Power data hybrid encryption transmission method, system and device and readable storage medium

Abstract

The invention relates to a power data hybrid encryption transmission method, system and device, and a readable storage medium. The method comprises the following steps: S1, encrypting a power data plaintext by using a session key to obtain a ciphertext; s2, cutting the ciphertext into a plurality of sections of sub-ciphertexts, combining the sub-ciphertexts with unique random numbers to obtain a plurality of combinations of the sub-ciphertexts and the random numbers, and combining the random numbers to obtain a random number group; randomly sorting the plurality of sub-ciphertexts and random number combinations to obtain a random ciphertext array; s3, encrypting the session key and the random array, and performing digital signature on the random ciphertext array; s4, transmitting the encrypted random array, the session key, the random ciphertext array and the digital signature to a receiver in a parallel communication mode; s5, the receiver verifies and decrypts for many times to obtain the electric power data, the problem that data safety and data transmission efficiency cannot be considered in the existing electric power transmission process is solved, the data transmission safety is improved, and it is ensured that the transmission speed cannot be greatly reduced.

Description

Technical Field

[0001] This invention relates to the field of power data transmission security technology, specifically to a method, system, device, and readable storage medium for hybrid encrypted transmission of power data. Background Technology

[0002] With the rapid development of technologies such as smart grids and the Internet of Things (IoT) in the power sector, the power grid and the internet are gradually achieving deep integration. More and more sensing and control devices are being installed and deployed at the end of the power grid, undertaking functions such as data collection and user interaction. Due to the widespread use of intelligent monitoring, data collection, and mobile apps, data interaction in the power grid is becoming increasingly frequent, and data storage is gradually increasing, making communication security and data confidentiality increasingly important. If the large amount of sensitive data transmitted by the power system is maliciously leaked, it will cause incalculable losses to power supply companies and power users. Therefore, current power data transmission processes require data encryption. However, due to the massive volume of power data, data encryption and decryption cause certain data transmission delays. Thus, the current power transmission process cannot simultaneously achieve data security and data transmission efficiency, making it one of the urgent issues to be addressed in this technical field. Summary of the Invention

[0003] To overcome the shortcomings of the prior art, the present invention provides a method, system, device, and readable storage medium for hybrid encrypted transmission of power data, specifically adopting the following technical solution: A method for hybrid encrypted transmission of power data, comprising the following steps: S1. The key generator in the sender generates a session key and uses the session key to encrypt the plaintext of the power data to be transmitted, thus obtaining ciphertext; S2. The sender cuts the ciphertext into several sub-ciphertext segments according to a preset cutting length. The sender uses a random number generator to generate unique random numbers for each sub-ciphertext segment in turn, and combines the random numbers with the corresponding sub-ciphertext segments to obtain several sub-ciphertext + random number combinations. At the same time, the random numbers are combined according to the order of the sub-ciphertext segments to obtain a random array. Then, the several sub-ciphertext + random number combinations are randomly sorted to obtain a random ciphertext array. S3. The sender uses the session key to encrypt the random array, obtaining an encrypted random array; and the sender uses the public key of the asymmetric encryption method to encrypt the session key, obtaining an encrypted session key, and applies a digital signature to the random ciphertext array. S4. The sender transmits the encrypted random array, the encrypted session key, the random ciphertext array, and the digital signature to the receiver using parallel communication. S5. The receiver uses the corresponding private key to decrypt the session key and performs multiple verifications. If all verifications pass, the receiver uses the session key to decrypt and obtain the power data; if the verification fails, the decryption process is terminated and the result is returned.

[0004] Preferably, the asymmetric encryption method used in step S3 includes one of the elliptic cryptography algorithm, RSA algorithm, or DSA algorithm.

[0005] Preferably, the specific process of the receiver performing multiple verifications in step S5 includes: S501. First, the receiver performs an initial verification based on the digital signature. If the digital signature passes, proceed to the next step; otherwise, the current decryption process is terminated and an error message is returned. S502. Use the session key to decrypt the random array to obtain a number of random numbers arranged in sequence, and verify the correspondence between the decrypted random numbers and the random numbers in the random ciphertext array. If all the decrypted random numbers correspond one-to-one with all the random numbers in the random ciphertext array, the verification is successful and proceed to the next step; otherwise, the verification fails, and the subsequent steps are terminated and an error message is returned. S503. The receiver reorders the sub-ciphertext + random number combination according to the order of random numbers in the random array, and removes the random numbers from the reordered sub-ciphertext + random number combination to obtain the reordered sub-ciphertext, which is the ciphertext. Then, the receiver uses the session key to decrypt the ciphertext to obtain the power data.

[0006] Preferably, in step S2, the random number generator uses one of the following methods to generate unique random numbers: a time-based UUID generation algorithm, a name-based UUID generation algorithm, or a random number-based UUID generation algorithm.

[0007] Preferably, in step S1, before encrypting the power data, a data preprocessing operation must first be performed on the power data: S101. First, a power-sensitive data learning model is used to filter out sensitive and non-sensitive data from the raw power data; S102. For power data belonging to sensitive data, a session key is used for encryption, and the data is transmitted through the steps of S2 to S5; for non-sensitive data, a session key is used for encryption, and the data is transmitted directly to the receiver.

[0008] Preferably, the method for constructing the power-sensitive data learning model is as follows: First, based on historical power data, we extract the primary feature vector of the power data; The extracted primary feature vectors are dimensionality reduced to obtain low-dimensional feature vectors from the power data; The k-means algorithm is used to cluster low-dimensional feature vectors in power data, dividing the power data into different clusters. Based on professional knowledge, the data in the clusters after clustering are labeled with sensitivity levels to complete the classification and grading of power data; The classified power data is imported into a deep convolutional neural network model for learning, and the identification results are compared with the correct results for optimization and correction, resulting in a power-sensitive data learning model.

[0009] Furthermore, this invention also discloses a hybrid encrypted transmission system for power data employing the above-mentioned hybrid encrypted transmission method, comprising: The key generation module is used by the sender to generate the session key; The data preprocessing module is used by the sender to classify the power data according to its sensitivity type. The data encryption module is used by the sender to encrypt sensitive and non-sensitive data in the power data separately; A random number generator is used by the sender to generate a unique random number for the corresponding sub-ciphertext. The data combination module is used to combine and sort the ciphertext and random numbers within the sender's network. The data transmission module is used by the sender to transmit the encrypted random array, the encrypted session key, the random ciphertext array, and the digital signature to the receiver via parallel communication. The data verification module is used by the recipient to verify the digital signature and random number arrangement. The data decryption module is used by the receiver to decrypt encrypted data based on the verification result.

[0010] The present invention also discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and wherein the processor executes the computer program to implement the steps of the method described above.

[0011] The present invention also discloses a computer-readable storage medium having a computer program stored thereon, characterized in that the program, when executed by a processor, implements the method described above. Beneficial effects

[0012] The technical solution of the present invention achieves the following beneficial effects: The hybrid encryption transmission method of this invention cuts the ciphertext into several segments, marks them with unique random numbers, and then sorts them in a mixed manner. This avoids the ciphertext data from being leaked and cracked, increasing the difficulty of cracking the ciphertext. At the same time, it adopts a parallel transmission method to transmit the session key, random array, and random ciphertext array separately, which can reduce the loss after data interception. Even if a certain transmission channel is intercepted or monitored, it is impossible to crack all the ciphertext data, thus improving data security. Furthermore, this method preprocesses the power data, dividing it into sensitive data and non-sensitive data, and encrypts only the sensitive data, which can improve the data transmission speed, thereby balancing data security and transmission efficiency. Attached Figure Description

[0013] Figure 1 This is a schematic diagram of the data transmission process of the hybrid encrypted transmission system for power data in this invention. Implementation

[0014] The present invention will be further described below with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solutions of the present invention and should not be construed as limiting the scope of protection of the present invention. It should be noted that the following detailed descriptions are exemplary and intended to provide further explanation of this application.

[0015] Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains. It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the exemplary embodiments according to this application. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms “comprising” and / or “including” are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.

[0016] Combination Figure 1 As shown in the figure, this embodiment specifically discloses a method for hybrid encrypted transmission of power data, which includes the following steps: S1. The sender's key generator generates a session key and uses the session key to encrypt the plaintext of the power data to be transmitted, obtaining ciphertext. It should be noted that in this embodiment, data preprocessing is required before encrypting the power data: S101. First, a power-sensitive data learning model is used to filter out sensitive and non-sensitive data from the raw power data; S102. For power data belonging to sensitive data, a session key is used for encryption, and the data is transmitted through the steps of S2 to S5; for non-sensitive data, a session key is used for encryption, and the data is transmitted directly to the receiver.

[0017] By performing sensitivity screening on power data through the above steps, the amount of data that needs to be encrypted can be further reduced, so as to ensure that power data can be transmitted quickly, improve transmission efficiency, and at the same time ensure data security.

[0018] Furthermore, in this embodiment, the above-mentioned method for constructing the power sensitive data learning model is as follows: First, based on historical power data, primary feature vectors of the power data are extracted; the extracted primary feature vectors are dimensionality-reduced to obtain low-dimensional feature vectors in the power data; the low-dimensional feature vectors in the power data are clustered based on the k-means algorithm to divide the power data into different clusters; based on professional knowledge, the data in the clusters are labeled with sensitivity levels to complete the classification and grading of the power data; the classified power data is imported into a deep convolutional neural network model for learning, and the recognition results are compared with the correct results for optimization and correction to obtain the power sensitive data learning model.

[0019] S2. The sender cuts the ciphertext into several sub-ciphertext segments according to a preset trimming length. The sender then uses a random number generator to generate unique random numbers for each sub-ciphertext segment sequentially. These random numbers are then combined with their corresponding sub-ciphertext segments to obtain several sub-ciphertext + random number combinations. Simultaneously, the random numbers are combined according to the order of the sub-ciphertext segments to obtain a random array. Subsequently, the several sub-ciphertext + random number combinations are randomly sorted to obtain a random ciphertext array. Preferably, the random number generator can employ any of the following methods to generate unique random numbers: a time-based UUID generation algorithm, a name-based UUID generation algorithm, or a random number-based UUID generation algorithm. The main purpose of these random numbers is to label the sub-ciphertext segments so that they can be arranged in the correct order subsequently.

[0020] S3. The sender encrypts the random array using the session key to obtain an encrypted random array; and the sender encrypts the session key using the public key of the asymmetric encryption method to obtain an encrypted session key, and digitally signs the random ciphertext array; preferably, the asymmetric encryption method used includes one of the elliptic cryptography algorithm, RSA algorithm or DSA algorithm.

[0021] S4. The sender transmits the encrypted random array, the encrypted session key, the random ciphertext array, and the digital signature to the receiver using parallel communication. S5. The receiver uses the corresponding private key to decrypt the session key and performs multiple verifications. If all verifications pass, the receiver uses the session key to decrypt and obtain the power data; if the verification fails, the decryption process is terminated and the result is returned.

[0022] Specifically, the process of the receiver performing multiple verifications in step S5 includes: S501. First, the receiver performs an initial verification based on the digital signature. If the digital signature passes, proceed to the next step; otherwise, the current decryption process is terminated and an error message is returned. S502. Use the session key to decrypt the random array to obtain a number of random numbers arranged in sequence, and verify the correspondence between the decrypted random numbers and the random numbers in the random ciphertext array. If all the decrypted random numbers correspond one-to-one with all the random numbers in the random ciphertext array, the verification is successful and proceed to the next step; otherwise, the verification fails, and the subsequent steps are terminated and an error message is returned. S503. The receiver reorders the sub-ciphertext + random number combination according to the order of random numbers in the random array, and removes the random numbers from the reordered sub-ciphertext + random number combination to obtain the reordered sub-ciphertext, which is the ciphertext. Then, the receiver uses the session key to decrypt the ciphertext to obtain the power data.

[0023] Furthermore, this embodiment discloses a hybrid encrypted transmission system for power data, which applies the above-mentioned hybrid encrypted transmission method. Specifically, the system includes: The key generation module is used by the sender to generate the session key; The data preprocessing module is used by the sender to classify the power data according to its sensitivity type. The data encryption module is used by the sender to encrypt sensitive and non-sensitive data in the power data separately; A random number generator is used by the sender to generate a unique random number for the corresponding sub-ciphertext. The data combination module is used to combine and sort the ciphertext and random numbers within the sender's network. The data transmission module is used by the sender to transmit the encrypted random array, the encrypted session key, the random ciphertext array, and the digital signature to the receiver via parallel communication. The data verification module is used by the recipient to verify the digital signature and random number arrangement. The data decryption module is used by the receiver to decrypt encrypted data based on the verification result.

[0024] This invention also discloses a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the above-described method.

[0025] This application also provides a computer-readable storage medium storing a computer program, which includes program instructions that, when executed by a processor, implement the various steps of the method described in this invention, which will not be elaborated further here.

[0026] The computer-readable storage medium can be the data transmission apparatus or the internal storage unit of a computer device provided in any of the foregoing embodiments, such as the hard disk or memory of the computer device. The computer-readable storage medium can also be an external storage device of the computer device, such as a plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, etc., provided on the computer device.

[0027] Furthermore, the computer-readable storage medium may include both internal storage units and external storage devices of the computer device. The computer-readable storage medium is used to store the computer program and other programs and data required by the computer device. The computer-readable storage medium may also be used to temporarily store data that is to be output or has already been output.

[0028] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0029] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0030] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0031] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0032] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A power data hybrid encryption transmission method, characterized in that, The steps include the following steps: S1. The sender's intermediate key generator generates a session key and encrypts the plaintext of the power data to be transmitted using the session key to obtain ciphertext; S2. The sender trims the ciphertext into several segments of sub-ciphertext according to a preset cutting length, and uses a random number generator to generate unique random numbers for the several segments of sub-ciphertext in sequence, and combines the random numbers with the corresponding segments of sub-ciphertext to obtain several segments of sub-ciphertext+random number combinations, and combines the random numbers in sequence according to the order of the segments of sub-ciphertext to obtain a random number array; then randomly sorts the several segments of sub-ciphertext+random number combinations to obtain a random ciphertext array; S3. The sender encrypts the random number array using the session key to obtain an encrypted random number array, and encrypts the session key using the public key of the asymmetric encryption method to obtain an encrypted session key, and uses digital signature for the random ciphertext array; S4. The sender transmits the encrypted random number array, the encrypted session key, the random ciphertext array and the digital signature to the receiver in a parallel communication mode; S5. The receiver uses the corresponding private key to decrypt the session key and performs multiple verifications, and if all verifications are passed, the power data is obtained by decrypting using the session key; If the verification is not passed, the decryption process is aborted and the result is returned.

2. The hybrid encrypted transmission method of claim 1, wherein, The asymmetric encryption method used in step S3 includes one of an elliptic encryption algorithm, an RSA algorithm or a DSA algorithm.

3. The hybrid encrypted transmission method of claim 1, wherein, The specific process of the multiple verifications performed by the receiver in step S5 includes: S501. First, the receiver performs initial verification based on the digital signature, and if the digital signature is passed, the next step is performed; otherwise, the current decryption process is aborted and abnormal information is returned; S502. The random number array is decrypted using the session key to obtain a plurality of random numbers in sequence, and the decrypted random numbers are verified with the random numbers of the random ciphertext array, and if all the decrypted random numbers correspond to all the random numbers of the random ciphertext array, the verification is passed and the next step is performed; otherwise, the verification is not passed, and the subsequent steps are aborted and abnormal information is returned; S503. The receiver reorders the segments of sub-ciphertext+random number combinations according to the order of the random numbers in the random number array, and removes the random numbers of the reordered segments of sub-ciphertext+random number combinations to obtain the reordered segments of sub-ciphertext, which is the ciphertext, and then decrypts the ciphertext using the session key to obtain the power data.

4. The method of hybrid encrypted transmission of claim 1, wherein, The random number generator in step S2 generates unique random numbers using one of a time-based UUID generation algorithm, a name-based UUID generation algorithm or a random number-based UUID generation algorithm.

5. The method of hybrid encrypted transmission of claim 1, wherein, Before the power data is encrypted in step S1, data preprocessing operation is required for the power data: S101. For the original power data, sensitive data and non-sensitive data are first screened using a power sensitive data learning model; S102. The power data belonging to the sensitive data is encrypted using the session key and transmitted through the steps of steps S2 to S5; and the non-sensitive data is encrypted using the session key and directly transmitted to the receiver.

6. The method of hybrid encrypted transmission of claim 5, wherein, The power-sensitive data learning model construction method is: First, based on historical power data, extract the primary feature vector of the power data; The extracted primary feature vector is processed by dimension reduction to obtain a low-dimensional feature vector in the power data; Based on the k-means algorithm, the low-dimensional feature vector in the power data is clustered, and the power data is divided into different clusters; Based on professional knowledge, mark the data in the clustered cluster with sensitive level to complete the classification and grading of power data; The classified power data is imported into a deep convolutional neural network model for learning, and the recognition result is compared with the correct result for optimization and correction to obtain a power-sensitive data learning model.

7. A power data hybrid encryption transmission system employing the hybrid encryption transmission method according to any one of claims 1 to 6, characterized by, It includes: A key generation module for the sender to generate a session key; A data preprocessing module for the sender to classify the power data by sensitive type; A data encryption module for the sender to encrypt sensitive data and non-sensitive data in the power data respectively; A random number generator for the sender to generate a unique random number corresponding to the ciphertext; A data combination module for the sender to combine and sort the ciphertext and random number; A data transmission module for the sender to transmit the encrypted random number array, the encrypted session key, the random ciphertext array and the digital signature to the receiver through parallel communication; A data verification module for the receiver to verify the digital signature and random number arrangement; A data decryption module for the receiver to perform decryption operation on the encrypted data according to the verification result.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor executes the computer program to realize the steps of the method of any one of claims 1-6.

9. A computer readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to realize the method as claimed in any one of claims 1-6.

Images