Distributed photovoltaic annular communication group key generation method and system

Abstract

According to the distributed photovoltaic ring communication group key generation method provided by the invention, safe and efficient group key management is realized by combining a group number derivation mechanism, environment feature binding and a quantum key enhancement technology. The method comprises the steps that a preset broadcast root key is called from a concentrator, and the broadcast root key is used for deriving group keys of members in each group; acquiring environment characteristics of members in each group in a communication group corresponding to the concentrator, and recording an acquisition timestamp; summarizing the environmental characteristics of all members in the communication group, and performing hash processing on the summarized environmental characteristics to obtain an initial environmental characteristic vector; and generating a first group key with a preset length through a key derivation function based on the broadcast root key, the initial environment feature vector, the timestamp and a preset group identifier.

Description

Technical Field

[0001] This application relates to the field of power data acquisition technology, specifically to a method, system, electronic device, and storage medium for generating a distributed photovoltaic ring communication group key. Background Technology

[0002] In current photovoltaic power plant group control systems, ring communication topology is widely used due to its efficient data forwarding characteristics and natural redundant path advantages.

[0003] However, traditional key management schemes have significant drawbacks when facing dynamic topology changes (such as frequent additions and removals of inverter nodes). Specifically, centralized key distribution center (KDC) schemes are prone to single points of failure, and the need to redistribute group keys when adding new nodes increases communication latency. While logical key tree (LKH) based schemes optimize update efficiency, their tree-structure maintenance overhead is unbearable in resource-constrained photovoltaic terminal environments. More seriously, existing schemes, such as the ring network group key management protocol proposed in the literature, rely on random number update mechanisms for forward security, which still poses a risk of historical key derivation when multiple leaving nodes collude.

[0004] In addition, photovoltaic inverter group control systems have unique security requirements: inverter nodes are usually deployed in open environments, making physical security difficult to guarantee; network topology changes with sunlight conditions (such as some nodes going into sleep / wake-up); communication bandwidth is limited and millisecond-level control command synchronization is required.

[0005] Therefore, in view of the above problems and needs, this application proposes a method for generating a distributed photovoltaic ring communication group key. Summary of the Invention

[0006] This application provides a method for generating a distributed photovoltaic ring communication group key. By combining a group number derivation mechanism, environmental feature binding, and quantum key enhancement technology, it achieves secure and efficient group key management.

[0007] To achieve the above objectives, this application adopts the following technical solution:

[0008] Firstly, this application provides a method for generating a key for a distributed photovoltaic ring communication group, applied to a concentrator. The method includes:

[0009] Retrieve the pre-set broadcast root key from the concentrator, where the broadcast root key is used to derive the group key for each member within the group;

[0010] Obtain the environmental characteristics of each member in the communication group corresponding to the concentrator, and record the acquisition timestamp;

[0011] The environmental features of all members in the communication group are summarized and then hashed to obtain the initial environmental feature vector.

[0012] Based on the broadcast root key, initial environment feature vector, timestamp, and preset group identifier, a first key of preset length is generated through a key derivation function.

[0013] Secondly, this application provides a distributed photovoltaic ring communication group key generation system for use in concentrators. The system includes:

[0014] The retrieval module is used to retrieve a pre-set broadcast root key from the concentrator, wherein the broadcast root key is used to derive the group key for each member within the group;

[0015] The acquisition module is used to acquire the environmental characteristics of each member in the communication group corresponding to the concentrator and record the acquisition timestamp;

[0016] The processing module is used to summarize the environmental features of all members in the communication group, and then perform hash processing on the summarized environmental features to obtain the initial environmental feature vector.

[0017] The group key generation module is used to generate a first group key of a preset length based on the broadcast root key, the initial environment feature vector, the timestamp, and the preset group identifier through a key derivation function.

[0018] Thirdly, an electronic device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor executes the program to implement the method for generating a distributed photovoltaic ring communication group key according to the first aspect.

[0019] Fourthly, a computer-readable storage medium is provided, the computer-readable storage medium including a computer program or instructions that, when executed, cause the method for generating a distributed photovoltaic ring communication group key of the first aspect to be performed.

[0020] In this embodiment, the overall security of the communication group is improved by dynamically binding the key to the physical environmental characteristics (geographic location, solar spectrum, panel temperature) of the photovoltaic inverter. Furthermore, efficient key evolution is achieved through a one-way function (or key derivation function) and a differential factor mechanism. In scenarios with frequent member changes, the concentrator does not need to redistribute the complete key for each member; it only needs to broadcast a very short differential information once. Existing members in the group can then autonomously derive the new key using the old key and differential information, greatly saving network bandwidth. This is particularly suitable for large-scale, resource-constrained photovoltaic network environments. In addition, when adding a member, the key is evolved through a one-way function to ensure that the new member cannot decrypt previous communications, thus ensuring forward security. When deleting a member, a "tail-cutting and rebirth" strategy is adopted, introducing a new random salt and member list hash to directly derive a completely new group key unrelated to the past from the root key, ensuring that the kicked-out member cannot decrypt any future communications, thus ensuring backward security.

[0021] Other features and advantages of this application will be described in detail in the following detailed description section. Attached Figure Description

[0022] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 A flowchart illustrating the method for generating a distributed photovoltaic ring communication group key as provided in an embodiment of this application;

[0024] Figure 2 A schematic diagram illustrating group key updates when a new member joins a communication group, as provided in an embodiment of this application.

[0025] Figure 3 This is a schematic diagram illustrating the group key update when an abnormal member needs to be kicked out of the communication group, as provided in an embodiment of this application. Detailed Implementation

[0026] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application. At the same time, in the description of the embodiments of this application, the terms "first," "second," etc., are only used to distinguish descriptions and should not be construed as indicating or implying relative importance. Thus, features defined with "first" and "second" may explicitly or implicitly include one or more features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly specified.

[0027] Figure 1 This is a flowchart illustrating a method for generating a distributed photovoltaic ring communication group key according to an embodiment of this application. This method is applied to a concentrator (also known as a centralized controller, but not specifically limited thereto).

[0028] The process for generating the key for this distributed photovoltaic ring communication group is as follows:

[0029] Step S101: Retrieve the pre-set broadcast root key from the concentrator, wherein the broadcast root key is used to derive the group key for each member in the group.

[0030] Step S102: Obtain the environmental characteristics of each member in the communication group corresponding to the concentrator, and record the acquisition timestamp.

[0031] Step S103: Summarize the environmental features of all members in the communication group, and then hash the summarized environmental features to obtain the initial environmental feature vector.

[0032] Step S104: Based on the broadcast root key, initial environment feature vector, timestamp, and preset group identifier, generate a first key of preset length through a key derivation function.

[0033] In step S101 above, the broadcast root key K is pre-embedded and securely stored at the factory when the concentrator leaves the factory. root The broadcast root key K root It is the highest key seed in the entire system, used to derive all group keys.

[0034] In this embodiment, the environmental characteristics of the group members include the physical location (GeoL), real-time irradiance spectrum index (SpectrumF), and photovoltaic panel temperature (PVPanelT). It can be understood that the physical location is the Mercator projection value of the GPS coordinates obtained by the communication group member (e.g., the photovoltaic inverter) through a geolocation sensor; the real-time irradiance spectrum index is the real-time irradiance spectrum index obtained by the communication group member (e.g., the photovoltaic inverter) through a spectral sensor; and the photovoltaic panel temperature is the photovoltaic panel temperature obtained by the communication group member (e.g., the photovoltaic inverter) through a temperature sensor.

[0035] In this embodiment, the environmental features of all members (a total of N) in the communication group are aggregated and then hashed to obtain the initial environmental feature vector. The following two processing methods are included, and one can be selected as appropriate without any restrictions.

[0036] First approach:

[0037] The environmental features of each member in the communication group are concatenated to obtain the environmental feature string of each member in the group.

[0038] The environmental feature strings of all members in the group are averaged one dimension at a time to obtain the averaged environmental features.

[0039] The averaged environmental features are hashed to obtain the initial environmental feature vector.

[0040] It is understandable that for each member i in the group, their environmental features are concatenated, as follows:

[0041] Env i =GeoL i |SpectrumF i |PVPanelT i ;

[0042] The concatenation operation involves merging various features in a specific order to form a long string or data vector. Assuming there are N members in a group, the final concatenation result would be:

[0043] Env all =Env1∣∣Env2∣∣…∣∣Env N ;

[0044] Next, the spliced ​​environmental feature strings are averaged dimension by dimension. For example: the geographical location (GeoL) of all members is averaged; the irradiance spectrum (SpectrumF) of all members is averaged; and the photovoltaic panel temperature (PVPanelT) of all members is averaged, as follows:

[0045]

[0046] The final averaged environmental characteristics are as follows:

[0047] EnvFactor=(GeoL avg |SpectrumF avg |PVPanelT avg ).

[0048] The averaged environmental features are then hashed to obtain the initial environmental feature vector. The specific processing steps are as follows:

[0049] EnvFactor0 = Hash(GeoL) avg |SpectrumF avg |PVPanelT avg ).

[0050] The second approach:

[0051] The environmental features of all members in the communication group are concatenated to obtain a feature string containing the environmental features of all members in the group.

[0052] Then, the feature string containing the environmental features of all group members is hashed to obtain the initial environmental feature vector.

[0053] It is understandable that the environmental characteristics of all members in the group are concatenated or combined in some way to form a long feature string, and then the entire string is hashed, as follows:

[0054] EnvFactor0=Hash(GeoL1∣∣SpectrumF1∣∣PVPanelT1∣∣…∣∣GeoL N |SpecturmF N |PVPanelT N ).

[0055] In this embodiment, based on the broadcast root key K root The initial environment feature vector EnvFactor0, the timestamp T0, and the preset group identifier G id The first key of a preset length L (i.e., key length) is generated through a key derivation function, and the specific formula is as follows:

[0056]

[0057] Among them, the aforementioned preset group identifier G idThis serves as the logical group number, enabling key isolation between different groups. Furthermore, the timestamp T0 can be replaced with a random number, depending on the specific situation, without restriction. H above represents the broadcast root key K. root The initial environment feature vector EnvFactor0, the timestamp T0, and the preset group identifier G id The concatenated result is hashed, and then the hash result is processed by the KDF algorithm to obtain the first key (also known as the initial key).

[0058] In this embodiment, after generating a first key of a preset length using a key derivation function based on the broadcast root key, initial environment feature vector, timestamp, and preset group identifier, the method further includes the following, which can be specifically combined with... Figure 2 understand.

[0059] When a new member requests to join the communication group, the concentrator performs the following steps:

[0060] Step S201, Receive new member MN new The group join request message includes the new member's environmental characteristics, digital certificate, and public key.

[0061] The above group join request message can be represented as: Req join ={ID new Cert new ,Env new ,N}, where ID new This is the device ID for the new member. This process is not used; the concentrator stores it for later retrieval when needed. (Cert) new For new members' digital certificates, Env new For the environmental characteristics of the new member, N represents a one-time random number. The public key of the new member is sent separately or directly called by the concentrator and added to the group entry request information, without specific restrictions.

[0062] Step S202, verify the new member's digital certificate Cert new After verifying the legitimacy of the new member, the environmental features of the new member are compared with the initial environmental feature vector to obtain the difference factor δ, and it is determined whether the difference factor is within the preset threshold.

[0063] In addition, the aforementioned differential factor can also be understood as a pseudo-random number generated by the concentrator combining the first set of keys, the current timestamp, and the device ID of the new member, in which case there is no preset threshold.

[0064] If the difference factor is within the preset threshold, the concentrator continues to execute the following steps:

[0065] Step S203: Based on the difference factor and the first set of keys, generate the second set of keys using the key derivation function.

[0066] This can be expressed as, This step ensures the one-way forward evolution of the key, until the old key group (i.e., the first key group) is known. The members of δ can calculate the new key, but knowing the new key, they cannot trace back the old key, thus satisfying forward security.

[0067] In step S204, the second set of keys is sent separately to the new member using the new member's public key. The group key update message is then broadcast to the communication group, so that each member in the communication group can calculate the second set of keys based on the first set of keys and the group key update message after receiving the group key update message. The group key update message includes a difference factor.

[0068] It should be noted that the concentrator broadcasts an updated group key message to the communication group and also encrypts an authentication tag using the old group key to prevent tampering, specifically as follows:

[0069] In this embodiment, after generating a first key of a preset length using a key derivation function based on the broadcast root key, initial environment feature vector, acquired timestamp, and preset group identifier, the method further includes the following, which can be specifically combined with... Figure 3 understand.

[0070] If any member is found to be abnormal and needs to be removed from the communication group, the concentrator will perform the following steps:

[0071] Step S301: Randomly generate a random number salt. new .

[0072] Step S302: Calculate the hash value of the device ID of the legitimate member in the current communication group. The legitimate member is the other member in the communication group except for the abnormal member. The device ID is obtained synchronously when obtaining the environmental characteristics of each member in the communication group.

[0073] That is, MemberHash = Hash(ID1|ID2|...|ID) N-1 Assume there is only one abnormal member, and the original communication group has N members.

[0074] Step S303, based on the broadcast root key and the preset group identifier G id The hash value and random number of the device ID of the legitimate members in the communication group are used to generate a third key using a key derivation function.

[0075] Specifically, it is expressed as follows: The meaning of the formula can be understood by referring to the previous explanation, and will not be repeated here.

[0076] Step S304: Using the public key of each legitimate member, the third set of keys is sent to each legitimate member respectively. The public key of each legitimate member is obtained synchronously when obtaining the environmental characteristics of each member in the communication group.

[0077] In summary, in this embodiment, by dynamically binding the key to the physical environmental characteristics (geographic location, solar spectrum, panel temperature) of the photovoltaic inverter, the overall security of the communication group is improved. Furthermore, efficient key evolution is achieved through a one-way function (or key derivation function) and a differential factor mechanism. In scenarios with frequent member changes, the concentrator does not need to redistribute the complete key for each member; it only needs to broadcast a very short differential information once. Existing members in the group can then autonomously derive the new key using the old key and differential information, greatly saving network bandwidth. This is particularly suitable for large-scale, resource-constrained photovoltaic network environments. In addition, when adding a member, the key evolution through a one-way function ensures that the new member cannot decrypt previous communications, thus ensuring forward security. When deleting a member, a "tail-cutting and rebirth" strategy is adopted, introducing a new random salt and member list hash to directly derive a completely new group key unrelated to the past from the root key, ensuring that the kicked-out member cannot decrypt any future communications, thus ensuring backward security.

[0078] The above combination Figures 1-3 The method for generating a distributed photovoltaic ring communication group key provided in the embodiments of this application is described in detail. The following example illustrates the above-mentioned method for generating a distributed photovoltaic ring communication group key.

[0079] A large-scale distributed photovoltaic (PV) power plant comprises a central monitoring station (with a centralized controller) and over 200 PV inverters. These inverters are connected via a ring-shaped fiber optic Ethernet network for real-time uploading of power generation data and equipment status, as well as receiving scheduling commands from the centralized controller. The communication content includes sensitive power generation data and control commands, requiring extremely high security and real-time performance. Each PV inverter is pre-installed with a digital certificate and private key issued by a CA, and integrates a GPS module (also known as a geolocation sensor), temperature sensor, and spectral sensor.

[0080] ①System initialization and networking:

[0081] All inverters are divided into 4 logic groups (Gid = 1, 2, 3, 4). This example uses group 1 (Gid = 1), which contains 50 inverters (MN1 to MN). 50 ).

[0082] Initial group key generation: The central controller GC collects real-time environmental characteristics (latitude and longitude, panel temperature, light intensity) reported by all 50 inverters in the group, calculates the comprehensive hash value, EnvFactor0.

[0083] And generate the initial group key for group 1:

[0084] K_group1 0 =KDF(SM3(K_root1||Gid=1||T0||EnvFactor0), L=128),

[0085] Where T0 is the system initialization timestamp.

[0086] Secure distribution: The GC establishes a secure connection with each inverter in the group via a certificate-based bidirectional SSL / TLS channel, transferring K_group1... 0 After encryption, the data is distributed to the secure storage of each inverter.

[0087] Network communication: After initialization, the inverters within the group use K_group1 0 As a group key, broadcast communication is conducted on the ring network using SM4-GCM mode (which provides encryption and authentication).

[0088] ②Added inverter (MN) 51 Join Group 1

[0089] Authentication request: MN 51 After power-on, it actively sends an engroup request message to the GC.

[0090] The message includes: its device ID, digital certificate, real-time acquired Envnew (GPS coordinates: X, Y; panel temperature: 35℃; spectral value: 850) and a random number Nonce.

[0091] Centralized Controller Verification: GC Verification MN 51 Verify the validity of the certificate and determine whether its GPS coordinates are within the preset area of ​​the power station.

[0092] Key evolution proceeds upon successful verification:

[0093] GC calculates the difference factor: δ = SM3(Kroot||IDMN) 51 ||t), where t is the current precise time.

[0094] GC evolves to generate a new group key: K_group11 = KDF(K_group1) 0 ,δ).

[0095] Efficient distribution: GC uses MN 51The public key is used to encrypt the new group key, which is then sent to MN via a unicast message. 51 :E(PKMN) 51 ,K_group11).

[0096] The GC broadcasts an update message to the current group: BroadcastMsg = {δ,"Update"}. This message uses the old group key K_group1. 0 Perform authentication encryption (SM4-GCM).

[0097] Key synchronization: After the original 50 members in the group receive the broadcast, they verify the authentication tag and then use the local K_group1. 0 Using the received δ, a new key K_group11 is calculated automatically. The communication overhead is only one broadcast message.

[0098] MN 51 Decrypt the exclusive message using your own private key to obtain K_group11.

[0099] Synchronization complete: From this point on, all 51 members of the group use K_group11 for secure communication.

[0100] ③ A certain inverter (MN) 23 The fault has been deleted.

[0101] Triggered: GC detects MN 23 If a heartbeat times out multiple times in a row, it is considered faulty and should be removed from group 1.

[0102] Key revocation and update: GC generates a revocation token: Token = SM3("Revoke" || IDMN) 23 ||Kroot), and generate a new random number Saltnew.

[0103] GC calculates the hash value of the current list of 50 valid member IDs: MemberHash = SM3(IDMN1||IDMN2||...||IDMN) 50 ).

[0104] GC completely regenerates the group key, severing all connections with previous keys:

[0105] Kgroup21=KDF(SM3(Kroot||Gid=1||Saltnew||MemberHash), L=128),

[0106] Secure distribution:

[0107] GC encrypts a new group key K_group12 for each of the remaining 50 legitimate members using their public key, and broadcasts it.

[0108] Key synchronization and isolation: All legitimate members listen to the broadcast and decrypt their own data packet using their private key to obtain K_group12.

[0109] Fault node MN 23 Even if it is still online, because its public key has been excluded from the broadcast list by the GC, it cannot decrypt to obtain the new key and is completely isolated, ensuring backward security.

[0110] Complete: The remaining 50 members in the group have started communicating using K_group12.

[0111] The above describes the method and application of generating a distributed photovoltaic ring communication group key provided in the embodiments of this application. The following details the system for generating a distributed photovoltaic ring communication group key provided in the embodiments of this application.

[0112] This system is applied to a concentrator and specifically includes: a retrieval module, an acquisition module, a processing module, and a group key generation module, as shown below.

[0113] The retrieval module is used to retrieve a pre-set broadcast root key from the concentrator, wherein the broadcast root key is used to derive the group key for each member within the group;

[0114] The acquisition module is used to acquire the environmental characteristics of each member in the communication group corresponding to the concentrator and record the acquisition timestamp;

[0115] The processing module is used to summarize the environmental features of all members in the communication group, and then perform hash processing on the summarized environmental features to obtain the initial environmental feature vector.

[0116] The group key generation module is used to generate a first group key of a preset length based on the broadcast root key, the initial environment feature vector, the timestamp, and the preset group identifier through a key derivation function.

[0117] In this embodiment, the environmental characteristics of the group members include the physical location of the group members, the real-time light spectrum index, and the photovoltaic panel temperature.

[0118] In this embodiment, the environmental features of all members within the communication group are aggregated, and then the aggregated environmental features are hashed to obtain an initial environmental feature vector, including:

[0119] The environmental features of each member in the communication group are concatenated to obtain the environmental feature string of each member in the group.

[0120] The environmental feature strings of all members in the group are averaged one dimension at a time to obtain the averaged environmental features.

[0121] The averaged environmental features are hashed to obtain the initial environmental feature vector.

[0122] or,

[0123] The environmental features of all members in the communication group are concatenated to obtain a feature string containing the environmental features of all members in the group.

[0124] Then, the feature string containing the environmental features of all group members is hashed to obtain the initial environmental feature vector.

[0125] Furthermore, the specific implementation of the above system is basically similar to the method implementation, so the description is relatively simple. For relevant details, please refer to the description of the method implementation. Moreover, it should be noted that in the various modules of the system of this application, the components are logically divided according to the functions they are to perform. However, this application is not limited to this and can re-divide or combine the components as needed.

[0126] In another aspect, the present invention provides an electronic device for implementing the above-described method for generating keys for a distributed photovoltaic ring communication group. This electronic device is not limited to a terminal device or server within a system. The electronic device includes, but is not limited to, a memory and a processor. The memory stores a computer program, and the processor is configured to execute the steps of any of the above-described method embodiments via the computer program.

[0127] In another aspect, the present invention provides a computer program product or computer program including computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the methods provided in various optional embodiments of the method for generating a distributed photovoltaic ring communication group key described above. The computer program is configured to execute the steps in any of the above method embodiments during runtime.

[0128] The foregoing has described specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims may be performed in a different order than those shown in the embodiments and still achieve the desired result. Furthermore, the specific order or sequential order shown in the drawings is not necessarily required to achieve the desired result; in some embodiments, multitasking and parallel processing are possible or may be advantageous.

[0129] The above description is merely an embodiment of this application and is not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A method for generating a distributed photovoltaic ring communication group key, applied to a concentrator, characterized in that, The method includes: Retrieve a pre-set broadcast root key from the concentrator, wherein the broadcast root key is used to derive the group key for each member within the group; Obtain the environmental characteristics of each member in the communication group corresponding to the concentrator, and record the acquisition timestamp; The environmental features of all members in the communication group are summarized and then hashed to obtain the initial environmental feature vector. Based on the broadcast root key, the initial environment feature vector, the timestamp, and the preset group identifier, a first key of preset length is generated through a key derivation function.

2. The method for generating a distributed photovoltaic ring communication group key according to claim 1, characterized in that, The environmental characteristics of the group members include their physical location, real-time light spectrum index, and photovoltaic panel temperature.

3. The method for generating a distributed photovoltaic ring communication group key according to claim 1, characterized in that, The process of summarizing the environmental features of all members within the communication group, and then hashing the summarized environmental features to obtain an initial environmental feature vector, includes: The environmental features of each member in the communication group are concatenated to obtain the environmental feature string of each member in the group. The environmental feature strings of all members in the group are averaged one dimension at a time to obtain the averaged environmental features. The averaged environmental features are hashed to obtain an initial environmental feature vector. or, The environmental features of all members in the communication group are concatenated to obtain a feature string containing the environmental features of all members in the group. The feature string containing the environmental features of all group members is then hashed to obtain the initial environmental feature vector.

4. The method for generating a distributed photovoltaic ring communication group key according to claim 1, characterized in that, After generating a first key of a preset length using a key derivation function based on the broadcast root key, the initial environment feature vector, the timestamp, and a preset group identifier, the method further includes: If a new member requests to join the communication group, the concentrator performs the following steps: Receive the new member's group entry request message, wherein the group entry request information includes the new member's environmental characteristics, the new member's digital certificate, and the new member's public key; The validity of the new member's digital certificate is verified. After the verification is successful, the environmental characteristics of the new member are compared with the initial environmental feature vector to obtain the difference factor, and it is determined whether the difference factor is within a preset threshold. If the difference factor is within a preset threshold, the concentrator continues to execute the following steps: Based on the difference factor and the first set of keys, a second set of keys is generated using a key derivation function; Then, using the public key of the new member, the second set of keys is sent separately to the new member, and a group key update message is broadcast to the communication group, so that after each member in the communication group receives the group key update message, they calculate the second set of keys based on the first set of keys and the group key update message, wherein the group key update message includes the difference factor.

5. The method for generating a distributed photovoltaic ring communication group key according to claim 1, characterized in that, After generating a first key of a preset length using a key derivation function based on the broadcast root key, the initial environment feature vector, the acquired timestamp, and the preset group identifier, the method further includes: If any member is found to be abnormal and needs to be removed from the communication group, the concentrator performs the following steps: Generate a random number; Calculate the hash value of the device ID of the legitimate member in the current communication group, wherein the legitimate member is the other member in the communication group excluding abnormal members, and the device ID is obtained synchronously when obtaining the environmental characteristics of each member in the communication group; Based on the broadcast root key, the preset group identifier, the hash value of the device ID of the legitimate member in the communication group, and the random number, a third key is generated using a key derivation function; Using the public key of each legitimate member, the third set of keys is sent to each legitimate member respectively, wherein the public key of each legitimate member is obtained synchronously when obtaining the environmental characteristics of each member in the communication group.

6. A distributed photovoltaic ring communication group key generation system, applied to a concentrator, characterized in that, The system includes: The retrieval module is used to retrieve a pre-set broadcast root key from the concentrator, wherein the broadcast root key is used to derive the group key for each member in the group; The acquisition module is used to acquire the environmental characteristics of each member in the communication group corresponding to the concentrator, and record the acquisition timestamp; The processing module is used to summarize the environmental features of all members in the communication group, and then perform hash processing on the summarized environmental features to obtain an initial environmental feature vector. The group key generation module is used to generate a first group key of a preset length based on the broadcast root key, the initial environment feature vector, the timestamp, and the preset group identifier through a key derivation function.

7. The distributed photovoltaic ring communication group key generation system according to claim 6, characterized in that, The environmental characteristics of the group members include their physical location, real-time light spectrum index, and photovoltaic panel temperature.

8. The distributed photovoltaic ring communication group key generation system according to claim 6, characterized in that, The process of summarizing the environmental features of all members within the communication group, and then hashing the summarized environmental features to obtain an initial environmental feature vector, includes: The environmental features of each member in the communication group are concatenated to obtain the environmental feature string of each member in the group. The environmental feature strings of all members in the group are averaged one dimension at a time to obtain the averaged environmental features. The averaged environmental features are hashed to obtain an initial environmental feature vector. or, The environmental features of all members in the communication group are concatenated to obtain a feature string containing the environmental features of all members in the group. The feature string containing the environmental features of all group members is then hashed to obtain the initial environmental feature vector.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps of the method for generating a distributed photovoltaic ring communication group key as described in any one of claims 1-5.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a computer program or instructions that, when executed, cause the method as described in any one of claims 1-5 to be performed.

Images