Key dynamic activity maintaining method and device for complex power network topology

Abstract

The invention discloses a secret key dynamic activity maintaining method and device oriented to complex power network topology, and belongs to the technical field of power. The method comprises the following steps: determining the trigger probability of each state of a key based on a heartbeat signal mechanism, a time window protection mechanism, an instruction response mechanism, a key freezing mechanism and a key destruction mechanism; and adjusting the triggering probability based on the communication mode with the target device. According to the key dynamic activity maintaining method and device for the complex power network topology, key dynamic activity maintaining can be achieved in a scene of the complex power network topology, and specific requirements of different communication modes on key activity in the scene of the complex power network topology can be met; the security of the secret key in the life cycle can be more effectively guaranteed, the reliability and security of the password service can be improved, and the reliability and security of communication in the scene of complex power network topology can be improved.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of electric power, and particularly relates to a key dynamic activity maintenance method and device for a complex electric power network topology. BACKGROUND

[0002] With the rapid development of smart grids, the topology structure of the electric power network in the electric power system presents the characteristics of increasing complexity and dynamics, and thus the traditional static key management mechanism is difficult to meet the dual requirements of real-time security and business continuity of the new electric power system.

[0003] At present, although multi-dimensional research and exploration have been carried out around the key management problem in the complex electric power network environment, the research mainly focuses on the innovation of the dynamic key management mechanism and the key management technology of the electric power internet of things, and the key coordination and activity synchronization are still the technical bottleneck supporting business continuity. Therefore, how to dynamically maintain the activity of the key in the complex electric power network topology has become a technical problem to be solved in the field. SUMMARY

[0004] The application aims to at least solve one of the technical problems in the prior art. To this end, the application provides a key dynamic activity maintenance method and device for a complex electric power network topology, which can realize dynamic activity maintenance of the key in the complex electric power network topology.

[0005] In a first aspect, the application provides a key dynamic activity maintenance method for a complex electric power network topology, which comprises:

[0006] Based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, the trigger probability of each state of the key is determined.

[0007] Based on the communication mode with the target device, the trigger probability is adjusted.

[0008] According to the key dynamic activity maintenance method for a complex electric power network topology of the application, by determining the trigger probability of each state of the key based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, and then adjusting the trigger probability based on the communication mode, the key dynamic activity maintenance in the complex electric power network topology can be realized, the specific needs of different communication modes for the key activity in the complex electric power network topology can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the cryptographic service can be improved, and the reliability and security of communication in the complex electric power network topology can be improved.

[0009] According to an embodiment of the present application, the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism determine the trigger probability of each state of the key, including:

[0010] In a case where the authorization request of the key comes from a legal master station system, the time length of the authorization token does not exceed the authorization validity period, and the response delay of the instruction does not exceed the response delay threshold, the trigger probability of converting the key from the preparation state to the active state is determined as 1.

[0011] According to an embodiment of the present application, the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism determine the trigger probability of each state of the key, including:

[0012] In a case where the heartbeat signal of the target device is not received within the maximum allowed heartbeat interval and the number of lost heartbeat signals is greater than the maximum allowed loss number, or in a case where a security threat is detected based on the key freezing mechanism, the trigger probability of converting the key from the active state to the frozen state is determined as 1.

[0013] According to an embodiment of the present application, the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism determine the trigger probability of each state of the key, including:

[0014] In a case where the risk level of the key leakage reaches the destruction trigger threshold, or in a case where the hardware or the key is detected to be tampered, the trigger probability of converting the key from the active state to the destruction state is determined as 1.

[0015] According to an embodiment of the present application, the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism determine the trigger probability of each state of the key, including:

[0016] In a case where the actual use frequency of the key is less than the target frequency threshold and the replacement time length of the security policy of the key reaches the policy update threshold, or in a case where the security policy of the key is updated, the trigger probability of converting the key from the active state to the standby state is determined as 1.

[0017] According to an embodiment of the present application, the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism determine the trigger probability of each state of the key, including:

[0018] In a case where the duration of the key in the frozen state exceeds a frozen state time window, or in a case where the risk level of the key leakage reaches a destruction trigger threshold, the trigger probability of converting the key from the frozen state to the destruction state is determined as 1.

[0019] According to an embodiment of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including:

[0020] In a case where the frequency of use of the key in the active state is lower than a preset threshold and the replacement duration of the security policy of the key reaches the policy update threshold, the trigger probability of converting the key from the standby state to the preparation state is determined as 1.

[0021] According to an embodiment of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including:

[0022] In a case where the authorization request of the key comes from a legal master station system, the duration of the authorization token does not exceed an authorization validity period, the response delay of the instruction does not exceed a response delay threshold, and the replacement duration of the security policy of the key reaches the policy update threshold, the trigger probability of converting the key from the standby state to the active state is determined as 1.

[0023] According to an embodiment of the present application, the trigger probability is adjusted based on the communication mode between the target device, including:

[0024] In a case where the communication mode is intra-domain horizontal communication, the trigger probability is adjusted in at least one of the following ways:

[0025] In a case where the trigger probability of converting the key from the active state to the frozen state is greater than 0, the trigger probability of converting the key from the active state to the frozen state is adjusted to be lower;

[0026] In a case where the trigger probability of converting the key from the active state to the standby state is less than 1, the trigger probability of converting the key from the active state to the standby state is adjusted to be higher;

[0027] In a case where the trigger probability of converting the key from the standby state to the preparation state is less than 1, the trigger probability of converting the key from the standby state to the preparation state is adjusted to be higher.

[0028] According to an embodiment of the present application, the trigger probability is adjusted based on the communication mode between the target device, including:

[0029] In the case that the communication mode is intra-domain vertical communication, the trigger probability is adjusted in at least one of the following manners:

[0030] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is increased;

[0031] In the case that the trigger probability of the key converting from the active state to the destroyed state is less than 1, the trigger probability of the key converting from the active state to the destroyed state is increased;

[0032] In the case that the trigger probability of the key converting from the frozen state to the destroyed state is less than 1, the trigger probability of the key converting from the frozen state to the destroyed state is increased;

[0033] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is decreased.

[0034] According to an embodiment of the present application, the trigger probability is adjusted based on the communication mode between the target device, comprising:

[0035] In the case that the communication mode is cross-domain horizontal communication, the trigger probability is adjusted in at least one of the following manners:

[0036] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is increased;

[0037] In the case that the trigger probability of the key converting from the active state to the destroyed state is less than 1, the trigger probability of the key converting from the active state to the destroyed state is increased;

[0038] In the case that the trigger probability of the key converting from the frozen state to the destroyed state is less than 1, the trigger probability of the key converting from the frozen state to the destroyed state is increased;

[0039] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is decreased.

[0040] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is decreased.

[0041] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is decreased.

[0042] According to one embodiment of the present application, the adjusting the trigger probability based on the communication mode between the target device comprises:

[0043] In the case that the communication mode is cross-domain vertical communication, the trigger probability is adjusted by at least one of the following ways:

[0044] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is increased.

[0045] In the case that the trigger probability of the key converting from the active state to the destroyed state is less than 1, the trigger probability of the key converting from the active state to the destroyed state is increased.

[0046] In a second aspect, the present application provides a key dynamic activity maintenance device for a complex power network topology, which comprises:

[0047] A determination module is configured to determine the trigger probability of each state of the key based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destroying mechanism.

[0048] An adjustment module is configured to adjust the trigger probability based on the communication mode between the target device.

[0049] According to the key dynamic activity maintenance device for a complex power network topology of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destroying mechanism, and then the trigger probability is adjusted based on the communication mode, so that the key dynamic activity maintenance can be realized in the complex power network topology scenario, the specific needs of different communication modes for the key activity in the complex power network topology scenario can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the cryptographic service can be improved, and the reliability and security of the communication in the complex power network topology scenario can be improved.

[0050] In a third aspect, the present application provides an electronic device, which comprises a memory, a processor and a computer program stored in the memory and executable on the processor, and the processor realizes the key dynamic activity maintenance method for a complex power network topology as described in the first aspect when executing the computer program.

[0051] In a fourth aspect, the present application provides a non-volatile computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to realize the key dynamic activity maintenance method for a complex power network topology as described in the first aspect.

[0052] In a fifth aspect, the present application provides a chip, comprising a processor and a communication interface, the communication interface and the processor are coupled, the processor is used to run programs or instructions, and realizes the method for keeping dynamic activity of a key facing a complex power network topology as described in the first aspect.

[0053] In a sixth aspect, the present application provides a computer program product, comprising a computer program, when the computer program is executed by a processor, the method for keeping dynamic activity of a key facing a complex power network topology as described in the first aspect is realized.

[0054] Additional aspects and advantages of the present application will be in part apparent and in part pointed out hereinafter. BRIEF DESCRIPTION OF DRAWINGS

[0055] The above and / or additional aspects and advantages of the present application will become apparent and be readily understood from the following description, taken in conjunction with the accompanying drawings, in which:

[0056] Figure 1 is a flowchart of the method for keeping dynamic activity of a key facing a complex power network topology provided by the embodiments of the present application;

[0057] Figure 2 is a schematic diagram of a dynamic key state conversion strategy in the method for keeping dynamic activity of a key facing a complex power network topology provided by the embodiments of the present application;

[0058] Figure 3 is a structural schematic diagram of the device for keeping dynamic activity of a key facing a complex power network topology provided by the embodiments of the present application;

[0059] Figure 4 is a structural schematic diagram of an electronic device provided by the embodiments of the present application. DETAILED DESCRIPTION

[0060] The technical solutions in the embodiments of the present application will be clearly described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some of the embodiments of the present application, but not all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art belong to the scope of protection of the present application.

[0061] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are generally of a kind and do not limit the number of objects, for example, the first object can be one or more. In addition, "and / or" in the specification and claims indicates at least one of the connected objects, and the character " / " generally indicates that the objects before and after are in an "or" relationship.

[0062] The key dynamic activity maintenance method for complex power network topology, the key dynamic activity maintenance device for complex power network topology, the electronic device and the readable storage medium provided by the embodiments of the present application will be described in detail below in combination with the drawings, specific embodiments and application scenarios.

[0063] Among them, the key dynamic activity maintenance method for complex power network topology can be applied to a terminal, and can be specifically executed by hardware or software in the terminal.

[0064] The terminal includes, but is not limited to, a portable communication device such as a mobile phone or a tablet computer having a touch-sensitive surface (for example, a touchscreen display and / or a touchpad). It should also be understood that in some embodiments, the terminal can not be a portable communication device, but a desktop computer having a touch-sensitive surface (for example, a touchscreen display and / or a touchpad).

[0065] In the following various embodiments, a terminal including a display and a touch-sensitive surface is described. However, it should be understood that the terminal can include one or more other physical user interface devices such as physical keyboards, mice, and joysticks.

[0066] The key dynamic activity maintenance method for complex power network topology provided by the embodiments of the present application, the execution subject of the key dynamic activity maintenance method for complex power network topology can be an electronic device or a functional module or functional entity capable of realizing the key dynamic activity maintenance method for complex power network topology in the electronic device, the electronic device mentioned in the embodiments of the present application includes but is not limited to mobile phones, tablet computers, computers, cameras and wearable devices, etc., the following will take the electronic device as the execution subject as an example to describe the key dynamic activity maintenance method for complex power network topology provided by the embodiments of the present application.

[0067] In order to facilitate the understanding of the following embodiments of the present application, the related terms involved in the following embodiments of the present application will be described first.

[0068] It can be understood that the key plays a crucial role in maintaining secure, stable and integrity communication in a complex power network topology. The following embodiments of the present application define multiple states of the key and the transition conditions between the states based on a state transition-based key management mechanism, and in combination with the protection mechanism of the cryptographic chip, the security of the key during its life cycle can be effectively guaranteed. The mechanism can cope with various security threats and abnormal situations, ensure the reliability and security of the cryptographic service, and realize the dynamic maintenance of the key activity.

[0069] The complex power network topology refers to a power network including multiple master gateways, and each master gateway is hung with multiple levels of communication devices. Each master gateway and the communication devices hung thereunder of each level constitute a communication domain.

[0070] The communication mode between two communication devices in the complex power network topology can include intra-domain horizontal communication, intra-domain vertical communication, cross-domain horizontal communication and cross-domain vertical communication modes.

[0071] Intra-domain horizontal communication refers to communication between communication devices of the same level within a communication domain.

[0072] Intra-domain vertical communication refers to communication between communication devices of different levels within a communication domain.

[0073] Cross-domain horizontal communication refers to communication between communication devices of the same level between two communication domains.

[0074] Cross-domain vertical communication refers to communication between communication devices of different levels between two communication domains.

[0075] The following describes the definition of various states of the key in the following embodiments of the present application.

[0076] Preparation state: the initial state of the key, at which time the key has not been authorized to be enabled. In this stage, the key has not been authorized and does not participate in cryptographic services, and the key is in a standby state, waiting to receive an instruction to authorize the key to be enabled.

[0077] Active state: the main working state of the key, which enters the active state after being authorized by the master station. It undertakes core security functions such as real-time data encryption and instruction signature. Its behaviors include: participating in interactive protocol session establishment; executing data stream encryption; and periodically sending heartbeat messages to maintain its activity, etc.

[0078] Standby State: Standby protection state pre-loaded with keys, supports sub-second level switching activation, encrypted copy (cipher form) stored in SE (Secure Element) security area; Key performs low-frequency synchronization to ensure rapid switching to active state when needed.

[0079] Frozen State: Degraded security mode when network is abnormal or heartbeat signal is lost. In this state, the cryptographic chip only responds to suspension release and destruction instructions, refuses to provide other cryptographic services, and if the network conditions return to normal or the heartbeat is restored, the frozen state can be released and the key can be converted back to the active state to restore its full functionality.

[0080] Degraded State: Emergency disposal state when the key is forced to interrupt operation. When the cryptographic chip is in the frozen state for too long or receives a destruction instruction, it enters the degraded state. Its behavior characteristics include: erasing all key copies in non-volatile storage area; activating the hardware fuse mechanism; generating an audit log and uploading it to a secure audit platform, etc.

[0081] As shown in Figure 1 , the key dynamic activity maintenance method for complex power network topology includes steps 110 and 120.

[0082] Step 110, based on the heartbeat signal mechanism, time window protection mechanism, instruction response mechanism, key freezing mechanism and key destruction mechanism, determines the trigger probability of each state of the key.

[0083] In actual execution, a dynamic key state conversion strategy that integrates the heartbeat signal mechanism, time window protection mechanism, instruction response mechanism, and key freezing and destruction mechanism can be constructed to realize the conversion between different states of the key.

[0084] The dynamic key state conversion strategy can accurately control the conversion process of the key state by coordinating multiple mechanisms to achieve efficient management and flexible scheduling of the key. The core goal of the dynamic key state conversion strategy is to ensure that the key can maintain high efficiency and activity in complex and variable application scenarios, while ensuring its security and reliability, thereby providing a solid guarantee for the stable operation of cryptographic services.

[0085] In some embodiments, referring to Figure 2 , the conversion between different states of the key can be triggered by a specific event.

[0086] In some embodiments, let the state space S = {ready state, active state, frozen state, degraded state, standby state}, then the transfer matrix P of the different states of the key can be represented as:

[0087]

[0088] wherein p 12 , p 23 , p 24 , p 25 , p 34 , p 51 , p 52 represent the trigger probability of the key transitioning from the ready state to the active state, the trigger probability of the key transitioning from the active state to the frozen state, the trigger probability of the key transitioning from the active state to the destroyed state, the trigger probability of the key transitioning from the active state to the standby state, the trigger probability of the key transitioning from the frozen state to the destroyed state, the trigger probability of the key transitioning from the standby state to the ready state, and the trigger probability of the key transitioning from the standby state to the active state, respectively.

[0089] The heartbeat signal mechanism is a widely used technical means in the system, which is used to ensure the communication and state synchronization between various communication devices. In some embodiments, the heartbeat signal mechanism can contain parameters or core parameters such as heartbeat interval threshold T h , maximum allowed loss number N max , and retry interval time T retry .

[0090] wherein the heartbeat interval threshold T h is defined as the maximum allowed heartbeat interval (e.g., T h = 5 minutes, etc.); the maximum allowed loss number N max is defined as the threshold of the number of lost heartbeat signals triggering the frozen state (e.g., N max = 3, etc.); and the retry interval time T retry is defined as the retry interval after the loss of the heartbeat signal (e.g., T retry = 30 seconds).

[0091] The time window protection mechanism is a mechanism for protection by setting a time window of a certain duration. Within the time window, no operation is performed; outside the time window, a protection operation is triggered. In some embodiments, the time window protection mechanism can contain parameters or core parameters such as frozen state time window W freeze (or τ f ), destroyed state time window W destroy , and safety detection period T detect .

[0092] wherein the frozen state time window W freeze (or τ f ) is defined as the maximum duration of the frozen state reserved key (e.g., τ f = 24 hours, etc.); the destroyed state time window W destroy is defined as the time threshold for the key transitioning from the frozen state to the destroyed state; and the safety detection period T detectDefined as the time interval for security threat scanning (e.g., T). detect = 1 second, etc.

[0093] The command response mechanism is a protection mechanism based on command response status. In some embodiments, the command response mechanism may include an authorization validity period T. auth Response delay threshold Δ m ax and strategy update cycle T policy Parameters or core parameters.

[0094] Among them, the authorization validity period T auth Defined as the maximum validity period of the main site authorization token (e.g., T). auth = 1 hour, etc.); Response delay threshold Δ m ax is defined as the maximum allowable delay for command response (e.g., Δ). max =200ms, etc.); Policy update cycle T policy Defined as the security policy update detection cycle (e.g., T) policy =24 hours, etc.).

[0095] A key freezing mechanism refers to a mechanism that freezes a key under certain conditions. In some embodiments, the key freezing mechanism may include an attack frequency threshold λ. a Network attack strength threshold λ p And use parameters such as the frequency mutation threshold μ or core parameters.

[0096] Among them, the attack frequency threshold λ a Defined as an attack frequency reaching λ per second a Key freezing is triggered under certain circumstances; network attack strength threshold λ p Defined as the number of abnormal data packets received per second reaching λ. p The key freeze is triggered under certain conditions; the frequency mutation threshold μ is defined as the condition that the key usage frequency suddenly increases by μ times.

[0097] A key destruction mechanism refers to a mechanism that destroys a key under certain conditions. In some embodiments, a key destruction mechanism may include a destruction trigger threshold, LEVEL. i and destruction delay time T destroy Parameters or core parameters.

[0098] Among them, the destruction trigger threshold LEVEL i Defined as the threshold of the key leakage risk level, i.e., the key leakage risk K. leak ≥LEVEL i Key destruction is triggered under certain conditions; destruction delay time T destroy Defined as the delay time (e.g., T) before destruction is performed after a risk is detected.destroy = 10 seconds, etc.

[0099] Step 120, adjusting the triggering probability based on the communication mode with the target device.

[0100] In actual implementation, the key activity refers to the validity period and update frequency of the key within a certain time. The key activity is crucial for ensuring the security of the power communication network. In different communication modes, due to the differences in application scenarios and security requirements, the requirements for the key activity are also different.

[0101] In some embodiments, the specific requirements of different communication modes for the key activity and the security consequences caused by the invalidation of the key activity are as follows.

[0102] In the case of cross-domain horizontal communication, the consequences of the invalidation of the key activity include easy spread of horizontal attacks, such as Advanced Persistent Threat (APT) horizontal penetration, etc., and thus the specific requirements for the key activity include frequent communication but clear security boundary, short key update period, and low attack detection sensitivity, etc.

[0103] In the case of cross-domain vertical communication, the consequences of the invalidation of the key activity include easy leakage of control instructions, such as refusal and / or misoperation, etc., and thus the specific requirements for the key activity include strict two-way authentication, high-priority key protection, and extremely low tolerance for frozen state, etc.

[0104] In the case of cross-domain horizontal communication, the consequences of the invalidation of the key activity include easy spread of horizontal attacks, such as Advanced Persistent Threat (APT) horizontal penetration, etc., and thus the specific requirements for the key activity include frequent communication but clear security boundary, short key update period, and low attack detection sensitivity, etc.

[0105] In the case of cross-domain vertical communication, the consequences of the invalidation of the key activity include easy leakage of control instructions, such as refusal and / or misoperation, etc., and thus the specific requirements for the key activity include strict two-way authentication, high-priority key protection, and extremely low tolerance for frozen state, etc.

[0106] The electronic device and the target device, as the execution subject of the key dynamic activity maintenance method for the complex power network topology, are both communication devices in the complex power network topology, such as a master gateway, a slave gateway or a meter at a certain level under the master gateway, etc.

[0107] The electronic device as the execution subject of the key dynamic activity maintenance method for the complex power network topology can adjust the trigger probability of each state of the key obtained through step 110 according to the specific needs of the communication mode of the electronic device and the target device to meet the specific needs of the communication mode for the key activity.

[0108] According to the key dynamic activity maintenance method for the complex power network topology provided in the embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, and then the trigger probability is adjusted based on the communication mode, so that the key dynamic activity maintenance can be realized in the complex power network topology, the specific needs of different communication modes for the key activity in the complex power network topology can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the cryptographic service can be improved, and the reliability and security of communication in the complex power network topology can be improved.

[0109] In some embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including: in the case that the authorization request of the key comes from a legal master station system, the time length of the authorization token does not exceed the authorization validity period, and the response delay of the instruction does not exceed the response delay threshold, the trigger probability of the key from the preparation state to the active state is determined as 1.

[0110] In actual execution, after the electronic device as the execution subject of the key dynamic activity maintenance method for the complex power network topology is online, the key can be converted from the preparation state to the active state through the online authorization of the master station.

[0111] In some embodiments, in the case that the authorization activation is invalid, the key is converted from the active state to the preparation state.

[0112] In some embodiments, the authorization information of the electronic device as the execution subject of the key dynamic activity maintenance method for the complex power network topology can include the authorization token and the authorization validity period.

[0113] In some embodiments, through the online authorization of the master station, the authorization activation, and the authorization process needs to meet the following conditions at the same time:

[0114] The authorization request comes from a legal master station system, the authorization token is transmitted through a secure encryption channel, and the authorization validity period meets the security policy preset by the system.

[0115] In some embodiments, the trigger probability p of the key from the preparation state to the active state is 12The following formula can be used to determine the trigger probability of the key from the active state to the deactivated state:

[0116]

[0117] wherein Auth valid represents a legal master station authorization, i.e., the conditions that need to be met simultaneously in the foregoing authorization process; t represents the time length of the authorization token; T auth represents the authorization validity period; Δ represents the response delay of the instruction; and Δ m ax represents the response delay threshold; and the symbol ∧ represents a logical AND.

[0118] In some embodiments, the trigger probability of the key from the ready state to the active state is determined to be 1, i.e., it can be determined that the key is converted from the ready state to the active state.

[0119] According to the key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application, the key is converted from the ready state to the active state in the case that the authorization request of the key is from a legal master station system, the time length of the authorization token does not exceed the authorization validity period, and the response delay of the instruction does not exceed the response delay threshold, which can realize the key dynamic activity maintenance in the complex power network topology scenario, can meet the specific needs of different communication modes for the key activity in the complex power network topology scenario, can more effectively guarantee the security of the key in its life cycle, can improve the reliability and security of the cryptographic service, and can improve the reliability and security of communication in the complex power network topology scenario.

[0120] In some embodiments of the present application, based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism, and the key destruction mechanism, the trigger probability of each state of the key is determined, including: in the case that a heartbeat signal of a target device is not received within a maximum allowed heartbeat interval and the number of lost heartbeat signals is greater than a maximum allowed loss number, or in the case that a security threat is detected based on the key freezing mechanism, the trigger probability of the key from the active state to the frozen state is determined to be 1.

[0121] In actual execution, the key in the active state can be converted to the frozen state under the condition that the key freezing mechanism is met. In some embodiments, meeting the key freezing mechanism can include heartbeat signal loss and / or the presence of a security threat.

[0122] In some embodiments, in the case of frozen release, the key can be converted from the frozen state to the active state.

[0123] In some embodiments, the heartbeat signal loss can include that a heartbeat signal is not received within a specified time interval (i.e., a heartbeat interval threshold T h , for example, T hthe target device is not received within a certain time interval (e.g., 5 minutes). In the case of loss of heartbeat signals, a transition to the frozen state can be triggered.

[0124] In some embodiments, the presence of a security threat can include at least one of: the frequency of attacks on the key exceeding an attack frequency threshold λ a ; the attack intensity of network attacks on the electronic device as the execution subject of the key dynamic activity maintenance method for the complex power network topology exceeds a network attack intensity threshold λ p ; key usage anomalies, such as a sudden increase in the frequency of key usage exceeding a usage frequency mutation threshold μ.

[0125] In some embodiments, the trigger probability p 23 of the transition of the key from the active state to the frozen state can be determined by the following formula:

[0126]

[0127] where N loss represents the actual number of lost heartbeat signals; t interval represents the time interval of actual loss of heartbeat signals; N max represents the maximum allowed number of losses; T h represents the maximum allowed heartbeat interval; λ attack represents the frequency of attacks on the key, such as the number of attacks per second; λ a represents the attack frequency threshold; λ packet represents the attack intensity of network attacks, such as the number of abnormal data packets received per second; λ p represents the network attack intensity threshold; μ usage represents the frequency of key usage, such as the number of uses per unit time; μ represents the usage frequency mutation threshold; and the symbol ∨ represents a logical OR.

[0128] In some embodiments, the trigger probability of the transition of the key from the active state to the frozen state is determined to be 1, i.e., it can be determined that the key is transitioned from the active state to the frozen state.

[0129] According to the key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application, in the case that a heartbeat signal of a target device is not received within a maximum allowed heartbeat interval and the number of lost heartbeat signals is greater than a maximum allowed loss number, or in the case that a security threat is detected based on a key freezing mechanism, the key is converted from an active state to a frozen state, which can realize key dynamic activity maintenance in the complex power network topology scenario, can meet specific needs of different communication modes for key activity in the complex power network topology scenario, can more effectively guarantee the security of the key in its life cycle, can improve the reliability and security of the cryptographic service, and can improve the reliability and security of communication in the complex power network topology scenario.

[0130] In some embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including: in the case that the risk level of key leakage reaches a destruction trigger threshold, or in the case that the hardware or key is tampered, the trigger probability of converting the key from the active state to the destruction state is determined as 1.

[0131] In actual execution, the key in the active state can be directly converted to the destruction state under the condition of meeting the key destruction mechanism.

[0132] In some embodiments, meeting the key destruction mechanism can include: the device is subjected to a serious attack, resulting in hardware damage or a very high risk of key leakage; and / or, detecting an unrecoverable security anomaly, such as key tampering, etc.

[0133] In some embodiments, the hardware damage or the very high risk of key leakage can be determined by judging whether the leakage risk K leak ≥ LEVEL i represents; if yes, the risk is very high; if no, the risk is not very high.

[0134] In some embodiments, whether the key is tampered can be indicated by a hardware tampering identifier. In the case that the hardware tampering identifier is in the active state, it indicates that the hardware or key is tampered; in the case that the hardware tampering identifier is in the inactivated state, it indicates that the hardware and key are not tampered.

[0135] In some embodiments, the trigger probability p 24 of converting the key from the active state to the destruction state can be determined by the following formula:

[0136]

[0137] wherein, K leak represents the risk of key leakage, i.e., the risk level of key leakage; LEVEL iTamper detected Tamper

[0138] In some embodiments, the trigger probability of converting the key from the active state to the destruction state is determined as 1, that is, it can be determined that the key is converted from the active state to the destruction state.

[0139] According to the key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application, by converting the key from the active state to the destruction state in the case where the risk level of key leakage reaches the destruction trigger threshold or in the case where the hardware or key is tampered, the key dynamic activity maintenance can be realized in the complex power network topology scenario, the specific needs of different communication modes for key activity in the complex power network topology scenario can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the cryptographic service can be improved, and the reliability and security of communication in the complex power network topology scenario can be improved.

[0140] In some embodiments of the present application, based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, the trigger probability of each state of the key is determined, including: in the case where the actual use frequency of the key is less than the target frequency threshold and the replacement time length of the security policy of the key reaches the policy update period, or in the case where the security policy of the key is updated, the trigger probability of converting the key from the active state to the standby state is determined as 1.

[0141] In actual execution, the key in the active state can be converted to the standby state in the case where policy adjustment occurs.

[0142] In some embodiments, the policy adjustment can include system policy adjustment and / or security policy update.

[0143] In some embodiments, the system policy adjustment can include detecting that the use frequency of the key in the current active state is too low, or in order to optimize the use policy of the key, the key in the current active state can be converted to the standby state.

[0144] In some embodiments, whether the use frequency of the key is too low can be determined according to whether the actual use frequency of the key is less than the target frequency threshold. If it is less than, it means that the use frequency of the key is too low; if it is not less than, it means that the use frequency of the key is not too low.

[0145] In some embodiments, the security policy update can include converting the key in the current active state to the standby state according to the update of the security policy, so as to re-evaluate or update when needed, so as to enhance the security.

[0146] In some embodiments, whether the security policy is updated can be indicated by a policy update identifier. In the case that the policy update identifier is in an activated state, it indicates that there is a security policy update; in the case that the policy update identifier is in an inactivated state, it indicates that there is no security policy update.

[0147] In some embodiments, the trigger probability p of converting the key from the activated state to the standby state 25 The trigger probability p can be determined by the following formula:

[0148]

[0149] Wherein, f usage represents the actual usage frequency of the key; f threshold represents a threshold value of the actual usage frequency of the key, i.e., a target frequency threshold value; t policy represents the replacement duration of the security policy, i.e., the duration for which the current security policy has been used; T policy represents the policy update period; Policy update represents the policy update identifier, which is used to indicate that the security policy is updated.

[0150] In some embodiments, the trigger probability of converting the key from the activated state to the standby state is determined as 1, i.e., the key is determined to be converted from the activated state to the standby state.

[0151] According to the key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application, the key is converted from the activated state to the standby state in the case that the actual usage frequency of the key is less than the target frequency threshold value and the replacement duration of the security policy of the key reaches the policy update period, or in the case that the security policy of the key is updated, so that the key dynamic activity maintenance can be realized in the complex power network topology scenario, the specific needs of different communication modes in the complex power network topology scenario for the key activity can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the password service can be improved, and the reliability and security of communication in the complex power network topology scenario can be improved.

[0152] In some embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism, and the key destruction mechanism, including: in the case that the duration of the key in the frozen state exceeds the frozen state time window, or in the case that the risk level of the key leakage reaches the destruction trigger threshold value, the trigger probability of converting the key from the frozen state to the destroyed state is determined as 1.

[0153] In actual execution, the key in the frozen state can be converted to the destroyed state in the case of timeout or damage, etc.

[0154] In some embodiments, the timeout can comprise that the duration of the key being in the frozen state exceeds a preset time window (i.e., the frozen state time window W freeze or τ f , for example, exceeds τ f and τ f = 24 hours, etc.

[0155] In some embodiments, the damage can comprise that it is detected that the key in the frozen state has an irreparable security risk or damage. In some embodiments, whether the key in the frozen state has an irreparable security risk or damage can be determined by judging whether the key leakage risk K leak ≥ LEVEL i is satisfied. If yes, the key in the frozen state has an irreparable security risk or damage; if no, the key in the frozen state does not have an irreparable security risk or damage.

[0156] In some embodiments, the trigger probability p 34 of the key being converted from the frozen state to the destroyed state can be determined by the following formula:

[0157]

[0158] wherein t freeze represents the duration of the key being in the frozen state; τ f represents the frozen state time window; K leak represents the key leakage risk, i.e., the risk level of the key leakage; LEVEL i represents the destruction trigger threshold.

[0159] In some embodiments, the trigger probability of the key being converted from the frozen state to the destroyed state is determined as 1, i.e., it can be determined that the key is converted from the frozen state to the destroyed state.

[0160] According to the key dynamic activity maintenance method for complex power network topology provided in the embodiments of the present application, by converting the key from the frozen state to the destroyed state in the case that the duration of the key being in the frozen state exceeds the frozen state time window, or in the case that the risk level of the key leakage reaches the destruction trigger threshold, the key dynamic activity maintenance in the complex power network topology scenario can be realized, the specific needs of different communication modes in the complex power network topology scenario for key activity can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the cryptographic service can be improved, and the reliability and security of the communication in the complex power network topology scenario can be improved.

[0161] In some embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including: in the case that the use frequency of the key in the active state is lower than a preset threshold and the replacement time length of the security policy of the key reaches a policy update period, the trigger probability of the key being converted from the standby state to the preparation state is determined as 1.

[0162] In actual implementation, the key in the standby state can be converted to the preparation state in the case of version replacement and the like.

[0163] In some embodiments, in the case that the use frequency of the key in the active state is lower than a preset threshold and the replacement time length of the security policy of the key reaches a policy update period, the key version replacement can be performed.

[0164] In some embodiments, the use frequency lower than the preset threshold can include the continuous use time lower than a target time length and / or the use times in a target time period lower than a target number.

[0165] In some embodiments, the key version can be replaced according to the needs of the security policy.

[0166] In some embodiments, the trigger probability p of the key being converted from the standby state to the preparation state 51 The trigger probability p can be determined by the following formula:

[0167]

[0168] Wherein, T active represents the continuous use time of the key; X represents the target time length; N usage represents the use times of the key in the target time period; Y represents the target number; t policy represents the replacement time length of the security policy, which refers to the time length that the current security policy has been used; T policy represents the policy update period.

[0169] In some embodiments, the trigger probability of the key being converted from the standby state to the preparation state is determined as 1, that is, it can be determined that the key is converted from the standby state to the preparation state.

[0170] According to the key dynamic activity maintenance method for the complex power network topology provided in the embodiments of the present application, the key is converted from the standby state to the preparation state when the frequency of use of the key in the active state is lower than the preset threshold and the replacement time length of the security policy of the key reaches the policy update period, so that the key dynamic activity maintenance can be realized in the complex power network topology scenario, the specific needs of different communication modes for the key activity in the complex power network topology scenario can be met, the security of the key in the life cycle of the key can be more effectively ensured, the reliability and security of the password service can be improved, and the reliability and security of the communication in the complex power network topology scenario can be improved.

[0171] In some embodiments of the present application, the trigger probability of each state of the key is determined based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, including: in the case that the authorization request of the key comes from a legal master station system, the time length of the authorization token does not exceed the authorization validity period, the response delay of the instruction does not exceed the response delay threshold, and the replacement time length of the security policy of the key reaches the policy update period, the trigger probability of converting the key from the standby state to the active state is determined as 1.

[0172] In actual execution, the key in the standby state can be converted to the active state in the case of emergency activation and the like.

[0173] In some embodiments, in the case that the current active state key is detected to be invalid and there is an urgent password service demand, the key in the standby state can be directly converted to the active state.

[0174] In some embodiments, the above direct conversion of the key in the standby state to the active state needs to meet the following conditions at the same time: the authorization token is within the validity period, the response delay does not exceed the threshold, and the demand is detected within the security policy update period.

[0175] In some embodiments, the trigger probability p 52 The trigger probability p

[0176]

[0177] wherein, Auth valid represents legal master station authorization, that is, the conditions that need to be met at the same time in the foregoing authorization process: the authorization request comes from a legal master station system, the authorization token is transmitted through a secure encryption channel, and the authorization validity period meets the security policy preset by the system; t represents the time length of the authorization token; T auth represents the authorization validity period; Δ represents the response delay of the instruction; Δ max represents the response delay threshold; t policyrepresents the replacement duration of the security policy, refers to the duration that the current security policy has been used; T policy represents the policy update period.

[0178] In some embodiments, the trigger probability of converting the key from the standby state to the active state is determined as 1, that is, it can be determined that the key is converted from the standby state to the active state.

[0179] According to the key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application, the key is converted from the standby state to the active state in the case that the authorization request of the key is from a legal master station system, the duration of the authorization token does not exceed the authorization validity period, the response delay of the instruction does not exceed the response delay threshold, and the replacement duration of the security policy of the key reaches the policy update period, so that the key dynamic activity maintenance can be realized in the complex power network topology scenario, the specific needs of different communication modes for the key activity in the complex power network topology scenario can be met, the security of the key in its life cycle can be more effectively guaranteed, the reliability and security of the password service can be improved, and the reliability and security of communication in the complex power network topology scenario can be improved.

[0180] In some embodiments of the present application, the trigger probability is adjusted based on the communication mode between the target device, including: in the case of domain-wide horizontal communication, the trigger probability is adjusted by at least one of the following ways:

[0181] In the case that the trigger probability of converting the key from the active state to the frozen state is greater than 0, the trigger probability of converting the key from the active state to the frozen state is adjusted to be lower;

[0182] In the case that the trigger probability of converting the key from the active state to the standby state is less than 1, the trigger probability of converting the key from the active state to the standby state is adjusted to be higher;

[0183] In the case that the trigger probability of converting the key from the standby state to the standby state is less than 1, the trigger probability of converting the key from the standby state to the standby state is adjusted to be higher.

[0184] In actual implementation, the differential key state transition matrix can be designed for the foregoing four scenarios or four communication modes of the power communication network.

[0185] In some embodiments, the transition matrix P intra-h can be represented as the following formula:

[0186]

[0187] wherein, the trigger probability of the frozen state is low, and the horizontal communication is allowed to have a short heartbeat delay; and then relates to high frequency backup state switching to adapt to frequent key rotation strategy.

[0188] In some embodiments, denotes a lowering process on the trigger probability of the key converting from the active state to the frozen state, to allow a transverse communication short heartbeat delay.

[0189] In some embodiments, denotes a raising process on the trigger probability of the key converting from the active state to the backup state, denotes a raising process on the trigger probability of the key converting from the backup state to the preparation state, for high frequency backup state switching, to adapt to frequent key rotation strategy.

[0190] The key dynamic activity maintenance method for complex power network topology provided by the embodiments of the present application can meet the specific needs of different communication modes for key activity in the complex power network topology scenario, and can improve the security of the power communication network, by lowering the trigger probability of the key converting from the active state to the frozen state, raising the trigger probability of the key converting from the active state to the backup state, and raising the trigger probability of the key converting from the backup state to the preparation state when the communication mode is domain internal transverse communication.

[0191] In some embodiments of the present application, the trigger probability is adjusted based on the communication mode with the target device, including: in the case of domain internal vertical communication, the trigger probability is adjusted by at least one of the following ways:

[0192] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is raised;

[0193] In the case that the trigger probability of the key converting from the active state to the destruction state is less than 1, the trigger probability of the key converting from the active state to the destruction state is raised;

[0194] In the case that the trigger probability of the key converting from the frozen state to the destruction state is less than 1, the trigger probability of the key converting from the frozen state to the destruction state is raised;

[0195] In the case that the trigger probability of the key converting from the backup state to the active state is greater than 0, the trigger probability of the key converting from the backup state to the active state is lowered.

[0196] In actual implementation, the transfer matrix P intra-v may be expressed as the following formula:

[0197]

[0198] wherein, and strictly attack response, ensuring the vertical link zero tolerance policy; Involving limiting the direct activation of the backup state, for example, the approval of the upper node can be converted to the active state to enhance the security and controllability of the system.

[0199] In some embodiments, Involving lowering the trigger probability of the key from the backup state to the active state to limit the direct conversion of the backup state to the active state. For example, by adding the condition that the upper node approval passes, the conversion from the backup state to the active state is performed, which enhances the security and controllability of the system.

[0200] In some embodiments, Involving increasing the trigger probability of the key from the active state to the frozen state, Involving increasing the trigger probability of the key from the active state to the destroyed state, Involving increasing the trigger probability of the key from the frozen state to the destroyed state, which can strictly respond to network attacks, enhance the response ability to network attacks, ensure the vertical link zero tolerance policy, and improve the security of the vertical communication within the domain.

[0201] The key dynamic activity maintenance method for complex power network topology provided by the embodiments of the present application can meet the specific needs of different communication modes for key activity in the complex power network topology scenario by increasing the trigger probability of the key from the active state to the frozen state, increasing the trigger probability of the key from the active state to the destroyed state, increasing the trigger probability of the key from the frozen state to the destroyed state, and lowering the trigger probability of the key from the backup state to the active state, which can improve the security of the power communication network.

[0202] In some embodiments of the present application, the trigger probability is adjusted based on the communication mode with the target device, including: in the case of cross-domain horizontal communication, at least one of the following ways is used to adjust the trigger probability:

[0203] In the case where the trigger probability of the key from the active state to the frozen state is less than 1, the trigger probability of the key from the active state to the frozen state is increased;

[0204] In the case where the trigger probability of the key from the active state to the destroyed state is less than 1, the trigger probability of the key from the active state to the destroyed state is increased;

[0205] In the case where the trigger probability of the key from the frozen state to the destroyed state is less than 1, the trigger probability of the key from the frozen state to the destroyed state is increased;

[0206] In the case where the trigger probability of the key converting from the standby state to the ready state is greater than 0, the trigger probability of the key converting from the standby state to the ready state is adjusted to be lower.

[0207] In the case where the trigger probability of the key converting from the standby state to the ready state is greater than 0, the trigger probability of the key converting from the standby state to the ready state is adjusted to be lower.

[0208] In the case where the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is adjusted to be lower.

[0209] In actual implementation, the transition matrix P in the cross-domain horizontal communication mode is inter-h which can be expressed as the following formula:

[0210]

[0211] wherein, and indicate strict control of state transition in cross-domain communication; and indicate enhanced response capability to attacks to cope with cross-domain attack risks.

[0212] In some embodiments, indicates that the trigger probability of the key converting from the ready state to the active state is adjusted to be lower, indicates that the trigger probability of the key converting from the standby state to the ready state is adjusted to be lower, indicates that the trigger probability of the key converting from the standby state to the active state is adjusted to be lower, so as to strictly control the conversion of the key state in cross-domain communication.

[0213] In some embodiments, indicates that the trigger probability of the key converting from the active state to the frozen state is adjusted to be higher, indicates that the trigger probability of the key converting from the active state to the destroyed state is adjusted to be higher, indicates that the trigger probability of the key converting from the frozen state to the destroyed state is adjusted to be higher, so as to strictly respond to network attacks, enhance the response capability to network attacks, more effectively cope with cross-domain attack risks, and improve the security of cross-domain communication.

[0214] According to the key dynamic activity maintenance method for the complex power network topology provided in the embodiments of the present application, in the case of cross-domain horizontal communication, the trigger probability of the key from the active state to the frozen state is adjusted, the trigger probability of the key from the active state to the destroyed state is adjusted, the trigger probability of the key from the frozen state to the destroyed state is adjusted, the trigger probability of the key from the prepared state to the active state is adjusted, the trigger probability of the key from the standby state to the prepared state is adjusted, and the trigger probability of the key from the standby state to the active state is adjusted, so that the specific needs of different communication modes in the complex power network topology can be met, and the security of the power communication network can be improved.

[0215] In some embodiments of the present application, the trigger probability is adjusted based on the communication mode between the target device, including: in the case of cross-domain vertical communication, at least one of the following ways is used to adjust the trigger probability:

[0216] In the case that the trigger probability of the key from the active state to the frozen state is less than 1, the trigger probability of the key from the active state to the frozen state is adjusted;

[0217] In the case that the trigger probability of the key from the active state to the destroyed state is less than 1, the trigger probability of the key from the active state to the destroyed state is adjusted.

[0218] In actual execution, the transfer matrix P of the cross-domain vertical communication mode is inter-v which can be expressed as the following formula:

[0219]

[0220] wherein, and In the case of detecting the highest level of threat, the system can quickly respond and take necessary security measures, the standby state is disabled in the matrix, the related state value is 0, the life cycle of the key is directly controlled by the upper domain CA, and the security and controllability of the system are further enhanced.

[0221] In some embodiments, indicates that the trigger probability of the key from the active state to the frozen state is adjusted, indicates that the trigger probability of the key from the active state to the destroyed state is adjusted, which can strictly respond to network attacks, enhance the response ability to network attacks, more effectively cope with cross-domain attack risks, and improve the security of cross-domain communication.

[0222] In some embodiments, in the case of cross-domain vertical communication, the trigger probability of other state conversion to standby state can also be adjusted to 0, and the standby state is disabled to ensure security.

[0223] The key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application can increase the trigger probability of the key from the active state to the frozen state and the trigger probability of the key from the active state to the destroyed state in the case of cross-domain vertical communication, can meet the specific needs of different communication modes for key activity in the complex power network topology scenario, and can improve the security of the power communication network.

[0224] The key dynamic activity maintenance method for a complex power network topology provided in the embodiments of the present application can be executed by the key dynamic activity maintenance device for a complex power network topology. The key dynamic activity maintenance device for a complex power network topology provided in the embodiments of the present application is described by taking the key dynamic activity maintenance device for a complex power network topology as an example.

[0225] The embodiments of the present application further provide a key dynamic activity maintenance device for a complex power network topology. As shown in the figure, the key dynamic activity maintenance device for a complex power network topology comprises a determination module 310 and an adjustment module 320. Figure 3

[0226] The determination module 310 is configured to determine the trigger probability of each state of the key based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism.

[0227] The adjustment module 320 is configured to adjust the trigger probability based on the communication mode between the target device.

[0228] The key dynamic activity maintenance device for a complex power network topology provided in the embodiments of the present application can determine the trigger probability of each state of the key based on the heartbeat signal mechanism, the time window protection mechanism, the instruction response mechanism, the key freezing mechanism and the key destruction mechanism, and then adjust the trigger probability based on the communication mode, so as to realize the key dynamic activity maintenance in the complex power network topology scenario, meet the specific needs of different communication modes for key activity in the complex power network topology scenario, more effectively guarantee the security of the key in its life cycle, improve the reliability and security of the cryptographic service, and improve the reliability and security of communication in the complex power network topology scenario.

[0229] In some embodiments, the determination module 310 can be specifically configured to determine the trigger probability of the key from the preparation state to the active state as 1 in the case that the authorization request of the key comes from a legal master station system, the time length of the authorization token does not exceed the authorization validity period, and the response delay of the instruction does not exceed the response delay threshold.

[0230] ​In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the active state to the frozen state as 1 in a case that the heartbeat signal of the target device is not received within the maximum allowed heartbeat interval and the number of lost heartbeat signals is greater than the maximum allowed number of lost signals, or in a case that a security threat is detected based on the key freezing mechanism.

[0231] In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the active state to the destroyed state as 1 in a case that the risk level of key leakage reaches a destruction trigger threshold, or in a case that the hardware or the key is detected to be tampered.

[0232] In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the active state to the standby state as 1 in a case that the actual usage frequency of the key is less than a target frequency threshold and the replacement time length of the security policy of the key reaches a policy update period, or in a case that the security policy of the key is updated.

[0233] In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the frozen state to the destroyed state as 1 in a case that the time length of the key in the frozen state exceeds a frozen state time window, or in a case that the risk level of key leakage reaches a destruction trigger threshold.

[0234] In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the standby state to the preparation state as 1 in a case that the usage frequency of the key in the active state is lower than a preset threshold and the replacement time length of the security policy of the key reaches a policy update period.

[0235] In some embodiments, the determining module 310 can be further configured to determine the trigger probability of converting the key from the standby state to the active state as 1 in a case that the authorization request of the key comes from a legal master station system, the time length of the authorization token does not exceed an authorization validity period, the response delay of the instruction does not exceed a response delay threshold, and the replacement time length of the security policy of the key reaches a policy update period.

[0236] In some embodiments, the adjusting module 320 can be configured to adjust the trigger probability in at least one of the following ways in a case that the communication mode is an intra-domain horizontal communication:

[0237] lowering the trigger probability of converting the key from the active state to the frozen state in a case that the trigger probability of converting the key from the active state to the frozen state is greater than 0;

[0238] increasing the trigger probability of converting the key from the active state to the standby state in a case that the trigger probability of converting the key from the active state to the standby state is less than 1;

[0239] In the case that the trigger probability of the key converting from the standby state to the ready state is less than 1, the trigger probability of the key converting from the standby state to the ready state is adjusted to be higher.

[0240] In some embodiments, the adjusting module 320 can also be specifically configured to adjust the trigger probability in the following manner in the case that the communication mode is the intra-domain vertical communication:

[0241] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is adjusted to be higher.

[0242] In the case that the trigger probability of the key converting from the active state to the destroyed state is less than 1, the trigger probability of the key converting from the active state to the destroyed state is adjusted to be higher.

[0243] In the case that the trigger probability of the key converting from the frozen state to the destroyed state is less than 1, the trigger probability of the key converting from the frozen state to the destroyed state is adjusted to be higher.

[0244] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is adjusted to be lower.

[0245] In some embodiments, the adjusting module 320 can also be specifically configured to adjust the trigger probability in the following manner in the case that the communication mode is the cross-domain horizontal communication:

[0246] In the case that the trigger probability of the key converting from the active state to the frozen state is less than 1, the trigger probability of the key converting from the active state to the frozen state is adjusted to be higher.

[0247] In the case that the trigger probability of the key converting from the active state to the destroyed state is less than 1, the trigger probability of the key converting from the active state to the destroyed state is adjusted to be higher.

[0248] In the case that the trigger probability of the key converting from the frozen state to the destroyed state is less than 1, the trigger probability of the key converting from the frozen state to the destroyed state is adjusted to be higher.

[0249] In the case that the trigger probability of the key converting from the ready state to the active state is greater than 0, the trigger probability of the key converting from the ready state to the active state is adjusted to be lower.

[0250] In the case that the trigger probability of the key converting from the standby state to the ready state is greater than 0, the trigger probability of the key converting from the standby state to the ready state is adjusted to be lower.

[0251] In the case that the trigger probability of the key converting from the standby state to the active state is greater than 0, the trigger probability of the key converting from the standby state to the active state is adjusted to be lower.

[0252] In some embodiments, the adjusting module 320 can also be specifically configured to adjust the triggering probability in the following manner in the case that the communication mode is cross-domain vertical communication:

[0253] In the case that the triggering probability of the key converting from the active state to the frozen state is less than 1, the triggering probability of the key converting from the active state to the frozen state is increased;

[0254] In the case that the triggering probability of the key converting from the active state to the destroyed state is less than 1, the triggering probability of the key converting from the active state to the destroyed state is increased.

[0255] The key dynamic activity maintaining apparatus for complex power network topology in the embodiments of the present applicationapplicationbe an electronic device or a component in an electronic device, such as an integrated circuit or a chip. The electronic deviceapplicationbe a terminal or other devices than terminals. For example, the electronic deviceapplicationbe a mobile phone, a tablet computer, a notebook computer, a palm computer, a vehicle-mounted electronic device, a Mobile Internet Device (MID), an augmented reality (AR) / virtual reality (VR) device, a robot, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), and can also be a server, a Network Attached Storage (NAS), a personal computer (PC), a television (TV), a teller machine, or a self-service machine, and the like, and the embodiments of the present application are not limited in this regard.

[0256] The key dynamic activity maintaining apparatus for complex power network topology in the embodiments of the present applicationapplicationbe a device with an operating system. The operating systemapplicationbe an Android operating system, an iOS operating system, or other possible operating systems, and the embodiments of the present application are not limited in this regard.

[0257] The key dynamic activity maintaining apparatus for complex power network topology provided in the embodiments of the present applicationapplicationbe able to implement the method embodiments Figures 1 to 2 The processes implemented by the method embodiments are not repeated here to avoid repetition.

[0258] In some embodiments, as Figure 4As shown, the electronic device 400 according to the embodiment of the present application further comprises a processor 410, a memory 420 and a computer program stored in the memory 420 and executable on the processor 410. The computer program is executed by the processor 410 to implement the processes of the method for keeping dynamic activity of a key facing a complex power network topology according to the above embodiment of the present application, and the same technical effects can be achieved. To avoid repetition, details are not described herein.

[0259] It should be noted that the electronic device according to the embodiment of the present application includes the mobile electronic device and the non-mobile electronic device described above.

[0260] The embodiment of the present application further provides a non-volatile computer readable storage medium, which stores a computer program. The computer program is executed by a processor to implement the processes of the method for keeping dynamic activity of a key facing a complex power network topology according to the above embodiment of the present application, and the same technical effects can be achieved. To avoid repetition, details are not described herein.

[0261] The processor is the processor of the electronic device according to the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer readable only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0262] The embodiment of the present application further provides a computer program product, which includes a computer program. The computer program is executed by a processor to implement the method for keeping dynamic activity of a key facing a complex power network topology according to the above embodiment of the present application.

[0263] The processor is the processor of the electronic device according to the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer readable only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0264] The embodiment of the present application further provides a chip, which includes a processor and a communication interface. The communication interface is coupled to the processor. The processor is configured to execute a program or an instruction to implement the processes of the method for keeping dynamic activity of a key facing a complex power network topology according to the above embodiment of the present application, and the same technical effects can be achieved. To avoid repetition, details are not described herein.

[0265] It should be understood that the chip according to the embodiment of the present application can also be referred to as a system level chip, a system chip, a chip system or a system on chip, etc.

[0266] It should be noted that, in the present document, the terms "comprises", "comprising", or any other variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by "comprises a", "comprising", or "comprises" does not, without more constraints, preclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element. Additionally, it should be noted that the terms "one embodiment", "some embodiments", "certain embodiments", "certain examples", or "some examples" as used in the present document are intended to refer to one or more embodiments or examples that do not necessarily have to cover all embodiments or examples of the present application. In other words, use of the above terms does not necessarily refer to the same embodiment or example. Furthermore, the described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments or examples.

[0267] Those skilled in the art can clearly understand that the above-mentioned embodiment method can be realized by means of software and necessary general hardware platform, of course, it can also be realized by hardware, but in many cases, the former is a better embodiment. Based on such understanding, the technical solutions of the present application can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a plurality of instructions for making a terminal (which can be a mobile phone, computer, server, or network equipment, etc.) execute the method described in each embodiment of the present application.

[0268] The embodiments of the present application are described above in combination with the drawings, but the present application is not limited to the above-mentioned specific embodiments, and the above-mentioned specific embodiments are only illustrative, not restrictive. Those skilled in the art can make many forms without departing from the scope of the present application and the protection scope of the claims.

[0269] In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "illustrative embodiment", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present application. In the present specification, the illustrative description of the above terms does not necessarily refer to the same embodiment or example. Moreover, the described specific features, structures, materials or characteristics can be combined in any suitable manner in any one or more embodiments or examples.

[0270] While the embodiments of the application have been shown and described, it is to be understood that the embodiments can be varied, modified, substituted and changed by those skilled in the art without departing from the principles and spirit of the application, the scope of which is defined by the claims and their equivalents.

Claims

1. A method for maintaining the dynamic activity of keys in complex power network topologies, characterized in that, include: Based on the heartbeat signal mechanism, time window protection mechanism, command response mechanism, key freezing mechanism and key destruction mechanism, the trigger probability of each key state is determined; The trigger probability is adjusted based on the communication mode with the target device.

2. The key dynamic liveness maintenance method for complex power network topologies according to claim 1, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: If the authorization request for the key comes from a legitimate master station system, the duration of the authorization token does not exceed the authorization validity period, and the response delay of the instruction does not exceed the response delay threshold, the trigger probability of converting the key from the ready state to the active state is determined to be 1.

3. The key dynamic activity maintenance method for complex power network topologies according to claim 2, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: If no heartbeat signal is received from the target device within the maximum allowed heartbeat interval and the number of lost heartbeat signals exceeds the maximum allowed number of lost signals, or if a security threat is detected based on the key freezing mechanism, the trigger probability for changing the key from the active state to the frozen state is determined to be 1.

4. The key dynamic activity maintenance method for complex power network topologies according to claim 2, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: When the risk level of key leakage reaches the destruction trigger threshold, or when hardware or key tampering is detected, the trigger probability of converting the key from the active state to the destruction state is determined to be 1.

5. The key dynamic activity maintenance method for complex power network topologies according to claim 2, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: When the actual usage frequency of the key is less than the target frequency threshold and the replacement time of the key's security policy reaches the policy update threshold, or when the key's security policy is updated, the trigger probability of converting the key from the active state to the standby state is determined to be 1.

6. The key dynamic activity maintenance method for complex power network topologies according to claim 3, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: If the key remains in a frozen state for a period exceeding the frozen state time window, or if the risk level of key leakage reaches the destruction trigger threshold, the trigger probability of converting the key from a frozen state to a destroyed state is determined to be 1.

7. The key dynamic activity maintenance method for complex power network topologies according to claim 5, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: If the frequency of key use in the active state is lower than a preset threshold and the duration of key security policy change reaches the policy update threshold, the trigger probability of converting the key from the standby state to the ready state is determined to be 1.

8. The key dynamic activity maintenance method for complex power network topologies according to claim 5, characterized in that, The mechanism based on heartbeat signals, time window protection, command response, key freezing, and key destruction determines the trigger probability of each key state, including: If the authorization request for the key comes from a legitimate master station system, the duration of the authorization token does not exceed the authorization validity period, the response delay of the instruction does not exceed the response delay threshold, and the replacement duration of the security policy of the key reaches the policy update threshold, the trigger probability of converting the key from the standby state to the active state is determined to be 1.

9. The key dynamic liveness maintenance method for complex power network topologies according to any one of claims 1 to 8, characterized in that, The adjustment of the trigger probability based on the communication mode with the target device includes: When the communication mode is intra-domain lateral communication, the trigger probability is adjusted using at least one of the following methods: If the trigger probability of the key changing from an active state to a frozen state is greater than 0, the trigger probability of the key changing from an active state to a frozen state is reduced. If the trigger probability of the key switching from the active state to the standby state is less than 1, increase the trigger probability of the key switching from the active state to the standby state. If the trigger probability of the key switching from standby state to ready state is less than 1, increase the trigger probability of the key switching from standby state to ready state.

10. The key dynamic liveness maintenance method for complex power network topologies according to any one of claims 1 to 8, characterized in that, The adjustment of the trigger probability based on the communication mode with the target device includes: When the communication mode is intra-domain vertical communication, the trigger probability is adjusted using at least one of the following methods: If the trigger probability of the key changing from an active state to a frozen state is less than 1, increase the trigger probability of the key changing from an active state to a frozen state. If the trigger probability of the key changing from the active state to the destroyed state is less than 1, increase the trigger probability of the key changing from the active state to the destroyed state. If the trigger probability of the key changing from a frozen state to a destroyed state is less than 1, increase the trigger probability of the key changing from a frozen state to a destroyed state. If the trigger probability of the key transitioning from the standby state to the active state is greater than 0, the trigger probability of the key transitioning from the standby state to the active state is reduced.

11. The key dynamic liveness maintenance method for complex power network topologies according to any one of claims 1 to 8, characterized in that, The adjustment of the trigger probability based on the communication mode with the target device includes: When the communication mode is cross-domain lateral communication, the trigger probability is adjusted using at least one of the following methods: If the trigger probability of the key changing from an active state to a frozen state is less than 1, increase the trigger probability of the key changing from an active state to a frozen state. If the trigger probability of the key changing from the active state to the destroyed state is less than 1, increase the trigger probability of the key changing from the active state to the destroyed state. If the trigger probability of the key changing from a frozen state to a destroyed state is less than 1, increase the trigger probability of the key changing from a frozen state to a destroyed state. If the trigger probability of the key transitioning from the ready state to the active state is greater than 0, the trigger probability of the key transitioning from the ready state to the active state is reduced. If the trigger probability of the key transitioning from the standby state to the ready state is greater than 0, the trigger probability of the key transitioning from the standby state to the ready state is reduced. If the trigger probability of the key transitioning from the standby state to the active state is greater than 0, the trigger probability of the key transitioning from the standby state to the active state is reduced.

12. The key dynamic liveness maintenance method for complex power network topologies according to any one of claims 1 to 8, characterized in that, The adjustment of the trigger probability based on the communication mode with the target device includes: When the communication mode is cross-domain vertical communication, the trigger probability is adjusted using at least one of the following methods: If the trigger probability of the key changing from an active state to a frozen state is less than 1, increase the trigger probability of the key changing from an active state to a frozen state. If the trigger probability of the key changing from the active state to the destroyed state is less than 1, the trigger probability of the key changing from the active state to the destroyed state is increased.

13. A key dynamic activity maintenance device for complex power network topologies, characterized in that, include: The determination module is used to determine the trigger probability of each state of the key based on the heartbeat signal mechanism, time window protection mechanism, instruction response mechanism, key freezing mechanism, and key destruction mechanism. An adjustment module is used to adjust the trigger probability based on the communication mode with the target device.

14. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the key dynamic activity maintenance method for complex power network topologies as described in any one of claims 1-12.

15. A non-volatile computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the key dynamic activity maintenance method for complex power network topologies as described in any one of claims 1-12.

Images