Distributed power management system and method based on multistage key management
By using multi-level key management and relaying through the same-level power management system, the problems of easy viewing and unstable transmission of keys in the power management system are solved, thus achieving secure and stable data transmission.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-18
- Publication Date
- 2026-03-10
AI Technical Summary
In existing power management systems, key management is easily viewed by administrators, the transmission process is easily tampered with, and the leakage of a single key leads to data insecurity. When the transmission channel is blocked, data cannot be transmitted in a timely manner, resulting in insufficient security and stability.
A multi-level key management system is adopted, including grid-level, provincial-level, municipal-level and county-level power management systems, which manage and encrypt keys at different levels respectively. During transmission, SSL protocol or one-time-one-key mechanism is used for data encryption. The same-level power management system is used as a relay for data transmission to ensure data security and stability.
It achieves effective management of multi-level keys, improves data security and confidentiality, ensures timely data transmission even when communication networks fluctuate, and maintains the stability and robustness of the system.
Smart Images
Figure CN121644642A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of power system communication technology, and specifically to a distributed power management system and method based on multi-level key management. Background Technology
[0002] Electricity data encompasses various types, such as user electricity consumption and substation power monitoring data. Different types of electricity data possess different values, and data mining based on relevant electricity data can yield a wealth of additional information. Currently, electricity data transmission is primarily protected using key encryption, with key management handled through database storage. However, administrators can easily view the keys stored in the database. Furthermore, if a key is intercepted during transmission, the transmitted data can be tampered with undetected. Once a key is intercepted, no data within the power system remains protected, resulting in low security. Moreover, the data transmission protection levels differ between provincial, municipal, and county-level power management systems. If the transmission channel between upper and lower-level power management systems is blocked, electricity data cannot be transmitted in a timely manner, and changes in the transmission channel can also compromise data security.
[0003] Therefore, how to improve the security and stability of data transmission in power management systems has become an urgent issue to be addressed in this technical field. Summary of the Invention
[0004] To overcome the shortcomings of the prior art, the present invention provides a distributed power management system and method based on multi-level key management, specifically adopting the following technical solution: A distributed power management system based on multi-level key management, comprising: The grid-level power management system is used to manage the root key, and to encrypt and distribute the corresponding master keys for each province using the root key. Several provincial power management systems are used to receive control from the grid-level power management system, as well as to manage their own master keys and use the master keys to encrypt and distribute the first-level keys of the subordinate cities. Several municipal-level power management systems are used to receive control from the corresponding provincial-level power management systems, as well as to manage their own primary keys and use the primary keys to encrypt and distribute the secondary keys of the subordinate counties. Several county-level power management systems are used to receive control from the corresponding municipal-level power management systems, and to manage their own secondary keys and use these secondary keys to encrypt and distribute working keys to power application terminals.
[0005] The grid-level power management system is communicatively connected to each provincial-level power management system, and a temporary communication transmission channel is provided between each provincial-level power management system; the provincial-level power management system is communicatively connected to each of its subordinate municipal-level power management systems, and a temporary communication transmission channel is provided between each municipal-level power management system within the same province; the municipal-level power management system is communicatively connected to each of its subordinate county-level power management systems, and a temporary communication transmission channel is provided between each county-level power management system within the same city.
[0006] Preferably, the generation methods for the master key, first-level key, second-level key, and working key are all based on a secure random number generator, a key derivation function, a standard key negotiation mechanism, or a secure key generation tool.
[0007] Preferably, when the power terminal uploads power data, it adopts a TCP transmission method that uses the SSL protocol to encrypt the data or a UDP transmission method that uses a one-time-one-key mechanism.
[0008] Preferably, when a lower-level power management system transmits data to a higher-level power management system, it first determines whether the communication between the two systems is normal. If the communication is normal, the data is encrypted using a key and uploaded to the higher-level power management system. If the communication is broken, the lower-level power management system first encrypts the data using its own key. Then, the lower-level power management system selects the nearest peer power management system to attempt to establish a temporary communication transmission channel. The encrypted data is transmitted to the nearest peer power management system through the temporary communication transmission channel, and the peer power management system uses its own key to encrypt the encrypted data a second time. The second-encrypted data is then transmitted to the higher-level power management system via the peer power management system, and the higher-level power management system decrypts the data sequentially using the keys of the corresponding peer power management system and the lower-level power management system.
[0009] Preferably, the data transmission process in the temporary communication transmission channel adopts a symmetric encryption method.
[0010] Preferably, the distributed power management system further includes a key store, which is used to back up the master key, the primary key, and the secondary key.
[0011] Furthermore, based on the aforementioned distributed power management system, this invention also discloses a distributed power management method based on multi-level key management, which includes the following steps: S1. Encrypt the master key corresponding to each province based on the root key, and then use the master key, first-level key, and second-level key to encrypt the first-level key, second-level key, and working key corresponding to the next level power management system in sequence; S2. The power terminal collects power data from the electrical appliances it uses and encrypts the data using an encrypted working key, then transmits it to the next higher-level county-level power management system; the county-level power management system aggregates the power data from each power terminal under its jurisdiction and encrypts the data using an encrypted secondary key, then transmits it to the next higher-level city-level power management system; the city-level power management system aggregates the power data from each county under its jurisdiction and encrypts the data using an encrypted primary key, then transmits it to the next higher-level provincial-level power management system; the provincial-level power management system aggregates the power data from each city under its jurisdiction and encrypts the data using an encrypted master key, then transmits the aggregated data to the grid-level power management system. S3. Before the next-level power management system transmits data to the next-level power management system, it will first determine whether the corresponding transmission is connected. If the transmission channel is connected, the data transmission process will proceed normally. If the transmission channel is disconnected, a temporary communication transmission channel will be constructed by randomly selecting a peer power management system. The peer power management system will be requested to perform a connectivity test with the next-level power management system. The peer power management system connected to the next-level power management system will be selected as the relay. The next-level power management system will transmit the power data to the peer power management system, and the peer power management system will then transmit the data to the next-level power management system. S4. When a higher-level power management system transmits data to a lower-level power management system, it first determines whether the corresponding transmission is connected. If the transmission channel is connected, the data transmission process proceeds normally. If the transmission channel is disconnected, it randomly selects a power management system at the same level as the target power management system and requests the selected power management system at the same level to perform a connectivity test on the target power management system. The selected power management system at the same level that is connected to the target power management system is chosen as a relay. The higher-level power management system transmits the corresponding data to the power management system at the same level, and the power management system at the same level transmits the data to the target power management system.
[0012] Preferably, in step S3, when the next-level power management system selects a peer power management system connected to the previous-level power management system as a relay for data transmission, the next-level power management system first encrypts the power data using its own key, and then transmits the encrypted power data to the peer power management system. After receiving the encrypted power data, the peer power management system encrypts it again using its own key and transmits the second-encrypted power data to the previous-level power management system. After receiving the second-encrypted power data, the previous-level power management system first decrypts it using the key of the corresponding peer power management system, and then decrypts it again using the key of the corresponding next-level power management system, thus obtaining the power data uploaded by the next-level power management system.
[0013] Preferably, in step S4, when the upper-level power management system selects a peer power management system connected to the target power management system as a relay for data transmission, the upper-level power management system first encrypts the data using the key of the corresponding target power management system, then encrypts the first-encrypted data a second time using the key of the corresponding peer power management system. Subsequently, the upper-level power management system transmits the second-encrypted data to the peer power management system, which decrypts the second-encrypted data to obtain the first-encrypted data, and transmits the first-encrypted data to the target power management system via a temporary communication transmission channel. The target power management system decrypts the first-encrypted data to obtain the data sent by the upper-level power management system. Beneficial effects
[0014] The technical solution of the present invention achieves the following beneficial effects: The distributed power management system of this invention is based on a multi-level key management system for data transmission, enabling the effective management and use of multiple keys to avoid the risks caused by the leakage or loss of a single key, thereby improving data security and confidentiality. At the same time, each power management system in the system adopts a distributed transmission method, and each power management system is both independent and interconnected. Once a communication line in the power communication network fails, the power management system at the same level can be used as a relay to promptly upload or send power data, improving the stability of power communication while still ensuring data confidentiality. Attached Figure Description
[0015] Figure 1 This is a schematic diagram of the distributed power management system based on multi-level key management according to the present invention. Implementation
[0016] The present invention will be further described below with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solutions of the present invention and should not be construed as limiting the scope of protection of the present invention. It should be noted that the following detailed descriptions are exemplary and intended to provide further explanation of this application.
[0017] Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains. It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the exemplary embodiments according to this application. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms “comprising” and / or “including” are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.
[0018] This embodiment specifically discloses a distributed power management system based on multi-level key management, which includes: The grid-level power management system is used to manage the root key, and to encrypt and distribute the corresponding master keys for each province using the root key. Several provincial power management systems are used to receive control from the grid-level power management system, as well as to manage their own master keys and use the master keys to encrypt and distribute the first-level keys of the subordinate cities. Several municipal-level power management systems are used to receive control from the corresponding provincial-level power management systems, as well as to manage their own primary keys and use the primary keys to encrypt and distribute the secondary keys of the subordinate counties. Several county-level power management systems are used to receive control from the corresponding municipal-level power management systems, and to manage their own secondary keys and use these secondary keys to encrypt and distribute working keys to power application terminals.
[0019] The system comprises a grid-level power management system that is communicatively connected to each provincial-level power management system, with temporary communication transmission channels established between the provincial-level power management systems. Each provincial-level power management system is also communicatively connected to its subordinate municipal-level power management systems, with temporary communication transmission channels established between municipal-level power management systems within the same province. Furthermore, each municipal-level power management system is communicatively connected to its subordinate county-level power management systems, with temporary communication transmission channels established between county-level power management systems within the same city. In this embodiment, the distributed power management network ensures the stability and robustness of the power system. Simultaneously, multi-level key management effectively enhances system security. Each level of power management system employs different keys, and these keys are encrypted for enhanced protection of system data.
[0020] It should be noted that the generation methods of the master key, first-level key, second-level key, and working key described in this embodiment are all based on a secure random number generator, a key derivation function, a standard key negotiation mechanism, or a secure key generation tool. The key generation method can be a conventional method, which will not be described in detail here.
[0021] Furthermore, to ensure data communication security, when the power terminal uploads power data, it can use TCP transmission mode with SSL protocol to encrypt data or UDP transmission mode with one-time-one-key mechanism for data transmission.
[0022] It should be further explained that, in this embodiment, when the lower-level power management system transmits data with the upper-level power management system, both will first determine whether the communication between the lower-level and upper-level power management systems is normal. If the communication is normal, the data is encrypted using a key and uploaded to the upper-level power management system. If the communication is found to be disconnected, the lower-level power management system needs to find a feasible route. Therefore, the lower-level power management system can select the nearest peer power management system and request it to communicate with the upper-level power management system for testing. If the peer power management system and the upper-level power management system are connected, the lower-level power management system establishes a temporary communication transmission channel with the peer power management system. The lower-level power management system first encrypts the data using its own key, and the encrypted data is then transmitted through the temporary communication channel. The data is transmitted via a communication channel to the nearest peer-level power management system. Since this system does not possess the corresponding key, it cannot decrypt the encrypted data. Therefore, the peer-level power management system uses its own key to re-encrypt the data. This re-encrypted data is then transmitted to the next higher-level power management system, thus improving data transmission security. Upon receiving the re-encrypted data, the higher-level power management system, possessing the keys for both the peer and next-level power management systems, first decrypts it using the peer's key, obtaining the first-level encrypted data. Then, the higher-level power management system decrypts the first-level encrypted data using the next-level power management system's key, obtaining the next-level power data. During this process, the peer-level power management system does not need to know the content of the power data; it merely acts as a data relay, ensuring both data security and improved data transmission stability.
[0023] It should be noted that in this embodiment, the temporary communication transmission channel between power management systems at the same level preferably adopts a symmetric encryption method during data transmission. This temporary communication transmission channel is only used as a backup transmission channel. Generally, when the power system is stable, the temporary communication transmission channel does not need to transmit data. Once the power system fluctuates or special circumstances occur, the corresponding temporary communication transmission channel is activated for temporary data transmission.
[0024] Furthermore, to ensure stable data transmission in this embodiment, the distributed power management system also includes a key repository, which is used to back up the master key, primary key, and secondary key. This key repository provides a reliable key recovery mechanism in the event of key loss or damage.
[0025] Furthermore, based on the aforementioned distributed power management system, this embodiment also discloses a distributed power management method based on multi-level key management, which includes the following steps: S1. Encrypt the master key corresponding to each province based on the root key, and then use the master key, first-level key, and second-level key to encrypt the first-level key, second-level key, and working key corresponding to the next level power management system in sequence; S2. The power terminal collects power data from the electrical appliances it uses and encrypts the data using an encrypted working key, then transmits it to the next higher-level county-level power management system; the county-level power management system aggregates the power data from each power terminal under its jurisdiction and encrypts the data using an encrypted secondary key, then transmits it to the next higher-level city-level power management system; the city-level power management system aggregates the power data from each county under its jurisdiction and encrypts the data using an encrypted primary key, then transmits it to the next higher-level provincial-level power management system; the provincial-level power management system aggregates the power data from each city under its jurisdiction and encrypts the data using an encrypted master key, then transmits the aggregated data to the grid-level power management system. S3. Before the next-level power management system transmits data to the next-level power management system, it will first determine whether the corresponding transmission is connected. If the transmission channel is connected, the data transmission process will proceed normally. If the transmission channel is disconnected, a temporary communication transmission channel will be constructed by randomly selecting a peer power management system. The peer power management system will be requested to perform a connectivity test with the next-level power management system. The peer power management system connected to the next-level power management system will be selected as the relay. The next-level power management system will transmit the power data to the peer power management system, and the peer power management system will then transmit the data to the next-level power management system. In step S3, when the next-level power management system selects a peer power management system connected to the previous-level power management system as a relay for data transmission, the next-level power management system will first encrypt the power data using its own key, and then transmit the encrypted power data to the peer power management system. After receiving the encrypted power data, the peer power management system will encrypt it again using its own key, and then transmit the second-encrypted power data to the previous-level power management system. After receiving the second-encrypted power data, the previous-level power management system will first decrypt it once using the key of the corresponding peer power management system, and then decrypt it a second time using the key of the corresponding next-level power management system, thus obtaining the power data uploaded by the next-level power management system.
[0026] S4. When a higher-level power management system transmits data to a lower-level power management system, it first determines whether the corresponding transmission is connected. If the transmission channel is connected, the data transmission process proceeds normally. If the transmission channel is disconnected, it randomly selects a power management system at the same level as the target power management system and requests the selected power management system at the same level to perform a connectivity test on the target power management system. The selected power management system at the same level that is connected to the target power management system is chosen as a relay. The higher-level power management system transmits the corresponding data to the power management system at the same level, and the power management system at the same level transmits the data to the target power management system.
[0027] In step S4, when the higher-level power management system selects a peer power management system connected to the target power management system as a relay for data transmission, the higher-level power management system will first encrypt the data using the key of the corresponding target power management system, and then encrypt the encrypted data a second time using the key of the corresponding peer power management system. The higher-level power management system will then transmit the second-encrypted data to the peer power management system, which will decrypt the second-encrypted data to obtain the first-encrypted data. The peer power management system will then transmit the first-encrypted data to the target power management system via a temporary communication transmission channel. The target power management system will then decrypt the first-encrypted data to obtain the data sent by the higher-level power management system.
[0028] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.
Claims
1. A distributed power management system based on multi-level key management, characterized by, It comprises: a network-level power management system for managing a root key and encrypting and distributing a corresponding master key of each province by using the root key; a plurality of province-level power management systems for accepting the regulation and control of the network-level power management system, managing their own master keys, and encrypting and distributing a first-level key of each city under their jurisdiction by using the master key; a plurality of city-level power management systems for accepting the regulation and control of the corresponding province-level power management system, managing their own first-level keys, and encrypting and distributing a second-level key of each county under their jurisdiction by using the first-level key; a plurality of county-level power management systems for accepting the regulation and control of the corresponding city-level power management system, managing their own second-level keys, and encrypting and distributing a working key of a power utilization terminal by using the second-level key; the network-level power management system and each province-level power management system are respectively communicatively connected, and a temporary communication transmission channel is provided between each province-level power management system; each province-level power management system and each city-level power management system under its jurisdiction are respectively communicatively connected, and a temporary communication transmission channel is provided between each city-level power management system of the same province; each city-level power management system and each county-level power management system under its jurisdiction are respectively communicatively connected, and a temporary communication transmission channel is provided between each county-level power management system of the same city.
2. The distributed power management system of claim 1, characterized by: The generation mode of the master key, the first-level key, the second-level key, and the working key all adopts one of a secure random number generator, a key derivation function, a standard key agreement mechanism, or a secure key generation tool.
3. The distributed power management system of claim 1, characterized by: The data transmission mode when the power utilization terminal uploads power data adopts a TCP transmission mode that realizes data encryption by using an SSL protocol or a UDP transmission mode that adopts a one-time-one-key mechanism.
4. The distributed power management system of claim 1, characterized by: When a lower-level power management system and an upper-level power management system perform data transmission, it is first determined whether the communication between the lower-level power management system and the upper-level power management system is normal, if it is determined that the communication is normal, the data is encrypted by using a key and uploaded to the upper-level power management system; if it is determined that the communication is disconnected, the current lower-level power management system first encrypts the data by using its own key, then the current lower-level power management system selects the nearest same-level power management system to attempt to establish a temporary communication transmission channel, the encrypted data is transmitted to the nearest same-level power management system through the temporary communication transmission channel, and the same-level power management system encrypts the encrypted data by using its own key, then the twice-encrypted data is transmitted to the upper-level power management system through the same-level power management system, and the upper-level power management system decrypts the data according to the keys of the corresponding same-level power management system and lower-level power management system in turn.
5. The distributed power management system of claim 1, characterized by: The data transmission process in the temporary communication transmission channel adopts a symmetric encryption mode.
6. The distributed power management system of claim 1, characterized by: It further comprises a key library for backing up the master key, the first-level key, and the second-level key.
7. A multi-level key management based distributed power management method using the distributed power management system according to any one of claims 1 to 6, characterized by, It comprises the following steps: S1. encrypting the master key of each province based on the root key, and encrypting the first-level key, the second-level key, and the working key of the next-level power management system by using the master key, the first-level key, and the second-level key in turn; S2. The power data of the power consumer is collected by the power terminal and encrypted by the encrypted working key, and then transmitted to the county-level power management system; the power data of each power terminal under the jurisdiction of the county-level power management system is aggregated and encrypted by the encrypted secondary key, and then transmitted to the municipal-level power management system; the power data of each county under the jurisdiction of the municipal-level power management system is aggregated and encrypted by the encrypted primary key, and then transmitted to the provincial-level power management system; the power data of each city under the jurisdiction of the provincial-level power management system is aggregated and encrypted by the encrypted master key, and then transmitted to the network-level power management system; S3. Before the lower-level power management system transmits data to the upper-level power management system, it will first determine whether the corresponding transmission channel is connected. If the transmission channel is connected, the data transmission process will be carried out normally. If the transmission channel is disconnected, a temporary communication transmission channel will be randomly selected from the same level power management system, and a connection test will be requested from the same level power management system to the upper-level power management system. The same level power management system that connects the upper-level power management system is selected as a relay. The current lower-level power management system transmits power data to the same level power management system, and the same level power management system transmits data to the upper-level power management system. S4. When the upper-level power management system transmits data to the lower-level power management system, it will first determine whether the corresponding transmission channel is connected. If the transmission channel is connected, the data transmission process will be carried out normally. If the transmission channel is disconnected, a power management system at the same level as the target power management system will be randomly selected, and a connection test will be requested from the selected same level power management system to the target power management system. The same level power management system that connects the target power management system is selected as a relay. The upper-level power management system transmits corresponding data to the same level power management system, and the same level power management system transmits data to the target power management system.
8. The method of claim 7, wherein: In the S3 step, when the lower-level power management system selects the same level power management system that connects the upper-level power management system as a relay for data transmission, the current lower-level power management system will first encrypt the power data using its own key, and then transmit the encrypted power data to the same level power management system. After receiving the encrypted power data, the same level power management system will again encrypt it using its own key, and transmit the twice-encrypted power data to the upper-level power management system. After receiving the twice-encrypted power data, the upper-level power management system will first decrypt it using the key of the corresponding same level power management system, and then decrypt it using the key of the corresponding lower-level power management system, and obtain the power data uploaded by the lower-level power management system.
9. The method of claim 7, wherein the method further comprises: When the previous power management system selects the peer power management system of the target power management system as a relay for data transmission in the S4 step, the previous power management system first encrypts the data using the key corresponding to the target power management system, then encrypts the once-encrypted data using the key corresponding to the peer power management system, and then the previous power management system transmits the twice-encrypted data to the peer power management system. The peer power management system decrypts the twice-encrypted data to obtain the once-encrypted data, and transmits the once-encrypted data to the target power management system using the temporary communication transmission channel. The target power management system decrypts the once-encrypted data, and obtains the data transmitted by the previous power management system.