Dynamic encryption bus communication method and system for core security level software

Abstract

The invention discloses a dynamic encryption bus communication method and system for nuclear security level software, and the method comprises the steps: monitoring the operation data of each to-be-monitored part in a nuclear facility through each monitoring sensor in the operation process of the nuclear facility; the key generator generates a real-time key according to a preset dynamic key generation algorithm, and transmits the real-time key to each monitoring sensor and the analysis display unit; each monitoring sensor encrypts each operation data based on the real-time secret key to generate ciphertext data and transmits the ciphertext data to an analysis display unit through a bus; and decrypting by software in the analysis display unit to obtain decrypted data, and analyzing and displaying the nuclear security level of the nuclear facility based on the decrypted data. According to the method, the real-time secret key suitable for running data real-time communication transmission is generated through the preset dynamic secret key generation algorithm, and the real-time secret keys between the monitoring sensors are different, so that the problem that the secret keys are easy to leak and attack is avoided, and the safety and the reliability of communication transmission are integrally improved.

Description

Technical Field

[0001] The present invention relates to the technical field of nuclear facilities, and in particular to a dynamic encryption bus communication method and system for nuclear safety-level software. Background Art

[0002] The operational safety of nuclear facilities, such as nuclear reactors and nuclear power plants, is of paramount importance. To ensure the safe operation of nuclear facilities, various types of monitoring devices are installed at various locations within these facilities to monitor parameters that may affect their safe operation. Examples include temperature, humidity, pressure, vibration, and radioactive material monitoring. Each monitoring device transmits its own monitoring data to a backend system, which is equipped with nuclear safety rating software for analyzing the operational safety level of the nuclear facility. This software analyzes these monitoring data from various dimensions to determine the facility's operational safety level.

[0003] The various monitoring data analyzed and processed by nuclear safety-grade software above represent a wide range of information about nuclear facilities. The security of their communication transmission is crucial, requiring the use of encryption methods. However, current encryption methods typically use static keys that remain unchanged during communication. This makes them susceptible to key leaks and attacks, leading to the disclosure of important nuclear facility data and even data tampering, resulting in serious safety consequences for nuclear facilities.

[0004] Therefore, how to ensure the security and reliability of communication of various monitoring data for nuclear safety-level software is one of the technical issues that urgently need to be solved. Summary of the Invention

[0005] The main purpose of the present invention is to provide a dynamic encryption bus communication method and system for nuclear safety-level software, aiming to solve the technical problem of how to ensure the security and reliability of communication of various monitoring data for nuclear safety-level software.

[0006] To achieve the above objectives, the present invention provides a dynamic encrypted bus communication method for nuclear safety-level software, which is applied to a dynamic encrypted bus communication system. The dynamic encrypted bus communication system includes a key generator, an analysis and display unit carrying software for analyzing the nuclear safety level, and a plurality of monitoring sensors. The plurality of monitoring sensors are used to monitor the operating data of each component to be monitored in the nuclear facility, and the plurality of monitoring sensors and the analysis and display unit are all communicatively connected to the key generator. The plurality of monitoring sensors are also communicatively connected to the analysis and display unit via a bus. The dynamic encryption bus communication method comprises: During the operation of the nuclear facility, controlling each of the monitoring sensors to monitor the operating data of each of the components to be monitored; Controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmitting the real-time key to each of the monitoring sensors and the analysis and display unit respectively; Controlling each of the monitoring sensors to encrypt each of the operating data based on the real-time key to generate ciphertext data, and transmitting each of the ciphertext data to the analysis and display unit via a bus; The software in the analysis and display unit is controlled to decrypt each ciphertext data based on the real-time key to obtain decrypted data, and to analyze and display the nuclear safety level of the nuclear facility based on each decrypted data.

[0007] Preferably, the step of controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm includes: The monitoring time of each of the operating data is acquired, and the time coefficient is generated according to the monitoring time. The generating formula is: T = (TS-T0) / X; Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operating data, and X represents the preset time interval; The time coefficient is processed based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: Performing a hash operation on the time coefficient based on a preset hash function to generate a hash value, and reading a first preset bit value in the hash value to form an offset; A second preset bit value is obtained from the hash value based on the offset, and a modulus operation is performed on the second preset bit value and a preset modulus value to obtain the real-time key.

[0008] Preferably, after the step of transmitting each of the ciphertext data to the analysis and display unit via a bus, the step further comprises: Obtaining the data volume corresponding to each of the ciphertext data, and updating the total transmission data volume according to each of the data volumes; Determine whether the total amount of transmitted data is greater than or equal to a preset transmission threshold; if so, update the preset hash function in the preset dynamic key generation algorithm.

[0009] Preferably, the step of controlling each monitoring sensor to encrypt each operating data based on the real-time key to generate ciphertext data includes: For each of the monitoring sensors, dividing the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expanding the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; performing an XOR operation on the subkey and the data block in each data pair to generate an operation result, and performing byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; For the new operation result, the steps of performing byte replacement, row shift, and column mixing operations on the operation result are performed until the number of executions reaches a preset number, and the operation result generated the preset number of times is used as the ciphertext data.

[0010] Preferably, the step of analyzing and displaying the nuclear safety level of the nuclear facility based on each of the decrypted data comprises: Performing integrity verification on each of the decrypted data, and after each of the decrypted data passes the integrity verification, analyzing the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data; If the nuclear safety level of the component to be monitored is safe, the safety level of the component to be monitored is displayed; If the nuclear safety level of the component to be monitored is warning, the warning level of the component to be monitored is displayed.

[0011] Furthermore, to achieve the above-mentioned object, the present invention also provides a dynamic encryption bus communication system for nuclear safety-level software, the dynamic encryption bus communication system comprising a key generator, an analysis and display unit carrying software for analyzing the nuclear safety level, and a plurality of monitoring sensors, wherein the plurality of monitoring sensors are used to monitor the operating data of each component to be monitored in the nuclear facility, and the plurality of monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the plurality of monitoring sensors are also communicatively connected to the analysis and display unit via a bus; The dynamic encryption bus communication system includes: A control module, used to control and monitor the operating data of each of the components to be monitored respectively with each of the monitoring sensors during the operation of the nuclear facility; A first transmission module is used to control the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmit the real-time key to each of the monitoring sensors and the analysis and display unit respectively; a second transmission module, configured to control each monitoring sensor to encrypt each operating data based on the real-time key to generate ciphertext data, and transmit each ciphertext data to the analysis and display unit via a bus; The decryption analysis module is used to control the software in the analysis and display unit to decrypt each ciphertext data based on the real-time key to obtain decrypted data, and analyze the nuclear safety level of the nuclear facility based on each decrypted data.

[0012] Preferably, the first transmission module includes: The acquisition unit is used to acquire the monitoring time of each of the operating data, and generate the time coefficient according to the monitoring time, and the generation formula is: T = (TS-T0) / X; Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operating data, and X represents the preset time interval; A processing unit is configured to process the time coefficient based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: a reading unit, configured to perform a hash operation on the time coefficient based on a preset hash function to generate a hash value, and read a first preset bit value in the hash value to form an offset; The operation unit is configured to obtain a second preset bit value from the hash value based on the offset, and perform a modulus operation on the second preset bit value and a preset modulus value to obtain the real-time key.

[0013] Preferably, the first transmission module further includes: an acquiring unit, configured to acquire the data volume corresponding to each of the ciphertext data, and update the total transmission data volume according to each of the data volumes; An updating unit is used to determine whether the total amount of transmitted data is greater than or equal to a preset transmission threshold, and if so, to update a preset hash function in the preset dynamic key generation algorithm.

[0014] Preferably, the second transmission module includes: an expansion unit configured to, for each monitoring sensor, divide the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expand the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; a generating unit, configured to perform an XOR operation on the subkey and the data block in each data pair to generate an operation result, and perform byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; The execution unit is used to execute the steps of performing byte replacement, row shift, and column mixing operations on the new operation result, until the number of executions reaches a preset number, and the operation result generated the preset number of times is used as the ciphertext data.

[0015] Preferably, the decryption analysis module includes: a verification unit, configured to perform integrity verification on each of the decrypted data, and after each of the decrypted data passes the integrity verification, analyze the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data; a display unit, configured to display the safety level of the component to be monitored if the nuclear safety level of the component to be monitored is safe; The display unit is further configured to display the warning level of the component to be monitored if the nuclear safety level of the component to be monitored is warning.

[0016] The present invention relates to a dynamic encrypted bus communication method and system for nuclear safety-level software. The system comprises a key generator, an analysis and display unit equipped with software for analyzing the nuclear safety level, and multiple monitoring sensors. The multiple monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the multiple monitoring sensors are also communicatively connected to the analysis and display unit via a bus. During operation of a nuclear facility, each monitoring sensor monitors the operating data of each component to be monitored within the facility. The key generator generates a real-time key according to a preset dynamic key generation algorithm and transmits the real-time key to each monitoring sensor and the analysis and display unit. Each monitoring sensor is then controlled to encrypt the monitored operating data based on the received real-time key to generate ciphertext data, which is then transmitted via a bus to the analysis and display unit. Software in the analysis and display unit decrypts the ciphertext data based on the received real-time key, obtaining decrypted data. The decrypted data is then used to analyze and display the nuclear safety level of the nuclear facility. In this manner, a preset dynamic key generation algorithm is used to generate a real-time key suitable for real-time communication and transmission of the operating data from each component to be monitored within the nuclear facility. Specifically, different real-time encryption keys are generated for each transmission of operational data at different times, preventing the vulnerability of static keys to data leakage and attacks. Furthermore, each monitoring sensor transmits its own encrypted real-time operational data via the bus to the analysis and display unit for decryption. These keys also differ between sensors, further preventing key leakage and attacks and improving overall communication security and reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1This is a flow chart of a first embodiment of a dynamic encryption bus communication method for nuclear safety-level software according to the present invention; Figure 2 This is a flow chart of a second embodiment of a dynamic encryption bus communication method for nuclear safety-level software according to the present invention; Figure 3 This is a module diagram of the first embodiment of the dynamic encryption bus communication system for nuclear safety-level software of the present invention; Figure 4 This is a module diagram of the second embodiment of the dynamic encryption bus communication system for nuclear safety-level software of the present invention.

[0018] The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings and in conjunction with the embodiments. DETAILED DESCRIPTION

[0019] It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0020] The present invention provides a dynamic encryption bus communication method for nuclear safety level software, please refer to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the dynamic encryption bus communication method for nuclear safety-level software of the present invention.

[0021] The embodiment of the present invention provides an embodiment of a dynamic encrypted bus communication method for nuclear safety-level software. It should be noted that although a logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than herein. Specifically, the dynamic encrypted bus communication method for nuclear safety-level software in this embodiment is applied to a dynamic encrypted bus communication system, which includes a key generator, an analysis and display unit carrying software for analyzing the nuclear safety level, and multiple monitoring sensors. The multiple monitoring sensors and the analysis and display unit are all connected to the key generator in communication, and the multiple monitoring sensors are also connected to the analysis and display unit via bus communication. The dynamic encrypted bus communication method includes: Step S10 : During the operation of the nuclear facility, control each of the monitoring sensors to monitor the operating data of each of the components to be monitored.

[0022] In this embodiment, a nuclear facility includes multiple components located in different locations that require operational monitoring. These components are designated as monitored components within the nuclear facility. Furthermore, a monitoring sensor is pre-installed for each monitored component, serving as a monitoring sensor within the dynamic encrypted bus communication system. During operation of the nuclear facility, each monitoring sensor is activated to monitor and collect operational data from the corresponding monitored component. This collected operational data allows analysis of the operational status of each monitored component within the nuclear facility to determine whether any of them are experiencing operational anomalies.

[0023] Step S20, controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmitting the real-time key to each of the monitoring sensors and the analysis and display unit respectively; Furthermore, to ensure the security of communication transmission of various monitored operational data, the dynamic encryption bus communication system is also provided with a key generator for generating a key. This key generator is controlled to start and generate a real-time key according to a preset dynamic key generation algorithm. This preset dynamic key generation algorithm is a pre-set algorithm for generating a real-time dynamic key. The real-time dynamic key can be related to the time when the operational data needs to be transmitted, or the amount of operational data to be transmitted. It can also carry coded information related to each monitored component or each monitoring sensor. This ensures that the generated key is unique and strongly correlated with the operational data to be transmitted, thereby enhancing the security and reliability of operational data transmission.

[0024] Furthermore, the key generator is communicatively connected to the analysis and display unit and each monitoring sensor in the dynamic encryption bus communication system. After generating a real-time key, the key generator simultaneously transmits the real-time key to each monitoring sensor and the analysis and display unit. It should be noted that nuclear facilities require numerous components to be monitored, resulting in a large number of corresponding monitoring sensors. Furthermore, each monitored component requires different monitoring cycles: some require shorter monitoring cycles and high-frequency monitoring, while others require longer monitoring cycles and only low-frequency monitoring. To address this issue, the password generator can trigger the generation of corresponding real-time passwords based on the monitoring cycles of each monitored component. Specifically, the password generator can set a generation time for the real-time password based on the monitoring cycle of each monitored component, and generate this generation time and the encoded information of the monitored component as a trigger instruction. Upon detecting such a trigger instruction, the password generator generates a real-time key based on a preset dynamic key generation algorithm and the time corresponding to the trigger instruction. The password generator then determines the corresponding monitoring sensor based on the encoded information in the trigger instruction and transmits the generated real-time key to the monitoring sensor and the analysis and display unit.

[0025] Step S30 , controlling each monitoring sensor to encrypt each operating data based on the real-time key to generate ciphertext data, and transmitting each ciphertext data to the analysis and display unit through a bus.

[0026] Furthermore, after a monitoring sensor that needs to transmit operational data receives the real-time key transmitted by the key generator, the monitoring sensor is controlled to encrypt the operational data it monitors based on the real-time key it receives, generating ciphertext data. The generated ciphertext data is then transmitted via a bus to the analysis and display unit, which performs a security analysis. The encryption operation of the monitoring sensor can be performed based on a pre-set encryption algorithm. Specifically, the step of controlling each monitoring sensor to encrypt the operational data based on the real-time key to generate ciphertext data includes: Step S31: for each monitoring sensor, dividing the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expanding the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; Step S32, performing an XOR operation on the subkey and the data block in each data pair to generate an operation result, and performing byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; Step S33: for the new calculation result, perform the steps of performing byte replacement, row shift, and column mixing on the calculation result respectively until the number of executions reaches a preset number, and use the calculation result generated the preset number of times as the ciphertext data.

[0027] Furthermore, each monitoring sensor requires a different amount of operational data to transmit. To further ensure the security of the transmitted operational data, a mechanism is implemented to divide the operational data into multiple data blocks for encrypted transmission. The specific number of blocks is determined by the data volume of the operational data: a larger data volume results in a larger number of blocks, and vice versa. A pre-set relationship between data volume and blocks is established. For each monitoring sensor, its operational data is divided into multiple data blocks based on the data volume and this relationship. Simultaneously, the received real-time key is expanded into a number of subkeys corresponding to the data blocks, such that each data block corresponds to a subkey. Each data block and each subkey form a data pair. This expansion can be achieved by rearranging the digits in the real-time key. For example, if the original real-time key is 1234, the digits 2 can be rearranged to form subkeys 2134, 2143, 2314, 2341, 2413, 2431, and so on. Alternatively, the digits 3 and 4 can be rearranged to form corresponding subkeys. If the number of subkeys generated by the permutation is less than the number of data blocks, each subkey may be increased by a preset value multiple times until a number of subkeys meeting the quantity requirement is formed.

[0028] Furthermore, for each data pair, an XOR operation is performed on the subkey and the database to generate an operation result. The byte to be replaced in the operation result is searched for the replacement byte position according to a preset number of replacement byte bits, and the byte to be replaced is replaced with the preset replacement byte to obtain a replacement result. The replacement result is then row-shifted according to a preset shift rule, and the replacement result after row shifting is column-mixed according to a preset mixing rule to obtain a new operation result. To ensure the security of the running data encryption, the byte replacement, row shift, and column mixing operations are performed again on the new operation result to obtain a new operation result. This is done until the number of byte replacement, row shift, and column mixing operations reaches a preset number. The result generated by the last operation, i.e., the preset number of operations, is used as the final ciphertext data. In this way, through multiple byte replacements, row shifts, and column mixing, the final ciphertext data is made more secure and reliable.

[0029] Step S40 , controlling the software in the analysis and display unit to decrypt each of the ciphertext data based on the real-time key to obtain decrypted data, and analyzing and displaying the nuclear safety level of the nuclear facility based on each of the decrypted data.

[0030] Furthermore, after receiving the various ciphertext data transmitted by the monitoring sensor through the bus, the analysis and display unit decrypts the various ciphertext data according to the inverse operation of encryption based on the real-time key transmitted by the key generator to generate decrypted data. The decrypted data is the operating data of the components to be monitored in the nuclear facility monitored by each monitoring sensor. The normal operating data of each component to be monitored in the normal operating state of the nuclear facility is obtained in advance, and this type of normal operating data is used as reference data. By comparing the decrypted data with the reference data, the nuclear safety level of the nuclear facility is analyzed and displayed. Specifically, the steps of analyzing and displaying the nuclear safety level of the nuclear facility based on each of the decrypted data include: Step S41, performing integrity verification on each of the decrypted data, and after each of the decrypted data passes the integrity verification, analyzing the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data; Step S42: If the nuclear safety level of the component to be monitored is safe, the safety level of the component to be monitored is displayed; Step S43: If the nuclear safety level of the component to be monitored is warning, the warning level of the component to be monitored is displayed.

[0031] Furthermore, to ensure the consistency of the decrypted data with the operational data monitored by the monitoring sensor, the decrypted data can be integrity-verified by generating a verification code. Specifically, a verification code generation algorithm is pre-installed in each monitoring sensor and analysis and display unit. During the encryption of the operational data, each monitoring sensor uses the verification code generation algorithm to process the operational data and a real-time key to generate a first verification code. The real-time key is then used to encrypt the operational data and the first verification code to generate ciphertext data. The analysis and display unit decrypts the ciphertext data to obtain the decrypted data and also obtains the first verification code. During the integrity verification of the decrypted data, the verification code generation algorithm is used to process the decrypted data and the real-time key to generate a second verification code. The first and second verification codes are then compared to determine their consistency. If they are consistent, the decrypted data and the operational data are identical, and the integrity verification of the decrypted data has passed. Otherwise, the decrypted data and the operational data are inconsistent, and the integrity verification of the decrypted data has failed. If the integrity verification fails, the monitoring sensor reacquires operational data for verification. If the integrity verification fails repeatedly, a warning message is output.

[0032] Furthermore, for decrypted data that passes integrity verification, it is compared with its corresponding reference data to determine the difference between the two. This difference is then used to analyze the nuclear safety level of the component to be monitored, from which the decrypted data originated. A predetermined range is set to indicate normal differences, and a determination is made as to whether the difference falls within this range. If so, the difference between the decrypted data and the reference data is minimal, indicating that the component to be monitored is operating normally and the nuclear safety level is safe. Conversely, if the difference is determined to be outside the predetermined range, the difference between the decrypted data and the reference data is significant, indicating an operational anomaly with the component to be monitored and a warning level of nuclear safety. In addition, the nuclear safety level of a nuclear facility is reflected by the operating abnormalities of each monitored component. If all monitored components in the above analysis are operating normally, it means that the nuclear facility as a whole is operating normally, so its nuclear safety level is displayed as a safety level, and the safety level of each monitored component is displayed at the same time; if there is an abnormally operating component among the monitored components, it means that the nuclear facility as a whole is not operating normally, so its nuclear safety level is displayed as a warning level indicating the existence of an abnormality, and the warning level of the abnormally operating component is displayed at the same time.

[0033] Among them, in order to determine the severity of the abnormality, the abnormality interval representing the severity can also be set in advance. The larger the numerical value corresponding to the abnormality interval, the higher the severity. The difference value is compared with each abnormality interval to determine the target abnormality interval where the difference value is located, and then the severity mark corresponding to the target abnormality interval is found, and the severity mark is generated as the warning level of the monitored component for display, so as to quickly know the severity of the abnormal operation of the monitored component.

[0034] This embodiment of the present invention implements a dynamic encrypted bus communication method for nuclear safety-level software, which is applied to a dynamic encrypted bus communication system. The system comprises a key generator, an analysis and display unit equipped with software for analyzing the nuclear safety level, and multiple monitoring sensors. The multiple monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the multiple monitoring sensors are also communicatively connected to the analysis and display unit via a bus. During operation of a nuclear facility, each monitoring sensor monitors the operating data of each component to be monitored within the nuclear facility. The key generator generates a real-time key according to a preset dynamic key generation algorithm and transmits the real-time key to each monitoring sensor and the analysis and display unit. Each monitoring sensor is then controlled to encrypt the monitored operating data based on the received real-time key, generating ciphertext data, which is then transmitted via a bus to the analysis and display unit. Software in the analysis and display unit decrypts the ciphertext data based on the received real-time key, obtaining decrypted data, and analyzes and displays the nuclear safety level of the nuclear facility based on the decrypted data. In this manner, a preset dynamic key generation algorithm is used to generate a real-time key suitable for real-time communication and transmission of the operating data from each component to be monitored within the nuclear facility. Specifically, different real-time encryption keys are generated for each transmission of operational data at different times, preventing the vulnerability of static keys to data leakage and attacks. Furthermore, each monitoring sensor transmits its own encrypted real-time operational data via the bus to the analysis and display unit for decryption. These keys also differ between sensors, further preventing key leakage and attacks and improving overall communication security and reliability.

[0035] Further, please refer to Figure 2 Based on the first embodiment of the dynamic encryption bus communication method for nuclear safety-level software of the present invention, a second embodiment of the dynamic encryption bus communication method for nuclear safety-level software of the present invention is proposed.

[0036] The second embodiment of the dynamic encryption bus communication method for nuclear safety-level software differs from the first embodiment of the dynamic encryption bus communication method for nuclear safety-level software in that the step of controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm includes: Step S21, acquiring the monitoring time of each of the monitored operating data, and generating the time coefficient according to the monitoring time; Step S22: Process the time coefficient based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: Step S23, performing a hash operation on the time coefficient based on a preset hash function to generate a hash value, and reading a first preset bit value in the hash value to form an offset; Step S24: obtaining a second preset bit value from the hash value based on the offset, and performing a modulo operation on the second preset bit value and a preset modulus value to obtain the real-time key.

[0037] Furthermore, this embodiment generates a real-time key based on the monitoring time of the operating data. Specifically, the monitoring time of each operating data is obtained, and the monitoring time is processed according to a pre-set generation formula to generate a time coefficient. The generation formula can be specifically referred to as the following formula (1): T = (TS-T0) / X (1); Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operation data, that is, the time when the operation data is first monitored, and X represents the preset time interval.

[0038] Furthermore, the time coefficient is processed according to a preset dynamic key generation algorithm to generate a corresponding real-time key. The preset dynamic key generation algorithm processes the time coefficient according to a preset hash function. Specifically, a hash operation is first performed on the time coefficient according to the preset hash function to generate a hash value. This hash operation involves performing operations such as block processing, circular shift, and nonlinear transformation on the time coefficient using the preset hash function. A certain number of digits is then read from the hash value to form an offset. This certain number of digits can be preset to a first preset digit value, such as the last four digits.

[0039] Furthermore, based on the offset, a certain number of bits is obtained from the hash value as the second preset bit value. For example, if the second preset bit value is set to 64 bits, the first preset bit value can be used as the starting bit, and the 64-bit value after the starting bit can be obtained as the second preset bit value. In addition, a preset modulus value for performing a modulus operation is pre-set, and a modulus operation is performed on the second preset bit value and the preset modulus value, and the result of the operation is used as the real-time key for encrypting the operation data.

[0040] Furthermore, in order to better ensure the security of the generated real-time key, this embodiment provides an update mechanism for the preset dynamic key generation algorithm. Specifically, after the step of transmitting each of the ciphertext data to the analysis and display unit via the bus, the following steps are included: Step S25, obtaining the data volume corresponding to each of the ciphertext data, and updating the total transmission data volume according to each of the data volumes; Step S26, determining whether the total amount of transmitted data is greater than or equal to a preset transmission threshold; if so, updating the preset hash function in the preset dynamic key generation algorithm.

[0041] Furthermore, the data volume of each item of ciphertext data transmitted this time is obtained and summed to obtain the total data volume of this transmission. This total data volume is then added to the total data volume transmitted since the previous update of the preset dynamic key generation algorithm for the communication bus to obtain a new total data volume. A preset transmission threshold is pre-set to indicate the peak value of the transmission data volume. The updated total data volume is compared with the preset transmission threshold to determine whether the total data volume is greater than or equal to the preset transmission threshold. If it is greater than or equal to the preset transmission threshold, it indicates that the data volume transmitted by the communication bus has reached its peak, and the preset dynamic key generation algorithm needs to be updated, specifically, the preset hash function. The update of the preset hash function can be to update its parameters or to replace another hash function. If it is determined that the total data volume is less than the preset transmission threshold, the preset dynamic key generation algorithm continues to be used to generate real-time keys until the total data volume is greater than or equal to the preset transmission threshold, at which time the preset dynamic key generation algorithm is updated.

[0042] This embodiment generates a real-time key based on the monitoring time of operational data, ensuring that each generated real-time key is unique. This allows for dynamic real-time key generation and ensures the security of encrypted operational data transmission. Furthermore, an update mechanism is provided for the pre-set dynamic key generation algorithm used to generate the real-time key, further ensuring the security and reliability of operational data transmission.

[0043] In addition, the present invention provides a dynamic encryption bus communication system for nuclear safety level software, please refer to Figure 3 , Figure 3 This is a module diagram of the first embodiment of the dynamic encryption bus communication system for nuclear safety-level software of the present invention.

[0044] Specifically, the dynamic encryption bus communication system for nuclear safety-level software in this embodiment includes a key generator, an analysis and display unit carrying software for analyzing nuclear safety levels, and multiple monitoring sensors. The multiple monitoring sensors are used to monitor the operating data of each component to be monitored in the nuclear facility, and the multiple monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the multiple monitoring sensors are also communicatively connected to the analysis and display unit via a bus. The dynamic encryption bus communication system also includes: a control module 10, a first transmission module 20, a second transmission module 30 and a decryption analysis module 40, wherein, The control module 10 is used to control each of the monitoring sensors to monitor the operating data of each of the components to be monitored during the operation of the nuclear facility.

[0045] In this embodiment, a nuclear facility includes multiple components located in different locations that require operational monitoring. These components are designated as monitored components within the nuclear facility. Furthermore, a monitoring sensor is pre-installed for each monitored component, serving as a monitoring sensor within the dynamic encrypted bus communication system. During operation of the nuclear facility, each monitoring sensor is activated to monitor and collect operational data from the corresponding monitored component. This collected operational data allows analysis of the operational status of each monitored component within the nuclear facility to determine whether any of them are experiencing operational anomalies.

[0046] A first transmission module 20 is used to control the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmit the real-time key to each of the monitoring sensors and the analysis and display unit respectively; Furthermore, to ensure the security of communication transmission of various monitored operational data, the dynamic encryption bus communication system is also provided with a key generator for generating a key. This key generator is controlled to start and generate a real-time key according to a preset dynamic key generation algorithm. This preset dynamic key generation algorithm is a pre-set algorithm for generating a real-time dynamic key. The real-time dynamic key can be related to the time when the operational data needs to be transmitted, or the amount of operational data to be transmitted. It can also carry coded information related to each monitored component or each monitoring sensor. This ensures that the generated key is unique and strongly correlated with the operational data to be transmitted, thereby enhancing the security and reliability of operational data transmission.

[0047] Furthermore, the key generator is communicatively connected to the analysis and display unit and each monitoring sensor in the dynamic encryption bus communication system. After generating a real-time key, the key generator simultaneously transmits the real-time key to each monitoring sensor and the analysis and display unit. It should be noted that nuclear facilities require numerous components to be monitored, resulting in a large number of corresponding monitoring sensors. Furthermore, each monitored component requires different monitoring cycles: some require shorter monitoring cycles and high-frequency monitoring, while others require longer monitoring cycles and only low-frequency monitoring. To address this issue, the password generator can trigger the generation of corresponding real-time passwords based on the monitoring cycles of each monitored component. Specifically, the password generator can set a generation time for the real-time password based on the monitoring cycle of each monitored component, and generate this generation time and the encoded information of the monitored component as a trigger instruction. Upon detecting such a trigger instruction, the password generator generates a real-time key based on a preset dynamic key generation algorithm and the time corresponding to the trigger instruction. The password generator then determines the corresponding monitoring sensor based on the encoded information in the trigger instruction and transmits the generated real-time key to the monitoring sensor and the analysis and display unit.

[0048] The second transmission module 30 is used to control each of the monitoring sensors to encrypt each of the operating data based on the real-time key to generate ciphertext data, and transmit each of the ciphertext data to the analysis and display unit through a bus.

[0049] Furthermore, after a monitoring sensor that needs to transmit operational data receives the real-time key transmitted by the key generator, the monitoring sensor is controlled to encrypt the operational data it monitors based on the real-time key it receives, generating ciphertext data. The generated ciphertext data is then transmitted via a bus to the analysis and display unit, which performs a security analysis. The encryption operation of the monitoring sensor can be performed based on a pre-set encryption algorithm. Specifically, the step of controlling each monitoring sensor to encrypt the operational data based on the real-time key to generate ciphertext data includes: an expansion unit 31 configured to, for each monitoring sensor, divide the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expand the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; a generating unit 32 configured to perform an XOR operation on the subkey and the data block in each data pair to generate an operation result, and to perform byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; The execution unit 33 is used to execute the steps of performing byte replacement, row shift, and column mixing on the new operation result, until the number of executions reaches a preset number, and the operation result generated the preset number of times is used as the ciphertext data.

[0050] Furthermore, each monitoring sensor requires a different amount of operational data to transmit. To further ensure the security of the transmitted operational data, a mechanism is implemented to divide the operational data into multiple data blocks for encrypted transmission. The specific number of blocks is determined by the data volume of the operational data: a larger data volume results in a larger number of blocks, and vice versa. A pre-set relationship between data volume and blocks is established. For each monitoring sensor, its operational data is divided into multiple data blocks based on the data volume and this relationship. Simultaneously, the received real-time key is expanded into a number of subkeys corresponding to the data blocks, such that each data block corresponds to a subkey. Each data block and each subkey form a data pair. This expansion can be achieved by rearranging the digits in the real-time key. For example, if the original real-time key is 1234, the digits 2 can be rearranged to form subkeys 2134, 2143, 2314, 2341, 2413, 2431, and so on. Alternatively, the digits 3 and 4 can be rearranged to form corresponding subkeys. If the number of subkeys generated by the permutation is less than the number of data blocks, each subkey may be increased by a preset value multiple times until a number of subkeys meeting the quantity requirement is formed.

[0051] Furthermore, for each data pair, an XOR operation is performed on the subkey and the database to generate an operation result. The byte to be replaced in the operation result is searched for the replacement byte position according to a preset number of replacement byte bits, and the byte to be replaced is replaced with the preset replacement byte to obtain a replacement result. The replacement result is then row-shifted according to a preset shift rule, and the replacement result after row shifting is column-mixed according to a preset mixing rule to obtain a new operation result. To ensure the security of the running data encryption, the byte replacement, row shift, and column mixing operations are performed again on the new operation result to obtain a new operation result. This is done until the number of byte replacement, row shift, and column mixing operations reaches a preset number. The result generated by the last operation, i.e., the preset number of operations, is used as the final ciphertext data. In this way, through multiple byte replacements, row shifts, and column mixing, the final ciphertext data is made more secure and reliable.

[0052] The decryption analysis module 40 is used to control the software in the analysis and display unit to decrypt each ciphertext data based on the real-time key to obtain decrypted data, and analyze and display the nuclear safety level of the nuclear facility based on each decrypted data.

[0053] Furthermore, after receiving the various ciphertext data transmitted by the monitoring sensor through the bus, the analysis and display unit decrypts the various ciphertext data according to the inverse operation of encryption based on the real-time key transmitted by the key generator to generate decrypted data. The decrypted data is the operating data of the components to be monitored in the nuclear facility monitored by each monitoring sensor. The normal operating data of each component to be monitored in the normal operating state of the nuclear facility is obtained in advance, and this type of normal operating data is used as reference data. By comparing the decrypted data with the reference data, the nuclear safety level of the nuclear facility is analyzed and displayed. Specifically, the steps of analyzing and displaying the nuclear safety level of the nuclear facility based on each of the decrypted data include: a verification unit 41 for performing integrity verification on each of the decrypted data, and analyzing the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data after the decrypted data passes the integrity verification; A display unit 42 is configured to display the safety level of the component to be monitored if the nuclear safety level of the component to be monitored is safe; The display unit 42 is further configured to display the warning level of the component to be monitored if the nuclear safety level of the component to be monitored is warning.

[0054] Furthermore, to ensure the consistency of the decrypted data with the operational data monitored by the monitoring sensor, the decrypted data can be integrity-verified by generating a verification code. Specifically, a verification code generation algorithm is pre-installed in each monitoring sensor and analysis and display unit. During the encryption of the operational data, each monitoring sensor uses the verification code generation algorithm to process the operational data and a real-time key to generate a first verification code. The real-time key is then used to encrypt the operational data and the first verification code to generate ciphertext data. The analysis and display unit decrypts the ciphertext data to obtain the decrypted data and also obtains the first verification code. During the integrity verification of the decrypted data, the verification code generation algorithm is used to process the decrypted data and the real-time key to generate a second verification code. The first and second verification codes are then compared to determine their consistency. If they are consistent, the decrypted data and the operational data are identical, and the integrity verification of the decrypted data has passed. Otherwise, the decrypted data and the operational data are inconsistent, and the integrity verification of the decrypted data has failed. If the integrity verification fails, the monitoring sensor reacquires operational data for verification. If the integrity verification fails repeatedly, a warning message is output.

[0055] Furthermore, for decrypted data that passes integrity verification, it is compared with its corresponding reference data to determine the difference between the two. This difference is then used to analyze the nuclear safety level of the component to be monitored, from which the decrypted data originated. A predetermined range is set to indicate normal differences, and a determination is made as to whether the difference falls within this range. If so, the difference between the decrypted data and the reference data is minimal, indicating that the component to be monitored is operating normally and the nuclear safety level is safe. Conversely, if the difference is determined to be outside the predetermined range, the difference between the decrypted data and the reference data is significant, indicating an operational anomaly with the component to be monitored and a warning level of nuclear safety. In addition, the nuclear safety level of a nuclear facility is reflected by the operating abnormalities of each monitored component. If all monitored components in the above analysis are operating normally, it means that the nuclear facility as a whole is operating normally, so its nuclear safety level is displayed as a safety level, and the safety level of each monitored component is displayed at the same time; if there is an abnormally operating component among the monitored components, it means that the nuclear facility as a whole is not operating normally, so its nuclear safety level is displayed as a warning level indicating the existence of an abnormality, and the warning level of the abnormally operating component is displayed at the same time.

[0056] Among them, in order to determine the severity of the abnormality, the abnormality interval representing the severity can also be set in advance. The larger the numerical value corresponding to the abnormality interval, the higher the severity. The difference value is compared with each abnormality interval to determine the target abnormality interval where the difference value is located, and then the severity mark corresponding to the target abnormality interval is found, and the severity mark is generated as the warning level of the monitored component for display, so as to quickly know the severity of the abnormal operation of the monitored component.

[0057] The dynamic encrypted bus communication system for nuclear safety-level software in this embodiment includes a key generator, an analysis and display unit equipped with software for analyzing the nuclear safety level, and multiple monitoring sensors. The multiple monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the multiple monitoring sensors are also communicatively connected to the analysis and display unit via a bus. During nuclear facility operation, a control module monitors the operating data of each monitored component within the nuclear facility using each monitoring sensor. A first transmission module generates a real-time key using the key generator according to a preset dynamic key generation algorithm and transmits the real-time key to each monitoring sensor and the analysis and display unit. Furthermore, a second transmission module controls each monitoring sensor to encrypt the monitored operating data using the received real-time key, generating ciphertext data, and transmits the ciphertext data via a bus to the analysis and display unit. A decryption and analysis module controls the software in the analysis and display unit to decrypt the ciphertext data using the received real-time key, obtaining decrypted data. The decrypted data is then used to analyze and display the nuclear safety level of the nuclear facility. In this manner, a preset dynamic key generation algorithm is used to generate a real-time key suitable for real-time communication and transmission of the operating data from each monitored component within the nuclear facility. Specifically, different real-time encryption keys are generated for each transmission of operational data at different times, preventing the vulnerability of static keys to data leakage and attacks. Furthermore, each monitoring sensor transmits its own encrypted real-time operational data via the bus to the analysis and display unit for decryption. These keys also differ between sensors, further preventing key leakage and attacks and improving overall communication security and reliability.

[0058] Further, please refer to Figure 4 Based on the first embodiment of the dynamic encryption bus communication system for nuclear safety-level software of the present invention, a second embodiment of the dynamic encryption bus communication system for nuclear safety-level software of the present invention is proposed.

[0059] The second embodiment of the dynamic encryption bus communication system for nuclear safety-level software differs from the first embodiment of the dynamic encryption bus communication system for nuclear safety-level software in that the first transmission module includes: An acquiring unit 21 is configured to acquire a monitoring time of each of the operating data and generate the time coefficient according to the monitoring time; The processing unit 22 is configured to process the time coefficient based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: a reading unit 23 configured to perform a hash operation on the time coefficient based on a preset hash function to generate a hash value, and read a first preset bit value in the hash value to form an offset; The operation unit 24 is configured to obtain a second preset bit value from the hash value based on the offset, and perform a modulus operation on the second preset bit value and a preset modulus value to obtain the real-time key.

[0060] Furthermore, this embodiment generates a real-time key based on the monitoring time of the operating data. Specifically, the monitoring time of each operating data is obtained, and the monitoring time is processed according to a pre-set generation formula to generate a time coefficient. The generation formula can be specifically referred to as the following formula (1): T = (TS-T0) / X (1); Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operation data, that is, the time when the operation data is first monitored, and X represents the preset time interval.

[0061] Furthermore, the time coefficient is processed according to a preset dynamic key generation algorithm to generate a corresponding real-time key. The preset dynamic key generation algorithm processes the time coefficient according to a preset hash function. Specifically, a hash operation is first performed on the time coefficient according to the preset hash function to generate a hash value. This hash operation involves performing operations such as block processing, circular shift, and nonlinear transformation on the time coefficient using the preset hash function. A certain number of digits is then read from the hash value to form an offset. This certain number of digits can be preset to a first preset digit value, such as the last four digits.

[0062] Furthermore, based on the offset, a certain number of bits is obtained from the hash value as the second preset bit value. For example, if the second preset bit value is set to 64 bits, the first preset bit value can be used as the starting bit, and the 64-bit value after the starting bit can be obtained as the second preset bit value. In addition, a preset modulus value for performing a modulus operation is pre-set, and a modulus operation is performed on the second preset bit value and the preset modulus value, and the result of the operation is used as the real-time key for encrypting the operation data.

[0063] Furthermore, in order to better ensure the security of the generated real-time key, this embodiment provides an update mechanism for the preset dynamic key generation algorithm. Specifically, the first transmission module also includes: an acquiring unit 25 for acquiring data amounts corresponding to the respective ciphertext data and updating the total transmission data amount according to the respective data amounts; The updating unit 26 determines whether the total amount of transmitted data is greater than or equal to a preset transmission threshold, and if so, updates the preset hash function in the preset dynamic key generation algorithm.

[0064] Furthermore, the data volume of each item of ciphertext data transmitted this time is obtained and summed to obtain the total data volume of this transmission. This total data volume is then added to the total data volume transmitted since the previous update of the preset dynamic key generation algorithm for the communication bus to obtain a new total data volume. A preset transmission threshold is pre-set to indicate the peak value of the transmission data volume. The updated total data volume is compared with the preset transmission threshold to determine whether the total data volume is greater than or equal to the preset transmission threshold. If it is greater than or equal to the preset transmission threshold, it indicates that the data volume transmitted by the communication bus has reached its peak, and the preset dynamic key generation algorithm needs to be updated, specifically, the preset hash function. The update of the preset hash function can be to update its parameters or to replace another hash function. If it is determined that the total data volume is less than the preset transmission threshold, the preset dynamic key generation algorithm continues to be used to generate real-time keys until the total data volume is greater than or equal to the preset transmission threshold, at which time the preset dynamic key generation algorithm is updated.

[0065] This embodiment generates a real-time key based on the monitoring time of operational data, ensuring that each generated real-time key is unique. This allows for dynamic real-time key generation and ensures the security of encrypted operational data transmission. Furthermore, an update mechanism is provided for the pre-set dynamic key generation algorithm used to generate the real-time key, further ensuring the security and reliability of operational data transmission.

[0066] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the purpose of the present invention and the claims. Any equivalent structure or equivalent process transformation made using the contents of the description and drawings of the present invention, or directly or indirectly used in other related technical fields, all fall within the protection of the present invention.

Claims

1. A dynamic encryption bus communication method for nuclear safety-level software, characterized in that: Applied to a dynamic encryption bus communication system, the dynamic encryption bus communication system includes a key generator, an analysis and display unit carrying software for analyzing nuclear safety levels, and multiple monitoring sensors, the multiple monitoring sensors being used to monitor operating data of each component to be monitored in the nuclear facility, and the multiple monitoring sensors and the analysis and display unit being communicatively connected to the key generator, and the multiple monitoring sensors being further communicatively connected to the analysis and display unit via a bus; The dynamic encryption bus communication method comprises: During the operation of the nuclear facility, controlling each of the monitoring sensors to monitor the operating data of each of the components to be monitored; Controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmitting the real-time key to each of the monitoring sensors and the analysis and display unit respectively; Controlling each of the monitoring sensors to encrypt each of the operating data based on the real-time key to generate ciphertext data, and transmitting each of the ciphertext data to the analysis and display unit via a bus; The software in the analysis and display unit is controlled to decrypt each ciphertext data based on the real-time key to obtain decrypted data, and to analyze and display the nuclear safety level of the nuclear facility based on each decrypted data.

2. The dynamic encryption bus communication method according to claim 1, wherein: The step of controlling the key generator to generate a real-time key according to a preset dynamic key generation algorithm includes: The monitoring time of each of the operating data is acquired, and the time coefficient is generated according to the monitoring time. The generating formula is: T = (TS-T0) / X; Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operating data, and X represents the preset time interval; The time coefficient is processed based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: Performing a hash operation on the time coefficient based on a preset hash function to generate a hash value, and reading a first preset bit value in the hash value to form an offset; A second preset bit value is obtained from the hash value based on the offset, and a modulus operation is performed on the second preset bit value and a preset modulus value to obtain the real-time key.

3. The dynamic encryption bus communication method according to claim 2, wherein: After the step of transmitting each of the ciphertext data to the analysis and display unit via the bus, the following steps are included: Obtaining the data volume corresponding to each of the ciphertext data, and updating the total transmission data volume according to each of the data volumes; Determine whether the total amount of transmitted data is greater than or equal to a preset transmission threshold; if so, update the preset hash function in the preset dynamic key generation algorithm.

4. The dynamic encryption bus communication method according to any one of claims 1 to 3, characterized in that: The step of controlling each monitoring sensor to encrypt each operating data based on the real-time key to generate ciphertext data includes: For each of the monitoring sensors, dividing the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expanding the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; performing an XOR operation on the subkey and the data block in each data pair to generate an operation result, and performing byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; For the new operation result, the steps of performing byte replacement, row shift, and column mixing operations on the operation result are performed until the number of executions reaches a preset number, and the operation result generated the preset number of times is used as the ciphertext data.

5. The dynamic encryption bus communication method according to any one of claims 1 to 3, characterized in that: The step of analyzing and displaying the nuclear safety level of the nuclear facility based on each of the decrypted data comprises: Performing integrity verification on each of the decrypted data, and after each of the decrypted data passes the integrity verification, analyzing the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data; If the nuclear safety level of the component to be monitored is safe, the safety level of the component to be monitored is displayed; If the nuclear safety level of the component to be monitored is warning, the warning level of the component to be monitored is displayed.

6. A dynamic encrypted bus communication system for nuclear safety-grade software, characterized in that: The dynamic encryption bus communication system includes a key generator, an analysis and display unit carrying software for analyzing nuclear safety levels, and a plurality of monitoring sensors, wherein the plurality of monitoring sensors are used to monitor operating data of each component to be monitored in the nuclear facility, and the plurality of monitoring sensors and the analysis and display unit are all communicatively connected to the key generator, and the plurality of monitoring sensors are also communicatively connected to the analysis and display unit via a bus; The dynamic encryption bus communication system also includes: A control module, used to control and monitor the operating data of each of the components to be monitored respectively with each of the monitoring sensors during the operation of the nuclear facility; A first transmission module is used to control the key generator to generate a real-time key according to a preset dynamic key generation algorithm, and transmit the real-time key to each of the monitoring sensors and the analysis and display unit respectively; a second transmission module, configured to control each monitoring sensor to encrypt each operating data based on the real-time key to generate ciphertext data, and transmit each ciphertext data to the analysis and display unit via a bus; The decryption analysis module is used to control the software in the analysis and display unit to decrypt each ciphertext data based on the real-time key to obtain decrypted data, and analyze the nuclear safety level of the nuclear facility based on each decrypted data.

7. The dynamic encryption bus communication system according to claim 6, characterized in that: The first transmission module includes: The acquisition unit is used to acquire the monitoring time of each of the operating data, and generate the time coefficient according to the monitoring time, and the generation formula is: T = (TS-T0) / X; Wherein, T represents the time coefficient, TS represents the monitoring time, T0 represents the initial time corresponding to the operating data, and X represents the preset time interval; A processing unit is configured to process the time coefficient based on the preset dynamic key generation algorithm to generate the real-time key, wherein the preset dynamic key generation algorithm is: a reading unit, configured to perform a hash operation on the time coefficient based on a preset hash function to generate a hash value, and read a first preset bit value in the hash value to form an offset; The operation unit is configured to obtain a second preset bit value from the hash value based on the offset, and perform a modulus operation on the second preset bit value and a preset modulus value to obtain the real-time key.

8. The dynamic encryption bus communication system according to claim 7, wherein: The first transmission module further includes: an acquiring unit, configured to acquire the data volume corresponding to each of the ciphertext data, and update the total transmission data volume according to each of the data volumes; An updating unit is used to determine whether the total amount of transmitted data is greater than or equal to a preset transmission threshold, and if so, to update a preset hash function in the preset dynamic key generation algorithm.

9. The dynamic encryption bus communication system according to claim 8, characterized in that: The second transmission module includes: an expansion unit configured to, for each monitoring sensor, divide the operating data into a plurality of data blocks according to the amount of the operating data corresponding to the monitoring sensor, and expand the real-time key into a number of subkeys corresponding to the number of the data blocks, thereby forming data pairs between the subkeys and the data blocks; a generating unit, configured to perform an XOR operation on the subkey and the data block in each data pair to generate an operation result, and perform byte replacement, row shift, and column mixing operations on the operation result to generate a new operation result; The execution unit is used to execute the steps of performing byte replacement, row shift, and column mixing operations on the new operation result, until the number of executions reaches a preset number, and the operation result generated the preset number of times is used as the ciphertext data.

10. The dynamic encryption bus communication system according to any one of claims 6 to 9, characterized in that: The decryption analysis module includes: a verification unit, configured to perform integrity verification on each of the decrypted data, and after each of the decrypted data passes the integrity verification, analyze the nuclear safety level corresponding to each of the components to be monitored based on each of the decrypted data; a display unit, configured to display the safety level of the component to be monitored if the nuclear safety level of the component to be monitored is safe; The display unit is further configured to display the warning level of the component to be monitored if the nuclear safety level of the component to be monitored is warning.

Images