Edge Data Encryption Transmission Method and System for Distribution Network Automation

Abstract

This invention relates to the field of data encryption transmission technology, and particularly to an edge data encryption transmission method and system for distribution network automation. The method includes: collecting operating parameters during the operation of the distribution network automation system, wherein the operating parameters include at least sensor data and status data; converting the operating parameters into ciphertext using a preset dynamic offset encryption rule; editing initial values; and writing the initial values ​​and ciphertext into a pre-constructed recursive formula. By generating verification values, this invention enables multi-point verification of status values, timely detection of data anomalies, and enhanced identification capabilities for abnormal operating parameters. It achieves dynamic and reliable verification of the entire process of operating parameter transmission and use, effectively improving the security of distribution network automation operating parameters during transmission and processing. It also enhances the ability to perceive and locate abnormal data, providing reliable data support for the safe and stable operation and intelligent decision-making of the distribution network.

Description

Technical Field

[0001] This invention relates to the field of data encryption transmission technology, and in particular to an edge data encryption transmission method and system for distribution network automation. Background Technology

[0002] Distribution network automation refers to the process of real-time monitoring and analysis of the operating status of power distribution equipment (such as switches, transformers, and lines) by comprehensively applying sensors, communication networks, and data processing technologies in the power distribution network process (transmitting electrical energy from substations to the user side of the medium and low voltage grid). Edge data refers to data collected, processed, and temporarily stored at the edge of the distribution network, which typically includes: electrical operating parameters, equipment status data, fault and event data, environmental and auxiliary sensing data, etc.

[0003] Since power distribution equipment and related terminals used to generate edge data are usually deployed outdoors, external personnel can easily access the equipment without authorization through the interface or directly contact the equipment itself, which may lead to illegal operations and data tampering, resulting in data being tampered with during transmission.

[0004] Therefore, "how to verify the authenticity of the received distribution network data at the target end" is the technical problem that this invention needs to solve. Summary of the Invention

[0005] The purpose of this invention is to provide an edge data encryption transmission method and system for distribution network automation, so as to solve the problems mentioned in the background art.

[0006] To achieve the above objectives, the present invention provides the following technical solution:

[0007] An edge data encryption transmission method for distribution network automation, the method comprising:

[0008] The system collects operating parameters during the automated operation of the distribution network, wherein the operating parameters include at least sensor data and status data. Using a preset dynamic offset encryption rule, the operating parameters are converted into ciphertext. The initial values ​​are edited, and the initial values ​​and ciphertext are written into a pre-constructed recursive relation formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive relation formula to obtain a second status value, and so on.

[0009] Create data blocks that correspond one-to-one with state values, insert time information tags into the data blocks, summarize all data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism.

[0010] Set up the source and destination ends for transmitting running parameters, build several communication links, and cluster them into main links and auxiliary links. Use the main link to transmit the ciphertext, and connect the auxiliary links to the top of the status data stack. At the destination end, cross-validate the received ciphertext and status values.

[0011] The system identifies the data processing equipment during the automated operation of the distribution network, updates the initial value according to a preset frequency, reconstructs the status data stack, divides the updated initial value into several segments, where the value of any segment is greater than that of the previous segment, collects the original signals of the operating parameters at the corresponding bit values ​​of the segments from the source end, integrates them to obtain a verification value, sends the verification value to the data processing equipment, and re-verifies the status value at the target end.

[0012] Furthermore, the step of collecting operating parameters during the automated operation of the distribution network, wherein the operating parameters include at least: sensor data and status data, and converting the operating parameters into ciphertext using a preset dynamic offset encryption rule, includes:

[0013] The operating parameters are divided into several individual items, and each individual item is standardized to obtain a standard unit;

[0014] An offset is created that corresponds one-to-one with each item. The standard unit is then processed using the offset and encrypted to generate ciphertext.

[0015] Furthermore, the step of substituting the first state value and the latest value into the recursive formula when the latest value of the ciphertext is obtained to obtain the second state value, and so on, includes:

[0016] Set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute it into the recursive formula;

[0017] The recursive formula is as follows:

[0018] ;

[0019] in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

[0020] Furthermore, the step of writing the recursive formula into the state data stack and embedding a backup pop-up mechanism includes:

[0021] Record the timestamp corresponding to each running parameter and establish the correspondence between timestamps, status values ​​and time information tags;

[0022] Configure a fluctuation range corresponding to each individual item. When the operating parameters exceed the corresponding fluctuation range, activate the emergency response rule.

[0023] Furthermore, the steps of setting the source and destination ends for transmitting operating parameters, establishing several communication links, and clustering them into main links and auxiliary links include:

[0024] Record the behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency;

[0025] Based on the aforementioned behavioral parameters, a risk level is set for each communication link.

[0026] Furthermore, the steps of integrating the obtained verification value, sending the verification value to the data processing device, and re-verifying the status value in the target terminal include:

[0027] A risk prediction model is constructed and integrated into the data processing device;

[0028] The encrypted text is forwarded to the data processing device to generate a predicted value, and the time step is dynamically adjusted.

[0029] The present invention also provides an edge data encryption transmission system for distribution network automation, the system comprising:

[0030] The data acquisition module is used to collect operating parameters during the automation of the distribution network. The operating parameters include at least sensor data and status data. Using a preset dynamic offset encryption rule, the operating parameters are converted into ciphertext. The initial value is edited and written into a pre-constructed recursive formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive formula to obtain a second status value, and so on.

[0031] The module is used to create data blocks that correspond one-to-one with state values, insert time information tags into the data blocks, summarize all data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism.

[0032] The cross-validation module is used to set the source and target ends of the operation parameter transmission, build several communication links, and cluster them into main links and auxiliary links. The main link is used to transmit the ciphertext, and the auxiliary links are connected to the top of the status data stack. At the target end, the received ciphertext and status value are cross-validated.

[0033] The duplicate verification module is used to identify data processing devices in the process of distribution network automation operation, update the initial value according to a preset frequency, reconstruct the status data stack, divide the updated initial value into several segments, wherein the value of any segment is greater than the previous segment, collect the original signal of the operating parameters at the corresponding bit value of the segment in the source end, integrate them to obtain the verification value, send the verification value to the data processing device, and re-verify the status value in the target end.

[0034] Furthermore, the acquisition module includes:

[0035] The segmentation unit is used to segment the operating parameters into several individual items, and to standardize each individual item to obtain a standard unit;

[0036] An encryption unit is used to create an offset that corresponds one-to-one with each item. The standard unit is processed using the offset and then encrypted to generate ciphertext.

[0037] The substitution unit is used to set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute it into the recursive formula.

[0038] The recursive formula is as follows:

[0039] ;

[0040] in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

[0041] Furthermore, the creation module includes:

[0042] Establish a unit to record the timestamp corresponding to each running parameter, and establish the correspondence between timestamps, status values, and time information tags;

[0043] The activation unit is used to configure the fluctuation range corresponding to each individual item. When the operating parameters exceed the corresponding fluctuation range, the emergency response rule is activated.

[0044] Furthermore, the cross-validation module includes:

[0045] A recording unit is used to record behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency;

[0046] The setting unit is used to set the risk level of each communication link based on the behavioral parameters.

[0047] Compared with the prior art, the beneficial effects of the present invention are:

[0048] This invention ensures the security of transmission by encrypting operating parameters. By combining initial values ​​to generate state values, it establishes the correlation between operating parameters at adjacent time points, thereby transforming discretely acquired operating parameters into a time-continuous state evolution sequence, further improving the security of operating parameter transmission. By constructing a state data stack using state values, a lightweight state cache structure can be used to convert operating parameters from unordered data into a strict time-series structure, enabling unified management and retrieval, facilitating state backtracking and historical tracing, and also intuitively displaying the recursive relationship between state values, improving anomaly detection and rapid location capabilities. By cross-validating encrypted data and state values, the authenticity of transmitted operating parameters can be verified, ensuring the security of operating parameter transmission. By generating verification values, multi-point verification of state values ​​can be performed, timely detection of data anomalies can be achieved, and the ability to identify abnormal operating parameters can be enhanced. This enables dynamic and reliable verification of the entire process of operating parameter transmission and use, effectively improving the security of distribution network automation operating parameters during transmission and processing, enhancing the perception and location efficiency of abnormal data, and providing reliable data support for the safe and stable operation and intelligent decision-making of the distribution network. Attached Figure Description

[0049] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention.

[0050] Figure 1 A flowchart illustrating the edge data encryption transmission method for distribution network automation provided in this embodiment of the invention;

[0051] Figure 2 This is a first sub-flowchart of the edge data encryption transmission method for distribution network automation provided in an embodiment of the present invention;

[0052] Figure 3 This is a second sub-flow diagram of the edge data encryption transmission method for distribution network automation provided in an embodiment of the present invention;

[0053] Figure 4 This is a third sub-flow diagram of the edge data encryption transmission method for distribution network automation provided in an embodiment of the present invention;

[0054] Figure 5This is a fourth sub-flow diagram of the edge data encryption transmission method for distribution network automation provided in an embodiment of the present invention;

[0055] Figure 6 This is a block diagram of an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention.

[0056] Figure 7 A block diagram of the acquisition module in an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention;

[0057] Figure 8 A block diagram illustrating the composition of a module in an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention;

[0058] Figure 9 A block diagram illustrating the composition of a cross-validation module in an edge data encryption transmission system for distribution network automation, as provided in an embodiment of the present invention.

[0059] Figure 10 This is a block diagram of the repeat verification module in an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention. Detailed Implementation

[0060] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0061] In Example 1, Figure 1 The implementation flow of the edge data encryption transmission method for distribution network automation provided by an embodiment of the present invention is illustrated below:

[0062] S100: Collect operating parameters during the automated operation of the distribution network, wherein the operating parameters include at least: sensor data and status data. Using a preset dynamic offset encryption rule, the operating parameters are converted into ciphertext. The initial value is edited, and the initial value and ciphertext are written into a pre-constructed recursive relation formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive relation formula to obtain a second status value, and so on.

[0063] During the automated operation of the distribution network, monitoring terminals deployed in various distribution network devices continuously collect operating parameters, including sensor data (voltage, current, power, frequency, temperature, humidity, and vibration) and status data (switch on / off status, protection action status, fault alarm information, and equipment operating mode). The collected operating parameters are standardized and processed using dynamic offset encryption rules to generate ciphertext. The dynamic offset encryption rules refer to the specific method of offsetting and encrypting the operating parameters using a preset offset.

[0064] For example, consider an operating parameter: the temperature at the cable joint inside the 13A distribution cabinet is 45℃. After performing a pinyin encoding conversion on this parameter, we obtain the string "13Apeidianguinei…". Assuming an offset of 3, we offset all the above characters by 3 according to the order of numbers and English letters, converting "1" to "4", "3" to "6", "A" to "D", "p" to "s", and so on. After the conversion, we continue encryption to obtain the ciphertext. It can be seen that the above pinyin encoding conversion and offset process is similar to the Caesar cipher process. The specific offset rules and offset amounts should be determined according to the risk level of the operating parameter. For high-risk operating parameters, the characters after pinyin encoding conversion can be divided into multiple intervals, and an offset can be set for each interval.

[0065] Determine the initial value, which consists of pure numbers. The specific length should be determined according to the risk level of the operating parameters. Substitute the initial value and the ciphertext generated by the operating parameters into the recursive formula to generate the first state value. When a new ciphertext is generated, substitute the first state value and the latest value into the recursive formula to obtain the second state value, and so on.

[0066] For example, the temperature sampling frequency at the cable joint in the 13A distribution cabinet is 1 minute / time, that is, temperature data is collected once per minute. The temperature sampled at 9:00 is 44℃. The encrypted text of this temperature data and the initial value are substituted into the recursive formula to generate the first state value. The temperature sampled at 9:01 is 46℃. The first state value and the encrypted text corresponding to 9:01 are substituted into the recursive formula to calculate the second state value. And so on, to obtain the third state value, the fourth state value, and so on.

[0067] S200: Create a data block that corresponds one-to-one with the state value, insert time information tags into the data block, summarize all data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism.

[0068] A data stack is created, each corresponding to a state value. Each data block is a digital square containing a state value; these are logical nodes, not physical processing devices, used only to visually represent the relationships between state values. The generation time of the operating parameters corresponding to the state values ​​in each data block is recorded, and corresponding tags are generated and inserted into the data blocks. These tags are displayed as notes or links. The data blocks are sorted in chronological order of generation time to generate a state data stack. This state data stack is similar to a queue in existing technologies, but it not only possesses the sequential processing characteristics of a queue but also automatically updates itself after collecting operating parameters, thus forming a chain structure of dependencies between state values. A backup and pop mechanism is embedded in the state data stack, meaning the stack pre-backs up data blocks that are about to be popped. Furthermore, due to the top-in, top-out characteristic of the data stack, using it to manage operating parameters can significantly reduce the risk of timing misalignment during parameter transmission and management. When a new state value is generated, it is written to several blocks, arranged and backed up in chronological order in the state data stack, and then forwarded to the target end through the state data stack. In short, the state data stack can realize the storage, backup, forwarding and backtracking management of state values.

[0069] S300: Set the source and destination ends for transmitting operating parameters, build several communication links, and cluster them into main links and auxiliary links. Use the main links to transmit the ciphertext, and connect the auxiliary links to the top of the status data stack. At the destination end, cross-validate the received ciphertext and status values.

[0070] The system establishes a source and a destination for transmitting operational parameters. The source, which generates the operational parameters, can be a distribution network device or an edge device that initially processes the parameters. The destination is the terminal that receives the operational parameters. Several communication links are established between the source and destination, with no limit on the number of links. These links are divided into main links and auxiliary links. The main links carry the real-time transmission of encrypted data to ensure efficient and continuous transmission of operational parameters. Status values ​​in the status data stack are transmitted through auxiliary links. Auxiliary links can access the latest generated data blocks in real time, synchronously acquiring, verifying, and backing up status values. This achieves synchronous transmission of encrypted data and status values ​​through the main and auxiliary links. When the destination receives the encrypted data and status values, it substitutes the encrypted data and the previously received status value into the recursive formula to calculate the latest status value. It then checks if this latest status value is the same as the received status value. If they are the same, it means that the encrypted data received at the latest moment is authentic, accurate, and has not been tampered with.

[0071] S400: Identify the data processing equipment during the operation of the distribution network automation, update the initial value according to a preset frequency, reconstruct the status data stack, divide the updated initial value into several segments, wherein the value of any segment is greater than the previous segment, collect the original signal of the operating parameters under the corresponding bit of the segment in the source end, integrate to obtain the verification value, send the verification value to the data processing equipment, and re-verify the status value in the target end.

[0072] The system identifies data processing devices during the automated distribution network operation, including edge computing nodes, distribution terminals, or other data aggregation units. Initial values ​​are updated at a preset frequency. When the initial value changes, the status data stack is initialized, and the initial value is divided into multiple segments, each segment having a value greater than the previous segment. For example, an initial value of 12154634558 is divided into six segments: 1, 2, 15, 46, 345, and 58. It can be seen that the character length of each segment is minimized, but the segment values ​​increase progressively (except for the last segment). The collected sensor signals are summarized, and characters 1, 2, 15, 46, 345, and 58 are selected to generate a checksum. The checksum is an abbreviation of the original signal extracted from the source, also known as a verification fingerprint. The checksum is sent to the data processing device, which can be an edge device or another device processing operating parameters, to randomly verify the processing and transmission parameters.

[0073] When the sensor signal at the source end is tampered with, the data processing device, upon receiving the signal, compares the corresponding number of characters with the checksum. This comparison determines an inconsistency and identifies the data anomaly. The advantage of this method is that, in addition to verifying the final data at the target end, it allows for multi-point, fine-grained comparisons during data processing and transmission, further enhancing the detection capability of localized data tampering and improving data transmission security.

[0074] In Example 2, Figure 2 The first sub-flow diagram of the edge data encryption transmission method for distribution network automation provided by an embodiment of the present invention is shown. The following details the steps of collecting operating parameters during the operation of distribution network automation, wherein the operating parameters include at least sensor data and status data, and converting the operating parameters into ciphertext using a preset dynamic offset encryption rule:

[0075] S101: Divide the operating parameters into several individual items, and standardize each individual item to obtain a standard unit.

[0076] The operating parameters are divided into multiple individual items, such as temperature, voltage, and switch status. Each individual item is standardized using a unified format template to obtain a standard unit, which is the operating parameter after the format is unified.

[0077] S102: Create an offset that corresponds one-to-one with each item, process the standard unit using the offset, and encrypt it after processing to generate ciphertext.

[0078] In the process of converting runtime parameters into ciphertext, a corresponding offset can be set for each item. Using the offset and dynamic offset encryption rules, the runtime parameters can be converted into ciphertext.

[0079] In Example 3, Figure 2 The diagram illustrates the first sub-flowchart of the edge data encryption transmission method for distribution network automation provided by an embodiment of the present invention. The following details the steps of obtaining the second state value by substituting the first state value and the latest value into the recursive formula when the latest value of the ciphertext is obtained, and so on:

[0080] S103: Set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute it into the recursive formula;

[0081] The recursive formula is as follows:

[0082] ;

[0083] in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

[0084] Set the time step for updating the running parameters. For example, the sampling frequency in S100 corresponds to a time step of 1 minute. Establish a mapping between the ciphertext and the previous time step (moment), and substitute it into the recursive formula to calculate the state value at the current moment.

[0085] In Example 4, Figure 3 The second sub-flow diagram of the edge data encryption transmission method for distribution network automation provided by an embodiment of the present invention is shown. The following details the steps of writing the recursive formula into the state data stack and embedding the backup pop-up mechanism:

[0086] S201: Record the timestamp corresponding to each running parameter and establish the correspondence between timestamp, status value and time information tag.

[0087] Collect the timestamp information corresponding to each running parameter, and associate the running parameter, the recursively generated status value, and the time information label in the data block based on the timestamp.

[0088] S202: Configure the fluctuation range corresponding to each individual item. When the operating parameter exceeds the corresponding fluctuation range, activate the emergency response rule.

[0089] Based on equipment operating characteristics, historical data, and safe operating thresholds, a corresponding fluctuation range is set for each individual parameter; this fluctuation range is the normal operating interval. When the real-time collected operating parameters exceed their corresponding fluctuation range, an abnormal state is determined, and the corresponding emergency response rules are activated. These emergency response rules include sending alarm information to the distribution network automation management personnel.

[0090] In Example 5, Figure 4 The diagram illustrates the third sub-process flowchart of the edge data encryption transmission method for distribution network automation provided in this embodiment of the invention. The following details the steps of setting the source and target ends for the transmission of operating parameters, establishing several communication links, and clustering them into main links and auxiliary links:

[0091] S301: Record the behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency.

[0092] The operational behavior of each communication link is continuously monitored to obtain behavioral parameters, including interface access frequency and connection establishment frequency. Specifically, interface access frequency characterizes the number of times the source or other nodes initiate data requests, data reports, or calls to the link interface per unit time, while connection establishment frequency describes the number of times the communicating parties initiate connection establishment per unit time, used to determine whether abnormal reconnection behavior exists. When a sudden increase in access frequency, frequent connection establishment, or abnormal fluctuations occur, it can be determined that the link may be at risk of congestion, attack, or failure, and emergency response rules can be activated.

[0093] S302: Based on the behavioral parameters, set the risk level for each communication link.

[0094] Based on behavioral parameters, the risk level of each communication link is set, which includes high, medium and low. For communication links with sudden increases in access frequency, frequent connection establishment or abnormal fluctuations, the corresponding risk level can be set to high.

[0095] In Example 5, Figure 5The fourth sub-process flowchart of the edge data encryption transmission method for distribution network automation provided by an embodiment of the present invention is shown. The steps of integrating and obtaining the verification value, sending the verification value to the data processing device, and re-verifying the status value in the target end are described in detail below:

[0096] S401: Construct a risk prediction model and integrate it into the data processing device.

[0097] By utilizing deep learning algorithms, a risk prediction model is constructed. This model can perform online analysis and prediction of real-time operating parameters and is then deployed to data processing equipment.

[0098] S402: Forward the encrypted text to the data processing device, generate a predicted value, and dynamically adjust the time step.

[0099] The encrypted message is forwarded to the data processing equipment, where the risk prediction model analyzes and calculates the corresponding operational characteristics of the encrypted message to generate predicted values ​​of operational parameters. Based on the changes in the predicted values, the time step in the data processing process is dynamically adjusted. That is, when the predicted values ​​indicate that the distribution network is operating stably and the risk is low, the time step can be appropriately increased to reduce computation and communication overhead.

[0100] Figure 6 This diagram illustrates the structural block diagram of an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention. The edge data encryption transmission system 1 for distribution network automation includes:

[0101] The acquisition module 11 is used to acquire operating parameters during the operation of the distribution network automation process. The operating parameters include at least sensor data and status data. The operating parameters are converted into ciphertext using a preset dynamic offset encryption rule. The initial value is edited and written into a pre-constructed recursive relation formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive relation formula to obtain a second status value, and so on.

[0102] Create module 12 to create data blocks that correspond one-to-one with the state values, insert time information tags into the data blocks, sort all the data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism.

[0103] The cross-validation module 13 is used to set the source and target ends of the operation parameter transmission, build several communication links, and cluster them into main links and auxiliary links. The main link is used to transmit the ciphertext, and the auxiliary links are connected to the top of the status data stack. At the target end, the received ciphertext and status value are cross-validated.

[0104] The repeat verification module 14 is used to identify the data processing equipment in the process of distribution network automation operation, update the initial value according to a preset frequency, reconstruct the status data stack, divide the updated initial value into several segments, wherein the value of any segment is greater than the previous segment, collect the original signal of the operating parameters of the corresponding bit in the segment from the source end, integrate to obtain the verification value, send the verification value to the data processing equipment, and re-verify the status value in the target end.

[0105] Figure 7 This diagram illustrates the composition of a data acquisition module 11 in an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention. The data acquisition module 11 includes:

[0106] The segmentation unit 111 is used to segment the operating parameters into several individual items, and to standardize each individual item to obtain a standard unit;

[0107] The encryption unit 112 is used to create an offset that corresponds one-to-one with each item, process the standard unit using the offset, and encrypt it after processing to generate ciphertext.

[0108] Substitute into unit 113, which is used to set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute into the recursive relationship formula;

[0109] The recursive formula is as follows:

[0110] ;

[0111] in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

[0112] Figure 8 This diagram illustrates the structural composition of the creation module 12 in the edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention. The creation module 12 includes:

[0113] Establish unit 121 to record the timestamp corresponding to each running parameter and establish the correspondence between timestamp, status value and time information tag;

[0114] Activation unit 122 is used to configure the fluctuation range corresponding to each individual item. When the operating parameters exceed the corresponding fluctuation range, the emergency response rule is activated.

[0115] Figure 9 This diagram illustrates the structural composition of the cross-verification module 13 in an edge data encryption transmission system for distribution network automation provided in an embodiment of the present invention. The cross-verification module 13 includes:

[0116] Recording unit 131 is used to record the behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency;

[0117] Setting unit 132 is used to set the risk level of each communication link based on the behavioral parameters.

[0118] Figure 10 This diagram illustrates the structural composition of a duplicate verification module 14 in an edge data encryption transmission system for distribution network automation provided by an embodiment of the present invention. The duplicate verification module 14 includes:

[0119] Integration unit 141 is used to construct a risk prediction model and integrate it into the data processing device;

[0120] The adjustment unit 142 is used to forward the ciphertext to the data processing device, generate a predicted value, and dynamically adjust the time step.

[0121] The acquisition module 11 is mainly used to complete step S100, the creation module 12 is mainly used to complete step S200, the cross-validation module 13 is mainly used to complete step S300, and the repeat validation module 14 is mainly used to complete step S400.

[0122] The segmentation unit 111 is mainly used to complete step S101, the encryption unit 112 is mainly used to complete step S102, and the substitution unit 113 is mainly used to complete step S103.

[0123] The establishment unit 121 is mainly used to complete step S201, and the activation unit 122 is mainly used to complete step S202;

[0124] Recording unit 131 is mainly used to complete step S301, and setting unit 132 is mainly used to complete step S302;

[0125] The integration unit 141 is mainly used to complete step S401, and the adjustment unit 142 is mainly used to complete step S402.

[0126] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A method for encrypted edge data transmission for distribution network automation, characterized in that, The method includes: The system collects operating parameters during the automated operation of the distribution network, wherein the operating parameters include at least sensor data and status data. Using a preset dynamic offset encryption rule, the operating parameters are converted into ciphertext. The initial values ​​are edited, and the initial values ​​and ciphertext are written into a pre-constructed recursive relation formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive relation formula to obtain a second status value, and so on. Create data blocks that correspond one-to-one with state values, insert time information tags into the data blocks, summarize all data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism. Set up the source and destination ends for transmitting running parameters, build several communication links, and cluster them into main links and auxiliary links. Use the main link to transmit the ciphertext, and connect the auxiliary links to the top of the status data stack. At the destination end, cross-validate the received ciphertext and status values. The system identifies the data processing equipment during the automated operation of the distribution network, updates the initial value according to a preset frequency, reconstructs the status data stack, divides the updated initial value into several segments, where the value of any segment is greater than that of the previous segment, collects the original signals of the operating parameters at the corresponding bit values ​​of the segments from the source end, integrates them to obtain a verification value, sends the verification value to the data processing equipment, and re-verifies the status value at the target end.

2. The edge data encryption transmission method for distribution network automation according to claim 1, characterized in that, The step of collecting operating parameters during the automated operation of the distribution network, wherein the operating parameters include at least: sensor data and status data, and converting the operating parameters into ciphertext using a preset dynamic offset encryption rule, includes: The operating parameters are divided into several individual items, and each individual item is standardized to obtain a standard unit; An offset is created that corresponds one-to-one with each item. The standard unit is then processed using the offset and encrypted to generate ciphertext.

3. The edge data encryption transmission method for distribution network automation according to claim 2, characterized in that, The step of substituting the first state value and the latest value into the recursive formula to obtain the second state value, and so on, when the latest value of the ciphertext is obtained, includes: Set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute it into the recursive formula; The recursive formula is as follows: ； in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

4. The edge data encryption transmission method for distribution network automation according to claim 3, characterized in that, The steps of writing the recursive formula into the state data stack and embedding a backup pop-up mechanism include: Record the timestamp corresponding to each running parameter and establish the correspondence between timestamps, status values ​​and time information tags; Configure a fluctuation range corresponding to each individual item. When the operating parameters exceed the corresponding fluctuation range, activate the emergency response rule.

5. The edge data encryption transmission method for distribution network automation according to claim 1, characterized in that, The steps of setting the source and destination ends for transmitting operating parameters, establishing several communication links, and clustering them into main links and auxiliary links include: Record the behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency; Based on the aforementioned behavioral parameters, a risk level is set for each communication link.

6. The edge data encryption transmission method for distribution network automation according to claim 3, characterized in that, The steps of integrating the obtained verification value, sending the verification value to the data processing device, and re-verifying the status value in the target terminal include: A risk prediction model is constructed and integrated into the data processing device; The encrypted text is forwarded to the data processing device to generate a predicted value, and the time step is dynamically adjusted.

7. An edge data encryption transmission system for distribution network automation, characterized in that, The system includes: The data acquisition module is used to collect operating parameters during the automation of the distribution network. The operating parameters include at least sensor data and status data. Using a preset dynamic offset encryption rule, the operating parameters are converted into ciphertext. The initial value is edited and written into a pre-constructed recursive formula to generate a first status value. When the latest value of the ciphertext is obtained, the first status value and the latest value are substituted into the recursive formula to obtain a second status value, and so on. The module is used to create data blocks that correspond one-to-one with state values, insert time information tags into the data blocks, summarize all data blocks in chronological order, generate a state data stack, write the recursive formula into the state data stack, and embed a backup pop-up mechanism. The cross-validation module is used to set the source and target ends of the operation parameter transmission, build several communication links, and cluster them into main links and auxiliary links. The main link is used to transmit the ciphertext, and the auxiliary links are connected to the top of the status data stack. At the target end, the received ciphertext and status value are cross-validated. The duplicate verification module is used to identify data processing devices in the process of distribution network automation operation, update the initial value according to a preset frequency, reconstruct the status data stack, divide the updated initial value into several segments, wherein the value of any segment is greater than the previous segment, collect the original signal of the operating parameters at the corresponding bit value of the segment in the source end, integrate them to obtain the verification value, send the verification value to the data processing device, and re-verify the status value in the target end.

8. The edge data encryption transmission system for distribution network automation according to claim 7, characterized in that, The acquisition module includes: The segmentation unit is used to segment the operating parameters into several individual items, and to standardize each individual item to obtain a standard unit; An encryption unit is used to create an offset that corresponds one-to-one with each item. The standard unit is processed using the offset and then encrypted to generate ciphertext. The substitution unit is used to set the time step for updating the running parameters, establish the mapping between the ciphertext and the state value, and substitute it into the recursive formula. The recursive formula is as follows: ； in for The state value at time t. for The state value at time t. for The encrypted message at that moment and These are weighting coefficients, pre-determined by professionals.

9. The edge data encryption transmission system for distribution network automation according to claim 8, characterized in that, The creation module includes: Establish a unit to record the timestamp corresponding to each running parameter, and establish the correspondence between timestamps, status values, and time information tags; The activation unit is used to configure the fluctuation range corresponding to each individual item. When the operating parameters exceed the corresponding fluctuation range, the emergency response rule is activated.

10. The edge data encryption transmission system for distribution network automation according to claim 7, characterized in that, The cross-validation module includes: A recording unit is used to record behavioral parameters of the communication link, wherein the behavioral parameters include at least: interface access frequency and connection establishment frequency; The setting unit is used to set the risk level of each communication link based on the behavioral parameters.

Images