Power distribution intelligent gateway access detection system and method

Abstract

The invention discloses a power distribution intelligent gateway access detection system and method. A data acquisition module is mainly used for collecting sensing device data and Internet of Things terminal data in a power distribution room in real time; the access detection module is mainly used for triggering an access detection process when new equipment or a new Internet of Things terminal is accessed; the communication module is mainly used for uploading the processed data to the Internet of Things platform after the detection is passed, and receiving a control instruction issued by the Internet of Things platform; the local control module is mainly used for executing equipment control according to a preset local control strategy when the network is interrupted, and synchronously caching data which are not uploaded; and the processing module is mainly used for coordinating data interaction and task scheduling among the modules. The method has the advantages that the security and compatibility of equipment access are ensured through automatic equipment identification, protocol analysis, data verification and a local cache mechanism, and high availability and data integrity are still kept when the network fluctuates.

Description

Technical Field

[0001] The present invention relates to access detection, and in particular to a power distribution intelligent gateway access detection system and method. Background Art

[0002] With the modernization of power systems, intelligent distribution networks have become a key focus for improving grid efficiency and safety. As the core hub connecting smart devices with the power grid, intelligent distribution gateways undertake multiple functions, including data collection, monitoring, and control, to ensure reliable power system operation. However, with the increasing number of smart devices and system complexity, efficient and accurate detection of smart gateway access status and proper functionality has become a major technical challenge facing the power industry.

[0003] The current access detection methods on the market have limitations in terms of device identification and protocol adaptation. They can usually only support specific brands or models of devices and lack flexibility and scalability. This means that when new devices are connected or device protocols change, existing systems are often unable to adapt in a timely manner, resulting in the device being unable to access normally or data communication being interrupted. Secondly, existing systems often lack efficient security authentication mechanisms, and security measures such as identity verification and data encryption after device access are relatively weak, making them vulnerable to network attacks or data tampering. In addition, many systems have relatively simple data integrity checks and may not be able to effectively cope with complex data transmission environments, resulting in data loss or errors. For special situations such as network interruptions, some systems on the market lack effective local storage and caching mechanisms, resulting in the inability to store or upload data in a timely manner when communication is interrupted, affecting the reliability and real-time performance of the system. Summary of the Invention

[0004] To complement existing access detection systems and methods, this paper proposes a power distribution intelligent gateway access detection system and method. This method ensures the security and compatibility of device access through automatic device identification, protocol parsing, and multi-level security authentication. Data verification and local caching ensure high system availability and data integrity even during network fluctuations.

[0005] In order to achieve the above objects, the technical solution adopted by the present invention is:

[0006] A power distribution intelligent gateway access detection system, comprising:

[0007] Data acquisition module: The data acquisition module is mainly used to collect sensor device data and IoT terminal data in the power distribution room in real time;

[0008] Access detection module: The access detection module is electrically connected to the data acquisition module and is mainly used to trigger the access detection process when a new device or new IoT terminal is connected. The detection process includes device type identification, communication protocol compliance verification, security authentication and data integrity verification;

[0009] Communication module: The communication module is mainly used to upload the processed data to the Internet of Things platform after the detection is passed, and receive control instructions issued by the Internet of Things platform;

[0010] Local control module: The local control module is mainly used to execute device control according to the preset local control strategy when the network is interrupted, and synchronously cache the data that has not been uploaded;

[0011] Data storage module: The data storage module is electrically connected to the data acquisition module, the communication module and the local control module, and is mainly used to store at least one cycle of distribution room operation data and access detection logs;

[0012] Processing module: The processing module is electrically connected to the access detection module, communication module, local control module, and data storage module, and is mainly used to coordinate data interaction and task scheduling among the modules.

[0013] Preferably, the data acquisition module specifically includes:

[0014] Identify connected sensor devices and IoT terminals in the power distribution room through active scanning using dynamic port scanning and static configuration tables;

[0015] The monitoring device broadcasts messages to capture the identification information of the newly connected device.

[0016] Preferably, the access detection module specifically includes:

[0017] Device identification unit: The device identification unit is mainly used to automatically identify the type of new device through the device identification code, MAC address and port characteristics;

[0018] Protocol parsing unit: The protocol parsing unit is mainly used to parse the communication protocol format of the device and match it with the standard protocol template in the preset protocol library; if the protocol does not match, a protocol conversion script is generated to adapt the gateway communication interface;

[0019] Security authentication unit: The security authentication unit is mainly used to set multi-level authentication strategies according to the device type, including device identity certificate verification, key exchange and data encryption strength detection;

[0020] Data verification unit: The data verification unit is mainly used to perform integrity verification on the initial data packet uploaded by the device, including data format, timing and content legitimacy verification.

[0021] Preferably, the protocol analysis unit specifically includes:

[0022] Based on the original message obtained by the data acquisition module, the first N bytes are captured as the protocol analysis sample, and the timestamp, source port number and payload length metadata of the message are recorded;

[0023] Based on the analysis sample, the message structure is parsed and key feature fields are extracted, including: fixed identifier, data length representation, and check code rules;

[0024] Compare the extracted feature fields with the standard protocol template library in the data storage module. If a match is successful, mark the protocol type and version.

[0025] If the match fails, dynamic protocol modeling is triggered to generate a temporary protocol description file;

[0026] Based on the protocols that are compliant but fail to match in the temporary protocol description file, a protocol conversion script is automatically generated to convert the protocol format to adapt to the gateway communication interface.

[0027] Preferably, the security authentication unit specifically includes:

[0028] Based on the digital certificate sent by the receiving device obtained by the data acquisition module, the legitimacy of the certificate chain is verified;

[0029] For key control equipment, a two-way authentication process is carried out to confirm the authenticity of the equipment;

[0030] Ensure reliable encryption of communication links based on dynamic key negotiation and key update strategies;

[0031] Implement a hierarchical authentication strategy based on device type. Key control devices are forced to use two-way certificate authentication and dynamic keys, and data packets are timestamped and serialized. Detection devices are restricted to one-way authentication and use fixed-period keys.

[0032] Differentiated security authentication is performed based on the above content.

[0033] Preferably, the data verification unit specifically includes:

[0034] Use regular expressions to verify the compliance of data structure formats and the length and range of data;

[0035] Verify timing consistency through timestamp continuity check and clock synchronization verification;

[0036] Based on the verification algorithm defined by the protocol, the check code is recalculated and compared with the check field in the data packet to verify the data integrity;

[0037] For large data packets transmitted in fragments, the checksum is calculated for each fragment and the overall hash value is verified;

[0038] Based on the detection of new device types or changes in business rules, the latest verification rules are obtained through the IoT platform and dynamically loaded into memory.

[0039] Preferably, the communication module specifically includes:

[0040] Scan the network interface, initialize the primary communication link and the backup link, obtain signal strength, bandwidth and delay data, and dynamically obtain the IoT platform address;

[0041] Based on the data verified by the data verification unit, it is encapsulated into a standard communication protocol and a priority tag is added;

[0042] Based on end-to-end encryption, encrypted main link communication is used, and the session key is dynamically generated by the security authentication unit;

[0043] Based on the real-time transmission data volume, signal strength and delay of the primary and backup communication links, multi-channel intelligent switching is performed to ensure that high-priority data is transmitted first;

[0044] During network outages, data to be transmitted is stored in a ring buffer according to priority through a local cache queue. When the queue is full, low-priority data is eliminated according to the "old data overwrite" strategy.

[0045] After the network is restored, data synchronization is performed based on incremental data retransmission and full data retransmission.

[0046] Furthermore, a method for detecting access to a power distribution intelligent gateway includes:

[0047] Based on the monitoring device, it can sense the access of new devices in real time and cache data, and trigger the detection process through dynamic scanning and message monitoring;

[0048] Based on multi-dimensional detection including: device identification, dynamic protocol analysis, layered authentication, and data verification, it enables rapid and compliant access of unknown devices;

[0049] Through intelligent management of primary and backup communication link switching and network disconnection emergency response, reliable data transmission and local control are guaranteed;

[0050] Based on hierarchical storage of high-frequency operation data and detection logs, a time series database is established and abnormal event records are separated;

[0051] Dynamically update protocol templates and security policies, and regularly rotate keys and certificates to adapt to device and threat changes.

[0052] Compared with the prior art, the advantages of the present invention are:

[0053] The system can automatically identify and verify newly connected devices, ensuring that all devices comply with standard protocols and security requirements, effectively preventing unauthorized device access and potential security threats. Secondly, the protocol parsing and conversion function ensures compatibility between different devices. Even non-predefined devices can communicate smoothly with the gateway through dynamic protocol modeling and adaptation scripts, improving the flexibility and scalability of the system. In addition, based on a multi-level security authentication mechanism, including two-way authentication and dynamic key negotiation, data security during the communication process is greatly enhanced, preventing data leakage and tampering. The data verification function ensures the integrity and timeliness of the data uploaded by the device, effectively reducing the risk of equipment failure or misoperation due to data errors. Finally, when the network is interrupted, the local control module caches the unuploaded data and prioritizes the transmission of high-priority data, ensuring the stability of the system and data continuity in complex environments, ensuring the high availability and real-time performance of the intelligent distribution system. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 A schematic diagram of the system proposed by the present invention;

[0055] Figure 2 A schematic diagram of the method proposed in the present invention;

[0056] Figure 3 This is the workflow diagram of the data acquisition module proposed in the present invention;

[0057] Figure 4 This is a schematic diagram of the access detection module proposed by the present invention;

[0058] Figure 5 This is a workflow diagram of the protocol analysis unit proposed in the present invention;

[0059] Figure 6 This is a workflow diagram of the security authentication unit proposed by the present invention;

[0060] Figure 7 This is a workflow diagram of the data verification unit proposed in the present invention;

[0061] Figure 8 The communication module workflow diagram proposed by the present invention;

[0062] Figure 9 This is a diagram of the architecture of the electronic equipment in this solution;

[0063] Figure 10 This is a schematic diagram of the computer-readable storage medium structure in this solution. DETAILED DESCRIPTION

[0064] The following description is intended to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are merely examples, and those skilled in the art may conceive of other obvious variations.

[0065] See Figure 1 As shown, a power distribution intelligent gateway access detection system includes:

[0066] Data acquisition module: The data acquisition module is mainly used to collect sensor device data and IoT terminal data in the power distribution room in real time;

[0067] Access detection module: The access detection module is electrically connected to the data acquisition module and is mainly used to trigger the access detection process when a new device or new IoT terminal is connected. The detection process includes device type identification, communication protocol compliance verification, security authentication and data integrity verification;

[0068] Communication module: The communication module is mainly used to upload the processed data to the Internet of Things platform after the detection is passed, and receive control instructions issued by the Internet of Things platform;

[0069] Local control module: The local control module is mainly used to execute device control according to the preset local control strategy when the network is interrupted, and synchronously cache the data that has not been uploaded;

[0070] Data storage module: The data storage module is electrically connected to the data acquisition module, the communication module and the local control module, and is mainly used to store at least one cycle of distribution room operation data and access detection logs;

[0071] Processing module: The processing module is electrically connected to the access detection module, communication module, local control module, and data storage module, and is mainly used to coordinate data interaction and task scheduling among the modules.

[0072] See Figure 2 As shown, a method for detecting access to a power distribution intelligent gateway includes:

[0073] Based on the monitoring device, it can sense the access of new devices in real time and cache data, and trigger the detection process through dynamic scanning and message monitoring;

[0074] Based on multi-dimensional detection including: device identification, dynamic protocol analysis, layered authentication, and data verification, it enables rapid and compliant access of unknown devices;

[0075] Through intelligent management of primary and backup communication link switching and network disconnection emergency response, reliable data transmission and local control are guaranteed;

[0076] Based on hierarchical storage of high-frequency operation data and detection logs, a time series database is established and abnormal event records are separated;

[0077] Dynamically update protocol templates and security policies, and regularly rotate keys and certificates to adapt to device and threat changes.

[0078] See Figure 3 As shown, the data acquisition module specifically includes:

[0079] Identify connected sensor devices and IoT terminals in the power distribution room through active scanning using dynamic port scanning and static configuration tables;

[0080] The monitoring device broadcasts messages to capture the identification information of the newly connected device.

[0081] Specifically, the purpose of dynamic port scanning is to scan the devices in the power distribution room network and identify currently active devices and open ports. First, determine the IP address range of the devices in the power distribution room that need to be scanned. If the IP segment of the devices in the power distribution room is 192.168.1.0 / 24, then the network segment needs to be scanned, and based on the scan results, the open ports and their corresponding services need to be identified. If the scan results show that a device has HTTP (port 80) and SSH (port 22) open, it can be determined that the device may be a web server or SSH device. The static configuration table is used to record the configuration of known sensor devices and IoT terminals in the power distribution room. By combining with the results of dynamic port scanning, connected devices can be accurately identified;

[0082] By monitoring the device's broadcast messages, you can capture the identification information of newly connected devices. The message capture time formula is:

[0083]

[0084] in, The time required to capture a broadcast message, The number of broadcast messages per second.

[0085] See Figure 4 As shown, the access detection module specifically includes:

[0086] Device identification unit: The device identification unit is mainly used to automatically identify the type of new device through the device identification code, MAC address and port characteristics;

[0087] Protocol parsing unit: The protocol parsing unit is mainly used to parse the communication protocol format of the device and match it with the standard protocol template in the preset protocol library; if the protocol does not match, a protocol conversion script is generated to adapt the gateway communication interface;

[0088] Security authentication unit: The security authentication unit is mainly used to set multi-level authentication strategies according to the device type, including device identity certificate verification, key exchange and data encryption strength detection;

[0089] Data verification unit: The data verification unit is mainly used to perform integrity verification on the initial data packet uploaded by the device, including data format, timing and content legitimacy verification.

[0090] See Figure 5 As shown, the protocol parsing unit specifically includes:

[0091] Based on the original message obtained by the data acquisition module, the first N bytes are captured as the protocol analysis sample, and the timestamp, source port number and payload length metadata of the message are recorded;

[0092] Based on the analysis sample, the message structure is parsed and key feature fields are extracted, including: fixed identifier, data length representation, and check code rules;

[0093] Compare the extracted feature fields with the standard protocol template library in the data storage module. If a match is successful, mark the protocol type and version.

[0094] If the match fails, dynamic protocol modeling is triggered to generate a temporary protocol description file;

[0095] Based on the protocols that are compliant but fail to match in the temporary protocol description file, a protocol conversion script is automatically generated to convert the protocol format to adapt to the gateway communication interface.

[0096] Specifically, the original network message is obtained from the data acquisition module. Usually, these messages can be captured by a sniffing tool or received directly from the network interface. The first N bytes of the original message are extracted as a protocol analysis sample. These bytes usually contain protocol header information, such as a fixed identifier, data length, checksum, and other fields. At the same time, the message's timestamp, source port number, and payload length are recorded.

[0097] The standard protocol template library contains definitions of various known protocols, including protocol identifiers, data length fields, checksum rules, etc. Based on the extracted feature fields, the protocol is compared with the standard protocol template library. Assume that the standard template is:

[0098]

[0099] If the match is successful, the protocol type and version are recorded:

[0100]

[0101] If the comparison fails, dynamic protocol modeling is triggered to generate a temporary protocol description file;

[0102] If the comparison fails, the protocol structure is further analyzed based on the message sample, attempting to infer the meaning of the protocol fields. A protocol description file is generated based on the sample data. The temporary protocol description file may contain: the protocol identifier ProtocolIdentifier, the order and type of each field, such as integer, string, and the field length description FieldLength;

[0103] The structure of the temporary description file can be expressed as:

[0104]

[0105] Among them, ProtocolIdentifier is the unique identifier of the protocol. A list of fields, each field includes name, data type and length;

[0106] Generate a protocol conversion script using the field information in the temporary protocol description file. The conversion script will convert the format according to the gateway communication interface requirements. The protocol conversion process includes:

[0107] Field parsing: parse each field in the original message;

[0108] Field reorganization: reorganize the field order and adjust the field length according to the gateway protocol requirements;

[0109] Encoding conversion: If necessary, convert the encoding format of the field.

[0110] See Figure 6 As shown, the security authentication unit specifically includes:

[0111] Based on the digital certificate sent by the receiving device obtained by the data acquisition module, the legitimacy of the certificate chain is verified;

[0112] For key control equipment, a two-way authentication process is carried out to confirm the authenticity of the equipment;

[0113] Ensure reliable encryption of communication links based on dynamic key negotiation and key update strategies;

[0114] Implement a hierarchical authentication strategy based on device type. Key control devices are forced to use two-way certificate authentication and dynamic keys, and data packets are timestamped and serialized. Detection devices are restricted to one-way authentication and use fixed-period keys.

[0115] Differentiated security authentication is performed based on the above content.

[0116] Specifically, the digital certificate sent by the device is generated by the device authentication module and contains the device's public key, device information, and content signed by an authoritative certificate authority (CA). The process of verifying the legitimacy of the certificate chain mainly checks whether the certificate chain is issued by a trusted certificate authority (CA) and ensures that the certificate validity period and signature are correct;

[0117] For critical control devices, two-way authentication is required to ensure the authenticity of the device, including:

[0118] The device initiates an authentication request to the authentication center and includes its own certificate and certificate chain.

[0119] The Certification Center verifies the validity and legitimacy of the device certificate and performs the certificate verification in step 1;

[0120] The certification center generates a random number , used to prevent replay attacks and sent to the device;

[0121] Device uses private key For random numbers Sign and generate authentication response:

[0122]

[0123] The device will and Send it back to the certification center together;

[0124] The authentication center uses the device's public key Verify the response from the device:

[0125]

[0126] If the verification is successful, the authentication center confirms the device identity;

[0127] After the authentication center confirms the legitimacy of the device through a two-way verification process, it issues an authentication token or key.

[0128] Implement different authentication strategies based on device type to ensure that authentication for critical control and detection devices meets their security requirements. For critical control devices, two-way certificate authentication and dynamic key negotiation are mandatory. The authentication process is as follows:

[0129] Two-way certificate authentication: Follow the two-way authentication process in the above steps;

[0130] Dynamic key negotiation: Dynamic key negotiation and periodic key update strategies are used to ensure key confidentiality.

[0131] Timestamp and sequence number: All data packets are appended with a timestamp T and a sequence number S: Packet = (Payload, T, S), where T is the current timestamp and S is the sequence number of the data packet to prevent replay attacks;

[0132] For detection devices, only one-way authentication is enabled, and a fixed-period key is used for encrypted communication. The authentication process is as follows:

[0133] One-way certificate authentication: the device sends the certificate, and the certification center verifies the legitimacy of the device certificate;

[0134] Fixed-period key: Uses a pre-shared key Encrypt communications;

[0135] Fixed-cycle key update: every Time unit, update shared key ;

[0136] The key update formula is:

[0137]

[0138] in, The key update function.

[0139] See Figure 7 As shown, the data verification unit specifically includes:

[0140] Use regular expressions to verify the compliance of data structure formats and the length and range of data;

[0141] Verify timing consistency through timestamp continuity check and clock synchronization verification;

[0142] Based on the verification algorithm defined by the protocol, the check code is recalculated and compared with the check field in the data packet to verify the data integrity;

[0143] For large data packets transmitted in fragments, the checksum is calculated for each fragment and the overall hash value is verified;

[0144] Based on the detection of new device types or changes in business rules, the latest verification rules are obtained through the IoT platform and dynamically loaded into memory.

[0145] Specifically, according to the defined structure, write the corresponding regular expression to ensure that the input data format meets the requirements and verify the data item by item. , apply the corresponding regular expression rules to each field:

[0146]

[0147] If all fields match successfully, the data format is legal;

[0148] Timestamp verification mainly ensures that the timestamps of consecutive data packets or events are incremented. Assume that the current timestamp is , the timestamp of the previous data is , should meet the following requirements:

[0149]

[0150] if , then time rollback occurs, which may be a clock synchronization problem or data transmission error;

[0151] For IoT devices, it is usually necessary to ensure clock synchronization. Assume that the device timestamp is , and the network standard time is The allowed time deviation range is :

[0152]

[0153] If the deviation exceeds the maximum allowable value , then the clock is considered to be out of sync and needs to be corrected;

[0154] The specific verification code verification process in the data integrity verification process is as follows:

[0155] Extract the payload from the packet Sum check code ;

[0156] Calculate the checksum of the payload ;

[0157] Compare checksums:

[0158] If they are equal, the data is complete; if they are not equal, the data may have been tampered with or an error may have occurred during transmission;

[0159] When a device detects a new device type or a business rule change, the IoT platform pushes updated validation rules. After receiving the rules, the device dynamically loads them into memory. The new validation rules replace the old ones and are applied during data validation. For example, the new rules may include stricter data formats or range restrictions.

[0160] See Figure 8 As shown, the communication module specifically includes:

[0161] Scan the network interface, initialize the primary communication link and the backup link, obtain signal strength, bandwidth and delay data, and dynamically obtain the IoT platform address;

[0162] Based on the data verified by the data verification unit, it is encapsulated into a standard communication protocol and a priority tag is added;

[0163] Based on end-to-end encryption, encrypted main link communication is used, and the session key is dynamically generated by the security authentication unit;

[0164] Based on the real-time transmission data volume, signal strength and delay of the primary and backup communication links, multi-channel intelligent switching is performed to ensure that high-priority data is transmitted first;

[0165] During network outages, data to be transmitted is stored in a ring buffer according to priority through a local cache queue. When the queue is full, low-priority data is eliminated according to the "old data overwrite" strategy.

[0166] After the network is restored, data synchronization is performed based on incremental data retransmission and full data retransmission.

[0167] Specifically, the link's real-time transmission data volume, signal strength, and delay data are used to determine whether the link needs to be switched. If the status of the primary link does not meet the priority requirements (for example, the delay is too high), the link is switched to the backup link. The switching decision formula is:

[0168]

[0169] When the network is disconnected, the data will be cached in the local queue. The data queue is a ring buffer. , , each data packet With priority tags, when the cache queue is full, the "old data overwrite" strategy is adopted. Low-priority data is eliminated based on priority judgment, and each time new data is stored, it is determined whether the maximum capacity is exceeded.

[0170] Furthermore, the method according to the embodiment of the present application can also be used with the aid of Figure 9 The electronic device architecture shown in FIG. Figure 9 As shown, the electronic device 500 may include a bus 501, one or more CPUs 502, a read-only memory (ROM) 503, a random access memory (RAM) 504, a communication port 505 connected to a network, an input / output component 506, a hard disk 507, etc. The storage device in the electronic device 500, such as the ROM 503 or the hard disk 507, may store a power distribution intelligent gateway access detection system and method provided by the present application. The electronic device 500 may also include a terminal interface 508. Of course, Figure 9 The architecture shown is only exemplary and can be omitted according to actual needs when implementing different devices. Figure 9 One or more components of an electronic device are shown.

[0171] Figure 10 This is a schematic diagram of the computer-readable storage medium structure provided by an embodiment of the present application. Figure 10 As shown, a computer-readable storage medium 600 according to one embodiment of the present application is shown. Computer-readable instructions are stored on the computer-readable storage medium 600. When the computer-readable instructions are executed by the processor, a distribution intelligent gateway access detection system and method according to an embodiment of the present application described with reference to the above figures can be executed. The storage medium 600 includes, but is not limited to, for example, volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and cache memory. Non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc.

[0172] It should be noted that the order in which the embodiments of the present invention are described above is for illustrative purposes only and does not necessarily represent the superiority or inferiority of the embodiments. Furthermore, the foregoing descriptions of specific embodiments of this specification are provided. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order or sequential sequence shown to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0173] The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments.

[0174] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A power distribution intelligent gateway access detection system, characterized in that: include: Data acquisition module: The data acquisition module is mainly used to collect sensor device data and IoT terminal data in the power distribution room in real time; Access detection module: The access detection module is electrically connected to the data acquisition module and is mainly used to trigger the access detection process when a new device or new IoT terminal is connected. The detection process includes device type identification, communication protocol compliance verification, security authentication and data integrity verification; Communication module: The communication module is mainly used to upload the processed data to the Internet of Things platform after the detection is passed, and receive control instructions issued by the Internet of Things platform; Local control module: The local control module is mainly used to execute device control according to the preset local control strategy when the network is interrupted, and synchronously cache the data that has not been uploaded; Data storage module: The data storage module is electrically connected to the data acquisition module, the communication module and the local control module, and is mainly used to store at least one cycle of distribution room operation data and access detection logs; Processing module: The processing module is electrically connected to the access detection module, communication module, local control module, and data storage module, and is mainly used to coordinate data interaction and task scheduling among the modules.

2. A power distribution intelligent gateway access detection system according to claim 1, characterized in that: The data acquisition module specifically includes: Identify connected sensor devices and IoT terminals in the power distribution room through active scanning using dynamic port scanning and static configuration tables; The monitoring device broadcasts messages to capture the identification information of the newly connected device.

3. The power distribution intelligent gateway access detection system according to claim 1, characterized in that: The access detection module specifically includes: Device identification unit: The device identification unit is mainly used to automatically identify the type of new device through the device identification code, MAC address and port characteristics; Protocol parsing unit: The protocol parsing unit is mainly used to parse the communication protocol format of the device and match it with the standard protocol template in the preset protocol library; if the protocol does not match, a protocol conversion script is generated to adapt the gateway communication interface; Security authentication unit: The security authentication unit is mainly used to set multi-level authentication strategies according to the device type, including device identity certificate verification, key exchange and data encryption strength detection; Data verification unit: The data verification unit is mainly used to perform integrity verification on the initial data packet uploaded by the device, including data format, timing and content legitimacy verification.

4. A power distribution intelligent gateway access detection system according to claim 3, characterized in that: The protocol analysis unit specifically includes: Based on the original message obtained by the data acquisition module, the first N bytes are captured as the protocol analysis sample, and the timestamp, source port number and payload length metadata of the message are recorded; Based on the analysis sample, the message structure is parsed and key feature fields are extracted, including: fixed identifier, data length representation, and check code rules; Compare the extracted feature fields with the standard protocol template library in the data storage module. If a match is successful, mark the protocol type and version. If the match fails, dynamic protocol modeling is triggered to generate a temporary protocol description file; Based on the protocols that are compliant but fail to match in the temporary protocol description file, a protocol conversion script is automatically generated to convert the protocol format to adapt to the gateway communication interface.

5. The power distribution intelligent gateway access detection system according to claim 3, characterized in that: The security authentication unit specifically includes: Based on the digital certificate sent by the receiving device obtained by the data acquisition module, the legitimacy of the certificate chain is verified; For key control equipment, a two-way authentication process is carried out to confirm the authenticity of the equipment; Ensure reliable encryption of communication links based on dynamic key negotiation and key update strategies; Implement a hierarchical authentication strategy based on device type. Key control devices are forced to use two-way certificate authentication and dynamic keys, and data packets are timestamped and serialized. Detection devices are restricted to one-way authentication and use fixed-period keys. Differentiated security authentication is performed based on the above content.

6. A power distribution intelligent gateway access detection system according to claim 3, characterized in that: The data verification unit specifically includes: Use regular expressions to verify the compliance of data structure formats and the length and range of data; Verify timing consistency through timestamp continuity check and clock synchronization verification; Based on the verification algorithm defined by the protocol, the check code is recalculated and compared with the check field in the data packet to verify the data integrity; For large data packets transmitted in fragments, the checksum is calculated for each fragment and the overall hash value is verified; Based on the detection of new device types or changes in business rules, the latest verification rules are obtained through the IoT platform and dynamically loaded into memory.

7. The power distribution intelligent gateway access detection system according to claim 1, characterized in that: The communication module specifically includes: Scan the network interface, initialize the primary communication link and the backup link, obtain signal strength, bandwidth and delay data, and dynamically obtain the IoT platform address; Based on the data verified by the data verification unit, it is encapsulated into a standard communication protocol and a priority tag is added; Based on end-to-end encryption, encrypted main link communication is used, and the session key is dynamically generated by the security authentication unit; Based on the real-time transmission data volume, signal strength and delay of the primary and backup communication links, multi-channel intelligent switching is performed to ensure that high-priority data is transmitted first; During network outages, data to be transmitted is stored in a ring buffer according to priority through a local cache queue. When the queue is full, low-priority data is eliminated according to the "old data overwrite" strategy. After the network is restored, data synchronization is performed based on incremental data retransmission and full data retransmission.

8. A method for detecting access to a power distribution intelligent gateway, characterized in that: include: Based on the monitoring device, it can sense the access of new devices in real time and cache data, and trigger the detection process through dynamic scanning and message monitoring; Based on multi-dimensional detection including: device identification, dynamic protocol analysis, layered authentication, and data verification, it enables rapid and compliant access of unknown devices; Through intelligent management of primary and backup communication link switching and network disconnection emergency response, reliable data transmission and local control are guaranteed; Based on hierarchical storage of high-frequency operation data and detection logs, a time series database is established and abnormal event records are separated; Dynamically update protocol templates and security policies, and regularly rotate keys and certificates to adapt to device and threat changes.

9. An electronic device, characterized in that: include: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the power distribution intelligent gateway access detection method as described in any one of claims 1-7.

10. A computer-readable storage medium storing computer-readable instructions, characterized in that: When the computer-readable instructions are executed by a processor, a method for detecting access to a power distribution intelligent gateway according to any one of claims 1 to 7 is implemented.

Images