Power system data reverse transmission method based on symmetric encryption algorithm

Abstract

The invention relates to the technical field of information security, in particular to an electric power system data reverse transmission method based on a symmetric encryption algorithm, which comprises the following steps of: compressing data to obtain a first data packet, and performing symmetric encryption processing according to an encryption strategy to obtain a second data packet; processing the second data packet according to a one-way transmission mechanism and security verification to obtain a third data packet, analyzing the third data packet according to the symmetric key to obtain data, and determining transmission duration and bit error rate according to timestamps of the data with the same label point before and after transmission, the data transmission process is judged based on the transmission duration and the bit error rate, and an instruction is generated to adjust the signal-to-noise ratio in the transmission process, or an instruction is generated to adjust the compression rate in the compression processing process, or the number of encrypted fields in the encryption processing process, or a first data packet is determined to be subjected to subpackage processing, therefore, the transmission time length can be reduced to improve the transmission timeliness, so that the information intersection delay is reduced, and the potential safety hazard is avoided.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a power system data reverse transmission method based on a symmetric encryption algorithm. Background Art

[0002] Modern power systems rely on SCADA (Supervisory Control and Data Acquisition) systems for equipment status monitoring and control command transmission. Traditional communications utilize clear text transmission or weak encryption protocols (such as MODBUS), which presents the following challenges: reverse transmission (e.g., distributed energy grid-connected data backhaul) is susceptible to man-in-the-middle attacks, leading to falsified metering data or malicious command injection; reverse transmission prioritizes data integrity and real-time performance, while existing SSL / TLS asymmetric encryption schemes, due to their high computational overhead, struggle to meet the millisecond-level response requirements. Therefore, mitigating the impact of encryption on transmission performance is a pressing issue.

[0003] Chinese patent application publication number: CN119854053A, discloses a data transmission method, a data sending device, and a data receiving device. This technical solution obtains a first data packet, determines a corresponding compression strategy based on the size of the first data packet, compresses the first data packet according to the compression strategy to obtain a second data packet, encrypts and signs the second data packet to obtain a third data packet, and sends the third data packet to the data receiving device. In this way, while reducing the impact of the encryption operation on the data transmission performance, the data transmission performance of the reverse isolation device is improved by controlling the compression time of the data packet. Although this technical solution solves the impact of encryption on transmission performance, it only involves how to compress and encrypt the data packet, but does not consider whether the timeliness of the data transmission after encryption can be met during the entire transmission process. If the real-time performance is not met, it will also affect the transmission performance, thereby causing information exchange delays and easily causing security risks. Summary of the Invention

[0004] To this end, the present invention provides a power system data reverse transmission method based on a symmetric encryption algorithm to solve the problem in the prior art that when it is determined that the data transmission process has low timeliness, effective adjustment cannot be performed, thereby causing information interaction delay.

[0005] To achieve the above objectives, the present invention provides a method for reverse transmission of power system data based on a symmetric encryption algorithm, comprising:

[0006] Obtaining data to be sent from a sending end and compressing the data to obtain a first data packet;

[0007] Performing symmetrical encryption on the first data packet according to the encryption strategy to obtain a second data packet and transmitting the second data packet;

[0008] Processing the second data packet according to a one-way transmission mechanism and security verification by a reverse security isolation device to obtain a third data packet;

[0009] transmitting the symmetric key generated during the encryption process and the third data packet to a receiving end, and the receiving end parsing the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is independently transmitted through asymmetric encryption;

[0010] Determining the transmission duration and the bit error rate based on the timestamps of the data having the same tag point before and after the transmission;

[0011] Determining whether the data transmission process is qualified based on the transmission duration, and generating a corresponding instruction based on the determination result and the bit error rate to adjust the signal-to-noise ratio during the transmission process, or generating a corresponding instruction based on the reason for failure determined based on the transmission duration to adjust the compression rate in the compression process, the number of encrypted fields in the encryption process, or determining whether the first data packet is to be subpacketized;

[0012] Based on the instructions, operating parameters in the corresponding process are adjusted or a processing method is determined.

[0013] Furthermore, the process of determining whether the data transmission process is qualified includes:

[0014] Performing a determination based on a comparison result of the transmission duration with a preset transmission duration, and determining whether the data transmission process is qualified based on the determination result combined with a comparison result of the bit error rate with a preset bit error rate;

[0015] When it is determined that the data transmission process is unqualified, the cause is determined according to the difference between the transmission duration and the preset transmission duration.

[0016] Furthermore, the process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate includes:

[0017] Based on the comparison result of the bit error rate and the preset bit error rate, it is determined whether to improve the signal-to-noise ratio or the reason why the data transmission process is unqualified is determined according to the difference between the transmission duration and the preset transmission duration.

[0018] Furthermore, the process of determining whether to improve the signal-to-noise ratio includes:

[0019] The preset bit error rate includes a first preset bit error rate, and when it is determined that the bit error rate is less than or equal to the first preset bit error rate, it is determined to improve the signal-to-noise ratio; based on a comparison result of the bit error rate deviation value and the preset bit error rate deviation value, a corresponding instruction is generated to improve the signal-to-noise ratio, and an improvement extent of the signal-to-noise ratio is positively correlated with the bit error rate deviation value;

[0020] The bit error rate deviation value is the difference between the first preset bit error rate and the bit error rate.

[0021] Furthermore, the process of determining the cause according to the difference between the transmission duration and the preset transmission duration includes:

[0022] Calculate the difference between the transmission time and the preset transmission time and record it as the delay difference;

[0023] Determining a reason why the data transmission process is unqualified based on a comparison result of the delay difference with a preset delay difference and generating a corresponding instruction includes:

[0024] When it is determined that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated according to a comparison result of the delay deviation with a preset delay deviation to improve the compression ratio or perform packet processing on the first data packet, wherein the delay deviation is the difference between the preset delay difference and the delay difference;

[0025] or calculating each historical transmission duration in a historical transmission process, calculating a duration variance based on the current transmission duration and a number of historical transmission durations, and re-determining the cause and generating a corresponding instruction based on a comparison result of the duration variance with a critical duration variance;

[0026] Or when it is determined that the cause is a system failure during the transmission process, an instruction is issued to conduct a comprehensive inspection and maintenance of the system.

[0027] Furthermore, the process of improving the compression ratio includes:

[0028] When it is determined that the reason is that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to improve the compression rate, and the increase in the compression rate is negatively correlated with the delay deviation.

[0029] Furthermore, the process of subpacketizing the first data packet includes:

[0030] When it is determined that the reason is that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to determine the number of subpacket processing of the first data packet, and the number is negatively correlated with the delay deviation.

[0031] Furthermore, the process of re-determining the cause and the corresponding instruction based on the comparison result of the duration variance and the critical duration variance includes:

[0032] When the duration variance is less than or equal to the critical duration variance, determining that the cause is that the transmission process is unqualified due to an increase in the number of encrypted fields in the symmetric encryption process, and generating a corresponding instruction to reduce the number of encrypted fields based on a comparison result of the total amount of data with a preset total amount of data;

[0033] When the time variance is greater than the critical time variance, it is determined that the cause is that the transmission process is unqualified due to network fluctuations, and an instruction to repair the network is issued.

[0034] Furthermore, the process of reducing the number of encrypted fields includes:

[0035] When it is determined that the reason is that the transmission process is unqualified due to the increase in the number of encrypted fields in the symmetric encryption processing, a corresponding instruction is generated based on the comparison result of the total amount of data with the preset total amount of data to reduce the number of encrypted fields, and the reduction in the number of encrypted fields is positively correlated with the total amount of data.

[0036] Furthermore, the process of performing symmetric encryption processing on the first data packet according to the encryption policy includes:

[0037] Dividing the fields in the first data packet into fields of different sensitivity levels according to the sensitivity levels;

[0038] Whether to perform symmetric encryption processing on the field is determined based on the comparison result of the sensitivity level of the field and the critical sensitivity level.

[0039] Compared with the prior art, the advantageous effect of the power system data reverse transmission method based on the symmetric encryption algorithm of the present invention lies in that the method compresses the data to be sent to obtain a first data packet and performs symmetric encryption processing according to the encryption strategy to obtain a second data packet, processes the second data packet according to the one-way transmission mechanism and security verification to obtain a third data packet, parses the third data packet according to the symmetric key to obtain data, and then determines the transmission duration and bit error rate based on the timestamps of the data with the same tag points before and after the transmission, determines whether the data transmission process is qualified based on the transmission duration, and further judges the transmission process in combination with the bit error rate based on the judgment result to generate corresponding instructions to adjust the signal-to-noise ratio in the transmission process, or generates corresponding instructions to adjust the compression rate in the compression process, or the number of encrypted fields in the encryption process, or determines the first data packet to be subpacketized according to the reason for the unqualified determined based on the transmission duration, thereby being able to specifically adjust the operating parameters in the corresponding process to improve the transmission timeliness, thereby reducing the information intersection delay and avoiding security risks.

[0040] Furthermore, the present invention further combines the comparison result of the bit error rate with the preset bit error rate with the comparison result of the transmission duration with the preset transmission duration to determine the data transmission process, thereby improving the detection accuracy of the data transmission process.

[0041] Furthermore, when the present invention determines that the signal-to-noise ratio needs to be improved based on the comparison between the bit error rate and the preset bit error rate, the improvement range of the signal-to-noise ratio can be determined based on the comparison result of the bit error rate deviation value and the preset bit error rate deviation value, thereby achieving precise adjustment, thereby reducing the bit error rate, thereby improving data transmission efficiency, and reducing information exchange delay.

[0042] Furthermore, the present invention can also determine the reason why the data transmission process is unqualified based on the comparison result of the delay difference and the preset delay difference, and then determine the corresponding processing based on the reason, including: improving the compression rate, or subpacketizing the first data packet, or redetermining the cause and generating corresponding instructions based on the comparison result of the duration variance and the critical duration variance, or issuing instructions for comprehensive inspection and maintenance of the system; thereby reducing the transmission time in a targeted manner and improving data transmission efficiency.

[0043] Furthermore, when determining that the compression rate needs to be improved, the present invention can achieve accurate improvement of the compression rate based on the comparison result of the delay deviation and the preset delay deviation, thereby reducing the transmission time, thereby improving data transmission efficiency and ensuring the timeliness of the data.

[0044] Furthermore, when determining that subpacket processing is required, the present invention can accurately determine the number of subpackets by comparing the delay deviation with the preset delay deviation, thereby reducing the transmission time, thereby improving data transmission efficiency and ensuring the timeliness of data.

[0045] Furthermore, the present invention determines to reduce the number of encrypted fields when the duration variance is less than or equal to the critical duration variance, thereby reducing the operating load of the system, thereby improving data transmission efficiency and ensuring the timeliness of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 Schematic diagram of the module of the power system data reverse transmission system based on the symmetric encryption algorithm in the present invention;

[0047] Figure 2 Schematic diagram of the flow of the power system data reverse transmission method based on the symmetric encryption algorithm in the present invention;

[0048] Figure 3 This is a logic decision diagram for determining whether a data transmission process is qualified and the corresponding processing based on the transmission duration and bit error rate in the present invention;

[0049] Figure 4This is a logic decision diagram for determining the reasons for the failure of the data transmission process based on the delay difference and the corresponding processing in the present invention. DETAILED DESCRIPTION

[0050] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are merely used to explain the present invention and are not intended to limit the present invention.

[0051] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0052] It should be noted that, in the description of the present invention, unless otherwise expressly specified or limited, the term "connection" should be understood in a broad sense. For example, it can mean a fixed connection, a detachable connection, or an integral connection; it can mean a mechanical connection or an electrical connection; it can mean a direct connection or an indirect connection through an intermediate medium; it can mean internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on specific circumstances.

[0053] See also Figure 1As shown, it is a module diagram of the power system data reverse transmission system based on the symmetric encryption algorithm of this embodiment. The system includes a sending end, a transport layer, a reverse safety isolation device, a receiving end, a detection module, an analysis module and a control module. The sending end is used to compress the data to be sent to obtain a first data packet; the transport layer is connected to the sending end, and is used to perform symmetric encryption processing on the first data packet according to the encryption strategy to obtain a second data packet and transmit it; the reverse safety isolation device is connected to the transport layer, and is used to process the second data packet according to the one-way transmission mechanism and security verification to obtain a third data packet; the receiving end is respectively connected to the transport layer and the reverse safety isolation device, and is used to receive the symmetric key and the third data packet generated during the encryption process, and is used to parse the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is independently transmitted through asymmetric encryption; the detection module is respectively connected to the sending end and the The receiving end is connected to determine the transmission duration based on the timestamps of the data with the same label points before and after the transmission, and to detect the data to determine the bit error rate; the analysis module is connected to the detection module to determine whether the data transmission process is qualified based on the transmission duration, and to generate corresponding instructions based on the determination result combined with the bit error rate to adjust the signal-to-noise ratio in the transmission process, or, to generate corresponding instructions based on the reason for the unqualified determined based on the transmission duration to adjust the compression rate in the compression processing, or the number of encrypted fields in the encryption processing, or to determine the first data packet for subpacket processing; the control module is respectively connected to the analysis module, the sending end, and the transport layer to adjust the operating parameters in the corresponding device or determine the processing method based on the instructions.

[0054] See also Figure 2 As shown in FIG, it is a flow chart of the method for reverse transmission of power system data based on a symmetric encryption algorithm according to this embodiment. The flow chart includes at least the following steps:

[0055] S1: Obtain data to be sent from the sending end and compress it to obtain a first data packet;

[0056] S2: performing symmetrical encryption on the first data packet according to the encryption strategy to obtain a second data packet and transmitting the second data packet;

[0057] S3: Processing the second data packet according to the one-way transmission mechanism and security verification by the reverse security isolation device to obtain a third data packet;

[0058] S4: Transmitting the symmetric key generated during the encryption process and the third data packet to a receiving end, wherein the receiving end parses the third data packet according to the symmetric key to obtain data, wherein the symmetric key is independently transmitted using asymmetric encryption;

[0059] S5: Determine the transmission duration and bit error rate based on the timestamps of the data with the same tag point before and after the transmission;

[0060] S6: Determining whether the data transmission process is qualified based on the transmission duration, and generating a corresponding instruction based on the determination result and the bit error rate to adjust the signal-to-noise ratio during the transmission process, or generating a corresponding instruction based on the reason for the failure determined based on the transmission duration to adjust the compression rate in the compression process, or the number of encrypted fields in the encryption process, or determining whether the first data packet should be subpacketized;

[0061] S7: Adjust the operating parameters of the corresponding process or determine the processing method based on the instruction.

[0062] Specifically, in this embodiment, the encryption strategy refers to determining whether to perform symmetric encryption based on the sensitivity level of several fields in the first data packet, that is, selective encryption. Choosing symmetric encryption is because the algorithm in this encryption is simple to calculate, the encryption and decryption speed is fast, and it is suitable for processing large amounts of data. By determining the status of the data transmission process based on the transmission duration and bit error rate, the operating parameters of the corresponding process can be adjusted in a targeted manner to improve the timeliness of transmission, thereby reducing information intersection delays and avoiding security risks. The unidirectional transmission mechanism uses a hardware-level unidirectional channel (such as optical fiber or dedicated chip) to only allow data to flow from the low security zone (security zone III) to the high security zone (security zone I / II) in one direction, physically blocking the reverse communication link; security verification is to perform virus scanning, format verification and keyword filtering on the data packet by the security device to ensure that there is no malicious code or illegal content. Among them, the tag point can be a switch action event (such as the time node of the circuit breaker opening and closing) or a message sequence number in the data packet before and after transmission.

[0063] See also Figure 3 , which is a logical decision diagram for determining whether a data transmission process is qualified based on the transmission duration and bit error rate, and the corresponding processing according to this embodiment. The process of determining whether the data transmission process is qualified includes: determining whether the data transmission process is qualified based on the comparison result of the transmission duration and the preset transmission duration, and determining whether the data transmission process is qualified based on the determination result combined with the comparison result of the bit error rate and the preset bit error rate. If the data transmission process is determined to be unqualified, the cause is determined based on the difference between the transmission duration and the preset transmission duration.

[0064] Specifically, in this embodiment, the real-time performance of the current data transmission process can be determined by comparing the transmission time T with the preset transmission time T0. When T exceeds the standard, it will affect the normal operation of the entire system, thereby causing safety hazards. Therefore, the data transmission process can be determined based on the comparison between T and T0; by analyzing the historical data collected in the past, and combining statistical methods and application scenarios to determine the corresponding preset or critical parameter values. In order to more accurately judge the data transmission process and refine the corresponding parameters in the transmission process, T0 can be divided into a first preset transmission time T1 and a second preset transmission time T2. The root cause of the anomaly is located by grading the preset parameters. By comparing T with T1 and T2, the data transmission process can be more accurately judged. It is determined that this data reverse transmission process is used to feed back the data analyzed by the data center in the safety zone 3 to the data center in the safety zone 1 to guide production. T1 can be set to 6 seconds and T2 to 8 seconds. The specific comparison process based on T with T1 and T2 is as follows:

[0065] If T is less than or equal to T1, it indicates that the current data transmission meets the minimum delay requirements of the power system, and the data transmission process can be directly determined to be qualified. If T is greater than T1 and less than or equal to T2, it indicates that there may be potential instability factors in the channel (for example, noise interference in the physical layer). At this time, the data transmission process can be further quantified based on the comparison results of the bit error rate F and the preset bit error rate F0. When it is impossible to accurately determine whether the current transmission process is qualified based on T, the additional parameter F is activated for further judgment, thereby avoiding misjudgment caused by relying on a single indicator and improving the accuracy of the judgment process. If T is greater than T2, it indicates that the data transmission duration at this time exceeds a certain duration limit. The data transmission process at this time is unqualified. The reason for the unqualified can be determined based on the difference between T and T0, more specifically, based on the difference between T and T2.

[0066] Furthermore, the process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate includes: determining whether to improve the signal-to-noise ratio based on the comparison result of the bit error rate and the preset bit error rate, or determining the reason why the data transmission process is unqualified based on the difference between the transmission time and the preset transmission time.

[0067] Specifically, in this embodiment, the preset bit error rate F0 can be divided into a first preset bit error rate F1 and a second preset bit error rate F2, and a hierarchical judgment is performed through a dual threshold value, and a critical bit error rate F3 = 1.2 × 10-5, F1 = 0.8 × F3, and F2 = 1.2 × F3 is set. The comparison process based on the bit error rate F with F1 and F2 is as follows:

[0068] If F is less than or equal to F1, the number of erroneous bits received during transmission is relatively small, indicating high-quality data transmission. Even if T is greater than T1 and less than or equal to T2, the data transmission process can still be considered acceptable. If F is greater than F1 and less than or equal to F2, a certain number of bit errors occurred during transmission. The increased bit error rate (BER) F can be attributed to noise interference at the physical layer. This is because noise energy undermines the reliability of signal judgment. By improving the signal-to-noise ratio (SNR), noise interference can be reduced, significantly lowering BER F. In scenarios dominated by physical layer noise, reducing F can reduce retransmissions and increase effective throughput, shortening T and ensuring data transmission efficiency. If F is greater than F2, a relatively high number of bit errors occurred during transmission. The data transmission process can be considered unacceptable. The difference between T and T2 can also be used to determine the cause of the unacceptable transmission process.

[0069] Furthermore, the process of determining whether to improve the signal-to-noise ratio includes: the preset bit error rate includes a first preset bit error rate, determining to improve the signal-to-noise ratio when it is determined that the bit error rate is less than or equal to the first preset bit error rate, generating a corresponding instruction to improve the signal-to-noise ratio based on a comparison result of a bit error rate deviation value and a preset bit error rate deviation value, wherein the improvement extent of the signal-to-noise ratio is positively correlated with the bit error rate deviation value; wherein the bit error rate deviation value is the difference between the first preset bit error rate and the bit error rate.

[0070] Specifically, in this embodiment, the preset bit error rate deviation value Q0 can be divided into a first preset bit error rate deviation value Q1 and a second preset bit error rate deviation value Q2. By comparing the bit error rate deviation value Q with Q1 and Q2, the improvement of the signal-to-noise ratio can be accurately determined. Q1 can be set to 0.12×10-5 and Q2 to 0.24×10-5. The comparison process based on Q with Q1 and Q2 is as follows:

[0071] If Q is less than or equal to Q1, a first signal-to-noise ratio adjustment instruction is generated, and based on this instruction, the transmission process is controlled to improve the original signal-to-noise ratio by 4dB. If Q is greater than Q1 and less than or equal to Q2, a second signal-to-noise ratio adjustment instruction is generated, and based on this instruction, the transmission process is controlled to improve the original signal-to-noise ratio by 6dB. If Q is greater than Q2, a second signal-to-noise ratio adjustment instruction is generated, and based on this instruction, the transmission process is controlled to improve the original signal-to-noise ratio by 8dB. Alternatively, if Q is greater than 2 times Q2, the data transmission process can be directly determined to be unqualified, and the reason for the unqualified transmission process can be determined based on the difference between T and T2. It should be noted that the increase in the signal-to-noise ratio can also be set to other values ​​that meet the standards. For example, when Q is greater than Q2, the signal-to-noise ratio can be increased by 10dB. It is clear that the increase in the signal-to-noise ratio is limited to not negatively impact the data transmission process.

[0072] See also Figure 4 As shown, it is a logical decision diagram for determining the reason for the failure of the data transmission process based on the delay difference and the corresponding processing in this embodiment. The process of determining the reason based on the difference between the transmission time and the preset transmission time includes: calculating the difference between the transmission time and the preset transmission time and recording it as the delay difference; determining the reason for the failure of the data transmission process and generating corresponding instructions based on the comparison result of the delay difference and the preset delay difference, including: when it is determined that the reason is that the transmission process is unqualified due to congestion of the transmission channel, generating corresponding instructions to improve the compression rate or sub-packetize the first data packet based on the comparison result of the delay deviation and the preset delay deviation, wherein the delay deviation is the difference between the preset delay difference and the delay difference; or statistically analyzing each historical transmission time in the historical transmission process, calculating the time variance based on the current transmission time and several historical transmission times, and re-determining the reason and generating corresponding instructions based on the comparison result of the time variance and the critical time variance; or when it is determined that the reason is a system failure during the transmission process, issuing an instruction for comprehensive inspection and maintenance of the system.

[0073] Specifically, in this embodiment, the transmission time T directly reflects the link stability and data processing efficiency of the transmission process. If the reverse transmission time exceeds the second preset transmission time T2, it indicates that there are problems such as network congestion, device response delay, or protocol adaptation abnormality. At this time, the reason for the failure can be determined based on the comparison between the delay difference P and the preset delay difference P0. P0 can be divided into a first preset delay difference P1 and a second delay difference P2. A hierarchical preset response mechanism can be used to subdivide the reasons for the failure in different situations, and then targeted adjustment and optimization can be performed. P1 can be set to 0.5 seconds and P2 can be set to 1.5 seconds. The specific comparison process based on P with P1 and P2 is as follows:

[0074] If P is less than or equal to P1, it means that although the current T is greater than T2, the degree to which it is greater than T2 is relatively small, which is a short-term delay fluctuation. It can be determined that there is congestion in the current transmission channel, resulting in an unqualified transmission process. At this time, the difference between P1 and P can be calculated and recorded as the delay deviation K. According to the comparison between the delay deviation K and the preset delay deviation K0, corresponding instructions are generated to improve the compression rate in the data compression process, thereby reducing the data packet size, so as to reduce the impact of channel congestion, thereby reducing T to ensure that the data transmission process is qualified; or according to the comparison between K and K0, corresponding instructions are generated to sub-packetize a single data packet to obtain multiple data packets, thereby reducing the size of a single data packet, thereby avoiding the conflict between the data packet size being too large and the instantaneous peak of bandwidth and improving the single data throughput, so as to reduce the impact of channel congestion, thereby reducing T, and it can also perform priority transmission according to the sensitivity level of the encrypted field in each data packet, thereby ensuring that the data transmission process is qualified. If P is greater than P1 and less than or equal to P2, it indicates that the current delay is between mild and severe. To more accurately determine the corresponding cause and corresponding treatment, the historical transmission time can be counted and combined with the current T to perform variance calculation to obtain the time variance E. Based on the comparison of the time variance E and the critical time variance E0, the cause of the failure and the corresponding treatment method can be re-determined. Among them, the comparison of E and E0 can quantify the abnormal conditions in the transmission process. If P is greater than P2, it means that the current T is greater than T2 to a relatively large extent, indicating that the current delay is serious and that the current system has a major fault. At this time, a direct instruction for comprehensive system inspection and maintenance should be issued. At the same time, the transmission protocol should also be reviewed to determine whether there is a problem with the current transmission protocol, and any problematic transmission protocols should be replaced. This includes a fault in the reverse safety isolation device that causes severe transmission delay.

[0075] Furthermore, the process of improving the compression rate includes: when it is determined that the cause is congestion in the transmission channel resulting in unqualified transmission process, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to improve the compression rate, and the improvement degree of the compression rate is negatively correlated with the delay deviation.

[0076] Specifically, in this embodiment, the delay deviation K is the difference between the preset delay difference P0 (specifically P1) and the delay difference P, and P is the difference between the transmission time T and the preset transmission time T0. When K is larger, P is smaller, and the corresponding T is also smaller, and the corresponding compression rate improvement is also smaller. Therefore, the compression rate improvement is negatively correlated with K. The preset delay deviation K0 can be divided into a first preset delay deviation K1 and a second preset delay deviation K2. The compression rate improvement can be accurately determined by comparing K with K1 and K2. Set K1 = 0.1 seconds, K2 = 0.15 seconds, and the comparison process based on K with K1 and K2 is as follows:

[0077] If K is less than or equal to K1, a first compression ratio adjustment instruction is generated, and based on this instruction, the compression process is controlled to increase the original compression ratio by 5%. If K is greater than K1 and less than or equal to K2, a second compression ratio adjustment instruction is generated, and based on this instruction, the compression process is controlled to increase the original compression ratio by 3%. If K is greater than K2, a third compression ratio adjustment instruction is generated, and based on this instruction, the compression process is controlled to increase the original compression ratio by 2%. It should be noted that the compression ratio increase can also be set to other values ​​that meet the requirements. For example, when K is less than or equal to K1, the compression ratio can be increased by 6%. It is clear that the compression ratio increase is limited to a value that does not negatively impact the transmission process.

[0078] Furthermore, the process of subpacketizing the first data packet includes: when it is determined that the reason is that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to determine the number of subpacketization processes of the first data packet, and the number is negatively correlated with the delay deviation.

[0079] Specifically, in this embodiment, a new first preset delay deviation K11=0.15 seconds and a new second preset delay deviation K21=0.2 seconds are set, and the comparison process based on K, K11 and K21 is as follows: if K is less than or equal to K11, it is determined to generate an instruction on adjusting the number of the first first data packet, and based on the instruction, the original first data packet is controlled to be sub-packetized into 5 data packets during the compression process; if K is greater than K11 and less than or equal to K21, it is determined to generate an instruction on adjusting the number of the second first data packet, and based on the instruction, the original first data packet is controlled to be sub-packetized into 4 data packets during the compression process; if K is greater than K21, it is determined to generate an instruction on adjusting the number of the third first data packet, and based on the instruction, the original first data packet is controlled to be sub-packetized into 3 data packets during the compression process. It should be noted that the number of subpackets of the first data packet can also be set to other values ​​that meet the requirements. For example, when K is less than or equal to K11, the original first data packet can also be subpacketized into 6 data packets; it can be understood that after the first data packet is subpacketized, the corresponding second data packet and the second data packet are both subpacketized, and the subpacketized data packets will not cause other interference to the data transmission process.

[0080] Furthermore, the process of redetermining the cause and the corresponding instruction based on the comparison result of the duration variance and the critical duration variance includes: when the duration variance is less than or equal to the critical duration variance, determining that the cause is that the transmission process is unqualified due to the increase in the number of encrypted fields in the symmetric encryption processing, and generating corresponding instructions to reduce the number of encrypted fields based on the comparison result of the total amount of data and the preset total amount of data; when the duration variance is greater than the critical duration variance, determining that the cause is that the transmission process is unqualified due to network fluctuations, and issuing an instruction to repair the network.

[0081] Specifically, in this embodiment, the critical duration variance E0 is set to 4.46. The comparison process based on the duration variance E and E0 is as follows: If E is less than or equal to E0, it indicates that the volatility of several historical transmission durations and the current T is at the same level, with no significant abnormal fluctuations. Therefore, it indicates that T is often greater than T2 during historical transmission. In this case, it can be determined that the frequent transmission failures are caused by unqualified symmetric encryption processing. In this case, based on the comparison of the total amount of data Y with the preset total amount Y0, it can be determined to reduce the number of encrypted fields, thereby reducing the system transmission load and improving transmission efficiency. If E is greater than E0, it indicates that several historical transmission durations and the current T show significant non-steady-state fluctuation characteristics, which means that the current T fluctuation is sudden. At this time, it can be determined that sudden network fluctuations have caused the sudden transmission failures. In this case, an instruction to check and repair the network can be issued to eliminate the impact of network fluctuations on the transmission process.

[0082] Furthermore, the process of reducing the number of encrypted fields includes: when it is determined that the reason is that the transmission process is unqualified due to the increase in the number of encrypted fields in the symmetric encryption processing, a corresponding instruction is generated based on the comparison result of the total amount of data and the preset total amount of data to reduce the number of encrypted fields, and the reduction in the number of encrypted fields is positively correlated with the total amount of data.

[0083] Specifically, in this embodiment, the preset total amount of data Y0 can be divided into a first preset total amount of data Y1 and a second preset total amount of data Y2. The reduction in the number of encrypted fields can be accurately determined by comparing the total amount of data Y with Y1 and Y2. The greater the value of Y, the greater the number of fields that need to be encrypted, which increases the operating load of the system and makes the data transmission process less likely to pass the test. Therefore, the reduction in the number of encrypted fields is positively correlated with Y. Y1 can be set to 512 bytes and Y2 to 1460 bytes. The specific process of comparing Y with Y1 and Y2 is as follows:

[0084] If Y is less than or equal to Y1, an adjustment instruction for the first number of encrypted fields is generated, and based on this instruction, the encryption process is controlled to reduce the number of encrypted fields by 2%. If Y is greater than Y1 and less than or equal to Y2, an adjustment instruction for the second number of encrypted fields is generated, and based on this instruction, the encryption process is controlled to reduce the number of encrypted fields by 5%. If Y is greater than Y2, an adjustment instruction for the third number of encrypted fields is generated, and based on this instruction, the encryption process is controlled to reduce the number of encrypted fields by 8%. It should be noted that the reduction in the number of encrypted fields can also be set to other values ​​that meet the requirements. For example, when Y is greater than Y2, the number of encrypted fields can be reduced by 10%. After the reduction, the number of encrypted fields is rounded up for encryption.

[0085] Furthermore, the process of performing symmetric encryption processing on the first data packet according to the encryption strategy includes: dividing several fields in the first data packet according to the sensitivity level to determine fields of different sensitivity levels; and determining whether to perform symmetric encryption processing on the field based on the comparison result of the sensitivity level of the field and the critical sensitivity level.

[0086] Specifically, in this embodiment, in order to reduce the load of the system during transmission, several fields can be selectively encrypted, thereby reducing the transmission time and improving transmission efficiency; several fields can be divided into sensitivity levels, and the critical sensitivity level A0 is set as the medium sensitivity level. The comparison process based on the sensitivity level A and A0 is as follows: if A is less than or equal to A0, it is determined that the field is non-critical to the system, and encryption processing is not required at this time, thereby reducing the complexity of system operation and improving system operation efficiency; if A is greater than A0, it is determined that the field is critical data for the system and cannot be interfered with or obtained by the outside world. At this time, encryption processing is performed to ensure the security of data transmission. Selective encryption can reduce the system operation load to improve system operation efficiency, and can also reduce the size of the second data packet to improve data transmission efficiency.

[0087] It is understandable that in the embodiments of the present invention, no specific limitation is imposed on any preset parameter or critical parameter, and the above values ​​are not limited thereto. Those skilled in the art may adjust the preset parameters or critical parameters accordingly based on actual needs, analysis of historical data, or equipment usage.

[0088] Thus far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art may make equivalent changes or substitutions to the relevant technical features, and the technical solutions after such changes or substitutions will fall within the scope of protection of the present invention.

[0089] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that the present invention is susceptible to various modifications and variations. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A method for reverse transmission of power system data based on a symmetric encryption algorithm, characterized in that: include: Obtaining data to be sent from a sending end and compressing the data to obtain a first data packet; Performing symmetrical encryption on the first data packet according to the encryption strategy to obtain a second data packet and transmitting the second data packet; Processing the second data packet according to a one-way transmission mechanism and security verification by a reverse security isolation device to obtain a third data packet; transmitting the symmetric key generated during the encryption process and the third data packet to a receiving end, and the receiving end parsing the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is independently transmitted through asymmetric encryption; Determining the transmission duration and the bit error rate based on the timestamps of the data having the same tag point before and after the transmission; Determining whether the data transmission process is qualified based on the transmission duration, and generating a corresponding instruction based on the determination result and the bit error rate to adjust the signal-to-noise ratio during the transmission process, or generating a corresponding instruction based on the reason for failure determined based on the transmission duration to adjust the compression rate in the compression process, the number of encrypted fields in the encryption process, or determining whether the first data packet is to be subpacketized; Based on the instructions, operating parameters in the corresponding process are adjusted or a processing method is determined.

2. The method for reverse transmission of power system data based on a symmetric encryption algorithm according to claim 1, characterized in that: The process of determining whether the data transmission process is qualified includes: Performing a determination based on a comparison result of the transmission duration with a preset transmission duration, and determining whether the data transmission process is qualified based on the determination result combined with a comparison result of the bit error rate with a preset bit error rate; When it is determined that the data transmission process is unqualified, the cause is determined according to the difference between the transmission duration and the preset transmission duration.

3. The method for reverse transmission of power system data based on a symmetric encryption algorithm according to claim 2, characterized in that: The process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate includes: Based on the comparison result of the bit error rate and the preset bit error rate, it is determined whether to improve the signal-to-noise ratio or the reason why the data transmission process is unqualified is determined according to the difference between the transmission duration and the preset transmission duration.

4. The method for reverse transmission of power system data based on a symmetric encryption algorithm according to claim 3, characterized in that: The process of determining whether to improve the signal-to-noise ratio includes: The preset bit error rate includes a first preset bit error rate, and when it is determined that the bit error rate is less than or equal to the first preset bit error rate, it is determined to improve the signal-to-noise ratio; based on a comparison result of the bit error rate deviation value and the preset bit error rate deviation value, a corresponding instruction is generated to improve the signal-to-noise ratio, and an improvement extent of the signal-to-noise ratio is positively correlated with the bit error rate deviation value; The bit error rate deviation value is the difference between the first preset bit error rate and the bit error rate.

5. The method for reverse transmission of power system data based on symmetric encryption algorithm according to claim 2, characterized in that: The process of determining the cause according to the difference between the transmission duration and the preset transmission duration includes: Calculate the difference between the transmission time and the preset transmission time and record it as the delay difference; Determining a reason why the data transmission process is unqualified based on a comparison result of the delay difference with a preset delay difference and generating a corresponding instruction includes: When it is determined that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated according to a comparison result of the delay deviation with a preset delay deviation to improve the compression ratio or perform packet processing on the first data packet, wherein the delay deviation is the difference between the preset delay difference and the delay difference; or calculating each historical transmission duration in a historical transmission process, calculating a duration variance based on the current transmission duration and a number of historical transmission durations, and re-determining the cause and generating a corresponding instruction based on a comparison result of the duration variance with a critical duration variance; Or when it is determined that the cause is a system failure during the transmission process, an instruction is issued to conduct a comprehensive inspection and maintenance of the system.

6. The method for reverse transmission of power system data based on symmetric encryption algorithm according to claim 5, characterized in that: The process of improving the compression ratio includes: When it is determined that the reason is that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to improve the compression rate, and the increase in the compression rate is negatively correlated with the delay deviation.

7. The method for reverse transmission of power system data based on a symmetric encryption algorithm according to claim 5, characterized in that: The process of subpacketizing the first data packet includes: When it is determined that the reason is that the transmission process is unqualified due to congestion in the transmission channel, a corresponding instruction is generated based on the comparison result of the delay deviation and the preset delay deviation to determine the number of subpacket processing of the first data packet, and the number is negatively correlated with the delay deviation.

8. The method for reverse transmission of power system data based on symmetric encryption algorithm according to claim 5, characterized in that: The process of re-determining the cause and the corresponding instruction based on the comparison result of the duration variance and the critical duration variance includes: When the duration variance is less than or equal to the critical duration variance, determining that the cause is that the transmission process is unqualified due to an increase in the number of encrypted fields in the symmetric encryption process, and generating a corresponding instruction to reduce the number of encrypted fields based on a comparison result of the total amount of data with a preset total amount of data; When the time variance is greater than the critical time variance, it is determined that the cause is that the transmission process is unqualified due to network fluctuations, and an instruction to repair the network is issued.

9. The method for reverse transmission of power system data based on symmetric encryption algorithm according to claim 8, characterized in that: The process of reducing the number of encrypted fields includes: When it is determined that the reason is that the transmission process is unqualified due to the increase in the number of encrypted fields in the symmetric encryption processing, a corresponding instruction is generated based on the comparison result of the total amount of data with the preset total amount of data to reduce the number of encrypted fields, and the reduction in the number of encrypted fields is positively correlated with the total amount of data.

10. The method for reverse transmission of power system data based on symmetric encryption algorithm according to claim 1, characterized in that: The process of performing symmetric encryption processing on the first data packet according to the encryption policy includes: Dividing the fields in the first data packet into fields of different sensitivity levels according to the sensitivity levels; Whether to perform symmetric encryption processing on the field is determined based on the comparison result of the sensitivity level of the field and the critical sensitivity level.

Images