Substation E key communication lockset management method and system

Abstract

The invention discloses a transformer substation E-key lock management method and system. The method comprises the steps that an operation order is converted into a structured sequence diagram through operation sequence modeling; dynamic permission activation is realized based on a state machine model; performing five-prevention logic real-time verification in linkage with a substation monitoring system; digital signature and bidirectional authentication are adopted to ensure instruction security; local decision execution is realized through intelligent verification of the lockset; a sequence state is automatically advanced based on an operation progress. The system comprises a management background, an intelligent mobile terminal and an intelligent electronic lock, and a complete closed-loop management system is formed. According to the invention, deep binding of lock operation and substation operation processes is realized, the technical problems of extensive management and disjunction with safety regulations of a traditional lock are solved, and the operation safety, the operation and maintenance efficiency and the system reliability are remarkably improved.

Description

Technical Field

[0001] This invention belongs to the field of substation management technology, and in particular relates to a method and system for managing E-key locks in substations. Background Technology

[0002] As a critical node in the power system, the safety of equipment operation in substations directly affects the stable operation of the power grid. Traditional substation lock management primarily uses mechanical locks in conjunction with physical keys, which has the following technical drawbacks:

[0003] Inefficient access control: Most existing electronic lock systems use static access control, which cannot accurately correspond to specific operation tasks and procedures, making it easy to lead to unauthorized operations.

[0004] Insufficient security verification: Lock opening is based solely on identity authentication and lacks linkage verification with the actual operating status of the substation, which cannot effectively prevent misoperation.

[0005] The operational process is disconnected: Lock management is separate from the operation ticket system, and operators need to apply for additional permissions, which is cumbersome and prone to errors.

[0006] Inflexible emergency response: In abnormal situations such as communication interruptions, there is a lack of effective emergency operation mechanisms, which affects operational efficiency.

[0007] Audit traceability is difficult: operation records are scattered, making it difficult to form a complete operation chain, which is not conducive to accident analysis and accountability.

[0008] While some intelligent lock management systems have emerged in the existing technology, most of them only implement basic identity authentication functions and fail to be deeply integrated with the operation process and safety requirements of substations, thus failing to meet the stringent operational safety requirements of intelligent substations. Summary of the Invention

[0009] This invention adopts a conditional authorization mechanism based on the dynamic evolution of operation sequences and the linkage of real-time security status. Through operation sequence modeling, dynamic permission activation, real-time security linkage verification, two-way authentication and instruction signing, intelligent lock verification and execution, sequence status advancement and locking, etc., it realizes intelligent, refined and secure lock management.

[0010] In a first aspect, the present invention provides a method for managing E-key access locks in substations, wherein the method establishes a conditional authorization mechanism based on the dynamic evolution of operation sequences and the linkage of real-time security status, including:

[0011] The management backend obtains structured operation tasks from the substation operation ticket system, parses and generates an operation sequence diagram, where each node contains the target equipment, the corresponding lock identifier and safety verification rules, and the directed edges between nodes define the operation order dependency relationship;

[0012] Based on the operation sequence diagram, a state machine model is used to manage the current operation progress. The operation permission of the lock corresponding to a certain operation node is dynamically activated only when all the preceding nodes of a certain operation node have been completed and passed the security check, and an operation certificate with time constraints is generated.

[0013] Before authorization, the management backend queries the electrical status of the target equipment in the substation monitoring system in real time and executes the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations.

[0014] When an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction, which includes an operation sequence ID, current node ID, target lock ID, timestamp, and security status summary; a secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication.

[0015] After receiving the instruction, the electronic lock independently verifies the validity of the digital signature, the timeliness of the operation certificate, and the legality of the security status summary. Once the verification is successful, it executes the unlocking action and transmits the operation result and lock status back to the management backend in real time.

[0016] Once the management backend confirms that the unlocking operation is complete, it advances the operation sequence status to the next node and automatically locks the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0017] Secondly, the present invention provides a substation E-key access control system, wherein the method establishes a conditional authorization mechanism based on dynamic evolution of operation sequences and real-time security status linkage, including:

[0018] The parsing module is configured to allow the management backend to obtain structured operation tasks from the substation operation ticket system, parse and generate an operation sequence diagram, where each node contains the target device, the corresponding lock identifier and the safety verification rules, and the directed edges between nodes define the operation order dependency relationship;

[0019] The generation module is configured to manage the current operation progress using a state machine model based on the operation sequence diagram. It will only dynamically activate the operation permission of the lock corresponding to a certain operation node and generate an operation credential with time constraints when all the preceding nodes of a certain operation node have been completed and passed the security check.

[0020] The verification module is configured to query the electrical status of the target equipment in the substation monitoring system in real time before authorization, and execute the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations.

[0021] The management module is configured so that when an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction. The instruction includes an operation sequence ID, a current node ID, a target lock ID, a timestamp, and a security status summary. A secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication.

[0022] The feedback module is configured to independently verify the validity of the digital signature, the timeliness of the operation credential, and the legality of the security status summary after the electronic lock receives the instruction. After the verification is successful, the unlocking action is executed, and the operation result and lock status are fed back to the management backend in real time.

[0023] The output module is configured to advance the operation sequence status to the next node after the management backend confirms that the unlocking operation has been completed, and automatically lock the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0024] Thirdly, an electronic device is provided, comprising: at least one processor, and a memory communicatively connected to the at least one processor, wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the steps of the substation E-key lock management method according to any embodiment of the present invention.

[0025] Fourthly, the present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein when the program instructions are executed by a processor, the processor performs the steps of the substation E-key access lock management method according to any embodiment of the present invention.

[0026] The substation E-key lock management method and system of this application constructs a "process-driven + state-constrained" security protection system through dual protection of operation sequence modeling and real-time verification of five-proof logic. It can minimize misoperation and unauthorized operation. The dynamic permission activation mechanism based on state machine realizes automatic allocation and revocation of permissions, significantly reducing manual intervention. The operation log recording based on blockchain technology realizes tamper-proof security audit of the entire process, providing complete and reliable data support for accident analysis. The system has demonstrated excellent overall performance in actual deployment, providing a complete technical solution for the safe operation and maintenance of smart substations. Attached Figure Description

[0027] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0028] Figure 1 A flowchart of a substation E-key access lock management method provided in an embodiment of the present invention;

[0029] Figure 2 This is a structural block diagram of a substation E-key access lock management system provided in an embodiment of the present invention;

[0030] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0031] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0032] Please see Figure 1 The diagram shows a flowchart of a substation E-key lock management method according to this application.

[0033] like Figure 1 As shown, the substation E-key access lock management method specifically includes the following steps:

[0034] In step S101, the management backend obtains the structured operation task from the substation operation ticket system, parses and generates an operation sequence diagram, where each node contains the target device, the corresponding lock identifier and the safety verification rules, and the directed edges between nodes define the operation order dependency relationship.

[0035] In this step, the natural language description in the operation ticket is parsed, and the operation equipment, operation actions and safety measures entities are extracted through a pre-trained power operation entity recognition model.

[0036] Based on the extracted entities and the substation primary wiring diagram, an operation sequence diagram is automatically constructed, in which the dependencies between nodes include electrical connection relationships, operation logic sequence, and safety interlock relationships;

[0037] Configure differentiated security verification rules for each operation node. These rules include device status constraints, environmental parameter constraints, and operator qualification constraints.

[0038] Step S102: Based on the operation sequence diagram, a state machine model is used to manage the current operation progress. The operation permission of the lock corresponding to a certain operation node is dynamically activated only when all the preceding nodes of a certain operation node have been completed and passed the security check, and an operation certificate with time constraints is generated.

[0039] Step S103: Before authorization, the management backend queries the electrical status of the target equipment in the substation monitoring system in real time and executes the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations.

[0040] In this step, the verification to prevent accidental opening and closing of circuit breakers is carried out: verifying whether the target circuit breaker is in an operable opening and closing state;

[0041] Verification to prevent disconnection switches from being opened or closed under load: Confirm that the load condition meets the operating conditions through real-time load current monitoring;

[0042] Verification to prevent the grounding wire from being connected while the equipment is energized: Verify that the equipment is in a de-voltage state by using voltage transformer data;

[0043] Verification to prevent closing the circuit with the grounding wire connected: Verify the status of the relevant grounding device;

[0044] Verification to prevent accidental entry into live compartments: A comprehensive judgment is made by combining the access control system and the live display device.

[0045] In step S104, when the operator requests to unlock via the mobile terminal, the management backend issues a digitally signed conditional operation instruction, which includes an operation sequence ID, current node ID, target lock ID, timestamp, and security status summary; a secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication.

[0046] In this step, the management backend uses an asymmetric encryption algorithm to generate a digital signature for the operation command and signs it using the backend private key;

[0047] The electronic lock has a pre-installed public key certificate for the management backend, which is used to verify the authenticity of the instruction signature;

[0048] A secure channel is established between the mobile terminal and the electronic lock using an elliptic curve-based key exchange protocol to achieve two-way authentication.

[0049] Step S105: After receiving the instruction, the electronic lock independently verifies the validity of the digital signature, the timeliness of the operation certificate, and the legality of the security status summary. After the verification is successful, it executes the unlocking action and transmits the operation result and lock status back to the management backend in real time.

[0050] In step S106, after the management backend confirms that the unlocking operation is completed, it advances the operation sequence status to the next node and automatically locks the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0051] In this step, the intelligent verification and execution steps of the lock also include an anti-misoperation locking mechanism: the electronic lock has a built-in logic judgment unit that continuously monitors the status changes of associated devices; when the security status does not meet the operating conditions, even if a valid operation command is received, the lock will refuse to perform the unlocking action and will immediately issue an alarm; it supports remote emergency locking function, and authorized personnel can remotely freeze the operation permissions of designated locks.

[0052] In one specific embodiment, the distributed emergency operation mode is as follows: when the network communication between the management backend and the station control layer is interrupted, a local emergency authorization mechanism is activated; the mobile terminal generates an emergency operation credential based on the pre-downloaded encrypted operation sequence and local security policy when the offline verification conditions are met; during the emergency operation, the electronic lock caches the operation records, which are then uploaded to the management backend in batches for auditing and synchronization after communication is restored.

[0053] Specifically, the distributed emergency operation mode includes: mobile terminals periodically synchronizing encrypted operation sequence snapshots and emergency authorization policies from the management backend; in emergency mode, mobile terminals verify the identity of operators through biometric identification and verify local security policies; electronic locks support offline verification of the hash chain validity of emergency operation credentials to ensure the legality and non-repudiation of emergency operations.

[0054] In summary, the method presented in this application constructs a "process-driven + state-constrained" security protection system through dual safeguards of operation sequence modeling and real-time verification of five-prevention logic. This system can minimize misoperations and unauthorized operations. The dynamic permission activation mechanism based on state machines enables automatic allocation and revocation of permissions, significantly reducing manual intervention. The operation log recording based on blockchain technology enables tamper-proof security auditing throughout the entire process, providing complete and reliable data support for accident analysis. In actual deployment, the system demonstrates excellent overall performance and provides a complete technical solution for the safe operation and maintenance of smart substations.

[0055] Please see Figure 2 The diagram shows a structural block diagram of a substation E-key lock management system according to this application.

[0056] like Figure 2 As shown, the substation E-key lock management system 200 includes a parsing module 210, a generation module 220, a verification module 230, a management module 240, a feedback module 250, and an output module 260.

[0057] The parsing module 210 is configured to have the management backend obtain structured operation tasks from the substation operation ticket system, parse and generate an operation sequence diagram, where each node includes the target equipment, the corresponding lock identifier, and safety verification rules, and the directed edges between nodes define the operation sequence dependency relationship; the generation module 220 is configured to manage the current operation progress based on the operation sequence diagram using a state machine model, and dynamically activate the operation permission of the lock corresponding to a certain operation node only when all the preceding nodes of a certain operation node have been completed and passed the safety verification, generating an operation certificate with time constraints; the verification module 230 is configured to have the management backend query the electrical status of the target equipment in the substation monitoring system in real time before authorization, and execute the preset five-prevention logic rule verification, the verification including a comprehensive judgment of the equipment's open / closed status, energized status, and grounding status, to ensure that the operation conditions meet the safety regulations. The management module 240 is configured to issue a digitally signed conditional operation instruction to the management backend when an operator requests unlocking via a mobile terminal. The instruction includes an operation sequence ID, a current node ID, a target lock ID, a timestamp, and a security status summary. A secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication. The feedback module 250 is configured to independently verify the validity of the digital signature, the timeliness of the operation credential, and the legality of the security status summary after receiving the instruction. If the verification is successful, the unlocking action is executed, and the operation result and lock status are fed back to the management backend in real time. The output module 260 is configured to advance the operation sequence status to the next node after the management backend confirms that the unlocking operation is completed, and automatically lock the lock permissions corresponding to the completed node. When an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0058] It should be understood that Figure 2 The modules and references described in the document Figure 1 The steps described in the text correspond to those in the method described above. Therefore, the operations, features, and corresponding technical effects described above also apply to the method described in the text. Figure 2 The various modules in the document will not be described in detail here.

[0059] In other embodiments, the present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein when the program instructions are executed by a processor, the processor performs the substation E-key access lock management method in any of the above method embodiments.

[0060] In one embodiment, the computer-readable storage medium of the present invention stores computer-executable instructions, which are configured as follows:

[0061] The management backend obtains structured operation tasks from the substation operation ticket system, parses and generates an operation sequence diagram, where each node contains the target equipment, the corresponding lock identifier and safety verification rules, and the directed edges between nodes define the operation order dependency relationship;

[0062] Based on the operation sequence diagram, a state machine model is used to manage the current operation progress. The operation permission of the lock corresponding to a certain operation node is dynamically activated only when all the preceding nodes of a certain operation node have been completed and passed the security check, and an operation certificate with time constraints is generated.

[0063] Before authorization, the management backend queries the electrical status of the target equipment in the substation monitoring system in real time and executes the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations.

[0064] When an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction, which includes an operation sequence ID, current node ID, target lock ID, timestamp, and security status summary; a secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication.

[0065] After receiving the instruction, the electronic lock independently verifies the validity of the digital signature, the timeliness of the operation certificate, and the legality of the security status summary. Once the verification is successful, it executes the unlocking action and transmits the operation result and lock status back to the management backend in real time.

[0066] Once the management backend confirms that the unlocking operation is complete, it advances the operation sequence status to the next node and automatically locks the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0067] Computer-readable storage media may include a stored program area and a stored data area, wherein the stored program area may store an operating system and an application program required for at least one function; the stored data area may store data created based on the use of the substation E-Key Lock Management System, etc. Furthermore, the computer-readable storage medium may include high-speed random access memory, and may also include memory, such as at least one disk storage device, flash memory device, or other non-volatile solid-state storage device. In some embodiments, the computer-readable storage medium may optionally include memory remotely configured relative to a processor, and this remote memory may be connected to the substation E-Key Lock Management System via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0068] Figure 3 This is a schematic diagram of the structure of the electronic device provided in the embodiment of the present invention, such as... Figure 3As shown, the device includes a processor 310 and a memory 320. The electronic device may also include an input device 330 and an output device 340. The processor 310, memory 320, input device 330, and output device 340 can be connected via a bus or other means. Figure 3 Taking a bus connection as an example, the memory 320 is the computer-readable storage medium described above. The processor 310 executes various server functions and data processing by running non-volatile software programs, instructions, and modules stored in the memory 320, thereby implementing the substation E-key lock management method described in the above embodiment. The input device 330 can receive input digital or character information and generate key signal inputs related to user settings and function control of the substation E-key lock management system. The output device 340 may include a display screen or other display device.

[0069] The aforementioned electronic device can execute the method provided in the embodiments of the present invention, and has the corresponding functional modules and beneficial effects for executing the method. Technical details not described in detail in this embodiment can be found in the method provided in the embodiments of the present invention.

[0070] In one implementation, the above-described electronic device is used in a substation E-key lock management system for a client application, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

[0071] The management backend obtains structured operation tasks from the substation operation ticket system, parses and generates an operation sequence diagram, where each node contains the target equipment, the corresponding lock identifier and safety verification rules, and the directed edges between nodes define the operation order dependency relationship;

[0072] Based on the operation sequence diagram, a state machine model is used to manage the current operation progress. The operation permission of the lock corresponding to a certain operation node is dynamically activated only when all the preceding nodes of a certain operation node have been completed and passed the security check, and an operation certificate with time constraints is generated.

[0073] Before authorization, the management backend queries the electrical status of the target equipment in the substation monitoring system in real time and executes the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations.

[0074] When an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction, which includes an operation sequence ID, current node ID, target lock ID, timestamp, and security status summary; a secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication.

[0075] After receiving the instruction, the electronic lock independently verifies the validity of the digital signature, the timeliness of the operation certificate, and the legality of the security status summary. Once the verification is successful, it executes the unlocking action and transmits the operation result and lock status back to the management backend in real time.

[0076] Once the management backend confirms that the unlocking operation is complete, it advances the operation sequence status to the next node and automatically locks the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

[0077] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of various embodiments or some parts of embodiments.

[0078] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for managing E-key access locks in substations, wherein the method establishes a conditional authorization mechanism based on dynamic evolution of operation sequences and real-time security status linkage, characterized in that, include: The management backend obtains structured operation tasks from the substation operation ticket system, parses and generates an operation sequence diagram, where each node contains the target equipment, the corresponding lock identifier and safety verification rules, and the directed edges between nodes define the operation order dependency relationship; Based on the operation sequence diagram, a state machine model is used to manage the current operation progress. The operation permission of the lock corresponding to a certain operation node is dynamically activated only when all the preceding nodes of a certain operation node have been completed and passed the security check, and an operation certificate with time constraints is generated. Before authorization, the management backend queries the electrical status of the target equipment in the substation monitoring system in real time and executes the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations. When an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction, which includes an operation sequence ID, current node ID, target lock ID, timestamp, and security status summary; a secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication. After receiving the instruction, the electronic lock independently verifies the validity of the digital signature, the timeliness of the operation certificate, and the legality of the security status summary. Once the verification is successful, it executes the unlocking action and transmits the operation result and lock status back to the management backend in real time. Once the management backend confirms that the unlocking operation is complete, it advances the operation sequence status to the next node and automatically locks the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

2. The substation E-key access lock management method according to claim 1, characterized in that, The management backend obtains structured operation tasks from the substation operation ticket system, parses and generates an operation sequence diagram, including: The natural language description in the operation ticket is parsed, and the operation equipment, operation actions and safety measures entities are extracted through a pre-trained power operation entity recognition model; Based on the extracted entities and the substation primary wiring diagram, an operation sequence diagram is automatically constructed, in which the dependencies between nodes include electrical connection relationships, operation logic sequence, and safety interlock relationships; Configure differentiated security verification rules for each operation node. These rules include device status constraints, environmental parameter constraints, and operator qualification constraints.

3. The substation E-key access lock management method according to claim 1, characterized in that, The management backend queries the electrical status of target equipment in the substation monitoring system in real time and executes preset five-prevention logic rule verifications, including: Verification to prevent accidental opening and closing of circuit breakers: Verify whether the target circuit breaker is in an operable opening and closing state; Verification to prevent disconnection switches from being opened or closed under load: Confirm that the load condition meets the operating conditions through real-time load current monitoring; Verification to prevent the grounding wire from being connected while the equipment is energized: Verify that the equipment is in a de-voltage state by using voltage transformer data; Verification to prevent closing the circuit with the grounding wire connected: Verify the status of the relevant grounding device; Verification to prevent accidental entry into live compartments: A comprehensive judgment is made by combining the access control system and the live display device.

4. The substation E-key access lock management method according to claim 1, characterized in that, When the operator requests to unlock via a mobile terminal, the management backend issues digitally signed conditional operation instructions, including: The management backend uses an asymmetric encryption algorithm to generate digital signatures for operation instructions, and uses the backend private key to sign them; The electronic lock has a pre-installed public key certificate for the management backend, which is used to verify the authenticity of the instruction signature; A secure channel is established between the mobile terminal and the electronic lock using an elliptic curve-based key exchange protocol to achieve two-way authentication.

5. A method for managing E-key access locks in a substation according to claim 1, characterized in that, The method also includes a distributed emergency operation mode: When the network communication between the management backend and the station control layer is interrupted, the local emergency authorization mechanism is activated; The mobile terminal generates an emergency operation credential based on a pre-downloaded encrypted operation sequence and local security policy when the offline verification conditions are met. During emergency operations, the electronic locks cache operation records, which are then uploaded in batches to the management backend for auditing and synchronization once communication is restored.

6. A method for managing E-key access locks in a substation according to claim 5, characterized in that, The distributed emergency operation mode specifically includes: Mobile terminals periodically synchronize encrypted operation sequence snapshots and emergency authorization policies from the management backend; In emergency mode, the mobile terminal verifies the operator's identity through biometric identification and checks the local security policy; Electronic locks support offline verification of the hash chain validity of emergency operation credentials, ensuring the legitimacy and non-repudiation of emergency operations.

7. A method for managing E-key access locks in a substation according to claim 1, characterized in that, The intelligent verification and execution steps of the lock also include a mechanism to prevent accidental locking: The electronic lock has a built-in logic judgment unit that continuously monitors the status changes of associated devices; When the security status is detected as not meeting the operating conditions, the system will refuse to perform the unlocking action and issue an alarm immediately, even if a valid operation command is received. It supports remote emergency locking, allowing authorized personnel to remotely freeze the operation permissions of designated locks.

8. A substation E-key access control system, wherein the method establishes a conditional authorization mechanism based on dynamic evolution of operation sequences and real-time security status linkage, characterized in that, include: The parsing module is configured to allow the management backend to obtain structured operation tasks from the substation operation ticket system, parse and generate an operation sequence diagram, where each node contains the target device, the corresponding lock identifier and the safety verification rules, and the directed edges between nodes define the operation order dependency relationship; The generation module is configured to manage the current operation progress using a state machine model based on the operation sequence diagram. It will only dynamically activate the operation permission of the lock corresponding to a certain operation node and generate an operation credential with time constraints when all the preceding nodes of a certain operation node have been completed and passed the security check. The verification module is configured to query the electrical status of the target equipment in the substation monitoring system in real time before authorization, and execute the preset five-prevention logic rule verification. The verification includes a comprehensive judgment of the equipment's opening and closing status, energized status and grounding status to ensure that the operating conditions meet the safety regulations. The management module is configured so that when an operator requests to unlock via a mobile terminal, the management backend issues a digitally signed conditional operation instruction. The instruction includes an operation sequence ID, a current node ID, a target lock ID, a timestamp, and a security status summary. A secure channel is established between the mobile terminal and the electronic lock to perform two-way authentication. The feedback module is configured to independently verify the validity of the digital signature, the timeliness of the operation credential, and the legality of the security status summary after the electronic lock receives the instruction. After the verification is successful, the unlocking action is executed, and the operation result and lock status are fed back to the management backend in real time. The output module is configured to advance the operation sequence status to the next node after the management backend confirms that the unlocking operation has been completed, and automatically lock the lock permissions corresponding to the completed node; when an operation abnormality or security status change is detected, the current sequence is immediately stopped and all related lock permissions are frozen.

9. An electronic device, characterized in that, include: At least one processor, and a memory communicatively connected to the at least one processor, wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method according to any one of claims 1 to 7.

Images