Privacy information security protection method and system for power transaction platform

Abstract

The invention relates to the technical field of network security, in particular to a privacy information security protection method and system for a power transaction platform. The method comprises the following steps: firstly, determining the attack possibility of the power transaction platform suffered from DDOS attack; determining a to-be-protected attention factor of the transaction combination in combination with the attack possibility, the historical transaction of the transaction combination and the periodic characteristics of the transaction electric quantity; determining the transaction privacy degree of the transaction combination according to the encryption condition when the transaction combination encrypts the transaction content; determining a request threshold demand index of a transaction combination in combination with a to-be-protected attention factor and the transaction privacy degree; according to the request threshold demand index, adjusting a preset rated QPS threshold to obtain an adaptive QPS threshold of the transaction combination; and performing security protection measures on the transaction request of the power transaction platform according to the self-adaptive QPS threshold value of each transaction combination. According to the invention, the security protection efficiency of the privacy information of the power transaction platform is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security, in particular to a privacy information security protection method and system for a power transaction platform. BACKGROUND

[0002] The power transaction platform supports the coordinated operation of new energy such as wind power and photovoltaic and traditional power sources, promotes the transformation of energy structure, and at the same time provides a fair trading place for power generation enterprises, power selling companies and power users, promotes the marketization competition of the power generation side and the demand side, and further releases the vitality and potential of the power market.

[0003] Because the power transaction platform masters many power resources and privacy information, the platform is often subjected to malicious attacks such as DDOS attacks by illegal hackers. The DDOS attack on the power transaction platform will cause the server traffic of the platform to surge, and further cause the server performance to collapse. The traditional protection method is to limit the QPS threshold of each transaction combination in real time through a Web application firewall. The QPS threshold is the maximum number of requests that a single transaction combination can handle in a unit of time, thereby improving the ability of the power transaction platform to resist hacker attacks and further improving the security protection level of the privacy information of the transaction parties.

[0004] However, the traditional Wed application firewall technology selects the QPS threshold parameter of each transaction combination in real time according to the platform traffic. If the real-time platform traffic is higher, a lower QPS threshold is set for each transaction combination. However, this traditional QPS threshold selection method does not consider the performance impact caused by hacker DDOS attacks on the platform, such as the deterioration of server bandwidth and transaction response delay, resulting in poor adaptability of the QPS threshold. At the same time, in the actual power transaction scene, the privacy information encryption needs of each transaction party are different, which further leads to insufficient precision of the QPS threshold setting for each transaction party of the platform, and reduces the security protection efficiency of the privacy information of the power transaction platform. SUMMARY

[0005] In order to solve the technical problem of low adaptability in traditional QPS threshold selection, the purpose of the present application is to provide a privacy information security protection method and system for a power transaction platform, and the technical solution adopted is as follows: In a first aspect, the present application provides a privacy information security protection method for a power transaction platform, which comprises: analyzing the real-time transaction demand and short-term transaction response delay of the power transaction platform to determine the attack possibility of the power transaction platform under DDOS attack; determining the protection attention factor of the transaction combination in combination with the attack possibility, the historical transaction of the transaction combination and the periodic characteristics of the transaction power; determine a transaction privacy degree of the transaction combination according to encryption of transaction content in the transaction combination during a transaction process; adjust a preset rated QPS threshold according to the request threshold demand index to obtain an adaptive QPS threshold of the transaction combination; and perform a security protection measure on a transaction request of the power transaction platform according to the adaptive QPS threshold of each transaction combination.

[0006] Further, the real-time transaction demand and the short-term transaction response delay of the power transaction platform are analyzed to determine an attack possibility of the power transaction platform under a DDOS attack, including: determine a performance weakness presentation degree of the power transaction platform according to a short-term change trend, a bandwidth degradation feature and a remaining memory proportion of IP access volume of the power transaction platform; combine the performance weakness presentation degree and the short-term transaction response delay to determine the attack possibility of the power transaction platform under the DDOS attack.

[0007] Further, the obtaining method of the short-term change trend of the IP access volume of the power transaction platform is: obtain a ratio of the IP access volume of the power transaction platform at a current time to a maximum IP access volume as a first change trend; determine a second change trend according to a change of the IP access volume in a short-term reference time range corresponding to the current time; combine the first change trend and the second change trend to obtain the short-term change trend; wherein the first change trend and the second change trend are positively correlated with the short-term change trend.

[0008] Further, the obtaining method of the bandwidth degradation feature of the power transaction platform is: determine an initial degradation feature according to a change of bandwidth in a short-term reference time range corresponding to the current time; combine the real-time bandwidth of the power transaction platform and the initial degradation feature to determine the bandwidth degradation feature; wherein the real-time bandwidth and the bandwidth degradation feature are negatively correlated, and the initial degradation feature and the bandwidth degradation feature are positively correlated.

[0009] Further, the combination of the attack possibility, the historical transaction of the transaction combination and the periodic characteristics of the transaction electric quantity to determine the protection attention factor of the transaction combination includes: determine a power transaction confidence of the transaction combination according to the periodic characteristics of the historical transaction and the transaction electric quantity of the transaction combination; combine the attack possibility and the power transaction confidence to obtain the protection attention factor of the transaction combination.

[0010] Further, the power transaction confidence of the transaction combination is determined according to the periodic characteristics of the historical transactions and the transaction power of the transaction combination, including: determining a time period characteristic value of the historical transactions of the transaction combination; the time period characteristic value represents a time interval error of the transaction; determining a power period characteristic value of the historical transactions of the transaction combination; the power period characteristic value represents a transaction power error of the transaction; combining the time period characteristic value and the power period characteristic value to determine the power transaction confidence of the transaction combination; wherein the time period characteristic value and the power period characteristic value are negatively correlated with the power transaction confidence.

[0011] Further, the transaction privacy degree of the transaction combination is determined according to the encryption situation when the transaction combination encrypts the transaction content during the transaction process, including: determining the transaction privacy degree of the transaction combination through the encryption level and the number of encrypted data packets when the transaction combination encrypts the transaction content during the transaction process.

[0012] Further, the request threshold demand index of the transaction combination is determined by combining the need-to-protect importance factor and the transaction privacy degree, including: the ratio of the need-to-protect importance factor and the transaction privacy degree is taken as the request threshold demand index of the transaction combination.

[0013] Further, the adaptive QPS threshold of the transaction combination is obtained by adjusting the preset rated QPS threshold according to the request threshold demand index, including: comparing the request threshold demand index and the standard request threshold demand index to determine an adjustment coefficient; using the adjustment coefficient as a weight to adjust the preset rated QPS threshold to obtain the adaptive QPS threshold of the transaction combination.

[0014] In a second aspect, a privacy information security protection system for a power transaction platform is provided, and the system includes the following modules: An attack analysis module is configured to analyze real-time transaction demand and short-term transaction response delay of the power transaction platform, and determine an attack likelihood of the power transaction platform suffering from a DDOS attack; A protection analysis module is configured to determine a need-to-protect importance factor of a transaction combination by combining the attack likelihood, periodic characteristics of historical transactions and transaction power of the transaction combination; A privacy analysis module is configured to determine a transaction privacy degree of the transaction combination according to an encryption situation when the transaction combination encrypts transaction content during a transaction process, and determine a request threshold demand index of the transaction combination by combining the need-to-protect importance factor and the transaction privacy degree. An adaptive adjustment module is configured to adjust a preset QPS threshold according to the request threshold demand index to obtain an adaptive QPS threshold of a transaction combination, and to perform a security protection measure on a transaction request of the power transaction platform according to the adaptive QPS threshold of each transaction combination.

[0015] In a third aspect, an electronic device is provided, which includes a memory and a processor. The memory stores executable code. When the processor executes the executable code, the method according to any one of the possible implementation manners of the first aspect is implemented.

[0016] In a fourth aspect, a computer program product is provided, which includes computer program code. When the computer program code is executed on a computer, the computer is caused to perform the method according to the first aspect or any one of the possible implementation manners of the first aspect.

[0017] In a fifth aspect, a computer readable storage medium is provided, which stores a computer program. When the computer program is executed in a computer, the computer is caused to perform the method according to any one of the possible implementation manners of the first aspect.

[0018] The embodiments of the present application have at least the following beneficial effects: The present application obtains the attack possibility of the power transaction platform subjected to the DDOS attack according to the analysis of the transaction change and the short-term transaction response delay of the power transaction platform in a short period, analyzes the historical transaction time interval characteristics and the transaction power similar performance of a single transaction combination, and further obtains the real-time protection attention factor in combination with the attack possibility, further analyzes the privacy information performance in the transaction content to obtain the request threshold demand index. Compared with the traditional method, the present application can combine the characteristics of the hacker DDOS attack in the actual power transaction platform, the privacy information performance of the power transaction, and the periodic characteristics in the historical data, and can realize the allocation of the QPS threshold parameter with higher adaptability for each transaction combination in real time, and improve the security protection efficiency of the privacy information of the power transaction platform. BRIEF DESCRIPTION OF DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, and the advantages thereof, the drawings needed to be used in the embodiments or the prior art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained without creative labor based on these drawings.

[0020] Figure 1 A method flowchart of a privacy information security protection method for a power transaction platform provided by an embodiment of the present application; Figure 2 Method flow chart of the attack possibility acquisition method provided by an embodiment of the present application; Figure 3 Method flow chart of the protection attention factor acquisition method provided by an embodiment of the present application; Figure 4 System block diagram of a privacy information security protection system for a power transaction platform provided by an embodiment of the present application; Figure 5 Structural schematic diagram of a computer device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to further illustrate the technical means and effects taken by the present application to achieve the predetermined purposes, the following describes the specific implementation, structure, features and effects of the privacy information security protection method and system for a power transaction platform according to the present application in detail in combination with the preferred embodiments and the accompanying drawings.

[0022] In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, the specific features, structures or characteristics in one or more embodiments can be combined in any suitable form.

[0023] In the description of the embodiments of the present application, unless otherwise specified, " / " represents the meaning of or, for example, A / B can represent A or B: "and / or" in the text is only a description of the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which can represent: A exists alone, A and B exist together, and B exists alone, in addition, in the description of the embodiments of the present application, "multiple" means two or more than two.

[0024] Hereinafter, the terms "first", "second" are only used for description purposes, and cannot be understood as implying or implying relative importance or implicitly indicating the number of indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include one or more features.

[0025] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as understood by a person skilled in the art to which the present application belongs.

[0026] The embodiments of the present application are described below in combination with the accompanying drawings. Those skilled in the art can know that with the development of technology and the appearance of new scenes, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0027] The embodiment of the present application provides a specific implementation method of a privacy information security protection method and system for a power transaction platform.

[0028] The specific scheme of the privacy information security protection method and system for the power transaction platform provided by the present application is specifically described below with reference to the drawings.

[0029] Please refer to Figure 1 which shows a step flow chart of a privacy information security protection method for a power transaction platform provided by an embodiment of the present application, and the method comprises the following steps: Step S100, analyze the real-time transaction demand and short-term transaction response delay of the power transaction platform, and determine the attack possibility of the power transaction platform under DDOS attack.

[0030] Firstly, the state parameter module reads the real-time IP access volume, bandwidth and memory occupation information of the power transaction platform, and the memory occupation information is the memory usage rate.

[0031] The IP monitoring module reads the historical transaction information of each transaction combination in the power transaction platform, including the historical transaction time node, transaction power and transaction response time length.

[0032] The information monitoring module reads the encryption level and the number of encrypted data packets of each data packet in the transaction content in each transaction combination of the power transaction platform in real-time transaction, and the number of encrypted data packets is referred to as the number of encrypted data packets.

[0033] The data cleaning and preprocessing are performed on all the read data, and the preprocessed data is uploaded to the data acquisition system for subsequent analysis and use. The read data includes the IP access volume, bandwidth, memory usage rate, historical transaction time node, transaction power, transaction response time length, encryption level and number of encrypted data packets of the power transaction platform.

[0034] Considering that when the power transaction platform is attacked by DDOS, the hacker will forge multiple IP addresses and false transaction information to perform centralized access attack with large data volume on the platform server for a short time, therefore, firstly, the flow surge is obtained according to the IP access volume growth performance; further, a large number of access attacks cause the bandwidth stability of the platform server to decrease, and if the memory occupation of the platform server is poor at the same time, the real-time running performance of the platform is further reflected to be weaker.

[0035] Therefore, after obtaining the data required for analysis, the real-time transaction demand and short-term transaction response delay of the power transaction platform are analyzed to determine the attack possibility of the power transaction platform under DDOS attack.

[0036] In the embodiment of the present application, the step of obtaining the attack possibility of the power transaction platform under DDOS attack is shown in Figure 2 The step S100 can be implemented by Figure 2 The step S100 can be implemented by In step S110, the performance weakness degree of the power transaction platform is determined according to the short-term change trend of the IP access volume of the power transaction platform, the bandwidth degradation characteristics and the remaining memory ratio.

[0037] Firstly, when the power transaction platform is attacked by hackers, the platform traffic will have explosive growth, so the IP access volume time series data of the platform in the short-term reference time range is obtained. In the embodiment of the present application, the value of the short-term reference time range is 5s, which can be adjusted by the implementer according to the actual situation in other embodiments.

[0038] The higher the numerical level of IP access volume in the short-term reference time range is, and the greater the rising slope of IP access volume tends to be, the greater the real-time traffic surge intensity of the platform is.

[0039] The method for obtaining the short-term change trend of the IP access volume of the power transaction platform is: obtaining the ratio of the IP access volume of the power transaction platform at the current time to the maximum IP access volume as the first change trend; determining the second change trend according to the change of the IP access volume in the short-term reference time range corresponding to the current time; combining the first change trend and the second change trend to obtain the short-term change trend; wherein the first change trend and the second change trend are positively correlated with the short-term change trend.

[0040] In some embodiments, the least square fitting straight line method is used to fit a straight line to the IP access volume in the short-term reference time range corresponding to the current time, and the slope of the fitted straight line is taken as the second change trend. When the slope of the fitted straight line is positive, it indicates that the IP access volume in the short-term reference time range is increasing, and the greater the slope is, the greater the sudden change of platform traffic is.

[0041] In some embodiments, the product value of the first change trend and the second change trend is taken as the short-term change trend.

[0042] The calculation formula of the short-term change trend U is: Wherein, P is the IP access volume at the current time; is the maximum IP access volume at the historical time before the current time; is the first change trend; for the second change trend.

[0043] Secondly, when the power transaction platform is attacked by a hacker DDOS or the real-time real transaction demand is too high, the bandwidth resources are excessively consumed, resulting in a decrease in available bandwidth resources and poor bandwidth stability. Therefore, by analyzing the bandwidth changes of the power transaction platform, the bandwidth degradation characteristics of the power transaction platform are determined.

[0044] When the real-time bandwidth resources of the power transaction platform are less and the bandwidth fluctuation characteristics in the short term are more significant, the state performance of the bandwidth of the power transaction platform is poorer.

[0045] The bandwidth degradation characteristics are obtained by: determining an initial degradation characteristic according to the bandwidth changes in a short-term reference time range corresponding to the current time; and determining the bandwidth degradation characteristics in combination with the real-time bandwidth of the power transaction platform and the initial degradation characteristic; wherein the real-time bandwidth and the bandwidth degradation characteristics are in a negative correlation relationship, and the initial degradation characteristic and the bandwidth degradation characteristics are in a positive correlation relationship.

[0046] In some embodiments, the initial degradation characteristic is obtained by: a standard deviation of the bandwidth in the short-term reference time range corresponding to the current time.

[0047] In some embodiments, a ratio of the initial degradation characteristic of the power transaction platform to a normalized value of the real-time bandwidth is taken as the initial degradation characteristic.

[0048] If the real-time short-term change trend of the power transaction platform is greater and the bandwidth degradation characteristics are more significant, it is more likely that the power transaction platform is in an abnormal state under a DDOS hacker attack, and more attention should be paid to security.

[0049] Meanwhile, the memory usage rate change of the power transaction platform server is part of the server performance data troubleshooting. When troubleshooting a DDOS attack, if the memory usage rate abnormally increases, the attacker may have sent a large number of false data query requests, resulting in frequent memory allocation of the server and insufficient remaining memory space.

[0050] Therefore, after the short-term change trend and the bandwidth degradation characteristics are obtained, the remaining memory percentage of the power transaction platform is obtained. Finally, the performance weakness presentation degree of the power transaction platform is determined in combination with the short-term change trend, the bandwidth degradation characteristics, and the remaining memory percentage; wherein the short-term change trend, the bandwidth degradation characteristics, and the performance weakness presentation degree are in a positive correlation relationship, and the remaining memory percentage and the performance weakness presentation degree are in a negative correlation relationship.

[0051] In some embodiments, the remaining memory percentage is a ratio of a real-time remaining memory size to a maximum memory size of the power transaction platform.

[0052] In some embodiments, the product value of the short-term change trend and the bandwidth degradation feature is taken as the numerator, the remaining memory occupancy ratio is taken as the denominator, and the normalized value of the ratio of the numerator and the denominator is taken as the performance weakness presentation degree. In the embodiment of the application, if the remaining memory occupancy ratio is 1, that is, the memory is completely unoccupied, there is no need to perform subsequent adaptive adjustment of the QPS threshold value, and the transaction request of the power transaction platform is directly protected according to the pre-set rated QPS threshold value, so there is no case of a meaningless ratio value caused by a zero denominator.

[0053] When the short-term change trend and the bandwidth degradation feature are larger, it indicates that the power transaction platform is more likely to be in an abnormal performance state under DDOS attack. If the real-time remaining memory occupancy ratio of the platform presents a trend of deficiency, it further indicates that the real-time performance of the power transaction platform is poorer, and more attention needs to be paid to security protection.

[0054] Step S120, in combination with the performance weakness presentation degree and the short-term transaction response delay, the attack possibility of the power transaction platform under DDOS attack is determined.

[0055] When the power transaction platform is attacked by DDOS hackers, the computing resources are excessively consumed, which causes the response of each power transaction in the short term to be delayed.

[0056] For any moment, the response time of the completed power transaction at the moment is obtained, and the average value of the response time of each completed power transaction of the power transaction platform in the long-term reference time range corresponding to the moment is obtained as the reference response time. In the embodiment of the application, the long-term reference time range is 2 days.

[0057] The average value of the difference between the response time of each power transaction in the short-term reference time range and the reference response time is calculated as the short-term transaction response delay degree.

[0058] The greater the short-term transaction response delay degree, the worse the response effect of the running performance of the power transaction platform on transaction demand in the short term.

[0059] In combination with the performance weakness presentation degree and the short-term transaction response delay degree, the attack possibility of the power transaction platform under DDOS attack is determined. The performance weakness presentation degree and the short-term transaction response delay degree are positively correlated with the attack possibility.

[0060] The greater the real-time performance weakness presentation degree of the power transaction platform, the greater the possibility of being attacked by hackers under DDOS attack. Meanwhile, the higher the short-term transaction response delay degree, the greater the possibility of the power transaction platform being attacked by hackers under DDOS attack.

[0061] In some embodiments, the normalized value of the product of the performance vulnerability presentation degree and the short-term transaction response delay degree is taken as the attack possibility of the power transaction platform under DDOS attack. It should be noted that the normalization method can adopt the maximum-minimum value normalization method.

[0062] In step S200, the attack possibility, the historical transaction of the transaction combination, and the periodic characteristics of the transaction power are combined to determine the protection attention factor of the transaction combination.

[0063] The stronger the DDOS attack performance is, the more severe the short-term transaction response delay of the platform will be. Therefore, the real-time attack possibility is obtained by combining the performance vulnerability presentation degree with the transaction response delay degree.

[0064] For a single pair of transaction combinations of the power transaction platform, the transaction combination can be composed of transaction parties with real power supply and demand relationship, or can be composed of false transaction parties fabricated by hackers. The transaction combination of real transaction should have regular historical transaction performance compared with the false transaction combination in DDOS attack, such as the periodicity of power transaction between a user and a power seller. Then, the protection attention factor is obtained from the attack possibility of the power transaction platform under DDOS attack and the historical transaction performance.

[0065] Please refer to Figure 3 In some possible implementations, the above step S200 is implemented by the following process: In step S210, the power transaction confidence of the transaction combination is determined according to the historical transaction of the transaction combination and the periodic characteristics of the transaction power.

[0066] Because the conventional power consumer has periodicity, the transaction parties with cooperative relationship exist regularity such as monthly transaction when performing electric transaction on the platform, and the power difference of each transaction is small. At the same time, the historical transaction of the real demand power transaction parties should present periodicity in time sequence.

[0067] Therefore, for the transaction combination currently analyzed by the power transaction platform, the time interval of the historical transaction of the corresponding parties of the transaction combination and the transaction power corresponding to each transaction are obtained.

[0068] The time period characteristic value of the historical transaction of the transaction combination is determined; the time period characteristic value represents the time interval error of the historical transaction, and more specifically: the mean value of the time interval duration of the adjacent two historical transactions of the transaction combination is calculated as the reference time interval duration; the average value of the absolute value of the difference between the time interval duration of each adjacent two transactions of the transaction combination and the reference time interval duration is calculated as the time period characteristic value of the transaction combination.

[0069] determining a power cycle characteristic value of the historical transactions of the transaction combination; the power cycle characteristic value characterizes the transaction power error of the historical transactions, and more specifically: calculating the mean value of the transaction power in each historical transaction of the transaction combination as a reference transaction power; and calculating the average value of the absolute value of the difference between the transaction power of each transaction of the transaction combination and the reference transaction power as the power cycle characteristic value of the transaction combination.

[0070] determining the power transaction confidence of the transaction combination in combination with the time cycle characteristic value and the power cycle characteristic value; wherein the time cycle characteristic value and the power cycle characteristic value are negatively correlated with the power transaction confidence.

[0071] In some embodiments, the product value of the time cycle characteristic value and the power cycle characteristic value is negatively correlated and normalized, and the normalized result value is taken as the power transaction confidence. In the embodiments of the present application, the product value can be negatively correlated and normalized by an exponential function with a natural constant as the base number and the inverse number of the product value as the index.

[0072] When the time cycle characteristic value and the power cycle characteristic value are smaller, the transaction periodicity of the corresponding transaction combination is more significant, which indicates that the transaction combination is more likely to maintain a stable long-term transaction cooperation relationship, and the real credibility of the transaction combination is higher, and the probability of the transaction combination being a fake transaction combination generated by a hacker for DDOS attack is lower.

[0073] obtaining the protection attention factor of the transaction combination in combination with the attack possibility and the power transaction confidence.

[0074] When the power transaction confidence of the transaction combination currently analyzed by the power transaction platform is lower, it reflects that the possibility of the transaction combination being a virtual transaction combination generated by a hacker for DDOS attack is higher, and if the attack possibility of the power transaction platform is higher, it further indicates that the transaction combination currently analyzed needs to be paid more attention to security protection, so the attack possibility and the power transaction confidence are used to calculate the protection attention factor of the transaction combination currently analyzed by the platform.

[0075] The attack possibility is positively correlated with the protection attention factor, and the power transaction confidence is negatively correlated with the protection attention factor.

[0076] In some embodiments, the normalized value of the ratio of the attack possibility to the power transaction confidence is taken as the protection attention factor.

[0077] Step S300, according to the encryption condition of the transaction combination when the transaction content is encrypted, determine the transaction privacy degree of the transaction combination; combine the need protection attention factor and the transaction privacy degree to determine the request threshold demand index of the transaction combination.

[0078] For a single pair of transaction combination, the transaction parties will share the transaction file when conducting electricity transaction, and the buyer and seller will selectively encrypt the important content to a certain level. Therefore, if the encryption level in the transaction content is higher, and the encryption information occupies a higher proportion in the encrypted content, it reflects that the transaction information privacy degree of the current transaction parties is higher. Therefore, the transaction privacy degree of the transaction combination can be determined by analyzing the encryption condition of the transaction combination when the transaction content is encrypted.

[0079] The transaction privacy degree of the transaction combination is determined by the encryption level and the number of encrypted data packets when the transaction combination encrypts the transaction content during the transaction process. More specifically: Obtain the proportion of the number of encrypted data packets in the transaction content corresponding to the current analyzed transaction combination of the power transaction platform; and obtain the average of the encryption level corresponding to the transaction content each time the transaction is conducted in the transaction combination as the average encryption level; Combine the proportion of the number of encrypted data packets and the average encryption level to determine the transaction privacy degree of the transaction combination; wherein the proportion of the number of encrypted data packets and the average encryption level are positively correlated with the transaction privacy degree.

[0080] The greater the transaction privacy degree, the stronger the information privacy of the transaction content corresponding to the current analyzed transaction combination.

[0081] If the transaction privacy degree of the current analyzed transaction combination is lower, and the need protection attention factor of the transaction combination is greater, the protection degree of the transaction combination should be improved, so a lower QPS request threshold level should be applied to the transaction combination.

[0082] Combine the need protection attention factor and the transaction privacy degree to determine the request threshold demand index of the transaction combination; wherein the need protection attention factor is positively correlated with the transaction request threshold demand index, and the transaction privacy degree is negatively correlated with the transaction request threshold demand index. Specifically, the normalized value of the ratio of the need protection attention factor and the transaction privacy degree is taken as the request threshold demand index of the transaction combination.

[0083] Finally, the request threshold demand index of all transaction combinations with real-time QPS threshold to be allocated in the power transaction platform is obtained.

[0084] Step S400, according to the request threshold demand index, adjust the preset rated QPS threshold to obtain the adaptive QPS threshold of the transaction combination; and according to the adaptive QPS threshold of each transaction combination, the security protection measures of the transaction request of the power transaction platform are adjusted.

[0085] Taking the real-time pending confirmation transaction combination of the power trading platform as an example, step S300 obtains the request threshold demand index corresponding to the transaction combination. Then, the average of the request threshold demand index for all trading combinations on the power trading platform over the past two days is calculated. Let the preset rated QPS threshold be . It should be noted that the preset rated QPS threshold is a value selected by the implementer. In some embodiments, this preset rated QPS threshold can also be the average QPS threshold of all transaction combinations within the past two days. Based on the requested threshold requirement index, the adaptive QPS threshold for the currently analyzed transaction combination is calculated. .

[0086] If the real-time request threshold demand index of the trading combination currently analyzed by the power trading platform is higher than the historical overall value level, then the trading combination can be allowed to undergo more trading processes, and the QPS threshold of the trading combination can be adaptively adjusted to a higher value.

[0087] First, compare the request threshold requirement index with the standard request threshold requirement index to determine the adjustment coefficient; In some embodiments, the request threshold requirement metric corresponding to easy combination is calculated. with the mean Normalized value of the difference , with constant 1 and The sum of these values ​​serves as the adjustment coefficient; where norm is the normalization function.

[0088] Using the adjustment coefficient as a weight, the preset rated QPS threshold is adjusted to obtain the adaptive QPS threshold of the trading portfolio.

[0089] In some embodiments, the product of the adjustment coefficient and the preset rated QPS threshold is used as the adaptive QPS threshold for the transaction portfolio.

[0090] Finally, security measures are implemented for transaction requests on the power trading platform based on the adaptive QPS threshold for each transaction combination.

[0091] The preset threshold for setting the QPS threshold is 800. If the adaptive QPS threshold of a transaction combination exceeds the preset threshold, rate limiting will be automatically triggered for the IPs of the transaction combinations that exceed the threshold.

[0092] If the adaptive QPS threshold of a trading portfolio exceeds 1.5 times the preset threshold, the IP address of the trading portfolio will be temporarily blocked. When the same IP triggers the blocking rule 10 times within a short reference time range, an email or SMS notification will be automatically sent to the security team.

[0093] Please refer to Figure 4 , Figure 4 A system block diagram of a privacy information security protection system for a power transaction platform is provided for an embodiment of the present application, and the system comprises: An attack analysis module is configured to analyze real-time transaction demand and short-term transaction response delay of the power transaction platform, and determine attack possibility of the power transaction platform under DDOS attack; A protection analysis module is configured to determine protection importance factor of a transaction combination in combination with the attack possibility, historical transaction of the transaction combination, and periodic characteristics of transaction power; A privacy analysis module is configured to determine transaction privacy degree of the transaction combination according to encryption condition of the transaction combination in encryption of transaction content during transaction, and determine request threshold demand index of the transaction combination in combination with the protection importance factor and the transaction privacy degree; An adaptive adjustment module is configured to adjust preset rated QPS threshold value to obtain adaptive QPS threshold value of the transaction combination according to the request threshold demand index, and perform security protection measures on transaction request of the power transaction platform according to the adaptive QPS threshold value of each transaction combination.

[0094] Optionally, the transmission medium can be a wired link such as, but not limited to, a coaxial cable, an optical fiber, a digital subscriber line, etc., or a wireless link such as, but not limited to, Wireless Fidelity (WIFI), Bluetooth, and a mobile device network, etc.

[0095] It should be noted that: the apparatus provided in the above embodiments is only exemplarily described based on the division of the above functional modules, and in actual application, the above functions can be completed by different functional modules according to needs, that is, the internal structure of the computer device is divided into different functional modules to complete all or part of the above described functions.

[0096] Figure 5 is a structural schematic diagram of a computer device provided by an embodiment of the present application. Exemplarily, as shown in Figure 5 The computer device 500 comprises a memory 510, a processor 520, and a computer program 530 stored in the memory 510 and running on the processor 520, wherein the processor 520 executes the computer program 530, so that the computer device can execute any of the above-mentioned privacy information security protection methods for a power transaction platform.

[0097] In addition, the embodiment of the present application also protects an apparatus, which can include a memory and a processor, wherein the memory stores executable program code, and the processor is configured to invoke and execute the executable program code to execute the method for privacy information security protection of a power transaction platform provided by the embodiment of the present application.

[0098] The embodiment of the present application can divide the apparatus into functional modules according to the above method examples, for example, each functional module can be provided, or two or more functions can be integrated into one processing module, and the integrated module can be implemented in the form of hardware. It should be noted that the division of the modules in the embodiment is illustrative, and is only a logical function division, and another division mode can be used in actual implementation.

[0099] In the case of dividing each module corresponding to each function, the apparatus can further include a signal uploading module, a determination module, an adjustment module, and the like. It should be noted that all related contents of each step involved in the above method embodiment can be referred to the function description of the corresponding functional module, and will not be repeated here.

[0100] It should be understood that the apparatus provided by the embodiment of the present application is used to execute the above method for privacy information security protection of a power transaction platform, and thus the same effect as the above implementation method can be achieved.

[0101] In the case of using an integrated unit, the apparatus can include a processing module and a storage module. When the apparatus is applied to a device, the processing module can be used to control and manage the actions of the device. The storage module can be used to support the device to execute mutual program codes and the like. The processing module can be a processor or a controller, which can realize or execute various exemplary logical blocks, modules and circuits described in combination with the disclosure. The processor can also be a combination of computing functions, such as one or more microprocessor combinations, a combination of digital signal processing (DSP) and microprocessor, and the like, and the storage module can be a memory.

[0102] In addition, the apparatus provided by the embodiment of the present application can be a chip, a component or a module, the chip can include a connected processor and a memory; wherein the memory is used to store instructions, when the processor invokes and executes the instructions, the chip can execute the method for privacy information security protection of a power transaction platform provided by the above embodiment.

[0103] The embodiment of the present application also provides a computer readable storage medium, which stores computer program code, when the computer program code runs on a computer, the computer program code makes the computer execute the above related method steps to implement the method for privacy information security protection of a power transaction platform provided by the above embodiment.

[0104] The embodiment of the present application further provides a computer program product, which, when running on a computer, enables the computer to execute the above related steps to realize the method for protecting privacy information security of the power transaction platform provided by the above embodiment.

[0105] Wherein, the device, the computer readable storage medium, the computer program product or the chip provided by the embodiment of the present application are used to execute the corresponding method provided above, so the beneficial effects that can be achieved are referred to the beneficial effects in the corresponding method provided above, which will not be repeated here. Through the description of the above implementation mode, the person skilled in the art can understand that, for the convenience and brevity of description, only the above division of functional modules is taken as an example, and in actual application, the above functions can be completed by different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In the embodiments provided by the present application, it should be understood that the disclosed device and method can be implemented by other ways.

[0106] The device embodiment described above is only schematic, for example, the division of modules or units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another device, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the shown or discussed each other can be indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0107] It should be further understood that the terms "comprise", "comprising", or any other variant thereof, are intended to cover non-exclusive inclusion, so that processes, methods, articles or terminal devices including a series of elements not only include those elements, but also include other elements not explicitly listed or inherent to such processes, methods, articles or terminal devices. Without more limitations, the element defined by the statement "comprising a" does not exclude the presence of additional identical elements in the process, method, article or terminal device comprising the element.

[0108] It should be noted that: the above-mentioned sequence of the embodiments of the present application is only for description, and does not represent the advantages and disadvantages of the embodiments. The processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multi-task processing and parallel processing are also possible or can be advantageous.

[0109] The various embodiments in the specification are described in progressive manner, and the same or similar parts between the various embodiments can be mutually referred to, and each embodiment focuses on the difference from other embodiments.

[0110] The above merely illustrates the specific embodiments of the present application, but the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of the changes or replacements within the technical range disclosed by the present application, which shall be covered within the protection scope of the present application.

Claims

1. A method for protecting the privacy and security of information in an electricity trading platform, characterized in that, The method includes the following steps: Analyze the real-time trading demand and short-term trading response delay of the power trading platform to determine the likelihood of the power trading platform being attacked by a DDoS attack. Based on the attack probability, the historical transactions of the transaction portfolio, and the cyclical characteristics of the transaction volume, the protection priorities of the transaction portfolio are determined. The transaction privacy level of the transaction portfolio is determined based on the encryption method used when the transaction content is encrypted during the transaction process; the request threshold requirement index of the transaction portfolio is determined by combining the protection importance factor and the transaction privacy level. Based on the requested threshold requirement index, the preset rated QPS threshold is adjusted to obtain the adaptive QPS threshold for the transaction combination; security protection measures are implemented for the transaction requests of the power trading platform based on the adaptive QPS threshold of each transaction combination.

2. The method for protecting privacy information security in a power trading platform according to claim 1, characterized in that, The analysis of the real-time trading demand and short-term trading response delays of the power trading platform determines the likelihood of the platform being subjected to a DDoS attack, including: The performance vulnerability of the power trading platform is determined based on the short-term trend of IP access volume, bandwidth degradation characteristics, and remaining memory ratio. By combining the performance weakness and short-term transaction response latency, the likelihood of the power trading platform being attacked by a DDoS attack is determined.

3. The method for protecting privacy information security in a power trading platform according to claim 2, characterized in that, The method for obtaining the short-term trend of IP access volume of the power trading platform is as follows: The ratio of the current IP access volume to the maximum IP access volume of the power trading platform is used as the first trend. The second trend is determined based on the changes in IP access volume within the short-term reference time range corresponding to the current moment; By combining the first trend and the second trend, a short-term trend is obtained; wherein both the first trend and the second trend are positively correlated with the short-term trend.

4. The method for protecting privacy information security in a power trading platform according to claim 2, characterized in that, The method for obtaining bandwidth degradation characteristics of the power trading platform is as follows: The initial degradation characteristics are determined based on the changes in bandwidth within the short-term reference time range corresponding to the current moment; By combining the real-time bandwidth and initial degradation characteristics of the power trading platform, bandwidth degradation characteristics are determined; among them, real-time bandwidth and bandwidth degradation characteristics are negatively correlated, while initial degradation characteristics and bandwidth degradation characteristics are positively correlated.

5. The method for protecting privacy information security in a power trading platform according to claim 1, characterized in that, The method of combining the attack probability, historical transactions of the transaction combination, and the cyclical characteristics of the transaction volume to determine the protection priorities of the transaction combination includes: The confidence level of the power trading of the trading portfolio is determined based on the historical trading data and the cyclical characteristics of the traded volume. By combining the attack probability and the confidence level of the power transaction, a protection importance factor for the transaction portfolio is obtained.

6. The method for protecting privacy information security in a power trading platform according to claim 5, characterized in that, The determination of the power trading confidence level of the trading portfolio based on its historical trading data and the cyclical characteristics of the traded volume includes: Determine the time period characteristic values ​​of the historical transactions of the trading portfolio; the time period characteristic values ​​characterize the time interval error of the transactions; Determine the electricity cycle characteristic value of the historical transactions of the trading portfolio; the electricity cycle characteristic value represents the transaction electricity error; The confidence level of the power trading combination is determined by combining the time period characteristic value and the power volume period characteristic value; wherein the time period characteristic value and the power volume period characteristic value are negatively correlated with the confidence level of the power trading.

7. The method for protecting privacy information security for an electricity trading platform according to claim 1, characterized in that, The determination of transaction privacy based on the encryption method used when encrypting transaction content during the transaction process includes: The transaction privacy level of a transaction portfolio is determined by the encryption level and the number of encrypted data packets used when encrypting transaction content during the transaction process.

8. The method for protecting privacy information security in a power trading platform according to claim 1, characterized in that, The method of determining the request threshold requirement index for transaction combinations by combining the protection importance factor and the transaction privacy level includes: The ratio of the protection importance factor to the transaction privacy level is used as the request threshold requirement indicator for the transaction combination.

9. The method for protecting privacy information security in a power trading platform according to claim 1, characterized in that, The step of adjusting the preset rated QPS threshold according to the request threshold demand index to obtain the adaptive QPS threshold for the transaction combination includes: Compare the request threshold demand index with the standard request threshold demand index to determine the adjustment coefficient; Using the adjustment coefficient as a weight, the preset rated QPS threshold is adjusted to obtain the adaptive QPS threshold of the transaction combination.

10. A privacy information security protection system for an electricity trading platform, characterized in that, The system includes the following modules: The attack analysis module is used to analyze the real-time trading demand and short-term trading response delay of the power trading platform to determine the likelihood of the power trading platform being attacked by a DDoS attack. The protection analysis module is used to determine the protection importance factors of the transaction combination by combining the attack probability, the historical transactions of the transaction combination, and the periodic characteristics of the transaction volume. The privacy analysis module is used to determine the transaction privacy level of a transaction combination based on the encryption status of the transaction content during the transaction process; and to determine the request threshold requirement index of the transaction combination by combining the protection importance factor and the transaction privacy level. An adaptive adjustment module is used to adjust a preset rated QPS threshold according to the request threshold demand index to obtain an adaptive QPS threshold for the trading combination; and to implement security protection measures for the trading requests of the power trading platform according to the adaptive QPS threshold of each trading combination.

Images