Data encryption transmission system and method for electric power communication

Abstract

The invention relates to the technical field of electric power communication, in particular to a data encryption transmission system and method for electric power communication, and aims to realize self-adaptive selection of encryption strategies by constructing a multi-dimensional network state sensing model and dynamically monitoring parameters such as link delay and packet loss probability and combining quantitative grading of data tasks. According to the method, one or more encryption links can be flexibly adopted according to real-time network fluctuation and task priority, an active data residue clearing mechanism is introduced, block chain evidence storage and an improved sequence pattern mining algorithm are combined, in addition, through a seamless switching mechanism of main and standby links, the continuity and stability of communication are ensured, and the communication efficiency is improved. And data loss or delay caused by link interruption is avoided. In this way, the technical problem that in the prior art, a static encryption algorithm or a protection mechanism of a single link is emphasized, and self-adaptive adjustment is difficult to carry out according to real-time fluctuation of a network state and the priority of a data task is solved.

Description

Technical Field

[0001] This invention relates to the field of power communication technology, and in particular to a data encryption transmission system and method for power communication. Background Technology

[0002] As a key infrastructure of the smart grid, the power communication system undertakes the transmission of core business data such as dispatch automation, load control, relay protection, and electricity consumption information collection. This data not only contains massive amounts of real-time operational status information but also involves user privacy and grid control commands, exhibiting high sensitivity and real-time requirements. With the large-scale deployment of the power Internet of Things (IoT), the communication network environment is becoming increasingly complex, and data faces increasingly severe risks of theft, tampering, and malicious attacks during collection, transmission, and processing. To ensure the safe and stable operation of power production, encryption technology is typically used to protect transmitted data.

[0003] However, existing methods focus on static encryption algorithms or single-link protection mechanisms, making it difficult to adaptively adjust to real-time fluctuations in network conditions and the priority of data tasks. Summary of the Invention

[0004] The purpose of this invention is to provide a data encryption transmission system and method for power communication, which solves the technical problem that the existing technology focuses on static encryption algorithms or single-link protection mechanisms, and is difficult to adaptively adjust according to real-time fluctuations in network status and the priority of data tasks.

[0005] To achieve the above objectives, the present invention provides a data encryption transmission method for power communication, comprising: The raw power data to be transmitted is acquired and compressed to obtain compressed data. Construct a multi-dimensional network status awareness model, collect network status parameters in real time including link latency, packet loss rate, jitter, and bandwidth utilization, and quantify and classify the task volume characteristics of the data to be transmitted. Based on a preset multi-link encryption strategy, by dynamically monitoring the current network status parameters and the task volume characteristics of the data to be transmitted, the system adaptively selects a single encryption link or combines multiple encryption links to encrypt the compressed data and transmit it to the receiving end. The received encrypted data is decrypted and decompressed at the receiving end to restore the original power data; After data transmission is completed, an active data residue removal mechanism is triggered to irreversibly erase plaintext or ciphertext data remaining in the buffers, memory, and temporary files of the sending and receiving ends, and generate corresponding clearance proof. Key information and corresponding clearing proofs for each encrypted transmission event are uploaded to the blockchain network for storage, and a transmission event graph based on time series is constructed. A pre-built improved sequence pattern mining algorithm is used to perform correlation analysis on the historical transmission event data stored in the blockchain to generate early warning information for fault diagnosis or attack tracing. The system monitors the connectivity of the primary encrypted link in real time. If the primary encrypted link is found to be interrupted or its quality is lower than the preset standard, the system immediately and seamlessly switches the traffic to the backup encrypted link, sends an alarm to the network management system, and records the switchover event to the local log.

[0006] The adaptive selection of a single encrypted link or a combination of multiple encrypted links specifically includes: A preset task volume threshold is set; when the detected task volume of data to be transmitted is lower than the task volume threshold, only the primary encrypted link is activated for data transmission. When the amount of data to be transmitted is higher than or equal to the task volume threshold, the primary encryption link and the backup encryption link are activated in parallel. A dynamic slicing algorithm based on data importance is adopted to intelligently slice the compressed data according to priority and transmit it concurrently through multiple links. At the receiving end, the multiple data streams are reorganized and sorted based on dual verification of timestamp and sequence number.

[0007] The mechanism for triggering proactive data residue removal specifically includes: At the sending end, after compression and encryption are completed and the data packet has been sent from the sending buffer, the secure erase function is called to overwrite the source file storage area storing the original power data and the temporary key buffer area generated during the encryption process multiple times. The multiple overwrites include at least one all-zero data overwrite, one all-one data overwrite and one random pseudo data overwrite. At the receiving end, once decryption and decompression are complete and the application has read the original power data, the memory area storing the plaintext data is immediately cleared before being released, and the cached copy of the decrypted file on the disk is deleted. The generation of corresponding erasure proofs specifically includes: after the erasure operation is completed, the verification value of the erased area is calculated using a hash algorithm, and combined with the timestamp of the erasure operation, operation type, erasure range metadata, a structured erasure proof data packet is generated. The erasure proof data packet is organized using a Merkle tree structure, and its root hash value is uploaded to the blockchain as evidence.

[0008] Specifically, the process involves using a pre-defined data mining algorithm to perform correlation analysis on the historical transmission event data stored in the blockchain, including: Extract all encrypted transmission event records within a preset time period from the blockchain and construct a feature vector, which includes time series features, link load features, and failure retransmission features. An improved PrefixSpan sequence pattern mining algorithm is adopted, which introduces a time decay factor and an event weight coefficient to mine frequent sequence patterns and construct a dynamic baseline model of normal transmission behavior. The similarity deviation between the current transmission event sequence and the baseline model is calculated in real time based on the sliding window mechanism, and anomaly outliers are identified by combining the isolated forest algorithm. When the characteristics of transmission events detected in real time deviate from the baseline by more than a preset range, they are identified as abnormal events, and the historical fault nodes or attack source IPs related to them are located through association rule matching.

[0009] Different encryption algorithm suites are configured in the primary encryption link and the backup encryption link respectively. The primary link adopts the combination of SM2-SM4-SM3, and the backup link adopts the combination of quantum key distribution QKD and AES-256 to form heterogeneous encryption redundancy. When potential attack risks are identified through data mining algorithms, encryption algorithm rotation is dynamically triggered, switching the encryption algorithm of high-risk links to the backup algorithm suite, and recording the algorithm switching event in the blockchain; A historical performance database of encryption algorithms is constructed. Based on encryption strength, computational overhead, and power consumption indicators, the algorithm configuration strategy of the primary and backup links is dynamically adjusted through a multi-objective optimization algorithm.

[0010] The dynamic slicing algorithm based on data importance specifically includes: Extract the business type tags, timeliness requirements, and integrity requirements from the compressed data, and construct a data importance assessment model; The compressed data is initially sliced ​​according to a preset slicing granularity, and an importance weight value is calculated for each data slice. Based on the real-time bandwidth, bit error rate, and encryption strength of each link, a weighted round-robin algorithm is used to allocate slices with different importance weights. Important slices are preferentially allocated to high-security links such as QKD encryption, while ordinary slices are allocated to SM4 encryption links. A reordering buffer is established at the receiving end, and fast reordering of out-of-order slices is achieved based on the priority identifier and sequence number carried by the slice.

[0011] The present invention also provides a data encryption transmission system for power communication, for executing the data encryption transmission method for power communication as described above. It includes a data preprocessing module, a multi-link intelligent selection module, a heterogeneous encryption execution module, a proactive data residue removal module, a blockchain evidence storage and mining module, a master-slave seamless switching module, and a control center; The data preprocessing module acquires raw power data and performs compression processing; the multi-link intelligent selection module has a built-in network status awareness unit and task load evaluation unit, and adaptively selects encrypted link combinations based on a deep reinforcement learning model; the heterogeneous encryption execution module supports multiple encryption algorithm suites such as SM2-SM4-SM3 and QKD-AES-256, and supports progressive algorithm switching; the proactive data residue removal module supports multi-level overwrite strategies; the blockchain evidence storage and mining module is used to store encrypted events on the blockchain and perform anomaly detection and source tracing analysis based on an improved sequence pattern mining algorithm; the seamless primary / backup switching module monitors link quality in real time and achieves link switching with zero business awareness; the control center is connected to the data preprocessing module, the multi-link intelligent selection module, the heterogeneous encryption execution module, the proactive data residue removal module, the blockchain evidence storage and mining module, and the seamless primary / backup switching module, and is used to coordinate and control the operation of each module.

[0012] This invention discloses a data encryption transmission system and method for power communication. By constructing a multi-dimensional network state awareness model and dynamically monitoring parameters such as link latency and packet loss rate, combined with the quantification and grading of data tasks, it achieves adaptive selection of encryption strategies. It can flexibly employ single or multiple encrypted links based on real-time network fluctuations and task priorities, significantly improving transmission efficiency and reliability. Simultaneously, it introduces an active data residue removal mechanism to irreversibly erase sensitive data in caches, memory, and temporary files and generate proofs, effectively preventing data leakage. Combining blockchain notarization and an improved sequence pattern mining algorithm, it constructs a time-series-based transmission event graph, enabling correlation analysis of historical data and generating fault diagnosis or attack tracing warnings, enhancing the system's traceability and security capabilities. Furthermore, a seamless switching mechanism between primary and backup links ensures communication continuity and stability, avoiding data loss or delay due to link interruptions. This approach solves the technical problem in existing technologies that focus on static encryption algorithms or single-link protection mechanisms, making it difficult to adaptively adjust according to real-time network state fluctuations and data task priorities. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below.

[0014] Figure 1 This is a flowchart of the data encryption transmission method for power communication according to the present invention. Detailed Implementation

[0015] The embodiments of the present invention are described in detail below. Examples of the embodiments are shown in the accompanying drawings. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain the present invention, but should not be construed as limiting the present invention.

[0016] Please refer to Figure 1 , Figure 1 This is a flowchart of the data encryption transmission method for power communication according to the present invention.

[0017] This invention provides a method for encrypted data transmission in power communication, comprising: S1. Obtain the raw power data to be transmitted and compress the raw power data to obtain compressed data; S2. Construct a multi-dimensional network status awareness model, collect network status parameters in real time, including link latency, packet loss rate, jitter, and bandwidth utilization, and quantify and classify the task volume characteristics of the data to be transmitted. S3. Based on the preset multi-link encryption strategy, by dynamically monitoring the current network status parameters and the task volume characteristics of the data to be transmitted, adaptively select a single encryption link or combine multiple encryption links to encrypt the compressed data and transmit it to the receiving end. In this specific implementation, adaptive selection of a single encrypted link or a combination of multiple encrypted links specifically includes: A preset task volume threshold is set; when the detected task volume of data to be transmitted is lower than the task volume threshold, only the primary encrypted link is activated for data transmission. When the amount of data to be transmitted is higher than or equal to the task volume threshold, the primary encryption link and the backup encryption link are activated in parallel. A dynamic slicing algorithm based on data importance is adopted to intelligently slice the compressed data according to priority and transmit it concurrently through multiple links. At the receiving end, the multiple data streams are reorganized and sorted based on dual verification of timestamp and sequence number.

[0018] S4. At the receiving end, the received ciphertext data is decrypted and decompressed to restore the original power data; S5. After the data transmission is completed, an active data residue removal mechanism is triggered to irreversibly erase the plaintext or ciphertext data remaining in the buffers, memory and temporary files of the sending and receiving ends, and generate a corresponding removal certificate. In this specific implementation, an active data residue removal mechanism is triggered, which includes: At the sending end, after compression and encryption are completed and the data packet has been sent from the sending buffer, the secure erase function is called to overwrite the source file storage area storing the original power data and the temporary key buffer area generated during the encryption process multiple times. The multiple overwrites include at least one all-zero data overwrite, one all-one data overwrite and one random pseudo data overwrite. At the receiving end, once decryption and decompression are complete and the application has read the original power data, the memory area storing the plaintext data is immediately cleared before being released, and the cached copy of the decrypted file on the disk is deleted. The generation of corresponding erasure proofs specifically includes: after the erasure operation is completed, the verification value of the erased area is calculated using a hash algorithm, and combined with the timestamp of the erasure operation, operation type, erasure range metadata, a structured erasure proof data packet is generated. The erasure proof data packet is organized using a Merkle tree structure, and its root hash value is uploaded to the blockchain as evidence.

[0019] S6. Upload the key information of each encrypted transmission event and the corresponding clearing proof to the blockchain network for storage, construct a transmission event map based on time series, and perform correlation analysis on the historical transmission event data stored in the blockchain through a pre-set improved sequence pattern mining algorithm to generate early warning information for fault diagnosis or attack tracing. In this specific implementation, a pre-set data mining algorithm is used to perform correlation analysis on the historical transmission event data stored in the blockchain, specifically including: Extract all encrypted transmission event records within a preset time period from the blockchain and construct a feature vector, which includes time series features, link load features, and failure retransmission features. An improved PrefixSpan sequence pattern mining algorithm is adopted, which introduces a time decay factor and an event weight coefficient to mine frequent sequence patterns and construct a dynamic baseline model of normal transmission behavior. The similarity deviation between the current transmission event sequence and the baseline model is calculated in real time based on the sliding window mechanism, and anomaly outliers are identified by combining the isolated forest algorithm. When the characteristics of transmission events detected in real time deviate from the baseline by more than a preset range, they are identified as abnormal events, and the historical fault nodes or attack source IPs related to them are located through association rule matching.

[0020] S7. Monitor the connectivity of the primary encrypted link in real time. If it is determined that the primary encrypted link is interrupted or its quality is lower than the preset standard, immediately and seamlessly switch the traffic to the backup encrypted link, send an alarm to the network management system, and record the switching event to the local log.

[0021] In this specific implementation, different encryption algorithm suites are configured in the primary encryption link and the backup encryption link respectively. The primary link adopts the combination of SM2-SM4-SM3, and the backup link adopts the combination of quantum key distribution (QKD) and AES-256 to form heterogeneous encryption redundancy. When potential attack risks are identified through data mining algorithms, encryption algorithm rotation is dynamically triggered, switching the encryption algorithm of high-risk links to the backup algorithm suite, and recording the algorithm switching event in the blockchain; A historical performance database of encryption algorithms is constructed. Based on encryption strength, computational overhead, and power consumption indicators, the algorithm configuration strategy of the primary and backup links is dynamically adjusted through a multi-objective optimization algorithm.

[0022] The dynamic slicing algorithm based on data importance specifically includes: Extract the business type tags, timeliness requirements, and integrity requirements from the compressed data, and construct a data importance assessment model; The compressed data is initially sliced ​​according to a preset slicing granularity, and an importance weight value is calculated for each data slice. Based on the real-time bandwidth, bit error rate, and encryption strength of each link, a weighted round-robin algorithm is used to allocate slices with different importance weights. Important slices are preferentially allocated to high-security links such as QKD encryption, while ordinary slices are allocated to SM4 encryption links. A reordering buffer is established at the receiving end, and fast reordering of out-of-order slices is achieved based on the priority identifier and sequence number carried by the slice.

[0023] The present invention also provides a data encryption transmission system for power communication, for executing the data encryption transmission method for power communication as described above. It includes a data preprocessing module, a multi-link intelligent selection module, a heterogeneous encryption execution module, a proactive data residue removal module, a blockchain evidence storage and mining module, a master-slave seamless switching module, and a control center; The data preprocessing module acquires raw power data and performs compression processing; the multi-link intelligent selection module has a built-in network status awareness unit and task load evaluation unit, and adaptively selects encrypted link combinations based on a deep reinforcement learning model; the heterogeneous encryption execution module supports multiple encryption algorithm suites such as SM2-SM4-SM3 and QKD-AES-256, and supports progressive algorithm switching; the proactive data residue removal module supports multi-level overwrite strategies; the blockchain evidence storage and mining module is used to store encrypted events on the blockchain and perform anomaly detection and source tracing analysis based on an improved sequence pattern mining algorithm; the seamless primary / backup switching module monitors link quality in real time and achieves link switching with zero business awareness; the control center is connected to the data preprocessing module, the multi-link intelligent selection module, the heterogeneous encryption execution module, the proactive data residue removal module, the blockchain evidence storage and mining module, and the seamless primary / backup switching module, and is used to coordinate and control the operation of each module.

[0024] Send an alarm to the network management system and record the switch event to the local log, specifically including: Generate structured alarm information, including alarm type, fault link identifier, switchover time, quality score before switchover, and link identifier after switchover; A lightweight message queue is used to asynchronously push alarm information to the alarm receiving interface of the network management system, avoiding blocking the main business process; Switching event records are written to a local circular buffer log file, and log rotation and archiving are automatically triggered when the log file size exceeds a preset threshold; An integrity protection mechanism is adopted for local log files, and the hash checksum of the log files is generated periodically and cross-verified with the blockchain evidence information to prevent the logs from being tampered with.

[0025] The data encryption transmission method for power communication also includes a key lifecycle security management step: A separate session key is generated for each encrypted transmission session, and the session key is cleared from memory immediately after use; Construct a hierarchical key management system, dividing keys into three levels: master key, session key, and temporary key, with different storage media and protection strengths for different levels of keys; Regularly perform integrity checks on the key storage area, and immediately trigger the key revocation and renegotiation process when an unauthorized access to or attempt to tamper with a key is detected. The entire lifecycle of a key—from generation and distribution to use and revocation—is recorded on the blockchain for evidence preservation, forming a complete audit chain for key usage.

[0026] The data encryption transmission method for power communication also includes a data integrity verification step: At the sending end, the first hash value is calculated on the compressed data, and the first hash value is appended to the encrypted data packet and transmitted together. After decryption and decompression at the receiving end, a second hash value is calculated on the restored data and compared with the first hash value; If the hash values ​​do not match, a retransmission request is sent to the sender, and the data integrity exception event is recorded in the blockchain. Establish a historical integrity verification database, perform statistical analysis on links or time points where verification frequently fails, and identify potential data tampering attack patterns. The above-disclosed embodiments are merely one or more preferred embodiments of this application and should not be construed as limiting the scope of this application. Those skilled in the art can understand that all or part of the processes for implementing the above embodiments and equivalent changes made in accordance with the claims of this application still fall within the scope of this application.

Claims

1. A method for encrypted data transmission in power communication, characterized in that, include: The raw power data to be transmitted is acquired and compressed to obtain compressed data. Construct a multi-dimensional network status awareness model, collect network status parameters in real time including link latency, packet loss rate, jitter, and bandwidth utilization, and quantify and classify the task volume characteristics of the data to be transmitted. Based on a preset multi-link encryption strategy, by dynamically monitoring the current network status parameters and the task volume characteristics of the data to be transmitted, the system adaptively selects a single encryption link or combines multiple encryption links to encrypt the compressed data and transmit it to the receiving end. The received encrypted data is decrypted and decompressed at the receiving end to restore the original power data; After data transmission is completed, an active data residue removal mechanism is triggered to irreversibly erase plaintext or ciphertext data remaining in the buffers, memory, and temporary files of the sending and receiving ends, and generate corresponding clearance proof. Key information and corresponding clearing proofs for each encrypted transmission event are uploaded to the blockchain network for storage, and a transmission event graph based on time series is constructed. A pre-built improved sequence pattern mining algorithm is used to perform correlation analysis on the historical transmission event data stored in the blockchain to generate early warning information for fault diagnosis or attack tracing. The system monitors the connectivity of the primary encrypted link in real time. If the primary encrypted link is found to be interrupted or its quality is lower than the preset standard, the system immediately and seamlessly switches the traffic to the backup encrypted link, sends an alarm to the network management system, and records the switchover event to the local log.

2. The data encryption transmission method for power communication as described in claim 1, characterized in that, Adaptively select a single encrypted link or combine multiple encrypted links, specifically including: A preset task volume threshold is set; when the detected task volume of data to be transmitted is lower than the task volume threshold, only the primary encrypted link is activated for data transmission. When the amount of data to be transmitted is higher than or equal to the task volume threshold, the primary encryption link and the backup encryption link are activated in parallel. A dynamic slicing algorithm based on data importance is adopted to intelligently slice the compressed data according to priority and transmit it concurrently through multiple links. At the receiving end, the multiple data streams are reorganized and sorted based on dual verification of timestamp and sequence number.

3. The data encryption transmission method for power communication as described in claim 2, characterized in that, Triggering the proactive data residue removal mechanism specifically includes: At the sending end, after compression and encryption are completed and the data packet has been sent from the sending buffer, the secure erase function is called to overwrite the source file storage area storing the original power data and the temporary key buffer area generated during the encryption process multiple times. The multiple overwrites include at least one all-zero data overwrite, one all-one data overwrite and one random pseudo data overwrite. At the receiving end, once decryption and decompression are complete and the application has read the original power data, the memory area storing the plaintext data is immediately cleared before being released, and the cached copy of the decrypted file on the disk is deleted. The generation of corresponding erasure proofs specifically includes: after the erasure operation is completed, the verification value of the erased area is calculated using a hash algorithm, and combined with the timestamp of the erasure operation, operation type, erasure range metadata, a structured erasure proof data packet is generated. The erasure proof data packet is organized using a Merkle tree structure, and its root hash value is uploaded to the blockchain as evidence.

4. The data encryption transmission method for power communication as described in claim 3, characterized in that, The historical transmission event data stored in the blockchain is analyzed using a pre-set data mining algorithm, specifically including: Extract all encrypted transmission event records within a preset time period from the blockchain and construct a feature vector, which includes time series features, link load features, and failure retransmission features. An improved PrefixSpan sequence pattern mining algorithm is adopted, which introduces a time decay factor and an event weight coefficient to mine frequent sequence patterns and construct a dynamic baseline model of normal transmission behavior. The similarity deviation between the current transmission event sequence and the baseline model is calculated in real time based on the sliding window mechanism, and anomaly outliers are identified by combining the isolated forest algorithm. When the characteristics of transmission events detected in real time deviate from the baseline by more than a preset range, they are identified as abnormal events, and the historical fault nodes or attack source IPs related to them are located through association rule matching.

5. The data encryption transmission method for power communication as described in claim 4, characterized in that, Different encryption algorithm suites are configured in the primary encryption link and the backup encryption link respectively. The primary link adopts the combination of SM2-SM4-SM3, and the backup link adopts the combination of quantum key distribution QKD and AES-256 to form heterogeneous encryption redundancy. When potential attack risks are identified through data mining algorithms, encryption algorithm rotation is dynamically triggered, switching the encryption algorithm of high-risk links to the backup algorithm suite, and recording the algorithm switching event in the blockchain; A historical performance database of encryption algorithms is constructed. Based on encryption strength, computational overhead, and power consumption indicators, the algorithm configuration strategy of the primary and backup links is dynamically adjusted through a multi-objective optimization algorithm.

6. The data encryption transmission method for power communication as described in claim 5, characterized in that, Dynamic slicing algorithms based on data importance specifically include: Extract the business type tags, timeliness requirements, and integrity requirements from the compressed data, and construct a data importance assessment model; The compressed data is initially sliced ​​according to a preset slicing granularity, and an importance weight value is calculated for each data slice. Based on the real-time bandwidth, bit error rate, and encryption strength of each link, a weighted round-robin algorithm is used to allocate slices with different importance weights. Important slices are preferentially allocated to high-security links such as QKD encryption, while ordinary slices are allocated to SM4 encryption links. A reordering buffer is established at the receiving end, and fast reordering of out-of-order slices is achieved based on the priority identifier and sequence number carried by the slice.

7. A data encryption transmission system for power communication, used to execute the data encryption transmission method for power communication as described in claim 6, characterized in that, It includes a data preprocessing module, a multi-link intelligent selection module, a heterogeneous encryption execution module, a proactive data residue removal module, a blockchain evidence storage and mining module, a master-slave seamless switching module, and a control center; The data preprocessing module is used to acquire raw power data and perform compression processing; The multi-link intelligent selection module has a built-in network status awareness unit and task load evaluation unit, and adaptively selects encrypted link combinations based on a deep reinforcement learning model. The heterogeneous encryption execution module supports multiple encryption algorithm suites such as SM2-SM4-SM3 and QKD-AES-256, and supports progressive algorithm switching. The proactive data residue removal module supports multi-level overwrite strategies. The blockchain evidence storage and mining module is used to store encrypted events on the blockchain and perform anomaly detection and source analysis based on an improved sequence pattern mining algorithm. The seamless primary / backup switching module monitors link quality in real time and achieves link switching with zero business awareness. The control center is connected to the data preprocessing module, the multi-link intelligent selection module, the heterogeneous encryption execution module, the proactive data residue removal module, the blockchain evidence storage and mining module, and the seamless primary / backup switching module, and is used to coordinate and control the operation of each module.

Images