Power system data reverse transmission method based on symmetric encryption algorithm

Abstract

The application relates to the technical field of information security, in particular to a power system data reverse transmission method based on a symmetric encryption algorithm. Data is compressed to obtain a first data packet, and symmetric encryption processing is carried out according to an encryption strategy to obtain a second data packet. The second data packet is processed according to a one-way transmission mechanism and a security check to obtain a third data packet. The third data packet is parsed according to a symmetric key to obtain data. The time stamp of the data with the same label point before and after transmission is used to determine the transmission time length and the bit error rate. The data transmission process is judged based on the transmission time length and the bit error rate, and an instruction is generated to adjust the signal-to-noise ratio in the transmission process, or an instruction is generated to adjust the compression rate in the compression processing process, or the number of encryption fields in the encryption processing process, or the first data packet is determined to be processed in a packet manner. Therefore, the transmission time length can be reduced to improve the transmission timeliness, the information exchange delay is reduced, and security risks are avoided.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, and in particular to a power system data reverse transmission method based on a symmetric encryption algorithm. BACKGROUND

[0002] Modern power systems rely on SCADA (Supervisory Control and Data Acquisition) to realize device state monitoring and control instruction transmission. Traditional communication uses plaintext transmission or weak encryption protocols (such as MODBUS), which can cause the following problems: when reverse transmission (such as distributed energy grid-connection data backhaul) is performed, it is vulnerable to man-in-the-middle attacks, resulting in counterfeit metering data or malicious instruction injection; and reverse transmission places more emphasis on data integrity and real-time performance, while existing SSL / TLS asymmetric encryption schemes are difficult to meet the real-time performance requirements of millisecond-level response due to high computational overhead. Therefore, how to reduce the impact of encryption on transmission performance is a problem that needs to be solved.

[0003] Chinese patent application publication No. CN119854053A discloses a data transmission method, a data sending device, and a data receiving device. The technical solution obtains a first data packet, determines a corresponding compression strategy according to the size of the first data packet, compresses the first data packet according to the compression strategy to obtain a second data packet, performs an encryption signature on the second data packet to obtain a third data packet, and sends the third data packet to a data receiving device. In this way, while reducing the impact of encryption operations on data transmission performance, the compression time of the data packet is controlled to improve the data transmission performance of the reverse isolation device. Although this technical solution solves the impact of encryption on transmission performance, it only involves how to compress and perform an encryption signature on the data packet, but does not consider whether the timeliness of the data after encryption and transmission in the entire transmission process can meet the requirements. If the real-time performance does not meet the requirements, it will also affect the transmission performance, causing information interaction delay and easily causing security risks. SUMMARY

[0004] To solve the problem that the existing technology cannot effectively adjust when the timeliness of the data transmission process is low, thereby causing information interaction delay, the present application provides a power system data reverse transmission method based on a symmetric encryption algorithm.

[0005] To achieve the above-mentioned purpose, the present application provides a power system data reverse transmission method based on a symmetric encryption algorithm, which comprises:

[0006] Obtaining data to be sent in a sending end and compressing the data to obtain a first data packet;

[0007] According to the encryption strategy, symmetrically encrypting the first data packet to obtain a second data packet and transmitting the second data packet;

[0008] processing the second data packet according to a one-way transmission mechanism and a security check by a reverse security isolation device to obtain a third data packet;

[0009] transmitting the symmetric key generated in the encryption process and the third data packet to a receiving end, and parsing the third data packet according to the symmetric key to obtain the data at the receiving end, wherein the symmetric key is independently transmitted through asymmetric encryption;

[0010] determining a transmission duration and a bit error rate according to the time stamp of the data with the same label point before and after transmission;

[0011] determining whether the data transmission process is qualified based on the transmission duration, and generating a corresponding instruction to adjust the signal-to-noise ratio in the transmission process according to the determination result combined with the bit error rate, or generating a corresponding instruction to adjust the compression rate in the compression process, or the number of encryption fields in the encryption process, or determining the packet processing of the first data packet according to the unqualified reason determined based on the transmission duration;

[0012] adjusting the running parameters in the corresponding process or determining the processing mode based on the instruction.

[0013] Further, the process of determining whether the data transmission process is qualified includes:

[0014] determining based on the comparison result of the transmission duration and a preset transmission duration, and determining whether the data transmission process is qualified based on the comparison result of the bit error rate and a preset bit error rate combined with the determination result;

[0015] When determining that the data transmission process is unqualified, determining the reason according to the difference between the transmission duration and the preset transmission duration.

[0016] Further, the process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate includes:

[0017] determining whether to improve the signal-to-noise ratio based on the comparison result of the bit error rate and the preset bit error rate, or determining the reason for the unqualified data transmission process according to the difference between the transmission duration and the preset transmission duration.

[0018] Further, the process of determining whether to improve the signal-to-noise ratio includes:

[0019] The preset bit error rate includes a first preset bit error rate, and when determining that the bit error rate is less than or equal to the first preset bit error rate, it is determined to improve the signal-to-noise ratio, a corresponding instruction is generated based on the comparison result of the bit error rate deviation value and the preset bit error rate deviation value to improve the signal-to-noise ratio, and the improvement amplitude of the signal-to-noise ratio is in a positive correlation with the bit error rate deviation value;

[0020] The error rate deviation value is a difference between the first preset error rate and the error rate.

[0021] Further, the process of determining the cause according to the difference between the transmission duration and the preset transmission duration includes:

[0022] The difference between the transmission duration and the preset transmission duration is calculated and recorded as a time delay difference;

[0023] Based on the comparison result of the time delay difference and a preset time delay difference, the cause of the unqualified data transmission process is determined, and a corresponding instruction is generated, including:

[0024] When it is determined that the cause of the unqualified transmission process is transmission channel congestion, a corresponding instruction is generated according to the comparison result of the time delay deviation and a preset time delay deviation to increase the compression rate or to perform packet processing on the first data packet, wherein the time delay deviation is a difference between the preset time delay difference and the time delay difference;

[0025] Or, the historical transmission durations in the historical transmission process are counted, the duration variance is calculated based on the current transmission duration and a plurality of historical transmission durations, the cause is re-determined based on the comparison result of the duration variance and a critical duration variance, and a corresponding instruction is generated;

[0026] Or, in the case where it is determined that the cause of the unqualified transmission process is a system failure in the transmission process, an instruction for overall investigation and maintenance of the system is issued.

[0027] Further, the process of increasing the compression rate includes:

[0028] When it is determined that the cause of the unqualified transmission process is transmission channel congestion, a corresponding instruction is generated based on the comparison result of the time delay deviation and the preset time delay deviation to increase the compression rate, and the increase amplitude of the compression rate is negatively correlated with the time delay deviation.

[0029] Further, the process of performing packet processing on the first data packet includes:

[0030] When it is determined that the cause of the unqualified transmission process is transmission channel congestion, a corresponding instruction is generated based on the comparison result of the time delay deviation and the preset time delay deviation to determine the number of packet processing of the first data packet, and the number is negatively correlated with the time delay deviation.

[0031] Further, the process of re-determining the cause and the corresponding instruction based on the comparison result of the duration variance and the critical duration variance includes:

[0032] determining that the cause is that the number of encrypted fields in the symmetric encryption process is increased, resulting in unqualified transmission process when the duration variance is less than or equal to the critical duration variance, and generating corresponding instructions based on the comparison result of the total data amount and the preset total data amount to reduce the number of encrypted fields;

[0033] determining that the cause is network fluctuation, resulting in unqualified transmission process when the duration variance is greater than the critical duration variance, and issuing instructions to repair the network.

[0034] Further, the process of reducing the number of encrypted fields includes:

[0035] When determining that the cause is that the number of encrypted fields in the symmetric encryption process is increased, resulting in unqualified transmission process, generating corresponding instructions based on the comparison result of the total data amount and the preset total data amount to reduce the number of encrypted fields, and the reduction amplitude of the number of encrypted fields is positively correlated with the total data amount.

[0036] Further, the process of performing symmetric encryption processing on the first data packet according to the encryption strategy includes:

[0037] According to the sensitivity level, a plurality of fields in the first data packet are divided to determine fields of different sensitivity levels.

[0038] Based on the comparison result of the sensitivity level of the field and the critical sensitivity level, it is determined whether the field is subjected to symmetric encryption processing.

[0039] Compared with the prior art, the power system data reverse transmission method based on the symmetric encryption algorithm has the beneficial effects that the method compresses the data to be sent to obtain a first data packet, performs symmetric encryption processing according to an encryption strategy to obtain a second data packet, processes the second data packet according to a one-way transmission mechanism and security check to obtain a third data packet, analyzes the third data packet according to a symmetric key to obtain data, then determines the transmission duration and the bit error rate according to the time stamps of the data with the same label point before and after transmission, determines whether the data transmission process is qualified based on the transmission duration, and further determines the transmission process based on the bit error rate to generate corresponding instructions to adjust the signal-to-noise ratio in the transmission process, or generates corresponding instructions to adjust the compression rate in the compression process, or the number of encrypted fields in the encryption process, or determines the first data packet to be packetized, thereby being able to adjust the operating parameters in the corresponding process to improve the transmission timeliness, thereby reducing the information intersection delay, and avoiding security risks.

[0040] Further, the application further combines the comparison result of the error code rate and the preset error code rate to determine the data transmission process when the comparison result of the transmission duration and the preset transmission duration is further combined, thereby improving the detection accuracy of the data transmission process.

[0041] Further, when it is determined according to the comparison of the error code rate and the preset error code rate that the signal-to-noise ratio needs to be improved, the application can determine the improvement range of the signal-to-noise ratio based on the comparison result of the error code rate deviation value and the preset error code rate deviation value, thereby realizing accurate adjustment and reducing the error code rate, thereby improving the data transmission efficiency and reducing the information interaction delay.

[0042] Further, the application can also determine the reason why the data transmission process is unqualified according to the comparison result of the time delay difference and the preset time delay difference, and then determine the corresponding processing according to the reason, including: improving the compression rate, or performing packet processing on the first data packet, or determining the reason again based on the comparison result of the duration variance and the critical duration variance and generating a corresponding instruction, or issuing an instruction for comprehensive investigation and maintenance of the system; thereby reducing the transmission duration and improving the data transmission efficiency.

[0043] Further, when it is determined that the compression rate needs to be improved, the application can realize accurate improvement of the compression rate based on the comparison result of the time delay deviation and the preset time delay deviation, thereby reducing the transmission duration and improving the data transmission efficiency and ensuring the timeliness of the data.

[0044] Further, when it is determined that the packet processing needs to be performed, the application can realize accurate determination of the packet number based on the comparison result of the time delay deviation and the preset time delay deviation, thereby reducing the transmission duration and improving the data transmission efficiency and ensuring the timeliness of the data.

[0045] Further, when the duration variance is less than or equal to the critical duration variance, the application determines to reduce the number of encryption fields, thereby reducing the running load of the system and improving the data transmission efficiency and ensuring the timeliness of the data. BRIEF DESCRIPTION OF DRAWINGS

[0046] Figure 1 A module schematic diagram of the power system data reverse transmission system based on the symmetric encryption algorithm in the application;

[0047] Figure 2 A flowchart of the power system data reverse transmission method based on the symmetric encryption algorithm in the application;

[0048] Figure 3 A logic determination diagram for determining whether the data transmission process is qualified and the corresponding processing based on the transmission duration and the error code rate in the application;

[0049] Figure 4The logic decision diagram for determining the reason of unqualified data transmission process based on the time delay difference and the corresponding processing in the application. DETAILED DESCRIPTION

[0050] In order to make the objects and advantages of the present application clearer, the present application will be further described in conjunction with examples. It should be understood that the specific examples described herein are only used to explain the present application and not to limit the present application.

[0051] The preferred embodiments of the present application will be described below with reference to the accompanying drawings. It should be understood by those skilled in the art that the embodiments are only used to explain the technical principles of the present application and not to limit the protection scope of the present application.

[0052] It should be noted that in the description of the present application, unless otherwise explicitly specified and limited, the term "connection" should be understood broadly, for example, it can be fixed connection, or detachable connection, or integrally connected; it can be mechanical connection, or electrical connection; it can be directly connected, or indirectly connected through intermediate medium, or the internal communication of two elements. For those skilled in the art, the specific meaning of the above-mentioned term in the present application can be understood according to the specific circumstances.

[0053] Please refer to Figure 1As shown, it is a module schematic diagram of the power system data reverse transmission system based on the symmetric encryption algorithm of the embodiment. The system includes a sending end, a transmission layer, a reverse security isolation device, a receiving end, a detection module, an analysis module and a control module. Among them, the sending end is used to compress the data to be sent to obtain a first data packet; the transmission layer is connected with the sending end, and is used to perform symmetric encryption processing on the first data packet according to an encryption strategy to obtain a second data packet and transmit; the reverse security isolation device is connected with the transmission layer, and is used to process the second data packet according to a one-way transmission mechanism and a security check to obtain a third data packet; the receiving end is connected with the transmission layer and the reverse security isolation device respectively, and is used to receive the symmetric key and the third data packet generated in the encryption processing, and is used to parse the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is transmitted independently through asymmetric encryption; the detection module is connected with the sending end and the receiving end respectively, and is used to determine the transmission time length according to the time stamp of the data with the same label point before and after transmission, and is used to detect the data to determine the bit error rate; the analysis module is connected with the detection module, and is used to determine whether the data transmission process is qualified based on the transmission time length, and generate corresponding instructions to adjust the signal-to-noise ratio in the transmission process according to the determination result combined with the bit error rate, or generate corresponding instructions to adjust the compression rate in the compression processing, or the number of encryption fields in the encryption processing, or determine the first data packet for packet processing according to the unqualified reason determined based on the transmission time length; the control module is connected with the analysis module, the sending end and the transmission layer respectively, and is used to adjust the running parameters or determine the processing mode in the corresponding equipment based on the instructions.

[0054] Please refer to Figure 2 As shown, it is a module schematic diagram of the power system data reverse transmission system based on the symmetric encryption algorithm of the embodiment. The system includes a sending end, a transmission layer, a reverse security isolation device, a receiving end, a detection module, an analysis module and a control module. Among them, the sending end is used to compress the data to be sent to obtain a first data packet; the transmission layer is connected with the sending end, and is used to perform symmetric encryption processing on the first data packet according to an encryption strategy to obtain a second data packet and transmit; the reverse security isolation device is connected with the transmission layer, and is used to process the second data packet according to a one-way transmission mechanism and a security check to obtain a third data packet; the receiving end is connected with the transmission layer and the reverse security isolation device respectively, and is used to receive the symmetric key and the third data packet generated in the encryption processing, and is used to parse the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is transmitted independently through asymmetric encryption; the detection module is connected with the sending end and the receiving end respectively, and is used to determine the transmission time length according to the time stamp of the data with the same label point before and after transmission, and is used to detect the data to determine the bit error rate; the analysis module is connected with the detection module, and is used to determine whether the data transmission process is qualified based on the transmission time length, and generate corresponding instructions to adjust the signal-to-noise ratio in the transmission process according to the determination result combined with the bit error rate, or generate corresponding instructions to adjust the compression rate in the compression processing, or the number of encryption fields in the encryption processing, or determine the first data packet for packet processing according to the unqualified reason determined based on the transmission time length; the control module is connected with the analysis module, the sending end and the transmission layer respectively, and is used to adjust the running parameters or determine the processing mode in the corresponding equipment based on the instructions.

[0055] S1: Obtain the data to be sent in the sending end and compress to obtain a first data packet;

[0056] S2: Perform symmetric encryption processing on the first data packet according to an encryption strategy to obtain a second data packet and transmit;

[0057] S3: Process the second data packet through the reverse security isolation device according to a one-way transmission mechanism and a security check to obtain a third data packet;

[0058] S4: Transmit the symmetric key and the third data packet generated in the encryption processing to the receiving end, and the receiving end parses the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is transmitted independently through asymmetric encryption;

[0059] S5: determining the transmission duration and the error code rate according to the time stamp of the data with the same tag point before and after transmission;

[0060] S6: determining based on the comparison result of the transmission duration and the preset transmission duration, and determining based on the comparison result of the error code rate and the preset error code rate whether the data transmission process is qualified.

[0061] S7: when determining that the data transmission process is not qualified, determining the reason according to the difference between the transmission duration and the preset transmission duration.

[0062] S8: generating a corresponding instruction based on the reason to adjust the compression rate in the compression process, or the number of encryption fields in the encryption process, or determining the first data packet for packet processing.

[0063] S9: adjusting the running parameter in the corresponding process or determining the processing mode based on the instruction.

[0064] Specifically, in the embodiment, the encryption strategy refers to determining whether to perform symmetric encryption processing according to the sensitivity level of a plurality of fields in the first data packet, i.e. selective encryption. The symmetric encryption is an algorithm in the encryption, which is simple in calculation, fast in encryption and decryption, and suitable for processing a large amount of data. By determining the state of the data transmission process based on the transmission duration and the error code rate, the running parameter in the corresponding process can be adjusted to improve the transmission timeliness, thereby reducing the information intersection delay to avoid security risks. The unidirectional transmission mechanism uses a hardware-level unidirectional channel (such as optical fiber or a special chip) to allow data to flow only from the low-security zone (security zone III) to the high-security zone (security zone I / II) in a single direction, and to block the reverse communication link at the physical layer. The security check is to perform virus scanning, format checking and keyword filtering on the data packet by the anti-positive security device to ensure that there is no malicious code or illegal content. The tag point can be a switch action event (such as the circuit breaker opening and closing time node) or a message sequence number in the data packet before and after transmission.

[0065] Please refer to Figure 3 Fig. 8 shows a logic determination diagram of the embodiment for determining whether the data transmission process is qualified and the corresponding processing based on the transmission duration and the error code rate. The process of determining whether the data transmission process is qualified includes: determining based on the comparison result of the transmission duration and the preset transmission duration, and determining based on the comparison result of the error code rate and the preset error code rate whether the data transmission process is qualified; when determining that the data transmission process is not qualified, determining the reason according to the difference between the transmission duration and the preset transmission duration.

[0066] Specifically, in the embodiment, the real-time performance of the current data transmission process can be determined by comparing the transmission time T with the preset transmission time T0. When T exceeds the standard, it will affect the normal operation of the entire system, thereby causing a safety hazard. Therefore, the data transmission process can be determined according to the comparison of T and T0. The values of the corresponding preset or critical parameters are determined by analyzing the historical data collected in the past and combining statistical methods and application scenarios. In order to more accurately determine the data transmission process and refine the corresponding parameters in the transmission process, T0 can be divided into a first preset transmission time T1 and a second preset transmission time T2. The abnormal root cause is located by hierarchical preset parameters, and the data transmission process is more accurately determined by comparing T with T1 and T2. The current data reverse transmission process is applied to feed back the data of the data center in the safety three area to the data center in the safety one area after analysis, thereby guiding production. T1 can be set to 6 seconds, and T2 can be set to 8 seconds. The comparison process of T, T1 and T2 is as follows:

[0067] If T is less than or equal to T1, it indicates that the current data transmission meets the minimum delay requirement of the power system, and the data transmission process can be directly determined to be qualified. If T is greater than T1 and less than or equal to T2, it indicates that there may be potential instability factors in the channel (for example, there is noise interference in the physical layer). At this time, the data transmission process can be further quantified according to the comparison result of the bit error rate F and the preset bit error rate F0. When the current transmission process cannot be accurately determined based on T, additional parameter F is started for further determination, thereby avoiding misjudgment due to reliance on a single indicator, and improving the accuracy of the determination process. If T is greater than T2, it indicates that the data transmission time exceeds a certain time limit, and the data transmission process is unqualified. The unqualified reason can be determined according to the difference between T and T0, more specifically, according to the difference between T and T2.

[0068] Further, the process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate includes: determining whether to improve the signal-to-noise ratio based on the comparison result of the bit error rate and the preset bit error rate, or determining the unqualified reason of the data transmission process according to the difference between the transmission time and the preset transmission time.

[0069] Specifically, in the embodiment, the preset bit error rate F0 can be divided into a first preset bit error rate F1 and a second preset bit error rate F2. A critical bit error rate F3 = 1.2 x 10-5, F1 = 0.8 x F3, and F2 = 1.2 x F3 are set. The comparison process of the bit error rate F and F1 and F2 is as follows:

[0070] If F is less than or equal to F1, it indicates that the number of error bits in the transmission process is relatively small, which can represent that the data transmission process is in a good state. Even if T is greater than T1 and less than or equal to T2, it can be determined that the current data transmission process is qualified. If F is greater than F1 and less than or equal to F2, it indicates that a certain number of error bits are generated in the transmission process. At this time, it can be determined that the bit error rate F is increased due to noise interference in the physical layer. The principle is that noise energy destroys the reliability of signal judgment. The noise interference can be reduced by improving the signal-to-noise ratio, thereby significantly reducing the bit error rate F. Especially in the scene dominated by physical layer noise, the number of retransmissions can be reduced and the effective throughput can be improved by reducing F, thereby shortening T to ensure data transmission efficiency. If F is greater than F2, it indicates that a relatively large number of error bits are generated in the transmission process. At this time, it can be directly determined that the data transmission process in this case is unqualified. The reason for the unqualified transmission process can also be determined according to the difference between T and T2.

[0071] Further, the process of determining whether to improve the signal-to-noise ratio includes: the preset bit error rate includes a first preset bit error rate, and the signal-to-noise ratio is determined to be improved when the bit error rate is less than or equal to the first preset bit error rate. The corresponding instruction is generated based on the comparison result of the bit error rate deviation value and the preset bit error rate deviation value to improve the signal-to-noise ratio. The improvement amplitude of the signal-to-noise ratio is in a positive correlation with the bit error rate deviation value. The bit error rate deviation value is the difference between the first preset bit error rate and the bit error rate.

[0072] Specifically, in the embodiment, the preset bit error rate deviation value Q0 can be divided into a first preset bit error rate deviation value Q1 and a second preset bit error rate deviation value Q2. The comparison of the bit error rate deviation value Q with Q1 and Q2 can accurately determine the improvement amplitude of the signal-to-noise ratio. Q1 can be set to 0.12x10-5, and Q2 can be set to 0.24x10-5. The comparison process based on Q with Q1 and Q2 is as follows:

[0073] If Q is less than or equal to Q1, it is determined to generate an instruction about first signal-to-noise ratio adjustment, and based on the instruction, the transmission process is controlled to be improved by 4dB on the basis of the original signal-to-noise ratio; if Q is greater than Q1 and less than or equal to Q2, it is determined to generate an instruction about second signal-to-noise ratio adjustment, and based on the instruction, the transmission process is controlled to be improved by 6dB on the basis of the original signal-to-noise ratio; if Q is greater than Q2, it is determined to generate an instruction about second signal-to-noise ratio adjustment, and based on the instruction, the transmission process is controlled to be improved by 8dB on the basis of the original signal-to-noise ratio; or if Q is greater than 2 times Q2, it can be directly determined that the data transmission process is unqualified, and at this time, according to the difference between T and T2, the reason for the unqualified transmission process is determined. It should be noted that the improvement amplitude of the signal-to-noise ratio can also be set to other standard-compliant values, for example, when Q is greater than Q2, it can be improved by 10dB on the basis of the original signal-to-noise ratio; it can be clear that the improvement amplitude of the signal-to-noise ratio is limited to not have a negative impact on the data transmission process.

[0074] Referring to Figure 4 As shown in FIG. 6, which is a logic determination diagram for determining the reason for the unqualified data transmission process and the corresponding processing based on the time delay difference in the embodiment. The process of determining the reason according to the difference between the transmission time length and the preset transmission time length includes: calculating the difference between the transmission time length and the preset transmission time length and recording it as a time delay difference; determining the reason for the unqualified data transmission process based on the comparison result of the time delay difference and the preset time delay difference and generating a corresponding instruction, including: when it is determined that the reason for the unqualified transmission process is transmission channel congestion, generating a corresponding instruction to improve the compression ratio or to perform packet processing on the first data packet according to the comparison result of the time delay deviation and the preset time delay deviation, wherein the time delay deviation is the difference between the preset time delay difference and the time delay difference; or calculating the time length variance based on the current transmission time length and a plurality of historical transmission time lengths, and determining the reason and generating a corresponding instruction based on the comparison result of the time length variance and the critical time length variance; or in the case where it is determined that the reason for the unqualified transmission process is that there is a fault in the system during the transmission process, issuing an instruction for a comprehensive investigation and maintenance of the system.

[0075] Specifically, in the embodiment, the size of the transmission time length T directly reflects the link stability and data processing efficiency of the transmission process. If the reverse transmission time length exceeds the second preset transmission time length T2, it indicates that there are problems such as network congestion, device response delay or protocol adaptation exception, at this time, the unqualified reason can be determined according to the comparison of the time delay difference P and the preset time delay difference P0; P0 can be divided into a first preset time delay difference P1 and a second time delay difference P2, and through a hierarchical preset response mechanism, the unqualified reasons in different situations can be subdivided, and then targeted adjustment and optimization can be performed; P1 can be set to 0.5 seconds and P2 can be set to 1.5 seconds, and the comparison process based on P and P1 and P2 is as follows:

[0076] If P is less than or equal to P1, it indicates that the current T is greater than T2, but the degree of being greater than T2 is relatively small, which belongs to short time delay fluctuation, and it can be determined that the current transmission channel is congested, thereby causing the transmission process to be unqualified. At this time, the difference between P1 and P can be calculated and recorded as time delay deviation K. According to the comparison between the time delay deviation K and the preset time delay deviation K0, the corresponding instruction is generated to improve the compression rate in the data compression process, thereby reducing the data packet size, reducing the impact of channel congestion, and reducing T to ensure that the data transmission process is qualified. Or according to the comparison between K and K0, the corresponding instruction is generated to divide a single data packet into multiple data packets, thereby reducing the size of a single data packet, avoiding the conflict between the size of a data packet and the instantaneous peak of bandwidth, and improving the single data throughput, thereby reducing the impact of channel congestion, reducing T, and also being able to perform priority transmission according to the sensitive level of the encryption field in each data packet, thereby ensuring that the data transmission process is qualified. If P is greater than P1 and less than or equal to P2, it indicates that the current time delay condition is between slight and serious. In order to more accurately determine the corresponding reason and the corresponding processing, the historical transmission time can be counted and combined with the current T to calculate the time length variance E according to the time length variance E and the critical time length variance E0. According to the comparison between the time length variance E and the critical time length variance E0, the unqualified reason and the corresponding processing mode are determined again, wherein the comparison between E and E0 can quantify the abnormal situation of the transmission process. If P is greater than P2, it indicates that the degree of current T being greater than T2 is relatively large, indicating that the current time delay condition is serious, indicating that the current system has a major fault condition. At this time, the instruction for overall investigation and maintenance of the system is directly issued, and the transmission protocol is also reviewed to determine whether the current transmission protocol has a problem, and the transmission protocol with a problem is replaced for use, wherein the reverse security isolation device has a fault leading to serious time delay of transmission.

[0077] Further, the process of improving the compression rate includes: when it is determined that the reason is that the transmission channel is congested, causing the transmission process to be unqualified, generating a corresponding instruction based on the comparison result of the time delay deviation and the preset time delay deviation to improve the compression rate. The improvement amplitude of the compression rate is negatively correlated with the time delay deviation.

[0078] Specifically, in the embodiment, the time delay deviation K is the difference between the preset time delay difference P0 (specifically P1) and the time delay difference P, P is the difference between the transmission time length T and the preset transmission time length T0, when K is larger, P is smaller, and the corresponding T is also smaller, and the corresponding compression rate improvement amplitude is also smaller, therefore, the compression rate improvement amplitude and K are negatively correlated. The preset time delay deviation K0 can be divided into a first preset time delay deviation K1 and a second preset time delay deviation K2, and the compression rate improvement amplitude is accurately determined through the comparison of K, K1 and K2, K1=0.1 seconds and K2=0.15 seconds, and the comparison process of K, K1 and K2 is specifically as follows:

[0079] If K is less than or equal to K1, it is determined to generate an instruction about the first compression rate adjustment, and based on the instruction, the compression processing process is controlled to increase by 5% on the basis of the original compression rate; if K is greater than K1 and less than or equal to K2, it is determined to generate an instruction about the second compression rate adjustment, and based on the instruction, the compression processing process is controlled to increase by 3% on the basis of the original compression rate; if K is greater than K2, it is determined to generate an instruction about the third compression rate adjustment, and based on the instruction, the compression processing process is controlled to increase by 2% on the basis of the original compression rate. It should be noted that the compression rate improvement amplitude can also be set to other required values, for example, when K is less than or equal to K1, it can also be increased by 6% on the basis of the original compression rate. It can be clearly understood that the compression rate improvement amplitude is limited to not have a negative impact on the transmission process.

[0080] Further, the packet processing process of the first data packet includes: when it is determined that the reason is that the transmission channel is congested to cause the transmission process to be unqualified, a corresponding instruction is generated based on the comparison result of the time delay deviation and the preset time delay deviation to determine the number of packet processing of the first data packet, and the number and the time delay deviation are negatively correlated.

[0081] Specifically, in the embodiment, a new first preset time delay deviation K11=0.15 seconds and a new second preset time delay deviation K21=0.2 seconds are set, and the comparison process based on K, K11and K21is specifically as follows: if K is less than or equal to K11, it is determined to generate an instruction for adjusting the first data packet quantity, and based on the instruction, the original first data packet is controlled to be divided into 5 data packets in the compression process; if K is greater than K11and less than or equal to K21, it is determined to generate an instruction for adjusting the second first data packet quantity, and based on the instruction, the original first data packet is controlled to be divided into 4 data packets in the compression process; if K is greater than K21, it is determined to generate an instruction for adjusting the third first data packet quantity, and based on the instruction, the original first data packet is controlled to be divided into 3 data packets in the compression process. It should be noted that the number of divided first data packets can also be set to other required values, for example, when K is less than or equal to K11, the original first data packet can also be divided into 6 data packets. It can be understood that after the first data packet is divided, the corresponding second data packet and the second data packet are also divided, and the divided data packets do not interfere with the data transmission process.

[0082] Further, the process of re-determining the cause and the corresponding instruction based on the comparison result of the time length variance and the critical time length variance includes: when the time length variance is less than or equal to the critical time length variance, determining that the cause is that the increase in the number of encryption fields in the symmetric encryption process leads to unqualified transmission process, and generating a corresponding instruction based on the comparison result of the total data amount and the preset total data amount to reduce the number of encryption fields; when the time length variance is greater than the critical time length variance, determining that the cause is that the network fluctuation leads to unqualified transmission process, and issuing an instruction to repair the network.

[0083] Specifically, in the embodiment, a critical time length variance E0=4.46 is set, and the comparison process based on the time length variance E and E0is specifically as follows: if E is less than or equal to E0, it indicates that the volatility of a plurality of historical transmission time lengths and the current T is at the same level, and no significant abnormal fluctuation occurs, therefore, it indicates that T is greater than T2 in the historical transmission process, at this time, it can be determined that the unqualified symmetric encryption process leads to frequent unqualified transmission process, at this time, the number of encryption fields can be reduced according to the comparison of the total data amount Y and the preset total data amount Y0, so as to reduce the transmission load of the system and improve the transmission efficiency. If E is greater than E0, it indicates that a plurality of historical transmission time lengths and the current T present significant non-steady-state fluctuation characteristics, which means that the current T fluctuates suddenly, at this moment, it can be determined that the network fluctuates suddenly, which leads to sudden unqualified transmission process, at this moment, an instruction can be issued to repair the network to check the network fluctuation influence in the transmission process.

[0084] Further, the process of reducing the number of encrypted fields comprises: when determining that the cause is that the number of encrypted fields increases in the symmetric encryption process, causing the transmission process to be unqualified, generating a corresponding instruction to reduce the number of encrypted fields based on the comparison result of the total amount of data and the preset total amount of data, and the reduction range of the number of encrypted fields is positively correlated with the total amount of data.

[0085] Specifically, in the embodiment, the preset total amount of data Y0 can be divided into a first preset total amount of data Y1 and a second preset total amount of data Y2, and the reduction range of the number of encrypted fields is accurately determined by comparing Y with Y1 and Y2; the more Y is, the more the number of fields that need to be encrypted is, and the more the system load is, thereby causing the data transmission process to be less likely to be qualified, so that the reduction range of the number of encrypted fields is positively correlated with Y; Y1 can be set to 512 bytes, and Y2 can be set to 1460 bytes, and the comparison process based on Y, Y1 and Y2 is as follows:

[0086] If Y is less than or equal to Y1, it is determined to generate an adjustment instruction about the first number of encrypted fields, and based on the instruction, the number of encrypted fields is reduced by 2% in the encryption process on the basis of the original number of encrypted fields; if Y is greater than Y1 and less than or equal to Y2, it is determined to generate an adjustment instruction about the second number of encrypted fields, and based on the instruction, the number of encrypted fields is reduced by 5% in the encryption process on the basis of the original number of encrypted fields; if Y is greater than Y2, it is determined to generate an adjustment instruction about the third number of encrypted fields, and based on the instruction, the number of encrypted fields is reduced by 8% in the encryption process on the basis of the original number of encrypted fields. It should be noted that the reduction range of the number of encrypted fields can also be set to other required values, for example, when Y is greater than Y2, the number of encrypted fields can also be reduced by 10% on the basis of the original number of encrypted fields; and the number of encrypted fields is rounded up after being reduced.

[0087] Further, the process of performing symmetric encryption processing on the first data packet according to the encryption strategy comprises: dividing a plurality of fields in the first data packet according to the sensitivity level to determine fields of different sensitivity levels; and determining whether to perform symmetric encryption processing on the fields based on the comparison result of the sensitivity level of the fields and the critical sensitivity level.

[0088] Specifically, in the embodiment, in order to reduce the load of the system in the transmission process, selective encryption processing can be performed on several fields, so as to reduce the transmission time length and improve the transmission efficiency; the several fields can be divided into sensitive levels, and the critical sensitive level A0 is set as a medium sensitive level; the comparison process based on the sensitive levels A and A0 is specifically: if A is less than or equal to A0, it is determined that the field is a non-critical field for the system, and at this time, encryption processing can not be performed, thereby reducing the system operation complexity and improving the system operation efficiency; if A is greater than A0, it is determined that the field is critical data for the system and cannot be disturbed or obtained by the outside world, and at this time, encryption processing is performed, thereby ensuring the security of data transmission. Through the selective encryption mode, the system operation load can be reduced to improve the system operation efficiency, and the second data packet volume can be reduced to improve the data transmission efficiency.

[0089] It can be understood that in the embodiments of the present application, any one of the preset parameters or the critical parameters is not specifically limited, and the above values are not limited thereto, and a person skilled in the art can adjust the preset parameters or the critical parameters according to actual needs or analysis of historical data or device usage.

[0090] So far, the technical solutions of the present application have been described in combination with the preferred embodiments shown in the drawings, but a person skilled in the art can easily understand that the protection scope of the present application is obviously not limited to these specific embodiments. A person skilled in the art can make equivalent changes or replacements to the related technical features without departing from the principles of the present application, and the technical solutions after the changes or replacements will fall within the protection scope of the present application.

[0091] The above description is only the preferred embodiments of the present application and is not used to limit the present application; for those skilled in the art, the present application can have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

Claims

1. A method for power system data back transmission based on symmetric encryption algorithm, characterized in that, The method comprises: acquiring data to be sent in a sending end and compressing the data to obtain a first data packet; performing symmetric encryption processing on the first data packet according to an encryption strategy to obtain a second data packet and transmitting the second data packet; performing processing on the second data packet according to a one-way transmission mechanism and a security check through a reverse security isolation device to obtain a third data packet; transmitting a symmetric key generated in the encryption processing and the third data packet to a receiving end, and performing analysis on the third data packet according to the symmetric key to obtain the data, wherein the symmetric key is independently transmitted through asymmetric encryption; determining a transmission time length and a bit error rate according to time stamps of the data with the same label point before and after transmission; determining whether the data transmission process is qualified based on a comparison result of the transmission time length and a preset transmission time length, and determining whether the data transmission process is qualified based on a comparison result of the bit error rate and a preset bit error rate according to a determination result; when determining that the data transmission process is unqualified, determining a reason according to a difference between the transmission time length and the preset transmission time length; generating a corresponding instruction based on the reason to adjust a compression rate in the compression processing, or an encryption field number in the encryption processing, or to determine packet processing of the first data packet; adjusting a running parameter in a corresponding process or determining a processing mode based on the instruction.

2. The power system data back transmission method based on symmetric encryption algorithm according to claim 1, characterized in that, The process of determining whether the data transmission process is qualified based on the comparison result of the bit error rate and the preset bit error rate comprises: determining whether to improve a signal-to-noise ratio based on the comparison result of the bit error rate and the preset bit error rate, or determining a reason for the unqualified data transmission process according to a difference between the transmission time length and the preset transmission time length when determining that the data transmission process is unqualified.

3. The power system data back-transfer method based on symmetric encryption algorithm according to claim 2, characterized in that, The process of determining whether to improve the signal-to-noise ratio comprises: the preset bit error rate comprises a first preset bit error rate, when determining that the bit error rate is less than or equal to the first preset bit error rate, determining to improve the signal-to-noise ratio, generating a corresponding instruction based on a comparison result of a bit error rate deviation value and a preset bit error rate deviation value to improve the signal-to-noise ratio, and a signal-to-noise ratio improvement amplitude is in a positive correlation with the bit error rate deviation value; wherein the bit error rate deviation value is a difference between the first preset bit error rate and the bit error rate.

4. The power system data back-transfer method based on symmetric encryption algorithm according to claim 1, characterized in that, The process of determining the reason according to the difference between the transmission time length and the preset transmission time length comprises: calculating a difference between the transmission time length and the preset transmission time length and recording the difference as a time delay difference; determining the reason for the unqualified data transmission process based on a comparison result of the time delay difference and a preset time delay difference and generating a corresponding instruction, comprising: when determining that the reason for the unqualified data transmission process is a transmission channel congestion, generating a corresponding instruction according to a comparison result of a time delay deviation and a preset time delay deviation to improve the compression rate or to perform packet processing on the first data packet, wherein the time delay deviation is a difference between the preset time delay difference and the time delay difference; or calculating a time length variance by calculating the current transmission time length and a plurality of historical transmission time lengths in historical transmission processes, and redetermining the reason and generating a corresponding instruction based on a comparison result of the time length variance and a critical time length variance. Or in the case of determining the cause of the system failure during transmission, the instruction for the system is issued for comprehensive investigation and maintenance.

5. The power system data back-transfer method based on symmetric encryption algorithm according to claim 4, characterized in that, The process of improving the compression rate includes: When determining that the cause is the transmission channel congestion leading to the unqualified transmission process, the corresponding instruction is generated based on the comparison result of the time delay deviation and the preset time delay deviation to improve the compression rate, and the improvement amplitude of the compression rate is negatively correlated with the time delay deviation.

6. The power system data back transmission method based on symmetric encryption algorithm according to claim 4, characterized in that, The process of packet processing the first data packet includes: When determining that the cause is the transmission channel congestion leading to the unqualified transmission process, the corresponding instruction is generated based on the comparison result of the time delay deviation and the preset time delay deviation to determine the number of packet processing the first data packet, and the number is negatively correlated with the time delay deviation.

7. The power system data back-transfer method based on symmetric encryption algorithm according to claim 4, characterized in that, The process of re-determining the cause and the corresponding instruction based on the comparison result of the time length deviation and the critical time length deviation includes: When the time length deviation is less than or equal to the critical time length deviation, it is determined that the cause is the increase of the number of encryption fields in the symmetric encryption processing leading to the unqualified transmission process, and the corresponding instruction is generated based on the comparison result of the total data amount and the preset total data amount to reduce the number of encryption fields. When the time length deviation is greater than the critical time length deviation, it is determined that the cause is the network fluctuation leading to the unqualified transmission process, and the instruction for repairing the network is issued.

8. The power system data back-transfer method based on symmetric encryption algorithm according to claim 7, characterized in that, The process of reducing the number of encryption fields includes: When determining that the cause is the increase of the number of encryption fields in the symmetric encryption processing leading to the unqualified transmission process, the corresponding instruction is generated based on the comparison result of the total data amount and the preset total data amount to reduce the number of encryption fields, and the reduction amplitude of the number of encryption fields is positively correlated with the total data amount. 9.The power system data reverse transmission method based on symmetric encryption algorithm of claim 1, wherein, The process of symmetric encryption processing the first data packet according to the encryption strategy includes: According to the sensitivity level, a plurality of fields in the first data packet are divided to determine fields of different sensitivity levels; Based on the comparison result of the sensitivity level of the field and the critical sensitivity level, it is determined whether the field is symmetrically encrypted.

Images