Power grid data security protection method and related equipment

Abstract

The invention provides a power grid data security protection method and related equipment. The method comprises the following steps: acquiring power grid data; performing feature extraction on the power grid data to obtain a first power grid data feature value; performing data conversion on the first power grid data characteristic value through a password hash function to obtain first information with a fixed length, and generating an encryption key based on the first information; and based on the encryption key, encrypting the power grid data by adopting a symmetric encryption method to obtain power grid encrypted data. The data can be effectively prevented from being illegally obtained and tampered in the transmission and storage process, the safety, integrity and reliability of the power grid data in the whole process of collection, transmission, storage and use are guaranteed, and it is guaranteed that a power grid system can stably and efficiently operate.

Description

Technical Field

[0001] The present disclosure relates to the technical field of power grids, and particularly to a method for protecting power grid data security and related devices. Background Art

[0002] With the continuous improvement of the intelligence level of power grids, a large amount of data is generated during the operation of power grids. These data play a crucial role in the stable operation analysis, fault diagnosis, load forecasting, etc. of power grids.

[0003] However, power grid data faces many security threats. On the one hand, network attack means are becoming increasingly complex and diverse. Hackers may attempt to steal power grid data for malicious purposes, such as disrupting the stable operation of power grids, obtaining business secrets, etc. On the other hand, data may be lost or damaged during transmission and storage due to technical failures, operational mistakes, etc., thus affecting the normal development of power grid-related work.

[0004] In the prior art, the security protection of power grid data mainly relies on traditional encryption algorithms, such as DES, RSA, etc. Although these encryption algorithms can protect the confidentiality of data to a certain extent, they have problems such as low encryption efficiency and insufficient security when facing the special requirements of power grid data. Summary of the Invention

[0005] In view of this, the purpose of the present disclosure is to propose a method for protecting power grid data security and related devices.

[0006] Based on the above purpose, the first aspect of the present disclosure provides a method for protecting power grid data security, which is characterized by including:

[0007] Obtain power grid data;

[0008] Extract features from the power grid data to obtain a first power grid data feature value;

[0009] Perform data conversion on the first power grid data feature value through a cryptographic hash function to obtain a first piece of information with a fixed length, and generate an encryption key based on the first piece of information;

[0010] Based on the encryption key, encrypt the power grid data using a symmetric encryption method to obtain encrypted power grid data.

[0011] In some embodiments, the power grid data includes a voltage data sequence, a current data sequence, and a three-phase power data sequence;

[0012] The extracting features from the power grid data to obtain a first power grid data feature value includes:

[0013] Obtain the standard deviation of the voltage data sequence, and determine the fluctuation characteristic value of the voltage data according to the standard deviation of the voltage data sequence;

[0014] Obtain the standard deviation of the current data sequence, and determine the fluctuation characteristic value of the current data according to the standard deviation of the current data sequence;

[0015] Obtain the unbalance characteristic value of the three-phase power data in the three-phase power data sequence;

[0016] Concatenate the fluctuation characteristic value of the voltage data, the fluctuation characteristic value of the current data, and the unbalance characteristic value of the three-phase power data to obtain the first power grid data characteristic value.

[0017] In some embodiments, the data conversion of the first power grid data characteristic value through a cryptographic hash function to obtain a first piece of information with a fixed length, and generating an encryption key based on the first piece of information includes:

[0018] Perform a hash operation on the first power grid data characteristic value through the cryptographic hash function to obtain a hash value with a fixed length as the first piece of information;

[0019] Obtain a second piece of information with a preset number of digits at a target position in the first piece of information as the encryption key.

[0020] In some embodiments, the method further includes:

[0021] Transmit the encrypted power grid data to a first secure storage unit for storage using a secure communication protocol, and send the power grid data characteristic value to a second storage unit for storage.

[0022] In some embodiments, the method further includes:

[0023] Obtain the power grid data characteristic value from the second storage unit, and generate a decryption key according to the power grid data characteristic value;

[0024] Decrypt the encrypted power grid data based on the decryption key to obtain decrypted power grid data.

[0025] In some embodiments, the method further includes:

[0026] Extract features from the decrypted power grid data to obtain a second power grid data characteristic value;

[0027] Perform data integrity verification based on the second power grid data characteristic value and the first power grid data characteristic value;

[0028] If the second power grid data characteristic value matches the first power grid data characteristic value, the data integrity verification passes;

[0029] If the second power grid data eigenvalue does not match the first power grid data eigenvalue, the data integrity verification fails.

[0030] A second aspect of the present disclosure provides a power grid data security protection device, including:

[0031] An acquisition module, configured to: acquire power grid data;

[0032] An extraction module, configured to: perform feature extraction on the power grid data to obtain a first power grid data eigenvalue;

[0033] A generation module, configured to: perform data conversion on the first power grid data eigenvalue through a cryptographic hash function to obtain a first piece of information with a fixed length, and generate an encryption key based on the first piece of information;

[0034] An encryption module, configured to: encrypt the power grid data by using a symmetric encryption method based on the encryption key to obtain encrypted power grid data.

[0035] A third aspect of the present disclosure provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where when the processor executes the computer program, the power grid data security protection method described in the first aspect is implemented.

[0036] A fourth aspect of the present disclosure provides a non-transitory computer-readable storage medium, where the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to cause the computer to execute the power grid data security protection method described in the first aspect.

[0037] A fifth aspect of the present disclosure provides a computer program product, including computer program instructions, where when the computer program instructions run on a computer, the computer is caused to execute the power grid data security protection method described in the first aspect.

[0038] As can be seen from the above, the power grid data security protection method and related devices provided by the present disclosure obtain a first power grid data eigenvalue according to power grid data, calculate the first power grid data eigenvalue through a cryptographic hash function, determine an encryption key based on the calculation result, and symmetrically encrypt the power grid data based on the encryption key; by extracting features and utilizing eigenvalues of power grid data, the data security protection system is improved; by combining the cryptographic hash function with the symmetric encryption method to encrypt power grid data, a reliable encryption mechanism is formed, effectively preventing data from being illegally acquired and tampered with during transmission and storage, and ensuring the security, integrity, and reliability of power grid data throughout the entire process of collection, transmission, storage, and use, and ensuring that the power grid system can operate stably and efficiently. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the following will briefly introduce the drawings required for use in the embodiments or the description of related technologies. Obviously, the drawings in the following description are only embodiments of the present disclosure. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0040] Figure 1 FIG. shows a schematic diagram of an exemplary system provided by an embodiment of the present disclosure.

[0041] Figure 2 FIG. shows a schematic flowchart of an exemplary method provided by an embodiment of the present disclosure.

[0042] Figure 3 FIG. shows a schematic diagram of an exemplary device provided by an embodiment of the present disclosure.

[0043] Figure 4 FIG. shows a schematic diagram of the hardware structure of an exemplary computer device provided by an embodiment of the present disclosure. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0044] To make the objectives, technical solutions, and advantages of the present disclosure clearer and more understandable, the following further elaborates on the present disclosure in detail with reference to specific embodiments and the accompanying drawings.

[0045] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present disclosure should have the ordinary meanings understood by those of ordinary skill in the art to which the present disclosure pertains. The "first", "second", and similar terms used in the embodiments of the present disclosure do not denote any order, quantity, or importance, but are only used to distinguish different components. Terms such as "including" or "comprising" mean that the elements or items appearing before this term cover the elements or items listed after this term and their equivalents, without excluding other elements or items. Terms such as "connected" or "coupled" are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Upper", "lower", "left", "right", etc. are only used to represent relative positional relationships, and when the absolute position of the object being described changes, the relative positional relationship may also change accordingly.

[0046] Figure 1 FIG. shows a schematic diagram of an exemplary system 100 provided by an embodiment of the present disclosure.

[0047] As Figure 1As shown, the system 100 may include a terminal device 102, a server 106, and a database server 108. A medium (e.g., a network) providing a communication link may be included between the terminal device 102, the server 106, and the database server 108. The network may include various connection types, such as wired, wireless communication links, or fiber optic cables, etc.

[0048] Various applications (APPs) or software, such as power grid data management software, may be installed on the terminal device 102. In some embodiments, these applications or software can manage and use power grid data based on the request of the user 104.

[0049] The terminal device 102 here may be hardware or software. When the terminal device 102 is hardware, it may be various electronic devices with a display screen, including but not limited to smartphones, tablets, e - book readers, MP3 players, laptop computers, and desktop computers (PCs), etc. When the terminal device 102 is software, it can be installed in the above - listed electronic devices. It can be implemented as multiple software or software modules (e.g., for providing distributed services), or as a single software or software module. No specific limitation is made here.

[0050] The server 106 may be a server providing various services, such as a backend server supporting various applications displayed on the terminal device 102. The database server 108 may also be a database server providing various services. It can be understood that when the relevant functions of the database server 108 can be implemented in the server 106, the database server 108 may not be provided in the system 100.

[0051] The server 106 and the database server 108 here may also be hardware or software. When they are hardware, they can be implemented as a distributed server cluster composed of multiple servers, or as a single server. When they are software, they can be implemented as multiple software or software modules (e.g., for providing distributed services), or as a single software or software module. No specific limitation is made here.

[0052] It should be noted that the power grid data security protection method provided by the embodiments of the present disclosure can be executed by the server 106. It should be understood that Figure 1 the numbers of the terminal devices, users, servers, and database servers in

[0053] In one embodiment, a power grid data application or software can be installed in the terminal device 102. The user 104 can use the installed application or software in the terminal device 102 to send a power grid data management request to the server 106. The server 106 manages the power grid data based on the power grid data management request and returns a result to the terminal device 102. During the transmission and storage of power grid data, it is necessary to protect its security.

[0054] However, in the prior art, the security protection of power grid data mainly relies on traditional encryption algorithms. However, due to the large amount of power grid data, when traditional encryption algorithms process large-scale power grid data, the encryption and decryption speeds are slow and cannot meet the real-time requirements. At the same time, traditional encryption algorithms are easily cracked, especially in the face of complex network attacks, and it is difficult to effectively protect the confidentiality of power grid data.

[0055] In view of this, the embodiments of the present disclosure provide a method for protecting the security of power grid data to solve the above problems.

[0056] As Figure 2 shown, the method for protecting the security of power grid data includes:

[0057] Step S101, obtain power grid data.

[0058] In this embodiment, the power grid data during power grid operation can be collected. Among them, the power grid data can include data sequences such as voltage data sequences, current data sequences, and three-phase power data sequences.

[0059] In some embodiments, the power grid data can be collected in real time by sensors deployed at each node in the power grid. This embodiment does not make any limitations in this regard.

[0060] Step S103, extract features from the power grid data to obtain a first power grid data feature value.

[0061] In this embodiment, extracting features from the power grid data means extracting features from the collected data sequences such as voltage data sequences, current data sequences, and three-phase power data sequences, so as to obtain information such as the fluctuation feature value of voltage data, the fluctuation feature value of current data, and the unbalance feature value of three-phase power data. Thus, the first power grid data feature value can be determined based on the fluctuation feature value of voltage data, the fluctuation feature value of current data, and the unbalance feature value of three-phase power data.

[0062] Step S105, perform data conversion on the first power grid data feature value through a cryptographic hash function to obtain a first piece of information with a fixed length, and generate an encryption key based on the first piece of information.

[0063] In this embodiment, a preset data conversion method can be used to convert the first power grid data eigenvalue, so as to obtain the first information. Among them, the data conversion method can be a cryptographic hash function, and through this cryptographic hash function, the first power grid data eigenvalue of any length is converted into the first information with a fixed length.

[0064] After obtaining the first information with a fixed length, the encryption key can be obtained based on the first information. Since the encryption key is obtained based on the operation result of the cryptographic hash function, the encryption key is randomly generated and is more secure and reliable.

[0065] Step S107, based on the encryption key, use a symmetric encryption method to encrypt the power grid data to obtain encrypted power grid data.

[0066] In this embodiment, based on the encryption key, the power grid data is symmetrically encrypted through a symmetric encryption method to obtain encrypted power grid data.

[0067] Among them, the symmetric encryption method can be, for example, the AES (Advanced Encryption Standard) algorithm or the 3DES (Triple Data Encryption Algorithm) algorithm. An appropriate symmetric encryption method can be selected according to the encryption strength required by the user to symmetrically encrypt the power grid data.

[0068] In this embodiment, the first power grid data eigenvalue is obtained according to the power grid data, the first power grid data eigenvalue is calculated through a cryptographic hash function, and the encryption key is determined based on the calculation result, so as to symmetrically encrypt the power grid data based on the encryption key; through the feature extraction and eigenvalue utilization of the power grid data, the data security protection system is improved; by combining the cryptographic hash function with the symmetric encryption method to encrypt the power grid data, a reliable encryption mechanism is formed, effectively preventing the data from being illegally obtained and tampered with during the transmission and storage processes, and ensuring the security, integrity and reliability of the power grid data in the whole process of acquisition, transmission, storage and use, and ensuring that the power grid system can operate stably and efficiently.

[0069] In some embodiments, the power grid data includes a voltage data sequence, a current data sequence and a three-phase power data sequence. The feature extraction of the power grid data in step S103 to obtain the first power grid data eigenvalue includes:

[0070] Step S201, obtain the standard deviation of the voltage data sequence, and determine the fluctuation eigenvalue of the voltage data according to the standard deviation of the voltage data sequence.

[0071] In this embodiment, the average value of the voltage data sequence can be calculated first, and then the standard deviation of the voltage data sequence can be calculated based on the average value of the voltage data sequence. The standard deviation of the voltage data sequence is marked as the fluctuation characteristic value of the voltage data.

[0072] In this embodiment, the power grid data within a preset time length can be collected. For example, the power grid data within the time length T can be collected, and the voltage data sequence, current data sequence, and three-phase power data sequence collected within the time length T are marked as U i , L i , P i = [Pa i , Pb i , Pc i , i = 1, 2,... n.

[0073] In this embodiment, the sampling frequency, acquisition time length, and number of data points for data acquisition are clarified, providing a clear data basis for subsequent operations.

[0074] When it is necessary to calculate the fluctuation characteristic value of the voltage data, first extract the voltage data sequence U i。

[0075] After that, calculate the average value UP of the voltage data sequence Ui, where,

[0076]

[0077] Then, calculate the standard deviation FU of the voltage data sequence based on the average value UP of the voltage data sequence Ui, where,

[0078]

[0079] Finally, mark the standard deviation FU of the voltage data sequence as the fluctuation characteristic value of the voltage data.

[0080] Step S203, obtain the standard deviation of the current data sequence, and determine the fluctuation characteristic value of the current data according to the standard deviation of the current data sequence.

[0081] In this embodiment, the average value of the current data sequence can be calculated first, and then the standard deviation of the current data sequence can be calculated based on the average value of the current data sequence. The standard deviation of the current data sequence is marked as the fluctuation characteristic value of the current data.

[0082] When it is necessary to calculate the fluctuation characteristic value of the current data, first extract the current data sequence L i。

[0083] After that, calculate the average value LP of the current data sequence L i , where,

[0084]

[0085] Then, calculate the current data sequence L based on the average value LP of the current data sequence. i Calculate the standard deviation FL of L, where

[0086]

[0087] Finally, mark the standard deviation FL of the current data as the fluctuation characteristic value FL of the current data.

[0088] Step S205: Obtain the unbalance characteristic value of the three-phase power data of the three-phase power data sequence.

[0089] In this embodiment, the unbalance characteristic value of the three-phase power data of the three-phase power data sequence can be calculated.

[0090] When it is necessary to calculate the unbalance characteristic value of the three-phase power data, first extract the three-phase power data sequence P i =[Pa i , Pb i , Pc i .

[0091] After that, calculate the unbalance characteristic value FP of the three-phase power data of the three-phase power data sequence, where

[0092]

[0093] Step S207: Concatenate the fluctuation characteristic value of the voltage data, the fluctuation characteristic value of the current data, and the unbalance characteristic value of the three-phase power data to obtain the first power grid data characteristic value.

[0094] In this embodiment, based on a preset order, concatenate the fluctuation characteristic value FU of the voltage data, the fluctuation characteristic value FL of the current data, and the unbalance characteristic value FP of the three-phase power data, such as FU||FL||FP, where || represents a concatenation symbol, or it can also be FU||FP||FL, FL||FU||FP, FP||FU||FL, FP||FL||FU, FL||FP||FU. This embodiment does not limit this.

[0095] In some embodiments, in step S105, the data conversion of the first power grid data characteristic value through the cryptographic hash function to obtain the first information with a fixed length and generating the encryption key based on the first information includes:

[0096] Step S301: Perform a hash operation on the first power grid data characteristic value through the cryptographic hash function to obtain a hash value with a fixed length as the first information.

[0097] In this embodiment, cryptographic hash functions such as SHA-224, SHA-256, SHA-384, and SHA-512 can be used to perform a hash operation on the first power grid data eigenvalue, so as to obtain a hash value with a fixed length as the first information.

[0098] Taking SHA-256 as an example, SHA-256 (Secure Hash Algorithm 256-bit) is a one-way hash function that can convert data of any length into a hash value with a fixed length (256 bits). In this embodiment, the SHA-256 is used to perform a hash operation on the first power grid data eigenvalue, so as to convert the first power grid data eigenvalue of any length into a 256-bit hash value as the first information. Among them,

[0099] H = SHA-256(FU||FL||FP),

[0100] H is the hash value, and || represents the concatenation operator.

[0101] In some embodiments, when using SHA-512 to perform a hash operation on the first power grid data eigenvalue, the first power grid data eigenvalue of any length can be converted into a 512-bit hash value, generating a longer hash value, thereby further improving the security of encryption.

[0102] Step S303, obtain a second information with a preset number of bits at a target position in the first information as the encryption key.

[0103] In this embodiment, the second information with a preset number of bits located at the target position can be selected from the first information. For example, the first v bits in the first information can be selected as the encryption key K, or the last w bits in the first information can be selected as the encryption key K, or y bits can be selected starting from the x-th bit in the first information as the encryption key K. This embodiment does not make any limitations in this regard.

[0104] In this embodiment, a cryptographic hash function is used to perform a hash operation on the first power grid data eigenvalue to obtain a hash value with a fixed length, and then part or all of the hash value is selected as the encryption key, thereby improving the security of encryption.

[0105] In some embodiments, the method further includes: transmitting the power grid encrypted data to the first secure storage unit for storage using a secure communication protocol, and sending the power grid data eigenvalue to the second storage unit for storage.

[0106] Among them, the secure communication protocol can be the Hypertext Transfer Protocol Secure (HTTPS), the Secure Sockets Layer (SSL), the Transport Layer Security (TLS), etc. In this embodiment, different secure communication protocols can be selected according to the needs of users, so as to provide different transmission security guarantees for grid data.

[0107] The first secure storage unit can be a secure storage medium, for example, it can include a storage device encrypted by an encryption algorithm, a storage unit for distributed storage combined with a blockchain, etc.; the second storage unit can be a feature database, for example.

[0108] In this embodiment, the encrypted grid data can be transmitted to the secure storage medium for storage through the HTTPS protocol, and the grid data feature values can be sent to the feature database for storage to ensure the stability and security of data transmission.

[0109] In some embodiments, the method further includes:

[0110] Step S401, obtain the grid data feature value from the second storage unit, and generate a decryption key according to the grid data feature value.

[0111] In this embodiment, when the grid data is needed, the pre-stored grid data feature value is obtained from the second storage unit, and then the decryption key is obtained based on the grid data feature value.

[0112] Among them, since the encryption method adopted is a symmetric encryption method, the encryption key and the decryption key are the same. Therefore, the decryption key can be obtained based on the same method as obtaining the encryption key.

[0113] Step S403, decrypt the encrypted grid data based on the decryption key to obtain the decrypted grid data.

[0114] In this embodiment, the encrypted grid data is decrypted based on the decryption key to obtain the decrypted grid data, and then the decrypted grid data can be used and processed.

[0115] In some embodiments, the method further includes: the method further includes:

[0116] Step S501, extract features from the decrypted grid data to obtain the second grid data feature value.

[0117] Step S503, perform data integrity verification based on the second grid data feature value and the first grid data feature value.

[0118] Step S505, if the second power grid data eigenvalue matches the first power grid data eigenvalue, the data integrity verification passes.

[0119] Step S507, if the second power grid data eigenvalue does not match the first power grid data eigenvalue, the data integrity verification fails.

[0120] In this embodiment, the same method as in steps S201 - S207 can be used to extract the features of the decrypted power grid data, so as to obtain the second power grid data eigenvalue.

[0121] After that, the second power grid data eigenvalue obtained by calculation can be compared with the first power grid data eigenvalue stored in the second storage unit, so as to realize the data integrity verification of the decrypted power grid data. In this embodiment, when the second power grid data eigenvalue matches the first power grid data eigenvalue, the data integrity verification passes, indicating that the data has not been tampered with and is safe and reliable, and can be used; when the second power grid data eigenvalue does not match the first power grid data eigenvalue, the data integrity verification fails, indicating that the data is damaged and the use is prohibited.

[0122] In the embodiments of the present disclosure, the data security protection system is improved through feature extraction and eigenvalue utilization; through the combination of the cryptographic hash function and the symmetric encryption algorithm, the encryption and decryption speeds can be improved while ensuring data security, meeting the real-time requirements of power grid data, and forming a reliable encryption mechanism to effectively prevent data from being illegally obtained and tampered with during transmission and storage; the stability and security of data transmission are guaranteed through a secure transmission protocol (such as HTTPS); the data integrity is verified through eigenvalue comparison to ensure that the data has not been tampered with and is safe and reliable.

[0123] It can be understood that before using the technical solutions of the various embodiments in the present disclosure, the types, usage scopes, usage scenarios, etc. of the personal information involved will be informed to the user in an appropriate manner and the user's authorization will be obtained.

[0124] For example, in response to receiving the user's active request, a prompt message is sent to the user to clearly prompt the user that the operation requested by the user will require obtaining and using the user's personal information. Thus, the user can autonomously choose whether to provide personal information to software or hardware such as an electronic device, an application program, a server, or a storage medium that executes the operations of the technical solutions of the present disclosure according to the prompt message.

[0125] As an optional but non-limiting implementation, in response to receiving an active request from a user, the way of sending a prompt message to the user can be, for example, in the form of a pop-up window. The prompt message can be presented in text in the pop-up window. In addition, the pop-up window can also carry selection controls for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0126] It can be understood that the above notification and the process of obtaining user authorization are only illustrative and do not limit the implementation of the present disclosure. Other ways that comply with relevant laws and regulations can also be applied to the implementation of the present disclosure.

[0127] It should be noted that the method of the embodiments of the present disclosure can be executed by a single device, such as a computer or a server. The method of this embodiment can also be applied to a distributed scenario and completed by multiple devices cooperating with each other. In such a distributed scenario, one of the multiple devices can only execute one or more steps of the method of the embodiments of the present disclosure, and these multiple devices will interact with each other to complete the described method.

[0128] It should be noted that some embodiments of the present disclosure have been described above. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in a different order than in the above embodiments and still achieve the desired result. Additionally, the processes depicted in the figures do not necessarily require the specific order or sequential order shown to achieve the desired result. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0129] Based on the same inventive concept, corresponding to the method of any of the above embodiments, the present disclosure also provides a power grid data security protection device.

[0130] Refer to Figure 3 , the device includes:

[0131] An acquisition module 11, configured to: acquire power grid data;

[0132] An extraction module 13, configured to: extract features from the power grid data to obtain a first power grid data feature value;

[0133] A generation module 15, configured to: perform data conversion on the first power grid data feature value through a cryptographic hash function to obtain a first piece of information with a fixed length, and generate an encryption key based on the first piece of information;

[0134] An encryption module 17, configured to: encrypt the power grid data based on the encryption key by using a symmetric encryption method to obtain encrypted power grid data.

[0135] In some embodiments, the grid data includes a voltage data sequence, a current data sequence, and a three-phase power data sequence;

[0136] The extraction module 13 is further configured to:

[0137] Obtain the standard deviation of the voltage data sequence, and determine the fluctuation characteristic value of the voltage data according to the standard deviation of the voltage data sequence;

[0138] Obtain the standard deviation of the current data sequence, and determine the fluctuation characteristic value of the current data according to the standard deviation of the current data sequence;

[0139] Obtain the unbalance characteristic value of the three-phase power data in the three-phase power data sequence;

[0140] Concatenate the fluctuation characteristic value of the voltage data, the fluctuation characteristic value of the current data, and the unbalance characteristic value of the three-phase power data to obtain the first grid data characteristic value.

[0141] In some embodiments, the generation module 15 is configured to:

[0142] Perform a hash operation on the first grid data characteristic value through the cryptographic hash function to obtain a hash value of a fixed length as the first information;

[0143] Obtain a second information of a preset number of digits at a target position in the first information as the encryption key.

[0144] In some embodiments, the device is further configured to:

[0145] Transmit the grid encrypted data to the first secure storage unit for storage by using a secure communication protocol, and send the grid data characteristic value to the second storage unit for storage.

[0146] In some embodiments, the device is further configured to: obtain the grid data characteristic value from the second storage unit, and generate a decryption key according to the grid data characteristic value;

[0147] Decrypt the grid encrypted data based on the decryption key to obtain grid decrypted data.

[0148] In some embodiments, the device is further configured to:

[0149] Extract features from the grid decrypted data to obtain a second grid data characteristic value;

[0150] Perform data integrity verification based on the second grid data characteristic value and the first grid data characteristic value;

[0151] If the second power grid data eigenvalue matches the first power grid data eigenvalue, the data integrity verification passes;

[0152] If the second power grid data eigenvalue does not match the first power grid data eigenvalue, the data integrity verification fails.

[0153] For the convenience of description, when describing the above device, various modules are described separately according to their functions. Of course, when implementing the present disclosure, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0154] The device of the above embodiment is used to implement the corresponding power grid data security protection method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be elaborated herein.

[0155] Based on the same inventive concept, corresponding to the method of any of the above embodiments, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the program, it implements the power grid data security protection method described in any of the above embodiments.

[0156] Figure 4 FIG. shows a more specific schematic diagram of the hardware structure of the electronic device provided in this embodiment. The device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. Among them, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are communicatively connected to each other inside the device through the bus 1050.

[0157] The processor 1010 may be implemented in a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, etc., and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0158] The memory 1020 may be implemented in the form of a ROM (Read Only Memory), a RAM (Random Access Memory), a static storage device, a dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When implementing the technical solutions provided in the embodiments of this specification through software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0159] The input / output interface 1030 is used to connect to the input / output module to achieve information input and output. The input / output module can be configured as a component in the device (not shown in the figure), or can be externally connected to the device to provide corresponding functions. Among them, the input devices can include keyboards, mice, touchscreens, microphones, various sensors, etc., and the output devices can include displays, speakers, vibrators, indicator lights, etc.

[0160] The communication interface 1040 is used to connect to the communication module (not shown in the figure) to achieve communication interaction between this device and other devices. Among them, the communication module can achieve communication through wired means (such as USB, network cable, etc.), or can achieve communication through wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0161] The bus 1050 includes a path for transmitting information between various components of the device (such as the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0162] It should be noted that although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040, and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, those skilled in the art can understand that the above device may also only include the components necessary to implement the solution of the embodiments of this specification, and does not necessarily include all the components shown in the figure.

[0163] The electronic device of the above embodiment is used to implement the corresponding power grid data security protection method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be elaborated here.

[0164] Based on the same inventive concept, corresponding to the method of any of the above embodiments, the present disclosure also provides a non-transitory computer-readable storage medium, and the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to make the computer execute the power grid data security protection method described in any of the foregoing embodiments.

[0165] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tapes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible by a computing device.

[0166] The computer instructions stored in the storage medium of the above embodiment are used to cause the computer to execute the power grid data security protection method described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be elaborated here.

[0167] Based on the same inventive concept, corresponding to the method of any of the above embodiments, the present disclosure also provides a computer program product, which includes a computer program. In some embodiments, the computer program is executable by one or more processors to cause the processors to execute the power grid data security protection method. Corresponding to the execution subjects of the steps in the method embodiments, the processors that execute the corresponding steps can belong to the corresponding execution subjects.

[0168] The computer program product of the above embodiment is used to cause the processor to execute the power grid data security protection method described in any of the above embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be elaborated here.

[0169] Those skilled in the art know that the embodiments of the present disclosure can be implemented as a system, method, or computer program product. Therefore, the present disclosure can be specifically implemented in the following forms: completely hardware, completely software (including firmware, resident software, microcode, etc.), or a combination of hardware and software, generally referred to as "circuit", "module", or "system" in this article. In addition, in some embodiments, the present disclosure can also be implemented in the form of a computer program product in one or more computer-readable media, which contains computer-readable program code.

[0170] Any combination of one or more computer-readable media may be employed. The computer-readable media may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer-readable storage medium may include: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present document, a computer-readable storage medium may be any tangible medium that contains or stores a program which can be used by or in connection with an instruction execution system, apparatus, or device.

[0171] A computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, in which computer-readable program code is carried. Such a propagated data signal may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device.

[0172] The program code contained on the computer-readable medium may be transmitted with any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0173] The computer program code for performing the operations of the present disclosure may be written in one or more programming languages or combinations thereof, including object-oriented programming languages such as Java, Smalltalk, C++, and also including conventional procedural programming languages such as the "C" language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer, or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0174] It should be understood that each block of the flowchart and / or block diagram, and combinations of blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, or other programmable data processing apparatus to produce a machine, such that the computer program instructions, when executed by the computer or other programmable data processing apparatus, create means for implementing the functions / operations specified in the blocks of the flowchart and / or block diagram.

[0175] These computer program instructions can also be stored in a computer-readable medium that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instruction means for implementing the functions / operations specified in the blocks of the flowchart and / or block diagram.

[0176] The computer program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, such that the instructions executed on the computer or other programmable apparatus provide a process for implementing the functions / operations specified in the blocks of the flowchart and / or block diagram.

[0177] In addition, although the operations of the methods of the present disclosure are depicted in the figures in a particular order, this is not required or implied to perform the operations in that particular order, or to perform all of the illustrated operations to achieve the desired result. On the contrary, the steps depicted in the flowchart may be performed in a different order. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and / or one step may be decomposed into multiple steps for execution.

[0178] The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present application. Each block in the flowchart or block diagram may represent a module, a segment of code, or a portion thereof, which contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions noted in the blocks may occur in a different order than noted in the figures. For example, two consecutive blocks shown may actually be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram or flowchart, and combinations of blocks in the block diagram or flowchart, can be implemented by a dedicated hardware-based system that performs the specified functions or operations, or can be implemented by a combination of dedicated hardware and computer instructions.

[0179] It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of the two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0180] Those of ordinary skill in the art should understand that: the discussion of any of the above embodiments is only exemplary and is not intended to imply that the scope of the present disclosure (including the claims) is limited to these examples; under the concept of the present disclosure, the technical features between the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations in different aspects of the embodiments of the present disclosure as described above, and they are not provided in detail for the sake of brevity.

[0181] In addition, for the sake of simplicity of description and discussion, and in order not to make the embodiments of the present disclosure difficult to understand, the well-known power / ground connections to the integrated circuit (IC) chips and other components may or may not be shown in the provided drawings. In addition, the device may be shown in block diagram form in order not to make the embodiments of the present disclosure difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform on which the embodiments of the present disclosure are to be implemented (i.e., these details should be fully within the understanding of those skilled in the art). In the case where specific details (such as circuits) are set forth to describe the exemplary embodiments of the present disclosure, it will be apparent to those skilled in the art that the embodiments of the present disclosure can be implemented without these specific details or with variations of these specific details. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0182] Although the present disclosure has been described in connection with specific embodiments of the present disclosure, many alternatives, modifications, and variations of these embodiments will be apparent to those of ordinary skill in the art based on the foregoing description. For example, other memory architectures (such as dynamic RAM (DRAM)) can be used with the embodiments discussed.

[0183] The embodiments of the present disclosure are intended to cover all such alternatives, modifications, and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present disclosure shall be included within the protection scope of the present disclosure.

Claims

1. A method for protecting power grid data security, characterized in that, Including: Obtain grid data; Extract features from the grid data to obtain the first grid data eigenvalue; Perform data conversion on the first grid data eigenvalue through a cryptographic hash function to obtain the first information of a fixed length, and generate an encryption key based on the first information; Based on the encryption key, use a symmetric encryption method to encrypt the grid data to obtain encrypted grid data.

2. The method according to claim 1, characterized in that The grid data includes a voltage data sequence, a current data sequence, and a three-phase power data sequence; The extracting features from the grid data to obtain the first grid data eigenvalue includes: Obtain the standard deviation of the voltage data sequence, and determine the fluctuation eigenvalue of the voltage data according to the standard deviation of the voltage data sequence; Obtain the standard deviation of the current data sequence, and determine the fluctuation eigenvalue of the current data according to the standard deviation of the current data sequence; Obtain the unbalance eigenvalue of the three-phase power data in the three-phase power data sequence; Concatenate the fluctuation eigenvalue of the voltage data, the fluctuation eigenvalue of the current data, and the unbalance eigenvalue of the three-phase power data to obtain the first grid data eigenvalue.

3. The method according to claim 1, wherein The performing data conversion on the first grid data eigenvalue through a cryptographic hash function to obtain the first information of a fixed length and generating an encryption key based on the first information includes: Perform a hash operation on the first grid data eigenvalue through the cryptographic hash function to obtain a hash value of a fixed length as the first information; Obtain the second information of a preset number of bits at the target position in the first information as the encryption key.

4. The method according to claim 1, wherein Also including: Use a secure communication protocol to transmit the encrypted grid data to a first secure storage unit for storage, and send the grid data eigenvalue to a second storage unit for storage.

5. The method according to claim 4, characterized in that Also including: Obtain the grid data eigenvalue from the second storage unit, and generate a decryption key according to the grid data eigenvalue; Based on the decryption key, decrypt the encrypted grid data to obtain decrypted grid data.

6. The method according to claim 5, wherein Also including: Extract features from the decrypted grid data to obtain the second grid data eigenvalue; Perform data integrity verification based on the second grid data eigenvalue and the first grid data eigenvalue; If the second grid data eigenvalue matches the first grid data eigenvalue, the data integrity verification passes; If the second grid data eigenvalue does not match the first grid data eigenvalue, the data integrity verification fails.

7. A power grid data security protection device, characterized in that, Including: An acquisition module, configured to: obtain grid data; An extraction module, configured to: extract features from the grid data to obtain the first grid data eigenvalue; A generation module, configured to: perform data conversion on the first grid data eigenvalue through a cryptographic hash function to obtain the first information of a fixed length, and generate an encryption key based on the first information; An encryption module, configured to: based on the encryption key, use a symmetric encryption method to encrypt the grid data to obtain encrypted grid data.

8. An electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the grid data security protection method according to any one of claims 1 to 6.

9. A non-transitory computer-readable storage medium storing computer instructions, characterized in that, The computer instructions are used to cause the computer to execute the power grid data security protection method according to any one of claims 1 to 6.

10. A computer program product, comprising computer program instructions, characterized in that, When the computer program instructions run on a computer, the computer is caused to execute the power grid data security protection method according to any one of claims 1 to 6.

Images