Power distribution system based on enhanced components and method, apparatus and medium for verifying same

Abstract

The application provides a power distribution system based on enhanced components and a verification method, device and medium thereof, the system comprising: a power distribution terminal and an enhanced component integrated in the core chip of the power distribution terminal, the enhanced component comprising a function core and a key component identity chip independently connected with the function core through an internal isolation bus; the key component identity chip comprising: a one-time programmable memory pre-stored with unique identity information; a password co-processor embedded with a physical root key generated based on a chip physical unclonable function, used for generating a digital signature based on the identity information; and a bus slave interface controller used for responding to an identity query command and returning a response data packet containing the identity information and the digital signature. The physical root key which cannot be derived is embedded in the core chip, so that the identity information is fundamentally prevented from being disassembled, replaced or forged, hardware-level trusted identity verification from the chip to the terminal is achieved, and the power distribution terminal supply chain security is significantly improved.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a power distribution system based on enhanced components and its verification method, apparatus and medium. Background Technology

[0002] In critical infrastructure sectors such as power, energy, and industrial control, the independent controllability of core equipment and supply chain security have become national strategic requirements. With the deepening of the energy internet and the increasing prominence of supply chain security risks, comprehensive independent controllability of critical power infrastructure has become a national strategy. As the nerve endings of the distribution network, distribution terminals are equipped with multiple core chips, including analog-to-digital converters (ADCs), central processing units (CPUs), flash memory, and Ethernet physical layer chips (PHYs). To better control supply chain security risks, distribution terminals undergo authentication to achieve trusted management.

[0003] In existing technologies, external verification involves attaching a separate security chip to the printed circuit board of the power distribution terminal to store the device identifier. The device identifier is used to verify the identity of the power distribution terminal. However, the security chip is easily physically removed or replaced, which cannot guarantee the accuracy of the identity verification result of the power distribution terminal. Summary of the Invention

[0004] This invention aims to at least solve one of the technical problems existing in the prior art. To this end, this invention proposes a power distribution system based on enhanced components, as well as its verification method, device, and medium. An identity chip, a key component that integrates and stores identity information, is installed inside the core chip, thereby ensuring that the identity information cannot be disassembled or replaced, and improving the accuracy of the identity verification results of the power distribution terminal from the hardware perspective.

[0005] In a first aspect, embodiments of the present invention provide a power distribution system based on enhanced components. The power distribution system includes a power distribution terminal, which includes at least one core chip. The core chip integrates enhanced components, which include: The core chip's functional core is used to execute the core chip's preset business functions, which include at least one of analog-to-digital conversion, data processing, program storage, or network communication. The key component identity chip is connected to the functional core via an internal isolation bus. The internal isolation bus is a dedicated low-speed serial bus independent of the business data bus. The internal isolation bus is used to transmit identity query commands and response data packets. The internal isolation bus is physically implemented by an independent metal trace layer and has no electrical intersection with the data path of the functional core. The key component, the identity chip, includes a one-time programmable memory, a cryptographic coprocessor, and a bus slave interface controller. The one-time programmable memory stores unique identity information. The cryptographic coprocessor embeds a cryptographic algorithm engine and a physical root key. The physical root key is generated based on a chip-based physically unclonable function and cannot be read or exported through an external interface. The cryptographic coprocessor is used to generate a first hash value based on the identity information through the cryptographic algorithm engine, and to generate a digital signature based on the first hash value through the physical root key; The bus slave interface controller is used to generate the response data packet based on the identity information and the digital signature, and return the response data packet to the power distribution terminal based on the obtained identity query command.

[0006] According to some embodiments of the present invention, the power distribution terminal further includes a main control central processing unit, an internal identity discovery bus, and a security chip; The main control central processing unit is used to acquire the response data packet, assemble all the response data packets to obtain the terminal hardware fingerprint list, and execute the firmware logic of the business function, chip identity discovery function and aggregation module. The main control central processing unit stores a list of component physical addresses, which is obtained by scanning all mounted I / O pins via the internal identity discovery bus. 2 C is automatically generated from the device; The internal identity discovery bus is connected to the identity chips of all the key components in the power distribution terminal, and the internal identity discovery bus is used to execute the identity query process. The security chip is used to perform hash calculation on the terminal hardware fingerprint list to obtain a second hash value, and to obtain a terminal-level trusted signature based on the second hash value; The main control central processing unit or the security chip has a pre-stored verification public key that is paired with the physical root key. The verification public key is used to verify the digital signature.

[0007] According to some embodiments of the present invention, it further includes: a power distribution master station, which is connected to the power distribution terminal through a communication network, the power distribution master station storing a chip whitelist database, the chip whitelist database being periodically issued and updated via digital signature, and the chip whitelist database being loaded after the power distribution master station verifies the digital signature. The communication network is used to transmit registration messages encapsulated with a complete list of terminal hardware fingerprints and subsequent service data; The power distribution master station includes a chip trusted verification module and a chip asset database. The chip trusted verification module is used to verify the validity of the terminal-level trusted signature, and parse the registration message corresponding to the valid terminal-level trusted signature to obtain the chip information of all the core chips, and verify the chip information with the chip whitelist database. The chip asset database is used to store all chip information inside the verified power distribution terminal.

[0008] Secondly, embodiments of the present invention provide a verification method for a power distribution system based on enhanced components, applied to the power distribution system based on enhanced components described in the first aspect, the method comprising: The enhanced components obtain the identity query command from the power distribution terminal through the interface controller via the bus, and trigger the identity query process based on the identity query command; A physical root key is generated based on a chip's physically unclonable function. The key component, the identity chip, reads identity information from a one-time programmable memory. The cryptographic coprocessor performs a hash calculation on the identity information to obtain a first hash value. A digital signature is generated based on the first hash value using the physical root key. The physical root key cannot be read or exported through an external interface. The bus obtains the identity information and the digital signature from the interface controller, assembles the identity information and the digital signature into a response data packet, and sends the response data packet to the power distribution terminal.

[0009] According to some embodiments of the present invention, the power distribution terminal further includes a main control central processing unit, an internal identity discovery bus, and a security chip; the main control central processing unit is used to acquire the response data packets, assemble all the response data packets into a terminal hardware fingerprint list, and execute the firmware logic of the business function, the chip identity discovery function, and the aggregation module; the main control central processing unit stores a component physical address list, which is obtained by scanning all mounted I / O pins through the internal identity discovery bus. 2C is automatically generated from the device; the internal identity discovery bus is connected to the identity chips of all key components in the power distribution terminal, and the internal identity discovery bus is used to execute the identity query process; the security chip is used to perform hash calculation on the terminal hardware fingerprint list to obtain a second hash value, and obtain a terminal-level trusted signature based on the second hash value; the main control central processing unit or the security chip pre-stores a verification public key paired with the physical root key, and the verification public key is used to verify the digital signature; Before the enhanced components obtain the identity query command from the interface controller and the power distribution terminal via the bus, the following is also included: When the power distribution terminal is powered on or reset, the main control central processing unit executes the chip identity discovery function and the firmware logic of the aggregation module's aggregation firmware before initializing the service functions. Based on the list of physical addresses of the components generated by scanning through the internal identity discovery bus, the main control central processing unit sends the identity query command to all the enhanced components connected in communication via the internal identity discovery bus.

[0010] According to some embodiments of the present invention, after sending the response data packet to the power distribution terminal, the method further includes: The main control central processing unit acquires all the response data packets and assembles all the response data packets into the terminal hardware fingerprint list according to a preset format. The terminal hardware fingerprint list is used to characterize the role, identity information and digital signature of all the enhanced components in the power distribution terminal. The power distribution terminal calls the security chip to perform a hash calculation on the terminal hardware fingerprint list to obtain the second hash value, and generates the terminal-level trusted signature based on the second hash value using the private key of the security chip, and binds the terminal-level trusted signature to all the identity information included in the power distribution terminal.

[0011] According to some embodiments of the present invention, the power distribution system further includes: a power distribution master station, which is connected to the power distribution terminal via a communication network; the power distribution master station stores a chip whitelist database, which is periodically issued and updated via digital signature; when the power distribution master station verifies the digital signature, it loads the chip whitelist database; the communication network is used to transmit a registration message encapsulated with a complete list of terminal hardware fingerprints and subsequent business data; the power distribution master station includes a chip trusted verification module and a chip asset database; the chip trusted verification module is used to verify the validity of the terminal-level trusted signature, parse the registration message corresponding to the valid terminal-level trusted signature to obtain the chip information of all the core chips, and verify the chip information against the chip whitelist database; wherein, the chip asset database is used to store all the chip information inside the power distribution terminal that has passed verification. After binding the terminal-level trusted signature with all the identity information included in the power distribution terminal, the method further includes: The power distribution terminal uses the terminal hardware fingerprint list as an extended field and encapsulates the extended field into the registration message; Based on any of the aforementioned power distribution terminals, the power distribution terminal sends the registration message to the power distribution master station through the communication network; The chip trusted verification module obtains all the registration messages and their corresponding terminal-level trusted signatures, compares all the terminal-level trusted signatures with the pre-stored terminal certificates, and verifies the validity of the terminal-level trusted signatures respectively. When the registration message corresponding to the valid terminal-level trusted signature is parsed to obtain the chip information of all the core chips of all the power distribution terminals that are connected to the power distribution master station, all the chip information is verified with the chip whitelist database respectively. The chip information includes the manufacturer code corresponding to the core chip, the identity information and the digital signature. Based on any of the aforementioned power distribution terminals, when the chip information of all the core chips of the power distribution terminal passes verification, the power distribution master station marks the power distribution terminal as a trusted, autonomous, and controllable terminal, and records all the chip information included in the trusted, autonomous, and controllable terminal into the chip asset database, and the power distribution terminal is successfully registered.

[0012] According to some embodiments of the present invention, after verifying all the chip information with the chip whitelist database, the method further includes: If at least one of the chip information is not in the chip whitelist database, or if at least one of the digital signatures is invalid, or if at least one of the core chips of the power distribution terminal fails verification, the power distribution terminal registration fails. The power distribution master station generates a security alarm message based on the chip information of the core chip that failed verification. The security alarm message includes the unique identifier, manufacturer code, reason for digital signature failure, and suggested handling measures of the core chip that failed verification. The power distribution master station pushes the safety alarm information to the operation and maintenance personnel's terminal and sets the status of the corresponding power distribution terminal to "isolated" or "monitored", generating a red highlight mark on the power distribution master station interface.

[0013] Thirdly, embodiments of the present invention provide a verification device for a power distribution system based on enhanced components, comprising: a main control central processing unit, an internal identity discovery bus and a security chip in a power distribution terminal, and a chip trusted verification module and a chip asset database in a power distribution master station, wherein the main control central processing unit is configured to execute the verification method for a power distribution system based on enhanced components as described in the second aspect above.

[0014] Fourthly, embodiments of the present invention provide a computer-readable storage medium storing computer-executable instructions for performing the verification method for a power distribution system based on enhanced components as described in the second aspect above.

[0015] According to an embodiment of the present invention, a power distribution system based on enhanced components includes a power distribution terminal, the power distribution terminal including at least one core chip, and has at least the following advantages: the core chip integrates enhanced components, the enhanced components including: a functional core of the core chip, the functional core being used to execute preset business functions of the core chip, the preset business functions including at least one of analog-to-digital conversion, data processing, program storage, or network communication; and a key component identity chip, the key component identity chip being communicatively connected to the functional core via an internal isolation bus, the internal isolation bus being a dedicated low-speed serial bus independent of the business data bus, the internal isolation bus being used to transmit identity query commands and response data packets, the internal isolation bus being physically separated by an independent... The metal trace layer is implemented and has no electrical intersection with the data path of the functional core. The key component identity chip includes a one-time programmable memory, a cryptographic coprocessor, and a bus slave interface controller. The one-time programmable memory stores unique identity information. The cryptographic coprocessor embeds a cryptographic algorithm engine and a physical root key. The physical root key is generated based on a chip-based physically non-clonable function and cannot be read or exported through an external interface. The cryptographic coprocessor is used to generate a first hash value based on the identity information using the cryptographic algorithm engine, and to generate a digital signature based on the first hash value using the physical root key. The bus slave interface controller is used to generate the response data packet based on the identity information and the digital signature, and to return the response data packet to the power distribution terminal based on the obtained identity query command. According to the technical solution of the present invention, by setting the key component identity chip inside the core chip, the key component identity chip is difficult to disassemble or replace, thereby improving the accuracy of the power distribution terminal's authentication result from the hardware source. Furthermore, the key component identity chip stores unique and tamper-proof identity information in its memory, and the cryptographic algorithm engine and physical root key ensure that the identity information is not tampered with during bus transmission, thereby further improving the accuracy of the power distribution terminal's authentication result. Attached Figure Description

[0016] Figure 1 This is a structural diagram of an enhanced component provided in one embodiment of the present invention; Figure 2 This is a structural diagram of a power distribution system provided in another embodiment of the present invention; Figure 3 This is a structural diagram of an enhanced component, taking an enhanced ADC chip as an example, provided in another embodiment of the present invention; Figure 4 This is a structural diagram of a power distribution master station provided in another embodiment of the present invention; Figure 5This is a flowchart of a verification method for a power distribution system based on enhanced components, provided in another embodiment of the present invention; Figure 6 This is a flowchart of a verification method for enhanced components provided in another embodiment of the present invention; Figure 7 This is a complete flowchart of a power distribution system verification method provided in another embodiment of the present invention. Detailed Implementation

[0017] Embodiments of the present invention are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and should not be construed as limiting the present invention.

[0018] In the description of this invention, it should be understood that the orientation descriptions, such as up, down, front, back, left, right, etc., are based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing this invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limiting this invention.

[0019] In the description of this invention, "several" means one or more, "more than" means two or more, "greater than," "less than," and "exceeding" are understood to exclude the stated number, while "above," "below," and "within" are understood to include the stated number. The use of "first" and "second" in the description is merely for distinguishing technical features and should not be construed as indicating or implying relative importance, or implicitly indicating the number of indicated technical features, or implicitly indicating the order of the indicated technical features.

[0020] In the description of this invention, unless otherwise explicitly defined, terms such as "set up," "install," and "connect" should be interpreted broadly, and those skilled in the art can reasonably determine the specific meaning of the above terms in this invention in conjunction with the specific content of the technical solution.

[0021] This invention provides a power distribution system based on enhanced components and its verification method, apparatus, and medium. The power distribution system includes a power distribution terminal, which includes at least one core chip. The core chip integrates enhanced components, including: a functional core of the core chip, which executes preset business functions of the core chip, including at least one of analog-to-digital conversion, data processing, program storage, or network communication; and a key component identity chip, which is communicatively connected to the functional core via an internal isolation bus. The internal isolation bus is a dedicated low-speed serial bus independent of the business data bus, used to transmit identity query commands and response data packets. The internal isolation bus is physically connected to the functional core via: An independent metal trace layer is implemented and has no electrical intersection with the data path of the functional core; the key component identity chip includes a one-time programmable memory, a cryptographic coprocessor, and a bus slave interface controller. The one-time programmable memory stores unique identity information. The cryptographic coprocessor embeds a cryptographic algorithm engine and a physical root key. The physical root key is generated based on a chip-based physically non-clonable function and cannot be read or exported through an external interface. The cryptographic coprocessor is used to generate a first hash value based on the identity information through the cryptographic algorithm engine, and to generate a digital signature based on the first hash value through the physical root key. The bus slave interface controller is used to generate the response data packet based on the identity information and the digital signature, and to return the response data packet to the power distribution terminal based on the obtained identity query command. According to the technical solution of the present invention, by setting the key component identity chip inside the core chip, the key component identity chip is difficult to disassemble or replace, thereby improving the accuracy of the power distribution terminal's authentication result from the hardware source; furthermore, the key component identity chip stores unique and tamper-proof identity information in its memory, and the identity information is protected from being tampered with during bus transmission by the cryptographic algorithm engine and the physical root key, thereby further improving the accuracy of the power distribution terminal's authentication result.

[0022] First, refer to Figures 1 to 3 The power distribution system based on enhanced components provided in this application embodiment includes a power distribution terminal comprising at least one core chip. The core chip integrates enhanced components, including: The core chip's functional core is used to execute the core chip's preset business functions, which include at least one of analog-to-digital conversion, data processing, program storage, or network communication. The key component, the identity chip, is connected to the functional core via an internal isolation bus. The internal isolation bus is a dedicated low-speed serial bus independent of the business data bus. The internal isolation bus is used to transmit identity query commands and response data packets. The internal isolation bus is physically implemented by an independent metal trace layer and has no electrical intersection with the data path of the functional core. The key component, the identity chip, includes a one-time programmable memory, a cryptographic coprocessor, and a bus slave interface controller. The one-time programmable memory stores unique identity information. The cryptographic coprocessor embeds a cryptographic algorithm engine and a physical root key. The physical root key is generated based on the chip's physically unclonable function and cannot be read or exported through an external interface. The cryptographic coprocessor is used to generate a first hash value based on identity information through a cryptographic algorithm engine, and to generate a digital signature based on the first hash value through a physical root key. The bus slave interface controller is used to generate response data packets based on identity information and digital signatures, and to return response data packets to the power distribution terminal based on the obtained identity query command.

[0023] It should be noted that the power distribution terminal is a physical device that integrates a key component identification chip. This application integrates the key component identification chip into all the original core chips of the power distribution terminal, thereby obtaining an enhanced chip. The core chips include, but are not limited to, the ADC, FLASH, and PHY of the power distribution terminal. By integrating the key component identification chip within the core chips, enhanced ADC chips, enhanced FLASH chips, and enhanced PHY chips are obtained. The core chips are domestically produced core chips conforming to the design specifications of this invention, such as ADC, CPU, FLASH, and PHY. The key component identification chip integrated within the core chip enables it to have identification and authentication capabilities.

[0024] It should be noted that hardware-level enhancements are achieved for the fully domestically produced core chips (such as ADC, CPU, FLASH, and PHY) requiring control through enhanced components. An independent key component identity chip is integrated within each core chip or its package. This key component identity chip is pre-programmed with tamper-proof, unique identification information at the factory and possesses secure signature capabilities based on domestically developed cryptographic algorithms.

[0025] It should be noted that the functional core is used to perform the original functions of the core chip. For example, taking the enhanced ADC chip as an example, the enhanced ADC chip includes a functional core and a key component identification chip. The functional core is the original analog-to-digital conversion function module of the ADC chip with the built-in key component identification chip.

[0026] It should be noted that the functional core and the critical component identification chip are connected via a simple internal isolation bus. This internal isolation bus is used only to transmit extremely low-frequency management commands or status signals, ensuring that the operation of the critical component identification chip does not preempt the critical computing resources of the functional core, and vice versa. Through the physical and logical isolation of the internal isolation bus, dual protection of functional safety and information security is achieved.

[0027] It should be noted that the one-time programmable memory (IPM) is used in the final stage of the core chip's production and testing. A trusted or authorized party, such as the chip manufacturer or a power grid authority, uses a highly secure programming device to write immutable and unique identification information once. This identification information uses a standardized encoding format, such as GCP-010-ABC-2024Q2W15-87654321 (Power Grid Chip-ADC-Manufacturer ABC-Week 15 of Q2 2024-Serial Number). Simultaneously, the nominal hash values ​​of key DC parameters can be written for potential subsequent performance consistency verification. The IPM stores at least the following: a globally unique identifier, model code, manufacturer code, production batch / date, key performance parameter calibration values, and domestic certification certificate number.

[0028] It should be noted that the bus slave interface controller is used to listen for and respond to identity query commands sent from the main control central processing unit of the power distribution terminal to the identity chip of critical components via the internal identity discovery bus. The bus slave interface controller is the sole communication window between the identity chip of critical components and the main control central processing unit of the power distribution terminal. The bus slave interface controller uses a standard I / O interface. 2 C is a slave device that responds to specific I 2 C address and command code. This standardized design allows core chips (ADC, CPU, PHY, etc.) from different manufacturers and of different types to be managed by the power distribution terminal using the same communication protocol.

[0029] It should be noted that the cryptographic coprocessor embeds the Chinese national standard SM3 hash algorithm and the SM2 elliptic curve digital signature algorithm engine (i.e., the cryptographic algorithm engine). Its core is a physical root key generated during the core chip manufacturing process using physical non-cloning capabilities or similar technologies, which cannot be read from any external interface.

[0030] It should be noted that the physical root key is factory-preset and unreadable, and is the key to the chip's "self-signing". The physical root key is used to generate a short digital signature (such as based on SM2 / ECDSA) for the identity information stored in the one-time programmable memory, so as to realize the self-proof of the chip identity of the core chip and prevent the information from being forged during bus transmission.

[0031] It should be noted that the key component identity chip also includes a secure storage and computing area, which is the source of trust.

[0032] It should be noted that, referring to Figure 1 , Figure 1 This invention showcases an innovative dual-core architecture design for enhanced key components (using an enhanced ADC chip as an example) at the system level. The enhanced component includes a functional core and a key component identity chip (CIIC), connected via an internal isolated bus. This enhanced component is no longer a single functional module, but a heterogeneous integrated system. Its core innovation lies in embedding another completely independent "key component identity chip (CIIC)" core outside the traditional "functional core." The functional core and CIIC are connected via an internal isolated bus. This bus is used only to transmit extremely low-frequency management instructions or status signals, ensuring that the operation of the CIIC does not preempt the critical computing resources of the functional core, and vice versa. This physical and logical isolation provides dual protection for functional safety and information security. The bus interface controller is the only window for communication between the CIIC and the external world (i.e., the external terminal host CPU). It is designed as a standard I / O interface controller. 2 C is a slave device that responds to specific I 2 C address and command code. This standardized design allows different manufacturers and types of enhanced chips (ADC, CPU, PHY, etc.) to be managed by the terminal using the same communication protocol. Secure storage and computing areas form the root of trust. Based on one-time programmable memory, in the final stage of production testing, the authorized party permanently writes identity information once using a highly secure programming device. Simultaneously, the nominal hash values ​​of key DC parameters can be written for subsequent potential performance consistency verification. This unit, including the cryptographic coprocessor and root key, embeds the national cryptographic SM3 hash algorithm and the SM2 elliptic curve digital signature algorithm engine. Its core is a physical root key generated during chip manufacturing using physically unclonable features or similar technologies, which cannot be read from any external interface. This key is the foundation for the chip's "self-signing." The functional core completes analog signal input, analog-to-digital conversion, and digital signal output. The functional core communicates with the key component identity chip through an internal isolation bus. The key component identity chip includes a secure storage and computing area, which includes a one-time programmable memory and a cryptographic coprocessor. The one-time programmable memory and cryptographic coprocessor generate a response data packet based on the identity information and digital signature. The external master CPU sends an identity query command to the bus slave interface controller, thereby returning the response data packet.

[0033] It should be noted that, referring to Figure 2Enhanced components refer to domestically produced core chips conforming to the design specifications of this invention, such as ADC, CPU, FLASH, PHY, etc.; their key feature is the internal integration of a key component identity chip (CIIC), enabling them to perform identity verification. Distribution terminals refer to physical devices equipped with enhanced key components such as enhanced ADC chips, enhanced FLASH chips, and enhanced PHY chips, such as DTUs and FTUs. Their core includes: a main control CPU, an internal identity discovery bus, enhanced ADC chips, enhanced FLASH chips, enhanced PHY chips, a domestically produced security chip, a distribution automation system master station, a chip trusted verification module, a chip asset database, and a communication network. The main control CPU, as the core of the terminal, adds firmware logic for a chip identity discovery and aggregation module in addition to its business functions. The internal identity discovery bus typically uses a reliable low-speed serial bus (such as I...). 2 C) The CIIC interfaces of all key components are physically connected, forming a "bus tree" topology. This bus is independent of the high-speed service bus and is dedicated to identity query. The enhanced ADC chip, enhanced FLASH chip, and enhanced PHY chip are all chips with built-in CIICs. The domestically produced security chip is responsible for hashing and digitally signing the aggregated terminal hardware fingerprint list, serving as the terminal anchor of the trust chain. The distribution automation system master station is the system's management brain, with a newly added chip trust verification module and chip asset database. The chip trust verification module is responsible for verifying the validity of terminal signatures and checking the reported chip information against the whitelist. The chip asset database is used to persistently store chip-level information within all terminals across the network, supporting traceability, querying, and analysis. The communication network connects the distribution terminals and the distribution master station, used to transmit registration messages containing the chip list and subsequent business data. Furthermore, enhanced key components are physically integrated into the motherboard of the power distribution terminal. During implementation, the internal identity discovery bus sends aggregated information to the external main control CPU, which then calls the signature of the domestically produced security chip. The internal identity discovery bus sends chip identity data to the enhanced ADC chip, enhanced FLASH chip, and enhanced PHY chip respectively. The power distribution master station is connected via a communication network. The domestically produced security chip sends a list of terminal hardware fingerprints that have been digitally signed to the chip trusted verification module, which then sends the verified information to the chip asset database.

[0034] It should be noted that, referring to Figure 3The ADC functional core is the chip's original analog-to-digital conversion module. The Key Component Identity Chip (CIIC) is the core security module embedded in this invention, communicating with the functional core in isolation via an internal bus. The CIIC includes the following sub-units: a one-time programmable memory, a bus slave interface controller, and a cryptographic coprocessor and root key. During the chip production and testing phase, an immutable identity information is injected by a trusted party (such as the chip manufacturer or a power grid authority). The one-time programmable memory stores at least: a globally unique identifier (UID), model code, manufacturer code, production batch / date, key performance parameter calibration values, and domestic certification certificate number. The bus slave interface controller listens for and responds to standard identity query commands sent from the terminal master control CPU via the internal identity discovery bus. The cryptographic coprocessor and root key embed a lightweight cryptographic algorithm engine and a factory-preset, unreadable physical root key. This key is used to generate a short digital signature (such as based on SM2 / ECDSA) for the identity information in the one-time programmable memory, enabling self-verification of the chip's identity and preventing information from being forged during bus transmission. The ADC functional core performs analog-to-digital conversion and business data processing, and sends the processed data to the key component identity chip. The key component identity chip includes a cryptographic operation unit. The cryptographic operation unit generates a digital signature through a cryptographic coprocessor and a root key, as well as a national cryptographic engine with a pre-set physical root key, thereby outputting identity information and digital signature. The terminal main control CPU sends an identity query command to the bus slave interface controller to initiate a query. The bus slave interface controller communicates with the secure storage unit to call the one-time programmable memory. The one-time programmable memory is written with immutable and unique identity information once.

[0035] Currently, in critical infrastructure sectors such as power, energy, and industrial control, the independent controllability of core equipment and supply chain security have become national strategic requirements. With the deepening of the energy internet and the prominence of supply chain security risks, comprehensive independent controllability of critical power infrastructure has become a national strategy. As the nerve endings of the power distribution network, the localization of core chips such as analog-to-digital converters (ADCs), central processing units (CPUs), and flash memory in distribution terminals and communication gateways is fundamental to achieving the final mile of the comprehensive independent controllability strategy for critical power infrastructure. Existing technologies primarily employ three methods to ensure the secure management of core chips: external authentication, software protocol authentication, and passive identification. External authentication stores device identifiers by attaching independent security or encryption chips to the printed circuit board, verifying the distribution terminal through these chips. However, this method is easily physically disassembled, replaced, or bypassed, and increases board area and cost. Software protocol authentication relies on upper-layer software protocols for device authentication; its security is based on the security assumptions of the operating system or application software, meaning this method is vulnerable to software vulnerabilities and cannot provide a hardware-level root of trust. Passive identification utilizes the chip's inherent, unalterable physical unique identifier for verification, but lacks cryptographic protection, making the physical unique identifier vulnerable to theft, forgery, or replay during transmission. Furthermore, existing technologies primarily focus on plug-and-play functionality for distribution terminal equipment. For example, device self-description and discovery mechanisms based on the IEC 61850 standard, or automatic terminal type identification technology based on feature fingerprints, achieve automated terminal access at the logical level. However, the management granularity of existing technologies remains at the "terminal black box" level, unable to penetrate the device's casing, and unable to atomically perceive and verify the specific models, domestic origins, supply chain batches, and operational health status of key internal components. Distribution master stations cannot identify whether a distribution terminal claiming to be "fully domestically produced" uses non-domestically controllable chips, nor can they accurately locate and recall chips when defects are found in specific batches, risking that the requirement for independent controllability is undermined and posing a hidden security hazard.

[0036] It should be noted that this invention relates to the fields of power system automation, integrated circuits, and information security. It is applied to core equipment in smart distribution networks and / or critical infrastructure (such as power and communication), possessing native hardware-level trusted identity authentication capabilities. This enables chip-level automatic identity recognition, trusted registration, and refined full-lifecycle management of the core chips within fully domestically produced distribution terminals. The enhanced component of this invention is not a single functional module, but a heterogeneous integrated system. Its core innovation lies in embedding another completely independent key component identity chip outside of the traditional functional core (such as an ADC conversion core).

[0037] It should be noted that this invention starts from the chip design level and deeply integrates tamper-proof identity information and cryptographic security capabilities into the key component identity chip inside the core chip. The key component identity chip is independent and has physical security, fundamentally realizing the goal of "function and identity in one, hardware as trust". This enables the core chip to provide the original preset business functions while having the ability to actively and securely prove its legitimate identity.

[0038] It should be noted that this invention, starting from the physical level, enables key components to self-certify their identities, self-aggregate information, and automatically complete trusted registration with the management system. This transforms "autonomous controllability" from a macro-level policy statement into a measurable, auditable, and traceable micro-level technological fact. Furthermore, it enables automatic identification, trusted registration, and full lifecycle management of key components within power distribution terminals, thereby ensuring the genuine implementation of autonomous controllability requirements and improving the transparency, security, and refined operation and maintenance management of the power distribution terminal supply chain.

[0039] It should be noted that in this invention, the identity information and root key are directly embedded into the core chip's hardware, eliminating the possibility of component counterfeiting, replacement, or identification tampering at the physical source, thus ensuring its root reliability. The key component identity chip, as an independent security core, is physically isolated from the functional core, guaranteeing both unaffected performance of business functions and the independence and attack resistance of the security module. A standardized low-speed bus interface (such as I...) is provided. 2 (C) This enables the main control central processing unit of the power distribution terminal to read and verify the identity of all key components in a unified and automated manner, greatly simplifying the complexity of supply chain management and on-site operation and maintenance, and achieving standardization and automation. The digital signature mechanism based on a hardware cryptographic engine ensures the integrity and non-repudiation of identity information during transmission, achieving true "chip self-certification" and possessing strong authentication capabilities.

[0040] It should be noted that the enhanced components can be implemented using existing mature semiconductor manufacturing and packaging processes. The key component, the identity chip module, can be designed as a small-area, low-power security IP core, integrated with the functional core during the chip design phase. This component can directly replace traditional chips in existing equipment. Through simple firmware upgrades, the main control central processing unit of the power distribution terminal can support its identity discovery function, providing hardware-level foundational support for the autonomous controllability of equipment and the secure traceability of the supply chain in key areas such as power, energy, and rail transportation, with enormous potential for industrial application. This deepens the verification granularity of autonomous controllability from the entire machine to each core chip, eliminating the possibility of substandard or counterfeit chips within the terminal, achieving component-level reliable verification. The power distribution master station can monitor the manufacturer and batch distribution of chips across the entire network in real time, supporting minute-level precise location and impact range analysis of problematic core chips, enabling proactive early warning and targeted recall. This power distribution system of the present invention precisely empowers supply chain management. By combining the identity information and operational data of core chips, this invention enables big data reliability analysis of specific chip models and batches, shifting from scheduled maintenance to predictive maintenance based on chip health status, thus supporting predictive maintenance. Built upon existing terminal discovery and management protocols and implemented through extended data fields, this invention is compatible with existing systems without disrupting existing communication protocols and system architectures, making it easy to deploy and promote in existing networks.

[0041] It should be noted that in the power distribution system of this invention, the core chip integrating enhanced components is an enhanced chip. The required enhanced chip can be implemented using existing semiconductor processes. Terminal firmware upgrades and master station software module development are both mature software development processes, requiring no disruptive investment. The power distribution system can be directly deployed in current power distribution automation systems based on IEC 61850 or 104 protocols, effectively addressing the urgent need for transparent and refined management of the power distribution terminal supply chain, and possessing significant industrial practicality and promotional value.

[0042] Additionally, in one embodiment, reference is made to Figures 1 to 3 The power distribution terminal also includes a main control central processing unit, an internal identity discovery bus, and a security chip; The main control central processing unit is used to acquire response data packets, assemble all response data packets to obtain the terminal hardware fingerprint list, and execute the business functions, chip identity discovery functions and the firmware logic of the aggregation module; The main control CPU stores a list of component physical addresses, which is scanned via the internal identity discovery bus to identify all mounted I / O pins. 2 C is automatically generated from the device; The internal identity discovery bus is connected to the identity chips of all key components in the power distribution terminal. The internal identity discovery bus is used to execute the identity query process. The security chip is used to perform hash calculation on the terminal hardware fingerprint list to obtain a second hash value, and obtain a terminal-level trusted signature based on the second hash value; The main control central processing unit or security chip has a pre-stored verification public key that is paired with the physical root key. The verification public key is used to verify digital signatures.

[0043] It should be noted that the intelligent power distribution terminal of this invention has chip sensing capabilities, and the terminal hardware design needs to provide a dedicated low-speed communication bus for connecting the identity chips of each key component. The firmware of the power distribution terminal has a built-in chip identity discovery function and aggregation module. Upon power-up, it automatically executes the chip identity reading, verification, and information aggregation process, and uses the domestically produced security chip located in the power distribution terminal to digitally sign the aggregated information, ultimately obtaining a terminal hardware fingerprint list.

[0044] It should be noted that the main control central processing unit is the core of the power distribution terminal. In addition to the preset business functions, it adds a chip identity discovery function and the firmware logic of the aggregation module.

[0045] It should be noted that the internal identity discovery bus uses a reliable, low-speed serial bus (such as I...). 2 C) The interfaces of all key component identity chips are physically connected to form a "bus tree" topology; the internal identity discovery bus is independent of the high-speed business bus and is dedicated to the identity query process.

[0046] It should be noted that the enhanced chips are all core chips with built-in key component identity chips, including but not limited to enhanced ADC chips, enhanced FLASH chips, and enhanced PHY chips.

[0047] It should be noted that the security chip is a domestically produced chip used to perform hash calculations and digital signatures on the terminal hardware fingerprint list, and serves as the terminal anchor point of the trust chain.

[0048] Additionally, in one embodiment, reference is made to Figures 1 to 4 It also includes: a power distribution master station, which is connected to the power distribution terminal through a communication network. The power distribution master station stores a chip whitelist database, which is periodically distributed and updated through digital signature. When the power distribution master station verifies the digital signature, it loads the chip whitelist database. The communication network is used to transmit registration messages containing a complete list of terminal hardware fingerprints and subsequent business data; The power distribution master station includes a chip trusted verification module and a chip asset database. The chip trusted verification module is used to verify the validity of terminal-level trusted signatures and parse the registration message corresponding to the valid terminal-level trusted signature to obtain the chip information of all core chips, and verify the chip information against the chip whitelist database. The chip asset database is used to store all chip information inside verified power distribution terminals.

[0049] It should be noted that the distribution master station is a distribution automation master station with chip-level management capabilities. A chip trust verification module and a chip asset database are added to the system side of the distribution master station. The chip trust verification module is used to verify terminal signatures and compare the reported chip identity with an authoritative and trusted chip whitelist (i.e., the chip whitelist database). The chip asset database is used to store and associate detailed chip-level information for all terminals across the network, supporting full lifecycle traceability and analysis.

[0050] It should be noted that the distribution automation system master station serves as the management brain of the distribution system. The chip trust verification module is responsible for verifying the validity of terminal-level trusted signatures and checking the reported chip information against the whitelist. The chip asset database is used to persistently store chip-level information within all terminals across the network, supporting traceability, querying, and analysis. The communication network connects the distribution terminals and the distribution master station, transmitting registration messages containing a list of terminal hardware fingerprints and subsequent business data.

[0051] It should be noted that the distribution master station system includes a backend interface or a frontend interface. The backend or frontend interface includes a master station monitoring geographic map or single-line map, distribution terminal icons, terminal device panels, chip detail drill-down entry points, and a chip-level asset management list page. The master station monitoring geographic map or single-line map is a standard power grid topology display interface. The distribution terminal icon is a terminal icon on a feeder in the map; because it has completed chip-level registration, it displays a special "Domestic Chip Trusted" status indicator in the corner. The terminal device panel is the device information pop-up window that appears when the mouse hovers over or clicks the distribution terminal icon. In addition to displaying the traditional terminal ID and status, the terminal device panel adds a "Chip Health" summary, such as "Domestic Chip: 5 / 5". The chip detail drill-down entry point allows users to jump to or access deeper management pages.

[0052] It should be noted that the chip-level asset management list page lists all monitored key components within the terminal in tabular form, with each row corresponding to one chip. The table columns must include at least the role, chip model / UID, manufacturer, production batch, domestic certification status, operational status, operation status, and a network-wide chip statistics and early warning dashboard. Roles include, but are not limited to, CPU and ADC. The chip model / UID identifies the specific model and unique serial number of the core chip. The manufacturer refers to the core chip's manufacturer. The production batch is used for supply chain traceability. The domestic certification status displays "certified" and the certificate number. The operational status is based on subsequent communication-maintained "heartbeats" or self-test reports, displaying "normal," "warning," or "abnormal." Operation status provides links to "historical traceability," "replacement records," etc. The network-wide chip statistics and early warning dashboard is a sidebar or independent page used to display statistical data from a network-wide perspective, such as: "Domestic and controllable terminal coverage rate," "TOP list of XX brand ADC chip operational failure rates," and "early lifespan chip early warning list," providing decision support for management.

[0053] It should be noted that, referring to Figure 4 , Figure 4This demonstrates how the backend or frontend interface of the power distribution master station system presents the chip-level management capabilities brought by this invention. The master station monitoring geographic map or single-line map is a conventional power grid topology display interface. The power distribution terminal icon is a terminal icon on a certain feeder in the map; because it has completed chip-level registration, a special "Domestic Chip Trusted" status mark is displayed in the corner of the icon. The terminal device panel is a floating window of device information that pops up when the mouse hovers over or clicks (402). In addition to displaying the traditional terminal ID and status, the panel adds a "chip health" summary, such as "Domestic Chip: 5 / 5". Chip details drill-down entry, clicking the "View Details" button can jump to or pop up a deeper management page. Chip-level asset management list page: This is the core display interface of the function of this invention, listing all the monitored key components inside the terminal in tabular form, with each row corresponding to one chip. The table columns should include at least: role (CPU, ADC, etc.), chip model / UID (specific model and unique serial number), manufacturer, production batch (for supply chain traceability), domestic certification status (displaying "certified" and certificate number), operational status (based on subsequent communication-maintained "heartbeat" or self-test reports, displaying "normal," "warning," or "abnormal"), and operations (providing links to "historical traceability," "replacement records," etc.). The network-wide chip statistics and early warning dashboard is displayed as a sidebar or independent page, showcasing statistical data from a network-wide perspective, such as: "Domestic and controllable terminal coverage rate," "TOP list of XX brand ADC chip operational failure rates," and "early lifespan-reaching chip early warning list," providing decision support for management. When a user clicks or hovers over the device, a floating window displaying the terminal device details on the terminal device panel opens. By triggering the "View Chip" button, the chip-level asset management list is opened. For chips with the role of CPU, clicking "Historical Traceability" provides a view of the chip's entire lifecycle. For chips with the role of ADC, clicking "Replacement Record" opens the spare parts replacement and electronic ledger. The chip-level asset management list provides detailed data to the entire network for chip statistics and early warning. Preventive replacement work orders are generated through the early warning list, and quality analysis supports supplier evaluation reports.

[0054] In addition, embodiments of the present invention provide a verification method for a power distribution system based on enhanced components, applicable to... Figures 1 to 4 The illustrated embodiment of the power distribution system based on enhanced components, with reference to... Figure 5 and Figure 6 The method includes, but is not limited to, the following steps: S10, the enhanced components obtain the identity query command from the power distribution terminal through the interface controller via the bus, and trigger the identity query process based on the identity query command.

[0055] It should be noted that the identity query process begins with the main control central processing unit located in the power distribution terminal issuing a PIN that matches the IP address. 2Before triggering the identity query process, the identity chip of the key component pre-verifies the legality of the identity query command in the standard query frame (i.e., identity query command) of the C protocol.

[0056] S20: A physical root key is generated based on a chip's physically non-clonable function. The key component, the identity chip, reads identity information from a one-time programmable memory. The cryptographic coprocessor performs a hash calculation on the identity information to obtain a first hash value. A digital signature is generated based on the first hash value using the physical root key. The physical root key cannot be read or exported through an external interface.

[0057] It should be noted that once the key component's identification chip confirms the legitimacy of the instruction, it autonomously reads the identification information from the one-time programmable memory. The process of the key component's identification chip reading the identification information from the one-time programmable memory is entirely completed within the core chip, and cannot be observed or interfered with from the outside.

[0058] It should be noted that the cryptographic coprocessor calculates the first hash value based on the identity information, whereby the first hash value is used to ensure the integrity of the identity information; then, the first hash value is signed using the physical root key that is always located inside the core chip to obtain a digital signature. The digital signature is a cryptographic proof completed by the core chip using its unique physical root key, which is equivalent to the core chip saying: "This identity information is confirmed by me (this physical entity)".

[0059] S30: The bus obtains identity information and digital signature from the interface controller, assembles the identity information and digital signature to obtain a response data packet, and sends the response data packet to the power distribution terminal.

[0060] It should be noted that the identity information does not need to be encrypted; that is, the identity information is in plaintext, and the authenticity of the identity information is guaranteed by digital signature.

[0061] It should be noted that after receiving the identity query command, the key component identity chip of each enhanced component reads the identity information from the one-time programmable memory, generates a digital signature using the physical root key, assembles the digital signature and identity information into a response data packet, and returns the response data packet to the main control central processing unit.

[0062] It should be noted that, further, the physical root key generates a short digital signature (such as based on SM2 / ECDSA) for the identity information in the one-time programmable memory, realizing self-verification of the identity information and preventing the identity information from being forged during bus transmission.

[0063] It should be noted that, referring to Figure 6 , Figure 6 It reveals how the external master control device interacts with... Figure 1Enhanced component interaction within the system enables a complete and secure identity authentication process. Figure 2 This describes a closed-loop process from query to verification, with security mechanisms implemented at each step. The closed-loop process consists of standardized query triggering, internal chip-based secure autonomous response, and external cryptographic verification. The standardized query triggering process begins with the external host CPU issuing a query conforming to I... 2 The C protocol's standard query frame ensures the method's versatility. Within the chip's internal secure autonomous response process, the CIIC autonomously reads the identity information from One-Time Programmable (OTP) memory after confirming the instruction's legitimacy; this process is entirely internal, preventing external interference. The cryptographic coprocessor performs critical operations. It first calculates the hash value of the identity information (ensuring integrity and consistency), then signs the hash value using the physical root key that never leaves the chip. This "signature" is a cryptographic proof performed by the chip using its unique secret; this step is a core security step. The plaintext identity information and signature are returned together; the identity information itself does not need encryption because its authenticity is guaranteed by the digital signature. In external cryptographic verification, after receiving the response, the main control CPU does not need to know the chip's root key. It only needs to verify the signature using a verification public key obtained from a reliable source (such as a supply chain management platform) corresponding to that batch of chips. If the signature verification passes, it cryptographically proves that the identity information has not been tampered with; and that the information indeed comes from a physical chip with a legitimate root key. This achieves strong binding authentication of the component hardware itself and its claimed identity. Alternatively, if signature verification fails, authentication fails, an alarm signal is issued, and the component's identity is suspected or has been tampered with.

[0064] Additionally, in one embodiment, before step S10, refer to Figure 7 Specifically, this also includes, but is not limited to, the following steps: S01, when the power distribution terminal is powered on or reset, the main control central processing unit executes the chip identity discovery function and the firmware logic of the aggregation module's aggregation firmware before initializing the service functions. S02, based on the list of physical addresses of components generated by scanning through the internal identity discovery bus, the main control central processing unit sends identity query commands to all enhanced components connected to the communication via the internal identity discovery bus.

[0065] It should be noted that the power distribution terminal initiates and triggers the chip discovery process, which includes: after the power distribution terminal is powered on or reset, the main control central processing unit (CPU) prioritizes chip identity discovery and firmware aggregation before initializing application services. The process of traversing and querying key components includes: the CPU using the internal identity discovery bus (such as I...) 2C) Send identity query commands sequentially according to the preset list of component physical addresses.

[0066] Additionally, in one embodiment, after step S30, refer to Figure 7 Specifically, this also includes, but is not limited to, the following steps: S41, the main control central processing unit obtains all response data packets and assembles all response data packets into a terminal hardware fingerprint list according to a preset format. The terminal hardware fingerprint list is used to characterize the role, identity information and digital signature of all enhanced components in the power distribution terminal. S42, the power distribution terminal calls the security chip to perform hash calculation on the terminal hardware fingerprint list to obtain the second hash value, and generates a terminal-level trusted signature based on the second hash value using the private key of the security chip, and binds the terminal-level trusted signature with all identity information included in the power distribution terminal.

[0067] It should be noted that after receiving the response data packet, the main control CPU does not need to know the chip's physical root key. It only needs to use the verification public key corresponding to that batch of chips, obtained from a reliable source (such as a supply chain management platform), to verify the digital signature.

[0068] It should be noted that when the signature verification is successful, it is cryptographically proven that the identity information has not been tampered with and that the identity information does indeed come from a physical chip with a legitimate physical root key, thus achieving strong binding authentication of the component hardware itself and its claimed identity.

[0069] It should be noted that the steps for constructing the terminal hardware fingerprint list include: the main control central processing unit collects all response data packets and assembles them into a structured terminal hardware fingerprint list in a unified format (such as JSON or TLV). The terminal hardware fingerprint list clearly lists the role, identity, and signature of all key components in the power distribution terminal.

[0070] It should be noted that the power distribution terminal calls its own security chip, calculates the second hash value based on the terminal hardware fingerprint list, and uses the security chip's private key to sign and generate a terminal-level trusted signature, thus binding the terminal identity with the chip group identity.

[0071] It should be noted that, referring to Figure 7 , Figure 7This document details the fully automated process from terminal power-on to the main station completing chip information entry. The power distribution terminal initiates and triggers the chip discovery process. After power-on or reset, the main control CPU prioritizes chip identity discovery and firmware aggregation before initializing application services. It then iterates through and queries key components, sending "identity read" commands sequentially according to a pre-defined list of component physical addresses via the internal identity discovery bus. Components self-identify and respond; upon receiving the command, each enhanced chip's CIIC reads complete identity information from One-Time Programmable (OTP) memory, generates a signature using the root key, and returns the "information + signature" data packet to the external main control CPU. A terminal hardware fingerprint list is constructed; the main control CPU gathers all responses and assembles them into a structured list using a unified format (e.g., JSON or TLV). The list clearly identifies the roles, identities, and signatures of all key components within the terminal. Finally, a terminal-level trusted signature is generated; the terminal calls its own security chip to calculate the hash value of the list and signs it using the security chip's private key, binding the terminal identity to the chip group identity. The terminal initiates a registration request with a chip list; the terminal encapsulates the signed hardware fingerprint list as an extended field into a standard terminal registration message (such as based on IEC 104 or 61850) and actively sends it to the master station. The master station verifies the signature and parses the list; upon receiving the message, the master station's trusted chip verification module first verifies the validity of the terminal signature using a pre-stored terminal certificate. If verification is successful, detailed chip-level information is parsed. Chip-level whitelist comparison: The master station performs triple verification by comparing the parsed "manufacturer code + unique identifier + signature" of each chip with a locally maintained trusted domestic chip whitelist database. The whitelist is issued by an authoritative organization and updated regularly. Decision and entry into the database: If all chips pass verification, the master station marks the terminal as a "trusted, independent, and controllable terminal," and all its chip information is entered into the chip asset database, resulting in successful registration. If any chip verification fails (e.g., not in the whitelist, invalid signature), registration fails. The master station generates a security alarm, records specific non-compliant chip information, and can choose to place the terminal in isolation or monitoring mode.

[0072] Additionally, in one embodiment, after step S42, refer to Figure 7 Specifically, this also includes, but is not limited to, the following steps: S51, the power distribution terminal uses the terminal hardware fingerprint list as an extended field and encapsulates the extended field into the registration message; S52, based on any distribution terminal, the distribution terminal sends the registration message to the distribution master station through the communication network; S53, the chip trusted verification module obtains all registration messages and their corresponding terminal-level trusted signatures, compares all terminal-level trusted signatures with the pre-stored terminal certificates, and verifies the validity of the terminal-level trusted signatures respectively. S54, when the registration message corresponding to the valid terminal-level trusted signature is parsed to obtain the chip information of all core chips of all power distribution terminals connected to the power distribution master station, the chip information is verified with the chip whitelist database respectively. The chip information includes the manufacturer code, identity information and digital signature of the core chip. S55: Based on any power distribution terminal, when the chip information of all core chips in the power distribution terminal passes the verification, the power distribution master station marks the power distribution terminal as a trusted, autonomous, and controllable terminal, and enters all chip information included in the trusted, autonomous, and controllable terminal into the chip asset database, and the power distribution terminal is successfully registered.

[0073] It should be noted that when initiating a registration request with a chip list, the power distribution terminal will encapsulate the signed terminal hardware fingerprint list as an extended field into a standard registration message (such as based on IEC 104 or 61850) and actively send the registration message to the power distribution master station.

[0074] It should be noted that after receiving the registration message, the chip trust verification module of the power distribution master station first uses the pre-stored terminal certificate to verify the validity of the terminal signature. After successful verification, it parses the terminal hardware fingerprint list to obtain the chip information (i.e., detailed chip-level information), which includes the manufacturer code, unique identifier, and signature.

[0075] It should be noted that the power distribution master station performs triple verification on the chip information of each chip it parses and the chip whitelist database. The chip whitelist database is a locally maintained trusted domestic chip whitelist database, which stores whitelists issued by authoritative institutions and updated regularly.

[0076] It should be noted that if all chips pass the triple verification, the power distribution master station will mark the power distribution terminal as a trusted, autonomous, and controllable terminal. All chip information of the trusted, autonomous, and controllable terminal will be entered into the chip asset database, and the registration will be successful.

[0077] Additionally, in one embodiment, reference is made to Figure 7 In step S54, after verifying all chip information against the chip whitelist database, the following steps are included but are not limited to: S61. When at least one chip information is not in the chip whitelist database, or when at least one digital signature is invalid, or when at least one core chip of the power distribution terminal fails verification, the power distribution terminal registration fails. S62, the power distribution master station generates security alarm information based on the chip information of the core chip that failed the verification. The security alarm information includes the unique identifier of the core chip that failed the verification, the manufacturer code, the reason for the digital signature failure, and the suggested handling measures. S63, the power distribution master station pushes safety alarm information to the operation and maintenance personnel's terminal, and sets the status of the corresponding power distribution terminal to "isolated" or "monitored", generating a red highlight mark on the power distribution master station interface.

[0078] It should be noted that if the chip information verification fails for any chip (e.g., not in the whitelist, invalid signature), registration will fail. The power distribution master station will generate a security alarm, record the specific non-compliant chip information, and can choose to place the terminal in isolation or monitoring mode.

[0079] The present invention also provides a verification device for a power distribution system based on enhanced components, comprising: The power distribution terminal includes a main control central processing unit, an internal identity discovery bus, and a security chip, as well as a chip trusted verification module and a chip asset database in the power distribution master station. The main control central processing unit is configured to execute the technical solutions provided in the embodiments of this application.

[0080] This application embodiment also provides a storage medium, which is a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, it implements the above-described verification method for a power distribution system based on enhanced components.

[0081] It will be understood by those skilled in the art that all or some of the steps and systems in the methods disclosed above can be implemented as software, firmware, hardware, and suitable combinations thereof. Some or all of the physical components can be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit. Such software can be distributed on a computer-readable medium, which can include computer storage media (or non-transitory media) and communication media (or transient media). As is known to those skilled in the art, the term computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible to a computer. Furthermore, as is known to those skilled in the art, communication media typically include computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0082] The above provides a detailed description of the preferred embodiments of the present invention. However, the present invention is not limited to the above embodiments. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention. All such equivalent modifications or substitutions are included within the scope defined by the claims of the present invention.

Claims

1. A power distribution system based on enhanced components, the power distribution system including a power distribution terminal, the power distribution terminal including at least one core chip, characterized in that, The core chip integrates enhanced components, which include: The core chip's functional core is used to execute the core chip's preset business functions, which include at least one of analog-to-digital conversion, data processing, program storage, or network communication. The key component identity chip is connected to the functional core via an internal isolation bus. The internal isolation bus is a dedicated low-speed serial bus independent of the business data bus. The internal isolation bus is used to transmit identity query commands and response data packets. The internal isolation bus is physically implemented by an independent metal trace layer and has no electrical intersection with the data path of the functional core. The key component, the identity chip, includes a one-time programmable memory, a cryptographic coprocessor, and a bus slave interface controller. The one-time programmable memory stores unique identity information. The cryptographic coprocessor embeds a cryptographic algorithm engine and a physical root key. The physical root key is generated based on a chip-based physically unclonable function and cannot be read or exported through an external interface. The cryptographic coprocessor is used to generate a first hash value based on the identity information through the cryptographic algorithm engine, and to generate a digital signature based on the first hash value through the physical root key; The bus slave interface controller is used to generate the response data packet based on the identity information and the digital signature, and return the response data packet to the power distribution terminal based on the obtained identity query command.

2. The power distribution system based on enhanced components according to claim 1, characterized in that, The power distribution terminal also includes a main control central processing unit, an internal identity discovery bus, and a security chip; The main control central processing unit is used to acquire the response data packet, assemble all the response data packets to obtain the terminal hardware fingerprint list, and execute the firmware logic of the business function, chip identity discovery function and aggregation module. The main control central processing unit stores a list of component physical addresses, which is obtained by scanning all mounted I / O pins via the internal identity discovery bus. 2 C is automatically generated from the device; The internal identity discovery bus is connected to the identity chips of all the key components in the power distribution terminal, and the internal identity discovery bus is used to execute the identity query process. The security chip is used to perform hash calculation on the terminal hardware fingerprint list to obtain a second hash value, and to obtain a terminal-level trusted signature based on the second hash value; The main control central processing unit or the security chip has a pre-stored verification public key that is paired with the physical root key. The verification public key is used to verify the digital signature.

3. The power distribution system based on enhanced components according to claim 2, characterized in that, Also includes: A power distribution master station is connected to the power distribution terminal via a communication network. The power distribution master station stores a chip whitelist database, which is periodically issued and updated via digital signature. When the power distribution master station verifies the digital signature, it loads the chip whitelist database. The communication network is used to transmit registration messages encapsulated with a complete list of terminal hardware fingerprints and subsequent service data; The power distribution master station includes a chip trusted verification module and a chip asset database. The chip trusted verification module is used to verify the validity of the terminal-level trusted signature, and parse the registration message corresponding to the valid terminal-level trusted signature to obtain the chip information of all the core chips, and verify the chip information with the chip whitelist database. The chip asset database is used to store all chip information inside the verified power distribution terminal.

4. A verification method for a power distribution system based on enhanced components, characterized in that, The method, applied to the power distribution system based on enhanced components as described in any one of claims 1 to 3, comprises: The enhanced components obtain the identity query command from the power distribution terminal through the interface controller via the bus, and trigger the identity query process based on the identity query command; A physical root key is generated based on a chip's physically unclonable function. The key component, the identity chip, reads identity information from a one-time programmable memory. The cryptographic coprocessor performs a hash calculation on the identity information to obtain a first hash value. A digital signature is generated based on the first hash value using the physical root key. The physical root key cannot be read or exported through an external interface. The bus obtains the identity information and the digital signature from the interface controller, assembles the identity information and the digital signature into a response data packet, and sends the response data packet to the power distribution terminal.

5. The verification method for a power distribution system based on enhanced components according to claim 4, characterized in that, The power distribution terminal also includes a main control central processing unit, an internal identity discovery bus, and a security chip. The main control central processing unit is used to acquire the response data packets, assemble all the response data packets into a terminal hardware fingerprint list, and execute the firmware logic of the business functions, chip identity discovery functions, and aggregation modules. The main control central processing unit stores a list of component physical addresses, which is obtained by scanning all mounted I / O pins via the internal identity discovery bus. 2 C is automatically generated from the device; the internal identity discovery bus is connected to the identity chips of all the key components in the power distribution terminal, and the internal identity discovery bus is used to execute the identity query process. The security chip is used to perform hash calculation on the terminal hardware fingerprint list to obtain a second hash value, and to obtain a terminal-level trusted signature based on the second hash value; The main control central processing unit or the security chip has a pre-stored verification public key that is paired with the physical root key. The verification public key is used to verify the digital signature. Before the enhanced components obtain the identity query command from the interface controller and the power distribution terminal via the bus, the following is also included: When the power distribution terminal is powered on or reset, the main control central processing unit executes the chip identity discovery function and the firmware logic of the aggregation module's aggregation firmware before initializing the service functions. Based on the list of physical addresses of the components generated by scanning through the internal identity discovery bus, the main control central processing unit sends the identity query command to all the enhanced components connected in communication via the internal identity discovery bus.

6. The verification method for a power distribution system based on enhanced components according to claim 5, characterized in that, After sending the response data packet to the power distribution terminal, the method further includes: The main control central processing unit acquires all the response data packets and assembles all the response data packets into the terminal hardware fingerprint list according to a preset format. The terminal hardware fingerprint list is used to characterize the role, identity information and digital signature of all the enhanced components in the power distribution terminal. The power distribution terminal calls the security chip to perform a hash calculation on the terminal hardware fingerprint list to obtain the second hash value, and generates the terminal-level trusted signature based on the second hash value using the private key of the security chip, and binds the terminal-level trusted signature to all the identity information included in the power distribution terminal.

7. The verification method for a power distribution system based on enhanced components according to claim 6, characterized in that, The power distribution system further includes: a power distribution master station, which is connected to the power distribution terminal via a communication network. The power distribution master station stores a chip whitelist database, which is periodically issued and updated via digital signatures. When the power distribution master station verifies the digital signature, it loads the chip whitelist database. The communication network is used to transmit registration messages encapsulated with a complete list of terminal hardware fingerprints and subsequent business data. The power distribution master station includes a chip trusted verification module and a chip asset database. The chip trusted verification module is used to verify the validity of the terminal-level trusted signature and parse the registration message corresponding to the valid terminal-level trusted signature to obtain the chip information of all the core chips, and verify the chip information against the chip whitelist database. The chip asset database is used to store all the chip information inside the verified power distribution terminal. After binding the terminal-level trusted signature with all the identity information included in the power distribution terminal, the method further includes: The power distribution terminal uses the terminal hardware fingerprint list as an extended field and encapsulates the extended field into the registration message; Based on any of the aforementioned power distribution terminals, the power distribution terminal sends the registration message to the power distribution master station through the communication network; The chip trusted verification module obtains all the registration messages and their corresponding terminal-level trusted signatures, compares all the terminal-level trusted signatures with the pre-stored terminal certificates, and verifies the validity of the terminal-level trusted signatures respectively. When the registration message corresponding to the valid terminal-level trusted signature is parsed to obtain the chip information of all the core chips of all the power distribution terminals that are connected to the power distribution master station, all the chip information is verified with the chip whitelist database respectively. The chip information includes the manufacturer code corresponding to the core chip, the identity information and the digital signature. Based on any of the aforementioned power distribution terminals, when the chip information of all the core chips of the power distribution terminal passes verification, the power distribution master station marks the power distribution terminal as a trusted, autonomous, and controllable terminal, and records all the chip information included in the trusted, autonomous, and controllable terminal into the chip asset database, and the power distribution terminal is successfully registered.

8. The verification method for a power distribution system based on enhanced components according to claim 7, characterized in that, After verifying all the chip information against the chip whitelist database, the process also includes: If at least one of the chip information is not in the chip whitelist database, or if at least one of the digital signatures is invalid, or if at least one of the core chips of the power distribution terminal fails verification, the power distribution terminal registration fails. The power distribution master station generates a security alarm message based on the chip information of the core chip that failed verification. The security alarm message includes the unique identifier, manufacturer code, reason for digital signature failure, and suggested handling measures of the core chip that failed verification. The power distribution master station pushes the safety alarm information to the operation and maintenance personnel's terminal and sets the status of the corresponding power distribution terminal to "isolated" or "monitored", generating a red highlight mark on the power distribution master station interface.

9. A verification device for a power distribution system based on enhanced components, characterized in that, include: The main control central processing unit, internal identity discovery bus and security chip in the power distribution terminal, and the chip trusted verification module and chip asset database in the power distribution master station, wherein the main control central processing unit is configured to execute the verification method according to any one of claims 4 to 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions for causing a computer to perform the verification method for a power distribution system based on enhanced components as described in any one of claims 4 to 8.

Images