5G + quantum power distribution network service data encryption transmission system and method

Abstract

The invention relates to the technical field of power distribution network services, and discloses a 5G + quantum power distribution network service data encryption transmission system and method. Comprising a head office quantum secret service platform, an offline key charging TF card, a 5G quantum CPE, a 5G base station, an operator private network, a private line switch, a firewall, a quantum security access gateway, a distribution automation terminal DTU / FTU, a distribution network security access gateway, an acquisition server and a distribution network automation master station. The quantum secret service platform of the head office comprises a quantum engine service platform, an exchange cipher machine ECM, a QKD random number generator, a quantum secret key charging machine and a quantum secret key generation terminal, efficient and safe transmission of distribution network service data is achieved by integrating the 5G communication technology and the quantum encryption technology, and in the data transmission process, the data transmission efficiency is improved. The unconditional security provided by the quantum encryption technology is utilized to effectively prevent the data from being illegally stolen or tampered, and the confidentiality and integrity of the distribution network service data are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of power distribution network services, and in particular to a 5G+ quantum power distribution network service data encryption transmission system and method. Background Art

[0002] Intelligent distributed feeder automation based on 5G communication is increasingly widely used in the "dual carbon" pilot demonstration area, but traditional industrial control security technology can hardly ensure its safe operation. On the one hand, the business information carried by 5G communication is exposed to the atmospheric environment and is extremely susceptible to eavesdropping and tampering compared to optical fiber channels; on the other hand, there is a technical gap in how to achieve the secure distribution of session keys between distribution terminals through wireless channels. With the in-depth advancement of smart grid construction, the transmission security of power distribution network business data has become increasingly prominent.

[0003] Traditional encrypted transmission methods are powerless in the face of increasingly complex network attacks and are unable to achieve efficient and secure transmission of distribution network business data. During the data transmission process, data can be easily illegally stolen or tampered with, resulting in the confidentiality and integrity of distribution network business data being unable to be guaranteed, and unable to meet the high security requirements of power distribution network business data.

[0004] To this end, we propose a 5G+ quantum power distribution network business data encryption transmission system and method. Summary of the invention

[0005] The present invention mainly solves the technical problems existing in the above-mentioned prior art and provides a 5G+ quantum power distribution network business data encryption transmission system and method.

[0006] In order to achieve the above-mentioned purpose, the present invention adopts the following technical scheme: a 5G+ quantum power distribution network business data encryption transmission system, including the head office quantum secret service platform, offline key charging TF card, 5G quantum CPE, 5G base station, operator private network, dedicated line switch, firewall, quantum security access gateway, distribution automation terminal DTU / FTU, distribution network security access gateway, collection server and distribution network automation master station. The head office quantum secret service platform includes a quantum engine service platform, an exchange cipher machine ECM, a QKD random number generator, a quantum key charging machine and a quantum key generation terminal. The head office quantum secret service platform and each component They are connected through a secure communication link to ensure the confidentiality and integrity of data transmission. As the core of the system, the quantum engine service platform is responsible for coordinating and managing the entire encrypted transmission process to ensure seamless connection and efficient operation of each link. The offline key charging TF card is used as a secure storage device to store the quantum key generated by the quantum key generation terminal. The offline key charging TF card has the characteristics of anti-tampering and anti-copying, ensuring the security of the key during storage and transmission. At the same time, the key on the offline key charging TF card can be securely charged to the 5G quantum CPE when needed, providing high-intensity encryption protection for distribution network service data.

[0007] Preferably, the 5G quantum CPE is a communication terminal that integrates quantum encryption technology. By establishing a connection with a 5G base station, the distribution network service data can be transmitted in the 5G network. The 5G quantum CPE has high-performance encryption processing capabilities and can perform quantum encryption and decryption on the transmitted data in real time to ensure the confidentiality and integrity of the data during transmission.

[0008] Preferably, the operator's private network and dedicated line switch provide a stable transmission channel for distribution network business data. Through the operator's private network, the distribution network business data can be efficiently and stably transmitted to the distribution network automation master station to achieve remote monitoring and control. The dedicated line switch is responsible for aggregating and forwarding data from different terminals to ensure timely transmission and processing of data.

[0009] Preferably, the firewall and the quantum security access gateway together constitute the security protection system of the system. The firewall prevents illegal access and data leakage through strict access control policies, and the quantum security access gateway uses quantum encryption technology to perform quantum encryption processing on the data entering the system to ensure the confidentiality and integrity of the data. At the same time, the quantum security access gateway can also authenticate and manage the rights of users entering the system to prevent unauthorized access and operation.

[0010] Preferably, the distribution automation terminal DTU / FTU is responsible for real-time collection of distribution network operation data and transmits the data to the distribution network automation master station through a secure communication link. The distribution automation terminal DTU / FTU also has a remote control function and can accept instructions from the distribution network automation master station to achieve remote control and operation of distribution network equipment.

[0011] Preferably, the distribution network security access gateway uses quantum encryption technology to encrypt data entering the main station to ensure the confidentiality and integrity of the data during transmission. At the same time, the distribution network security access gateway can also authenticate and manage permissions for users entering the main station to prevent unauthorized access and operation.

[0012] Preferably, the acquisition server is responsible for receiving real-time data from the distribution automation terminal DTU / FTU, and storing, processing and analyzing it. The acquisition server adopts high-performance hardware and software configuration, which can realize rapid processing and analysis of massive data, and provide strong data support for distribution network operation.

[0013] Preferably, the distribution network automation master station performs real-time monitoring and dispatch control on the distribution network operation according to the data provided by the acquisition server to ensure the stable and optimized operation of the distribution network. At the same time, the distribution network automation master station also has powerful data analysis and decision support functions, which can provide scientific decision-making basis for distribution network planning and operation.

[0014] A method of a 5G+ quantum power distribution network business data encryption transmission system, including the above-mentioned 5G+ quantum power distribution network business data encryption transmission system, specifically includes the following steps:

[0015] Step 1: The distribution automation terminal DTU / FTU sends service data to the locally connected 5G quantum CPE;

[0016] Step 2: The 5G quantum CPE calls the password module of the offline key charging TF card to use the SM4 national secret algorithm to encrypt the business data plaintext, and returns the business data ciphertext to the 5G quantum CPE, which sends it to the remote quantum security access gateway through the wireless network;

[0017] Step 3: After receiving the ciphertext of the business data, the quantum secure access gateway performs data parsing to obtain the session key information for decryption, and then calls the SM4 national secret algorithm to use the session key to decrypt the ciphertext of the business data;

[0018] Step 4: The quantum secure access gateway sends the business data in plain text to the business system of the distribution automation master station through the distribution network secure access gateway and the collection server.

[0019] Beneficial Effects

[0020] The present invention provides a 5G+ quantum power distribution network service data encryption transmission system and method. It has the following beneficial effects:

[0021] 1. This 5G+ quantum power distribution network business data encryption transmission system and method realizes the efficient and secure transmission of distribution network business data by integrating 5G communication technology and quantum encryption technology. During the data transmission process, the unconditional security provided by quantum encryption technology is used to effectively prevent the data from being illegally stolen or tampered with, thereby ensuring the confidentiality and integrity of the distribution network business data.

[0022] 2. This 5G+ quantum power distribution network business data encryption transmission system and method realizes the secure storage and transmission of quantum keys through the design of offline key charging TF card. The TF card has the characteristics of anti-tampering and anti-copying, which ensures the security of the key during storage and transmission. At the same time, the key is charged into the 5G quantum CPE in a secure way, providing high-intensity encryption protection for the distribution network business data.

[0023] 3. This 5G+ quantum power distribution network business data encryption transmission system and method realizes comprehensive protection of system data through a security protection system jointly composed of firewalls and quantum security access gateways. The firewall prevents illegal access and data leakage through strict access control strategies; and the quantum security access gateway uses quantum encryption technology to perform quantum encryption processing on data entering the system, further ensuring the confidentiality and integrity of the data.

[0024] 4. This 5G+ quantum power distribution network business data encryption transmission system and method realizes remote monitoring and control of distribution network equipment through the real-time data acquisition and remote control functions of the distribution automation terminal DTU / FTU. At the same time, the distribution network automation master station monitors and dispatches the distribution network operation in real time based on the data provided by the acquisition server, ensuring the stable and optimized operation of the distribution network.

[0025] 5. This 5G+ quantum power distribution network business data encryption transmission system and method, by setting up a quantum security access gateway, an exchange cipher machine ECM and a 5G quantum CPE, uses the quantum security access gateway, the exchange cipher machine ECM and the 5G quantum CPE as trusted computing devices, and under the protection of quantum keys, establishes a three-dimensional protection model for distribution terminal security access and a multi-level trusted network, forming a multi-level dynamic identity authentication system, avoiding identity theft, preventing forged access points from causing harm to the distribution system, and realizing trusted access from the terminal to the main station and unified authentication of multiple subjects. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 This is a device port connection diagram of the present invention. DETAILED DESCRIPTION

[0027] Embodiment 1: A 5G+ quantum power distribution network service data encryption transmission system, such as Figure 1 As shown, it includes 10, including the head office quantum secret service platform, offline key charging TF card, 5G quantum CPE, 5G base station, operator private network, dedicated line switch, firewall, quantum security access gateway, distribution automation terminal DTU / FTU, distribution network security access gateway, collection server and distribution network automation master station. The head office quantum secret service platform includes quantum engine service platform, exchange cipher machine ECM, QKD random number generator, quantum key charging machine and quantum key generation terminal. The head office quantum secret service platform is connected to each component through a secure communication link to ensure the confidentiality and integrity of data transmission. The quantum engine service platform, as the core of the system, is responsible for coordinating and managing the entire encrypted transmission process to ensure the confidentiality and integrity of each link. The offline key charging TF card is used as a secure storage device to store the quantum key generated by the quantum key generation terminal. The offline key charging TF card has the characteristics of anti-tampering and anti-copying, ensuring the security of the key during storage and transmission. At the same time, the key on the offline key charging TF card can be safely charged to the 5G quantum CPE when needed, providing high-intensity encryption protection for distribution network business data. By integrating 5G communication technology and quantum encryption technology, efficient and secure transmission of distribution network business data is achieved. During the data transmission process, the unconditional security provided by quantum encryption technology is used to effectively prevent the data from being illegally stolen or tampered with, ensuring the confidentiality and integrity of the distribution network business data.

[0028] Embodiment 2: Based on Embodiment 1, Figure 1 As shown in the figure, 5G quantum CPE is a communication terminal with integrated quantum encryption technology. By establishing a connection with a 5G base station, it realizes the transmission of distribution network service data in the 5G network. 5G quantum CPE has high-performance encryption processing capabilities and can perform quantum encryption and decryption on the transmitted data in real time to ensure the confidentiality and integrity of the data during transmission. The operator's private network and dedicated line switch provide a stable transmission channel for distribution network service data. Through the operator's private network, the distribution network service data can be efficiently and stably transmitted to the distribution network automation master station to achieve remote monitoring and control. The dedicated line switch is responsible for aggregating and forwarding data from different terminals to ensure timely transmission and processing of data. The design of offline key charging TF card realizes the secure storage and transmission of quantum keys. TF card has the characteristics of anti-tampering and anti-copying, which ensures the security of keys during storage and transmission. At the same time, the keys are charged into 5G quantum CPE in a secure way, providing high-intensity encryption protection for distribution network service data.

[0029] Embodiment 3: Based on Embodiment 1 and Embodiment 2, Figure 1As shown in the figure, the firewall and the quantum security access gateway together constitute the security protection system of the system. The firewall prevents illegal access and data leakage through strict access control strategies. The quantum security access gateway uses quantum encryption technology to perform quantum encryption processing on the data entering the system to ensure the confidentiality and integrity of the data. At the same time, the quantum security access gateway can also authenticate the identity and manage the rights of users entering the system to prevent unauthorized access and operation. The distribution automation terminal DTU / FTU is responsible for real-time collection of distribution network operation data and transmits the data to the distribution network automation master station through a secure communication link. The distribution automation terminal DTU / FTU also has a remote control function and can accept instructions from the distribution network automation master station to realize remote control and operation of the distribution network equipment. The security protection system jointly constituted by the firewall and the quantum security access gateway realizes comprehensive protection of system data. The firewall prevents illegal access and data leakage through strict access control strategies; and the quantum security access gateway uses quantum encryption technology to perform quantum encryption processing on the data entering the system, further ensuring the confidentiality and integrity of the data.

[0030] Embodiment 4: Based on Embodiment 1, Embodiment 2 and Embodiment 3, Figure 1 As shown in the figure, the distribution network security access gateway uses quantum encryption technology to encrypt the data entering the main station to ensure the confidentiality and integrity of the data during transmission. At the same time, the distribution network security access gateway can also authenticate and manage the rights of users entering the main station to prevent unauthorized access and operation. The acquisition server is responsible for receiving real-time data from the distribution automation terminal DTU / FTU, and storing, processing and analyzing it. The acquisition server adopts high-performance hardware and software configuration, which can realize the rapid processing and analysis of massive data, and provide strong data support for the operation of the distribution network. Through the real-time data acquisition and remote control functions of the distribution automation terminal DTU / FTU, remote monitoring and control of the distribution network equipment are realized. At the same time, the distribution network automation master station monitors and dispatches the distribution network operation in real time according to the data provided by the acquisition server, ensuring the stable and optimized operation of the distribution network.

[0031] Embodiment 5: Based on Embodiment 1, Embodiment 2, Embodiment 3 and Embodiment 4, Figure 1As shown, the distribution network automation master station monitors and dispatches the distribution network operation in real time according to the data provided by the acquisition server to ensure the stable and optimized operation of the distribution network. At the same time, the distribution network automation master station also has powerful data analysis and decision support functions, which can provide scientific decision-making basis for distribution network planning and operation. A method of 5G+ quantum power distribution network business data encryption transmission system, including the above-mentioned 5G+ quantum power distribution network business data encryption transmission system, specifically includes the following steps: Step 1: The distribution automation terminal DTU / FTU sends business data to the locally connected 5G quantum CPE; Step 2: The 5G quantum CPE calls the password module of the offline key charging TF card to use the SM4 national secret algorithm to encrypt the business data plaintext, and returns the business data ciphertext to the 5G quantum CPE, which is sent by the 5G quantum CPE to the remote quantum security through the wireless network. Access gateway; Step 3: After receiving the business data ciphertext, the quantum security access gateway performs data analysis to obtain the session key information for decryption, and then calls the SM4 national secret algorithm to use the session key to decrypt the business data ciphertext; Step 4: The quantum security access gateway sends the business data plaintext to the business system of the distribution automation master station through the distribution network security access gateway and the acquisition server. By setting up a quantum security access gateway, an exchange cipher machine ECM and a 5G quantum CPE, and using the quantum security access gateway, the exchange cipher machine ECM and the 5G quantum CPE as trusted computing devices, under the protection of quantum keys, a three-dimensional protection model for distribution terminal security access and a multi-level trusted network are established to form a multi-level dynamic identity authentication system to avoid identity theft, prevent forged access points from causing harm to the distribution system, and realize trusted access from the terminal to the master station and unified authentication of multiple subjects.

[0032] The working principle of the present invention is as follows: Based on the quantum protection key distribution of the head office quantum secret service platform, a quantum security access gateway is deployed in the security access area of ​​the branch distribution network automation master station, and a 5G quantum CPE is deployed in the branch distribution network automation master station. A quantum encryption tunnel is established between the 5G quantum CPE and the quantum security access gateway to realize the encrypted transmission of power distribution network service data. A set of 5G quantum CPE is newly deployed at each site, and an offline key charging TF card and a power 5G private network SIM card are inserted. The Ethernet interface is used for the downlink to interconnect with the distribution network automation master station, and the uplink access is made to the power 5G wireless private network to realize the quantum encryption 5G private network access of the distribution network service. A new set of quantum security access gateways and firewalls are deployed in the security access area of ​​the automation master station to achieve interconnection between the quantum security access gateway and the operator's 5G private network, the quantum security access gateway and the head office's quantum secret service platform, and the quantum security access gateway and the distribution network automation master station; for the branch's 5G quantum large-scale application, based on the quantum protection key distribution of the head office's quantum secret service platform, the quantum security access gateway needs to be interconnected with the head office's quantum secret service platform, that is, it is necessary to open a communication link from the head office's quantum secret service platform to the branch's distribution network automation master station quantum security access gateway, and realize the online distribution of quantum keys from the head office's quantum secret service platform to the branch's business site.

[0033] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A 5G+ quantum power distribution network service data encryption transmission system, characterized in that: It includes the head office quantum secret service platform, offline key charging TF card, 5G quantum CPE, 5G base station, operator private network, dedicated line switch, firewall, quantum security access gateway, distribution automation terminal DTU / FTU, distribution network security access gateway, collection server and distribution network automation master station. The head office quantum secret service platform includes quantum engine service platform, exchange cipher machine ECM, QKD random number generator, quantum key charging machine and quantum key generation terminal. The head office quantum secret service platform is connected to each component through a secure communication link to ensure the confidentiality and integrity of data transmission. As the core of the system, the quantum engine service platform is responsible for coordinating and managing the entire encrypted transmission process to ensure seamless connection and efficient operation of each link. The offline key charging TF card is used as a secure storage device to store the quantum key generated by the quantum key generation terminal. The offline key charging TF card has the characteristics of anti-tampering and anti-copying to ensure the security of the key during storage and transmission. At the same time, the key on the offline key charging TF card can be safely charged to the 5G quantum CPE when needed, providing high-intensity encryption protection for distribution network business data.

2. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The 5G quantum CPE is a communication terminal that integrates quantum encryption technology. It establishes a connection with a 5G base station to realize the transmission of distribution network service data in the 5G network. The 5G quantum CPE has high-performance encryption processing capabilities and can perform quantum encryption and decryption on the transmitted data in real time to ensure the confidentiality and integrity of the data during the transmission process.

3. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The operator's private network and dedicated line switch provide a stable transmission channel for distribution network business data. Through the operator's private network, distribution network business data can be efficiently and stably transmitted to the distribution network automation master station to achieve remote monitoring and control. The dedicated line switch is responsible for aggregating and forwarding data from different terminals to ensure timely transmission and processing of data.

4. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The firewall and quantum security access gateway together constitute the security protection system of the system. The firewall prevents illegal access and data leakage through strict access control strategies. The quantum security access gateway uses quantum encryption technology to perform quantum encryption processing on data entering the system to ensure the confidentiality and integrity of the data. At the same time, the quantum security access gateway can also authenticate and manage permissions for users entering the system to prevent unauthorized access and operation.

5. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The distribution automation terminal DTU / FTU is responsible for collecting distribution network operation data in real time and transmitting the data to the distribution network automation master station through a secure communication link. The distribution automation terminal DTU / FTU also has a remote control function and can accept instructions from the distribution network automation master station to realize remote control and operation of distribution network equipment.

6. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The distribution network security access gateway uses quantum encryption technology to encrypt data entering the main station to ensure the confidentiality and integrity of the data during transmission. At the same time, the distribution network security access gateway can also authenticate and manage permissions for users entering the main station to prevent unauthorized access and operation.

7. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The acquisition server is responsible for receiving real-time data from the distribution automation terminal DTU / FTU, and storing, processing and analyzing it. The acquisition server adopts high-performance hardware and software configuration, which can realize rapid processing and analysis of massive data, and provide strong data support for distribution network operation.

8. The 5G+ quantum power distribution network service data encryption transmission system according to claim 1 is characterized in that: The distribution network automation master station performs real-time monitoring and dispatch control on the distribution network operation based on the data provided by the acquisition server to ensure the stable and optimized operation of the distribution network. At the same time, the distribution network automation master station also has powerful data analysis and decision support functions, which can provide scientific decision-making basis for distribution network planning and operation.

9. A method for 5G+ quantum power distribution network business data encryption transmission system, characterized in that: The 5G+ quantum power distribution network service data encryption transmission system comprising any one of claims 1 to 8 specifically comprises the following steps: Step 1: The distribution automation terminal DTU / FTU sends service data to the locally connected 5G quantum CPE; Step 2: The 5G quantum CPE calls the password module of the offline key charging TF card to use the SM4 national secret algorithm to encrypt the business data plaintext, and returns the business data ciphertext to the 5G quantum CPE, which sends it to the remote quantum security access gateway through the wireless network; Step 3: After receiving the ciphertext of the business data, the quantum secure access gateway performs data parsing to obtain the session key information for decryption, and then calls the SM4 national secret algorithm to use the session key to decrypt the ciphertext of the business data; Step 4: The quantum secure access gateway sends the business data in plain text to the business system of the distribution automation master station through the distribution network secure access gateway and the collection server.

Images