CN114254373B - An encrypted transmission method, device and system - Google Patents

Abstract

The invention is applied to a distributed new energy data middle station under the unified management of meteorological, power supply and power grid data, and relates to an encrypted transmission method, device and system, including: collecting distributed new energy power station data to obtain first power station data; The first power station data is replaced based on the pre-established metadata dictionary to obtain second power station data; the second power station data is processed according to encryption requirements to obtain third power station data; the third power station data is obtained Assemble into a Json file and transfer it. On the basis of ensuring the security of new energy data transmission, the invention realizes barrier-free exchange of data space with the help of a big data middle platform, and reduces the pressure on data processing of business terminals.

Description

An encrypted transmission method, device and system

technical field

The invention relates to the field of power system data processing, in particular to an encrypted transmission method, device and system.

Background technique

On the one hand, the information system of the power system has fully covered business areas such as enterprise operation, power grid operation and customer service and applications at all levels, providing strong support for the effective operation of various businesses. On the other hand, with the rapid development of the mobile Internet and the Internet of Things, big data technology has been gradually promoted and applied. According to the survey report on the development of big data in China released by the China Academy of Information and Communications Technology, the overall scale of big data in China in 2017 was 470 billion yuan. In 2018, the scale of the big data industry has exceeded 600 billion yuan, with rapid growth. It is estimated that the size of the big data market in 2019 will exceed 715 billion yuan. In terms of big data, more than 60% of domestic enterprises have carried out research and application of big data technologies including data mining, machine learning, data asset management, and intelligent decision-making, and enterprises have further increased their emphasis on data analysis. Enterprises can better manage risk after applying big data.

It can be seen that the advent of the digital economy era has made the deep integration of digital and energy an important development trend in the energy and power industry, but there are also some outstanding problems, mainly manifested in the low degree of data reuse, low concentration of main data, lack of Unified data quality management system. Data resource utilization and data and service sharing adaptively adopt various available mainstream technologies. From the large mainframe model adopted in the early power system automation, to the distributed network-based, to the construction of the control cloud, the use of distributed computing and big data technology to establish an enterprise-level massive data platform, a big data platform, and the establishment of a unified public information model based Object-oriented online monitoring or distribution grid global data platform, etc., to a certain extent, eliminates the "data island" effect of business system data and promotes information sharing. Among them, the emergence of data middle-station technology breaks the "data island", provides safe, reliable and efficient data exchange services, and provides a global, intelligent and agile multi-functional platform for power grid enterprises. The distributed new energy data middle-office information exchange service under the unified management of power grid data will effectively enhance the ability to perceive and interact with the terminal equipment of the power grid, energy production and sales behavior, and resource environment, and can significantly improve the technical support level of the automation system. When using big data to serve the new energy power industry, it is necessary to collect data through different channels, store these data in a fast, safe, classified and orderly manner based on storage technology, and then process these data based on computing technology. Processing, transforming data into useful information. Among them, data collection is the basis of big data application, and data exchange is the first step on the basis, which is the key to big data application.

At present, the mainstream data exchange methods are mainly divided into three types: file-type data exchange, interface-type data exchange and protocol-type data exchange. Among them, the interface-type restAPI method is the most widely used in the data center. , JS object notation) format for information exchange, this format has the advantages of simple data format, easy to read and write, supports multiple languages, and is convenient for server parsing, but there are also some problems, such as the data itself is based on strings, resulting in the data itself Larger, and the security of sensitive information is not high. How to reduce the data volume of communication data while improving security in the process of new energy data exchange, so as to ultimately improve the efficiency of the new energy power industry, is an urgent problem to be solved.

SUMMARY OF THE INVENTION

In order to overcome the above-mentioned defects, the present invention provides an encrypted transmission method, device and system.

In a first aspect, an encrypted transmission method is provided, the method comprising:

Collect distributed new energy power station data to obtain the first power station data;

performing replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

processing the second power station data according to encryption requirements to obtain third power station data;

The third power plant data is assembled into a specific format and transmitted.

Further, the establishment of the metadata dictionary includes:

Based on the business requirements of distributed new energy information exchange, set the strings whose frequency exceeds the frequency threshold or the length exceeds the length threshold in the process of distributed new energy data transmission as metadata, and set different replacement characters for each metadata respectively;

A metadata dictionary is formed based on each metadata and the corresponding replacement characters.

Further, performing metadata replacement processing on the first power station data by using a pre-established metadata dictionary to obtain second power station data, including:

Determine whether the metadata in the metadata dictionary exists in the first power station data:

When it exists, use the metadata dictionary to replace the metadata in the first power station data to obtain second power station data;

Otherwise, the first power station data is kept as the second power station data.

Further, processing the second power station data according to the encryption requirements to obtain third power station data, including:

When the second power station data needs to be encrypted, the second power station data is encrypted by using a secondary encryption method to obtain third power station data; otherwise, the second power station data is used as the third power station data.

Further, the encrypting the second power station data by using a secondary encryption method includes:

Encrypt the data of the second power station once based on the TripleDes algorithm to obtain the encrypted data once;

All letters and numbers in the primary encrypted data are respectively replaced to obtain secondary encrypted data.

Further, replacing all letters and numbers in the one-time encrypted data, including:

Perform uppercase and lowercase letter conversion on all letters in the one-time encrypted data;

For all numbers in the one-time encrypted data, the numbers are replaced based on a preset calculation formula.

Further, the calculation formula for replacing the numbers is as follows:

x = a - n ;

Among them, x is the number after the replacement, n is the number in the one-time encrypted data, and a is a preset constant.

Further, the collection of distributed new energy power station data to obtain the first power station data includes:

Collect distributed new energy power station data at the source end of each distributed new energy power station data;

Unified cleaning of the distributed new energy power station data at each source end;

Format uniform processing of the distributed new energy power station data after unified cleaning;

Through the distributed new energy data transmission model and based on the cloud-based message bus service interface, the distributed new energy power station data after the format consistency processing is used as the first power station data.

Further, the unified format processing of the distributed new energy power station data after unified cleaning includes:

Based on the principles of non-redundancy, stability, consistency and ease of use, the uniformly cleaned distributed new energy power station data is processed in a consistent format in the form of an equipment model, a topology model and a business rule data model.

Further, the distributed new energy power station data includes at least one of the following: operation data of the distributed new energy power station; meteorological data; electricity data; ledger data.

Further, before assembling the distributed new energy power station data, replacement data or secondary encrypted data into a specific format and transmitting, it also includes:

Authenticate and authorize the new interface requesting distributed new energy power station data, and register the new interface that completes the authentication and authorization;

For the request transmitted through the new interface, judge whether the request is the actual request of the service terminal, and judge whether the signature of the service terminal is consistent with the corresponding pre-stored signature: if both judgment results are yes, then the request Pass validation, otherwise, the request fails validation and rejects the request.

In a second aspect, the present invention provides an encrypted transmission device, the device comprising:

The acquisition module is used to collect the data of the distributed new energy power station to obtain the data of the first power station;

a primary encryption module, configured to perform replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

a secondary encryption module, configured to process the second power station data according to encryption requirements to obtain third power station data;

The transmission module is used to assemble the data of the third power station into a specific format and transmit it.

Further, the establishment of the metadata dictionary includes:

Based on the business requirements of distributed new energy information exchange, set the strings whose frequency exceeds the frequency threshold or the length exceeds the length threshold in the process of distributed new energy data transmission as metadata, and set different replacement characters for each metadata respectively;

A metadata dictionary is formed based on each metadata and the corresponding replacement characters.

Further, the one-time encryption module is specifically used for:

Determine whether the metadata in the metadata dictionary exists in the first power station data:

When it exists, use the metadata dictionary to replace the metadata in the first power station data to obtain second power station data;

Otherwise, the first power station data is kept as the second power station data.

Further, the secondary encryption module is specifically used for:

When the second power station data needs to be encrypted, the second power station data is encrypted by using a secondary encryption method to obtain third power station data; otherwise, the second power station data is used as the third power station data.

Further, the collection module is specifically used for: collecting distributed new energy power station data at the source end of each distributed new energy power station data;

Unified cleaning of the distributed new energy power station data at each source end;

Format uniform processing of the distributed new energy power station data after unified cleaning;

Through the distributed new energy data transmission model and based on the cloud-based message bus service interface, the distributed new energy power station data after the format consistency processing is used as the first power station data.

In a third aspect, the present invention also provides an encrypted transmission method, comprising:

The distributed new energy data center collects the data of the distributed new energy power station by means of data authentication, and obtains the data of the first power station;

The distributed new energy data center performs replacement processing on the first power station data based on the pre-established metadata dictionary to obtain second power station data; and processes the second power station data according to encryption requirements to obtain third power station data; The third power plant data is assembled into a specific format and transmitted.

Further, the distributed new energy data center collects the distributed new energy power station data by means of data authentication, including:

The distributed new energy data center provides an API login method, and accepts API logins to the distributed new energy data center;

The distributed new energy data center returns a successful login message after completing the user authentication, and sends the encryption parameters api_key and security_key at the same time;

The distributed new energy data center authenticates the api_key returned by the business terminal, decrypts the encrypted key data uploaded by the business terminal after the authentication is correct, obtains the json parameters api_key and security_key, and calls the business interface to obtain the distributed new energy power station data.

In a fourth aspect, the present invention provides an encrypted transmission system, the system comprising: a service terminal and a distributed new energy data center;

The business terminal is used to log in to the distributed new energy data center based on the API provided by the distributed new energy data center;

The distributed new energy data middle station is used to provide the new energy power station data provided by the API collection service terminal, and obtain the first power station data;

The distributed new energy data center is further configured to perform replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data; and process the second power station data according to encryption requirements to obtain Third power station data; assembling the third power station data into a specific format and transmitting.

Further, the distributed new energy data center includes an API interface module; the business terminal includes: a client interface module and a client encryption module;

The API interface module is used to provide an API interface, so that the business terminal can log in to the distributed new energy data center by means of API login;

The client interface module is used to enable the business terminal to log in to the distributed new energy data center through the login API;

The client-side encryption module is configured to use the encryption method pre-released by the distributed new energy data center to encrypt the encryption parameters api_key and security_key and then call the API interface module.

Further, the distributed new energy data center also includes:

The authentication module is used to complete the user authentication and return the login success message; while returning the login success message, the obtained encryption parameters api_key and security_key are sent;

The service data acquisition module is used to authenticate the api_key returned by the service terminal, and decrypt the json parameters api_key and security_key after the authentication is correct;

The acquisition module is used to collect the data of the distributed new energy power station to obtain the data of the first power station;

a primary encryption module, configured to perform replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

a secondary encryption module, configured to process the second power station data according to encryption requirements to obtain third power station data;

a transmission module, configured to assemble the third power station data into a specific format and transmit it, and call a business interface to obtain the new energy power station data;

New energy database, including: static database, operation database, forecast database and evaluation database.

Further, the business interface of the distributed new energy data middle station accesses the new energy database through the data interface provided by the business database, so as to obtain the new energy data stored in the new energy database.

In a fifth aspect, the present invention provides a processor for running a program, wherein the encrypted transmission method is executed when the program is running.

In a sixth aspect, the present invention provides an execution device, the execution device includes a processor, the processor is coupled to a memory, the memory stores program instructions, and when the program instructions stored in the memory are executed by the processor When implementing the encryption transmission method described.

In a seventh aspect, the present invention provides a computer-readable storage medium, the computer-readable storage medium comprising a program, which, when executed on a computer, causes the computer to execute the encrypted transmission method.

The above one or more technical solutions of the present invention have at least one or more of the following beneficial effects: compressing data while retaining the advantages of restAPI, encrypting sensitive information, and replacing the generated ciphertext in advance, so as to pass the data Double encryption, which ultimately increases security while achieving compression. On the basis of ensuring security, with the help of the big data middle platform, data can be exchanged anytime and anywhere, reducing the pressure on business terminal data processing.

Description of drawings

Fig. 1 is the flow chart of the encrypted transmission method provided by the present invention;

Fig. 2 is the ciphertext conversion schematic diagram in the encryption transmission method provided by the present invention;

3 is a schematic flowchart of a specific embodiment of an encrypted transmission method provided by the present invention;

4 is a schematic diagram of an encrypted transmission device provided by the present invention;

5 is a schematic flowchart of another encrypted transmission method provided by the present invention;

6 is a schematic flowchart of another specific example of an encrypted transmission method provided by the present invention;

7 is a schematic diagram of an encrypted transmission system provided by the present invention;

FIG. 8 is a schematic diagram of a new energy database in an embodiment provided by the present invention.

Detailed ways

The specific embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

At present, the mainstream data exchange methods are mainly divided into three types: file-type data exchange, interface-type data exchange and protocol-type data exchange. Among them, the interface-type restAPI method is most widely used in the data center, which is based on json (JavaScript Object Notation, JS Object Notation) format for information exchange, this format has the advantages of simple data format, easy to read and write, supports multiple languages, and is convenient for server parsing, but there are also some problems, such as the data itself is based on strings, which leads to The data itself is large, and the security of sensitive information is not high. How to reduce the data volume of communication data while improving security in the process of new energy data exchange, so as to ultimately improve the efficiency of the new energy power industry, is an urgent problem to be solved. On the basis of ensuring security, the invention realizes data exchange anytime and anywhere with the help of the big data middle platform, and reduces the pressure on the data processing of the business terminal.

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1:

The present invention provides an encrypted transmission method, as shown in Figure 1, comprising:

Step S1: collecting distributed new energy power station data to obtain first power station data;

Step S2: performing replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

Step S3: processing the second power station data according to the encryption requirements to obtain third power station data;

Step S4: Assemble the third power station data into a specific format and transmit it.

Preferably: the specific format is a Json file format; the specific format is a format commonly used in data exchange between the middle and the platform;

As a method, the establishment of the metadata dictionary includes: based on the business requirements of distributed new energy information exchange, setting the string whose frequency exceeds the frequency threshold or the length exceeds the length threshold in the process of distributed new energy data transmission as metadata, and set different replacement characters for each metadata; form a metadata dictionary based on each metadata and the corresponding replacement characters. Among them: Metadata, as the top-level abstract control layer, comprehensively controls the data and services in the middle platform.

Preferred: The main contents of metadata include: ① Basic data description. That is, the pattern information of the basic data formed after the business data is imported and integrated into the middle office. There is structured data managed in relational or object schemas, and there is a lot of unstructured data. ②The description of the data service includes two parts: the basic data service of the middle station and the description of the analysis result data service; in the present invention, the business data is the new energy power station data.

Preferably: the metadata is acquired in two ways: automatic and manual. Automatic acquisition is to use the metadata acquisition interface (such as the interface for accessing the database table structure of the database) or import the standardized file format to acquire the stored information model.

As a way, according to business requirements, establish a metadata dictionary library for the key/value in json that frequently appears in information exchange.

Preferably: performing metadata replacement processing on the first power station data by using a pre-established metadata dictionary to obtain second power station data includes: judging whether the first power station data exists in the metadata dictionary Metadata: when it exists, use the metadata dictionary to replace the metadata in the first power station data to obtain second power station data; otherwise, keep the first power station data and use it as the second power station data.

The pre-established metadata dictionary specifically includes the following steps:

Step SUB_A1: Obtain the data objects involved in Taichung Exchange in the new energy data;

Step SUB_A2: Access the data object through the data interface to obtain the historical exchange information of the data object;

Step SUB_A3: Compare and analyze the key and value in the json file corresponding to the historical exchange information, determine the key and value of the high-frequency occurrence and the long string, and store the key and value of the high-frequency word occurrence in the metadata dictionary library;

A specific implementation is: Assume that the original json file A_json of the data object A is:

A_json:

[

{

id:'122',

name:'Jiangsu Electric Power'

},

{

id:'123',

name:'Shanghai Electric Power'

}

{

id:'124',

name:'Shanghai Wind Power'

}

]

Suppose the metadata of the data is:

Metadata field No Metadata field English name 1 id 2 name

Suppose the dictionary of strings is:

String serial number string Shanghai 1 Jiangsu 2 electricity 3 wind power 4

The replaced A_json is:

A_json: [

{

1:'122',

2:'23'

},

{

1:'123',

2:'13'

}

{

1:'124',

2:'14'

}]

Preferably, the processing of the second power station data according to the encryption requirements to obtain the third power station data includes: when the second power station data needs to be encrypted, using a secondary encryption method to perform the second power station data encryption Encryption to obtain the third power station data, otherwise, the second power station data is used as the third power station data.

Preferably: encrypting the data of the second power station by using a secondary encryption method includes: encrypting the data of the second power station once based on the TripleDes algorithm to obtain encrypted data once; encrypting all letters in the encrypted data once Substitute with numbers to obtain secondary encrypted data. For the information to be encrypted and transmitted, use the TripleDES algorithm to encrypt, and then re-encrypt the ciphertext.

In the process of communication and transmission of information data, in order to prevent the information from being obtained by people who should not or are not allowed to obtain it, such as sensitive information such as user passwords, some encryption algorithms can be used to encrypt the information. TripleDES is an enhanced DES encryption algorithm. The encryption end mainly uses the private key to encrypt through mathematical operations. The decryption end also needs the same private key for decryption, but there is still a risk of being cracked in theory. In order to further strengthen the security, the present invention replaces the generated ciphertext in advance, so that the data is double encrypted and compressed. while improving safety.

A specific implementation is: for the replaced A_json, the information "Shanghai Wind Power" in the replaced A_json has been replaced with "14", and the ciphertext of "14" is: "U2FsdGVkX1+TJ75ELrbDRp5b1nb4v8MB"; The above ciphertext is further encrypted, for example, all characters are converted from uppercase to lowercase, and lowercase to uppercase. The number 0 is converted to 9, the number 9 is converted to 0, the number 1 is converted to 8, the number 8 is converted to 1, and so on; According to this algorithm, the above ciphertext becomes: "u7fSDgvKx8+tj24elRBdrP4B8NB5V1mb".

As shown in Figure 2, as a way, the ciphertext conversion only involves letters and numbers, and the remaining special characters remain unchanged;

Preferred: All characters uppercase to lowercase, lowercase to uppercase. All numbers are processed according to 9-n, such as 9 to 0, 8 to 1, and so on, starting from 5 in reverse order. For data that does not require encryption and is not defined in the metadata dictionary, assemble json according to the original information and exchange information.

Preferably: the replacing all letters and numbers in the one-time encrypted data respectively includes: converting all letters in the one-time encrypted data to upper and lower case letters; for all the numbers in the one-time encrypted data, based on preset A calculation replaces the numbers.

Preferably: the calculation formula for replacing the numbers is as follows:

x = a - n ;

Among them, x is the number after the replacement, n is the number in the one-time encrypted data, and a is a preset constant.

Preferably: the collecting of distributed new energy power station data to obtain the first power station data includes: collecting distributed new energy power station data at the source end of each distributed new energy power station data; The data is uniformly cleaned; the uniformly cleaned distributed new energy power station data is processed in a consistent format; through the distributed new energy data transmission model, and based on the cloud-based message bus service interface, the format is uniformly processed. Type new energy power station data as the first power station data. The data of the first power station can be further synchronized to the cloud.

As a method, first collect all kinds of data of distributed new energy power stations collected by the data acquisition module, and build a distributed new energy data transmission model based on the provincial cloud message bus service interface to realize the source end to the provincial cloud. Based on the idea of edge computing, it provides preliminary data governance and data preprocessing functions to reduce the pressure on background data analysis and calculation.

Among them: data governance and collected data preprocessing operations include: 1) Unified cleaning of equipment measurement data, and data governance operations such as alarms and repairs for dead values, over-limit values, and illegal values according to pre-set rules and governance strengths ;2) Data preprocessing: conversion coefficient, base value, reasonable upper limit, reasonable lower limit, default value, soft integration by time (second-level time interval) and other processing links.

The cleaning also includes source-end data quality control, and the source-end data quality control is specifically: using general quality control rules for various types of data involved in distributed new energy management and control services to implement data cleaning and data quality on source-end data. Statistics and alarms. Among them, the quality control rules include the rules that limit the data quality such as data out-of-limit, dead value, missing test, data jump or logical abnormality.

Preferably, the source-end data includes: meteorological factor monitoring data, numerical forecast data, distributed new energy resource analysis data, distributed new energy power station operation data and/or management data, and the like.

Preferably: the unified format processing of the distributed new energy power station data after unified cleaning includes:

Based on the principles of non-redundancy, stability, consistency and ease of use, the uniformly cleaned distributed new energy power station data is processed in a consistent format in the form of an equipment model, a topology model and a business rule data model.

Preferably, the distributed new energy power station data includes: operation data, meteorological data, electricity data and ledger data of the distributed new energy power station.

Preferably: before the distributed new energy power station data, replacement data or secondary encrypted data are assembled into a Json file and transmitted, the method further includes:

Authenticate and authorize the new interface requesting distributed new energy power station data, and register the new interface that completes the authentication and authorization;

For the request transmitted through the new interface, judge whether the request is the actual request of the service terminal, and judge whether the signature of the service terminal is consistent with the corresponding pre-stored signature: if both judgment results are yes, then the request Pass validation, otherwise, the request fails validation and rejects the request.

Preferred: use a circuit breaker mechanism for applications in abnormal states (disabled, deactivated, blacklisted, etc.), or service terminals with excessive invocation times, invocation frequency, and concurrency, that is, directly throwing exceptions and not allowing access. For legitimate application requests, use data replacement and encrypted json messages to respond to their requests.

The above encrypted transmission method including the details of each step is shown in FIG. 3 .

Example 2:

Based on the same inventive concept, the present invention provides an encrypted transmission device, as shown in FIG. 4 , the device includes:

The acquisition module is used to collect the data of the distributed new energy power station to obtain the data of the first power station;

a primary encryption module, configured to perform replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

a secondary encryption module, configured to process the second power station data according to encryption requirements to obtain third power station data;

The transmission module is used to assemble the data of the third power station into a specific format and transmit it.

Among them, the establishment of metadata dictionary, including:

Based on the business requirements of distributed new energy information exchange, set the strings whose frequency exceeds the frequency threshold or the length exceeds the length threshold in the process of distributed new energy data transmission as metadata, and set different replacement characters for each metadata respectively;

A metadata dictionary is formed based on each metadata and the corresponding replacement characters.

Among them, the one-time encryption module is specifically used for:

Determine whether the metadata in the metadata dictionary exists in the first power station data:

When it exists, use the metadata dictionary to replace the metadata in the first power station data to obtain second power station data;

Otherwise, the first power station data is kept as the second power station data.

Among them, the secondary encryption module is specifically used for:

When the second power station data needs to be encrypted, the second power station data is encrypted by using a secondary encryption method to obtain third power station data; otherwise, the second power station data is used as the third power station data.

Wherein, using the secondary encryption method to encrypt the data of the second power station, including:

Encrypt the data of the second power station once based on the TripleDes algorithm to obtain the encrypted data once;

All letters and numbers in the primary encrypted data are respectively replaced to obtain secondary encrypted data.

Wherein, all letters and numbers in the one-time encrypted data are respectively replaced, including:

Perform uppercase and lowercase letter conversion on all letters in the one-time encrypted data;

For all numbers in the one-time encrypted data, the numbers are replaced based on a preset calculation formula.

Wherein, the calculation formula for replacing the numbers is as follows:

x = a - n ;

Among them, x is the number after the replacement, n is the number in the one-time encrypted data, and a is a preset constant.

Among them, the acquisition module is specifically used for:

Collect distributed new energy power station data at the source end of each distributed new energy power station data;

Unified cleaning of the distributed new energy power station data at each source end;

Format uniform processing of the distributed new energy power station data after unified cleaning;

Through the distributed new energy data transmission model and based on the cloud-based message bus service interface, the distributed new energy power station data after the format consistency processing is used as the first power station data. The data of the first power station can be further synchronized to the cloud.

Among them, the unified format of the distributed new energy power station data after unified cleaning is processed, including:

Based on the principles of non-redundancy, stability, consistency and ease of use, the uniformly cleaned distributed new energy power station data is processed in a consistent format in the form of an equipment model, a topology model and a business rule data model.

Among them, the distributed new energy power station data includes: operation data, meteorological data, electricity data and ledger data of the distributed new energy power station.

Wherein, before the transmission module assembles the third power station data into a specific format and transmits it, it also needs:

Authenticate and authorize the new interface requesting distributed new energy power station data, and register the new interface that completes the authentication and authorization;

For the request transmitted through the new interface, judge whether the request is the actual request of the service terminal, and judge whether the signature of the service terminal is consistent with the corresponding pre-stored signature: if both judgment results are yes, then the request Pass validation, otherwise, the request fails validation and rejects the request.

Example 3:

Based on the same inventive concept, as a way, as shown in FIG. 5 , the encrypted transmission method in the embodiment of the present invention mainly includes the following steps:

Step S10: the distributed new energy data middle station collects the data of the distributed new energy power station by using the data authentication method, and obtains the first power station data;

Step S11: The distributed new energy data middle station performs replacement processing on the first power station data based on the pre-established metadata dictionary to obtain the second power station data; processes the second power station data according to the encryption requirements to obtain the third power station data. Power station data; the third power station data is assembled into a specific format and transmitted.

In step S10, the distributed new energy data center collects the distributed new energy power station data by means of data authentication, including:

Step S100 : the distributed new energy data middle station provides an API login method, and accepts to log in to the distributed new energy data middle station through the API;

Preferably: the service terminal used by the user runs a general operating system such as Android, Apple or Windows;

Step S200: After completing the user authentication, the distributed new energy data center returns a login success message, and simultaneously sends the encryption parameters api_key and security_key;

Step S300: the distributed new energy data middle station authenticates the api_key returned by the service terminal, decrypts the encrypted key data uploaded by the service terminal after the authentication is correct, obtains json parameters api_key and security_key, and calls the service interface to obtain service data;

Among them, the determination process of encrypted key data includes:

The business terminal obtains the encryption parameters api_key and security_key from the distributed new energy data center;

The business terminal encrypts the encryption parameters api_key and security_key using the encryption method pre-published by the distributed new energy data center to obtain encrypted key data.

In step 11, secondary encryption is performed on the acquired service data; the secondary encryption method used here is the encryption transmission method described above; the detailed flow of the above encryption transmission method is shown in FIG. 6 .

As a method, the information exchange method for the distributed new energy data center, specifically: when the client of the mobile terminal or the PC, that is, the business terminal, requests data from the server, first call the login API, and obtain the api_key and security_key from the server. , and use the encryption method pre-published by the distributed new energy data center to encrypt the parameters and call the business API. After the authentication of the server is correct, it decrypts the json parameters and calls the business interface, encrypts and obtains the data, and returns the ciphertext to the requester, that is, the client. After receiving the data, the client calls the decryption method to decipher the data in json into plaintext, and provides the data to the business application. In this embodiment, the server is a distributed new energy data center.

The decryption and parsing process on the client side includes:

Decrypt the acquired business data to obtain a plaintext json file;

Parse plaintext json files to get business data.

Example 4:

Based on the same inventive concept, as a way, the present invention also provides an encrypted transmission system, as shown in FIG. 7 , the system includes: a service terminal and a distributed new energy data center;

The distributed new energy data middle station in the embodiment includes: an API interface module, an authentication module, a business data acquisition module, a collection module, a primary encryption module, a secondary encryption module, a transmission module and a new energy database;

Among them: the business interface facing the distributed new energy data center accesses the new energy database through the data interface provided by the business database, so as to obtain the new energy data stored in the new energy database;

Wherein, the API interface module is used to provide an API interface, so that the business terminal can log in to the distributed new energy data center by means of API login;

The authentication module is used to complete the user authentication and return the login success message; while returning the login success message, the obtained encryption parameters api_key and security_key are sent;

The service data acquisition module is used to authenticate the api_key returned by the service terminal, and decrypt the json parameters api_key and security_key after the authentication is correct;

The acquisition module is used to collect the data of the distributed new energy power station to obtain the data of the first power station;

a primary encryption module, configured to perform replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

a secondary encryption module, configured to process the second power station data according to encryption requirements to obtain third power station data;

The transmission module is used to assemble the data of the third power station into a specific format and transmit it, and call the service interface to obtain the data of the new energy power station.

As shown in Figure 8, the new energy database includes: a static database, a running database, a prediction database and an evaluation database;

Among them, the business terminal is used to log in to the distributed new energy data center based on the API provided by the distributed new energy data center; the business terminal includes: a client interface module and a client encryption module;

The client interface module is used to enable the business terminal to log in to the distributed new energy data center through the login API;

The client-side encryption module is configured to use the encryption method pre-released by the distributed new energy data center to encrypt the encryption parameters api_key and security_key and then call the API interface module.

Wherein, there are one or more service terminals.

Wherein, the distributed new energy data center is deployed on a cloud platform, and the cloud platform includes one or more servers.

Further, an API interface module, an authentication module, a business data acquisition module, a collection module, a primary encryption module, a secondary encryption module and a transmission module are deployed on the first server, and the new energy database is deployed on the second server.

The cloud platform uses computer clusters to form a unified and coordinated computing server resource, providing business terminals with on-demand and convenient access to shared resource pools (computing facilities, storage devices, applications, etc.) services. The services provided by the core service layer of the cloud computing platform include infrastructure as a service (IaaS, infrastructure as a service), platform as a service (PaaS, platform as a service), and software as a service (SaaS, software as a service). Among them, IaaS provides physical or virtual computing, storage and network services, PaaS provides application deployment and management services, and SaaS provides applications. The enterprise to which the service terminal belongs can be rented for information exchange processing.

Preferably: the second server uses the big data analysis capability provided by the cloud computing infrastructure to carry out targeted analysis on the data in the new energy database, including statistical analysis of production operation logs, production business process activity analysis, asset desk Account thematic analysis, asset analysis, equipment defect statistics, asset data quality analysis, etc., the analysis results are written back to the middle office and become a data resource that can be directly used by other business terminal types.

Service terminals and servers are usually remote from each other and typically interact through a communication network. The relationship of service terminal and server occurs by means of computer programs running on the respective computers, and have a service terminal-server relationship to each other. In some embodiments, the server sends data (eg, HTML pages) to the business end device (eg, for displaying data to a user interacting with the business end device and receiving input from the user). Data generated on the service end device (eg the results of user interactions) can be received on the server from the service end device.

The terms "data processing apparatus," "data processing system," "user equipment," or "computing device" encompass all kinds of apparatus, devices, and machines for processing data, including, by way of example, programmable processors, computers, systems on a chip, or More than one or a combination of the above. The apparatus can include special purpose logic circuitry, such as an FPGA (field programmable gate array) or an ASIC (application specific integrated circuit). In addition to hardware, the apparatus may also include code that creates an execution environment for the computer program, for example, constituting processor firmware, protocol stacks, database management systems, operating systems, cross-platform runtime environments, virtual machines, or one or more of the above Multiple combined codes. The apparatus and execution environment may implement a variety of different computing model infrastructures, such as web services, distributed computing, and grid computing infrastructures.

A computer program (also referred to as a program, software, software application, script, or code) can be written in any form of programming language, including assembly or interpreted language, instructional or procedural language, and it can be deployed in any form, including as A stand-alone program or as a module, component, subroutine, object, or other unit suitable for use in a computing environment. Computer programs may, but need not, correspond to files in the file system. A program can be stored in part of a file that holds other programs or data (such as one or more scripts stored in a markup language document), in a single file dedicated to the program, or in multiple cooperating files (such as , a file that stores one or more modules, subroutines, or sections of code). A computer program can be deployed to be executed on one computer or on multiple computers located at one site or distributed across multiple sites and interconnected by a communication network.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It will be understood that each flow and/or block in the flowcharts and/or block diagrams, and combinations of flows and/or blocks in the flowcharts and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in one or more of the flowcharts and/or one or more blocks of the block diagrams.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions An apparatus implements the functions specified in a flow or flows of the flowcharts and/or a block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in one or more of the flowcharts and/or one or more blocks of the block diagrams.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit them. Although the present invention has been described in detail with reference to the above embodiments, those of ordinary skill in the art should understand that: the present invention can still be Modifications or equivalent replacements are made to the specific embodiments of the present invention, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention shall be included within the protection scope of the claims of the present invention.

Claims (12)

1. An encrypted transmission method, comprising:

the distributed new energy data center station acquires data of a distributed new energy power station by using a data authentication mode to obtain first power station data;

the distributed new energy data center platform carries out replacement processing on the first power station data based on a pre-established metadata dictionary to obtain second power station data;

processing the second power station data according to encryption requirements to obtain third power station data;

assembling the third power station data into a specific format and transmitting the data;

the distributed new energy data center station acquires distributed new energy power station data by using a data authentication mode to obtain first power station data, and the method comprises the following steps:

the distributed new energy data center station provides an API login mode and receives login of the distributed new energy data center station through the API;

the distributed new energy data middle platform returns a login success message after completing user authentication, and simultaneously sends encryption parameters api _ key and security _ key;

authenticating the api _ key returned by the service terminal by the distributed new energy data center, decrypting the encrypted key data uploaded by the service terminal after the authentication is correct to obtain json parameters api _ key and security _ key, and calling a service interface to obtain distributed new energy power station data;

uniformly cleaning the distributed new energy power station data of each source end respectively;

carrying out format consistency processing on the uniformly cleaned distributed new energy power station data;

the distributed new energy power station data after format unification processing is used as first power station data through a distributed new energy data transmission model and based on a message bus service interface of a cloud;

the uniformly cleaned data of the distributed new energy power station are subjected to format consistency processing, and the method comprises the following steps:

based on the principles of non-redundancy, stability, consistency and easiness in use, carrying out format consistency processing on the uniformly cleaned distributed new energy power station data according to the forms of an equipment model, a topology model and a business rule data model;

the distributed new energy power station data comprises at least one of the following data: operating data of the distributed new energy power station; meteorological data; electricity quantity data; standing book data;

before the third power station data is assembled into a specific format and transmitted, the method further includes:

the new interface requesting the data of the distributed new energy power station is authenticated and authorized, and the new interface completing authentication and authorization is registered;

for the request transmitted by the new interface, judging whether the request is the actual request of the service terminal, and judging whether the signature of the service terminal is consistent with the corresponding signature stored in advance: if the two judgment results are both yes, the request passes the verification, otherwise, the request does not pass the verification and the request is rejected.

2. The method of claim 1, wherein the establishing of the metadata dictionary comprises:

setting character strings with frequency exceeding a frequency threshold or length exceeding a length threshold in the transmission process of distributed new energy data as metadata based on service requirements of distributed new energy information exchange, and setting different replacement characters for each metadata respectively;

a metadata dictionary is constructed based on each metadata and the corresponding replacement character.

3. The method of claim 2, wherein said replacing said first plant data based on a pre-established metadata dictionary to obtain second plant data comprises:

judging whether the first power station data contains metadata in the metadata dictionary or not:

when the first power station data exists, replacing the metadata in the first power station data by using the metadata dictionary to obtain second power station data;

otherwise, the first power station data is kept and used as second power station data.

4. The method of claim 1, wherein said processing said second station data in accordance with encryption requirements to obtain third station data comprises:

and when the second power station data needs to be encrypted, encrypting the second power station data by using a secondary encryption method to obtain third power station data, otherwise, taking the second power station data as the third power station data.

5. The method of claim 4 wherein said encrypting said second station data using quadratic encryption comprises:

performing primary encryption on the second power station data based on a TripleDes algorithm to obtain primary encrypted data;

and respectively replacing all letters and numbers in the primary encrypted data to obtain secondary encrypted data.

6. The method as claimed in claim 5, wherein said separately replacing all the letters and numbers in said once-encrypted data comprises:

carrying out capital letter and lower letter conversion on all letters in the primary encrypted data;

and replacing all the digits in the primary encrypted data based on a preset calculation formula.

7. The method of claim 6, wherein the substitution of the number is calculated as follows:

x=a-n；

wherein,xin order to be a number after the replacement,nin order to encrypt the numbers in the data at a time,ais a preset constant.

8. An encryption transmission apparatus, comprising:

the acquisition module is used for acquiring the data of the distributed new energy power station by using a data authentication mode through the distributed new energy data middle station to obtain first power station data;

the primary encryption module is used for replacing the first power station data through a distributed new energy data middle station based on a pre-established metadata dictionary to obtain second power station data;

the secondary encryption module is used for processing the second power station data according to encryption requirements to obtain third power station data;

the transmission module is used for assembling the third power station data into a specific format and transmitting the third power station data;

the method for acquiring the data of the distributed new energy power station by the distributed new energy data middle station in a data authentication mode to obtain the data of the first power station comprises the following steps:

providing an API login mode through the distributed new energy data center, and receiving login of the distributed new energy data center through the API;

returning a login success message after user authentication is completed through the distributed new energy data middle station, and simultaneously sending encryption parameters api _ key and security _ key;

authenticating the api _ key returned by the service terminal through the distributed new energy data center, decrypting the encrypted key data uploaded by the service terminal after the authentication is correct to obtain json parameters api _ key and security _ key, and calling a service interface to obtain distributed new energy power station data;

uniformly cleaning the distributed new energy power station data of each source end respectively;

carrying out format consistency processing on the uniformly cleaned distributed new energy power station data;

the distributed new energy power station data after format unification processing is used as first power station data through a distributed new energy data transmission model and based on a message bus service interface of a cloud;

the uniformly cleaned data of the distributed new energy power station are subjected to format consistency processing, and the method comprises the following steps:

based on the principles of non-redundancy, stability, consistency and easiness in use, carrying out format consistency processing on the uniformly cleaned distributed new energy power station data according to the forms of an equipment model, a topology model and a business rule data model;

the distributed new energy power station data comprises at least one of the following data: operating data of the distributed new energy power station; meteorological data; electricity quantity data; standing book data;

before the third power station data is assembled into a specific format and transmitted, the method further includes:

the new interface requesting the data of the distributed new energy power station is authenticated and authorized, and the new interface completing authentication and authorization is registered;

for the request transmitted by the new interface, judging whether the request is an actual request of the service terminal, and judging whether the signature of the service terminal is consistent with the corresponding signature stored in advance: if the two judgment results are yes, the request passes the verification, otherwise, the request fails the verification and the request is rejected.

9. The apparatus of claim 8, wherein the one-time encryption module is specifically configured to obtain the metadata dictionary in a manner comprising:

setting character strings with frequency exceeding a frequency threshold or length exceeding a length threshold in the transmission process of distributed new energy data as metadata based on service requirements of distributed new energy information exchange, and setting different replacement characters for each metadata respectively;

a metadata dictionary is constructed based on each metadata and the corresponding replacement character.

10. The apparatus of claim 9, wherein the primary encryption module is specifically configured to:

judging whether the first power station data contains metadata in the metadata dictionary or not:

when the first power station data exists, replacing the metadata in the first power station data by using the metadata dictionary to obtain second power station data;

otherwise, the first power station data is kept and used as second power station data.

11. The apparatus of claim 8, wherein the secondary encryption module is specifically configured to:

and when the second power station data needs to be encrypted, encrypting the second power station data by using a secondary encryption method to obtain third power station data, otherwise, taking the second power station data as the third power station data.

12. The apparatus of claim 8, wherein the acquisition module is specifically configured to: collecting distributed new energy power station data at a source end of each distributed new energy power station data;

uniformly cleaning the distributed new energy power station data of each source end respectively;

carrying out format consistency processing on the uniformly cleaned distributed new energy power station data;

and taking the distributed new energy power station data subjected to format unification processing as first power station data through a distributed new energy data transmission model and based on a message bus service interface at the cloud.

Images