anomaly identification result includes: Inputting the decrypted power information into an abnormal power information feature generation model corresponding to the abnormal information feature indication information to obtain the abnormal power information feature; The abnormal power information feature is input into a power information abnormality identification model corresponding to the abnormal power information identification configuration information to obtain a power information abnormality identification result.

3. The method according to claim 2, wherein: Before inputting the decrypted power information into the abnormal power information feature generation model corresponding to the abnormal information feature indication information to obtain the abnormal power information feature, the method further includes: Determine initial abnormal information characteristic indication information and initial abnormal power information identification configuration information corresponding to the power information verification service; Inputting the target sample power information into the initial abnormal power information feature recognition model corresponding to the initial abnormal information feature indication information to obtain the abnormal features of the sample power information; According to the initial power information anomaly recognition model corresponding to the initial abnormal power information recognition configuration information, the abnormality recognition processing is performed on the abnormal features of the sample power information to obtain the abnormality recognition result of the sample power information, wherein the initial power information anomaly recognition model includes: an abnormal factor information recognition network and an information anomaly type recognition network corresponding to the initial abnormal power information recognition configuration information; Determine a difference value between the sample power information anomaly identification result and a sample label corresponding to the target sample power information; In response to determining that the difference value is less than or equal to the preset difference value, the initial abnormal information feature indication information and the initial abnormal power information identification configuration information are respectively determined as the abnormal information feature indication information and the abnormal power information identification configuration information, and the initial abnormal power information feature identification model and the initial power information abnormality identification model are respectively determined as the trained abnormal power information feature identification model and the power information abnormality identification model.

4. The method according to claim 3, wherein: The abnormality recognition process is performed on the abnormality feature of the sample power information according to the initial power information abnormality recognition model corresponding to the initial abnormal power information recognition configuration information to obtain the abnormality recognition result of the sample power information, including: Inputting the abnormal features of the sample power information into the abnormal information type identification network to obtain the abnormal type of the sample power information; In response to determining that the abnormal type of the sample power information meets the abnormal type condition, inputting the abnormal characteristics of the sample power information into an abnormal factor information identification network to obtain sample abnormal factor information; The sample power information anomaly type and the sample anomaly factor information are combined into a sample power information anomaly identification result.

5. The method according to claim 1, wherein: The method further comprises: In response to receiving power query information sent by the power access terminal, parsing a power query field set from the power query information; Converting the power query field set into a power information query statement in a target format; According to the query field set corresponding to the local database, field correction is performed on the power query field in the power query field set to generate a power query correction field set, and a database power query statement corresponding to the power query correction field set is generated; Executing the database power query statement to obtain power data query information; The power data query information is sent to the power access terminal.

6. A network communication encryption and authentication device based on a power edge terminal, comprising: A monitoring unit, configured to monitor the channel status of all currently authorized frequency bands in response to determining that the power edge terminal receives the power data communication request, and obtain a channel status group; A selection unit is configured to select a channel state that meets the target communication condition from the channel state group as a target channel state; an establishing unit configured to establish a transmission communication channel with the power edge terminal through a communication channel corresponding to the target channel state, and send communication confirmation information to the power edge terminal; a sending unit configured to generate a power information transmission key pair in response to receiving a power information verification request from the power edge terminal, and send an information transmission public key in the power information transmission key pair to the power edge terminal; an identification unit configured to, in response to receiving the encrypted power information from the power edge terminal, decrypt the encrypted power information, and identify information anomalies on the decrypted power information to obtain a power information anomaly identification result; The storage unit is configured to send no-abnormality indication information to the power edge terminal in response to determining that the power information abnormality identification result indicates no abnormality, and store the decrypted power information in a local database.

7. An electronic device comprising: one or more processors; a storage device having one or more programs stored thereon; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 5.

8. A computer readable medium having a computer program stored thereon, wherein: When the program is executed by a processor, the method according to any one of claims 1 to 5 is implemented.

Images