Safety management system, method, equipment and medium for the main station of the power consumption information collection system

Abstract

The present invention belongs to the technical field of power system safety management, and discloses a safety management system, method, equipment and medium for the main station of the power consumption information collection system to solve the problems of weak protection of the existing system, low efficiency of physical isolation equipment, and difficulty in interactive safety management. The system of the present invention includes: a high-level protection area, a low-level protection area and an access protection area, and adjacent protection areas are physically isolated by forward and reverse isolation devices; a data ferry platform is deployed in the high-level protection area for secure transmission of data across protection areas; a collection interface security platform is deployed in the low-level protection area for managing the data interaction interface between systems; a device fingerprint authentication platform is deployed in the access protection area for terminal authentication based on static and dynamic information of the device; a secure access gateway is also deployed in the access protection area, and the SSAL protocol is used to realize the identity authentication of terminal devices and message transmission encryption.

Description

Technical Field

[0001] The present invention belongs to the technical field of power system safety management, and in particular relates to a safety management system, method, equipment and medium for a master station of an electricity consumption information collection system. Background Art

[0002] The master station of the power consumption information collection system is the core management platform of the power system. It undertakes critical functions such as access, data collection, and remote control of a vast number of power devices. It provides important capabilities such as real-time control and remote fee control, and serves as the central nervous system for the stable operation of the power system. The security of this system master station is particularly important, as it directly impacts the reliability and safety of power supply. In particular, the system master station features remote trip control. If attacked, resulting in loss of functionality or data leakage, it could trigger a large-scale power outage.

[0003] Currently, electricity consumption information collection systems primarily employ the following security solutions: First, the system is deployed in the "management information zone" within the power grid's intranet, using firewalls for basic protection; second, a 3A certification mechanism is used to manage device access; and finally, secure access zones are used to isolate the internal and external networks. However, these existing technologies have significant flaws: In terms of deployment architecture, the low-security management zone is vulnerable to advanced threats; in terms of protection, physical isolation devices lead to low transmission efficiency; in terms of system interaction, chaotic microservice interface management can introduce malicious commands; and at the device access level, terminal devices exposed to the public network are vulnerable to tampering attacks. These security flaws pose a serious threat to the stable operation of the power system. Summary of the Invention

[0004] Based on the above-mentioned shortcomings and deficiencies in the prior art, one of the purposes of the present invention is to at least solve one or more of the above-mentioned problems in the prior art. In other words, one of the purposes of the present invention is to provide a security management system, method, equipment and medium for the main station of the electricity consumption information collection system that meets one or more of the above-mentioned needs, so as to solve the problems of weak protection of the existing system, low efficiency of physical isolation equipment, and difficulty in interactive security management.

[0005] In order to achieve the above-mentioned object of the invention, the present invention adopts the following technical solutions:

[0006] In a first aspect, the present invention provides a security management system for a master station of an electricity consumption information collection system, comprising:

[0007] High-level protection area, low-level protection area and access protection area, adjacent protection areas are physically isolated by forward and reverse isolation devices;

[0008] A data ferry platform is deployed in the high-level protection area for secure data transmission across protection areas, including a protocol file decompression module, a pre-check module, an encryption and decryption module, a channel management module, a priority management module, and a ferry monitoring module;

[0009] A collection interface security platform is deployed in the low-level protection area to manage the data interaction interface between systems, including a malicious data interception module, an external system account authentication module, an access range control module, an access frequency limitation module, a data desensitization module, and a data log monitoring module;

[0010] A device fingerprint authentication platform is deployed in the access protection area for performing terminal authentication based on static and dynamic device information;

[0011] A secure access gateway is also deployed in the access protection area, which uses the SSAL protocol to implement identity authentication of terminal devices and message transmission encryption.

[0012] As a preferred solution, the data ferry platform further includes a business service module and an internal forwarding module, and the ferry monitoring module includes an external monitoring unit and an internal monitoring unit. The data ferry platform performs the following steps to achieve secure data transmission across protection zones:

[0013] After the business service module receives the client request, the protocol file decompression module performs SM2 verification and encapsulation;

[0014] After the pre-check module completes the security check, the channel management module allocates a transmission channel;

[0015] The encryption and decryption module encrypts the data SM4 and serializes it into a file to generate an SM3 digest;

[0016] The external monitoring unit triggers the transmission of the forward and reverse isolation devices after detecting the file change;

[0017] The internal monitoring unit deserializes the received data and stores it in the internal message queue;

[0018] The priority management module assigns processing priorities to the data in the internal message queue;

[0019] After the internal forwarding module obtains data from the internal message queue according to priority, it calls the encryption and decryption module SM4 to decrypt and then passes it to the business service module for processing;

[0020] After the business service module completes the processing, the response data is returned to the client through the reverse process.

[0021] As a preferred solution, the priority management module of the data ferry platform implements the following priority algorithm:

[0022] The corresponding basic points are assigned based on the encapsulation type, including 10 points for communication commands, 5 points for service requests, 2 points for data synchronization, and 0 points for external access.

[0023] further calculating an adjustment score for the communication command;

[0024] The business request is given additional points based on the menu importance, with a value range of [0,8];

[0025] Data synchronization is assigned additional points based on the data type, with a value range of [0,5];

[0026] Add the basic score and the adjustment score or additional score to get the final priority score. Sort the tasks according to the scores. When the score difference exceeds 3, the task will be queued up.

[0027] As a preferred solution, further calculating the adjustment score of the communication command is specifically as follows:

[0028] If the communication command is a fee control power outage, the adjustment points are calculated according to 3+0.5*a+0.5*b+0.8*c;

[0029] If the communication command is fee-controlled closing, the adjustment points are calculated according to 4+0.5*a+0.75*b+0.8*c;

[0030] If the communication command is issued with parameters, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c;

[0031] If the communication command is a task, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c;

[0032] If the communication command is a data call test, the adjustment score is calculated according to 1+0.2*b+1*c;

[0033] If the communication command is a batch inspection, the adjustment score is calculated based on -1+0.5*c;

[0034] If the communication command is a data supplementary move, the adjustment score is calculated based on -1+0.5*c;

[0035] In the above formula, a is the number of lists of a single communication command divided by 1000, and the upper limit of a is 5. b is the value of different user types and the range is [0,5]. c is the value of users guaranteed during special periods and the range is [0,10].

[0036] As a preferred solution, the data desensitization module of the acquisition interface security platform implements the following desensitization rules:

[0037] Masking rules mask some fields of sensitive data, retaining a specific number of characters at the beginning and end, replacing middle fields with predetermined symbols, and keeping the original data length unchanged;

[0038] Encryption rules, converting identification numbers with unique attributes using an encryption algorithm to maintain unique correspondence of the encrypted data, wherein the identification numbers with unique attributes include the terminal asset number and the meter asset number;

[0039] Replacement rules uniformly replace sensitive information of a specific category with predefined universal identifiers.

[0040] As a preferred solution, the static information includes version information, ESAM serial number, upstream module network restriction information, and downstream module chip ID; the dynamic information includes acquisition success rate, meter reading efficiency, and response speed.

[0041] As a preferred solution, the secure access gateway includes an idle state, a negotiation preparation state, a negotiation waiting state, and a negotiation completion state, and executes the following state transition rules:

[0042] When receiving the terminal login message, it triggers the transition from the idle state to the negotiation preparation state;

[0043] When receiving the terminal basic information response message, it triggers the transition from the negotiation preparation state to the waiting negotiation state;

[0044] When receiving the terminal negotiation response message, it triggers the transition from the waiting negotiation state to the negotiation completion state;

[0045] When receiving the terminal logout message, it triggers the transition from the negotiation completion state to the idle state;

[0046] In the negotiation preparation state and the negotiation waiting state, when an unexpected message is received, the device discards it or returns an error message.

[0047] In a second aspect, the present invention provides a method for safety management of a master station of an electricity consumption information collection system, which uses the safety management system described in the first aspect to implement safety management of the master station of the electricity consumption information collection system.

[0048] In a third aspect, the present invention provides an electronic device, wherein the computer device includes a memory, a processor, and a computer program, and when the computer program is executed by the processor, the security management method as described in the second aspect is implemented.

[0049] In a fourth aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the security management method as described in the second aspect.

[0050] Compared with the prior art, the present invention has the following beneficial effects:

[0051] This embodiment, through a holistic architectural design, implements strict authentication and authorization for every user, request, device, and application, mitigating the risks of insider threats and lateral movement while providing more granular access control. Combining prevention, detection, response, and prediction capabilities, this creates a dynamic security protection system.

[0052] Further or more detailed beneficial effects will be described in conjunction with specific examples in the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0054] Figure 1 It is a structural diagram of the security management system described in an embodiment of the present invention.

[0055] Figure 2 It is a structural diagram of the data ferry platform described in an embodiment of the present invention.

[0056] Figure 3 It is a structural diagram of the acquisition interface security platform described in an embodiment of the present invention.

[0057] Figure 4 It is a schematic diagram of the monitoring process of the device fingerprint authentication platform described in an embodiment of the present invention.

[0058] Figure 5 This is another monitoring process diagram of the device fingerprint authentication platform described in an embodiment of the present invention.

[0059] Figure 6 It is a schematic diagram of the state transition process of the secure access gateway according to an embodiment of the present invention.

[0060] Figure 7 is a structural diagram of the electronic device provided by an embodiment of the present invention.

[0061] Figure Number:

[0062] 700. Electronic equipment;

[0063] 701, processor; 702, communication bus; 703, user interface; 704, network interface; 705, memory. DETAILED DESCRIPTION

[0064] The technical solutions in the embodiments of the present invention will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present invention.

[0065] In the following description, multiple embodiments of the present invention are provided. Different embodiments may be replaced or combined, and therefore the present invention may be considered to include all possible combinations of the same and / or different embodiments described. Thus, if one embodiment includes features A, B, and C, and another embodiment includes features B and D, then the present invention should also be considered to include embodiments that include one or more of all other possible combinations of A, B, C, and D, even if such embodiments may not be explicitly described in the following text.

[0066] The following description provides examples and does not limit the scope, applicability, or examples set forth in the claims. Changes may be made to the functions and arrangements of the elements described without departing from the scope of the present invention. Various examples may appropriately omit, replace, or add various processes or components. For example, the described method may be performed in an order different from the order described, and various steps may be added, omitted, or combined. Furthermore, features described in some examples may be combined in other examples.

[0067] In order to facilitate a better understanding of the embodiments of the present invention, before explaining the specific implementation methods of the present invention in detail, its application scenarios are first described.

[0068] The security management system described in the embodiments of this specification is applied to power grid electricity consumption information collection systems, important activity power guarantee scenarios, rural power grid terminal security access scenarios and multi-vendor system integration environments. In these scenarios, the application of the security management system is intended to achieve efficient and secure transmission of "physical isolation without interruption of business" and prevent full-link security risks from terminal equipment to the main station system.

[0069] Example 1:

[0070] like Figure 1 As shown, this embodiment provides a security management system for the main station of the power consumption information collection system ( Figure 1-Figure 5 The data acquisition safety management and control system is referred to as the data acquisition safety management and control system, which will not be repeated in the subsequent embodiments), including:

[0071] The high-level protection zone (also referred to as the high protection level zone, which will not be described again in the subsequent embodiments), the low-level protection zone (also referred to as the low protection level zone, which will not be described again in the subsequent embodiments) and the access protection zone are physically isolated from each other by forward and reverse isolation devices.

[0072] A data ferry platform (also called a data acquisition ferry platform, which will not be described again in subsequent embodiments) is deployed in the high-level protection zone for secure data transmission across protection zones, including a protocol file decompression module, a pre-check module, an encryption and decryption module, a channel management module, a priority management module, and a ferry monitoring module;

[0073] A collection interface security platform (also called a collection interface security management platform, which will not be described again in subsequent embodiments) is deployed in the low-level protection zone to manage the data interaction interface between systems, including a malicious data interception module, an external system account authentication module, an access range control module, an access frequency restriction module, a data desensitization module, and a data log monitoring module;

[0074] A device fingerprint authentication platform is deployed in the access protection area for performing terminal authentication based on static and dynamic device information;

[0075] A secure access gateway is also deployed in the access protection area, which uses the SSAL protocol to implement identity authentication of terminal devices and message transmission encryption.

[0076] Combine Figure 1 It is understood that the security management system described in this embodiment is embedded in the collection system, with the control-related components of the collection system deployed in the high-level protection zone and the non-control-related components of the collection system deployed in the low-level protection zone. Through a holistic architectural design, this embodiment implements strict authentication and authorization for each user, request, device, and application, mitigating the risks of insider threats and lateral movement while providing more granular access control. Combining prevention, detection, response, and prediction capabilities, a dynamic security protection system is constructed.

[0077] Specifically, this embodiment provides a preferred implementation method, wherein the data ferry platform further includes a business service module and an internal forwarding module, and the ferry monitoring module includes an external monitoring unit and an internal monitoring unit. The data ferry platform performs the following steps to achieve secure data transmission across protection zones:

[0078] After the business service module receives the client request, the protocol file decompression module performs SM2 verification and encapsulation;

[0079] After the pre-check module completes the security check, the channel management module allocates a transmission channel;

[0080] The encryption and decryption module encrypts the data SM4 and serializes it into a file to generate an SM3 digest;

[0081] The external monitoring unit triggers the transmission of the forward and reverse isolation devices after detecting the file change;

[0082] The internal monitoring unit deserializes the received data and stores it in the internal message queue;

[0083] The priority management module assigns processing priorities to the data in the internal message queue;

[0084] After the internal forwarding module obtains data from the internal message queue according to priority, it calls the encryption and decryption module SM4 to decrypt and then passes it to the business service module for processing;

[0085] After the business service module completes the processing, the response data is returned to the client through the reverse process.

[0086] More specifically, the forward and reverse isolation device is a key device for physical isolation. Direct use will result in low transmission efficiency and limited transmission integrity. Figure 2 The data ferry platform shown here achieves efficient, stable, and secure transmission through a strategy based on channel division, priority division, device pressure sharing (pre-inspection, proxy encapsulation), and active encryption. In scenarios where data traffic accounts for more than 60% of the channel, the measured transmission delay is reduced from 3.5 seconds to 1.25 seconds. The functions of the components of the data ferry platform are as follows:

[0087] Protocol file unpacking module (also known as protocol file unpacking service, which will not be repeated in subsequent embodiments): For transmission from high security level to low security level, the forward and reverse isolation devices use files, and vice versa, TCP protocol communication is used. Through this service, the commands and files to be transmitted are cut into appropriate sizes in advance and converted according to the data flow, so that the performance of the forward and reverse isolation device machine itself is concentrated on transmission.

[0088] The channel management module (also known as the channel management service, which will not be repeated in subsequent embodiments) builds an elastic channel service to monitor data traffic. When the traffic reaches different thresholds, the existing channels are split to increase parallelism. If the parallel channel mode is used for the same data, the data must be merged and verified in the end.

[0089] Priority management module (also known as priority management service, which will not be repeated in subsequent embodiments): when data transmission reaches the limit, the priority of the data command is divided.

[0090] Pre-check module (also known as pre-check service, which will not be repeated in subsequent embodiments): checks data signatures, IP whitelists, access permissions, etc. in advance, allowing the performance of the forward and reverse isolation device itself to focus on transmission.

[0091] The encryption and decryption module (also known as the encryption and decryption service, which will not be repeated in subsequent embodiments) performs data encryption based on the SM4 symmetric encryption algorithm.

[0092] Ferry monitoring module (also known as ferry monitoring service, which will not be repeated in subsequent embodiments): Monitoring services M1 and M2 are deployed on both sides of the forward and reverse isolation devices respectively. After the request is penetrated by the built-in program of the isolation device through the message middleware on either side, the message middleware on the opposite side is responsible for receiving the request and forwarding it to the forwarding service on this side.

[0093] Based on the specific application of this preferred implementation provided in this embodiment, the process involves the client WebClient, business server A, business server B, internal and external pre-processing services OuterServer and InnerServer, and monitoring services M1 and M2. Taking the Web client initiating a request as an example (other processes are similar), the process is as follows:

[0094] (1) After the Web client initiates a request to the business server B, it uses the national encryption SM2 to verify the signature and ensure security and verify the operator's authority. It then calls the adapter to encapsulate the request and supplement the link node data, and sends it to the pre-processing service OuterServer in the ferry service cluster.

[0095] (2) The preprocessing service encrypts the data through SM4, serializes it into bye[] and stores it in a file. It uses SM3 to generate a summary and puts it into the monitoring folder. When the monitoring program detects a file change, it passes the file to M1.

[0096] (3) Message service M1 checks the file summary and passes the data into the message queue. The isolation device reads the queue content and performs internal and external penetration.

[0097] (4) The message service M2 consumes the queue content, deserializes it into a standard message object, and stores it in the internal queue.

[0098] (5) After the internal forwarding service reads the queue content, it calls the national encryption SM4 for decryption and generates a data file and stores it in the specified folder. After the monitoring program monitors the changes in the folder file, it builds a request and sends it to the internal business service.

[0099] (6) The business service performs the operation according to the request content and sends the result data to the directory specified by the forwarding service. The file content is then passed to M2.

[0100] (7) The M2 service monitors file changes, generates a summary of the file contents, and places it in the message queue. The isolation device reads the queue contents and performs internal and external penetration.

[0101] (8) After the M1 service consumes the queue content, it verifies the summary and decrypts the data and returns it to the business service. The final result is displayed on the Web client as needed.

[0102] Specifically, this embodiment provides a preferred implementation method, in which the priority management module of the data ferry platform executes the following priority algorithm:

[0103] The corresponding basic points are assigned based on the encapsulation type, including 10 points for communication commands, 5 points for service requests, 2 points for data synchronization, and 0 points for external access.

[0104] further calculating an adjustment score for the communication command;

[0105] The business request is given additional points based on the menu importance, with a value range of [0,8];

[0106] Data synchronization is assigned additional points based on the data type, with a value range of [0,5];

[0107] Add the basic score and the adjustment score or additional score to get the final priority score. Sort the tasks according to the scores. When the score difference exceeds 3, the task will be queued up.

[0108] Specifically, this embodiment provides a preferred implementation method, in which the communication command is further calculated and adjusted as follows:

[0109] If the communication command is a fee control power outage, the adjustment points are calculated according to 3+0.5*a+0.5*b+0.8*c;

[0110] If the communication command is fee-controlled closing, the adjustment points are calculated according to 4+0.5*a+0.75*b+0.8*c;

[0111] If the communication command is issued with parameters, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c;

[0112] If the communication command is a task, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c;

[0113] If the communication command is a data call test, the adjustment score is calculated according to 1+0.2*b+1*c;

[0114] If the communication command is a batch inspection, the adjustment score is calculated based on -1+0.5*c;

[0115] If the communication command is a data supplementary move, the adjustment score is calculated based on -1+0.5*c;

[0116] In the above formula, a is the number of lists of a single communication command divided by 1000, and the upper limit of a is 5; b is the value of different user types and the range is [0, 5]; c is the value of the user guaranteed during special periods and the range is [0, 10]. It is 0 under normal circumstances and ranges from 1 to 10 depending on the situation during special periods.

[0117] Specifically, this embodiment provides a preferred implementation method, in which the data desensitization module of the acquisition interface security platform executes the following desensitization rules:

[0118] Masking rules mask some fields of sensitive data, retaining a specific number of characters at the beginning and end, replacing middle fields with predetermined symbols, and keeping the original data length unchanged;

[0119] Encryption rules, converting identification numbers with unique attributes using an encryption algorithm to maintain unique correspondence of the encrypted data, wherein the identification numbers with unique attributes include the terminal asset number and the meter asset number;

[0120] Replacement rules uniformly replace sensitive information of a specific category with predefined universal identifiers.

[0121] It is understandable that in system-system interaction, there are problems such as numerous interfaces of different micro-applications, unclear management, and lack of security audit mechanism. Figure 3 The collection interface security platform shown realizes the unified aggregation and security management of data flows between system interfaces, and has functions such as threat filtering, security monitoring, data demand management, standard access services, service permission configuration, and service operation monitoring. It supports rapid response to external data request services through flexible configuration methods.

[0122] More specifically, the functions of the components of the acquisition interface security platform are as follows:

[0123] The malicious data interception module (also known as the malicious data interception center) is the first line of defense of the collection interface security platform. It includes modules such as input preprocessing, rule engine, behavior analysis, and threat situation. By establishing a rule engine library, importing and registering the characteristic values ​​of malicious data, analyzing the input information, and recording and eliminating threats after they are discovered.

[0124] External System Account Authentication Module (also known as External System Account Authentication Service): The collection interface security platform configures an independent data acquisition account for each user (peripheral system). Data users must complete account login authentication before accessing data. Only authorized accounts can retrieve data. The platform also restricts the IP addresses of users (clients), allowing access only to authorized servers.

[0125] Access scope control module (also known as access scope control service): External business application systems can only obtain data within the data object range configured for them by the acquisition interface security platform (such as obtaining regional power readings, certain statistical indicators, etc.).

[0126] Access frequency limiting module (also known as data request frequency limiting): To ensure stable and efficient platform operation and avoid downtime due to excessive pressure, the collection interface security platform sets a limit on the number of queries per unit time. The query threshold is set based on specific load conditions (optional). If a client exceeds the threshold number of queries within a set time period, the system automatically blacklists the account, restricting further use until the blacklist is removed.

[0127] Regarding data confidentiality: The collection interface security platform only stores data within a certain time period and regularly deletes data that exceeds the time limit. Requests to download data files require identity verification (generating a temporary token for verification), and data files that exceed the time limit are automatically cleared.

[0128] Data log monitoring module (also known as data interaction log monitoring service): The collection interface security platform needs to record logs such as interface interaction and data file generation to monitor platform data interaction.

[0129] Data Desensitization Module (also known as Sensitive Data Service): The collection system contains sensitive data (such as user ID, terminal manufacturer, meter manufacturer, etc.). When publishing data, the collection interface security platform can transform this sensitive information using desensitization rules to achieve reliable protection of sensitive privacy data.

[0130] The design of the collection interface security platform proposed in this embodiment is suitable for ultra-large information systems with over a thousand function points, over ten developers, and daily data growth exceeding 1.5TB. Interfaces with external systems are built by different vendors and using different standards, making it difficult to maintain compliance and security. By innovatively designing a unified data flow aggregation portal and security management platform, and employing threat filtering, security monitoring, data demand management, standard access services, service permission configuration, and service operation monitoring, the security of system interactions is comprehensively improved.

[0131] Furthermore, this embodiment pioneered the concept of device fingerprinting. To address the security risks associated with power equipment connecting to the power intranet from the internet, an innovative device fingerprinting and detection and authentication solution was designed to quickly identify unauthorized terminal access, mitigating security risks at the earliest stages of device access.

[0132] Specifically, this embodiment provides a preferred implementation method in which the static information includes version information, ESAM serial number, upstream module network restriction information, and downstream module chip ID; the dynamic information includes acquisition success rate, meter reading efficiency, and response speed. The version information includes manufacturer code, software version number, software version date, hardware version number, hardware version date, and manufacturer extension information.

[0133] Based on this preferred implementation, the specific application of setting fingerprint information for existing versions of terminal devices in this embodiment is as follows:

[0134] Fingerprint information applicable to 09 version terminal devices includes: version information;

[0135] Fingerprint information for terminal devices running versions 13 and 698: version information and ESAM serial number;

[0136] Applicable to the fingerprint information of terminal devices and energy controllers of version 13 and 698: version information, ESAM serial number, upstream module network restriction information, and downstream module chip ID.

[0137] More specifically, the fingerprint authentication design is also based on whether the device has an ESAM chip. If the device has an ESAM chip, the ESAM chip information can be obtained, so its device fingerprint information is relatively rich. The monitoring process is as follows: Figure 4 As shown. When a terminal without an ESAM chip logs in, only the terminal address and administrative division code are verified. The device fingerprint is relatively simple and this information is easy to forge. Therefore, it is not possible to restrict it before access. The only way is to check for suspected illegal devices after the terminal accesses. The process is as follows: Figure 5 shown.

[0138] Specifically, this embodiment provides a preferred implementation method, wherein the secure access gateway includes an idle state, a negotiation preparation state, a negotiation waiting state, and a negotiation completion state. Figure 6 The following state transition rules are executed:

[0139] When receiving the terminal login message, it triggers the transition from the idle state to the negotiation preparation state;

[0140] When receiving the terminal basic information response message, it triggers the transition from the negotiation preparation state to the waiting negotiation state;

[0141] When receiving the terminal negotiation response message, it triggers the transition from the waiting negotiation state to the negotiation completion state;

[0142] When receiving the terminal logout message, it triggers the transition from the negotiation completion state to the idle state;

[0143] In the negotiation preparation state and the negotiation waiting state, when an unexpected message is received, the device discards it or returns an error message.

[0144] It can be understood that this embodiment establishes a secure access area in the power information intranet and deploys a communication gateway with the equipment. On the one hand, it realizes functions such as message sending and receiving, link maintenance, and heartbeat reply. At the same time, it has security audit capabilities and adopts the SSAL protocol to realize security functions such as identity authentication of power terminals and message transmission encryption. Data is transmitted through the target address and source address, or according to the static route of the network connection.

[0145] Example 2:

[0146] This embodiment provides a method for security management of a master station of an electricity usage information collection system, and applies the security management system described in the first embodiment to implement security management of the master station of the electricity usage information collection system.

[0147] Example 3:

[0148] like Figure 7 As shown, this embodiment provides an electronic device, which may include: at least one processor, at least one network interface, a user interface, a memory, and at least one communication bus.

[0149] The communication bus can be used to realize the connection and communication among the above components.

[0150] The user interface may include buttons, and the optional user interface may also include a standard wired interface or a wireless interface.

[0151] The network interface may include, but is not limited to, a Bluetooth module, an NFC module, a Wi-Fi module, and the like.

[0152] Among them, the processor may include one or more processing cores. The processor uses various interfaces and lines to connect the various parts of the entire electronic device, and performs various functions of the electronic device and processes data by running or executing instructions, programs, code sets or instruction sets stored in the memory, and calling data stored in the memory. Optionally, the processor can be implemented in at least one hardware form of DSP, FPGA, PLA. The processor can integrate one or a combination of CPU, GPU and modem. Among them, the CPU mainly processes the operating system, user interface and application programs; the GPU is responsible for rendering and drawing the content to be displayed on the display screen; the modem is used to handle wireless communications. It can be understood that the above-mentioned modem may not be integrated into the processor, but may be implemented separately through a chip.

[0153] The memory may include RAM or ROM. Optionally, the memory includes non-transitory computer-readable media. The memory may be used to store instructions, programs, codes, code sets, or instruction sets. The memory may include a program storage area and a data storage area. The program storage area may store instructions for implementing an operating system, instructions for at least one function (such as a touch function, a sound playback function, an image playback function, etc.), instructions for implementing the above-mentioned method embodiments, etc.; the data storage area may store data related to the above-mentioned method embodiments, etc. The memory may optionally be at least one storage device located remotely from the aforementioned processor. The memory, as a computer storage medium, may include an operating system, a network communication module, a user interface module, and a security management application. The processor may be used to call the security management application stored in the memory and execute the security management steps mentioned in the above-mentioned embodiments.

[0154] Example 4:

[0155] This embodiment provides a computer-readable storage medium storing instructions that, when executed on a computer or processor, cause the computer or processor to perform one or more steps of the above-described embodiments. If the components of the electronic device described above are implemented as software functional units and sold or used as independent products, they may be stored in the computer-readable storage medium.

[0156] In the above embodiments, all or part of the embodiments can be implemented using software, hardware, firmware, or any combination thereof. When implemented using software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this specification are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted via the computer-readable storage medium. The computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, optical fiber, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that can be accessed by a computer, or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a digital versatile disc (DVD)), or a semiconductor medium (eg, a solid state drive (SSD)).

[0157] Those skilled in the art will appreciate that all or part of the process steps in the method of the second embodiment described above can be implemented by instructing the relevant hardware through a computer program. The program can be stored in a computer-readable storage medium. When executed, the program can include the processes of the embodiments of the above methods. The aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks. The technical features of this embodiment and the implementation scheme can be combined in any manner unless they conflict.

[0158] It should be noted that for the aforementioned method embodiments, for simplicity of description, they are all expressed as a series of action combinations. However, those skilled in the art should be aware that the present invention is not limited by the order of the actions described, because according to the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

[0159] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0160] The foregoing is merely an exemplary embodiment of the present invention and is not intended to limit the scope of the present invention. That is, any equivalent changes and modifications made in accordance with the teachings of the present invention are still within the scope of the present invention. A person skilled in the art will readily come up with the embodiments of the present invention after considering the specification and practicing the disclosure herein. The present invention is intended to cover any variations, uses, or adaptations of the present invention that follow the general principles of the present invention and include common knowledge or customary technical means in the art that are not described in the present invention. The description and examples are to be regarded as exemplary only, and the scope and spirit of the present invention are defined by the claims.

Claims

1. A safety management system for a master station of an electricity consumption information collection system, characterized in that: include: High-level protection area, low-level protection area and access protection area, adjacent protection areas are physically isolated by forward and reverse isolation devices; A data ferry platform is deployed in the high-level protection area for secure data transmission across protection areas, including a protocol file decompression module, a pre-check module, an encryption and decryption module, a channel management module, a priority management module, and a ferry monitoring module; A collection interface security platform is deployed in the low-level protection area to manage the data interaction interface between systems, including a malicious data interception module, an external system account authentication module, an access range control module, an access frequency limitation module, a data desensitization module, and a data log monitoring module; A device fingerprint authentication platform is deployed in the access protection area for performing terminal authentication based on static and dynamic device information; A secure access gateway is also deployed in the access protection area, which uses the SSAL protocol to implement identity authentication of terminal devices and message transmission encryption; The data ferry platform also includes a business service module and an internal forwarding module. The ferry monitoring module includes an external monitoring unit and an internal monitoring unit. The data ferry platform performs the following steps to achieve secure data transmission across protection zones: After the business service module receives the client request, the protocol file decompression module performs SM2 verification and encapsulation; After the pre-check module completes the security check, the channel management module allocates a transmission channel; The encryption and decryption module encrypts the data SM4 and serializes it into a file to generate an SM3 digest; The external monitoring unit triggers the transmission of the forward and reverse isolation devices after detecting the file change; The internal monitoring unit deserializes the received data and stores it in the internal message queue; The priority management module assigns processing priorities to the data in the internal message queue; After the internal forwarding module obtains data from the internal message queue according to priority, it calls the encryption and decryption module SM4 to decrypt and then passes it to the business service module for processing; After the business service module completes the processing, the response data is returned to the client through the reverse process; The priority management module of the data ferry platform implements the following priority algorithm: The corresponding basic points are assigned based on the encapsulation type, including 10 points for communication commands, 5 points for service requests, 2 points for data synchronization, and 0 points for external access. further calculating an adjustment score for the communication command; The business request is given additional points based on the menu importance, with a value range of [0,8]; Data synchronization is assigned additional points based on the data type, with a value range of [0,5]; Add the basic score and the adjustment score or additional score to get the final priority score. Sort the tasks according to the scores. When the score difference exceeds 3, the task will be queued up.

2. A security management system for a power consumption information collection system master station according to claim 1, characterized in that: Further calculating the adjustment score of the communication command is specifically as follows: If the communication command is a fee control power outage, the adjustment points are calculated according to 3+0.5*a+0.5*b+0.8*c; If the communication command is fee-controlled closing, the adjustment points are calculated according to 4+0.5*a+0.75*b+0.8*c; If the communication command is issued with parameters, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c; If the communication command is a task, the adjustment score is calculated based on 2+0.2*a+0.2*b+0.5*c; If the communication command is a data call test, the adjustment score is calculated according to 1+0.2*b+1*c; If the communication command is a batch inspection, the adjustment score is calculated based on -1+0.5*c; If the communication command is a data supplementary move, the adjustment score is calculated based on -1+0.5*c; In the above formula, a is the number of lists of a single communication command divided by 1000, and the upper limit of a is 5. b is the value of different user types and the range is [0,5]. c is the value of users guaranteed during special periods and the range is [0,10].

3. The safety management system of the power consumption information collection system master station according to claim 1, characterized in that: The data desensitization module of the acquisition interface security platform implements the following desensitization rules: Masking rules mask some fields of sensitive data, retaining a specific number of characters at the beginning and end, replacing middle fields with predetermined symbols, and keeping the original data length unchanged; Encryption rules, converting identification numbers with unique attributes using an encryption algorithm to maintain unique correspondence of the encrypted data, wherein the identification numbers with unique attributes include the terminal asset number and the meter asset number; Replacement rules uniformly replace sensitive information of a specific category with predefined universal identifiers.

4. The security management system of the power consumption information collection system master station according to claim 1, characterized in that: The static information includes version information, ESAM serial number, uplink module network restriction information, and downlink module chip ID; The dynamic information includes collection success rate, meter reading efficiency and response speed.

5. The safety management system of the main station of the power consumption information collection system according to claim 1 is characterized in that: The secure access gateway includes idle state, negotiation preparation state, negotiation waiting state and negotiation completion state, and executes the following state transition rules: When receiving the terminal login message, it triggers the transition from the idle state to the negotiation preparation state; When receiving the terminal basic information response message, it triggers the transition from the negotiation preparation state to the waiting negotiation state; When receiving the terminal negotiation response message, it triggers the transition from the waiting negotiation state to the negotiation completion state; When receiving the terminal logout message, it triggers the transition from the negotiation completion state to the idle state; In the negotiation preparation state and the negotiation waiting state, when an unexpected message is received, the device discards it or returns an error message.

6. A safety management method for a master station of an electricity consumption information collection system, characterized in that: The security management system according to any one of claims 1 to 5 is applied to realize the security management of the main station of the power consumption information collection system.

7. A computer device comprising a memory, a processor, and a computer program, wherein: When the computer program is executed by a processor, the security management method according to claim 6 is implemented.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the security management method according to claim 6 is implemented.

Images