Integrity monitoring method, system and equipment of power edge equipment and medium

Abstract

The invention discloses an integrity monitoring method, system and equipment for power edge equipment, and a medium. The method comprises the following steps: a registration server registers the power edge equipment according to an equipment identifier, an equipment identity public key and a manufacturer public key sent by the power edge equipment; after the power edge device is successfully registered, the verification server establishes trusted connection with the power edge device so as to send a first random number generator seed to the power edge device; before each verification, the power edge device generates a current proof period according to the first random number generator seed; when the attestation period is reached, the power edge equipment encrypts the software metric value of the power edge equipment and the attestation period through the attestation key of the power edge equipment to form an attestation voucher, and sends the attestation voucher to the verification server for integrity monitoring. By adopting the embodiment of the invention, external attacks can be effectively resisted, and the security of the power edge equipment is ensured.

Description

Technical Field

[0001] The present application relates to the field of integrity monitoring technology, and in particular to a method, system, device, and medium for integrity monitoring of power edge devices. Background Art

[0002] Edge computing is currently being widely adopted across various industries. However, with the development of edge computing in the power sector, security issues have also become prominent. The security of edge computing environments is a crucial research area within this field. Trusted computing, as an architectural enhancement of computing systems, has important applications in power edge computing environments. Trust in power edge device environments encompasses three key aspects: trusted module technology, integrity monitoring technology, and trusted connectivity technology.

[0003] The goal of integrity monitoring technology is to verify the trustworthiness of a device's software state. However, existing integrity monitoring solutions involve cumbersome interaction processes, such as requiring the verifier to initiate verification. This makes it difficult to quickly respond to verification requests, creating opportunities for attackers and making power edge devices vulnerable to attacks by malicious users. Summary of the Invention

[0004] The present application provides a method, system, device and medium for integrity monitoring of power edge devices to solve the problem in the prior art of involving cumbersome interaction processes, which makes it difficult to quickly respond to verification requests, provides opportunities for attackers, and makes power edge devices vulnerable to attacks by malicious users.

[0005] To achieve the above objectives, an embodiment of the present application provides a method for monitoring the integrity of a power edge device, comprising:

[0006] The registration server registers the power edge device according to the device identification, device identity public key and manufacturer public key sent by the power edge device;

[0007] After the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device;

[0008] Before each verification, the power edge device generates a current certification cycle according to the first random number generator seed;

[0009] When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server for integrity monitoring.

[0010] As an improvement to the above solution, the registration server registers the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device, including:

[0011] The power edge device generates the device identifier, the device identity public key and the manufacturer public key;

[0012] The power edge device sends the device identification, the device identity public key and the manufacturer public key to the registration server for verification;

[0013] After the registration server verifies the device identity public key and the manufacturer public key, it generates a certification key, encrypts the certification key, generates a first encrypted file, and sends it to the power edge device;

[0014] The power edge device decrypts the first encrypted file to obtain the certification key, encrypts the device identification using the certification key, and then sends the encrypted data to the registration server.

[0015] As an improvement to the above solution, encrypting the certification key, generating a first encrypted file, and sending the first encrypted file to the power edge device includes:

[0016] generating a second random number generator seed;

[0017] Digitally signing the device identity public key to generate a certificate;

[0018] The second random number generator seed, the certification key, and the certificate are encrypted using the manufacturer public key to generate the first encrypted file and send the first encrypted file to the power edge device.

[0019] As an improvement to the above solution, after the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device, including:

[0020] After the power edge device is successfully registered, the verification server initiates a certification request to the power edge device; wherein the certification request includes a random number;

[0021] The power edge device generates a message authentication code in response to the certification request using its own certification key, according to its own certificate, its own software metric value and the random number, and sends the code to the verification server;

[0022] After receiving the message authentication code, the verification server obtains the proof key and certificate of the power edge device from the registration server, and uses the proof key and certificate obtained from the registration server to perform verification based on the message authentication code. If the verification passes, the proof key obtained from the registration server is saved, and a first random number generator seed is sent to the power edge device.

[0023] As an improvement to the above solution, when the attestation period is reached, the power edge device uses its own attestation key to encrypt its own software metric value and the attestation period to form an attestation credential, and sends it to the verification server for integrity monitoring, including:

[0024] When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server;

[0025] The verification server receives the certification certificate, records the time of receipt, and verifies whether the time of receipt is valid;

[0026] After the receiving time is valid, verification is performed based on the certification certificate.

[0027] As an improvement to the above solution, the verifying whether the receiving time is valid includes:

[0028] Verify whether the receiving time is within T att -δ1~T att +T tr +δ1, where δ1 is the maximum clock error, T tr To verify the maximum transmission time between the server and the power edge device, T att This is the certification cycle.

[0029] As an improvement to the above solution, after the receiving time is valid, verification based on the certification credential includes:

[0030] After the receiving time is valid, the authenticity of the certification certificate, the freshness of the certification period in the certification certificate, and the credibility of the software metric value in the certification certificate are verified.

[0031] To achieve the above objectives, an embodiment of the present application further provides an integrity monitoring system for power edge devices, comprising:

[0032] A registration server is configured to register the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device;

[0033] a verification server configured to, after the power edge device is successfully registered, establish a trusted connection with the power edge device to send a first random number generator seed to the power edge device;

[0034] a power edge device configured to, before each verification, generate a current attestation period according to the first random number generator seed; when the attestation period arrives, encrypt a software measurement value of the power edge device and the attestation period by using an attestation key of the power edge device to form an attestation credential, and send the attestation credential to the verification server for integrity monitoring.

[0035] To achieve the above object, the embodiment of the present application further provides an integrity monitoring device of a power edge device, comprising a processor, a memory and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the integrity monitoring method of the power edge device as described above when executing the computer program.

[0036] To achieve the above object, the embodiment of the present application further provides a computer readable storage medium, comprising a stored computer program; wherein the computer program controls a device where the computer readable storage medium is located to execute the integrity monitoring method of the power edge device as described above when running.

[0037] Compared with the prior art, the embodiment of the present application provides an integrity monitoring method, system, device and medium of a power edge device, which, when the attestation period arrives, encrypts a software measurement value of the power edge device and the attestation period by using an attestation key of the power edge device to form an attestation credential, and sends the attestation credential to a verification server for integrity monitoring, thereby providing a non-interactive integrity monitoring scheme, which does not need to frequently communicate with the verification server or be initiated by the verification server, and can realize real-time monitoring of the software state of the power edge device without increasing additional communication burden. This efficient verification method helps to discover and handle potential security threats in time, especially can prevent DDoS (Distributed Denial of Service) attacks, and further improves the security of the system. In addition, the embodiment of the present application builds a comprehensive trusted security protection system based on the registration process, the trusted connection process and the integrity monitoring process, which can effectively resist external attacks and ensure the security of the power edge device. This multi-level security protection design provides a strong guarantee for the stable operation of the power system. BRIEF DESCRIPTION OF DRAWINGS

[0038] Figure 1 is a flowchart of an integrity monitoring method of a power edge device provided by the embodiment of the present application;

[0039] Figure 2 This is a flowchart of a registration process provided by an embodiment of the present application;

[0040] Figure 3 This is a flow chart of a trusted connection process provided by an embodiment of the present application;

[0041] Figure 4 This is a structural block diagram of an integrity monitoring system for power edge devices provided by an embodiment of the present application;

[0042] Figure 5 This is a structural block diagram of an integrity monitoring device for power edge devices provided in an embodiment of the present application. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0044] In the description of this application, the size of the serial numbers of the following processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0045] In the description of this application, the terms "exemplary" or "for example" are used to indicate an example, illustration, or description. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this application should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.

[0046] In the description of this application, the terms "first," "second," etc. are used to distinguish similar objects and are not necessarily used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of the application described herein can, for example, be implemented in an order other than that illustrated or described herein. In addition, the terms "including" and "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or elements is not necessarily limited to those steps or elements explicitly listed, but may include other steps or elements that are not explicitly listed or that are inherent to such process, method, product, or device. The term "based on" means "based at least in part on." The term "according to" means "based at least in part on." The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; and the term "some embodiments" means "at least some embodiments." The term "and / or" means at least one of the connected objects, for example, A and / or B, which includes A alone, B alone, and both A and B. Unless otherwise stated, the term "plurality" means two or more than two.

[0047] See also Figure 1 , Figure 1 This is a flow chart of a method for monitoring the integrity of a power edge device provided by an embodiment of the present application, the method comprising:

[0048] S1. The registration server registers the power edge device according to the device identification, device identity public key and manufacturer public key sent by the power edge device;

[0049] S2. After the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device;

[0050] S3. Before each verification, the power edge device generates a current certification cycle according to the first random number generator seed;

[0051] S4. When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server for integrity monitoring.

[0052] It is worth noting that the embodiment of the present application builds a comprehensive trusted security protection system based on the registration process, trusted connection process and integrity monitoring process, which improves the security defense capabilities of power edge devices, strengthens the existing system, reaches the hardware-level defense level, and improves verification efficiency, which can support large-scale monitoring of power edge devices.

[0053] The registration process is carried out in the offline stage to complete the initialization and registration of the power edge device, including key initialization, to complete the registration work; the trusted connection process dynamically verifies the credibility of the power edge device to ensure that the power edge device is in a trusted state from registration to the start of integrity monitoring; the integrity monitoring process provides integrity measurement of the power edge device, which can not only dynamically monitor the software status of the power edge device, but also greatly improve the efficiency of proof calculation and prevent DDoS attacks.

[0054] In an optional embodiment, the registration server registers the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device, including:

[0055] The power edge device generates the device identifier, the device identity public key and the manufacturer public key;

[0056] The power edge device sends the device identification, the device identity public key and the manufacturer public key to the registration server for verification;

[0057] After the registration server verifies the device identity public key and the manufacturer public key, it generates a certification key, encrypts the certification key, generates a first encrypted file, and sends it to the power edge device;

[0058] The power edge device decrypts the first encrypted file to obtain the certification key, uses the certification key to encrypt the device identification, and then sends the encrypted data to the registration server.

[0059] It is worth noting that before the registration work starts, the Tcm (Trusted Cryptographic Module) chip of the power edge device is initialized. The initialization work includes: generating the manufacturer public key EK pub , Generate device identity key pair (including: device identity public key AIK pub and device identity private key AIK pri ) and generate device identification ID. Manufacturer public key EK pub That is, the manufacturer's public key, specifically the Tcm manufacturer's public key; the device identity key pair is the identity key pair of the power edge device, and the device identifier is the unique identifier of the power edge device.

[0060] During the registration phase, the power edge device will register its own device ID, device identity public key AIK pub , manufacturer public key EK pub Sent to the registration server for verification. The registration server verifies the device identity public key AIK pub , manufacturer public key EK pub After the validity of the registration server is verified, the registration server generates a proof key K shared with the power edge device. att , the registration server will prove the key K att After encryption, the first encrypted file is obtained and sent back to the power edge device. After receiving the first encrypted file, the power edge device decrypts it to obtain the proof key K att , and then use the proof key K att After encrypting the device ID, you get the HMAC Katt (ID), HMAC Katt (ID) is sent to the registration server to prove that you have obtained the certification key. The registration process is as follows Figure 2 shown.

[0061] In an optional embodiment, encrypting the certification key, generating a first encrypted file, and sending the first encrypted file to the power edge device includes:

[0062] generating a second random number generator seed;

[0063] Digitally signing the device identity public key to generate a certificate;

[0064] The second random number generator seed, the certification key, and the certificate are encrypted using the manufacturer public key to generate the first encrypted file and send the first encrypted file to the power edge device.

[0065] In order to facilitate the verification of the identity of the power edge device, the registration server of the embodiment of the present application also registers the device identity public key AIK of the power edge device. pub Digitally sign to issue certificate AIK cert In order to provide a basis for the identity authentication of the subsequent trusted connection process, the manufacturer's public key EK pub The second random number generator seed S att2 , Proof key K att and certificate AIK cert Encrypt and generate the first encrypted file, namely Enc EK (S att2 ,K att ,AIK cert ). The registration process is as follows Figure 2 shown.

[0066] In an optional embodiment, after the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device, including:

[0067] After the power edge device is successfully registered, the verification server initiates a certification request to the power edge device; wherein the certification request includes a random number;

[0068] The power edge device generates a message authentication code in response to the certification request using its own certification key, according to its own certificate, its own software metric value and the random number, and sends the code to the verification server;

[0069] After receiving the message authentication code, the verification server obtains the proof key and certificate of the power edge device from the registration server, and uses the proof key and certificate obtained from the registration server to perform verification based on the message authentication code. If the verification passes, the proof key obtained from the registration server is saved, and a first random number generator seed is sent to the power edge device.

[0070] It is worth noting that after the power edge device successfully registers, the power edge device saves its own certification key K att and certificate AIK cert At this point, the verification server can initiate a trusted connection to it. The main process is as follows:

[0071] The verification server initiates a certification request for the successfully registered power edge device; the certification request includes a random number nonce.

[0072] After receiving the certification request, the power edge device obtains its own software measurement value h through the getMeasure function, plus the random number nonce and its own certificate AIK cert , through its own certification key K att Generate a message authentication code u1 for the proof response and send it to the verification server, i.e. u1 = mac(nonce||h||AIK cert :K att ). Among them, the mac function is used to generate a message authentication code.

[0073] After receiving the message authentication code u1, the verification server uses the session key K shared with the registration server to ser Establish a secure session to obtain the authentication key K of the corresponding power edge device att and certificate AIK cert .

[0074] Finally, the verification server performs verification based on the message authentication code u1, specifically including: using the vermac function through "based on the regenerated message authentication code (the message authentication code is based on the verification server from the registration server to obtain the certification key K att and certificate AIK cert Generate) compare u1" and "verify certificate signature and holder match" to verify the authenticity of the message authentication code u1 and the legitimacy of the certificate AIKcert. If the verification passes, it means that the software status of the power edge device is benign, that is, b=1, then save the certification key obtained from the registration server, and establish a trusted connection between the verification server and the power edge device. At this time, send the first random number generator seed S to the power edge device. att1 The trusted connection process is as follows: Figure 3 shown.

[0075] In an optional embodiment, when the attestation period is reached, the power edge device uses its own attestation key to encrypt its own software metric value and the attestation period to form an attestation credential, and sends it to the verification server for integrity monitoring, including:

[0076] When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server;

[0077] The verification server receives the certification certificate, records the time of receipt, and verifies whether the time of receipt is valid;

[0078] After the receiving time is valid, verification is performed based on the certification certificate.

[0079] It is worth noting that after the trusted connection is successfully established, the power edge device synchronizes the clock with the verification server. A random certification period T is generated based on the first random number generator seed. att , when reaching the proof period T att At this time, the power edge device calculates its own software metric value h and adds the software metric value h to the proof period T att , based on the proof key K att After encryption, the certificate u2 is formed and sent to the verification server for verification, that is, u2 = mac(h||T att ,K att ). After receiving the certification certificate μ2, the verification server records the reception time and performs verification. After the reception time is valid, verification is performed based on the certification certificate μ2.

[0080] The embodiment of the present application can reduce the challenges initiated by the verification end based on the method of the certifier actively initiating the verification report, which not only reduces the communication overhead, but also prevents the denial of service of the certification device, thereby preventing DDoS attacks.

[0081] On the power edge device side, a software metric value h is generated based on dynamic measurements to monitor the power edge device's software status. Since each process has a data structure in memory that describes its state and parameters, searching the process list in the operating system can find the data structure describing a specific process. This data structure is used to measure the process, generating a hash value in a specific state. This hash value is the software metric value h, enabling a more accurate understanding of the power edge device's software status.

[0082] In an optional embodiment, verifying whether the receiving time is valid includes:

[0083] Verify whether the receiving time is within T att -δ1~T att +T tr +δ1, where δ1 is the maximum clock error, T tr Maximum transmission time for authentication servers and power edge devices.

[0084] In the embodiment of the present application, after the verification server receives the certification certificate, it first pre-verifies the receiving time, that is, by verifying whether the receiving time is within T att -δ1~T att +T tr +δ1, verify whether the receiving time is valid. If it is, that is, T att -δ1≤T re ≤T att +T tr +δ1, it is valid; otherwise, it is invalid. Through preliminary screening, invalid credentials that are obviously timed out or premature are excluded, reducing the burden for subsequent verification. re The time the authentication credential was received from the authentication server.

[0085] In an optional embodiment, the verifying based on the certification credential after the receiving time is valid includes:

[0086] After the receiving time is valid, the authenticity of the certification certificate, the freshness of the certification period in the certification certificate, and the credibility of the software metric value in the certification certificate are verified.

[0087] The embodiment of the present application verifies the authenticity of u2 after receiving the valid time, and then verifies T attThe freshness of the software and the credibility of the software metric value h. If the verification passes, the benign state of the software is marked as b=1 and the trusted state of the power edge device is r=1. Otherwise, b=0 and r=0.

[0088] The verification server recalculates a new certification certificate (the certification certificate is based on the certification key K obtained by the verification server from the registration server) att and certificate AIK cert The generated certificate u1 is compared with u2 to verify the authenticity of the certificate u1.

[0089] The verification server generates a proof cycle based on the first random number generator seed, which is consistent with T in u2. att Compare and realize the proof cycle T att In addition, before each verification begins, the verification server and the power edge device are based on the same first random number generator seed S att Generate a new proof cycle to prevent attackers from obtaining the exact proof cycle.

[0090] By comparing the benchmark value set by the verification server with the software metric value h in u2, the credibility of the software metric value h is verified.

[0091] The embodiment of the present application provides a method for integrity monitoring of power edge devices. During the certification cycle, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server for integrity monitoring. This provides a non-interactive integrity monitoring solution, which does not require frequent communication with the verification server and does not require the verification server to actively initiate. It can achieve real-time monitoring of the software status of the power edge device without adding additional communication burden. This efficient verification method helps to timely discover and deal with potential security threats, especially to prevent DDoS (Distributed Denial of Service) attacks, further improving the security of the system. In addition, the embodiment of the present application builds a comprehensive trusted security protection system based on the registration process, trusted connection process and integrity monitoring process, which can effectively resist external attacks and ensure the security of power edge devices. This multi-level security protection design provides a strong guarantee for the stable operation of the power system.

[0092] See also Figure 4 , Figure 4 1 is a block diagram of a system 10 for monitoring the integrity of power edge devices provided in an embodiment of the present application. The system 10 includes:

[0093] A registration server is configured to register the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device;

[0094] a verification server, configured to establish a trusted connection with the power edge device after the power edge device is successfully registered, so as to send a first random number generator seed to the power edge device;

[0095] The power edge device is used to generate a proof cycle for this time according to the first random number generator seed before each verification; when the proof cycle is reached, the power edge device uses its own proof key to encrypt its own software measurement value and the proof cycle to form a proof certificate, and send it to the verification server for integrity monitoring.

[0096] Optionally, the registration server registers the power edge device according to the device identifier, device identity public key, and manufacturer public key sent by the power edge device, including:

[0097] The power edge device generates the device identifier, the device identity public key and the manufacturer public key;

[0098] The power edge device sends the device identification, the device identity public key and the manufacturer public key to the registration server for verification;

[0099] After the registration server verifies the device identity public key and the manufacturer public key, it generates a certification key, encrypts the certification key, generates a first encrypted file, and sends it to the power edge device;

[0100] The power edge device decrypts the first encrypted file to obtain the certification key, uses the certification key to encrypt the device identification, and then sends the encrypted data to the registration server.

[0101] Optionally, encrypting the certification key to generate a first encrypted file and sending the first encrypted file to the power edge device includes:

[0102] generating a second random number generator seed;

[0103] Digitally signing the device identity public key to generate a certificate;

[0104] The second random number generator seed, the certification key, and the certificate are encrypted using the manufacturer public key to generate the first encrypted file and send the first encrypted file to the power edge device.

[0105] Optionally, after the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device, including:

[0106] After the power edge device is successfully registered, the verification server initiates a certification request to the power edge device; wherein the certification request includes a random number;

[0107] The power edge device generates a message authentication code in response to the certification request using its own certification key, according to its own certificate, its own software metric value and the random number, and sends the code to the verification server;

[0108] After receiving the message authentication code, the verification server obtains the proof key and certificate of the power edge device from the registration server, and uses the proof key and certificate obtained from the registration server to perform verification based on the message authentication code. If the verification passes, the proof key obtained from the registration server is saved, and a first random number generator seed is sent to the power edge device.

[0109] Optionally, when the attestation period is reached, the power edge device uses its own attestation key to encrypt its own software metric value and the attestation period to form an attestation credential, and sends it to the verification server for integrity monitoring, including:

[0110] When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server;

[0111] The verification server receives the certification certificate, records the time of receipt, and verifies whether the time of receipt is valid;

[0112] After the receiving time is valid, verification is performed based on the certification certificate.

[0113] Optionally, verifying whether the receiving time is valid includes:

[0114] Verify whether the receiving time is within T att -δ1~T att +T tr +δ1, where δ1 is the maximum clock error, T tr Maximum transmission time for authentication servers and power edge devices.

[0115] Optionally, the verifying based on the certification credential after the receiving time is valid includes:

[0116] After the receiving time is valid, the authenticity of the certification certificate, the freshness of the certification period in the certification certificate, and the credibility of the software metric value in the certification certificate are verified.

[0117] It is worth noting that the working process of each module in the integrity monitoring system 10 for power edge devices described in the embodiment of the present application can refer to the working process of the integrity monitoring method for power edge devices described in the above embodiment, and will not be repeated here.

[0118] An integrity monitoring system 10 for power edge devices provided in an embodiment of the present application, during the certification cycle, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server for integrity monitoring, providing a non-interactive integrity monitoring solution, which does not require frequent communication with the verification server and does not require the verification server to actively initiate, and can achieve real-time monitoring of the software status of the power edge device without adding additional communication burden. This efficient verification method helps to timely discover and deal with potential security threats, especially to prevent DDoS (Distributed Denial of Service) attacks, further improving the security of the system. In addition, the embodiment of the present application builds a comprehensive trusted security protection system based on the registration process, trusted connection process and integrity monitoring process, which can effectively resist external attacks and ensure the security of power edge devices. This multi-level security protection design provides a strong guarantee for the stable operation of the power system.

[0119] In addition, an embodiment of the present application further provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, it controls the device where the computer-readable storage medium is located to execute the integrity monitoring method of the power edge device as described in any of the above embodiments.

[0120] In addition, an embodiment of the present application also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the integrity monitoring method for a power edge device as described in any of the above embodiments.

[0121] See also Figure 5 , Figure 5This is a block diagram of a device for monitoring the integrity of a power edge device provided in an embodiment of the present application. The device comprises a processor, a memory, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the aforementioned method for monitoring the integrity of a power edge device are implemented. Alternatively, when the processor executes the computer program, the functions of the modules / units in the aforementioned apparatus embodiments are implemented.

[0122] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to implement the present application. The one or more modules / units may be a series of computer program instruction segments capable of performing specific functions, and the instruction segments are used to describe the execution process of the computer program in the integrity monitoring device of the power edge device.

[0123] The integrity monitoring device of the power edge device may include, but is not limited to, a processor and a memory. Those skilled in the art will appreciate that the schematic diagram is merely an example of an integrity monitoring device for a power edge device and does not limit the integrity monitoring device of the power edge device. The integrity monitoring device may include more or fewer components than shown, or a combination of certain components, or different components. For example, the integrity monitoring device of the power edge device may also include input / output devices, network access devices, buses, etc.

[0124] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor. The processor serves as the control center of the integrity monitoring device for the power edge device, connecting various parts of the integrity monitoring device for the entire power edge device using various interfaces and lines.

[0125] The memory can be used to store the computer programs and / or modules. The processor implements the various functions of the integrity monitoring device of the power edge device by running or executing the computer programs and / or modules stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required for a function (such as a sound playback function, an image playback function, etc.); the data storage area can store data created based on the use of the mobile phone (such as audio data, a phone book, etc.). In addition, the memory can include high-speed random access memory and non-volatile memory, such as a hard disk, internal memory, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, at least one disk storage device, a flash memory device, or other volatile solid-state storage device.

[0126] Wherein, if the module / unit integrated into the integrity monitoring device of the power edge device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by a processor, it can implement the steps of the above-mentioned various method embodiments. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium can include: any entity or device that can carry the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal and software distribution medium, etc.

[0127] It should be noted that the device embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed across multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. In addition, in the drawings of the device embodiments provided in this application, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art can understand and implement the present invention without inventive work.

[0128] The above is a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications are also considered to be within the scope of protection of the present application.

Claims

1. A method for monitoring the integrity of power edge devices, characterized in that: include: The registration server registers the power edge device according to the device identification, device identity public key and manufacturer public key sent by the power edge device; After the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device; Before each verification, the power edge device generates a current certification cycle according to the first random number generator seed; When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server for integrity monitoring.

2. The method for monitoring the integrity of a power edge device according to claim 1, wherein: The registration server registers the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device, including: The power edge device generates the device identifier, the device identity public key and the manufacturer public key; The power edge device sends the device identifier, the device identity public key, and the manufacturer public key to the registration server for verification; After the registration server verifies the device identity public key and the manufacturer public key, it generates a certification key, encrypts the certification key, generates a first encrypted file, and sends it to the power edge device; The power edge device decrypts the first encrypted file to obtain the certification key, uses the certification key to encrypt the device identification, and then sends the encrypted data to the registration server.

3. The method for monitoring the integrity of a power edge device according to claim 2, wherein: The encrypting the certification key to generate a first encrypted file and sending the first encrypted file to the power edge device includes: generating a second random number generator seed; Digitally signing the device identity public key to generate a certificate; The second random number generator seed, the certification key, and the certificate are encrypted using the manufacturer public key to generate the first encrypted file and send the first encrypted file to the power edge device.

4. The method for monitoring the integrity of a power edge device according to claim 1, wherein: After the power edge device is successfully registered, the verification server establishes a trusted connection with the power edge device to send a first random number generator seed to the power edge device, including: After the power edge device is successfully registered, the verification server initiates a certification request to the power edge device; wherein the certification request includes a random number; The power edge device generates a message authentication code in response to the certification request using its own certification key, according to its own certificate, its own software metric value and the random number, and sends the code to the verification server; After receiving the message authentication code, the verification server obtains the proof key and certificate of the power edge device from the registration server, and uses the proof key and certificate obtained from the registration server to perform verification based on the message authentication code. If the verification passes, the proof key obtained from the registration server is saved, and a first random number generator seed is sent to the power edge device.

5. The method for monitoring the integrity of a power edge device according to claim 1, wherein: When the attestation period is reached, the power edge device uses its own attestation key to encrypt its own software metric value and the attestation period to form an attestation credential, and sends it to the verification server for integrity monitoring, including: When the certification cycle is reached, the power edge device uses its own certification key to encrypt its own software measurement value and the certification cycle to form a certification certificate, and sends it to the verification server; The verification server receives the certification certificate, records the time of receipt, and verifies whether the time of receipt is valid; After the receiving time is valid, verification is performed based on the certification certificate.

6. The method for monitoring the integrity of a power edge device according to claim 5, wherein: The verifying whether the receiving time is valid includes: Verify whether the receiving time is within T att -δ1~T att +T tr +δ1, where δ1 is the maximum clock error, T tr To verify the maximum transmission time between the server and the power edge device, T att This is the certification cycle.

7. The method for monitoring the integrity of a power edge device according to claim 5, wherein: The verification based on the certification certificate after the receiving time is valid includes: After the receiving time is valid, the authenticity of the certification certificate, the freshness of the certification period in the certification certificate, and the credibility of the software metric value in the certification certificate are verified.

8. An integrity monitoring system for power edge devices, characterized in that: include: A registration server is configured to register the power edge device according to the device identification, device identity public key, and manufacturer public key sent by the power edge device; a verification server, configured to establish a trusted connection with the power edge device after the power edge device is successfully registered, so as to send a first random number generator seed to the power edge device; The power edge device is used to generate a proof cycle for this time according to the first random number generator seed before each verification; when the proof cycle is reached, the power edge device uses its own proof key to encrypt its own software measurement value and the proof cycle to form a proof certificate, and send it to the verification server for integrity monitoring.

9. An integrity monitoring device for power edge devices, characterized in that: The device comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the integrity monitoring method of the power edge device according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a stored computer program; wherein, when the computer program is run, it controls the device where the computer-readable storage medium is located to execute the integrity monitoring method for a power edge device according to any one of claims 1 to 7.

Images