Energy storage system data secure transmission and display method and system

Abstract

The invention provides a secure transmission and display method and system for energy storage system data, and the method comprises the following steps: collecting operation data from an energy storage equipment terminal in real time through a data collection step; executing a secure transmission step, and transmitting the operation data to a cloud platform through a dynamic encryption mechanism so as to guarantee the data security in the transmission process; executing a data processing step on the cloud platform, performing decryption and permission analysis on the received data, and generating a structured data permission label based on a user role; and carrying out a dynamic display step: screening out data contents which can be accessed by the user according to the data authority label, and dynamically rendering and displaying the data contents in a terminal interface in a differential chart form. According to the method, multi-role permission isolation, dynamic secure transmission and multi-terminal visual display can be realized, and the security, the management precision and the availability of the energy storage data are effectively improved.

Description

Technical Field

[0001] This invention relates to the field of energy storage system data processing technology, and more specifically, to a method, system, and storage medium for secure data transmission and display in energy storage systems. Background Technology

[0002] With the advancement of carbon neutrality goals, the new energy industry is developing rapidly. Energy storage systems, as a key facility for coordinating grid stability and the intermittency of renewable energy, have been widely applied in smart grids, distributed energy resources, and industrial and commercial energy storage. During operation, energy storage systems generate massive amounts of user data in real time, including core operating parameters such as battery voltage, current, state of charge (SOC), state of health (SOH), temperature, and fault alarms, as well as sensitive information such as user identity and device location. This data forms the basis for status monitoring, energy efficiency analysis, fault early warning, and business decision-making. The security of its transmission and the intelligence of its display directly relate to user privacy protection, system operational safety, and trade secrets.

[0003] Currently, the industry mainly adopts the following technical solutions for the secure transmission and display of energy storage data: 1. Static encrypted transmission and display solution based on traditional SSL / TLS protocol. This solution relies on a fixed certificate and a long-term valid key mechanism to establish a secure channel. After data is decrypted in the cloud, it is displayed as a uniform static page. Although simple to implement, its security lacks dynamism and is difficult to defend against combined attacks such as key leaks or "man-in-the-middle attacks + interface imitation". At the same time, its "one-size-fits-all" display mode cannot provide differentiated data presentation according to the needs of different roles such as operation and maintenance personnel, enterprise managers, and regulatory agencies. This poses both the risk of over-exposure of data and the inability to meet the fine-grained access control requirements in multi-role collaborative scenarios.

[0004] 2. A blockchain-based solution for data notarization and anonymization. This solution utilizes the immutability of blockchain to notarize key data and anonymizes sensitive fields to protect privacy. While it offers advantages in data tamper prevention and traceability, the consensus mechanism of blockchain results in high data synchronization latency and low throughput, making it difficult to meet the stringent real-time requirements of energy storage monitoring. Furthermore, this solution focuses on data notarization rather than dynamic interaction, and cannot support complex and flexible real-time data filtering and dynamic visualization rendering, limiting its application in real-time monitoring scenarios.

[0005] In summary, existing technologies struggle to achieve both efficient transmission and real-time display while simultaneously providing dynamic security protection and fine-grained data access control, thus hindering the full realization of the data value and application security of energy storage systems. Therefore, there is an urgent need in this field for an innovative solution that integrates dynamic security protection and real-time visualization rendering across the entire data transmission, processing, and display chain to ensure the security, reliability, and availability of energy storage system data throughout its entire lifecycle. Summary of the Invention

[0006] The purpose of this application is to provide a method and system for secure data transmission and display in an energy storage system, which has the advantages of achieving dynamic encryption of the transmission channel, ensuring accurate data display according to permissions, and improving system security and resource utilization efficiency.

[0007] In a first aspect, this application proposes a method for secure transmission and display of data from an energy storage system, comprising the following steps: Data acquisition steps: Collect operational data from the energy storage device terminal; Secure transmission steps: The collected operational data is transmitted to the cloud platform through a secure transmission layer, which employs dynamic encryption. Data processing steps: The received data is decrypted and permissions are analyzed on the cloud platform, and corresponding data permission tags are generated according to the current user's role; Dynamic display steps: Based on the data permission tags, filter out the data that is allowed to be accessed from the decrypted data, perform dynamic visualization rendering, and display it on the user interface.

[0008] By constructing an end-to-end encrypted link, a dynamic key negotiation mechanism, and a structured permission tag system, the above-mentioned system achieves multi-dimensional linkage protection of energy storage system operation data in terms of transmission security, access control, and visualization. This not only improves information security but also ensures the flexibility of data use and traceability in multi-role scenarios.

[0009] Specifically, the data acquisition step includes, but is not limited to, the operating data: operating status parameters of the energy storage device (e.g., battery pack voltage, current, state of charge (SOC), state of health (SOH), temperature, cycle count, fault alarm code, etc.), device ownership identification information (e.g., customer number, user ID bound to the device), and contextual information (e.g., device geographical location). The data acquisition method can be Modbus RTU / TCP, which supports parallel state change-triggered reporting based on a sampling period of approximately 10 seconds. The above operational data is acquired and transmitted by the energy storage device terminal.

[0010] Specifically, the secure transmission step involves the secure transmission layer comprising a terminal, a dynamic encryption gateway, and an edge computing node located on the field side, and the running data being transmitted securely in segments along the path from the terminal device, the dynamic encryption gateway, the edge computing node to the cloud platform.

[0011] The transmission path can be constructed as a topology consisting of terminal devices, dynamic encryption gateways, edge computing nodes, and a cloud platform, with encryption and authentication mechanisms established for each link segment: The TLS 1.3 or mTLS protocol is preferred between the terminal and the dynamic encryption gateway; The dynamic encryption gateway to the edge computing node uses a dynamic token mechanism or symmetric key negotiation. Edge computing nodes should ideally connect to the cloud platform using OAuth2.0 client credentials and TLS encryption. End-to-end encryption and segmented link protection can coexist to balance performance, security, and flexibility.

[0012] The secure transmission steps construct a multi-level topology structure consisting of terminals, dynamic encryption gateways, edge computing nodes, and cloud platforms. By introducing TLS 1.3, mTLS, OAuth 2.0, and dynamic token mechanisms in each link segment, the system implements a security strategy for segmented authentication and encrypted transmission of running data, thereby improving the data anti-tampering capability and access reliability of the energy storage system in complex network environments.

[0013] Specifically, the data processing steps involve the cloud platform first decrypting the received data, and then dynamically generating structured data permission tags based on the logged-in user's role information. These tags define the range of data fields the user can access and drive subsequent rendering and interface output.

[0014] The data processing steps integrate data decryption and permission tag generation mechanisms on the cloud platform side, realizing field-level access control of runtime data in multi-role access scenarios. This ensures that different users can only see the minimum necessary information corresponding to their roles, balancing system security and usage flexibility.

[0015] Specifically, the dynamic display step involves the following steps: the display terminal can be a web terminal, a mobile terminal, or an industrial visualization terminal; the display terminal filters user-visible fields from the unified decrypted data source based on the data permission tags, and generates views such as line charts, KPI indicator cards, and alarm pop-ups as needed for dynamic display.

[0016] The dynamic display process dynamically filters data fields by parsing permission tags and automatically generates views such as line charts, KPI indicator cards, and alarm pop-ups. This enables personalized and dynamic display of data under different roles and terminals, enhancing the system's adaptability and interaction efficiency in multiple organizations and application scenarios.

[0017] Furthermore, this application also proposes that the secure transmission step includes a dynamic key negotiation sub-step: When establishing a communication session between the terminal device and the cloud platform, a one-time session encryption key is generated through negotiation based on a key exchange algorithm; the session encryption key has a predetermined limited validity period and needs to be renegotiated after the key expires.

[0018] Specifically: When a terminal device establishes a communication session with the cloud platform, a temporary symmetric encryption key is negotiated and generated using the elliptic curve Diffie-Hellman NISTP-256 algorithm. This key is used to encrypt all data transmission content in the session. This session key is valid only once, with a default validity period of 5 minutes. After the expiration, the terminal will automatically initiate a renegotiation.

[0019] The dynamic key negotiation sub-step introduces a dynamic session key negotiation mechanism based on a key exchange algorithm between the terminal device and the cloud platform, which realizes temporary encryption and periodic renegotiation of the data transmission link. This effectively improves the system's ability to resist security threats such as replay attacks, key leakage and session hijacking, and enhances the risk resistance and real-time protection capabilities of the communication link.

[0020] Furthermore, this application also proposes that, in the dynamic key negotiation sub-step, the device fingerprint information of the energy storage device terminal be carried during the key exchange process; after verifying the legality of the device fingerprint, the cloud platform completes the key negotiation and establishes a secure transmission channel.

[0021] Specifically: The device fingerprint information is generated by the unique identifier of the terminal device (such as the factory serial number, chip ID, MAC address, etc.) through an irreversible hash algorithm (such as SHA-256). The energy storage device terminal attaches the fingerprint in the handshake message. The cloud platform side matches and verifies the fingerprint information with the fingerprint information recorded in the authorized device database. After successful authentication, the negotiation process is allowed to continue and a session is established.

[0022] By introducing a dynamic session key negotiation mechanism based on a key exchange algorithm between terminal devices and the cloud platform, temporary encryption and periodic renegotiation of the data transmission link are achieved, which effectively improves the system's ability to resist security threats such as replay attacks, key leakage and session hijacking, and enhances the risk resistance and real-time protection capabilities of the communication link.

[0023] Furthermore, this application also proposes that the device fingerprint has been registered in the authorized device database of the cloud platform before the terminal device is deployed, and can be used to support device-level access control.

[0024] Specifically, the authorized device database supports functions such as adding, updating, revoking, and auditing to manage the identity and status of access terminals; once the terminal fingerprint changes, a security alarm or access denial mechanism will be triggered to improve the system's anti-spoofing capability and access security.

[0025] By pre-registering device fingerprint information to the authorized device database of the cloud platform before terminal deployment, a device whitelist mechanism based on trusted fingerprints is realized, establishing a device-level access control system from the source and improving the system's ability to defend against risks such as unauthorized terminal access, identity forgery, and device migration.

[0026] Furthermore, this application also proposes that the secure transmission step further includes a data hierarchical encryption sub-step: The secure transmission steps also include hierarchical data encryption: the running data is divided into sensitive data and ordinary data; the sensitive data is encrypted using a first-strength encryption algorithm based on the session key; the ordinary data is encrypted using a second-strength encryption algorithm, wherein the strength of the first-strength encryption algorithm is higher than that of the second-strength encryption algorithm.

[0027] Specifically, the operational data can be classified and processed at the field level according to its information sensitivity: sensitive data includes, but is not limited to, user identification information (such as user ID), device geographical location, state of charge (SOC), state of health (SOH), fault alarm codes, etc., because they may expose user identity, behavior patterns or device risk status. Therefore, it is preferred to use the AES-256-GCM algorithm with confidentiality and integrity protection capabilities for high-strength encryption, and transmit it encrypted with a session key generated by dynamic negotiation. Common data may include equipment operating parameters such as voltage, current, ambient temperature, and cycle count. These data are generally low-risk and are preferably transmitted using AES-128, CTR mode, or by relying solely on TLS 1.3-based encrypted links to reduce the burden of encryption and decryption operations and improve system efficiency.

[0028] By introducing a data hierarchical encryption mechanism in the secure transmission process, differentiated encryption protection of runtime data based on sensitivity levels is achieved. This not only provides stronger security for highly sensitive fields (such as user identity, device location, and fault status), but also optimizes encryption and decryption processing efficiency while ensuring data confidentiality, reducing system resource consumption and response latency.

[0029] Furthermore, this application also proposes that, in the data processing step, the data permission tag is structured information containing a list of data fields that the user role is allowed to access; In the dynamic display step, the dynamic visualization rendering generates a visual content view that matches the user role from a unified data source based on the data permission tags.

[0030] Specifically: The data permission tags can be described using a structured data format, preferably dynamically generated in JSON format. Their content includes, but is not limited to, user identity, role type, organization affiliation, role level, and corresponding field access permissions.

[0031] The permission tag generation logic can be dynamically invoked by the cloud platform's permission policy engine after successful user authentication. It matches rules based on the user's bound role and access scenario, and outputs the corresponding field permission set. The system supports version management and real-time updates of permission tags to adapt to data access strategies for multiple users, multiple roles, and multiple scenarios.

[0032] Before rendering, the dynamic visualization rendering module parses the content of the permission tags and, based on this, filters out the data fields that the current user can access from the decrypted unified data source, binds them as needed, and generates a personalized interface.

[0033] The displayed results may include, but are not limited to, UI components such as numerical cards (KPI indicators), line charts, bar charts, real-time monitoring curves, alarm panels, and operation overview views, which are automatically generated by the system based on field dimensions and chart binding rules.

[0034] In addition, the system supports setting different data refresh frequencies, chart interaction capabilities, download permissions, and export functions based on permission tags, ensuring that users can perform "what you see is what you get" data operations within their permission scope, and improving the security, clarity, and consistency of the display.

[0035] By introducing structured data permission tags dynamically generated based on user roles and driving field filtering and view control in the visualization rendering process, differentiated information display under a unified data source is achieved. This not only ensures the minimum necessary principle for data access but also improves the display accuracy and operational security in multi-role and multi-terminal scenarios.

[0036] Furthermore, this application also proposes that the dynamic display step further includes a watermark addition sub-step: An invisible watermark, generated based on user identity information and timestamps, is embedded in the user interface for information traceability.

[0037] Specifically, in the watermarking sub-step during the visualization rendering process, the system generates a unique, invisible identifier for the current user. This identifier consists of the user's login account identifier (i.e., the user ID) and the current access timestamp, and is used to generate a watermark value through encryption and compression algorithms. This watermark value is embedded into the image layer or DOM background of the user's visual interface without affecting the interface's visual experience and interactive performance. It is rendered along with dynamic content such as charts and cards, ensuring that an extractable traceable identifier is retained in user screenshots, screen recordings, or export operations. The watermark is used to record user data access behavior, enabling the tracking of leaks of sensitive information and the identification of responsibility for such leaks.

[0038] By embedding an invisible watermark generated based on user identity and access time into the user interface, the system achieves source identification capabilities for data visualization content during access, screenshotting, and export operations. This enhances data leakage tracking methods and the attribution of responsibility for user operations, thereby improving the overall data security of the system.

[0039] Furthermore, this application also proposes that the watermark addition sub-step is implemented through front-end image processing or style injection technology, embedding the watermark information as a background into the document object model of the visual interface.

[0040] Specifically: The watermark embedding method includes, but is not limited to, the following two: One approach is a front-end image processing method based on Canvas image drawing technology, which embeds the generated watermark value in a low-contrast form into charts, image areas, or other visual component layers, making it difficult to detect and stable to retain. Another approach is to use CSS style injection technology to attach watermark information to DOM elements, such as div, svg, and canvas background images, as background textures or transparent patterns, thereby achieving page-level traceable overlay.

[0041] The above-mentioned method uses front-end image processing or style injection technology to conceal watermark information into the document object model (DOM) structure of the visual interface. This allows the watermark to be rendered and exported along with the page content without interfering with the user interface. It has good anti-erasure and extractability, effectively improving the information traceability and security protection of the data display layer.

[0042] Secondly, this application proposes a secure data transmission and display system for energy storage systems, comprising: The data acquisition module, deployed at the terminal of the energy storage device, is used to collect operational data; A secure transmission module is used to transmit the collected operational data to the cloud platform using dynamic encryption. The data processing module, located on the cloud platform, is used to decrypt and perform permission analysis on the received data, and generate corresponding data permission tags based on the current user's role. The dynamic display module is used to filter out the data that is allowed to be accessed based on the data permission tags and perform dynamic visualization rendering to display it on the user interface.

[0043] Specifically: The data acquisition module is deployed in the local control unit (such as BMS or EMS) of the energy storage system and has Modbus, CAN or Ethernet communication interfaces for collecting operating data. The operating data may include, but is not limited to, battery pack voltage, current, state of charge (SOC), state of health (SOH), ambient temperature, cycle count, fault alarm codes, user ID and device geographical location, etc. The acquisition supports timed sampling with a period of 10 seconds and has an abnormal trigger upload mechanism.

[0044] The secure transmission module employs a multi-layered encryption structure to protect data from the terminal device to the cloud platform. It includes: The dynamic key negotiation mechanism negotiates the session key through the ECDHE (such as NISTP-256) algorithm. The key is valid for 5 minutes and is automatically renewed upon expiration. The device fingerprint verification mechanism is used to confirm the identity of the terminal. The fingerprint is generated by hashing the unique identification information and is pre-registered in the cloud platform's authorized database. Segmented link protection mechanism: TLS 1.3 or mTLS is used from the terminal to the dynamic encryption gateway, dynamic token mechanism is used from the gateway to the edge node, and OAuth 2.0 client credential authentication and TLS encrypted transmission are used from the edge node to the cloud platform; end-to-end encryption and link-level protection are supported simultaneously.

[0045] The data processing module is deployed in the data service area of ​​the cloud platform and has the capabilities of data decryption, permission judgment, and field filtering. It can generate structured data permission tags based on user login status, role information, and organizational affiliation. The preferred tag format is JSON. The data permission tags drive subsequent visualization rendering, export control, and interface filtering, enabling secure access and fine-grained management for multiple roles.

[0046] The dynamic display module is compatible with web browsers, large-screen industrial terminals, and mobile application environments. It can differentiate the rendering of visible fields, refresh rate, and interaction granularity based on permission tags. It supports the automatic generation of component-based charts, such as KPI indicator cards, line charts, and alarm panels. It also incorporates a watermarking function. The system generates an invisible watermark based on user identity and access timestamp, using front-end Canvas graphics processing or CSS style injection to embed it into the DOM background or image area for data access tracing and leakage tracking.

[0047] Compared with the prior art, the present invention has the following beneficial effects: Firstly, it achieves end-to-end multi-layered security protection for energy storage operation data, enhancing system communication security and attack resistance. This invention constructs a secure transmission layer consisting of terminal devices, a dynamic encryption gateway, edge computing nodes, and a cloud platform, forming a multi-layered protection mechanism of "segmented encryption + session key + device fingerprint verification." Compared to traditional TLS static encryption, dynamic key negotiation supports periodic updates of session keys, effectively resisting replay attacks and man-in-the-middle attacks; the device fingerprint mechanism ensures unique access, significantly improving device-level security authentication capabilities.

[0048] Secondly, it implements hierarchical encryption processing of operational data, balancing the protection of sensitive fields with system processing efficiency. This invention distinguishes operational data into sensitive data and ordinary data based on field sensitivity, and encrypts them respectively using AES-256-GCM and AES-128 or link encryption. This enhances the protection strength of high-value information while avoiding over-encryption that could lead to system processing bottlenecks, thus optimizing the consumption of computing resources on the edge side.

[0049] Third, it implements data display control based on structured permission tags, improving access accuracy and multi-role adaptability. This invention introduces JSON structured permission tags, dynamically generating field access strategies based on user roles, organization affiliation, and access scenarios. This achieves a precise access control mechanism of "visible by role" under a unified data source, supporting differentiated rendering for multiple roles and terminals, effectively solving the problems of "full field exposure" or "functional fragmentation" in traditional displays.

[0050] Fourth, it supports a traceable invisible watermarking mechanism to enhance the information security of the data presentation layer.

[0051] During the visualization process, the system dynamically embeds an invisible watermark generated based on login identity and access time for each user. Layer-level embedding is achieved using Canvas graphics processing or CSS injection, which does not affect the display experience while enabling the tracking and accountability of access behavior, filling the security gap of traditional front-end display that cannot trace the source.

[0052] Fifth, the system architecture is modular and the communication is standardized, giving it good engineering adaptability and implementation capabilities.

[0053] The solution of this invention supports the connection between BMS / EMS and upper-layer cloud platforms through standard interfaces such as Modbus, CAN, and Ethernet. The key modules have clear boundaries and the interface standards are unified. It can be deployed on existing energy storage platforms as needed without large-scale modification, and has good scalability and engineering promotion value. Attached Figure Description

[0054] Figure 1This is a schematic diagram of the secure transmission and display method for energy storage system data according to this application.

[0055] Figure 2 This is a schematic diagram of the secure transmission and display system for energy storage system data according to this application.

[0056] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation

[0057] Example: In existing technologies, energy storage systems typically employ static encryption mechanisms and standardized display templates for operational data transmission. The system design often overlooks the differences in data access across multiple roles and scenarios. Mainstream solutions rely heavily on encrypted links based on SSL / TLS protocols and unified access control logic on the server side. Their transmission keys are generally long-term fixed certificates or static configurations, lacking dynamic negotiation capabilities. Once the key is exposed, the entire communication data will be compromised, posing an extremely high security risk. Simultaneously, the display layer usually uses fixed templates, lacking dynamic adaptation to user roles, data sensitivity levels, and other dimensions, resulting in coarse permission distinctions and redundant or incomplete displayed content.

[0058] Furthermore, while some solutions introduce role-based hierarchical strategies and access whitelist mechanisms, in actual operation, manual maintenance of permission configuration files is still required, resulting in untimely updates and a high error rate.

[0059] To address the aforementioned issues, the inventors recognized the need to construct a more secure and intelligent data transmission and display architecture. On one hand, a dynamic key negotiation mechanism should be introduced to generate temporary keys in each communication session, enabling symmetric encrypted communication and periodic key rotation. On the other hand, personalized watermarks should be generated based on user identity fingerprints and access times, embedded in the display interface for invisible traceability, ensuring that any data leakage can be traced back to the source of responsibility. Simultaneously, combined with a data permission tagging mechanism, access control should be refined to the field and content block levels, achieving configurable and scalable display content management. Through these improvements, system flexibility and auditing capabilities can be enhanced while ensuring security.

[0060] Therefore, as Figure 1 As shown, this application proposes a method for secure transmission and display of energy storage system data, including the following steps: data acquisition step, secure transmission step, data processing step, and dynamic display step. By constructing an end-to-end encrypted link, a dynamic key negotiation mechanism, and a structured permission tag system, the above achieves multi-dimensional linkage protection of energy storage system operation data in terms of transmission security, access control, and visualization display, which not only improves information security but also ensures the flexibility of data use and traceability in multi-role scenarios.

[0061] The data acquisition step involves collecting operational data from the energy storage device terminal. The data acquisition steps specifically include, but are not limited to: operating status parameters of the energy storage device (e.g., battery pack voltage, current, state of charge (SOC), state of health (SOH), temperature, cycle count, fault alarm code, etc.), device ownership identification information (e.g., customer number, user ID bound to the device), and contextual information (e.g., device geographical location). The data acquisition method can be Modbus RTU / TCP, which supports parallel state change-triggered reporting based on a sampling period of approximately 10 seconds. The above operational data is acquired and transmitted by the energy storage device terminal.

[0062] Compared to existing technologies, traditional solutions use a fixed-period polling method, which cannot detect dynamic changes in the operating status of energy storage devices, resulting in delayed event reporting and loss of critical status information. This solution introduces a dual-channel acquisition mechanism of "fixed period + status trigger," which ensures complete acquisition of basic information while enabling rapid response to sudden states such as faults and anomalies.

[0063] The secure transmission step involves transmitting the collected operational data to the cloud platform through a secure transmission layer, wherein the secure transmission layer employs a dynamic encryption method. The secure transmission steps are as follows: the secure transmission layer includes a terminal set up on the field side, a dynamic encryption gateway, and an edge computing node. The running data is transmitted securely in segments along the path from the terminal device, the dynamic encryption gateway, the edge computing node to the cloud platform.

[0064] The transmission path can be constructed as a topology consisting of terminal devices, dynamic encryption gateways, edge computing nodes, and a cloud platform, with encryption and authentication mechanisms established for each link segment: The TLS 1.3 or mTLS protocol is preferred between the terminal and the dynamic encryption gateway; The dynamic encryption gateway to the edge computing node uses a dynamic token mechanism or symmetric key negotiation. Edge computing nodes should ideally connect to the cloud platform using OAuth2.0 client credentials and TLS encryption. End-to-end encryption and segmented link protection can coexist to balance performance, security, and flexibility.

[0065] Compared to existing technologies, traditional solutions often employ single-link encryption, typically based on static key configuration, lacking dynamic negotiation and multi-link segmentation protection capabilities. This results in weak security mechanisms, susceptible to replay attacks or key leaks. This application constructs a multi-level topology of "terminal device—dynamic encryption gateway—edge computing node—cloud platform," and introduces TLS 1.3, mTLS, OAuth 2.0, and dynamic token mechanisms into each link segment. This implements a security strategy of segmented authentication and encrypted transmission of runtime data, improving the data tamper resistance and access reliability of the energy storage system in complex network environments. The data processing steps include decrypting and performing permission analysis on the received data on the cloud platform, and generating corresponding data permission tags based on the current user's role. The data processing steps are as follows: the cloud platform first decrypts the received data, and then dynamically generates structured data permission tags based on the logged-in user's role information. These tags define the range of data fields the user can access and drive subsequent rendering and interface output.

[0066] Compared to existing technologies, traditional energy storage systems often employ fixed permission mapping or preset templates in their data processing workflows. These methods lack dynamic permission determination capabilities based on user context, failing to achieve field-level access isolation and posing risks of permission redundancy or information leakage. This application integrates data decryption and permission tag generation mechanisms on the cloud platform side, achieving field-level access control for operational data in multi-role access scenarios. This ensures that different users can only see the minimum necessary information corresponding to their roles, balancing system security and usage flexibility.

[0067] The dynamic display step involves filtering out the data that is allowed to be accessed from the decrypted data based on the data permission tags, performing dynamic visualization rendering, and displaying it on the user interface.

[0068] The dynamic display steps are as follows: the display terminal can be a web terminal, a mobile terminal, or an industrial visualization terminal; the display terminal filters user-visible fields from the unified decrypted data source based on the data permission tags, and generates views such as line charts, KPI indicator cards, and alarm pop-ups as needed for dynamic display.

[0069] Compared to existing technologies, traditional display solutions are generally based on fixed templates or static interface outputs, failing to achieve personalized displays based on user permissions. This results in data redundancy, poor user experience, and severe coupling between front-end and back-end code, making it difficult to adapt to real-world scenarios with concurrent access from multiple terminals and roles. This application introduces a permission-tag-driven dynamic display mechanism. The dynamic display steps dynamically filter data fields by parsing permission tags and automatically match and generate views such as line charts, KPI indicator cards, and alarm pop-ups. This enables personalized dynamic display of data under different roles and terminals, enhancing the system's adaptability and interaction efficiency in multi-organization and multi-application scenarios.

[0070] This application further proposes that the secure transmission step includes a dynamic key negotiation sub-step: When establishing a communication session between the terminal device and the cloud platform, a one-time session encryption key is generated through negotiation based on a key exchange algorithm; the session encryption key has a predetermined limited validity period and needs to be renegotiated after the key expires.

[0071] Specifically: When a terminal device establishes a communication session with the cloud platform, a temporary symmetric encryption key is negotiated and generated using the elliptic curve Diffie-Hellman NISTP-256 algorithm. This key is used to encrypt all data transmission content in the session. This session key is valid only once, with a default validity period of 5 minutes. After the expiration, the terminal will automatically initiate a renegotiation.

[0072] Compared with existing technologies, traditional secure transmission mechanisms mostly employ static keys or long-term encryption configurations, which suffer from problems such as untimely key updates, excessively long session persistence, and weak resistance to attacks. Especially in multi-terminal concurrent and public network transmission environments, there are potential risks of replay attacks, session hijacking, and key leakage. This application introduces a dynamic session key negotiation mechanism based on a key exchange algorithm between the terminal device and the cloud platform in the dynamic key negotiation sub-step. This achieves temporary encryption and periodic renegotiation of the data transmission link, effectively improving the system's ability to resist security threats such as replay attacks, key leakage, and session hijacking, and enhancing the resilience and real-time protection capabilities of the communication link.

[0073] This application further proposes that, in the dynamic key negotiation sub-step, the device fingerprint information of the energy storage device terminal be carried during the key exchange process; after verifying the legality of the device fingerprint, the cloud platform completes the key negotiation and establishes a secure transmission channel.

[0074] Specifically: The device fingerprint information is generated by the unique identifier of the terminal device (such as the factory serial number, chip ID, MAC address, etc.) through an irreversible hash algorithm (such as SHA-256). The energy storage device terminal attaches the fingerprint in the handshake message. The cloud platform side matches and verifies the fingerprint information with the fingerprint information recorded in the authorized device database. After successful authentication, the negotiation process is allowed to continue and a session is established.

[0075] Unlike existing technologies that rely solely on encryption algorithms to establish secure transmission sessions, this application further proposes introducing a device fingerprint verification mechanism during dynamic key negotiation to enhance the security of terminal authentication. By embedding the device fingerprint verification process into the key exchange, this application not only achieves dynamic key negotiation based on the ECC algorithm but also simultaneously verifies the trusted identity of the terminal, effectively preventing unauthorized counterfeit devices from accessing the system. Combined with the short-lived nature of one-time keys, temporary encryption and periodic renegotiation of the data transmission link are achieved, significantly improving the system's security capabilities against replay attacks, key leaks, and session hijacking, and strengthening the integrity and reliability of the transmission channel.

[0076] This application further proposes that the device fingerprint is registered to the authorized device database of the cloud platform before the terminal device is deployed, and can be used to support device-level access control.

[0077] Specifically: The authorized device database supports functions such as adding, updating, revoking, and auditing to manage the identity and status of access terminals. Once the fingerprint on the terminal side changes, a security alarm or access denial mechanism will be triggered to improve the system's anti-spoofing capability and access security.

[0078] Compared with existing technologies, traditional solutions mostly rely on authentication methods based on usernames and passwords, static credentials, or device identifiers, which have security risks such as easy credential leakage, difficulty in preventing device spoofing, and inability to respond in real time to identity tampering. At the same time, they lack unified management and dynamic auditing of the identity status of access devices, making it difficult to support the fine-grained access control of large-scale heterogeneous energy storage terminals. This application realizes a device whitelist mechanism based on trusted fingerprints by pre-registering device fingerprint information to the authorized device database of the cloud platform before terminal deployment. This establishes a device-level access control system from the source and improves the system's ability to defend against risks such as unauthorized terminal access, identity forgery, and device migration.

[0079] This application further proposes that the secure transmission step also includes a data hierarchical encryption sub-step: The secure transmission steps also include hierarchical data encryption: the running data is divided into sensitive data and ordinary data; the sensitive data is encrypted using a first-strength encryption algorithm based on the session key; the ordinary data is encrypted using a second-strength encryption algorithm, wherein the strength of the first-strength encryption algorithm is higher than that of the second-strength encryption algorithm.

[0080] Specifically: The operational data can be classified and processed at the field level according to its information sensitivity: sensitive data includes, but is not limited to, user identification information (such as user ID), device geographical location, state of charge (SOC), state of health (SOH), fault alarm codes, etc., because they may expose user identity, behavior patterns or device risk status. Therefore, it is preferred to use the AES-256-GCM algorithm with confidentiality and integrity protection capabilities for high-strength encryption, and transmit it encrypted with a session key generated by dynamic negotiation. Common data may include equipment operating parameters such as voltage, current, ambient temperature, and cycle count. These data are generally low-risk and are preferably transmitted using AES-128, CTR mode, or by relying solely on TLS 1.3-based encrypted links to reduce the burden of encryption and decryption operations and improve system efficiency.

[0081] Compared to existing technologies, traditional solutions typically employ a uniform encryption strategy for overall processing of operational data, failing to dynamically allocate encryption strength based on data sensitivity. This can lead to insufficient protection for highly sensitive data and potential performance waste due to over-encryption. Furthermore, sensitive fields are easily targeted during transmission, and existing solutions struggle to achieve field-level risk isolation and fine-grained encryption control. This application introduces a hierarchical data encryption mechanism into the secure transmission process, enabling differentiated encryption protection of operational data based on sensitivity levels. This not only provides stronger security for highly sensitive fields (such as user identity, device location, and fault status) but also optimizes encryption and decryption efficiency while ensuring data confidentiality, reducing system resource consumption and response latency.

[0082] This application further proposes that, in the data processing step, the data permission label is structured information containing a list of data fields that the user role is allowed to access; In the dynamic display step, the dynamic visualization rendering generates a visual content view that matches the user role from a unified data source based on the data permission tags.

[0083] Specifically: The data permission tags can be described using a structured data format, preferably dynamically generated in JSON format. Their content includes, but is not limited to, user identity, role type, organization affiliation, role level, and corresponding field access permissions. An example format is as follows: {role:"viewer",fields:["voltage","soc","temperature"]}. The permission tag generation logic can be dynamically invoked by the cloud platform's permission policy engine after successful user authentication. It matches rules based on the user's bound role and access scenario, and outputs the corresponding field permission set. The system supports version management and real-time updates of permission tags to adapt to data access strategies for multiple users, multiple roles, and multiple scenarios.

[0084] Before rendering, the dynamic visualization rendering module parses the content of the permission tags and, based on this, filters out the data fields that the current user can access from the decrypted unified data source, binds them as needed, and generates a personalized interface.

[0085] The displayed results may include, but are not limited to, UI components such as numerical cards (KPI indicators), line charts, bar charts, real-time monitoring curves, alarm panels, and operation overview views, which are automatically generated by the system based on field dimensions and chart binding rules.

[0086] In addition, the system supports setting different data refresh frequencies, chart interaction capabilities, download permissions, and export functions based on permission tags, ensuring that users can perform "what you see is what you get" data operations within their permission scope, and improving the security, clarity, and consistency of the display.

[0087] Compared to existing technologies, traditional energy storage systems largely rely on fixed roles and static page configurations for data access control, failing to achieve field-level dynamic control and real-time adaptation of visual content. This is particularly problematic in multi-tenant or multi-organizational scenarios, leading to issues such as inflexible access control adjustments, high data leakage risks, and redundant front-end rendering. This application addresses this by introducing structured data permission tags dynamically generated based on user roles, driving field filtering and view control during the visualization rendering process. This enables differentiated information display under a unified data source, ensuring the minimum necessary principle for data access while improving display accuracy and operational security in multi-role, multi-terminal scenarios.

[0088] This application further proposes that the dynamic display step also includes a watermark addition sub-step: embedding an invisible watermark generated based on user identity information and timestamp in the user interface for information traceability.

[0089] Specifically: In the watermarking sub-step during the visualization rendering process, the system generates a unique, invisible identifier for the current user. This identifier consists of the user's login account identifier (i.e., the user ID) and the current access timestamp, and is used to generate a watermark value through encryption and compression algorithms. This watermark value is embedded into the image layer or DOM background of the user's visual interface without affecting the interface's visual experience or interactive performance. It is rendered along with dynamic content such as charts and cards, ensuring that an extractable traceable identifier is retained in user screenshots, screen recordings, or export operations. The watermark is used to record user data access behavior, enabling the tracking of leaks of sensitive information and the identification of responsibility for such leaks.

[0090] Compared to existing technologies, traditional energy storage system user interfaces typically lack the ability to trace data access behavior. Especially in user data visualization scenarios, they cannot effectively track operations such as screenshotting and forwarding sensitive information, making it difficult to pinpoint the responsible party after data leakage. This application addresses this by embedding an invisible watermark generated based on user identity and access time into the user interface. This enables traceability and identification of data visualization content during access, screenshotting, and export operations, enhancing data leakage tracking methods and the attribution of responsibility for user actions, thereby improving the overall data security of the system.

[0091] This application further proposes that the watermark addition sub-step be implemented through front-end image processing or style injection technology, embedding the watermark information as a background into the document object model of the visual interface.

[0092] Specifically: The watermark embedding method includes, but is not limited to, the following two: One is a front-end image processing method based on Canvas image drawing technology, which embeds the generated watermark value into the chart, image area or other visual component layer in a low-contrast form, which has the characteristics of being difficult to detect and stable retention. Another approach is based on CSS style injection technology, which attaches watermark information to DOM elements, such as div, svg, and canvas background images, in the form of background textures or transparent patterns, to achieve page-level traceable coverage.

[0093] Compared to existing technologies, traditional visual interfaces generally employ static watermark layer overlays or external plugins for watermark protection. These methods suffer from poor compatibility, susceptibility to obscuring, and inability to adapt to dynamically rendered content, making it difficult to achieve efficient traceability of user behavior. This application, by employing front-end image processing or style injection techniques, conceals watermark information within the document object model (DOM) structure of the visual interface. This allows the watermark to be rendered and exported along with the page content without interfering with the user interface, exhibiting excellent resistance to erasure and extractability. This effectively enhances the information traceability and security strength of the data presentation layer.

[0094] like Figure 2 As shown, this application proposes a secure data transmission and display system for energy storage systems, characterized by comprising: The data acquisition module, deployed at the terminal of the energy storage device, is used to collect operational data; A secure transmission module is used to transmit the collected operational data to the cloud platform using dynamic encryption. The data processing module, located on the cloud platform, is used to decrypt and perform permission analysis on the received data, and generate corresponding data permission tags based on the current user's role. The dynamic display module is used to filter out the data that is allowed to be accessed based on the data permission tags and perform dynamic visualization rendering to display it on the user interface.

[0095] Compared with existing technologies, the secure transmission and display system for energy storage system data proposed in this application effectively improves the confidentiality and anti-attack capability of data in the transmission link by introducing a dynamic encryption transmission mechanism between the terminal side and the cloud platform; by constructing a user role-based permission tag mechanism, it realizes fine-grained access control of data after decryption, overcoming the problem of coarse permission management and easy unauthorized access in traditional systems.

[0096] The data acquisition module is deployed in the local control unit (such as BMS or EMS) of the energy storage system and has Modbus, CAN or Ethernet communication interfaces for collecting operational data. The operational data may include, but is not limited to, battery pack voltage, current, state of charge (SOC), state of health (SOH), ambient temperature, cycle count, fault alarm codes, user ID and device geographical location. The acquisition supports timed sampling with a period of 10 seconds and has an abnormal trigger upload mechanism.

[0097] Compared to existing technologies, traditional energy storage systems mostly rely on static communication interfaces for data acquisition, with fixed sampling periods and a lack of flexible anomaly detection and triggering mechanisms. Furthermore, the types of parameters collected are limited, often only covering basic electrical indicators such as voltage and current, making it difficult to support the needs of refined equipment status management and remote diagnostics. The data acquisition module of this application significantly outperforms existing technologies in terms of data comprehensiveness, sampling flexibility, protocol compatibility, and response efficiency, providing higher-quality data support for subsequent data processing, security analysis, and visualization.

[0098] The secure transmission module employs a multi-layered encryption structure to protect data from the terminal device to the cloud platform. This includes: The dynamic key negotiation mechanism negotiates the session key through the ECDHE (such as NISTP-256) algorithm. The key is valid for 5 minutes and is automatically renewed upon expiration. The device fingerprint verification mechanism is used to confirm the identity of the terminal. The fingerprint is generated by hashing the unique identification information and is pre-registered in the cloud platform's authorized database. Segmented link protection mechanism: TLS 1.3 or mTLS is used from the terminal to the dynamic encryption gateway, dynamic token mechanism is used from the gateway to the edge node, and OAuth 2.0 client credential authentication and TLS encrypted transmission are used from the edge node to the cloud platform; end-to-end encryption and link-level protection are supported simultaneously.

[0099] Compared to existing technologies, traditional data security transmission schemes for energy storage systems mostly employ fixed keys or static authentication mechanisms, relying on a single-link encryption protocol (such as TLS) during transmission. This results in high risks of key leakage, weak terminal identity verification, and single points of failure in the link, making it difficult to meet the security requirements of multi-node, multi-environment deployments. The secure transmission module of this application significantly outperforms existing technologies in key lifecycle management, trusted terminal authentication, link segmentation encryption, and security redundancy design. It improves the data transmission security and attack resistance of energy storage systems in cross-gateway and cross-node scenarios, and possesses stronger industrial deployability and compliance.

[0100] The data processing module, deployed in the cloud platform's data service area, possesses data decryption, permission judgment, and field filtering capabilities. It can generate structured data permission tags based on user login status, role information, and organizational affiliation. The preferred tag format is JSON. These data permission tags drive subsequent visualization rendering, export control, and interface filtering, enabling secure access and refined management for multiple roles.

[0101] Compared to existing technologies, traditional energy storage system data processing solutions mostly focus on data reception and simple display, lacking a fine-grained control mechanism for user permissions. Data is typically displayed using fixed views or static field mappings, making it difficult to achieve dynamic permission management in multi-role and multi-organizational scenarios, and posing risks such as data overexposure, role conflicts, and permission penetration. This application achieves a higher level of permission isolation and controllable display at the data processing end through a "structured permission label + multi-dimensional role recognition + data field filtering-driven mechanism," significantly improving the data security, management accuracy, and user experience of energy storage systems.

[0102] The dynamic display module is compatible with web browsers, large-screen industrial terminals, and mobile application environments. It can differentiate the rendering of visible fields, refresh rate, and interaction granularity based on permission tags. It supports the automatic generation of component-based charts, such as KPI indicator cards, line charts, and alarm panels. It also incorporates a watermarking function. The system generates an invisible watermark based on user identity and access timestamp, using front-end Canvas graphics processing or CSS style injection to embed it into the DOM background or image area for data access tracing and leakage tracking.

[0103] Compared to existing technologies, traditional energy storage systems primarily focus on data reception and simple display, lacking sophisticated control mechanisms for user permissions. Data is typically displayed using fixed views or static field mappings, making dynamic permission management difficult across multiple roles and organizations, and leading to risks such as data overexposure, role conflicts, and permission penetration. This application addresses these issues by constructing an integrated display mechanism that combines multi-terminal adaptation, permission rendering, and security tracking. This mechanism achieves a refined interactive experience across multiple scenarios while ensuring information security, effectively solving the key problems of static display, rudimentary management, and lack of data traceability in existing technologies.

[0104] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. A method for secure transmission and display of data in an energy storage system, characterized in that, Includes the following steps: Data acquisition steps: Collect operational data from the energy storage device terminal; Secure transmission steps: The collected operational data is transmitted to the cloud platform through a secure transmission layer, wherein the secure transmission layer uses dynamic encryption. Data processing steps: The received data is decrypted and permissions are analyzed on the cloud platform, and corresponding data permission tags are generated according to the current user's role; Dynamic display steps: Based on the data permission tags, filter out the data that is allowed to be accessed from the decrypted data, perform dynamic visualization rendering, and display it on the user interface.

2. The method for secure transmission and display of energy storage system data according to claim 1, characterized in that, The secure transmission step includes a dynamic key negotiation sub-step: When establishing a communication session between the terminal device and the cloud platform, a one-time session encryption key is generated through negotiation based on a key exchange algorithm; the session encryption key has a predetermined limited validity period and needs to be renegotiated after the key expires.

3. The method for secure transmission and display of energy storage system data according to claim 2, characterized in that, In the dynamic key negotiation sub-step, the device fingerprint information of the energy storage device terminal is carried during the key exchange process; after verifying the legality of the device fingerprint, the cloud platform completes the key negotiation and establishes a secure transmission channel.

4. The method for secure transmission and display of energy storage system data according to claim 3, characterized in that, The device fingerprint is registered in the cloud platform's authorized device database before the terminal device is deployed, and can be used to support device-level access control.

5. The method for secure transmission and display of energy storage system data according to claim 2, characterized in that, The secure transmission step also includes a data hierarchical encryption sub-step: The secure transmission steps also include hierarchical data encryption, which distinguishes the running data into sensitive data and ordinary data; the sensitive data is encrypted using a first-strength encryption algorithm based on the session key; and the ordinary data is encrypted using a second-strength encryption algorithm, wherein the strength of the first-strength encryption algorithm is higher than that of the second-strength encryption algorithm.

6. The method for secure transmission and display of energy storage system data according to claim 1, characterized in that, In the data processing step, the data permission label is structured information containing a list of data fields that the user role is allowed to access.

7. The method for secure transmission and display of energy storage system data according to claim 1, characterized in that, In the dynamic display step, the dynamic visualization rendering generates a visual content view that matches the user role from a unified data source based on the data permission tags.

8. The method for secure transmission and display of energy storage system data according to claim 1, characterized in that, The dynamic display step also includes a watermark addition sub-step: An invisible watermark, generated based on user identity information and timestamps, is embedded in the user interface for information traceability.

9. The method for secure transmission and display of energy storage system data according to claim 8, characterized in that, The watermark addition sub-step is implemented through front-end image processing or style injection technology, embedding the watermark information as a background into the document object model of the visual interface.

10. A secure data transmission and display system for an energy storage system, characterized in that, include: The data acquisition module, deployed at the terminal of the energy storage device, is used to collect operational data; A secure transmission module is used to transmit the collected operational data to the cloud platform using dynamic encryption. The data processing module, located on the cloud platform, is used to decrypt and perform permission analysis on the received data, and generate corresponding data permission tags based on the current user's role. The dynamic display module is used to filter out the data that is allowed to be accessed based on the data permission tags and perform dynamic visualization rendering to display it on the user interface.

Images