Power marketing data security protection method and system based on encryption technology

Abstract

The invention relates to the technical field of data security, and discloses an electric power marketing data security protection method and system based on an encryption technology, and the method comprises the steps: building an electric power marketing data collection module, an electric power marketing data calculation module, an electric power marketing data analysis module, an electric power marketing data integration improvement module and an electric power marketing security improvement module; the power marketing data acquisition module acquires data, and the power marketing data calculation module calculates a key storage risk score Qx, a data leakage risk index Qy and an abnormal behavior detection risk index Qz according to the acquired data, and performs distributed storage on keys, data and behavior characteristics through a distributed storage formula. The electric power marketing data analysis module assists data security risk assessment and early warning according to a calculation result, the electric power marketing data integration promotion module solves the security problem in the data storage and transmission process according to an analysis result, and the electric power marketing security promotion module solves the security problem in the data access and use process according to the analysis result.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and particularly to a method and system for protecting the security of power marketing data based on encryption technology. Background Art

[0002] In today's digital age, the security of power marketing data is of utmost importance. However, the existing methods and systems for protecting the security of power marketing data based on encryption technology still face many challenges. On the one hand, there are risks in key storage. The key must be stored securely to prevent unauthorized access, but the place where the key is stored is often an easy target for attackers. For example, if the key is stored in a database, once the database is breached, the key will be leaked, leading to the failure of the entire encryption system. Even when using specialized key storage devices such as Hardware Security Modules (HSMs), it is difficult to completely avoid the risks of physical damage, loss, or being cracked. On the other hand, integrating with existing systems is extremely difficult. Power marketing systems are usually complex information systems, including multiple subsystems and modules. When integrating security protection methods based on encryption technology into existing systems, compatibility problems often occur. Old systems may not support new encryption algorithms or key management methods, which requires a large amount of modification and upgrading work, not only increasing costs but also potentially introducing new errors and security vulnerabilities. These deficiencies indicate that there is an urgent need for a more efficient, secure, and well-integrated power marketing data security protection method and system with existing systems to address increasingly complex security threats and ensure the confidentiality, integrity, and availability of power marketing data. Summary of the Invention

[0003] (1) Technical Problems to be Solved

[0004] In view of the deficiencies of the prior art, the present invention provides a method and system for protecting the security of power marketing data based on encryption technology, which has the advantages of multiple distributed key storage and adaptive integration and adaptation, and solves the problems of high key storage risk and difficulty in integrating with existing systems.

[0005] (2) Technical Solutions

[0006] To achieve the above object, the present invention provides the following technical solutions: A method for protecting the security of power marketing data based on encryption technology includes the following steps:

[0007] Step 1: Establish a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration and enhancement module, and a power marketing security enhancement module;

[0008] Step 2: The power marketing data collection module obtains collection data through the power consumption information collection system of power users, the power marketing business system, the power supply service command platform, and external relevant data sources;

[0009] Step 3: The power marketing data calculation module calculates the key storage risk score Qx, the data leakage risk index Qy, and the abnormal behavior detection risk index Qz based on the collected data, and performs distributed storage on the keys, data, and behavior characteristics through the distributed storage formula;

[0010] Step 4: The power marketing data analysis module assists in data security risk assessment and early warning based on the calculation results;

[0011] Step 5: The power marketing data integration and improvement module solves the security problems in the data storage and transmission processes based on the analysis results, and improves the encryption strength and storage efficiency of the data;

[0012] Step 6: The power marketing security improvement module solves the security problems in the data access and usage processes based on the analysis results.

[0013] A power marketing data security protection system based on encryption technology, including a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration and improvement module, and a power marketing security improvement module.

[0014] Preferably, the power marketing data collection module includes an electricity consumption data unit, a power marketing business data unit, a power supply service data unit, and an external relevant data unit;

[0015] The electricity consumption data unit obtains electricity consumption data through the electricity consumption information collection system, and the electricity consumption data unit is used to count the total number of sensitive data in the electricity consumption data, the number of failures of the storage device within a unit time, the number of attempts to access the key without authorization, and the average data transmission delay time between the key data storage location and the data usage end;

[0016] The power marketing business data unit obtains power marketing business data through the power marketing business system, and the power marketing business data unit is used to count the total number of sensitive data in the power marketing business data;

[0017] The power supply service data unit obtains power supply service data through the power supply service command platform, and the power supply service data unit is used to count the total number of sensitive data in the power supply service data;

[0018] The external relevant data unit obtains external relevant data through external relevant data sources, and the external relevant data unit is used to count the total number of sensitive data in the external relevant data.

[0019] Preferably, the power marketing data calculation module includes a key storage unit, a data leakage unit, an abnormal behavior detection unit, and a distributed storage unit.

[0020] Preferably, the key storage unit calculates a key storage risk score Qx, and its calculation formula is:

[0021]

[0022] In the formula, Qx represents the key storage risk score, N g represents the number of failures of the storage device within a unit time, N represents the total number of times the storage device should operate normally during this time period, W e represents the number of attempts to access the key without authorization, W represents the total number of accesses, represents the average data transmission delay time between the key data storage location and the data usage end, T represents the reasonable transmission delay time of the industry standard, represents the failure occurrence score of the storage device, represents the access permission violation score, represents the data transmission delay degree score, and A1, A2, and A3 respectively represent the weighted coefficients of the failure occurrence score, access permission violation score, and data transmission delay degree score of the storage device in the key storage risk score.

[0023] Preferably, the data leakage unit calculates a data leakage risk index Qy, and its calculation formula is:

[0024]

[0025] In the formula, Qy represents the data leakage risk index, S z represents the total quantity of sensitive data in power consumption data, power marketing business data, power supply service data, and external related data, S represents the total quantity of the collected data, represents the proportion of sensitive data in the data set, B1 represents the comprehensive weight of the sensitivity factor, M z represents the number of security vulnerabilities detected during data transmission or storage, M represents the total number of security detections of the data transmission and storage environment, represents the frequency of occurrence of security vulnerabilities, B2 represents the comprehensive weight of the security vulnerability severity factor, R z represents the number of times the encryption algorithm is cracked or suspected of being cracked during data transmission, R represents the total number of data transmissions, represents the security effectiveness of the encryption algorithm during data transmission, B3 represents the comprehensive weight of the encryption method factor.

[0026] Preferably, the abnormal behavior detection unit calculates an abnormal behavior detection risk index Qz, and its calculation formula is:

[0027] Qz = c1*p + c2*d + c3*j + c4*h

[0028] In the formula, Qz represents the risk index of abnormal behavior detection, p represents the severity of abnormal behavior, d represents the frequency of abnormal behavior, j represents the duration of abnormal behavior, h represents the scope of spread of abnormal behavior, and c1, c2, c3, and c4 respectively represent the weight coefficients of the above four factors.

[0029] Preferably, the distributed storage unit calculates the total storage capacity Lr of the distributed storage unit according to the distributed storage formula, and its calculation formula is:

[0030]

[0031] In the formula, Lr represents the total storage capacity of the distributed storage unit, μ represents the number of nodes in the distributed storage system, K i represents the storage weight of the i-th node, and O i represents the actual storage capacity of the i-th node.

[0032] Preferably, the power marketing data analysis module assists the system in data security risk assessment and early warning according to the key storage risk score Qx, the data leakage risk index Qy, the abnormal behavior detection risk index Qz, and the distributed storage formula.

[0033] Preferably, the power marketing data integration and improvement module solves the security problems in the process of data storage and transmission according to the analysis results of the power marketing data analysis module, and improves the encryption intensity and storage efficiency of the data;

[0034] The power marketing security improvement module solves the security problems in the process of data access and use according to the analysis results of the power marketing data analysis module, and takes measures to improve the access control and permission management capabilities of the system.

[0035] Compared with the prior art, the present invention provides a power marketing data security protection method and system based on encryption technology, and has the following beneficial effects:

[0036] 1. The present invention calculates the data leakage risk index Qy to comprehensively evaluate the data leakage risk status of power marketing data during transmission and storage. When the power marketing data analysis module analyzes that the data leakage risk index Qy is high, it indicates that the risk of data leakage is at a relatively high level, which will cause serious damage to the information security and interests of power enterprises and power users. At the same time, the power marketing security improvement module will adjust the user access rights and real-time security monitoring system according to the risk assessment results to timely discover and repair newly emerging security vulnerabilities, and at the same time use virtual private network (VPN), secure socket layer (SSL), etc. to ensure the confidentiality and integrity of data during transmission.

[0037] 2. The present invention calculates the abnormal behavior detection risk index Qz to evaluate the potential risks brought by various abnormal behaviors in the power marketing process. When the power marketing data analysis module analyzes that the abnormal behavior detection risk index Qz is high, it indicates that there are relatively serious security hazards or business risks in the current system. The power marketing security improvement module will re-evaluate and adjust the access permissions of users and the system. For user accounts or system components involved in abnormal behaviors, the permissions will be restricted or revoked according to the risk assessment results, thereby reducing the detection risk of abnormal behaviors.

[0038] 3. The present invention calculates the total storage capacity Lr of the distributed storage unit to comprehensively understand the overall situation of data storage and resource utilization in the distributed storage system. When the power marketing data analysis module analyzes that the total storage capacity Lr of the distributed storage unit is high, it indicates that the storage resources of the system are tense. The power marketing data integration improvement module will automatically re-allocate and migrate the data according to the storage weights and actual storage capacities of each node, and migrate the data that occupies a large storage space and has a low usage frequency from the nodes with tight storage to the nodes with relatively abundant storage resources to achieve the balance of storage load, or dynamically adjust the storage quotas of the nodes, and reasonably allocate the storage upper limits of each node according to the business requirements and data access patterns, thereby avoiding affecting the performance of the entire system due to excessive storage use of individual nodes. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 It is the system flowchart of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0040] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0041] Please refer to Figure 1 , a power marketing data security protection method based on encryption technology, including the following steps:

[0042] Step 1: Establish a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration improvement module, and a power marketing security improvement module;

[0043] Step 2: The power marketing data collection module obtains the collection data through the power user's electricity consumption information collection system, the power marketing business system, the power supply service command platform, and external relevant data sources;

[0044] Step 3: The power marketing data calculation module calculates the key storage risk score Qx, the data leakage risk index Qy, and the abnormal behavior detection risk index Qz based on the collected data, and performs distributed storage on the keys, data, and behavior characteristics through the distributed storage formula;

[0045] Step 4: The power marketing data analysis module assists in data security risk assessment and early warning based on the calculation results to promptly discover potential security hazards;

[0046] Step 5: The power marketing data integration and enhancement module solves the security problems in the data storage and transmission processes based on the analysis results, and improves the data encryption intensity and storage efficiency;

[0047] Step 6: The power marketing security enhancement module solves the security problems in the data access and usage processes based on the analysis results, and takes measures to improve the system's access control and permission management capabilities.

[0048] A power marketing data security protection system based on encryption technology includes a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration and enhancement module, and a power marketing security enhancement module.

[0049] The power marketing data collection module includes an electricity consumption data unit, a power marketing business data unit, a power supply service data unit, and an external related data unit;

[0050] The electricity consumption data unit obtains electricity consumption data through the electricity consumption information collection system. The electricity consumption data unit is used to count the total number of sensitive data in the electricity consumption data, the number of failures of the storage device within a unit time, the number of attempts to access the key without authorization, and the average data transmission delay time between the key data storage location and the data usage end;

[0051] The power marketing business data unit obtains power marketing business data through the power marketing business system. The power marketing business data unit is used to count the total number of sensitive data in the power marketing business data;

[0052] The power supply service data unit obtains power supply service data through the power supply service command platform. The power supply service data unit is used to count the total number of sensitive data in the power supply service data;

[0053] The external related data unit obtains external related data through external related data sources. The external related data unit is used to count the total number of sensitive data in the external related data.

[0054] The power marketing data calculation module includes a key storage unit, a data leakage unit, an abnormal behavior detection unit, and a distributed storage unit.

[0055] The key storage unit calculates the key storage risk score Qx, and its calculation formula is:

[0056]

[0057] In the formula, Qx represents the key storage risk score, N g represents the number of failures of the storage device within a unit time, N represents the total number of times the storage device should operate normally during this time period, W e represents the number of attempts to access the key without authorization, W represents the total number of accesses, represents the average data transmission delay time between the key data storage location and the data usage end, T represents the reasonable transmission delay time of the industry standard, represents the failure occurrence score of the storage device, represents the access permission violation score, represents the data transmission delay degree score, and A1, A2, and A3 respectively represent the weighted coefficients of the failure occurrence score, access permission violation score, and data transmission delay degree score of the storage device in the key storage risk score.

[0058] The advantages are as follows: By calculating the key storage risk score Qx, a quantitative index for comprehensively evaluating the security status of power marketing data can be provided for the power marketing data analysis module. When this score is high, it indicates that the data leakage risk index also shows an upward trend. The module can suspect the degree of threat posed by key storage problems to the overall data security according to the numerical range of the key storage risk score Qx, and then automatically check the reasons, so as to accurately locate potential security hazards.

[0059] When the power marketing data analysis module analyzes that the key storage risk score Qx is high, the power marketing data integration and improvement module will automatically upgrade the storage device to improve the redundancy of the system, ensure the security of key storage at the hardware level, and then improve the overall data storage security; in the key storage risk score Qx formula, when it shows that the data transmission delay risk is large and the proportion of sensitive data is high, the module will adopt a more efficient, secure and latency-reducing encryption algorithm.

[0060] The data leakage unit calculates the data leakage risk index Qy, and its calculation formula is:

[0061]

[0062] In the formula, Qy represents the data leakage risk index, S z represents the total number of sensitive data in power consumption data, power marketing business data, power supply service data and external related data, S represents the total number of collected data, Indicates the proportion of sensitive data in the dataset. B1 represents the comprehensive weight of the sensitivity factors, M z Indicates the number of security vulnerabilities detected during data transmission or storage. M represents the total number of security detections in the data transmission and storage environment. Indicates the frequency of security vulnerabilities. B2 represents the comprehensive weight of the security vulnerability severity factor, R z Indicates the number of times the encryption algorithm is cracked or suspected to be cracked during data transmission. R represents the total number of data transmissions. Indicates the security effectiveness of the encryption algorithm during data transmission. B3 represents the comprehensive weight of the encryption method factor.

[0063] The advantages are as follows: By calculating the data leakage risk index Qy, it is used to comprehensively evaluate the data leakage risk status of power marketing data during transmission and storage. When the power marketing data analysis module analyzes that the data leakage risk index Qy is high, it indicates that the risk of data leakage is at a relatively high level, which will cause serious damage to the information security and interests of power enterprises and power users. At the same time, the power marketing security improvement module will adjust the user access rights and real-time security monitoring system according to the risk assessment results to timely detect and repair newly emerging security vulnerabilities. At the same time, virtual private network (VPN), secure socket layer (SSL), etc. are adopted to ensure the confidentiality and integrity of data during transmission.

[0064] The abnormal behavior detection unit calculates the abnormal behavior detection risk index Qz, and its calculation formula is:

[0065] Qz = c1 * p + c2 * d + c3 * j + c4 * h

[0066] In the formula, Qz represents the abnormal behavior detection risk index, p represents the severity of the abnormal behavior, which is quantitatively evaluated according to the type and scope of influence of the abnormal behavior, d represents the frequency of the abnormal behavior, that is, the number of abnormal behaviors occurring per unit time, j represents the duration of the abnormal behavior, and continuous abnormal behaviors may mean greater security risks. h represents the propagation scope of the abnormal behavior. If the abnormal behavior involves multiple users or system components, the risk index is higher. c1, c2, c3, and c4 respectively represent the weight coefficients of the above four factors, which are used to adjust the contribution degree of each factor in the risk index calculation.

[0067] The advantages are as follows: By calculating the abnormal behavior detection risk index Qz, it is used to evaluate the potential risks brought by various abnormal behaviors in the power marketing process. When the power marketing data analysis module analyzes that the abnormal behavior detection risk index Qz is high, it indicates that there are relatively serious security hazards or business risks in the current system. The power marketing security improvement module will re-evaluate and adjust the access rights of users and the system. For user accounts or system components involved in abnormal behaviors, the access rights will be restricted or revoked according to the risk assessment results, thereby reducing the detection risk of abnormal behaviors.

[0068] The distributed storage unit calculates the total storage capacity Lr of the distributed storage unit according to the distributed storage formula, and its calculation formula is:

[0069]

[0070] In the formula, Lr represents the total storage capacity of the distributed storage unit, μ represents the number of nodes in the distributed storage system, K i represents the storage weight of the i-th node, and O i represents the actual storage capacity of the i-th node, that is, the size of the storage space currently used by this node.

[0071] The advantages are as follows: By calculating the total storage capacity Lr of the distributed storage unit, it is used to comprehensively understand the overall situation of data storage and resource utilization in the distributed storage system. When the power marketing data analysis module analyzes that the total storage capacity Lr of the distributed storage unit is high, it indicates that the storage resources of the system are tense. The power marketing data integration improvement module will automatically reallocate and migrate the data according to the storage weights and actual storage capacities of each node, migrate the data with a large occupied storage space and low usage frequency from the nodes with storage tension to the nodes with relatively abundant storage resources to achieve the balance of storage load, or dynamically adjust the storage quotas of the nodes, and reasonably allocate the storage upper limit of each node according to the business requirements and data access patterns, so as to avoid affecting the performance of the entire system due to excessive storage use of individual nodes.

[0072] The power marketing data analysis module is based on the key storage risk score Qx, the data leakage risk index Qy, the abnormal behavior detection risk index Qz, and the distributed storage formula to assist the system in conducting data security risk assessment and early warning.

[0073] The power marketing data integration improvement module solves the security problems in the data storage and transmission processes according to the analysis results of the power marketing data analysis module, and improves the encryption intensity and storage efficiency of the data;

[0074] The power marketing security improvement module solves the security problems in the data access and use processes according to the analysis results of the power marketing data analysis module, and takes measures to improve the access control and permission management capabilities of the system.

[0075] Although embodiments of the present invention have been shown and described, it will be understood by those of ordinary skill in the art that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for protecting the security of power marketing data based on encryption technology, characterized in that, It includes the following steps: Step 1: Establish a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration and enhancement module, and a power marketing security enhancement module; Step 2: The power marketing data collection module obtains collection data through the power user's electricity consumption information collection system, the power marketing business system, the power supply service command platform, and external relevant data sources; Step 3: The power marketing data calculation module calculates the key storage risk score Qx, the data leakage risk index Qy, and the abnormal behavior detection risk index Qz based on the collection data, and performs distributed storage on the keys, data, and behavior characteristics through the distributed storage formula; Step 4: The power marketing data analysis module assists in data security risk assessment and early warning based on the calculation results; Step 5: The power marketing data integration and enhancement module solves the security problems in the data storage and transmission processes according to the analysis results, and improves the data encryption intensity and storage efficiency; Step 6: The power marketing security enhancement module solves the security problems in the data access and use processes according to the analysis results.

2. A power marketing data security protection system based on encryption technology, characterized in that: The power marketing data security protection system based on encryption technology is used to implement the power marketing data security protection method based on encryption technology as described in Claim 1, including a power marketing data collection module, a power marketing data calculation module, a power marketing data analysis module, a power marketing data integration and enhancement module, and a power marketing security enhancement module.

3. A power marketing data security protection system based on encryption technology according to claim 2, characterized in that, The power marketing data security protection system based on encryption technology is used to implement the power marketing data security protection method based on encryption technology as described in Claim 1: The power marketing data collection module includes an electricity consumption data unit, a power marketing business data unit, a power supply service data unit, and an external relevant data unit; The electricity consumption data unit obtains electricity consumption data through the electricity consumption information collection system. The electricity consumption data unit is used to count the total number of sensitive data in the electricity consumption data, the number of failures of the storage device per unit time, the number of attempts to access the key without authorization, and the average data transmission delay time between the key data storage location and the data usage end; The power marketing business data unit obtains power marketing business data through the power marketing business system. The power marketing business data unit is used to count the total number of sensitive data in the power marketing business data; The power supply service data unit obtains power supply service data through the power supply service command platform. The power supply service data unit is used to count the total number of sensitive data in the power supply service data; The external relevant data unit obtains external relevant data through external relevant data sources. The external relevant data unit is used to count the total number of sensitive data in the external relevant data.

4. A power marketing data security protection system based on encryption technology according to claim 2, characterized in that: The power marketing data calculation module includes a key storage unit, a data leakage unit, an abnormal behavior detection unit, and a distributed storage unit.

5. The power marketing data security protection system based on encryption technology according to claim 4, characterized in that: The key storage unit calculates the key storage risk score Qx, and its calculation formula is: In the formula, Qx represents the key storage risk score, N g represents the number of failures of the storage device per unit time, N represents the total number of times the storage device should operate normally during this time period, W e represents the number of attempts to access the key without authorization, W represents the total number of accesses, represents the average data transmission delay time between the key data storage location and the data usage end, T represents the reasonable transmission delay time of the industry standard, represents the failure occurrence score of the storage device, represents the access permission violation score, represents the data transmission delay degree score, and A1, A2, and A3 respectively represent the weighted coefficients of the failure occurrence score, access permission violation score, and data transmission delay degree score of the storage device in the key storage risk score.

6. A power marketing data security protection system based on encryption technology according to claim 4, characterized in that: The data leakage unit calculates the data leakage risk index Qy, and its calculation formula is: In the formula, Qy represents the data leakage risk index, S z represents the total quantity of sensitive data in power consumption data, power marketing business data, power supply service data and external related data, S represents the total quantity of the collected data, represents the proportion of sensitive data in the data set, B1 represents the comprehensive weight of the sensitivity factor, M z represents the number of security vulnerabilities detected during data transmission or storage, M represents the total number of security detections on the data transmission and storage environment, represents the frequency of occurrence of security vulnerabilities, B2 represents the comprehensive weight of the security vulnerability severity factor, R z represents the number of times the encryption algorithm is cracked or suspected of being cracked during data transmission, R represents the total number of data transmissions, represents the security effectiveness of the encryption algorithm during data transmission, B3 represents the comprehensive weight of the encryption method factor.

7. A power marketing data security protection system based on encryption technology according to claim 4, characterized in that: The abnormal behavior detection unit calculates the abnormal behavior detection risk index Qz, and its calculation formula is: Qz = c1*p + c2*d + c3*j + c4*h In the formula, Qz represents the risk index for abnormal behavior detection, p represents the severity of the abnormal behavior, d represents the frequency of the abnormal behavior, j represents the duration of the abnormal behavior, h represents the spread range of the abnormal behavior, and c1, c2, c3, and c4 respectively represent the weight coefficients of the above four factors.

8. A power marketing data security protection system based on encryption technology according to claim 4, characterized in that: The distributed storage unit calculates the total storage capacity Lr of the distributed storage unit according to the distributed storage formula, and its calculation formula is: In the formula, Lr represents the total storage capacity of the distributed storage unit, μ represents the number of nodes in the distributed storage system, and K i represents the storage weight of the i-th node, and O i represents the actual storage capacity of the i-th node.

9. A power marketing data security protection system based on encryption technology according to claim 2, characterized in that: The power marketing data analysis module assists the system in data security risk assessment and early warning based on the key storage risk score Qx, the data leakage risk index Qy, the abnormal behavior detection risk index Qz, and the distributed storage formula.

10. A power marketing data security protection system based on encryption technology according to claim 2, characterized in that: The power marketing data integration and enhancement module solves the security problems in the data storage and transmission processes according to the analysis results of the power marketing data analysis module, and enhances the encryption intensity and storage efficiency of the data; The power marketing security enhancement module solves the security problems in the data access and usage processes according to the analysis results of the power marketing data analysis module, and takes measures to enhance the access control and privilege management capabilities of the system.

Images