CN115550035A - Intelligent power terminal safety authentication system and method - Google Patents

Abstract

The invention discloses an intelligent power terminal security authentication system and a method, wherein the system comprises an intelligent power terminal and a service center, the service center is in communication connection with an ip registration module, a security defense module, a real-time monitoring module, an identification and analysis module and an image acquisition module, the security defense module comprises a security detection point, a security restoration point and a defense lock, the security detection point is used for detecting the security degree of the intelligent power terminal security authentication system, the security restoration point is used for restoring system bugs, and the defense lock is used for automatically locking the system when the system is subjected to illegal invasion. According to the scheme, the reliable authentication of software is matched with the security defense module, so that the authentication is flexible, and the security of the terminal identity information is ensured; the scheme adopts the hierarchical authorization service, thereby not only ensuring the high efficiency of the system operation, but also improving the safety of the system.

Description

Intelligent power terminal safety authentication system and method

Technical Field

The invention belongs to the technical field of network security, and particularly relates to a system and a method for security authentication of an intelligent power terminal.

Background

With the construction of the national strong smart grid, the internet technology has been widely applied to various links of power generation, transmission, transformation, distribution, use, dispatching and the like of the smart grid. The Internet technology is introduced into the smart grid, so that infrastructure resources and communication facility resources of the power system are effectively integrated, an advanced information communication system is promoted to serve the power system to operate, the power grid informatization level is improved, the utilization efficiency of the existing power system infrastructure is improved, important technical support is effectively provided for links of generation, transmission, transformation, distribution, use and the like in the power grid, and the Internet technology brings serious security and confidentiality problems while providing convenience for the construction of a smart grid business system. In network communication, various intelligent power terminals are vulnerable to monitoring, stealing, disguising and the like when transmitting data through a channel. Especially in wireless network connection, an illegal user can impersonate a legal internal terminal anywhere where a wireless mobile signal is received, and initiate an attack on a private network, so that the private network faces security threats such as Trojan horse virus, interference, denial of service, unauthorized access and the like, and therefore, research on security authentication of the power terminal is urgently needed.

For example, a chinese patent, publication No. CN105553666B, discloses a system and method for security authentication of an intelligent power terminal, where the system includes a security detection server, a power server, an online monitoring server, and an address registration server. Firstly, an address registration server detects information of a terminal, and if the terminal is legal, a registration serial number is generated and sent to a safety detection server; the safety detection server judges whether the terminal key object information is matched with the power service authority distribution request information of the terminal or not and generates unique terminal identity authentication information; and the terminal authenticates and registers on the power server to obtain corresponding service.

The patent does not need to use hardware authentication, realizes reliable authentication through software, simultaneously prevents terminal identity authentication information from being stolen, and provides a safety detection method for the power terminal, but the patent cannot protect the system safety when the system is subjected to illegal invasion, so that an intelligent power terminal safety authentication system and method are provided.

Disclosure of Invention

The invention aims to provide an intelligent power terminal security authentication system and method, and aims to solve the problem that the system cannot be protected when the system is subjected to illegal intrusion in the prior art.

In order to achieve the purpose, the technical scheme of the invention is as follows: the utility model provides an intelligence power terminal safety certification system, including intelligent power terminal and service center, service center communication connection has ip registration module, the defense module, the real-time supervision module, identification and analysis module and image acquisition module, the defense module includes the safe check point, safe restoration point and defense lock, the safe check point is used for detecting intelligent power terminal safety certification system's degree of safety, safe restoration point is used for safe restoration point and is used for system's leak to repair, when the defense lock is used for the system to suffer illegal invasion, automatic locking system.

Further, the identification analysis module is used for information authentication and matching.

Further, the service center is used for carrying out grade division on the authentication information, carrying out authority distribution on the authentication matched information and providing corresponding grade service.

Furthermore, the real-time monitoring module is used for monitoring the use record of the intelligent power terminal security authentication system in real time and monitoring the security in real time, and when the system is subjected to illegal invasion, signals are transmitted to the security defense module.

Further, the image acquisition module is used for inputting the face and fingerprint information of the staff.

Furthermore, the ip registration module is used for inputting an ip address and registration information of the intelligent power terminal.

Further, an authentication method of the intelligent power terminal safety authentication system comprises the following steps:

step 1, initiating an authentication request, wherein an intelligent power terminal initiates the authentication request to a service center and sends an ip address and registration information to an ip registration module;

step 2, starting real-time monitoring, and after receiving the authentication request, starting a real-time monitoring module to perform real-time monitoring on the authentication process by the service center;

step 3, information comparison, namely sending the authentication information received by the ip registration module to an identification and analysis module, and carrying out uniqueness detection on the authentication information by the identification and analysis module:

if the authentication information is matched with the intelligent power terminal and is not registered, generating a serial number, registering and archiving in a service center, and entering step 4;

if the authentication information is not matched with the intelligent power terminal or the authentication information is registered, sending a rejection signal to the service center, and entering the step 5;

if the system suffers from illegal invasion, the real-time monitoring module sends an alarm to the service center, and the service center starts the security defense module and enters step 7;

step 4, the service center performs security level division and authority distribution on the matched authentication information, provides service according to corresponding levels, and enters step 6;

step 5, after receiving the unmatched authentication information, the service center sends an authentication request for rejecting the intelligent power terminal and stops monitoring in real time, and authentication is finished;

step 6, the intelligent power terminal operates according to the service of the corresponding grade provided by the service center, if the operation permission of higher grade is needed, the information of the responsible person is collected through the image collection module to carry out upgrading request:

if the acquired information is consistent with the information called by the service center, the upgrading is successful, and the intelligent power terminal is allowed to perform higher-level service operation;

if the acquired information is inconsistent with the information called by the service center, the upgrading fails, the intelligent power terminal is refused to perform higher-level service operation, an alarm is sent to the security defense module, and the step 7 is entered;

and 7, the security defense module receives the alarm transmitted by the service center or the real-time monitoring module, analyzes the security degree of the alarm, and repairs or locks the system according to the security degree.

After the scheme is adopted, the following beneficial effects are realized:

1. according to the scheme, the reliable authentication of software is matched with the security defense module, so that the authentication is flexible, and the security of the terminal identity information is ensured;

2. in the scheme, the service center performs uniqueness detection on the authentication information, so that one-to-one service of the terminal and the serial number is ensured, and the stability of system operation is further ensured;

3. the scheme adopts the hierarchical authorization service, thereby not only ensuring the high efficiency of the system operation, but also improving the safety of the system.

Drawings

Fig. 1 is a block diagram of an embodiment of the present invention.

FIG. 2 is a flow chart of an embodiment of the present invention.

Detailed Description

The following is further detailed by way of specific embodiments:

the embodiment is basically as shown in the attached figures 1-2:

the utility model provides an intelligence power terminal safety certification system, including intelligent power terminal and service center, service center communication connection has ip registration module, the defense module, the real-time supervision module, identification and analysis module and image acquisition module, the defense module includes the safe check point, safe restoration point and defense lock, the safe check point is used for detecting intelligent power terminal safety certification system's degree of safety, safe restoration point is used for safe restoration point and is used for system's leak to repair, when the defense lock is used for the system to suffer illegal invasion, automatic locking system.

The identification analysis module is used for information authentication and matching; the service center is used for carrying out grade division on the authentication information, carrying out authority distribution on the authentication matched information and providing corresponding grade service; the real-time monitoring module is used for monitoring the use record and the safety of the intelligent power terminal safety authentication system in real time, and transmitting a signal to the safety defense module when the system is subjected to illegal invasion; the image acquisition module is used for inputting face and fingerprint information of workers; the ip registration module is used for inputting an ip address and registration information of the intelligent power terminal.

An authentication method of an intelligent power terminal safety authentication system comprises the following steps:

step 1, initiating an authentication request, wherein an intelligent power terminal initiates the authentication request to a service center and sends an ip address and registration information to an ip registration module;

step 2, starting real-time monitoring, and after the service center receives the authentication request, starting a real-time monitoring module to perform real-time monitoring on the authentication process;

step 3, information comparison, namely sending the authentication information received by the ip registration module to an identification and analysis module, and carrying out uniqueness detection on the authentication information by the identification and analysis module:

if the authentication information is matched with the intelligent power terminal and is not registered, generating a serial number, registering and archiving in a service center, and entering step 4;

if the authentication information is not matched with the intelligent power terminal or the authentication information is registered, sending a rejection signal to the service center, and entering the step 5;

if the system suffers from illegal invasion, the real-time monitoring module sends an alarm to the service center, and the service center starts the security defense module and enters step 7;

step 4, the service center performs security level division and authority distribution on the matched authentication information, provides service according to corresponding levels, and enters step 6;

step 5, after receiving the unmatched authentication information, the service center sends an authentication request for rejecting the intelligent power terminal and stops monitoring in real time, and authentication is finished;

step 6, the intelligent power terminal operates according to the corresponding grade of service provided by the service center, if higher grade operation permission is needed, the information of a responsible person is collected through the image collection module to carry out upgrading request:

if the acquired information is consistent with the information called by the service center, the upgrading is successful, and the intelligent power terminal is allowed to perform higher-level service operation;

if the acquired information is inconsistent with the information called by the service center, the upgrading fails, the intelligent power terminal is refused to perform higher-level service operation, an alarm is sent to the security defense module, and the step 7 is entered;

and 7, the security defense module receives the alarm transmitted by the service center or the real-time monitoring module to analyze the security degree of the alarm, and repairs or locks the system according to the security degree.

The specific implementation process is as follows:

step 1, initiating an authentication request, wherein an intelligent power terminal initiates the authentication request to a service center and sends an ip address and registration information to an ip registration module;

step 2, starting real-time monitoring, and after the service center receives the authentication request, starting a real-time monitoring module to perform real-time monitoring on the authentication process;

step 3, information comparison, namely sending the authentication information received by the ip registration module to an identification and analysis module, and carrying out uniqueness detection on the authentication information by the identification and analysis module:

if the authentication information is matched with the intelligent power terminal and is not registered, generating a serial number, registering and archiving in a service center, and entering step 4;

if the authentication information is not matched with the intelligent power terminal or the authentication information is registered, sending a rejection signal to the service center, and entering the step 5;

if the system suffers from illegal invasion, the real-time monitoring module sends an alarm to the service center, and the service center starts the security defense module and enters step 7;

step 4, the service center performs security level division and authority distribution on the matched authentication information, provides service according to corresponding levels, and enters step 6;

step 5, after receiving the unmatched authentication information, the service center sends an authentication request for rejecting the intelligent power terminal and stops monitoring in real time, and authentication is finished;

step 6, the intelligent power terminal operates according to the service of the corresponding grade provided by the service center, if the operation permission of higher grade is needed, the information of the responsible person is collected through the image collection module to carry out upgrading request:

if the acquired information is consistent with the information called by the service center, the upgrading is successful, and the intelligent power terminal is allowed to perform higher-level service operation;

if the acquired information is inconsistent with the information called by the service center, upgrading fails, the intelligent power terminal is refused to perform higher-level service operation, an alarm is sent to the security defense module, and the step 7 is carried out;

step 7, the security defense module receives the alarm transmitted by the service center or the real-time monitoring module to analyze the security degree of the alarm, and if the security degree is level 1, the security repair point is started to repair the alarm; and if the safety degree is 2 level, unlocking the defense lock to lock the system.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus.

The foregoing are embodiments of the present invention and are not intended to limit the scope of the invention to the particular forms set forth in the specification, which are set forth in the claims below, but rather are to be construed as the full breadth and scope of the claims, as defined by the appended claims, as defined in the appended claims, in order to provide a thorough understanding of the present invention. It should be noted that, for those skilled in the art, without departing from the structure of the present invention, several changes and modifications can be made, which should also be regarded as the protection scope of the present invention, and these will not affect the effect of the implementation of the present invention and the practicability of the patent. The scope of the claims of the present application shall be defined by the claims, and the description of the embodiments and the like in the specification shall be used to explain the contents of the claims.

Claims (7)

1. The utility model provides an intelligence power terminal safety certification system which characterized in that: the intelligent power terminal security protection system comprises an intelligent power terminal and a service center, wherein the service center is in communication connection with an ip registration module, a security defense module, a real-time monitoring module, an identification and analysis module and an image acquisition module, the security defense module comprises a security detection point, a security restoration point and a defense lock, the security detection point is used for detecting the security degree of the intelligent power terminal security authentication system, the security restoration point is used for the security restoration point to restore system bugs, and the defense lock is used for automatically locking the system when the system is invaded illegally.

2. The intelligent power terminal security authentication system of claim 1, wherein: the identification analysis module is used for information authentication and matching.

3. The intelligent power terminal security authentication system of claim 1, wherein: the service center is used for carrying out grade division on the authentication information, carrying out authority distribution on the information matched with the authentication and providing corresponding grade service.

4. The intelligent power terminal security authentication system of claim 1, wherein: the real-time monitoring module is used for monitoring the use record and the safety of the intelligent power terminal safety authentication system in real time, and transmitting a signal to the safety defense module when the system is subjected to illegal invasion.

5. The intelligent power terminal security authentication system of claim 1, wherein: the image acquisition module is used for inputting face and fingerprint information of workers.

6. The intelligent power terminal security authentication system of claim 1, wherein: the ip registration module is used for inputting an ip address and registration information of the intelligent power terminal.

7. An authentication method of an intelligent power terminal security authentication system is characterized in that: the authentication method of the intelligent power terminal security authentication system according to claims 1-6, comprising the steps of:

step 1, initiating an authentication request, wherein an intelligent power terminal initiates the authentication request to a service center and sends an ip address and registration information to an ip registration module;

step 2, starting real-time monitoring, and after the service center receives the authentication request, starting a real-time monitoring module to perform real-time monitoring on the authentication process;

step 3, information comparison, namely sending the authentication information received by the ip registration module to an identification and analysis module, and carrying out uniqueness detection on the authentication information by the identification and analysis module:

if the authentication information is matched with the intelligent power terminal and is not registered, generating a serial number, registering and archiving in a service center, and entering step 4;

if the authentication information is not matched with the intelligent power terminal or the authentication information is registered, sending a rejection signal to the service center, and entering the step 5;

if the system suffers from illegal invasion, the real-time monitoring module sends an alarm to the service center, and the service center starts the security defense module and enters step 7;

step 4, the service center performs security level division and authority distribution on the matched authentication information, provides service according to corresponding levels, and enters step 6;

step 5, after receiving the unmatched authentication information, the service center sends an authentication request for rejecting the intelligent power terminal and stops monitoring in real time, and authentication is finished;

step 6, the intelligent power terminal operates according to the service of the corresponding grade provided by the service center, if the operation permission of higher grade is needed, the information of the responsible person is collected through the image collection module to carry out upgrading request:

if the acquired information is consistent with the information called by the service center, the upgrading is successful, and the intelligent power terminal is allowed to perform higher-level service operation;

if the acquired information is inconsistent with the information called by the service center, the upgrading fails, the intelligent power terminal is refused to perform higher-level service operation, an alarm is sent to the security defense module, and the step 7 is entered;

and 7, the security defense module receives the alarm transmitted by the service center or the real-time monitoring module, analyzes the security degree of the alarm, and repairs or locks the system according to the security degree.

Images