CN111563266B - Power system data operation program encryption method and device, decryption method and device - Google Patents

Abstract

The invention discloses a method and a device for encrypting an operation program of a database of a power system, wherein the method comprises the following steps: acquiring original data of source codes of operation programs; encrypting the original data and returning the encrypted data to the source code; and compiling the source code containing the encrypted data. A method and a device for decrypting the database operation program of the power system are also disclosed. The method has the advantages that the readability is improved by using plaintext editing in the encoding stage, the original data in the source code is encrypted before encoding so as to improve the safety, the database is prevented from being illegally invaded and key data are prevented from being maliciously tampered, the safety of the database of the power system is improved, and the operation and stability of the power system are improved.

Description

Power system data operation program encryption method and device, decryption method and device

technical field

The invention relates to the technical field of power system security control, in particular to a power system data operation program encryption method and device, and a decryption method and device.

Background technique

Power system operation monitoring applications are usually designed and coded by C++ language, mainly including equipment modeling, graphic configuration, real-time monitoring, historical query and other functions. The equipment static data, graphic configuration data, and historical storage data involved in these functions are usually stored in commercial relational databases. There are a large number of database operation SQL statement texts in the application programs of each functional module of the system. These SQL statements realize the increase of monitoring data. The operation of deleting, modifying and checking is an important support for the realization of system functions.

The SQL statement text in the application program is still a directly readable text segment after the compiler generates the executable file or library file, including SQL keywords, database table names, field names and other information. Criminals can directly modify binary applications for illegal intrusion without source code or compilation. For example, changing "select" to "delete" through SQL keyword modification will cause database data damage and system exceptions; modifying database table names and database field names can bypass permission management, resulting in theft of sensitive data.

Power system monitoring equipment is the key equipment for the safe operation of the power system. Under the background of the rapid construction of the ubiquitous power Internet of Things, the application programs based on database operations have security loopholes of illegal tampering and intrusion. The above illegal intrusions will cause great harm. socioeconomic loss.

Contents of the invention

The purpose of the embodiment of the present invention is to provide a power system data operation program encryption method and device, decryption method and device, by using plain text editing in the encoding stage to improve readability, and encrypt the original data in the source code before compiling Processing to improve security, prevent the database from being illegally invaded and key data from being maliciously tampered with, improve the security of the power system database, and improve the operation and stability of the power system.

In order to solve the above technical problems, the first aspect of the embodiments of the present invention provides a power system data operation program encryption method, including:

access to raw data of operating program source code;

Encrypt the original data, and return the encrypted data to the source code;

Compile the source code containing the encrypted data.

Further, the original data includes: SQL statement, database table name and/or database field name.

Further, the encrypting the original data and returning the encrypted data to the source code includes:

Reinforce the SQL statement, the database table name and/or the database field name in the source code before compiling;

Scanning the RunningDeCode function in the source code, and extracting the RunningDeCode function parameters;

Encrypting the parameters of the RunningDeCode function, and returning the encrypted parameters of the RunningDeCode function to the function calling position in the source code.

Further, the scanning of the RunningDeCode function in the source code includes:

Scanning the RunningDeCode function in the source code based on a regular expression.

Correspondingly, the second aspect of the embodiments of the present invention provides a power system database operation program encryption device, including:

The first obtaining module is used to obtain the original data of the operating program source code;

An encryption module, configured to encrypt the original data and return the encrypted data to the source code;

A compiling module, configured to compile the source code containing the encrypted data.

Further, the original data includes: SQL statement, database table name and/or database field name.

Further, the encryption module includes:

A processing unit, configured to reinforce the SQL statement, the database table name and/or the database field name in the source code before compiling;

a scanning extraction unit, configured to scan the RunningDeCode function in the source code, and extract the parameters of the RunningDeCode function;

The encryption unit is configured to encrypt the parameters of the RunningDeCode function, and return the encrypted parameters of the RunningDeCode function to the function calling position in the source code.

Further, the scanning extraction unit scans the RunningDeCode function in the source code based on a regular expression.

A third aspect of the embodiments of the present invention provides a method for decrypting an operating program of a power system database, comprising the following steps:

Obtain the encrypted data in the compiled and processed source code of the operating program;

Decrypting the encrypted data to obtain decrypted data;

return the decrypted data to the source code, and run the operation program.

Further, the decrypted data includes: SQL statement, database table name and/or database field name.

Further, said decrypting said encrypted data to obtain decrypted data includes:

Decrypt the encrypted parameters of the RunningDeCode function to obtain the decrypted data;

The decrypted data is dynamically spliced to obtain the SQL statement, the database table name and/or the database field name, and the SQL statement, the database table name and/or the database field name are returned to the in the source code.

The fourth aspect of the embodiments of the present invention provides a power system database operating program decryption device, including:

The second obtaining module is used to obtain the encrypted data in the source code after the operating program is compiled and processed;

A decryption module, configured to decrypt the encrypted data to obtain decrypted data;

A control module, used to return the decrypted data to the source code, and run the operation program.

Further, the decrypted data includes: SQL statement, database table name and/or database field name.

Further, the decryption module includes:

The decryption unit is used to decrypt the encrypted RunningDeCode function parameters to obtain decrypted data;

A data processing unit, configured to dynamically splice the decrypted data to obtain the SQL statement, the database table name and/or the database field name, and combine the SQL statement, the database table name and/or the The database field names are returned in the source code.

The above technical solutions of the embodiments of the present invention have the following beneficial technical effects:

By using plaintext editing in the coding stage to improve readability, and encrypting the original data in the source code before compiling to improve security, prevent the database from being illegally invaded and key data from being maliciously tampered with, and improve the security of the power system database It improves the operation and stability of the power system.

Description of drawings

Fig. 1 is a flow chart of a power system database operating program encryption method provided by an embodiment of the present invention;

Fig. 2 is a block diagram of a power system database operating program encryption device provided by an embodiment of the present invention;

Fig. 3 is a block diagram of an encryption module provided by an embodiment of the present invention;

Fig. 4 is a flow chart of a method for decrypting an operating program of a power system database provided by an embodiment of the present invention;

Fig. 5 is a block diagram of a power system database operation program decryption device provided by an embodiment of the present invention;

Fig. 6 is a block diagram of a decryption module provided by an embodiment of the present invention.

Reference signs:

1. First acquisition module, 2. Encryption module, 21. Processing unit, 22. Scanning extraction unit, 23. Encryption unit, 3. Compilation module, 4. Second acquisition module, 5. Decryption module, 51. Decryption unit, 52. Data processing unit, 6. Control module.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in combination with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are exemplary only, and are not intended to limit the scope of the present invention. Also, in the following description, descriptions of well-known structures and techniques are omitted to avoid unnecessarily obscuring the concept of the present invention.

Fig. 1 is a flow chart of a method for encrypting an operation program of a power system database provided by an embodiment of the present invention.

Please refer to Fig. 1, the first aspect of the embodiment of the present invention provides a kind of power system database operation procedure encryption method, comprises the following steps:

S110. Acquire raw data of the operating program source code.

S120. Encrypt the original data, and return the encrypted data to the source code.

S130, compiling the source code containing the encrypted data.

The above technical solution improves readability by using plain text editing in the coding stage, encrypts the original data in the source code before compiling to improve security, prevents the database from being illegally invaded and key data from being maliciously tampered with, and improves the efficiency of the power system. The security of the database improves the operation and stability of the power system.

Optionally, the original data includes: SQL statement, database table name and/or database field name.

Specifically, in step S120, the original data is encrypted and the encrypted data is returned to the source code, including:

S121. Reinforce the SQL statement, database table name and/or database field name in the source code before compiling.

Specifically, the SQL statements, database table names, and database field names in the source code are used as parameters of the RunningDeCode function for pre-compilation reinforcement.

For example, the original text of the SQL statement in the source code

sql="SELECT USER_NAME,USER_PWD,REG_DATE FROM USER WHERE USER_ID=\'2\'" is changed to:

sql = RunningDeCode("SELECT USER_NAME, USER_PWD, REG_DATE FROM USER WHERE USER_ID=\'2\'").

S122. Scan the RunningDeCode function in the source code, and extract the parameters of the RunningDeCode function.

S123. Encrypt the parameters of the RunningDeCode function, and return the encrypted parameters of the RunningDeCode function to the function calling position in the source code.

Specifically, after scanning the RunningDeCode function in the source code and extracting the parameters of the RunningDeCode function, the encrypted Encrypt (string) function is used to encrypt the extracted parameters and backfill to the function call position of the source code file.

For example, the encrypted source code of the preceding SQL statement is:

sql=RuningDeCode("6774616C6B40676D6774616C6B40676D61696C2E636F6D0A137514765985002236391382606438443Z3RHBGTAZ21HAWWUY29TCG6C6B40676D616 966B40676D61696C6C6B40676D61696C2E6391382606438443478282P”);

Optionally, scan the RunningDeCode function in the source code, including:

Scan the RunningDeCode function in the source code based on regular expressions.

Fig. 2 is a block diagram of an encryption device for an operation program of a power system database provided by an embodiment of the present invention.

Correspondingly, please refer to FIG. 2 , the second aspect of the embodiment of the present invention provides a power system database operation program encryption device, including: a first acquisition module 1 , an encryption module 2 and a compiling module 3 . Among them, the acquisition module 1 is used to obtain the original data of the operating program source code; the encryption module 2 is used to encrypt the original data and return the encrypted data to the source code; the compilation module 3 is used to compile the source code containing the encrypted data deal with.

The above-mentioned encryption device improves readability by using plaintext editing in the encoding stage, encrypts the original data in the source code before compiling to improve security, prevents the database from being illegally invaded and key data from being maliciously tampered with, and improves the efficiency of the power system. The security of the database improves the operation and stability of the power system.

Optionally, the original data includes: SQL statement, database table name and/or database field name.

Fig. 3 is a block diagram of an encryption module provided by an embodiment of the present invention.

Specifically, referring to FIG. 3 , the encryption module 2 includes: a processing unit 21 , a scanning extraction unit 22 and an encryption unit 23 . Wherein, the processing unit 21 is used to reinforce the SQL statement, database table name and/or database field name in the source code before compiling; the scanning extraction unit 22 is used to scan the RunningDeCode function in the source code, and extract the RunningDeCode function parameter; The encryption unit 23 is used to encrypt the parameters of the RunningDeCode function, and return the encrypted parameters of the RunningDeCode function to the function calling position in the source code.

Optionally, the scanning and extracting unit scans the RunningDeCode function in the source code based on a regular expression.

Fig. 4 is a flowchart of a method for decrypting an operation program of a power system database provided by an embodiment of the present invention.

Please refer to FIG. 4 , the third aspect of the embodiment of the present invention provides a method for decrypting a power system database operating program, including the following steps:

S210. Obtain encrypted data in source code after the operating program is compiled and processed.

S220. Decrypt the encrypted data to obtain decrypted data.

S230, return the decrypted data to the source code, and run the operation program.

Optionally, the decrypted data includes: SQL statement, database table name and/or database field name.

Specifically, in step S220, the encrypted data in the source code is decrypted to obtain the original data, which further includes:

S221. Decrypt the encrypted parameter of the RunningDeCode function to obtain decrypted data.

Specifically, use the Decrypt function to decrypt the encrypted parameters of the RunningDeCode function to obtain decrypted data.

S222. Dynamically splice the decrypted data to obtain the SQL statement, database table name and/or database field name, and return the SQL statement, database table name and/or database field name to the source code.

After decryption, the value of the SQL variable in the aforementioned encrypted source code is restored to:

sql="SELECT USER_NAME,USER_PWD,REG_DATE FROM USER WHERE USER_ID=\'2\'".

Fig. 5 is a block diagram of an apparatus for decrypting an operation program of a power system database provided by an embodiment of the present invention.

Referring to FIG. 5 , the fourth aspect of the embodiment of the present invention provides a power system database operating program decryption device, including: a second acquisition module 4 , a decryption module 5 and a control module 6 . Wherein, the second obtaining module 4 is used to obtain the encrypted data in the source code after the operating program is compiled and processed; the decryption module 5 is used to decrypt the encrypted data to obtain decrypted data; the control module 6 is used to return the decrypted data to the source code , and run the operation program.

Further, the decrypted data includes: SQL statement, database table name and/or database field name.

Fig. 6 is a block diagram of a decryption module provided by an embodiment of the present invention.

Specifically, referring to FIG. 6 , the decryption module 5 includes: a decryption unit 51 and a data processing unit 52 . The decryption unit 51 is used to decrypt the encrypted RunningDeCode function parameters to obtain decrypted data; the data processing unit 52 is used to dynamically splice the decrypted data to obtain SQL statements, database table names and/or database field names, and SQL statements, Database table names and/or database field names are returned in the source code.

The embodiment of the present invention aims to protect a power system database operating program encryption method and device, decryption method and device, wherein the encryption method includes the following steps: obtaining the original data of the operating program source code; encrypting the original data, and encrypting The data is returned to the source code; the source code containing the encrypted data is compiled. The above technical scheme has the following effects:

By using plaintext editing in the coding stage to improve readability, and encrypting the original data in the source code before compiling to improve security, prevent the database from being illegally invaded and key data from being maliciously tampered with, and improve the security of the power system database It improves the operation and stability of the power system.

It should be understood that the above specific embodiments of the present invention are only used to illustrate or explain the principles of the present invention, and not to limit the present invention. Therefore, any modification, equivalent replacement, improvement, etc. made without departing from the spirit and scope of the present invention shall fall within the protection scope of the present invention. Furthermore, it is intended that the appended claims of the present invention embrace all changes and modifications that come within the scope and metespan of the appended claims, or equivalents of such scope and metesight.

Claims (14)

1. An encryption method for an operation program of a database of an electric power system is characterized by comprising the following steps:

acquiring original data of source codes of operation programs;

encrypting the original data and returning the encrypted data to the source code;

and compiling the source code containing the encrypted data.

2. The method for encrypting a database operating program for a power system according to claim 1,

the raw data includes: SQL statements, database table names, and/or database field names.

3. The method of encrypting a database operating program for a power system according to claim 2, wherein said encrypting the original data and returning the encrypted data to the source code comprises:

pre-compiling reinforcement is carried out on the SQL statement, the database table name and/or the database field name in the source code;

scanning a Runing Decode function in the source code, and extracting parameters of the Runing Decode function;

and carrying out encryption processing on the RunngDeCode function parameters, and returning the encrypted RunngDeCode function parameters to a function calling position in the source code.

4. A method of encrypting a database operating program of a power system according to claim 3, wherein said scanning said corning decode function in said source code comprises:

the runing decode function in the source code is scanned based on a regular expression.

5. An electric power system database operating program encryption apparatus, comprising:

the first acquisition module is used for acquiring the original data of the source code of the operation program;

the encryption module is used for carrying out encryption processing on the original data and returning the encrypted data to the source code;

and the compiling module is used for compiling the source code containing the encrypted data.

6. The power system database operating program encryption device according to claim 5, characterized in that,

the raw data includes: SQL statements, database table names, and/or database field names.

7. The power system database operating program encryption device according to claim 6, characterized in that the encryption module includes:

the processing unit is used for reinforcing the SQL statement, the database table name and/or the database field name in the source code before compiling;

the scanning extraction unit is used for scanning the Runing Decode function in the source code and extracting parameters of the Runing Decode function;

and the encryption unit is used for carrying out encryption processing on the Runing Decode function parameters and returning the encrypted Runing Decode function parameters to the function call position in the source code.

8. The power system database operating program encryption device of claim 7, characterized in that,

the scan extraction unit scans the runing decode function in the source code based on a regular expression.

9. A method for decrypting an operating program of a database of an electric power system, comprising the steps of:

acquiring encrypted data in source codes compiled and processed by an operation program;

decrypting the encrypted data to obtain decrypted data;

and returning the decrypted data to the source code and running the operation program.

10. The method of claim 9, wherein the power system database operating program decryption method,

the decrypted data includes: SQL statements, database table names, and/or database field names.

11. The method of claim 10, wherein decrypting the encrypted data to obtain decrypted data comprises:

decrypting the encrypted RunnigDeCode function parameters to obtain decrypted data;

and dynamically splicing the decrypted data to obtain the SQL statement, the database table name and/or the database field name, and returning the SQL statement, the database table name and/or the database field name to the source code.

12. A power system database operating program decryption apparatus, comprising:

the second acquisition module is used for acquiring the encrypted data in the source code after the compiling processing of the operation program;

the decryption module is used for decrypting the encrypted data to obtain decrypted data;

and the control module is used for returning the decrypted data to the source code and running the operation program.

13. The power system database operating program decryption device according to claim 12, wherein,

the decrypted data includes: SQL statements, database table names, and/or database field names.

14. The power system database operating program decryption apparatus according to claim 13, wherein the decryption module comprises:

the decryption unit is used for decrypting the encrypted RunnigDeCode function parameters to obtain decrypted data;

and the data processing unit is used for dynamically splicing the decrypted data to obtain the SQL sentence, the database table name and/or the database field name, and returning the SQL sentence, the database table name and/or the database field name to the source code.

Images