Intelligent electric meter permission processing method and device, electronic equipment and storage medium

Abstract

The invention discloses an intelligent electric meter permission processing method and device, electronic equipment and a storage medium. The method comprises the following steps: distributing an initial authority to an intelligent electric meter passing identity authentication, so that the intelligent electric meter encrypts and uploads collected initial power data based on the initial authority; dynamically adjusting the initial authority to a target authority according to the initial power data, and performing authority verification and behavior monitoring on the intelligent electric meter when the intelligent electric meter uploads the target power data based on the target authority; if it is found that the smart electric meter has a behavior exceeding the range of the target permission according to the permission verification and behavior monitoring results, adjusting the target permission according to the target power data; and generating an audit log according to the behavior data of the intelligent electric meter and the authority change data, and processing the intelligent electric meter when an abnormal behavior mode of the intelligent electric meter is identified according to the audit log. According to the scheme, illegal access, data tampering and permission abuse of the intelligent electric meter can be avoided.

Description

Technical Field

[0001] The present application relates to the field of electric power technology, and in particular to a method, device, electronic device and storage medium for processing permissions of a smart meter. Background Art

[0002] Smart meter system refers to the data exchange platform between smart meters and background systems connected through the network. The smart meter system effectively combines Internet technology, smart terminals and power supply to form a new type of power management and metering system, which can not only accurately measure power consumption, but also realize real-time data transmission, remote control, fault diagnosis and other functions. With the development of smart grids, smart meter systems have gradually become an important part of the power industry, greatly improving the quality and efficiency of power services. However, during the operation of smart meter systems, various security issues may be encountered, mainly including illegal access to smart meters, data tampering and abuse of authority. These problems not only threaten the normal operation of the system, but also may cause distortion of power data and property loss of users. Summary of the invention

[0003] The present application provides a method, device, electronic device and storage medium for processing permissions of a smart meter, which can ensure the authenticity and legality of connected smart meters, avoid abuse of permissions of smart meters, effectively prevent data tampering and illegal intrusion, and ensure the safe and stable operation of the power system.

[0004] According to one aspect of the present application, a method for processing permissions of a smart meter is provided, the method comprising:

[0005] Allocating initial permissions to the smart meter that has passed the identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions;

[0006] Dynamically adjusting the initial authority to a target authority according to the initial power data, and performing authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority;

[0007] If it is found according to the results of the authority verification and the behavior monitoring that the smart meter has a behavior that exceeds the scope of the target authority, the target authority is adjusted according to the target power data;

[0008] An audit log is generated according to the behavior data and the authority change data of the smart meter, and when an abnormal behavior pattern of the smart meter is identified according to the audit log, the smart meter is processed.

[0009] According to another aspect of the present application, a device for processing permissions of a smart meter is provided, the device comprising:

[0010] An initial authority allocation module, used to allocate initial authority to a smart meter that has passed identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial authority;

[0011] A target authority verification module, used to dynamically adjust the initial authority to a target authority according to the initial power data, and to perform authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority;

[0012] A target authority adjustment module, configured to adjust the target authority according to the target power data if it is found that the smart meter has a behavior that exceeds the scope of the target authority according to the results of the authority verification and the behavior monitoring;

[0013] The smart meter processing module is used to generate an audit log according to the behavior data and permission change data of the smart meter, and process the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log.

[0014] According to another aspect of the present application, an electronic device is provided, the electronic device comprising:

[0015] at least one processor; and

[0016] a memory communicatively connected to the at least one processor; wherein,

[0017] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the method for processing smart meter permissions described in any embodiment of the present invention.

[0018] According to another aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for processing smart meter permissions described in any embodiment of the present invention when executed.

[0019] The technical solution of the embodiment of the present application is to assign initial permissions to a smart meter that has passed identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions; dynamically adjusts the initial permissions to target permissions according to the initial power data, and performs permission verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target permissions; if it is found according to the results of the permission verification and the behavior monitoring that the smart meter has behaviors that exceed the scope of the target permissions, the target permissions are adjusted according to the target power data; an audit log is generated according to the behavior data and permission change data of the smart meter, and when an abnormal behavior pattern of the smart meter is identified according to the audit log, the smart meter is processed. The technical solution of the embodiment of the present application is to allocate initial permissions to the smart meter that has passed the identity authentication. In the process of the smart meter working based on the initial permissions, the permissions of the smart meter are dynamically adjusted, the permissions are verified, and the behavior is monitored. When the smart meter is identified to have abnormal behavior patterns according to the audit log, the smart meter is processed. This can ensure the authenticity and legality of the connected smart meter, avoid the abuse of permissions of the smart meter, effectively prevent data tampering and illegal intrusion, and ensure the safe and stable operation of the power system.

[0020] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 It is a flowchart of a method for processing smart meter permissions provided according to the first embodiment of the present application;

[0023] Figure 2 It is a flow chart of a method for processing smart meter permissions provided in accordance with the second embodiment of the present application;

[0024] Figure 3 It is a structural diagram of a smart meter authority processing device provided according to Embodiment 3 of the present application;

[0025] Figure 4 It is a structural diagram of an electronic device that implements the method for processing the permissions of a smart meter according to an embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0027] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0028] Embodiment 1

[0029] Figure 1 A flowchart of a method for processing smart meter permissions is provided for the first embodiment of the present application. This embodiment is applicable to the case of processing permissions of smart meters connected to the system. The method can be executed by a processing device for smart meter permissions. The processing device for smart meter permissions can be implemented in the form of hardware and / or software. The processing device for smart meter permissions can be configured in an electronic device. Figure 1 As shown, the method includes:

[0030] S110. Allocate initial permissions for the smart meter that has passed the identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions.

[0031] Among them, smart meters can not only accurately measure power consumption, but also realize real-time data transmission, remote control, fault diagnosis and other functions. Identity authentication usually involves the use of keys, digital certificates or other authentication mechanisms to verify the identity of smart meters to ensure that only legitimate smart meters can access the backend system. The initial permissions of smart meters include data upload permissions, parameter configuration permissions and time synchronization permissions, which are stored in the form of bitmaps. Bits 1 to 8 in the bitmap control data upload permissions, bits 9 to 16 control parameter configuration permissions, bits 17 to 24 control time synchronization permissions, and bits 25 to 32 are reserved for extension.

[0032] In an embodiment of the present application, when a smart meter is connected to a backend system, it is necessary to authenticate the identity of the smart meter and assign initial permissions to the smart meter when the smart meter passes the authentication, so that the smart meter can encrypt and upload the collected initial power data based on the initial permissions, thereby ensuring the authenticity and legality of the connected smart meter.

[0033] Optionally, initial permissions are assigned to smart meters that have passed identity authentication, including: authenticating the connected smart meters through a pre-issued digital certificate, and determining the identity identifier of the smart meters that have passed the identity authentication; determining the device type and identity location of the smart meter based on the identity identifier, and determining the initial permissions of the smart meter based on the device type, the identity location, and a preset device database.

[0034] Among them, the pre-issued digital certificate is issued after receiving the certificate application message sent by the smart meter, including the device identification, public key, certificate chain, certificate validity period and hardware feature code generated by timestamp and random number. The timestamp is accurate to milliseconds and is spliced ​​with the random number to generate a 32-bit device identification to ensure the uniqueness of the device identification of the smart meter connected to the background system. The certificate chain adopts a three-level architecture, including root certificates, provincial certificates and municipal certificates. The hardware feature code consists of the chip serial number, device physical address, and internal firmware version number, which is read by the hardware feature code extractor to generate a fixed-length feature string.

[0035] The identity of the smart meter adopts a 32-bit encoding format, with the first 4 digits indicating the device type, the middle 4 digits indicating the identity, and the last 24 digits being a unique serial number. The device types include single-phase meters, three-phase meters, and concentrators. The single-phase meter is coded as 0001, the three-phase meter is coded as 0010, and the concentrator is coded as 0011. The identity includes ordinary users, key users, and special users. The ordinary user is coded as 0001, the key user is coded as 0010, and the special user is coded as 0011.

[0036] In an embodiment of the present application, the identity of the connected smart meter is authenticated by a pre-issued digital certificate, including: verifying the signature value of the digital certificate, verifying the integrity of the certificate chain of the digital certificate, and verifying the timeliness of the digital certificate. Specifically, the digital certificate can be signed and compared with the signature value uploaded when the smart meter requests access; the certificate chain structure of the digital certificate can be obtained through the national secret SM2 certificate verifier, and the integrity of the certificate chain can be verified by traversing downward from the root certificate; the timeliness of the certificate can be verified by comparing the hardware feature code of the smart meter collected in real time with the hardware feature code recorded in the digital certificate, and the matching error is allowed to be within 0.1%. Among them, the certificate validity period can be set to 730 days, and the certificate renewal process can be triggered 30 days before expiration.

[0037] If the identity authentication fails, the authentication process is terminated immediately, and the failure time, device identification, failure reason code, and hardware feature code are recorded in the abnormal event database. Event marking and classification are performed according to certificate error, hardware feature code mismatch, certificate chain verification failure, etc. Among them, certificate error types include certificate format error, certificate expiration, signature verification failure, etc. Delete the access permission of the smart meter from the access control list, mark the device identification and hardware feature code of the smart meter in the blacklist database, and set the blacklist release time. The default setting is 168 hours, and it is extended to 720 hours after three consecutive identity authentication failures. Abnormal events can be classified according to the failure reason code, and abnormal events of the same type are aggregated and displayed.

[0038] If the identity authentication is successful, the identity of the smart meter that has passed the identity authentication is determined, and the device type and identity location of the smart meter are determined based on the identity, and the initial permissions of the smart meter are determined based on the device type, identity location and preset device database. Specifically, the initial permissions such as data upload permission, parameter configuration permission and time synchronization permission are assigned to the smart meter according to the identity, and the permission token is generated and sent to the smart meter through the message queue. The permission effective time is set to 180 seconds later. The process uses the AES256-bit encryption algorithm to establish an encrypted communication channel, and performs MD5 integrity check on the communication data. If the check value does not match, the data packet is discarded. After that, the permission change data of the smart meter is stored in the audit database. Optionally, the permission change data includes trigger conditions, adjustment content, execution time and adjustment results, etc. The size of each data is limited to 1024 bytes. The audit database establishes a partition table according to the date, and the capacity of each partition table is limited to 1 million data. Historical data over 180 days is archived regularly, and the archived data is compressed and transferred to cold backup storage.

[0039] S120, dynamically adjusting the initial authority to the target authority according to the initial power data, and performing authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority.

[0040] Among them, power data includes power consumption, voltage value, current value, power value, load curve, etc. Initial power data refers to the power data uploaded by the smart meter based on the initial authority, and target power data refers to the power data uploaded by the smart meter based on the target authority. Target authority includes full authority, restricted authority and basic authority. Full authority includes data upload authority and parameter configuration authority. Restricted authority only retains data upload authority and prohibits parameter configuration. Basic authority only allows uploading of smart meter status data, including operation status data, communication status data and clock status data.

[0041] In the embodiment of the present application, the power consumption, voltage value, current value, power value, load curve and upload time interval uploaded by the smart meter can be monitored in real time, and the abnormal data in the above data can be identified through the convolutional neural network, and the initial authority can be dynamically adjusted to the target authority based on the identification result, and the authority change data can be stored in the audit database. Afterwards, when the smart meter uploads the target power data based on the target authority, the authority verification and behavior monitoring mechanism are dynamically triggered, and the smart meter is verified and the behavior is monitored every time the smart meter uploads the target power data. Specifically, according to the data upload request sent by the smart meter, the authority change data of the smart meter can be retrieved from the audit database to verify the target authority of the smart meter. At the same time, the target power data uploaded by the smart meter is obtained through the behavior monitor, and the target power data is extracted by the long short-term memory neural network to obtain the behavior characteristics of the smart meter, such as data upload frequency, data volume and data type, so as to monitor the behavior of the smart meter.

[0042] S130: If it is found according to the results of authority verification and behavior monitoring that the smart meter has behaviors that exceed the scope of the target authority, the target authority is adjusted according to the target power data.

[0043] The authority verification result includes the upload frequency threshold, data format specification, and authorized data items corresponding to the target authority obtained from the authorization database after verifying the target authority of the smart meter. The behavior monitoring result includes the behavior characteristics extracted from the target power data, such as data upload frequency, data volume, and data type.

[0044] In an embodiment of the present application, it can be determined whether the smart meter has behaviors beyond the scope of the target authority, such as abnormal upload frequency, abnormal data format, unauthorized upload, etc., based on the authority verification results and the behavior monitoring results. When the smart meter has behaviors beyond the scope of the target authority, the target authority is adjusted according to the target power data. Specifically, the target authority is adjusted according to the target power data, which can be to calculate the behavior score according to the behavior characteristics extracted from the target power data, generate a behavior score record, analyze the behavior score record using the authority adjustment rule based on the XG Boost algorithm, and adjust the target authority according to the analysis results. The authority adjustment instruction is generated to adjust the target authority, and the authority change data is stored in the audit database. Optionally, when adjusting the target authority, the type of behavior beyond the scope of the target authority is different, and its adjustment priority is also different. Exemplarily, the data format abnormality is a high priority, and the adjustment is performed immediately, the unauthorized upload is a medium priority, and the adjustment is performed after the current data is uploaded, and the upload frequency abnormality is a low priority, and the adjustment is performed when idle.

[0045] S140: Generate an audit log based on the behavior data and permission change data of the smart meter, and process the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log.

[0046] Among them, the behavior data of the smart meter includes the relevant data obtained by monitoring the behavior of the smart meter, and the permission change data includes the relevant data generated after each adjustment of the permissions of the smart meter, such as trigger conditions, adjustment content, execution time, and adjustment results. The audit log includes operation time, identity identification, behavior description, and permission change records. In the embodiment of the present application, the real-time audit log is retained for 30 days, the historical audit log is retained for 180 days, and the audit log is stored using AES256 encryption.

[0047] Among them, abnormal behavior patterns include abnormal operation frequency, abnormal authority change, and abnormal time series. Abnormal operation frequency means that the number of times the same operation of the smart meter exceeds the preset upper limit in a unit of time, abnormal authority change means that the smart meter fails to make the correct authority change and unauthorized operation occurs, and abnormal time series means that the sequence of operations of the smart meter is disordered. The risk level of abnormal behavior patterns can be divided into three levels: emergency, high risk, and warning.

[0048] Optionally, an audit log is generated based on the behavior data and the authority change data of the smart meter, and when an abnormal behavior pattern of the smart meter is identified according to the audit log, the smart meter is processed, including: generating an audit log including operation time, identity identification, behavior description and authority change record based on the behavior data and the authority change data of the smart meter; performing real-time analysis on the audit log, and when an abnormal behavior pattern is identified according to the analysis results, processing associated events of the abnormal behavior pattern of the smart meter.

[0049] In the embodiment of the present application, first, an audit log including operation time, identity, behavior description and permission change record is generated according to the behavior data and permission change data of the smart meter, and the audit log is processed by the log parser to obtain the operation feature. Secondly, a long short-term memory network is used to extract the behavior sequence from the operation feature, and a behavior feature vector is obtained according to the behavior sequence according to the cosine similarity calculator, such as operation frequency feature, parameter value feature, etc. Then, the behavior feature vector is classified according to the preset behavior rules by the random forest classifier to obtain the recognition result. Afterwards, if it is determined that the smart meter has an abnormal behavior pattern according to the recognition result, the smart meter is processed. Specifically, the event processor can generate an event identifier, event details and event-level abnormal behavior record of the associated event including the abnormal behavior pattern, so as to obtain the disposal rule from the disposal rule database according to the abnormal behavior record, process the associated event of the abnormal behavior pattern, and generate an event processing traceability chain. Among them, the event processing traceability chain records the processing process of the associated event, including the discovery time, processing personnel, processing scheme, processing result and associated event identifier.

[0050] Optionally, the event level corresponds to the risk level, including emergency, high-risk and warning levels. When processing the smart meter according to the abnormal behavior record, a multi-level response mechanism is adopted. For example, emergency-level events require a response within 5 seconds, and the alarm is pushed through both email and SMS channels; high-risk events require a response within 30 seconds, and the alarm is pushed through the email channel; warning-level events require a response within 300 seconds and are recorded in the alarm log. Among them, the event alarm adopts a multi-level upgrade mechanism. For example, if the alarm is not processed for 30 minutes, the alarm level will be automatically upgraded, and it can be upgraded up to 2 times. For recurring abnormal behavior patterns, the handling rule database can be updated through offline learning to improve the accuracy of abnormal behavior pattern recognition.

[0051] The technical solution of the embodiment of the present application is to allocate initial permissions to the smart meter after identity authentication, so that the smart meter can encrypt and upload the collected initial power data based on the initial permissions; dynamically adjust the initial permissions to the target permissions according to the initial power data, and perform permission verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target permissions; if the smart meter is found to have a behavior beyond the scope of the target permissions according to the results of permission verification and behavior monitoring, the target permissions are adjusted according to the target power data; an audit log is generated according to the behavior data and permission change data of the smart meter, and when the smart meter is identified to have an abnormal behavior pattern according to the audit log, the smart meter is processed. The technical solution of the embodiment of the present application is to allocate initial permissions to the smart meter after identity authentication, and dynamically adjust permissions, verify permissions and monitor behaviors of the smart meter in the process of working based on the initial permissions, and process the smart meter when the smart meter is identified to have an abnormal behavior pattern according to the audit log, which can ensure the authenticity and legitimacy of the connected smart meter, avoid the abuse of permissions of the smart meter, effectively prevent data tampering and illegal intrusion, and ensure the safe and stable operation of the power system.

[0052] Embodiment 2

[0053] Figure 2 This is a flowchart of a method for processing smart meter permissions provided in the second embodiment of the present application. The present embodiment is optimized based on the above embodiment. For solutions not described in detail in the present embodiment, please refer to the above embodiment. Figure 2 As shown, the method includes:

[0054] S210. Allocate initial permissions for the smart meter that has passed the identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions.

[0055] In an embodiment of the present application, when the smart meter is connected to the background system, it is necessary to authenticate the smart meter and assign initial permissions to the smart meter when the smart meter passes the authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions. Optionally, the process of encrypting and uploading the collected initial power data based on the initial permissions by the smart meter is as follows: First, the smart meter collects initial power data at preset time intervals. Specifically, the smart meter collects initial power data such as power consumption value, voltage value, current value and power value at 15-minute time intervals. The power consumption value is accurate to 0.01 kWh, the voltage value is accurate to 0.1 volt, the current value is accurate to 0.01 ampere, and the power value is accurate to 0.001 kilowatt. During the data collection process, the three sampling values ​​are compared and the abnormal sampling points are eliminated to ensure that the collection error is within 0.5%. Secondly, the data plaintext of the initial power data is calculated by the SHA256 hash algorithm to obtain the first hash value; the millisecond-level data acquisition timestamp is obtained from the clock synchronizer. The clock synchronization adopts the network timing method, and the local clock is calibrated every 300 seconds to ensure that the clock deviation is always kept within 100 milliseconds; a 32-bit random number is generated by the encrypted random number generator. Then, the initial power data, the first hash value, the data acquisition timestamp, the random number and the data packet sequence number are assembled into a data packet to be encrypted according to the data packet specification, and the data packet size is limited to 4KB. Among them, the data packet sequence number starts to increase from 1, and is reset to zero after overflow. Finally, the certificate manager is used to obtain the RSA public key from the hardware security unit of the smart meter. After the encrypted data packet is compressed by the GZIP algorithm, the encrypted data packet is encrypted by the RSA public key to generate ciphertext data, and the MD5 algorithm is used to calculate the check value of the ciphertext data. According to the data packet specification, a transmission data packet containing ciphertext data and check value is generated, and the transmission data packet is sent through a TCP long connection. The timeout is set to 30 seconds, and disconnection reconnection and data packet retransmission are supported. The RSA public key is updated every 180 days. Through the above process, the transmission process of power data can be protected to prevent the power data from being tampered with.

[0056] Optionally, after allocating initial permissions to the smart meter that has passed identity authentication so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions, it also includes: decrypting the encrypted uploaded initial power data to obtain the data plaintext of the initial power data and a first hash value uploaded with the data plaintext; wherein the first hash value is calculated based on the data plaintext of the initial power data that is not encrypted and uploaded; calculating a second hash value of the data plaintext, and triggering a security alarm and recording it when it is determined that the initial power data has been tampered with based on the first hash value and the second hash value; wherein the second hash value is calculated based on the data plaintext of the initial power data obtained after decryption.

[0057] In an embodiment of the present application, an encrypted communication link can be established through the TLS1.3 protocol, and the RSA private key can be obtained from the hardware security unit of the smart meter through the encrypted communication link, and the transmission data packet can be decrypted through the RSA private key to obtain the data packet to be encrypted. Among them, the number of retries for decryption failure is limited to 3 times, and the failure reason is recorded when the decryption fails, including ciphertext length error, padding format error, key format error, etc. Afterwards, the data plaintext of the initial power data in the data packet to be encrypted can be calculated to obtain a second hash value, which is compared with the first hash value in the data packet to be encrypted to determine whether the initial power data has been tampered with, and a security alarm is triggered and recorded when the initial power data has been tampered with.

[0058] Optionally, the clock synchronizer can be used to verify the deviation value of the data acquisition timestamp, the MD5 algorithm can be used to recalculate and compare the check value, check whether the random number is repeated within 10 minutes, and verify whether the data packet is repeated and disordered by the data packet sequence number. If the deviation value exceeds 100 milliseconds, the check value does not match, the random number is repeated, or the data packet sequence number is abnormal, an abnormal event record including the event occurrence time, data packet identification, failure reason, and verification result is generated, and the disposal method is obtained from the alarm rule database according to the abnormal event record to handle the abnormal event. Among them, the abnormal event record is kept for 180 days, and the disposal method provides standard processing procedures for different types of events, including specific measures such as disconnection, re-authentication, access restriction, and manual confirmation. Abnormal events can be divided into three alarm levels: severe, warning, and prompt. The severe level includes key leakage, certificate invalidation, device intrusion, etc. The warning level includes communication interruption, data delay, verification failure, etc. The prompt level includes clock deviation, link instability, data retransmission, etc. Optionally, abnormal event records adopt a hierarchical storage strategy, where severe level events are written to disk immediately, warning level events are written in batches, and prompt level events are cached first and then written periodically.

[0059] S220, dynamically adjusting the initial authority to the target authority according to the initial power data, and performing authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority.

[0060] Optionally, the initial permission is dynamically adjusted to the target permission based on the initial power data, including: identifying the initial power data through a convolutional neural network, and adjusting the initial permission to the basic permission when abnormal data is identified; if no abnormal data is identified within a first preset time period, restoring the basic permission to the restricted permission; if no abnormal data is identified within a second preset time period, restoring the restricted permission to the full permission.

[0061] In an embodiment of the present application, the initial power data can be identified by a convolutional neural network, and the convolutional neural network extracts data features through a three-layer convolution structure. The first layer of the convolution structure identifies numerical mutations, the second layer of the convolution structure identifies trend changes, and the third layer of the convolution structure identifies periodic anomalies. When the initial power data is identified by the convolutional neural network, the abnormal data in the initial power data can be detected by a pre-set abnormal data detection standard, such as treating data with a data upload interval exceeding 300 seconds as abnormal data, treating data with a voltage value deviation exceeding 10% as abnormal data, and treating data with a data volume exceeding a preset threshold as abnormal data. When abnormal data is identified, the initial authority of the smart meter is lowered to the basic authority, and the authority recovery is gradually restored. When abnormal data is not identified within the first preset time length, the basic authority is restored to the restricted authority, and when early abnormal data is not identified within the second preset time length, the restricted authority is restored to the full authority. Optionally, in an emergency, the authority of the smart meter can be immediately restored to the full authority through an authorization code generated by the device serial number, timestamp, and key. It should be noted that the minimum interval for permission adjustment is 300 seconds, and permission change data is stored in the audit database.

[0062] Optionally, the initial authority of the smart meter is dynamically adjusted, and the data upload frequency in the initial authority is adjusted according to the peak and valley time periods of data upload. Exemplarily, the data upload interval during the peak period is 900 seconds, and the data upload interval during the valley period is 3600 seconds. Optionally, the division of the peak and valley time periods is adjusted according to whether it is a holiday. Exemplarily, the peak time period on weekdays includes 8:00 to 22:00, the valley time period includes 22:00 to 8:00 the next day, and the valley time period is the whole day on holidays.

[0063] S230: If it is found according to the results of authority verification and behavior monitoring that the smart meter has behaviors that exceed the scope of the target authority, the target authority is adjusted according to the target power data.

[0064] Optionally, if it is found according to the results of the permission verification and the behavior monitoring that the smart meter has behaved beyond the scope of the target authority, the target authority is adjusted according to the target power data, including: determining the behavior characteristics of the smart meter according to the target power data through a long short-term memory neural network, and calculating a behavior score according to the behavior characteristics; if the behavior score is lower than a first threshold corresponding to the target authority, restricting the upload frequency and upload content in the target authority; if the behavior score is higher than a second threshold corresponding to the target authority within a third preset time period, lifting the restrictions on the upload frequency and upload content of the target authority.

[0065] In the embodiment of the present application, the three control units of the input gate, the forget gate and the output gate in the long short-term memory neural network can be used to extract the data upload frequency, data volume and data type of the smart meter from the target power data, and compare with the preset standard to determine the score of each behavior feature, and calculate the behavior score of the smart meter according to the score of each behavior feature. Among them, the behavior score of the smart meter adopts a weighted calculation method, the weight of the data upload frequency is 0.4, the weight of the data volume is 0.3, the weight of the data type distribution is 0.3, and the score range is 0 to 100. When the behavior score of the smart meter is lower than the first threshold (such as 60 points) corresponding to the target authority, it is judged as abnormal. At this time, it is necessary to limit the upload frequency and upload content in the target authority, such as limiting the upload frequency to once every 300 seconds at most, and limiting the upload content to the device status data of the smart meter. The authority recovery adopts a progressive method. If the behavior score of the smart meter is higher than the second threshold (such as 80 points) corresponding to the target authority within the third preset time (such as 24 hours), the upload frequency and upload content of the target authority are lifted. Limitation. When adjusting permissions, an adjustment instruction containing the device ID of the smart meter, the permission adjustment content, and the effective time is generated and broadcasted through the message queue. It should be noted that the maximum number of permission adjustments is limited to 5 times within 24 hours, and the permission change data is stored in the audit database.

[0066] S240: Generate an audit log based on the behavior data and permission change data of the smart meter, and process the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log.

[0067] S250. When it is detected that the smart meter is in a remote control or parameter configuration scenario, multi-factor authentication is performed on the smart meter; wherein the multi-factor authentication includes at least one of identity authentication, biometric verification of the meter manager, and dynamic password verification.

[0068] The identity authentication is to authenticate the identity of the smart meter through a digital certificate. The specific process may refer to step S110 in the previous embodiment.

[0069] The biometric verification of the meter manager is to obtain the face image of the meter manager through an image collector, extract the feature vector of the face image, and calculate the similarity between the extracted feature vector and the preset feature vector in the face feature library. The image collector can use a binocular camera with a resolution of 1920*180 pixels and a frame rate of 30 frames per second. Optionally, while obtaining the face image of the meter manager through the image collector, liveness detection can be performed through an infrared sensor, such as identifying actions such as blinking and turning the head. The feature vector is represented by a 128-dimensional floating point number, and the similarity is calculated by calculating the Euclidean distance of the feature vector after normalization. When the similarity exceeds a preset threshold (such as 0.85), the biometric verification is passed.

[0070] Among them, dynamic password verification is to verify the one-time dynamic password generated by the dynamic password generator of the smart meter through the password verifier. The password seed of the dynamic password generator is protected by a hardware encryption module and updated every 1800 seconds. The dynamic password is generated based on a time series and updated every 30 seconds. The dynamic password verification is based on a time window mechanism, which allows a time deviation of 30 seconds before and after. If the window range is exceeded, the dynamic password verification fails.

[0071] In an embodiment of the present application, when it is detected that the smart meter is in a remote control or parameter configuration scenario, that is, when a remote control request or parameter configuration request sent by the smart meter is received, multi-factor authentication is performed on the smart meter. Specifically, an RSA key can be used to encrypt at least one of the digital certificate, facial data, and dynamic password to generate an authentication request data packet that complies with the ASN.1 format. The header of the authentication request data packet includes the request version, authentication type, and request time, etc., and the payload includes at least one of the digital certificate, facial data, and dynamic password. Then, the authentication request data packet is sent to the authentication result verifier for multi-factor authentication. Among them, the authentication request data packet is transmitted through an SSL encrypted channel, and the authentication request is automatically re-initiated if no response is received within 300 seconds.

[0072] Optionally, when the smart meter is in a remote control or parameter configuration scenario, the operation risk level is divided into high risk, medium risk and low risk. High-risk operations include rate parameter modification, meter clock adjustment and remote power-off control. Medium-risk operations include communication parameter configuration, metering parameter setting and rate period adjustment. Low-risk operations include data reading, status query and event record acquisition. Operations of different risk levels require different combinations of authentication factors. High-risk operations require three-factor verification at the same time, medium-risk operations require two-factor verification, and low-risk operations only require single-factor verification. Optionally, emergency operation processing uses an independent authentication channel, the validity period of the authorization token is shortened to 300 seconds, and the authority is revoked immediately after the operation is completed.

[0073] S260. Determine the legitimacy of remote control or parameter configuration of the smart meter based on the result of the multi-factor authentication.

[0074] In the embodiment of the present application, the result of the multi-factor authentication includes at least one of the identity authentication result, the biometric verification result, and the dynamic password verification result. If the multi-factor authentication is passed, a token containing the operation authority is generated and issued to the smart meter. If the multi-factor authentication fails, the detailed failure reason is recorded, such as certificate error, face mismatch, password verification failure, etc., and it is locked for 600 seconds after three consecutive failures. By introducing a multi-factor authentication mechanism, the security of smart meters in remote control or parameter configuration scenarios can be further improved.

[0075] Optionally, the method further includes: collecting hardware status data generated by the security chip monitor of the smart meter, and encrypting and protecting the identity key and storage unit of the smart meter when an abnormal operating mode is identified based on the hardware status data; judging whether there is an illegal intrusion at the hardware level based on the chip fingerprint characteristics of the security chip of the smart meter, and if so, initiating protection measures for the smart meter against the illegal intrusion.

[0076] Among them, the hardware status data includes voltage value, current value, temperature value and clock deviation value, etc. The voltage value adopts high-speed sampling with a sampling frequency of 1000 Hz to record the voltage effective value and waveform distortion rate. The current value adopts Hall sensor to collect in real time. The temperature value adopts thermistor to measure the chip surface temperature. The clock deviation value is collected by recording the crystal oscillator frequency deviation. Abnormal operation modes include voltage abnormality, current abnormality, over-temperature alarm, clock drift, power supply fluctuation, communication interruption, storage error and firmware tampering.

[0077] Among them, the chip fingerprint features of the security chip include chip serial number, register value, firmware checksum value, power supply characteristics and clock characteristics. Illegal intrusions at the hardware level include shell opening, circuit short circuit, probe probing and electromagnetic interference. Protective measures include locking the metering chip, locking the communication chip and isolation control. The locking process of the metering chip includes pausing the rate calculation, stopping the pulse counting and freezing the accumulated electric energy. The locking process of the communication chip includes shutting down the RF module, disabling the communication port and resetting the protocol stack. Isolation control achieves physical isolation by blowing the fuse.

[0078] In the embodiment of the present application, the hardware status data generated by the security chip monitor of the smart meter can be collected, and the hardware status data can be identified through a convolutional neural network to determine whether the smart meter has an abnormal operating mode, and when the abnormal operating mode is identified according to the hardware status data, the identity key and storage unit of the smart meter are encrypted and protected. After that, the chip fingerprint characteristics of the security chip of the smart meter can be obtained, and the intrusion detector can be used to determine whether there is an illegal intrusion at the hardware level according to the chip fingerprint characteristics. If so, the protection measures for the smart meter are initiated against the illegal intrusion. Optionally, the protection measures are implemented in a hierarchical manner: 1. Limit the power supply voltage to below 5 volts to prevent the normal operation of the chip, such as locking the metering chip and the communication chip through the function manager, so that the metering chip stops the accumulation of electricity and the calculation of the rate, and the communication chip disconnects the data upload link. 2. Execute data destruction, fill the memory with random data 7 times to achieve secure erasure. 3. Burn out the fuse on the key signal line to achieve physical isolation. 4. Clear all key materials, including master keys, session keys, and temporary keys, and back up key data (such as power indications, rate parameters, event records, etc.) to an independent secure memory. The secure memory adopts a write-once-read-many mechanism and cannot be modified after writing. After the protection measures are completed, the device only retains the basic protection functions. Restoring the factory settings will clear all configuration parameters, and the device needs to be reinitialized before it can be restored. Optionally, the protection measures also include generating alarm data and encrypting and uploading it to the background system when illegal intrusion at the hardware level is detected. Among them, the alarm data encryption uses the national secret SM4 algorithm with a key length of 128 bits. Using security chips to protect smart meters at the hardware level can effectively prevent illegal intrusions and ensure the safe and stable operation of the power system.

[0079] The technical solution of the embodiment of the present application is to allocate initial permissions to smart meters that have passed identity authentication, so that the smart meters encrypt and upload the collected initial power data based on the initial permissions; dynamically adjust the initial permissions to target permissions according to the initial power data, and perform permission verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target permissions; if it is found according to the results of permission verification and behavior monitoring that the smart meter has behaviors that exceed the scope of the target permissions, the target permissions are adjusted according to the target power data; an audit log is generated according to the behavior data and permission change data of the smart meter, and when an abnormal behavior pattern of the smart meter is identified according to the audit log, the smart meter is processed; when it is detected that the smart meter is in a remote control or parameter configuration scenario, multi-factor authentication is performed on the smart meter; wherein the multi-factor authentication includes at least one of identity authentication, biometric verification of the meter manager, and dynamic password verification; the legality of remote control or parameter configuration of the smart meter is determined according to the result of the multi-factor authentication. The technical solution of the embodiment of the present application is to dynamically adjust permissions, verify permissions, and monitor behavior of smart meters after initial permissions are assigned to smart meters that have passed identity authentication. When the smart meters work based on the initial permissions, the smart meters are processed when abnormal behavior patterns are identified in the audit logs. This can ensure the authenticity and legitimacy of connected smart meters, avoid abuse of permissions of smart meters, effectively prevent data tampering and illegal intrusion, and ensure the safe and stable operation of the power system. At the same time, by introducing a multi-factor authentication mechanism, the security of smart meters in remote control or parameter configuration scenarios can be further improved.

[0080] Embodiment 3

[0081] Figure 3 This is a schematic diagram of the structure of a smart meter authority processing device provided in Example 3 of the present application. Figure 3 As shown, the device comprises:

[0082] An initial authority allocation module 310 is used to allocate initial authority to a smart meter that has passed identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial authority;

[0083] A target authority verification module 320 is used to dynamically adjust the initial authority to a target authority according to the initial power data, and to perform authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority;

[0084] A target authority adjustment module 330 is configured to adjust the target authority according to the target power data if it is found that the smart meter has a behavior that exceeds the scope of the target authority according to the results of the authority verification and the behavior monitoring;

[0085] The smart meter processing module 340 is used to generate an audit log according to the behavior data and permission change data of the smart meter, and process the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log.

[0086] Optionally, the initial authority allocation module 310 includes:

[0087] An identity identification determination unit, used to perform identity authentication on a connected smart meter through a pre-issued digital certificate, and determine the identity of the smart meter that has passed the identity authentication;

[0088] An initial authority allocation unit is used to determine the device type and identity location of the smart meter according to the identity identifier, and determine the initial authority of the smart meter according to the device type, the identity location and a preset device database.

[0089] Optionally, the device further comprises:

[0090] A power data decryption module, used to decrypt the encrypted uploaded initial power data, and obtain the data plaintext of the initial power data and the first hash value uploaded together with the data plaintext; wherein the first hash value is calculated based on the data plaintext of the initial power data uploaded without encryption;

[0091] A power data verification module is used to calculate a second hash value of the data plaintext, and trigger a security alarm and record it when it is determined that the initial power data has been tampered with based on the first hash value and the second hash value; wherein the second hash value is calculated based on the data plaintext of the initial power data obtained after decryption.

[0092] Optionally, the target permissions include full permissions, limited permissions, and basic permissions; the target permission verification module 320 includes:

[0093] an initial authority adjustment unit, configured to identify the initial power data through a convolutional neural network, and adjust the initial authority to the basic authority when abnormal data is identified;

[0094] A basic authority adjustment unit, configured to restore the basic authority to the restricted authority if no abnormal data is identified within a first preset time period;

[0095] The restricted authority adjustment unit is used to restore the restricted authority to the full authority if no abnormal data is identified within a second preset time period.

[0096] Optionally, the target permission adjustment module 330 includes:

[0097] a behavior score calculation unit, configured to determine the behavior characteristics of the smart meter according to the target power data through a long short-term memory neural network, and calculate the behavior score according to the behavior characteristics;

[0098] a target permission restriction unit, configured to restrict the upload frequency and the upload content in the target permission if the behavior score is lower than a first threshold corresponding to the target permission;

[0099] The target permission release unit is used to release the restrictions on the upload frequency and upload content of the target permission if the behavior score is higher than the second threshold corresponding to the target permission within a third preset time period.

[0100] Optionally, the smart meter processing module 340 includes:

[0101] An audit log generating unit, configured to generate an audit log including operation time, identity identification, behavior description and authority change record according to the behavior data and authority change data of the smart meter;

[0102] The smart meter processing unit is used to perform real-time analysis on the audit log and, when an abnormal behavior pattern is identified according to the analysis result, process the associated events of the abnormal behavior pattern of the smart meter.

[0103] Optionally, the device further comprises:

[0104] A multi-factor authentication module, used to perform multi-factor authentication on the smart meter when it is detected that the smart meter is in a remote control or parameter configuration scenario; wherein the multi-factor authentication includes at least one of identity authentication, biometric verification of the meter manager, and dynamic password verification;

[0105] The legitimacy determination module is used to determine the legitimacy of remote control or parameter configuration of the smart meter based on the result of multi-factor authentication.

[0106] The smart meter permission processing device provided in the embodiment of the present application can execute the smart meter permission processing method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0107] Embodiment 4

[0108] Figure 4A schematic diagram of an electronic device 10 that can be used to implement an embodiment of the present application is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0109] like Figure 4 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0110] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0111] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a method for processing smart meter permissions.

[0112] In some embodiments, the method for processing smart meter permissions may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the method for processing smart meter permissions described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the method for processing smart meter permissions in any other appropriate manner (e.g., by means of firmware).

[0113] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0114] The computer programs for implementing the methods of the present application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor, the functions / operations specified in the flow charts and / or block diagrams are implemented. The computer programs may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0115] In the context of the present application, a computer readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device or equipment. A computer readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer readable storage medium may be a machine readable signal medium. A more specific example of a machine readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0116] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0117] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0118] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0119] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this application can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document is not limited here.

[0120] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of this application.

Claims

1. A method for processing smart meter permissions, characterized in that: The method comprises: Allocating initial permissions to the smart meter that has passed the identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial permissions; Dynamically adjusting the initial authority to a target authority according to the initial power data, and performing authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority; If it is found according to the results of the authority verification and the behavior monitoring that the smart meter has a behavior that exceeds the scope of the target authority, the target authority is adjusted according to the target power data; An audit log is generated according to the behavior data and the authority change data of the smart meter, and when an abnormal behavior pattern of the smart meter is identified according to the audit log, the smart meter is processed.

2. The method according to claim 1, characterized in that Assign initial permissions to the authenticated smart meter, including: Authenticate the connected smart meter through a pre-issued digital certificate and determine the identity of the authenticated smart meter; The device type and identity location of the smart meter are determined according to the identity identifier, and the initial authority of the smart meter is determined according to the device type, the identity location and a preset device database.

3. The method according to claim 1, characterized in that After allocating initial authority to the smart meter that has passed the identity authentication so that the smart meter encrypts and uploads the collected initial power data based on the initial authority, the method further includes: Decrypting the encrypted uploaded initial power data to obtain the data plaintext of the initial power data and a first hash value uploaded together with the data plaintext; wherein the first hash value is calculated based on the data plaintext of the initial power data uploaded without encryption; Calculate a second hash value of the data plaintext, and trigger a security alarm and record it when it is determined that the initial power data has been tampered with based on the first hash value and the second hash value; wherein the second hash value is calculated based on the data plaintext of the initial power data obtained after decryption.

4. The method according to claim 1, characterized in that: The target permissions include full permissions, restricted permissions, and basic permissions; Dynamically adjusting the initial authority to a target authority according to the initial power data includes: Identifying the initial power data through a convolutional neural network, and adjusting the initial authority to the basic authority when abnormal data is identified; If no abnormal data is identified within the first preset time period, restoring the basic authority to the restricted authority; If no abnormal data is identified within the second preset time period, the restricted authority is restored to the full authority.

5. The method according to claim 1, characterized in that If it is found according to the results of the authority verification and the behavior monitoring that the smart meter has a behavior that exceeds the scope of the target authority, the target authority is adjusted according to the target power data, including: Determining the behavior characteristics of the smart meter according to the target power data through a long short-term memory neural network, and calculating a behavior score according to the behavior characteristics; If the behavior score is lower than a first threshold corresponding to the target permission, restricting the upload frequency and upload content in the target permission; If the behavior score is higher than a second threshold corresponding to the target permission within a third preset time period, restrictions on the upload frequency and upload content of the target permission are lifted.

6. The method according to claim 1, characterized in that Generating an audit log according to the behavior data and the permission change data of the smart meter, and processing the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log, including: Generate an audit log including operation time, identity identification, behavior description and authority change record according to the behavior data and authority change data of the smart meter; The audit log is analyzed in real time, and when an abnormal behavior pattern is identified according to the analysis result, an event associated with the abnormal behavior pattern of the smart meter is processed.

7. The method according to claim 1, characterized in that The method further comprises: When it is detected that the smart meter is in a remote control or parameter configuration scenario, multi-factor authentication is performed on the smart meter; wherein the multi-factor authentication includes at least one of identity authentication, biometric verification of the meter manager, and dynamic password verification; The legitimacy of remotely controlling or configuring parameters of the smart meter is determined according to the result of the multi-factor authentication.

8. A smart meter authority processing device, characterized in that: The device comprises: An initial authority allocation module, used to allocate initial authority to a smart meter that has passed identity authentication, so that the smart meter encrypts and uploads the collected initial power data based on the initial authority; A target authority verification module, used to dynamically adjust the initial authority to a target authority according to the initial power data, and to perform authority verification and behavior monitoring on the smart meter when the smart meter uploads the target power data based on the target authority; A target authority adjustment module, configured to adjust the target authority according to the target power data if it is found that the smart meter has a behavior that exceeds the scope of the target authority according to the results of the authority verification and the behavior monitoring; The smart meter processing module is used to generate an audit log according to the behavior data and permission change data of the smart meter, and process the smart meter when an abnormal behavior pattern of the smart meter is identified according to the audit log.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the method for processing smart meter permissions according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for processing permissions of a smart meter according to any one of claims 1 to 7 when executed.

Images