Method and system for preventing binary file of centralized control station monitoring system from being tampered
By using encryption and MD5 comparison methods, the problem of easily tampered binary files in the centralized control station monitoring system was solved, a multi-layered defense system was built, and the security of the power monitoring system was improved.
Patent Information
- Application Number
- CN202511084951.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-04
- Publication Date
- 2025-11-04
AI Technical Summary
Existing centralized control station monitoring systems lack anti-tampering verification for binary files, allowing attackers to easily modify them and impacting the stable operation of the power grid.
The MD5 value of the binary file of the centralized control station monitoring system is encrypted using the national cryptographic algorithm, and then compared with the MD5 value stored in the configuration text to determine the legitimacy of the file and build a multi-layered defense system.
This effectively avoids the risk of binary files being tampered with, and improves the security and reliability of the power monitoring system.
Smart Images
Figure CN120893021A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of power system automation technology, and in particular to a binary file tamper-proofing method and system for a centralized control station monitoring system. BACKGROUND
[0002] In recent years, the requirements for security protection in the power system are becoming higher and higher, and the developers in the field of power system automation technology still do not pay enough attention to the security of the binary files running in various monitoring systems in the power system. In most cases, only functional requirements are implemented, and security requirements are ignored. If the binary files of any monitoring system in the power system are tampered with, it may have an immeasurable impact on the stable operation of the power grid.
[0003] Currently, the centralized control station monitoring system rarely performs tamper-proofing verification on binary files, which makes it easy for attackers to modify the binary files of the centralized control station monitoring system without being detected. SUMMARY
[0004] The present application aims to solve at least one of the technical problems in the background art, and provides a binary file tamper-proofing method and system for a centralized control station monitoring system.
[0005] To achieve the above-mentioned purpose, the present application provides a binary file tamper-proofing method for a centralized control station monitoring system, comprising: encrypting the MD5 value of the binary file required for the operation of the centralized control station monitoring system by using the national secret algorithm, writing the binary file name and the corresponding MD5 value in groups into a designated configuration text to generate an encrypted MD5 value configuration text; placing the encrypted MD5 value configuration text into a file server node of the centralized control station monitoring system; starting the binary file of the centralized control station monitoring system; comparing the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the encrypted MD5 value configuration text, and judging whether to continue running the binary file of the centralized control station monitoring system according to the comparison result.
[0006] According to one aspect of the present application, the encrypted MD5 value configuration text stores the MD5 values of all binary files of the centralized control station monitoring system.
[0007] According to one aspect of the present application, the MD5 value of the corresponding binary file name in the MD5 value configuration text is the MD5 value of the corresponding binary file name obtained from the encrypted MD5 value configuration text.
[0008] According to one aspect of the present application, the MD5 value of the compared binary file is compared with the MD5 value of the binary file name in the MD5 value configuration text, and whether to continue running the binary file of the centralized station monitoring system is determined according to the comparison result, comprising: obtaining the MD5 value of the corresponding binary file name from the encrypted MD5 value configuration text of the file server node; decrypting the MD5 value obtained from the encrypted MD5 value configuration text; comparing the decrypted MD5 value with the MD5 value of the binary file, if the two MD5 values are the same, the centralized station monitoring system normally runs the binary file, if the two MD5 values are different, the running of the binary file is exited.
[0009] To achieve the above object, the present application further provides a binary file tamper-proofing system of a centralized station monitoring system, comprising: a configuration text generation module, encrypting the MD5 value of the binary file required by the centralized station monitoring system to run in a national secret algorithm, and writing the binary file name and the corresponding MD5 value in groups into a designated configuration text to generate an encrypted MD5 value configuration text; a configuration text import module, placing the encrypted MD5 value configuration text into the file server node of the centralized station monitoring system; a binary file running module, starting to run the binary file of the centralized station monitoring system; a binary file running determination module, comparing the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the encrypted MD5 value configuration text, and determining whether to continue running the binary file of the centralized station monitoring system according to the comparison result.
[0010] To achieve the above object, the present application further provides an electronic device, comprising a processor, a memory and a computer program stored in the memory and executable on the processor, wherein the computer program is executed by the processor to implement the binary file tamper-proofing method of the centralized station monitoring system as described above.
[0011] To achieve the above object, the present application further provides a computer readable storage medium, wherein a computer program is stored in the computer readable storage medium, and the computer program is executed by a processor to implement the binary file tamper-proofing method of the centralized station monitoring system as described above.
[0012] According to the scheme of the application, the application avoids the problem of coupling of the storage and the checking process in the traditional scheme by checking the MD5 value of the binary file of the power monitoring system and storing the MD5 value of the binary file and decoupling the checking process, and also avoids the problem that an attacker tampers with the binary file and the corresponding MD5 value at the same time without being found, constructs a multi-level defense system, effectively avoids the risk of tampering with the binary file of the centralized control station monitoring system, and effectively improves the safety and reliability of the power monitoring system. BRIEF DESCRIPTION OF DRAWINGS
[0013] Figure 1 A flow chart schematically representing a method for preventing tampering of binary files of a centralized control station monitoring system according to an embodiment of the application. DETAILED DESCRIPTION
[0014] The application will now be discussed with reference to exemplary embodiments. It should be understood that the discussed embodiments are only to enable those of ordinary skill in the art to better understand and thus implement the content of the application, and are not intended to imply any limitation on the scope of the application.
[0015] As used herein, the term "comprising" and variations thereof are to be construed as meaning "including, but not limited to". The term "based on" is to be construed as "based at least in part on". The terms "one embodiment" and "an embodiment" are to be construed as "at least one embodiment".
[0016] Figure 1 A flow chart schematically representing a method for preventing tampering of binary files of a centralized control station monitoring system according to an embodiment of the application. As shown in Figure 1 In the present embodiment, the method for preventing tampering of binary files of a centralized control station monitoring system comprises: encrypting the MD5 value of the binary file required for the operation of the centralized control station monitoring system with a national secret algorithm, and writing the binary file name and the corresponding MD5 value in groups into a designated configuration text to generate an encrypted MD5 value configuration text; placing the encrypted MD5 value configuration text into a file server node of the centralized control station monitoring system; starting the binary file of the centralized control station monitoring system; comparing the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the encrypted MD5 value configuration text, and judging whether to continue running the binary file of the centralized control station monitoring system according to the comparison result.
[0017] Further, according to an embodiment of the application, the encrypted MD5 value configuration text stores the MD5 values of all the binary files of the centralized control station monitoring system.
[0018] Further, according to an embodiment of the present application, the MD5 value corresponding to the binary file name in the MD5 value configuration text is: the MD5 value of the corresponding binary file name obtained from the file server node of the encrypted MD5 value configuration text.
[0019] Further, according to an embodiment of the present application, the MD5 value of the binary file is compared with the MD5 value corresponding to the binary file name in the MD5 value configuration text, and whether to continue running the binary file of the control station monitoring system is judged according to the comparison result, comprising: obtaining the MD5 value corresponding to the binary file name from the encrypted MD5 value configuration text; decrypting the MD5 value obtained from the encrypted MD5 value configuration text; comparing the decrypted MD5 value with the MD5 value of the binary file, if the two MD5 values are the same, the control station monitoring system normally runs the binary file, if the two MD5 values are different, the running of the binary file is exited.
[0020] According to the above scheme of the present application, the MD5 value of the binary file of the power monitoring system is verified, and the MD5 value of the binary file is stored and decoupled from the verification process, which avoids the problem of coupling between storage and verification process in the traditional scheme, and also avoids the risk that the binary file and its corresponding MD5 value are tampered with at the same time without being found, a multi-level defense system is constructed, the risk of tampering with the binary file of the control station monitoring system is effectively avoided, and the safety and reliability of the power monitoring system is effectively improved.
[0021] Further, in order to achieve the above purpose, the present application also provides a binary file tamper-proofing system of a control station monitoring system, comprising: a configuration text generation module, encrypting the MD5 value of the binary file required for the running of the control station monitoring system by a national secret algorithm, and then writing the binary file name and the corresponding MD5 value in groups into a specified configuration text to generate an encrypted MD5 value configuration text; a configuration text import module, placing the encrypted MD5 value configuration text into the file server node of the control station monitoring system; a binary file running module, starting to run the binary file of the control station monitoring system; a binary file running judgment module, comparing the MD5 value of the binary file with the MD5 value corresponding to the binary file name in the encrypted MD5 value configuration text, and judging whether to continue running the binary file of the control station monitoring system according to the comparison result.
[0022] Further, according to an embodiment of the present application, the encrypted MD5 value configuration text stores the MD5 values of all binary files of the control station monitoring system.
[0023] Further, according to an embodiment of the present application, the MD5 value corresponding to the binary file name in the MD5 value configuration text is: the MD5 value corresponding to the binary file name obtained from the encrypted MD5 value configuration text of the file server node.
[0024] Further, according to an embodiment of the present application, the MD5 value of the binary file is compared with the MD5 value corresponding to the binary file name in the MD5 value configuration text, and whether the binary file of the centralized station monitoring system is continued to run is judged according to the comparison result, comprising: obtaining the MD5 value corresponding to the binary file name from the encrypted MD5 value configuration text; decrypting the MD5 value obtained from the encrypted MD5 value configuration text; comparing the decrypted MD5 value with the MD5 value of the binary file, if the two MD5 values are the same, the binary file of the centralized station monitoring system is normally run, if the two MD5 values are different, the running of the binary file is exited.
[0025] According to the above scheme of the present application, the MD5 value of the binary file of the power monitoring system is verified, and the MD5 value of the binary file is stored and decoupled from the verification process, the problem of coupling of the storage and verification process in the traditional scheme is avoided through technical means, at the same time, the attacker can not tamper with the binary file and its corresponding MD5 value at the same time without being found, a multi-level defense system is constructed, the risk of tampering with the binary file of the centralized station monitoring system is effectively avoided, and the safety and reliability of the power monitoring system is effectively improved.
[0026] Further, in order to achieve the above purpose, the present application also provides an electronic device, comprising a processor, a memory and a computer program stored on the memory and executable on the processor, the computer program is executed by the processor to realize the anti-tampering method of the binary file of the centralized station monitoring system as described above.
[0027] Further, in order to achieve the above purpose, the present application also provides a computer readable storage medium, the computer readable storage medium stores a computer program, the computer program is executed by the processor to realize the anti-tampering method of the binary file of the centralized station monitoring system as described above.
[0028] In order to make the purpose, technical scheme and advantages of the present application more clear, the present application is further described in detail below in combination with the drawings and embodiments, it should be understood that the specific embodiments described here are only one best embodiment of the present application, only to explain the present application, and do not limit the protection scope of the present application, all other embodiments obtained by the person skilled in the art without doing creative work belong to the protection scope of the present application.
[0029] Embodiment 1 The method for preventing tampering of the binary file of the centralized control station monitoring system comprises the following steps: In the third-party computer, the MD5 value of the binary file required for the operation of the centralized control station monitoring system is written into the specified configuration text in the form of ciphertext by using the text modification tool adopting the national secret algorithm, an encrypted MD5 value configuration text is generated, and then the encrypted MD5 value configuration text is placed into the file server node of the centralized control station monitoring system. When the binary file of the centralized control station monitoring system is operated, the MD5 value corresponding to the binary file name is first obtained from the encrypted MD5 value configuration text of the file server node, and then the obtained MD5 value is decrypted and compared with the MD5 value of the binary file. If the MD5 values are the same, the binary file is allowed to normally operate in the centralized control station monitoring system. If the MD5 values are different, it is considered that the binary file in the centralized control station monitoring system has been tampered with, and the binary file exits the operation.
[0030] In this embodiment, the centralized control station monitoring system is an intelligent monitoring technical support system for power transformation equipment, which can provide technical support for operation monitoring, operation and control, monitoring assistants, business management and remote intelligent patrol of power transformation equipment. The text modification tool adopting the national secret algorithm for encryption and decryption can be independently operated on the third-party computer, such as the work computer of the engineering maintenance personnel, and is decoupled from the operation environment of the centralized control station monitoring system.
[0031] In this embodiment, the MD5 value of the binary file required for the operation of the centralized control station monitoring system is written into the specified configuration text in the form of ciphertext by using the text modification tool adopting the national secret algorithm, and then the generated encrypted MD5 value configuration text is placed into the file server node of the centralized control station monitoring system. The encrypted MD5 value configuration text stores the MD5 values of all binary files of the centralized control station monitoring system, so when any binary file of the centralized control station monitoring system is changed, the engineering maintenance personnel need to operate the text modification tool adopting the national secret algorithm for encryption and decryption on the work computer to modify the encrypted MD5 value configuration text, save it in ciphertext, and then upload it to the centralized control station monitoring system, so as to ensure that the MD5 values of the binary files saved on the centralized control station monitoring system are the latest and correct.
[0032] In this embodiment, when the binary file of the centralized control station monitoring system is operated, the MD5 value corresponding to the binary file name is first obtained from the encrypted MD5 value configuration text of the file server node, and then the obtained MD5 value is decrypted and compared with the actual MD5 value of the binary file. If the MD5 values are the same, the binary file is allowed to normally operate in the centralized control station monitoring system. If the MD5 values are different, it is considered that the binary file in the centralized control station monitoring system has been tampered with, and the binary file exits the operation. The method comprises the following steps: Before the operation of the binary file of the centralized control station monitoring system, the MD5 value of the corresponding binary file name is obtained from the file server node in the encrypted configuration text, and after decryption, the MD5 value is compared with the actual MD5 value of the binary file in the centralized control station monitoring system. If the MD5 values are the same, it is considered that the binary file is normal and can be normally operated. If the MD5 values are different, it is considered that the binary file used on the centralized control station monitoring system has been tampered with, and the binary file is exited.
[0033] Those skilled in the art can appreciate that the modules and algorithm steps described in combination with the embodiments disclosed herein can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether the functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. The skilled person can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.
[0034] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the above-described device and equipment can refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.
[0035] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the modules is only a logical function division, and actual implementation can have another division manner, for example, a plurality of modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed each other can be indirect coupling or communication connection through some interface, device or module, which can be electrical, mechanical or other forms.
[0036] The modules described as separate components can or can not be physically separated, and the components shown as modules can or can not be physical modules, i.e. can be located in one place, or can be distributed to a plurality of network modules. Part or all of the modules can be selected according to actual needs to achieve the purpose of the embodiments of the present application.
[0037] In addition, each functional module in the embodiments of the present application can be integrated into a processing module, or each module can exist physically, or two or more modules can be integrated into one module.
[0038] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application essentially or the part that contributes to the prior art or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods for transmitting / receiving implemented by the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a ROM, a RAM, a magnetic disk or an optical disk, and various media that can store program codes.
[0039] The above description is merely preferred embodiments of the present application and a description of the principles of the technology used. Those skilled in the art should understand that the scope of the application involved in the present application is not limited to the technical solutions formed by the specific combinations of the above technical features, and should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features can be replaced with the technical features disclosed in the present application (but not limited to) having similar functions to form technical solutions.
[0040] It should be understood that the size of the serial number of each step in the summary and embodiments of the present application does not absolutely mean the order of execution, and the execution order of each process should be determined according to its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.
Claims
1. A method for preventing tampering with binary files in a centralized control station monitoring system, characterized in that, include: After encrypting the MD5 value of the binary file required for the operation of the central control station monitoring system using the national cryptographic algorithm, the binary file name and the corresponding MD5 value are grouped together and written into the specified configuration text to generate the encrypted MD5 value configuration text. Place the encrypted MD5 value configuration text into the file server node of the central control station monitoring system; The binary file that starts and runs the central control station monitoring system; Compare the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the encrypted MD5 configuration text, and determine whether to continue running the binary file of the central control station monitoring system based on the comparison result.
2. The method for preventing tampering with binary files in a centralized control station monitoring system according to claim 1, characterized in that, The encrypted MD5 value configuration text stores the MD5 values of all binary files in the centralized control station monitoring system.
3. The method for preventing tampering with binary files in a centralized control station monitoring system according to claim 1, characterized in that, The MD5 value of the corresponding binary file name in the MD5 value configuration text is: the MD5 value of the corresponding binary file name obtained from the encrypted MD5 value configuration text of the file server node.
4. The method for preventing tampering with binary files in a centralized control station monitoring system according to claim 1, characterized in that, The comparison involves comparing the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the MD5 configuration text. Based on the comparison result, a decision is made on whether to continue running the binary file of the central control station monitoring system, including: Obtain the MD5 value of the corresponding binary file name from the MD5 value encryption configuration text of the file server node; Decrypt the MD5 value obtained from the encrypted MD5 value configuration text; The decrypted MD5 value is compared with the MD5 value of the binary file. If the two MD5 values are the same, the central control station monitoring system will run the binary file normally. If the two MD5 values are different, the binary file will be terminated.
5. A binary file anti-tampering system for a centralized control station monitoring system, characterized in that, include: The configuration text generation module encrypts the MD5 value of the binary file required for the operation of the central control station monitoring system using the national cryptographic algorithm, and writes the binary file name and the corresponding MD5 value into the specified configuration text to generate the encrypted MD5 value configuration text. Configure the text import module to place the encrypted MD5 value configuration text into the file server node of the central control station monitoring system; The binary file execution module starts and runs the binary file of the central control station monitoring system. The binary file execution determination module compares the MD5 value of the binary file with the MD5 value of the corresponding binary file name in the encrypted MD5 value configuration text, and determines whether to continue running the binary file of the central control station monitoring system based on the comparison result.
6. An electronic device, characterized in that, The system includes a processor, a memory, and a computer program stored in the memory and executable on the processor. When executed by the processor, the computer program implements the binary file anti-tampering method for the central control station monitoring system as described in any one of claims 1-4.
7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the binary file anti-tampering method for the centralized control station monitoring system as described in any one of claims 1-4.