Intelligent electric energy meter data security protection and encryption transmission method and system

Abstract

The invention discloses an intelligent electric energy meter data security protection and encryption transmission method and system, and the method comprises the following steps: S1, collecting power utilization data through an intelligent electric energy meter terminal, and synchronously carrying out the physical security detection; if the detection result is abnormal, triggering local early warning and destroying the currently stored secret key; if the detection is normal, generating a 256-bit dynamic symmetric key; s2, encrypting power utilization data by adopting the dynamic symmetric key to generate encrypted data, and encrypting the dynamic symmetric key by adopting an asymmetric encryption algorithm public key to generate an encrypted key; s3, adding a millisecond-level timestamp and a 32-bit random number to the encrypted data and the encryption key, and constructing a security data frame; the method depends on a dynamic secret key mechanism, secret keys are updated according to periods, only short-time data are affected even if the secret keys are leaked, and the safety of all links of collection, transmission and storage is guaranteed; and through linkage of physical security and key management, when the terminal encounters exceptions such as disassembly, the system perceives and destroys the key in real time, so that physical attack stealing prevention is realized.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of electric energy metering safety, and particularly relates to an intelligent electric energy meter data security protection and encrypted transmission method and system. BACKGROUND

[0002] As a core terminal of smart grid data acquisition, the intelligent electric energy meter bears the key responsibility of transmitting user power consumption data to the cloud platform in real time, and the security of data transmission and storage is directly related to the stable operation of the entire power grid system and user information security. However, in the existing technical system, the intelligent electric energy meter generally adopts a "static key" management mode, that is, the key is generated and then stored in the terminal device for a long time. However, the static key may be leaked due to physical disassembly of the terminal, interception and theft during data transmission, or vulnerability of the cloud storage system. Attackers can use the key to crack the data from data acquisition, transmission to storage, causing large-scale leakage of sensitive information such as user power consumption data and power grid operation data, and further threatening the safe operation of the power grid.

[0003] The static key management mode makes the key remain in a fixed state for a long time, lacks an effective dynamic update mechanism, and even if the key is found to be leaked, it is impossible to quickly update the key to timely block the risk and remedy the security vulnerability. Moreover, the terminal physical security protection measures and the key management system are disconnected. When the electric meter is maliciously disassembled, the static key stored in the terminal can be directly read without any protection. Meanwhile, in the data transmission process, there is a lack of time binding design between the data frame and the key. Attackers can implement a replay attack by intercepting historical transmission data and repeatedly sending them, thereby interfering with the normal data transmission order. Therefore, the present application provides an intelligent electric energy meter data security protection and encrypted transmission method and system. SUMMARY The purpose of the present application is to provide an intelligent electric energy meter data security protection and encrypted transmission method and system to solve the above problems.

[0004] To solve the above problems, the present application provides a technical solution: An intelligent electric energy meter data security protection and encrypted transmission method, comprising the following steps: S1, the intelligent electric energy meter terminal collects power consumption data and simultaneously performs physical security detection. If the detection is abnormal, a local warning is triggered and the currently stored key is destroyed. If the detection is normal, a 256-bit dynamic symmetric key is generated; S2, the power consumption data is encrypted using the dynamic symmetric key to generate encrypted data, and the dynamic symmetric key is encrypted using an asymmetric encryption algorithm public key to generate an encrypted key; S3, adding a millisecond timestamp and a 32-bit random number to the encrypted data and the encryption key to construct a secure data frame; establishing a secure transmission tunnel through an SSL / TLS protocol and transmitting the secure data frame to the cloud; S4, after the cloud platform receives the secure data frame, verifying the validity of the timestamp, and after verification, decrypting the encryption key using a private key of an asymmetric encryption algorithm to obtain a dynamic symmetric key; S5, decrypting the encrypted data using the dynamic symmetric key to obtain original power consumption data and performing data integrity verification; S6, the cloud platform generates a new dynamic symmetric key at a preset period and pushes it to the smart electric energy meter terminal through the secure transmission tunnel, and the terminal verifies the legality of the new key, stores the new key and destroys the old key.

[0005] As a preferred, the physical security detection in step S1 includes detecting disassembly vibration signals through a vibration sensor and detecting cover opening state through a magnetic detection switch, and the key destruction is performed by a hardware encryption chip.

[0006] As a preferred, the dynamic symmetric key in step S2 uses an AES-256 algorithm, and the asymmetric encryption algorithm uses an RSA-2048 algorithm.

[0007] As a preferred, the 32-bit random number in step S3 is a non-repeating string generated by a hardware random number generator, which is used to prevent replay attacks, and the format of the secure data frame includes a timestamp, a random number, an encryption key, encrypted data and a terminal identifier.

[0008] As a preferred, the verification standard of the validity of the timestamp in step S4 is that the deviation from the standard time of the cloud does not exceed 3 seconds.

[0009] As a preferred, the data integrity verification in step S5 is achieved through SHA-256 hash operation, and the operation result is compared with the hash value transmitted by the terminal.

[0010] As a preferred, the preset period in step S6 is 7 days, and the cloud platform sends an identity verification request to the terminal before pushing the new key, the terminal returns a verification code generated by the hardware encryption chip, and the new key is pushed after verification.

[0011] A smart electric energy meter data security protection and encryption transmission system, comprising: A smart electric energy meter terminal, comprising a data acquisition module, a physical security detection module, a hardware encryption chip, a dynamic key generation module and a data encryption module, the smart electric energy meter terminal is used for acquiring power consumption data and performing dynamic key management; The transmission security unit, integrated between the terminal and the cloud, includes a timestamp generation module, a random number generation module, a data frame assembly module, and an SSL / TLS transmission module; The cloud-based key management unit includes a key generation submodule, a key distribution submodule, a key verification submodule, and a key destruction instruction submodule; The cloud-based data processing unit includes a timestamp verification module, a key decryption module, a data decryption module, an integrity verification module, and a data storage module. The early warning module, connected to the physical security detection module, integrity verification module, and key management unit, is used to send alarm information in abnormal situations.

[0012] Preferably, the physical security detection module includes a vibration sensor, a magnetic detection switch, and a signal processing submodule; the signal processing submodule compares the sensor signal with a preset threshold, and triggers an alarm and sends a key destruction signal to the hardware encryption chip when the threshold is exceeded.

[0013] Preferably, the data storage module adopts an encrypted storage method, which uses a currently effective dynamic symmetric key to encrypt the original electricity consumption data twice during storage, and the stored data is bound to the generation time of the corresponding key.

[0014] The beneficial effects of this invention are: Relying on a dynamic key mechanism, the key is updated periodically, so even if it is leaked, it will only affect short-term data, ensuring the security of the entire chain of collection, transmission and storage; through the linkage of physical security and key management, when the terminal encounters abnormalities such as disassembly, the system will detect and destroy the key in real time, thereby preventing physical attacks from stealing it. The system employs dual verification through timestamps and random numbers to ensure the timeliness and uniqueness of data frames and defend against replay attacks. Fourthly, the cloud data is bound to the key generation time, and key updates do not affect the decryption of historical data, balancing security and availability. Moreover, the entire system has strong compatibility, requiring only the addition of hardware encryption chips and sensors without modifying the overall architecture, thus reducing modification costs and difficulties. Detailed Implementation

[0020] Example: A method and system for data security protection and encrypted transmission of smart energy meters, comprising the following steps: S1. The smart energy meter terminal collects electricity consumption data and detects disassembly vibration signals through a vibration sensor and the open status of the meter cover through a magnetic detection switch. If an abnormality is detected, a local alarm is triggered and the hardware encryption chip destroys the currently stored key. If the detection is normal, a 256-bit dynamic symmetric key is generated. S2, the AES-256 dynamic symmetric key algorithm is used to encrypt the power consumption data, generate encrypted data, and the RSA-2048 asymmetric encryption algorithm public key is used to encrypt the dynamic symmetric key, and the encrypted key is generated; S3, a millisecond time stamp and a 32-bit random number are added to the encrypted data and the encrypted key, the 32-bit random number is a non-repeating string generated by a hardware random number generator, and a security data frame including a time stamp, a random number, an encrypted key, encrypted data and a terminal target is constructed; a secure transmission tunnel is established through an SSL / TLS protocol, and the security data frame is transmitted to the cloud; S4, after the cloud platform receives the security data frame, the validity of the time stamp is verified within 3 seconds, and after the verification is passed, the private key of the asymmetric encryption algorithm is used to decrypt the encrypted key to obtain the dynamic symmetric key; S5, the encrypted data is decrypted through the dynamic symmetric key to obtain the original power consumption data, and the data integrity is verified through SHA-256 hash operation, and the operation result is compared with the hash value transmitted by the terminal; S6, the cloud platform generates a new dynamic symmetric key according to a preset 7-day period, the cloud platform sends an identity verification request to the terminal before pushing the new key, the terminal returns a verification code generated by the hardware encryption chip, and the new key is pushed after the verification is passed, and then the new key is stored and the old key is destroyed.

[0021] An intelligent electric energy meter data security protection and encrypted transmission system, comprising: An intelligent electric energy meter terminal, comprising a data acquisition module, a physical security detection module, a hardware encryption chip, a dynamic key generation module and a data encryption module, the intelligent electric energy meter terminal is used for collecting power consumption data and executing dynamic key management; a transmission security unit is integrated between the terminal and the cloud, comprising a time stamp generation module, a random number generation module, a data frame assembly module and an SSL / TLS transmission module; a cloud key management unit, comprising a key generation submodule, a key distribution submodule, a key verification submodule and a key destruction instruction submodule; a cloud data processing unit, comprising a time stamp verification module, a key decryption module, a data decryption module, an integrity verification module and a data storage module; an early warning module connected with the physical security detection module, the integrity verification module and the key management unit, used for sending alarm information in abnormal conditions.

[0022] The physical security detection module comprises a vibration sensor, a magnetic detection switch and a signal processing submodule; the signal processing submodule compares the sensor signal with a preset threshold value, and triggers an early warning and sends a key destruction signal to the hardware encryption chip when the threshold value is exceeded.

[0023] The data storage module adopts an encryption storage mode, and the original power consumption data is twice encrypted by using a current effective dynamic symmetric key during storage, and the storage data is bound to the generation time of the corresponding key.

[0024] Specifically, when the smart electric energy meter terminal collects power consumption data, physical security detection is started synchronously, a unique dynamic symmetric key is generated by a hardware encryption chip in a normal state, the power consumption data is encrypted by using an AES-256 algorithm, the dynamic key is encrypted by using an RSA-2048 public key, a millisecond time stamp and an anti-replay random number are added to the encrypted data and the key during a transmission stage, a secure data frame is constructed, and then the secure data frame is transmitted to the cloud through an SSL / TLS tunnel, after being received by the cloud, the time stamp is verified for validity, the dynamic key is obtained by using an RSA private key for decryption, then the power consumption data is decrypted and integrity verification is completed, a new dynamic key is generated by the cloud according to a preset period, and the new dynamic key is safely distributed to the terminal after identity authentication, the terminal updates the key and destroys the old key, when physical abnormalities or key leakage are detected, the system immediately triggers a key destruction mechanism and sends an alarm, and the whole-link data security is ensured.

[0025] The present application encompasses any substitutions, modifications, equivalent methods and schemes made on the essence and scope of the present application. In order for the public to have a thorough understanding of the present application, specific details are described in the following preferred embodiments of the present application, and the present application can also be fully understood without the description of these details to those skilled in the art. In addition, in order to avoid unnecessary confusion to the essence of the present application, well-known methods, processes, procedures, elements and circuits are not described in detail.

[0026] The above is only the preferred embodiment of the present application, and it should be pointed out that for ordinary skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, and these improvements and refinements should be considered as the protection scope of the present application.

Claims

1. A method for data security protection and encrypted transmission of smart energy meters, characterized in that, Includes the following steps: S1. The smart energy meter terminal collects electricity consumption data and simultaneously performs physical safety detection; If an anomaly is detected, a local alert is triggered and the currently stored key is destroyed; if the detection is normal, a 256-bit dynamic symmetric key is generated. S2. Encrypt the electricity consumption data using the dynamic symmetric key to generate encrypted data, and encrypt the dynamic symmetric key using the public key of the asymmetric encryption algorithm to generate an encryption key; S3. Add a millisecond-level timestamp and a 32-bit random number to the above encrypted data and encryption key to construct a secure data frame; A secure transmission tunnel is established using the SSL / TLS protocol to transmit secure data frames to the cloud. S4. After receiving the secure data frame, the cloud platform verifies the validity of the timestamp. If the verification is successful, the encryption key is decrypted using the private key of the asymmetric encryption algorithm to obtain the dynamic symmetric key. S5. Decrypt the encrypted data using the dynamic symmetric key to obtain the original electricity consumption data, and perform data integrity verification; S6. The cloud platform generates a new dynamic symmetric key at a preset cycle and pushes it to the smart energy meter terminal through a secure transmission tunnel. After the terminal verifies the legality of the new key, it stores the new key and destroys the old key.

2. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, The physical security detection in step S1 includes: detecting disassembly vibration signals through a vibration sensor and detecting the open state of the watch cover through a magnetic detection switch, and the key destruction is performed by a hardware encryption chip.

3. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, In step S2, the dynamic symmetric key uses the AES-256 algorithm, and the asymmetric encryption algorithm uses the RSA-2048 algorithm.

4. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, In step S3, the 32-bit random number is a non-repeating string generated by a hardware random number generator to prevent replay attacks. The format of the secure data frame includes: timestamp, random number, encryption key, encrypted data, and terminal identifier.

5. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, The verification standard for the validity of the timestamp in step S4 is that the deviation from the standard time in the cloud does not exceed 3 seconds.

6. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, In step S5, data integrity verification is achieved through SHA-256 hash operation, and the operation result is compared with the hash value transmitted by the terminal.

7. The method for data security protection and encrypted transmission of a smart energy meter according to claim 1, characterized in that, In step S6, the preset period is 7 days. Before pushing the new key to the cloud platform, an authentication request is sent to the terminal. The terminal returns a verification code generated by the hardware encryption chip. The new key is pushed after the verification is successful.

8. A smart energy meter data security protection and encrypted transmission system, characterized in that, include: The smart energy meter terminal includes a data acquisition module, a physical security detection module, a hardware encryption chip, a dynamic key generation module, and a data encryption module. The smart energy meter terminal is used to collect electricity consumption data and perform dynamic key management. The transmission security unit, integrated between the terminal and the cloud, includes a timestamp generation module, a random number generation module, a data frame assembly module, and an SSL / TLS transmission module; The cloud-based key management unit includes a key generation submodule, a key distribution submodule, a key verification submodule, and a key destruction instruction submodule; The cloud-based data processing unit includes a timestamp verification module, a key decryption module, a data decryption module, an integrity verification module, and a data storage module. The early warning module, connected to the physical security detection module, integrity verification module, and key management unit, is used to send alarm information in abnormal situations.

9. The smart energy meter data security protection and encrypted transmission system according to claim 8, characterized in that, The physical security detection module includes a vibration sensor, a magnetic detection switch, and a signal processing submodule. The signal processing submodule compares the sensor signal with a preset threshold. When the threshold is exceeded, an early warning is triggered and a key destruction signal is sent to the hardware encryption chip.

10. The smart energy meter data security protection and encrypted transmission system according to claim 8, characterized in that, The data storage module adopts an encrypted storage method. When storing data, the original electricity consumption data is encrypted twice using a currently effective dynamic symmetric key, and the stored data is bound to the generation time of the corresponding key.