Security protection method and system for power monitoring network

Abstract

The invention is suitable for the technical field of power data transmission protection, and provides a security protection method and system for a power monitoring network, and the method comprises the steps: carrying out the encryption packaging of various data uploaded by target power equipment, and obtaining a data encryption package of the target power equipment; and analyzing whether current abnormity information of the target power equipment exists in various data uploaded by the target power equipment or not. When various data of the target power equipment are collected, the real-time working state of the target power equipment can be acquired in real time, and when the data of the target power equipment is acquired by a subsequent data acquisition end, the real-time working state of the target power equipment can be acquired. Whether the data acquisition end is a unit with trust association or not can be discriminated by comparing the preset working state uploaded by the data acquisition end with the real-time working state of the target power equipment, so that the intelligent degree and the protection effect of the security protection method for the power monitoring network are improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of power data transmission protection, and in particular, relates to a safety protection method and system for a power monitoring network. Background Art

[0002] Nowadays, power monitoring networks play a vital role in the fields of ring main units, distribution cabinets, etc. By collecting various data of target power equipment in real time, they can effectively monitor and manage the operation status of the power system. However, with the continuous development of network technology, power monitoring networks are facing more and more security challenges, such as data tampering, unauthorized access, etc., which pose a threat to the stability and security of the power system.

[0003] In order to cope with these security challenges, although protective measures such as password verification or encryption technology are set in the current power data transmission process, these methods lack the accuracy of real-time verification and cannot intelligently and accurately identify the authenticity of the data acquisition end that wants to obtain power data. Therefore, power data transmission still has a large security risk. In this regard, the present invention provides a security protection method and system for a power monitoring network to solve the above technical problems. Summary of the invention

[0004] The purpose of the present invention is to provide a safety protection method and system for an electric power monitoring network, aiming to solve the problems raised in the background technology.

[0005] The present invention is implemented as follows: a safety protection method for an electric power monitoring network, the method comprising:

[0006] Encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment;

[0007] If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power are obtained;

[0008] The real-time operating power of the target power equipment is used as a verification key, and the verification key is bound to the target power equipment data encryption package;

[0009] After receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power;

[0010] It is determined whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal, and whether to approve the data acquisition request from the data acquisition terminal.

[0011] As a further limitation of the technical solution of the embodiment of the present invention, the steps of encrypting and packaging various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyzing whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment include:

[0012] Encrypt and package various data uploaded by the target power equipment to obtain a target power equipment data encryption package;

[0013] While encrypting and packaging, interpret each type of data uploaded by the target power equipment one by one;

[0014] During the interpretation process, various data uploaded by the target power equipment are analyzed to see whether there is any information about abnormal current of the target power equipment.

[0015] As a further limitation of the technical solution of the embodiment of the present invention, if it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the step of obtaining the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power includes:

[0016] If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment measured by the power test element is obtained;

[0017] The real-time operating current value of the target power equipment measured by the current test element is obtained.

[0018] As a further limitation of the technical solution of the embodiment of the present invention, the data acquisition end is preset with a power current comparison table, and the power current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers.

[0019] As a further limitation of the technical solution of the embodiment of the present invention, after obtaining a data acquisition request from a data acquisition end, sending a target power equipment data encryption package and a verification key to the data acquisition end, and after the data acquisition end receives the verification key, uploading a verification current value range corresponding to the real-time operating power includes:

[0020] After receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end;

[0021] After receiving the verification key, the data acquisition end retrieves the preset power and current comparison table, and searches the power and current comparison table for the standard operating current value range corresponding to the real-time operating power of the target power equipment;

[0022] The data acquisition terminal sets the found standard operating current value range as the verification current value range and uploads it.

[0023] As a further limitation of the technical solution of the embodiment of the present invention, the steps of judging whether the real-time operating current value is within the verification current value range provided by the data acquisition end, and deciding whether to approve the data acquisition request from the data acquisition end include:

[0024] Determine whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal;

[0025] If it is determined that the real-time operating current value is within the verification current value range provided by the data acquisition end, the target power equipment data encryption package is decrypted, and the decrypted various data of the target power equipment are sent to the data acquisition end;

[0026] If it is determined that the real-time operating current value is not within the verification current value range provided by the data acquisition end, the data acquisition request from the data acquisition end is rejected.

[0027] A safety protection system for an electric power monitoring network, the system comprising: a data packaging module, a value acquisition module, a verification key generation module, a verification current value range acquisition module and a verification current value range judgment module, wherein:

[0028] The data packaging module is used to encrypt and package various data uploaded by the target power equipment to obtain the target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in the various data uploaded by the target power equipment;

[0029] A value acquisition module, used to obtain the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power if it is determined that there is no information of abnormal current of the target power equipment in various data uploaded by the target power equipment;

[0030] A verification key generation module, used to use the real-time operating power of the target power equipment as a verification key, and bind the verification key to the target power equipment data encryption package;

[0031] The verification current value range acquisition module is used to send the target power equipment data encryption package and the verification key to the data acquisition end after receiving the data acquisition request from the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power;

[0032] The verification current value range judgment module is used to judge whether the real-time operating current value is within the verification current value range provided by the data acquisition end, and decide whether to agree to the data acquisition request from the data acquisition end.

[0033] As a further limitation of the technical solution of the embodiment of the present invention, the data packaging module specifically includes:

[0034] A data encryption package acquisition unit is used to encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package;

[0035] The data interpretation unit is used to interpret various data uploaded by the target power equipment one by one while encrypting and packaging;

[0036] The abnormal information judgment unit is used to analyze whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment during the interpretation process.

[0037] As a further limitation of the technical solution of the embodiment of the present invention, the value acquisition module specifically includes:

[0038] A real-time operating power acquisition unit, used to acquire the real-time operating power of the target power device measured by the power test element if it is determined that there is no information of abnormal current of the target power device in various data uploaded by the target power device;

[0039] The real-time operating current value acquisition unit is used to acquire the real-time operating current value of the target power equipment measured by the current test element.

[0040] As a further limitation of the technical solution of the embodiment of the present invention, the verification current value range acquisition module specifically includes:

[0041] The data acquisition terminal is preset with a power-current comparison table, and the power-current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers;

[0042] A data sending unit, configured to send the target power equipment data encryption package and the verification key to the data acquisition end after receiving a data acquisition request from the data acquisition end;

[0043] A standard operating current value range search unit is used for the data acquisition end to retrieve a preset power current comparison table after receiving the verification key, and to search the power current comparison table for a standard operating current value range corresponding to the real-time operating power of the target power equipment;

[0044] The verification current value range uploading unit is used for the data acquisition end to set the found standard operating current value range as the verification current value range and upload it.

[0045] Compared with the prior art, the present invention encrypts and packages various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyzes whether there is information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment; if it is determined that there is no information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment, the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power are obtained; the real-time operating power of the target power equipment is used as a verification key, and the verification key is bound to the target power equipment data encryption package; after obtaining a data acquisition request from a data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end together, and after receiving the verification key, the data acquisition end uploads a verification current value range corresponding to the real-time operating power; it is determined whether the real-time operating current value is within the verification current value range provided by the data acquisition end, and it is decided whether to agree to the data acquisition request from the data acquisition end. When collecting various types of data of the target power equipment, the real-time working status of the target power equipment can be obtained in real time, and when the data of the target power equipment is obtained at the subsequent data acquisition end, the preset working status uploaded by the data acquisition end can be compared with the real-time working status of the target power equipment to identify whether the data acquisition end is a unit with a trust association, thereby improving the intelligence level and protection effect of the security protection method of the power monitoring network. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 A flowchart of a method provided by an embodiment of the present invention;

[0047] Figure 2 A flow chart of analyzing whether there is information of abnormal current of the target power equipment in various types of data uploaded by the target power equipment in the method provided in the embodiment of the present invention;

[0048] Figure 3 A flow chart of obtaining the real-time operating power of a target electric power device and a real-time operating current value under the real-time operating power in the method provided by an embodiment of the present invention;

[0049] Figure 4 A flow chart of a current value range for uploading verification at a data acquisition end in a method provided in an embodiment of the present invention;

[0050] Figure 5 A flowchart of determining whether to approve a data acquisition request from a data acquisition terminal in a method provided by an embodiment of the present invention;

[0051] Figure 6 An application architecture diagram of a system provided by an embodiment of the present invention;

[0052] Figure 7 A structural block diagram of a data packaging module in a system provided by an embodiment of the present invention;

[0053] Figure 8 A structural block diagram of a value acquisition module in a system provided by an embodiment of the present invention;

[0054] Fig. 9 This is a structural block diagram of a verification current value range acquisition module in a system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0056] Figure 1 A flow chart of a method provided by an embodiment of the present invention is shown.

[0057] Specifically, a safety protection method for a power monitoring network comprises the following steps:

[0058] Step S100, encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment.

[0059] Specifically, Figure 2 A flow chart for analyzing whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment is shown.

[0060] The steps of encrypting and packaging various data uploaded by the target power equipment to obtain a target power equipment data encryption package and analyzing whether there is information on abnormal current of the target power equipment in various data uploaded by the target power equipment include:

[0061] Step S101, encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package;

[0062] Step S102, while encrypting and packaging, interpreting various types of data uploaded by the target power equipment one by one;

[0063] Step S103, during the interpretation process, analyzing whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment.

[0064] In the embodiment of the present invention, the target power equipment refers to a variety of power equipment, and the target power equipment may be a ring network cabinet, a distribution cabinet, a substation or a switch cabinet, etc. The various types of data uploaded by the target power equipment may be the self-test data of the target power equipment or the monitoring data of power system parameters such as current, voltage, frequency, etc., and the data of the above-mentioned target power equipment can be acquired by a mature acquisition system in the prior art. When the backend processing cloud collects various types of data uploaded by the target power equipment, it should count and package the data of multiple categories for the convenience of receiving by the data acquisition terminal;

[0065] It is understandable that when the current of the target power equipment is stable and in a normal working state, when the target power equipment reaches a certain operating power, the operating current value corresponding to the target power equipment is usually within a relatively fixed range;

[0066] Since the premise of the security protection method of the power monitoring network in the present application is that the current of the target power equipment is stable and in normal working condition, the various types of data uploaded by the target power equipment should be interpreted one by one while the encryption and packaging are processed in the cloud in the background. In the process of interpretation, it is analyzed whether there is any information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment. If there is any information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment, it means that the current of the target power equipment is not in normal working condition, that is, the security protection method of the power monitoring network in the present application is not adopted.

[0067] Furthermore, the safety protection method of the power monitoring network also includes the following steps:

[0068] Step S200: If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power are obtained.

[0069] Specifically, Figure 3 A flow chart for obtaining the real-time operating power of the target electrical equipment and the real-time operating current value under the real-time operating power is shown.

[0070] If it is determined that there is no information about abnormal current of the target power equipment in various data uploaded by the target power equipment, obtaining the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power specifically includes the following steps:

[0071] Step S201, if it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment measured by the power test component is obtained;

[0072] Step S202, obtaining a real-time operating current value of the target power equipment measured by a current testing element.

[0073] In the embodiment of the present invention, a power test element and a current test element are installed and configured in the target power equipment, and the power test element can test the overall operating power of the target power equipment, and the current test element can test the overall operating current value of the target power equipment;

[0074] In the background processing on the cloud, it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment. That is, when the target power equipment is in a stable current and normal working state, the real-time test data of the power test element and the current test element are obtained, and then the real-time operating power of the target power equipment and the real-time operating current value of the target power equipment when it is in the real-time operating power state are obtained.

[0075] Furthermore, the safety protection method of the power monitoring network also includes the following steps:

[0076] Step S300, using the real-time operating power of the target power device as a verification key, and binding the verification key to the target power device data encryption package;

[0077] The data acquisition terminal is preset with a power-current comparison table, and the power-current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers;

[0078] Step S400, after receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power.

[0079] Specifically, Figure 4 A flow chart showing the range of current values ​​uploaded by the data acquisition terminal for verification.

[0080] Among them, after obtaining the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end together. After the data acquisition end receives the verification key, uploading the verification current value range corresponding to the real-time operating power specifically includes the following steps:

[0081] Step S401, after obtaining a data acquisition request from a data acquisition terminal, sending a target power equipment data encryption package and a verification key to the data acquisition terminal;

[0082] Step S402: After receiving the verification key, the data acquisition terminal retrieves a preset power-current comparison table, and searches the power-current comparison table for a standard operating current value range corresponding to the real-time operating power of the target power equipment;

[0083] Step S403: the data acquisition terminal sets the found standard operating current value range as the verification current value range and uploads it.

[0084] In the embodiment of the present invention, the data acquisition end may be a unit that has established a trust interconnection relationship with the target power equipment. For example, assuming that the target power equipment is a ring main unit, the data acquisition end may be an intelligent processor of a regular maintenance department responsible for the ring main unit.

[0085] It is understandable that any data acquisition terminal that has established a trust interconnection relationship with the target power equipment should pre-store a preset power current comparison table, and limitedly, the power current comparison table is stored in the hardware device;

[0086] The preset power and current comparison table refers to a detailed record of multiple experiments on the working state of the target power equipment by the technicians of the target power equipment in this technical field, that is, the standard operating current value range under different preset operating powers when the target power equipment is working in a stable current and normal working state, and the recorded information is made into a comparison table, which is the power and current comparison table;

[0087] Although in the prior art, limiting the data acquisition end to units that have established a trusted interconnection relationship with the target power equipment can greatly narrow the access group of the target power equipment data, technical personnel in this field have found that there will still be unauthorized personnel who try to steal various types of data from the target power equipment by imitating the access IP of the unit that has established a trusted interconnection relationship with the target power equipment or using malicious software. This causes various types of data of the target power equipment to still be at a greater transmission risk. Therefore, during the entire data transmission process of the target power equipment, it is not only necessary to ensure that the data is in a secure communication channel, but it is even more important to identify whether the data acquisition end is a real unit with a trust association.

[0088] Furthermore, the safety protection method of the power monitoring network also includes the following steps:

[0089] Step S500, determining whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal, and deciding whether to approve the data acquisition request from the data acquisition terminal.

[0090] Specifically, Figure 5 A flow chart for determining whether to approve a data acquisition request from a data acquisition terminal is shown.

[0091] The process of judging whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal and deciding whether to approve the data acquisition request from the data acquisition terminal specifically includes the following steps:

[0092] Step S501, determining whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal;

[0093] Step S502, if it is determined that the real-time operating current value is within the verification current value range provided by the data acquisition terminal, the target power equipment data encryption package is decrypted, and the decrypted target power equipment data is sent to the data acquisition terminal;

[0094] Step S503: If it is determined that the real-time operating current value is not within the verification current value range provided by the data acquisition terminal, the data acquisition request from the data acquisition terminal is rejected.

[0095] In the embodiment of the present invention, after receiving the verification current value range from the data acquisition end, the background processing cloud end shall determine whether the real-time operating current value is within the verification current value range provided by the data acquisition end. If it is determined that the real-time operating current value is within the verification current value range provided by the data acquisition end, it means that the data acquisition end that sends the data acquisition request to the background processing cloud end is a unit with a trust association, and then the background processing cloud end can decrypt the encrypted data package of the target power equipment and send the decrypted various types of data of the target power equipment to the data acquisition end;

[0096] If it is determined that the real-time operating current value is not within the verification current value range provided by the data acquisition end, it means that the verification current value range provided does not come from the power current comparison table stored in the data acquisition end that has a trust relationship with the target power equipment, that is, the data acquisition end that sends the data acquisition request to the background processing cloud is not a unit with a trust relationship, and the background processing cloud should directly reject the data acquisition request from the data acquisition end.

[0097] Through the above technical solution, when collecting various types of data of the target power equipment, the real-time working status of the target power equipment (real-time operating power and real-time operating current value under the real-time operating power) can be obtained in real time, and when the data acquisition end obtains the data of the target power equipment in the subsequent data acquisition end, it is possible to compare the preset working status uploaded by the data acquisition end with the real-time working status of the target power equipment to identify whether the data acquisition end is a unit with a trust association, thereby improving the intelligence level and protection effect of the security protection method of the power monitoring network;

[0098] In addition, by combining the real-time operating power as the verification key and the power current comparison table as the verification basis, double verification is achieved to ensure the security and credibility of data acquisition. The real-time operating power of the target power equipment is used as the verification key to ensure the real-time and accuracy of the verification, effectively reducing the possibility of errors in the data acquisition process.

[0099] It is worth mentioning that the data acquisition end only needs to provide the standard operating current value range corresponding to the real-time operating power, without the need for a complicated verification process, which simplifies the verification process and improves the efficiency and reliability of the entire verification process.

[0100] Furthermore, Figure 6 The application architecture diagram of the system provided by the embodiment of the present invention is shown.

[0101] Among them, in another preferred embodiment provided by the present invention, a safety protection system for a power monitoring network includes:

[0102] The data packaging module 100 is used to encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment.

[0103] Specifically, Figure 7 It shows a structural block diagram of the data packaging module 100 in the system provided by the embodiment of the present invention.

[0104] Among them, in the preferred embodiment provided by the present invention, the data packaging module 100 specifically includes:

[0105] The data encryption package acquisition unit 101 is used to encrypt and package various types of data uploaded by the target power equipment to obtain the target power equipment data encryption package;

[0106] The data interpretation unit 102 is used to interpret various data uploaded by the target power equipment one by one while encrypting and packaging;

[0107] The abnormal information judgment unit 103 is used to analyze whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment during the interpretation process.

[0108] In the embodiment of the present invention, the target power equipment refers to a variety of power equipment, and the target power equipment may be a ring network cabinet, a distribution cabinet, a substation or a switch cabinet, etc. The various types of data uploaded by the target power equipment may be the self-test data of the target power equipment or the monitoring data of power system parameters such as current, voltage, frequency, etc., and the data of the above-mentioned target power equipment can be acquired by a mature acquisition system in the prior art. When collecting various types of data uploaded by the target power equipment, the data packaging module 100 shall count and package the data of multiple categories for the convenience of receiving by the data acquisition terminal;

[0109] It is understandable that when the current of the target power equipment is stable and in a normal working state, when the target power equipment reaches a certain operating power, the operating current value corresponding to the target power equipment is usually within a relatively fixed range;

[0110] Since the premise of the safety protection method of the power monitoring network in the present application is that the current of the target power equipment is stable and in normal working condition, the various types of data uploaded by the target power equipment should be interpreted one by one while the data packaging module 100 is encrypting and packaging. In the process of interpretation, it is analyzed whether there is any information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment. If there is any information about abnormal current of the target power equipment in the various types of data uploaded by the target power equipment, it means that the current of the target power equipment is not in normal working condition, that is, the safety protection method of the power monitoring network in the present application is not adopted.

[0111] Furthermore, the safety protection system of the power monitoring network also includes:

[0112] The value acquisition module 200 is used to acquire the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power if it is determined that there is no information of abnormal current of the target power equipment in various data uploaded by the target power equipment.

[0113] Specifically, Figure 8 The structure block diagram of the value acquisition module 200 in the system provided by the embodiment of the present invention is shown.

[0114] Among them, in the preferred implementation manner provided by the present invention, the value acquisition module 200 specifically includes:

[0115] The real-time operating power acquisition unit 201 is used to acquire the real-time operating power of the target power device measured by the power test element if it is determined that there is no information of abnormal current of the target power device in the various data uploaded by the target power device;

[0116] The real-time operating current value acquisition unit 202 is used to acquire the real-time operating current value of the target power equipment measured by the current testing element.

[0117] In the embodiment of the present invention, a power test element and a current test element are installed and configured in the target power equipment, and the power test element can test the overall operating power of the target power equipment, and the current test element can test the overall operating current value of the target power equipment;

[0118] When the data packaging module 100 determines that there is no information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment, that is, when the target power equipment is in a stable current and normal working state, the value acquisition module 200 obtains the real-time test data of the power test element and the current test element, and then obtains the real-time operating power of the target power equipment and the real-time operating current value of the target power equipment when it is in the real-time operating power state.

[0119] Furthermore, the safety protection system of the power monitoring network also includes:

[0120] A verification key generation module 300 is used to use the real-time operating power of the target power device as a verification key, and bind the verification key to the target power device data encryption package;

[0121] The verification current value range acquisition module 400 is used to send the target power equipment data encryption package and the verification key to the data acquisition end after receiving the data acquisition request from the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power;

[0122] The verification current value range judgment module 500 is used to judge whether the real-time operating current value is within the verification current value range provided by the data acquisition end, and decide whether to approve the data acquisition request from the data acquisition end.

[0123] Specifically, Fig. 9 The structure block diagram of the verification current value range acquisition module 400 in the system provided by the embodiment of the present invention is shown.

[0124] Among them, in the preferred embodiment provided by the present invention, the verification current value range acquisition module 400 specifically includes:

[0125] The data acquisition terminal is preset with a power-current comparison table, and the power-current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers;

[0126] The data sending unit 401 is used to send the target power equipment data encryption package and the verification key to the data acquisition terminal after receiving the data acquisition request from the data acquisition terminal;

[0127] The standard operating current value range search unit 402 is used for the data acquisition end to retrieve a preset power current comparison table after receiving the verification key, and to search the power current comparison table for the standard operating current value range corresponding to the real-time operating power of the target power equipment;

[0128] The verification current value range uploading unit 403 is used for the data acquisition end to set the found standard operating current value range as the verification current value range and upload it.

[0129] In the embodiment of the present invention, the data acquisition end may be a unit that has established a trust interconnection relationship with the target power equipment. For example, assuming that the target power equipment is a ring main unit, the data acquisition end may be an intelligent processor of a regular maintenance department responsible for the ring main unit.

[0130] It is understandable that any data acquisition terminal that has established a trust interconnection relationship with the target power equipment should pre-store a preset power current comparison table, and limitedly, the power current comparison table is stored in the hardware device;

[0131] The preset power and current comparison table refers to a detailed record of multiple experiments on the working state of the target power equipment by the technicians of the target power equipment in this technical field, that is, the standard operating current value range under different preset operating powers when the target power equipment is working in a stable current and normal working state, and the recorded information is made into a comparison table, which is the power and current comparison table;

[0132] Although in the prior art, limiting the data acquisition end to units that have established a trusted interconnection relationship with the target power equipment can greatly narrow the access group of the target power equipment data, technical personnel in this field have found that there will still be unauthorized personnel who try to steal various types of data from the target power equipment by imitating the access IP of the unit that has established a trusted interconnection relationship with the target power equipment or using malicious software. This causes various types of data of the target power equipment to still be at a greater transmission risk. Therefore, during the entire data transmission process of the target power equipment, it is not only necessary to ensure that the data is in a secure communication channel, but it is even more important to identify whether the data acquisition end is a real unit with a trust association.

[0133] After receiving the verification current value range from the data acquisition end, the verification current value range judgment module 500 shall judge whether the real-time operating current value is within the verification current value range provided by the data acquisition end. If it is determined that the real-time operating current value is within the verification current value range provided by the data acquisition end, it means that the data acquisition end that sends the data acquisition request to the background processing cloud is a unit with a trust association, and then the verification current value range judgment module 500 can decrypt the target power equipment data encryption package and send the decrypted target power equipment data to the data acquisition end.

[0134] If it is determined that the real-time operating current value is not within the verification current value range provided by the data acquisition end, it means that the provided verification current value range does not come from the power current comparison table stored in the data acquisition end that has a trust association with the target power equipment, that is, the data acquisition end that sends the data acquisition request to the background processing cloud is not a unit with a trust association, and then the verification current value range judgment module 500 should directly reject the data acquisition request from the data acquisition end.

[0135] Through the above technical solution, when collecting various types of data of the target power equipment, the real-time working status of the target power equipment (real-time operating power and real-time operating current value under the real-time operating power) can be obtained in real time, and when the data acquisition end obtains the data of the target power equipment in the subsequent data acquisition end, it is possible to compare the preset working status uploaded by the data acquisition end with the real-time working status of the target power equipment to identify whether the data acquisition end is a unit with a trust association, thereby improving the intelligence level and protection effect of the security protection method of the power monitoring network;

[0136] In addition, by combining the real-time operating power as the verification key and the power current comparison table as the verification basis, double verification is achieved to ensure the security and credibility of data acquisition. The real-time operating power of the target power equipment is used as the verification key to ensure the real-time and accuracy of the verification, effectively reducing the possibility of errors in the data acquisition process.

[0137] It is worth mentioning that the data acquisition end only needs to provide the standard operating current value range corresponding to the real-time operating power, without the need for a complicated verification process, which simplifies the verification process and improves the efficiency and reliability of the entire verification process.

[0138] It should be understood that, although each step in the flow chart of each embodiment of the present invention is shown in sequence according to the indication of the arrow, these steps are not necessarily performed in sequence according to the order indicated by the arrow. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be performed in other orders. Moreover, at least a portion of the steps in each embodiment may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps.

[0139] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0140] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0141] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

[0142] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A safety protection method for an electric power monitoring network, characterized in that: The method comprises: Encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment; If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power are obtained; The real-time operating power of the target power equipment is used as a verification key, and the verification key is bound to the target power equipment data encryption package; After receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power; It is determined whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal, and whether to approve the data acquisition request from the data acquisition terminal.

2. The safety protection method of the electric power monitoring network according to claim 1 is characterized in that: The steps of encrypting and packaging various data uploaded by the target power equipment to obtain a target power equipment data encryption package, and analyzing whether the various data uploaded by the target power equipment contain information on abnormal current of the target power equipment include: Encrypt and package various data uploaded by the target power equipment to obtain a target power equipment data encryption package; While encrypting and packaging, interpret each type of data uploaded by the target power equipment one by one; During the interpretation process, various data uploaded by the target power equipment are analyzed to see whether there is any information about abnormal current of the target power equipment.

3. The safety protection method of the electric power monitoring network according to claim 1 is characterized in that: If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the step of obtaining the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power includes: If it is determined that there is no information about abnormal current of the target power equipment in the various data uploaded by the target power equipment, the real-time operating power of the target power equipment measured by the power test element is obtained; The real-time operating current value of the target power equipment measured by the current test element is obtained.

4. The safety protection method for the electric power monitoring network according to claim 1, characterized in that: The data acquisition end is preset with a power-current comparison table, and the power-current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers.

5. The safety protection method for the electric power monitoring network according to claim 4 is characterized in that: After receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end. After the data acquisition end receives the verification key, the steps of uploading the verification current value range corresponding to the real-time operating power include: After receiving the data acquisition request from the data acquisition end, the target power equipment data encryption package and the verification key are sent to the data acquisition end; After receiving the verification key, the data acquisition end retrieves the preset power and current comparison table, and searches the power and current comparison table for the standard operating current value range corresponding to the real-time operating power of the target power equipment; The data acquisition terminal sets the found standard operating current value range as the verification current value range and uploads it.

6. The safety protection method for the electric power monitoring network according to claim 1, characterized in that: The steps of judging whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal and deciding whether to approve the data acquisition request from the data acquisition terminal include: Determine whether the real-time operating current value is within the verification current value range provided by the data acquisition terminal; If it is determined that the real-time operating current value is within the verification current value range provided by the data acquisition end, the target power equipment data encryption package is decrypted, and the decrypted various data of the target power equipment are sent to the data acquisition end; If it is determined that the real-time operating current value is not within the verification current value range provided by the data acquisition end, the data acquisition request from the data acquisition end is rejected.

7. A safety protection system for an electric power monitoring network, characterized in that: The system includes: a data packaging module, a value acquisition module, a verification key generation module, a verification current value range acquisition module and a verification current value range judgment module, wherein: The data packaging module is used to encrypt and package various data uploaded by the target power equipment to obtain the target power equipment data encryption package, and analyze whether there is information about abnormal current of the target power equipment in the various data uploaded by the target power equipment; A value acquisition module, used to obtain the real-time operating power of the target power equipment and the real-time operating current value under the real-time operating power if it is determined that there is no information of abnormal current of the target power equipment in various data uploaded by the target power equipment; A verification key generation module, used to use the real-time operating power of the target power equipment as a verification key, and bind the verification key to the target power equipment data encryption package; The verification current value range acquisition module is used to send the target power equipment data encryption package and the verification key to the data acquisition end after receiving the data acquisition request from the data acquisition end. After receiving the verification key, the data acquisition end uploads the verification current value range corresponding to the real-time operating power; The verification current value range judgment module is used to judge whether the real-time operating current value is within the verification current value range provided by the data acquisition end, and decide whether to agree to the data acquisition request from the data acquisition end.

8. The safety protection system for the electric power monitoring network according to claim 7, characterized in that: The data packaging module specifically includes: A data encryption package acquisition unit is used to encrypt and package various types of data uploaded by the target power equipment to obtain a target power equipment data encryption package; The data interpretation unit is used to interpret various data uploaded by the target power equipment one by one while encrypting and packaging; The abnormal information judgment unit is used to analyze whether there is information about abnormal current of the target power equipment in various types of data uploaded by the target power equipment during the interpretation process.

9. The safety protection system for the electric power monitoring network according to claim 8, characterized in that: The value acquisition module specifically includes: A real-time operating power acquisition unit, used to acquire the real-time operating power of the target power device measured by the power test element if it is determined that there is no information of abnormal current of the target power device in various data uploaded by the target power device; The real-time operating current value acquisition unit is used to acquire the real-time operating current value of the target power equipment measured by the current test element.

10. The safety protection system of the electric power monitoring network according to claim 9, characterized in that: The verification current value range acquisition module specifically includes: The data acquisition terminal is preset with a power-current comparison table, and the power-current comparison table stores the standard operating current value range of the target power equipment under different preset operating powers; A data sending unit, configured to send the target power equipment data encryption package and the verification key to the data acquisition end after receiving a data acquisition request from the data acquisition end; A standard operating current value range search unit is used for the data acquisition end to retrieve a preset power current comparison table after receiving the verification key, and to search the power current comparison table for a standard operating current value range corresponding to the real-time operating power of the target power equipment; The verification current value range uploading unit is used for the data acquisition end to set the found standard operating current value range as the verification current value range and upload it.

Images