A communication security protection method based on a smart meter and the smart meter

Abstract

The present application relates to the technical field of smart meter, especially to a communication security protection method based on smart meter and smart meter, the method comprises the following steps: a communication module acquires two identity numbers, generates corresponding identification codes according to the two identity numbers, and sends information containing the two identity numbers and the corresponding two identification codes to a control module; the two identity numbers are used to uniquely identify the communication module; the control module receives and analyzes the information, obtains the two identity numbers, and detects whether the two identity numbers are stored; if the two identity numbers are not stored, the two identity numbers are stored. The present application can bind the communication module with double identity numbers, so that the two different identity numbers can be used to verify the identity of the communication module in the subsequent communication process. Only when the two identity numbers are satisfied at the same time, the communication can be normal, thereby improving the communication security of the smart meter and reducing the risk of cracking.

Description

Technical Field

[0001] This invention relates to the field of smart meter technology, and in particular to a communication security protection method based on a smart meter and a smart meter. Background Technology

[0002] With the large-scale construction of smart grids and the deep integration of IoT technology, smart meters, as the core terminals for power metering, user interaction and grid dispatch, have made communication security a key link in ensuring the stable operation of the power system, user data privacy and metering accuracy.

[0003] The current communication security mechanism of smart meters is mainly based on the "one meter, one key" principle. Encryption protection is achieved by assigning a unique key to each meter. The authentication process usually uses the meter number as the core dispersion factor to generate a fixed-format authentication message to complete the device identity verification. Data transmission mostly adopts the "plaintext + MAC (Message Authentication Code)" mode, using the key to generate a check code for the transmitted content to ensure data integrity. The communication module uses a general-purpose module, which can be connected to the meter after passing protocol compatibility testing, ensuring interconnection between devices. However, existing technologies have significant security shortcomings: First, identity authentication relies on fixed table numbers as dispersion factors, resulting in static authentication messages. Attackers can bypass identity verification by capturing messages and carrying out replay attacks. Second, in the "plaintext + MAC" mode, the same plaintext corresponds to a fixed MAC value. Attackers can establish a mapping relationship by capturing packets multiple times and forge legitimate MACs to tamper with data. Third, general communication modules can be accessed simply by passing protocol compliance verification, making them vulnerable to backdoor programs being implanted, which poses security risks such as monitoring messages and tampering with operating parameters. Summary of the Invention

[0004] This invention provides a communication security protection method and a smart meter based on a smart meter, in order to solve the problem of communication insecurity in existing smart meters.

[0005] In a first aspect, embodiments of the present invention provide a communication security protection method based on a smart meter, wherein the smart meter includes a communication module and a control module, and the communication security protection method for the smart meter includes: The communication module acquires two identity identifiers, generates corresponding identification codes based on the two identity identifiers, and sends information containing the two identity identifiers and the corresponding two identification codes to the control module; the two identity identifiers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers, and checks whether the identification numbers have been stored in the storage area; if no identification numbers are stored, the two identification numbers are stored.

[0006] In one possible implementation, the two identification numbers are an asset management code and a production code, respectively; The communication module generates corresponding identification codes based on the two identity numbers, and sends information containing the two identity numbers and the corresponding two identification codes to the control module, including: When the communication module is first inserted into the smart meter or after power-on, it generates corresponding identification codes based on the two identification numbers using extended instruction codes. The information containing the two identity numbers and the corresponding two identification codes is sent to the control module in plaintext.

[0007] In one possible implementation, sending the information containing the two identity numbers and the corresponding two identification codes to the control module in plaintext includes: The communication module sends the information to the control module in plaintext using data composed of the extended instruction code, data length, identification code, and the identity number corresponding to the identification code.

[0008] In one possible implementation, the control module receives and parses the information to obtain the two identification numbers, including: The control module receives all the information sent by the communication module and parses the information according to the data length to obtain the corresponding two identity identification numbers.

[0009] In one possible implementation, after detecting whether the identity number has been stored in the storage area, the method further includes: If the storage area stores an identification number, and the control module detects that at least one of the stored identification numbers is different from the two parsed identification numbers, then it reads the operating parameters of the smart meter, sets configuration parameters according to the operating parameters, and determines the status of the communication module based on the configuration parameters, deciding whether to stop communication or receive remote control commands.

[0010] In one possible implementation, setting the configuration parameters according to the operating parameters includes: If the operating parameters are different from the stored default operating parameters, the configuration parameters are set to the first state; the first state is to stop communication. If the operating parameters are the same as the stored default operating parameters, the user's credit level is determined based on the operating parameters, and different configuration parameters are set according to the user's credit level. The higher the user's credit level, the higher the operation privileges corresponding to the configuration parameters.

[0011] In one possible implementation, after the step of storing the two identity identifiers if no identity identifier is stored, the method further includes: If the control module receives a message from the communication module that both identification numbers have changed, it records the module replacement event and the module status change report, reports the module replacement event and the module status change report, and sets the configuration parameter to the zero state, which is the default normal state.

[0012] In one possible implementation, after the step of storing the two identity identifiers if no identity identifier is stored, the method further includes: During the operation of the smart meter, the control module monitors the voltage levels of the communication module's pins, records module status changes based on the pin voltage levels, and then reports the module status change records.

[0013] One possible implementation also includes: If the control module communicates normally with the communication module and the concentrator, but does not receive the information containing the two identity numbers and the corresponding two identification codes sent by the communication module, then the control module periodically reads the information from the communication module. If the reading is successful, the control module inserts the communication module and the two identity numbers into the module status change report record, and then reports the module status change report record to the concentrator.

[0014] Secondly, embodiments of the present invention provide a smart meter, which includes a communication module and a control module; The communication module acquires two identity identifiers, generates corresponding identification codes based on the two identity identifiers, and sends information containing the two identity identifiers and the corresponding two identification codes to the control module; the two identity identifiers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers, and checks whether the identification numbers have been stored in the storage area; if no identification numbers are stored, the two identification numbers are stored.

[0015] This invention provides a communication security protection method and a smart meter based on a smart meter. The smart meter includes a communication module and a control module. The communication module acquires two identification numbers, generates corresponding identification codes based on the two identification numbers, and sends information containing the two identification numbers and the corresponding two identification codes to the control module. The two identification numbers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers and checks whether the identification numbers have been stored in the storage area. If no identification numbers are stored, the two identification numbers are stored. By binding the communication module with dual identification numbers, the two different identification numbers can be used to authenticate the communication module during subsequent communication. Normal communication is possible only when both identification numbers are satisfied, thereby improving the communication security of the smart meter and reducing the risk of hacking. Attached Figure Description

[0016] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 This is a flowchart illustrating the implementation of the communication security protection method based on a smart meter provided in this embodiment of the invention. Figure 2 This is a flowchart illustrating the implementation of the method for setting configuration parameters provided in an embodiment of the present invention. Figure 3 This is a schematic diagram of the structure of a smart meter provided in an embodiment of the present invention. Detailed Implementation

[0018] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of the invention. However, those skilled in the art will understand that the invention can be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods are omitted so as not to obscure the description of the invention with unnecessary detail.

[0019] To make the objectives, technical solutions, and advantages of the present invention clearer, specific embodiments will be described below in conjunction with the accompanying drawings.

[0020] Figure 1This invention provides a flowchart of a communication security protection method based on a smart meter. The smart meter includes a communication module and a control module. As the name suggests, the communication module is mainly used for communication and is a general-purpose module; as long as it meets the standard communication protocol, it can be used in a smart meter. The communication security protection method based on a smart meter is described in detail below: Step 101: The communication module obtains two identity identifiers, generates corresponding identification codes based on the two identity identifiers, and sends the information containing the two identity identifiers and the corresponding two identification codes to the control module; the two identity identifiers are used to uniquely identify the communication module.

[0021] The first identity document (ID) of the communication module is an asset management code assigned to the communication module by the power grid, and this code is unique. The second ID is the production code of the communication module's manufacturer, and this production code is also unique. The two IDs can be used to trace the production and asset management.

[0022] Optionally, the asset management code is any number from the communication module number segment assigned by the power grid to the winning bidder. The power grid assigns a communication module number segment to the winning bidder, and then the winning bidder assigns the numbers in the communication module number segment to the corresponding communication modules in sequence.

[0023] In one embodiment, the communication module generates corresponding identification codes based on the two identification numbers, and sends information containing the two identification numbers and the corresponding two identification codes to the control module, which may include: When the communication module is first inserted into the smart meter or after power-on, it generates corresponding identification codes based on the two identification numbers using extended instruction codes. The information, which includes two identity numbers and two corresponding identification codes, is sent to the control module in plaintext.

[0024] Optionally, the communication module generates an identification code for the asset management code based on the asset management code and the extended instruction code. For example, the extended instruction code can be 0x1f, and the identification code for the asset management code can be represented by 01.

[0025] The communication module generates an identification code for the production code based on the production code and extended instruction code. For example, the identification code for the production code can be represented by 02.

[0026] Plaintext transmission here refers to the transmission of information in its raw, unencrypted, and readable form. Plaintext is generally contrasted with ciphertext, which is the encrypted form of information that cannot be directly recognized.

[0027] Optionally, before sending the information containing two identification numbers and two corresponding identification codes to the control module in plaintext, the communication module further includes: reading the communication address of the smart meter, and after normal communication, sending the information containing two identification numbers and two corresponding identification codes to the control module corresponding to the aforementioned communication address in plaintext.

[0028] In one embodiment, sending information containing two identification numbers and two corresponding identification codes to the control module in plaintext may include: The communication module sends information to the control module in plaintext, consisting of an extended instruction code, data length, identification code, and the identification number corresponding to the identification code.

[0029] For example, the information can be: 0x1f + data length + 01 (identification code) + asset management code, and 0x1f + data length + 02 (identification code) + production code.

[0030] Optionally, the communication module can send two messages to the control module. One message may contain an identification number, or it may send one message containing both identification numbers. In this embodiment, the number of messages is not limited.

[0031] The data length here can refer to the length of all the data included in the entire information, or it can include the length of each field, such as the length of the identification code, asset management code, or production code, so that the control module can determine the length of the identification number based on the data length and further determine the content of the identification number.

[0032] Step 102: The control module receives and parses the information to obtain two identity identifiers, and checks whether the identity identifiers have been stored in the storage area; if no identity identifiers are stored, the two identity identifiers are stored so that the control module can be verified using dual identity identifiers.

[0033] In one embodiment, the control module receives and parses the information to obtain two identification numbers, which may include: The control module receives all the information sent by the communication module and parses the information according to the data length to obtain the corresponding two identification numbers.

[0034] After the control module parses the information, it can obtain two identification numbers: asset management code and production code.

[0035] Optionally, the two obtained identification numbers can be saved to the corresponding locations in the smart meter's memory (EEPROM). This binds the smart meter's communication module with two IDs, requiring both IDs to be used for authentication; otherwise, authentication will fail, enhancing the security of the communication module and preventing unauthorized replacement.

[0036] During the operation of a smart meter, a communication module malfunction may occur. In this case, it is necessary to restrict the smart meter's functions to prevent unauthorized replacement of the communication module and subsequent losses. Here, a communication module malfunction refers to a change in the communication module's dual IDs.

[0037] like Figure 2 As shown, in one embodiment, after detecting whether the storage area has already stored the identity number, the process may further include: If the storage area stores an identification number, and the control module detects that at least one of the stored identification numbers is different from the two parsed identification numbers, it reads the smart meter's operating parameters, sets configuration parameters based on the operating parameters, and determines the status of the communication module based on the configuration parameters, deciding whether to stop communication or receive remote control commands.

[0038] Understandably, if the storage area stores an identification number, the control module checks whether the stored identification number is completely identical to the two parsed identification numbers. Furthermore, if the storage area stores an identification number, and the control module detects that the stored identification number is identical to both of the parsed identification numbers, then the smart meter will work normally.

[0039] It should be noted that the storage area stores two identification numbers. The control module compares the two stored identification numbers with the two parsed identification numbers, that is, it compares the stored asset management code with the parsed asset management code, and the stored production code with the parsed production code. If at least one of them is different, it indicates that the communication module has malfunctioned. In this embodiment, different configuration parameters are set to determine the abnormal state of the communication module.

[0040] Optionally, operating parameters may include parameters such as the smart meter's time zone table, time period table, tariff number, and meter time.

[0041] In one embodiment, if the storage area stores an identification number, and the control module detects that at least one of the stored identification numbers is different from the two parsed identification numbers, then the operating parameters of the smart meter are remotely read and compared with the default operating parameters stored in the background.

[0042] In one embodiment, setting configuration parameters based on operating parameters may include: If the running parameters are different from the stored default running parameters, the configuration parameters are set to the first state; the first state is to stop communication. If the running parameters are the same as the storage's default running parameters, the user's credit level is determined based on the running parameters. Different configuration parameters are set according to the user's credit level, and the higher the user's credit level, the higher the operation privileges corresponding to the configuration parameters.

[0043] Optionally, if the operating parameters differ from the stored default operating parameters, it indicates that the smart meter's operating parameters have been maliciously tampered with. In this case, the read meter data is abnormal, and the communication module should be replaced immediately, with normal operating parameters set. This situation is set to the first state, indicating a communication module malfunction and communication should be stopped.

[0044] Optionally, after replacing the communication module, the configuration parameters can be set to state zero, which represents the default normal state, at which point the control module and the communication module can communicate normally.

[0045] Optionally, if the operating parameters are the same as the stored default operating parameters, it means that the operating parameters of the smart meter have not been maliciously tampered with, but there may be user credit issues. Therefore, different configuration parameters can be set according to the user's credit level.

[0046] The operation permissions corresponding to the second to sixth states of the configuration parameters increase progressively. The second to sixth states can be represented as follows: Second state: When the module is abnormal, only reading meter data is allowed; the meter cannot be set parameters or executed control commands.

[0047] Third state: When the module is abnormal, only reading the meter data is allowed, the meter parameters cannot be set, but all control commands can be executed.

[0048] Fourth state: When the module is abnormal, only reading the meter data is allowed, and the meter parameters cannot be set. Only trip control commands can be executed.

[0049] Fifth state: When the module is abnormal, only reading the meter data is allowed, and the meter parameters cannot be set. Only the closing control command can be executed.

[0050] Sixth state: When the module malfunctions, the meter does not perform any actions and can execute all operations.

[0051] The user credit rating can be set according to needs. For example, if a user has no outstanding payments or electricity theft information, the user's credit rating is the highest. If there are outstanding payments or electricity theft information, the user's credit rating is lower.

[0052] For example, if the operating parameters are the same as the stored default operating parameters, and the user has no information on overdue payments or electricity theft, the configuration parameters are set to the second state, which only allows reading smart meter data and does not allow opening or closing the circuit breaker. This can be understood as the smart meter being in a power-protection state before the normal communication module is replaced. If the operating parameters are the same as the stored default operating parameters, and the user has information on overdue payments or electricity theft, the configuration parameters are set to the third state, allowing the reading of smart meter data and the execution of all control commands. This can be understood as allowing remote sending of tripping and closing control commands before replacing the normal communication module, so that the control module can perform tripping or closing operations to cut off or restore the power supply.

[0053] If the operating parameters are the same as the stored default operating parameters, and the user has information on overdue payments or electricity theft, then the configuration parameters are set to the fourth state, allowing the reading of smart meter data and the execution of trip control commands. This can be understood as allowing remote sending of trip control commands before replacing the normal communication module, so that the control module can perform a trip operation and cut off the power supply.

[0054] Optionally, if the operating parameters are the same as the stored default operating parameters, and the smart meter is not running in prepaid mode, that is, the operating parameters are not related to the time zone table, time period table, or meter time, and only have basic metering functions, then the configuration parameters are set to the sixth state, which allows reading meter data, does not allow setting meter parameters, and can only perform closing control operations.

[0055] During the normal operation of a smart meter, abnormal events such as communication module replacement may occur. Such events need to be recorded and reported so that the replacement information of the communication module can be traced and the communication module can be prevented from being illegally tampered with.

[0056] In one embodiment, after storing the two identification numbers mentioned above if no identification number is stored, the method may further include: During the operation of the smart meter, the control module monitors the voltage levels of the communication module's pins, records and reports the changes in module status based on the pin voltage levels, and then uploads these reports.

[0057] Here, the communication module has a pin used to indicate the module's position. For example, a low level on this pin indicates that the communication module is in place, while a high level indicates that the communication module has been removed. Therefore, the insertion or removal status of the communication module can be determined based on the pin's level.

[0058] For example, if the control module detects a high level on a communication module pin, it determines that the communication module has been unplugged and generates a module unplug event report. The module unplug event report includes the time the module was unplugged and two identification numbers (asset management code and production code). Similarly, if the control module detects a low level on a communication module pin, it determines that the communication module has been plugged in and generates a module insertion event report. The module insertion event report includes the time the module was plugged in and two identification numbers (asset management code and production code).

[0059] In one embodiment, if the control module receives a message from the communication module that both identification numbers have changed, it records the module replacement event and the module status change report, reports the module replacement event and the module status change report, and sets the configuration parameter to the zero state, which is the default normal state.

[0060] The newly replaced communication module will be given an initial state, namely state zero. The state can be updated later based on the two identification numbers of the communication module.

[0061] In one embodiment, if the control module communicates normally with the communication module and the concentrator, but does not receive the information containing two identity numbers and corresponding two identification codes sent by the communication module, the control module periodically reads the information from the communication module. If the reading is successful, the control module inserts the communication module and the two identity numbers into the module status change report record, and then reports the module status change report record to the concentrator.

[0062] Optionally, if the communication module does not issue two identification numbers, the smart meter's storage area will first record all FF. After successful reading and obtaining the communication module's dual IDs, the dual IDs will be recorded in the storage area, and FF will be deleted.

[0063] This invention provides a communication security protection method based on a smart meter. The communication module acquires two identification numbers, generates corresponding identification codes based on the two identification numbers, and sends information containing the two identification numbers and the corresponding two identification codes to the control module. The two identification numbers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers and checks whether the identification numbers have been stored in the storage area. If no identification numbers are stored, the two identification numbers are stored. By binding the communication module with dual identification numbers, the two different identification numbers can be used to authenticate the communication module during subsequent communication. Normal communication is possible only when both identification numbers are satisfied, thereby improving the communication security of the smart meter and reducing the risk of hacking.

[0064] In this embodiment of the invention, two identification numbers are used to determine whether the communication module is abnormal, and configuration parameters are set when it is in an abnormal state, so that the smart meter is in a safe state, preventing data from being illegally tampered with, and further improving the communication security of the smart meter.

[0065] In this embodiment of the invention, the monitoring of the pin levels of the communication module enables the recording of event reports on the insertion, removal, or replacement of the communication module, thus allowing the communication module to be traced.

[0066] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0067] The following are device embodiments of the present invention. For details not described in detail, please refer to the corresponding method embodiments described above.

[0068] Figure 3 A schematic diagram of a smart meter provided by an embodiment of the present invention is shown. For ease of explanation, only the parts related to the embodiment of the present invention are shown, and are described in detail below: The smart meter 3 includes a communication module 31 and a control module 32.

[0069] The communication module 31 acquires two identification numbers, generates corresponding identification codes based on the two identification numbers, and sends the information containing the two identification numbers and the corresponding two identification codes to the control module 32; the two identification numbers are used by the unique identification number communication module 31. The control module 32 receives and parses the information to obtain two identification numbers, and checks whether the identification numbers have been stored in the storage area; if no identification numbers are stored, the two identification numbers are stored so that the smart meter can be verified using dual identification numbers.

[0070] In one possible implementation, the two identification numbers are the asset management code and the production code, respectively. When communication module 31 generates corresponding identification codes based on the two identification numbers and sends information containing the two identification numbers and their corresponding identification codes to control module 32, it is used for: When the communication module 31 is first inserted into the smart meter 3 or after power-on, it generates corresponding identification codes based on the two identification numbers and through extended instruction codes. The information containing two identity numbers and two corresponding identification codes is sent to the control module 32 in plaintext.

[0071] In one possible implementation, when communication module 31 sends information containing two identity numbers and two corresponding identification codes to control module 32 in plaintext, it is used for: The communication module 31 sends information to the control module 32 in plaintext using data composed of an extended instruction code, data length, identification code, and the identification number corresponding to the identification code.

[0072] In one possible implementation, when the control module 32 receives and parses the information and obtains two identification numbers, it uses them for: The control module 32 receives all the information sent by the communication module and parses the information according to the data length to obtain the corresponding two identification numbers.

[0073] In one possible implementation, after the control module 32 detects whether the identification number has been stored in the storage area, it is further used for: If the storage area stores an identification number, and the control module 32 detects that at least one of the stored identification numbers is different from the two parsed identification numbers, it reads the operating parameters of the smart meter, sets the configuration parameters according to the operating parameters, and determines the status of the communication module based on the configuration parameters, deciding whether to stop communication or receive remote control commands.

[0074] In one possible implementation, when the control module 32 sets the configuration parameters according to the operating parameters, it is used for: If the running parameters are different from the stored default running parameters, the configuration parameters are set to the first state; the first state is to stop communication. If the running parameters are the same as the storage's default running parameters, the user's credit level is determined based on the running parameters. Different configuration parameters are set according to the user's credit level, and the higher the user's credit level, the higher the operation privileges corresponding to the configuration parameters.

[0075] In one possible implementation, after the control module 32 stores two identity numbers if no identity number is stored, it is further used for: If the control module 32 receives a message from the communication module that both identification numbers have changed, it will record the module replacement event and the module status change report, and report the module replacement event and the module status change report. It will also set the configuration parameter to the zero state, which is the default normal state.

[0076] In one possible implementation, after the control module 32 stores two identity numbers if no identity number is stored, it is further used for: During the operation of the smart meter 3, the control module 32 monitors the voltage level of the communication module pins, records the module status change report based on the pin voltage level, and reports the module status change report record.

[0077] In one possible implementation, the control module 32 is further used for: If the control module 32 communicates normally with the communication module and the concentrator, but does not receive the information containing two identification numbers and corresponding two identification codes sent by the communication module, it will periodically read the information from the communication module. If the reading is successful, it will record the communication module insertion time and the two identification numbers in the module status change report record, and report the module status change report record to the concentrator.

[0078] The communication module in the smart meter described above acquires two identification numbers, generates corresponding identification codes based on these two identification numbers, and sends information containing the two identification numbers and their corresponding identification codes to the control module. Each of the two identification numbers is used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers and checks whether they are already stored in the storage area. If no identification numbers are stored, the two identification numbers are stored. This dual identification number binding allows the communication module to be authenticated using these two different identification numbers during subsequent communication. Normal communication is only possible when both identification numbers are simultaneously satisfied, thereby improving the communication security of the smart meter and reducing the risk of hacking.

[0079] In this embodiment of the invention, two identification numbers are used to determine whether the communication module is abnormal, and configuration parameters are set when it is in an abnormal state, so that the smart meter is in a safe state, preventing data from being illegally tampered with, and further improving the communication security of the smart meter.

[0080] In this embodiment of the invention, the monitoring of the pin levels of the communication module enables the recording of event reports on the insertion, removal, or replacement of the communication module, thus allowing the communication module to be traced.

[0081] The above-described embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included within the protection scope of the present invention.

Claims

1. A communication security protection method based on smart meters, characterized in that, The smart meter includes a communication module and a control module, and the communication security protection method of the smart meter includes: The communication module acquires two identity identifiers, generates corresponding identification codes based on the two identity identifiers, and sends information containing the two identity identifiers and the corresponding two identification codes to the control module; the two identity identifiers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers, and checks whether the identification numbers have been stored in the storage area; if no identification numbers are stored, then the two identification numbers are stored. After determining whether the identification number has been stored in the detection storage area, the process further includes: If the storage area stores an identification number, and the control module detects that at least one of the stored identification numbers is different from the two parsed identification numbers, then it reads the operating parameters of the smart meter, sets configuration parameters according to the operating parameters, and determines the status of the communication module based on the configuration parameters, deciding whether to stop communication or receive remote control commands. The step of setting configuration parameters according to the operating parameters includes: If the operating parameters are different from the stored default operating parameters, the configuration parameters are set to the first state; the first state is to stop communication. If the operating parameters are the same as the stored default operating parameters, the user's credit level is determined based on the operating parameters, and different configuration parameters are set according to the user's credit level. The higher the user's credit level, the higher the operation privileges corresponding to the configuration parameters.

2. The communication security protection method based on smart meters according to claim 1, characterized in that, The two identification numbers are the asset management code and the production code, respectively. The communication module generates corresponding identification codes based on the two identity numbers, and sends information containing the two identity numbers and the corresponding two identification codes to the control module, including: When the communication module is first inserted into the smart meter or after power-on, it generates corresponding identification codes based on the two identification numbers using extended instruction codes. The information containing the two identity numbers and the corresponding two identification codes is sent to the control module in plaintext.

3. The communication security protection method based on smart meters according to claim 2, characterized in that, The step of sending information containing the two identity numbers and the corresponding two identification codes to the control module in plaintext includes: The communication module sends the information to the control module in plaintext using data composed of the extended instruction code, data length, identification code, and the identity number corresponding to the identification code.

4. The communication security protection method based on smart meters according to claim 3, characterized in that, The control module receives and parses the information to obtain the two identification numbers, including: The control module receives all the information sent by the communication module and parses the information according to the data length to obtain the corresponding two identity identification numbers.

5. The communication security protection method based on a smart meter according to any one of claims 1-4, characterized in that, After stating that if no identity identifier is stored, then the two identity identifiers are stored, the method further includes: If the control module receives a message from the communication module that both identification numbers have changed, it records the module replacement event and the module status change report, reports the module replacement event and the module status change report, and sets the configuration parameter to the zero state, which is the default normal state.

6. The communication security protection method based on smart meters according to claim 1, characterized in that, After stating that if no identity identifier is stored, then the two identity identifiers are stored, the method further includes: During the operation of the smart meter, the control module monitors the voltage levels of the communication module's pins, records module status changes based on the pin voltage levels, and then reports the module status change records.

7. The communication security protection method based on smart meters according to claim 1, characterized in that, Also includes: If the control module communicates normally with the communication module and the concentrator, but does not receive the information containing the two identity numbers and the corresponding two identification codes sent by the communication module, then the control module periodically reads the information from the communication module. If the reading is successful, the control module inserts the communication module and the two identity numbers into the module status change report record, and then reports the module status change report record to the concentrator.

8. A smart meter, characterized in that, Smart meters include a communication module and a control module; The communication module acquires two identity identifiers, generates corresponding identification codes based on the two identity identifiers, and sends information containing the two identity identifiers and the corresponding two identification codes to the control module; the two identity identifiers are used to uniquely identify the communication module. The control module receives and parses the information to obtain the two identification numbers, and checks whether the identification numbers have been stored in the storage area; if no identification numbers are stored, then the two identification numbers are stored. The control module is further configured to, if the storage area stores an identification number and the control module detects that at least one of the stored identification numbers is different from the two parsed identification numbers, read the operating parameters of the smart meter, set configuration parameters according to the operating parameters, so as to determine the status of the communication module according to the configuration parameters and decide whether to stop communication or receive remote control commands. When the control module sets configuration parameters according to the operating parameters, it is used for: If the operating parameters are different from the stored default operating parameters, the configuration parameters are set to the first state; the first state is to stop communication. If the operating parameters are the same as the stored default operating parameters, the user's credit level is determined based on the operating parameters, and different configuration parameters are set according to the user's credit level. The higher the user's credit level, the higher the operation privileges corresponding to the configuration parameters.

Images