Multi-terminal communication system based on Internet of Things

Abstract

The invention discloses a multi-terminal communication system based on Internet of Things, which relates to the technical field of communication, and comprises a terminal access module, a data management module, a network management module, a communication protocol stack and a user management module, the data management module, the network management module and the user management module are connected with the communication protocol stack through software interfaces; the network management module is preferentially connected with a wireless network in a close range through a locally deployed base station, the network management module issues a data instruction to the first terminal, the second terminal and the third terminal through the wireless network, and the user management module authorizes the terminal access module to passively access terminal equipment information through an identity authentication mechanism. A special data source is limited through the data management module, data layering isolation circulation is achieved, the problem that data are prone to pollution and interference is solved, and product quality can be more accurately controlled.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a multi-terminal communication system based on the Internet of Things. Background Art

[0002] With the improvement of people's living standards and the continuous advancement of science and technology, IoT application scenarios such as smart home, smart transportation, and smart medical care are constantly emerging. A large number of devices need to be connected to the network to achieve interconnection. All industries are actively undergoing digital transformation to improve production efficiency, reduce costs, and enhance service quality and innovation capabilities. As a key technology for achieving interconnection between devices, IoT can provide enterprises and organizations with more comprehensive and accurate data, support intelligent decision-making and automated processes, and thus promote the upgrading of traditional industries to digitalization and intelligence.

[0003] With the access of a large number of terminal devices in the Internet of Things, the demand for data transmission has increased dramatically, which can easily lead to network congestion. The communication protocols of IoT devices are diverse, and multi-terminal communication systems need to be compatible with these protocols to ensure normal communication and data interaction between devices with different protocols. IoT devices are vulnerable to attacks. Once invaded, user privacy and system security are threatened. With the access of a large number of terminal devices, the management of device registration, authentication, configuration, monitoring, etc. is complicated. It is difficult to locate and solve problems when failures occur, and it consumes a lot of manpower and time costs.

[0004] Therefore, it is very necessary for the present application to propose a multi-terminal communication system based on the Internet of Things to solve the problems in the background.

[0005] 1. Patent document CN106422324B discloses a multi-terminal real-time communication method, device and system. The above patent solves the problem of severe server load caused by the game server maintaining multiple long connections at the same time, but the above patent cannot realize the layered isolation and flow of data.

[0006] 2. Patent document CN105763401B discloses a multimedia communication system based on routers and terminals. The above patent avoids the establishment of personal identification and has more flexible communication channels, improves communication efficiency, and communicates directly through router identification without affecting personal privacy. It can be widely used in corporate office environments, but the above patent cannot automatically expand the data collection rate and node security controllability.

[0007] 3. Patent document CN104967754B discloses a method and system for controlling communication connections of multiple intelligent terminals. The above patent realizes communication connections such as video conferencing, improves the user experience, and is particularly suitable for business travelers to conduct business through intelligent terminals anytime and anywhere, thereby improving work efficiency and quality of life. However, the above patent cannot realize intelligent traffic scheduling.

[0008] 4. Patent document CN106302056B discloses a home Internet of Things communication connection system and a communication connection method. The above patent realizes flexible and changeable communication methods and timely communication data interaction, but the above patent cannot realize automatic positioning of vulnerable nodes.

[0009] In summary, the above patents cannot achieve data layered isolation and circulation, intelligent traffic scheduling, positioning of vulnerable nodes, automatic expansion of data collection rate and node security controllability, resulting in data being easily polluted and interfered with, multi-terminal data access being messy and disorderly and vulnerable to attacks and unable to be intercepted and protected, and network congestion when multiple terminal devices are used at the same time, and cannot adapt to the ever-changing security threat environment of the IoT system; To this end, this application proposes a multi-terminal communication system based on the Internet of Things that can realize data layered isolation flow, intelligent traffic scheduling, positioning of vulnerable nodes, automatic expansion of data collection rate and node security controllability. Summary of the invention

[0010] The purpose of the present invention is to provide a multi-terminal communication system based on the Internet of Things to solve the technical problems proposed in the above-mentioned background technology that it is impossible to realize data layered isolation flow, intelligent traffic scheduling, positioning of vulnerable nodes, automatic expansion of data collection rate and node security controllability, resulting in data being easily polluted and interfered with, multi-terminal data access is messy and disorderly and vulnerable to attack and cannot be intercepted and protected, multiple terminal devices are used simultaneously, network congestion occurs, and it is unable to adapt to the ever-changing security threat environment of the Internet of Things system.

[0011] To achieve the above object, the present invention provides the following technical solution: a multi-terminal communication system based on the Internet of Things, comprising a terminal access module, a data management module, a network management module, a communication protocol stack and a user management module, wherein the terminal access module interacts with the communication protocol stack through an internal register, and the data management module, the network management module and the user management module are connected to the communication protocol stack through a software interface; The network management module preferentially connects to the wireless network in a short distance through a locally deployed base station, the network management module sends data instructions to the first terminal, the second terminal and the third terminal through the wireless network, and the user management module authorizes the terminal access module to passively access the terminal device information through an identity authentication mechanism; The data management module includes a collection unit, a storage unit and a processing unit. The collection unit establishes a sharing mechanism with the database through a built-in configuration file / wireless network, the storage unit is connected to the collection unit / database through a wireless network, and the processing unit establishes a connection with the database according to a database driver; The acquisition unit actively sends a query instruction to the terminal access module through the Ethernet interface, and the query instruction includes a device address and a port number. The data source of the terminal access module is connected to the acquisition unit. The acquisition unit collects the data source repeatedly to the storage unit. The processing unit extracts the data source in the storage unit and marks it with a metadata tag. The data source marked by the processing unit is retained inside the processing unit and is defined as a special data source. The special data source serves as a basic data source for system learning and upgrading.

[0012] Preferably, the terminal access module accesses data including the first terminal, the second terminal and the third terminal through a hardware interface, the data generated by the first terminal, the second terminal and the third terminal are called data sources, the terminal access module transmits the data source through a positive sequence processing method inside the communication protocol stack, and the data management module receives the data source after packaging and parsing by the communication protocol stack through a wireless network; The data collected by the collection unit of the data management module in which the first terminal participates is limited to the first data, the second data, and the third data, and the data collected by the second terminal in which the second terminal participates is limited to the first data, the second data, and the third data, and the first data, the second data, and the third data of the second terminal are relatively independent without being reviewed by the user management module.

[0013] Preferably, the first data of the first terminal interacts with the first data, the second data and the third data of the second terminal through a communication protocol stack, the number and distribution positions of the first terminal, the second terminal and the third terminal correspond to the access to the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit respectively, the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit are physical signals, the physical signals are converted into corresponding electrical signals through a converter, and the electrical signals are accessed to the network management module; The terminal device is connected to the data management module through the built-in cross-end interaction framework with the assistance of the wireless network. The cross-end interaction framework opens capabilities and interfaces to third-party applications through the message array protocol. The cross-end interaction framework internally integrates the simple application framework. The simple application framework integrates third-party service data by internally building configuration files. The configuration files add dependency declarations on third-party service SDKs. The simple application framework references the calling protocol through the virtual interface. Developers call third-party services through the calling protocol. The calling protocol is divided into synchronous calling and asynchronous calling. Asynchronous calling means that request one has not been executed. The developer calls request two. Reply one corresponding to request one and reply two corresponding to request two are carried out simultaneously. The third-party service pushes the callback service to the simple application through a message.

[0014] Preferably, the communication protocol stack transmits messages between the terminal access module and the server through a message queue telemetry transmission protocol, and when the calling protocol calls a third-party service involving user personal information, the calling protocol links the corresponding information storage unit to request user permissions through an identity authentication protocol; The communication protocol stack includes a functional structure and a hierarchical structure. The functional structure of the communication protocol stack is divided into device discovery and identification, collection during data transmission, status monitoring, remote control, and data encryption. The hierarchical structure of the communication protocol stack is divided into physical layer, data link layer, transport layer, and application layer. The processing order of the physical layer, data link layer, transport layer, and application layer is performed in sequence, and service interfaces are provided between adjacent layers. The physical layer is responsible for processing the access of the physical media of the first terminal, the second terminal, and the third terminal. The data source is encapsulated as a data frame through the data link layer. At the same time, the frame header contains the clock sequence of the receiving end, and the data frame flows into the terminal access module through the software interface.

[0015] Preferably, the network management module transmits the terminal data to the IoT cloud platform via a wireless network, the IoT cloud platform selects to upload or download the terminal data through a user request of the user management module, the first data of the first terminal is transmitted to the second terminal, and the second terminal selects and adapts the data to become the first data of the second terminal through format recognition and conversion by the data management module; The exception handling mechanism is embedded in the network management module. The exception handling mechanism produces results according to the defined checkHeartbeat function. The checkHeartbeat function receives the complete parameter deviceId, uses steady_clock to track time, and obtains the last sending time of the terminal from the lastHeartbeatMap unordered mapping. std chrono secondstimeoutDuration(40) defines the timeout period. If the time is judged to be timed out / not timed out, a warning message is output. The warning message frame header is marked with WARN. 0*01 is a device offline alarm, 0*02 is a device communication failure alarm, and 0*03 is a device suspected hardware failure alarm. The warning identification sequence carries the terminal address and the exception type in sequence.

[0016] Preferably, the communication protocol stack is embedded in the first terminal, the second terminal and the third terminal through a hardware port, and when a user triggers a control operation of a terminal, a control instruction constructs a message according to a protocol format; The communication protocol stack sets a 4-byte frame header, a 2-byte device address, a 1-byte message type, a 1-byte digital length, and a 1-byte checksum. The digital fields are arranged in order according to the message type. The message type is initially identified as 0*01 sensor data reporting, 0*02 control command, 0*03 device status feedback, and 0*04 heartbeat packet; Every 5 seconds, the data collection process constructs a message according to the format and sends it to the collection unit of the network management module. The user management module inputs the behavior instruction, and the application layer constructs a signal with the initial identifier of the control instruction and transmits it to the first terminal, the second terminal and the third terminal. The acceptance signals of the first terminal, the second terminal and the third terminal create an identifier through the 0*03 sequence to feedback to the user management module. The first terminal, the second terminal and the third terminal send a heartbeat packet to the network management module every 30 seconds. If the network management module does not receive the heartbeat packet after 40 seconds, it enters the exception handling mechanism.

[0017] Preferably, the user management module includes user 1, user 2, and user 3 of the first terminal. The user management module sets the permission level according to the account type actively registered by user 1, user 2, and user 3. The permission level includes administrator permission, ordinary user permission, and visitor permission. The user management module generates a user behavior habit log based on big data simulation according to all operation behaviors of the user in the system. The user management module establishes a connection with the storage unit through a software interface. The storage unit splits independent units through a distributed algorithm. The independent units record and retain identity authentication information. The software interface between the user management module and the storage unit automatically generates an independent open instruction with the participation of the communication protocol stack.

[0018] Preferably, the third-party service passes through the security protection module during the access to the cross-terminal interaction framework. When the third-party application is accessed, the permission isolation mechanism is used to protect the third-party application from illegally accessing the core data and functions of the system; The network management module is equipped with a network traffic optimization unit. The network traffic optimization unit connects to the terminal access module through a wireless network, and sets traffic monitoring points at the terminal access point and the wireless connection node. The traffic monitoring point captures the source device address, destination device address, protocol type, data packet size and timestamp through the Internet Protocol, and embeds detection software through the software interface at the link layer. The detection software monitors bandwidth utilization, delay, and packet loss rate. The network traffic optimization unit dynamically adjusts the wireless network allocation according to the data transmission priority of the terminal device, network congestion and traffic monitoring points, and uses traffic shaping technology to transmit key data in real time. When a network node fails, the traffic shaping technology automatically switches to the backup path / reconstructs the network topology.

[0019] Preferably, the wireless communication access of the network management module includes one or a combination of Wi-Fi, Bluetooth, ZigBee, 4G / 5G, and the signal conditioning circuit has an adaptive adjustment mechanism, which automatically adjusts the circuit parameters according to the amplitude and frequency of the input physical signal; The storage unit of the data management module adopts a distributed storage architecture. The storage unit automatically adds storage nodes when the data volume increases. The collection unit sets the data interval, and data outside the data interval does not enter the storage unit. The collection unit calculates the mean of continuous data sequences, and sequences with deviations exceeding 30% are automatically deleted.

[0020] Preferably, the security protection module includes a data encryption unit, a device authentication unit and an intrusion detection unit. The data encryption unit adopts a multi-level encryption algorithm to encrypt the data in the system. The device authentication unit performs identity authentication on the terminal device connected to the system. The intrusion detection unit monitors the abnormal behavior in the system in real time based on machine learning and behavioral analysis technology. The intrusion detection unit locates the abnormal behavior node and leaves a sequence identification, and the security vulnerability scan locates the identification point.

[0021] Compared with the prior art, the present invention has the following beneficial effects: 1. The present invention defines special data sources through the data management module, realizes data layered isolation and circulation, solves the problem that data is easily polluted and interfered, helps to more accurately control product quality and improve data quality; 2. The present invention increases storage nodes through storage units, realizes automatic expansion of data collection rate and node security controllability, solves the problem that multi-terminal data access is disorderly and vulnerable to attacks and cannot be intercepted and protected, improves the degree of automation, enhances user experience, and makes the audience feel served; 3. The present invention realizes intelligent traffic scheduling through a network traffic optimization unit, solves the problem of network congestion when multiple terminal devices are used at the same time, and improves user experience; 4. The present invention realizes automatic positioning of vulnerability nodes through the security protection module, solves the problem of time-consuming and labor-intensive manual investigation, and enables the system to better adapt to the ever-changing security threat environment of the Internet of Things system. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a schematic diagram of the system architecture of the present invention; Figure 2 It is a schematic diagram of the internal structure of the data management module of the present invention; Figure 3 It is a schematic diagram of the system components of the present invention; Figure 4 It is a schematic diagram of the internal structure of the network management module of the present invention; Figure 5 It is a schematic diagram of a user management module of the present invention; Figure 6 This is a schematic diagram of the cross-terminal interaction framework and third-party service access of the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] See also Figure 1 , Figure 2 , Figure 3 , Figure 4 and Figure 5 , an embodiment provided by the present invention: a multi-terminal communication system based on the Internet of Things, comprising a terminal access module, a data management module, a network management module, a communication protocol stack and a user management module, wherein the terminal access module interacts with the communication protocol stack through an internal register, and the data management module, the network management module and the user management module are connected to the communication protocol stack through a software interface; the network management module preferentially connects to a wireless network in a short distance through a locally deployed base station, the network management module sends data instructions to a first terminal, a second terminal and a third terminal through a wireless network, and the user management module authorizes the terminal access module to passively access terminal device information through an identity authentication mechanism; The first data of the first terminal interacts with the first data, the second data and the third data of the second terminal through a communication protocol stack, the number and distribution positions of the first terminal, the second terminal and the third terminal correspond to the access to the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit respectively, the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit are physical signals, the physical signals are converted into corresponding electrical signals through a converter, and the electrical signals are connected to the network management module; The communication protocol stack transmits messages between the terminal access module and the server through the message queue telemetry transmission protocol. When the calling protocol calls a third-party service involving user personal information, the calling protocol links the corresponding information storage unit to request user permissions through the identity authentication protocol; The wireless communication access of the network management module includes one or a combination of Wi-Fi, Bluetooth, ZigBee, 4G / 5G, and the signal conditioning circuit has an adaptive adjustment mechanism, which automatically adjusts the circuit parameters according to the amplitude and frequency of the input physical signal; Furthermore, the first terminal is a production equipment controller in the factory, a numerical control system of a numerical control machine tool, which is responsible for collecting the operating status data of the equipment, such as spindle speed, tool position, processing progress and other information, which are used as the first data. The second terminal is an environmental monitoring sensor group in the workshop, including a temperature sensor, a humidity sensor and an air quality sensor, which respectively collect the temperature data of the environment as the first data, the humidity data as the second data and the air quality data as the third data. The third terminal is a control system of a material transport robot in the factory, which can feedback the robot's position information, load status and running path and other data as its own related data. The pulse signal representing the spindle speed output by the production equipment controller passes through the first signal conditioning circuit, and the circuit automatically adjusts the parameters according to the amplitude and frequency of the pulse signal to convert it into an electrical signal suitable for reception by the network management module. The resistance change signal of the temperature sensor of the environmental monitoring sensor group, the capacitance change signal of the humidity sensor, etc. are converted into electrical signals by the second signal conditioning circuit, and the signal of the material transport robot control system is processed by the third signal conditioning circuit; When the production equipment controller at the first terminal needs to upload the equipment's operating status data to the server, the communication protocol stack will encapsulate and send this data according to the message queue telemetry transmission protocol. At the same time, if the user management module at the server side issues a new transport task instruction to the material transport robot at the third terminal according to the production plan, the communication protocol stack will also accurately transmit the instruction information to the third terminal according to the message queue telemetry transmission protocol; When remotely logging into the monitoring system to view device data, the calling protocol will request user permissions by linking the corresponding information storage unit to ensure data security and compliance.

[0025] See also Figure 1 , Figure 2 and Figure 5 , an embodiment provided by the present invention: an application of a multi-terminal communication system based on the Internet of Things in urban transportation, the data management module includes a collection unit, a storage unit and a processing unit, the collection unit establishes a sharing mechanism with a database through a built-in configuration file / wireless network, the storage unit is connected to the collection unit / database through a wireless network, and the processing unit establishes a connection with the database according to a database driver; the collection unit actively sends a query instruction to the terminal access module through an Ethernet interface, the query instruction includes a device address and a port number, the data source of the terminal access module is connected to the collection unit, the collection unit collects the data source repeatedly to the storage unit, the processing unit extracts the data source in the storage unit and marks it through a metadata tag, the data source marked by the processing unit is retained in the processing unit and is defined as a special data source, and the special data source is used as a basic data source for system learning and upgrading; The network management module transmits the terminal data to the IoT cloud platform via the wireless network. The IoT cloud platform selects to upload or download the terminal data through the user request of the user management module. The first data of the first terminal is transmitted to the second terminal. The second terminal selects and adapts the data to become the first data of the second terminal through format recognition and conversion by the data management module. The network management module is equipped with a network traffic optimization unit. The network traffic optimization unit connects to the terminal access module through a wireless network, and sets traffic monitoring points at the terminal access point and the wireless connection node. The traffic monitoring point captures the source device address, destination device address, protocol type, data packet size and timestamp through the Internet Protocol, and embeds detection software through the software interface at the link layer. The detection software monitors bandwidth utilization, delay, and packet loss rate. The network traffic optimization unit dynamically adjusts the wireless network allocation according to the data transmission priority of the terminal device, network congestion and traffic monitoring points, and uses traffic shaping technology to transmit key data in real time. When a network node fails, the traffic shaping technology automatically switches to the backup path / reconstructs the network topology; Furthermore, the first terminal is a traffic light control system. It can collect the current status information of the traffic light, such as the length of time the red light is on, the length of time the green light is on, the remaining time for the traffic light to switch, etc. as the first data, and can also obtain the traffic flow sensor data of the intersection where the traffic light is located as the second data and the surrounding ambient light brightness sensor data as the third data. These data constitute the data source of the first terminal, and the second terminal is an in-vehicle intelligent terminal. It can collect the vehicle's driving speed as the first data, the vehicle's location information as the second data, and the vehicle's engine status data as the third data, etc. These data are relatively independent before being reviewed by the user management module, and are only preliminarily processed and stored in the vehicle's internal system, and will not be transmitted to the outside at will; Deploy Wi-Fi hotspots at various intersections in the city, and use the city's existing 4G / 5G network coverage to ensure that the traffic light control system and in-vehicle smart terminals can be stably connected to the network. Use the city's existing 4G / 5G network coverage to ensure that the traffic light control system and in-vehicle smart terminals can be stably connected to the network; The network management module sets up traffic monitoring points at the traffic lights, i.e., terminal access points, and nearby network base stations, i.e., wireless connection nodes. The traffic monitoring points can capture information such as the protocol type, data packet size, and timestamp when the traffic light control system transmits data to the IoT cloud platform. During peak hours in the morning and evening, due to the large number of vehicles using the network at the same time, bandwidth utilization may increase, and network delays and packet loss may occur. The network traffic optimization unit dynamically adjusts the wireless network allocation based on the higher priority of the control instruction data of the traffic lights, network congestion, and data information fed back by the traffic monitoring points. Traffic shaping technology is used to achieve real-time transmission of key data such as the control instructions of traffic lights. If a network node, such as a Wi-Fi hotspot at a certain intersection, fails, the traffic shaping technology can automatically switch to an alternative path, such as switching to a 4G / 5G network or reconstructing the network topology to ensure uninterrupted data transmission.

[0026] See also Figure 1 , Figure 4 , Figure 5 and Figure 6 , an embodiment provided by the present invention: an application of a multi-terminal communication system based on the Internet of Things in a home environment, the cross-end interaction framework opens capabilities and interfaces to third-party applications, and the terminal is directly connected to the data management module through the cross-end interaction framework; the cross-end interaction framework internally integrates a simple application framework, the simple application framework integrates third-party service data by internally building a configuration file, the configuration file adds a dependency declaration on the third-party service SDK, the simple application framework references a calling protocol through a virtual interface, the developer calls the third-party service through the calling protocol, the calling protocol is divided into synchronous calling and asynchronous calling, the asynchronous calling indicates that request one is not executed, the developer calls request two, the reply one corresponding to request one and the reply two corresponding to request two are carried out simultaneously, and the third-party service pushes a callback service to the simple application through a message; The communication protocol stack includes a functional structure and a hierarchical structure. The functional structure of the communication protocol stack is divided into device discovery and identification, data collection during data transmission, status monitoring, remote control, and data encryption. The hierarchical structure of the communication protocol stack is divided into a physical layer, a data link layer, a transport layer, and an application layer. The processing order of the physical layer, the data link layer, the transport layer, and the application layer is performed in sequence, and a service interface is provided between the adjacent layers. The physical layer is responsible for processing the access of the physical media of the first terminal, the second terminal, and the third terminal. The data source is encapsulated as a data frame through the data link layer. At the same time, the frame header contains the clock sequence of the receiving end, and the data frame flows into the terminal access module; Furthermore, the first terminal is a smart TV, the second terminal is a smart door lock, and the third terminal is a smart speaker. As a content display and interaction center, the smart TV can obtain and display data from other terminals through the cross-terminal interaction framework, and can also send control instructions to other terminals. Smart home control mobile phone applications are connected to the cross-terminal interaction framework; The simple application framework integrates third-party service data such as music playback and voice assistant through internally constructed configuration files. The configuration file adds a dependency declaration on the music playback service SDK. When the user requests to play music through voice commands, the simple application framework references the calling protocol through the virtual interface. The calling protocol pre-set by the developer will start the music playback service. During each unlocking and locking operation of the smart door lock, its status data such as unlocking time and unlocking method will be collected and transmitted through the communication protocol stack. The status monitoring function can monitor the status of smart devices in real time, such as the online status and volume of smart TVs. Once the status is abnormal, such as the TV suddenly going offline, it can promptly send an alarm to the user or notify the data management module to handle the situation accordingly. The smart TV accesses the home wireless network through the Wi-Fi module. The physical layer handles basic physical operations such as receiving and sending Wi-Fi signals. The data link layer encapsulates the status data of the smart door lock into a data frame, and the frame header contains the clock sequence of the data management module or other terminals that pay attention to the status of the smart door lock, so that the receiving end can synchronize and process the data according to the clock sequence.

[0027] See also Figure 1 , Figure 3 and Figure 6 , an embodiment provided by the present invention: an application of a multi-terminal communication system based on the Internet of Things in a home environment, an exception handling mechanism is embedded in a network management module, the exception handling mechanism outputs a result according to a defined checkHeartbeat function, the checkHeartbeat function receives a complete parameter deviceId, uses steady_clock to track time, obtains the last sending time of the terminal from the lastHeartbeatMap unordered mapping, stdchrono seconds timeoutDuration(40) defines a timeout time, if the time is judged to be timed out / not timed out, outputs a warning message, the warning message frame header is marked with WARN, 0*01 device offline alarm, 0*02 device communication failure alarm, 0*03 device suspected hardware failure alarm, the warning identification sequence carries the terminal address and the exception type in sequence; The communication protocol stack is embedded in the first terminal, the second terminal and the third terminal. When the user triggers the control operation of the terminal, the control instruction constructs a message according to the protocol format; the communication protocol stack sets a 4-byte frame header, a 2-byte device address, a 1-byte message type, a 1-byte digital length and a 1-byte checksum, and the digital field arranges the values ​​in sequence according to the message type; the message type sets the initial identifier as 0*01 sensor data reporting, 0*02 control instruction, 0*03 device status feedback, and 0*04 heartbeat packet; every 5 seconds of data collection process, a message is constructed according to the format and sent to the collection unit of the network management module, the user management module inputs the behavior instruction, the application layer constructs a signal with the initial identifier of the control instruction and transmits it to the first terminal, the second terminal and the third terminal, the receiving signal of the first terminal, the second terminal and the third terminal is fed back to the user management module through the 0*03 sequence to create an identifier, the first terminal, the second terminal and the third terminal send a heartbeat packet to the network management module every 30 seconds, and the network management module does not receive the heartbeat packet after 40 seconds and enters the exception handling mechanism; Furthermore, the first terminal smart door lock is responsible for collecting the status information of the door lock, such as whether it is locked, whether there are abnormal unlocking attempts, etc., and can receive control instructions from the user management module, such as remote unlocking, locking and other operations. The second terminal indoor temperature and humidity sensor collects indoor temperature and humidity data in real time, and sends these data to the network management module after constructing messages in the format of the communication protocol stack. The third terminal smart curtain controller can receive control instructions from the user management module, such as opening curtains, closing curtains, adjusting curtain opening, etc., and will also periodically send its own status information, such as the current position of the curtains, whether it is in operation, etc.; When the user triggers the unlocking control operation of the smart door lock through the interactive interface of the mobile phone application and the user management module, the control instruction will construct a message according to the protocol format. The address of the smart door lock is 01, and the message type is set to 0*02 control instruction. When the smart door lock sends a heartbeat packet, the checkHeartbeat function receives its deviceId 01, uses steady_clock to track the time, and obtains the last sending time of the smart door lock from the lastHeartbeatMap unordered mapping. stdchrono seconds timeoutDuration(40) defines the timeout period as 40 seconds. If it is determined that the smart door lock has not sent a heartbeat packet after 40 seconds, the exception handling mechanism is entered and a warning message is output. The warning message frame header is marked with WARN. If it is determined to be a device offline alarm, the warning identification sequence carries the terminal address 01 and the exception type 0*01 device offline alarm in sequence.

[0028] See also Figure 1 , Figure 3 and Figure 5, an embodiment provided by the present invention: an application of a multi-terminal communication system based on the Internet of Things in accessing internal data in an industrial park, the user management module includes user 1, user 2, and user 3 of a first terminal, the user management module sets the permission level according to the account type actively registered by user 1, user 2, and user 3, the permission level includes administrator permission, ordinary user permission, and visitor permission, the user management module generates a user behavior habit log based on big data simulation according to all operation behaviors of the user in the system, the user management module establishes a connection with a storage unit through a software interface, the storage unit splits independent units through a distributed algorithm, the independent units record and retain identity authentication information, and the software interface between the user management module and the storage unit automatically generates an independent open instruction under the participation of the communication protocol stack; The third-party service passes through the security protection module during the access to the cross-terminal interaction framework. When the third-party application is accessed, the permission isolation mechanism is used to protect the third-party application from illegally accessing the core data and functions of the system; The storage unit of the data management module adopts a distributed storage architecture. The storage unit automatically adds storage nodes when the data volume increases. The acquisition unit sets the data interval, and data outside the data interval does not enter the storage unit. The acquisition unit calculates the mean of continuous data sequences, and automatically deletes sequences with a deviation of more than 30%; The security protection module includes a data encryption unit, a device authentication unit and an intrusion detection unit. The data encryption unit uses a multi-level encryption algorithm to encrypt the data in the system. The device authentication unit performs identity authentication on the terminal device connected to the system. The intrusion detection unit monitors abnormal behaviors in the system in real time based on machine learning and behavior analysis technology. The intrusion detection unit locates abnormal behavior nodes and leaves sequence identifications, and scans for security vulnerabilities to locate identification points. Furthermore, regarding the user settings of the first terminal, user one is the IT administrator of the park and is granted administrator privileges. His account can be used to comprehensively manage system settings, add or delete user accounts, configure terminal device permissions, and view detailed system logs. User two is an ordinary office worker and has ordinary user privileges. He can use the terminal devices assigned to him, such as office computers and smart phones, to log in to the system, view information related to public facilities in the park, such as conference room reservation information, restaurant menus and queues, and perform some basic operations, such as submitting conference room reservation applications, and reporting problems with the use of facilities. User three is an external visitor and only has visitor privileges. He can browse the public information of the park, such as park maps, company introductions, etc., through the visitor terminals provided by the park, such as the information inquiry machine in the lobby, but cannot perform operations involving internal office resources or sensitive information; When logging into the administrator account, User 1 needs to perform fingerprint recognition and receive and enter a text message verification code in addition to entering a password. Only after passing all three authentication methods can the user successfully log into the system. When using an office computer to log in, ordinary User 2 can use a combination of password and text message verification code authentication, and when using a smartphone to log in to the park mobile application, fingerprint and password authentication methods can be enabled. When using the lobby information inquiry machine, Guest User 3 may only need to enter a temporary login password provided by the park front desk staff, but the information and operations that can be accessed are extremely limited; The park cooperates with an external smart office software supplier. The office efficiency improvement application provided by the supplier is a third-party service that needs to be connected to the park's IoT multi-terminal communication system. During the access process, the application must pass through the security protection module. When the third-party application tries to connect to the system to obtain employee attendance data for work efficiency analysis, due to the permission isolation mechanism of the security protection module, it can only access part of the authorized attendance data, but cannot access the core data of the system, such as employee salary information, personal identity sensitive information, and key configuration data of the system; When a terminal device suddenly sends a large number of data requests in a short period of time, and the type of data requested does not match the normal usage pattern of the device, the intrusion detection unit will identify it as abnormal behavior. It will locate the abnormal behavior node, that is, the device number and network connection point of the office computer and leave a sequence mark. The security vulnerability scan will further check whether there are security vulnerabilities in the system based on the mark point, such as whether there is a risk of data leakage caused by software vulnerabilities being exploited.

[0029] Working principle: First, the first terminal, the second terminal and the third terminal in the terminal access module convert the physical signal into an electrical signal through the signal conditioning circuit and then connect to the network management module. The data sources generated by these terminals are integrated and converted by the communication protocol stack, and the communication protocol stack transmits messages between the terminal access module and the server according to the message queue telemetry transmission protocol; The user management module authorizes the information access of the terminal access module and sets different permission levels according to the user account type. The collection unit of the data management module receives the data source of the terminal access module and collects it to the storage unit. The processing unit extracts the data source in the storage unit and marks the special data source as the basis for system learning and upgrading. The collection unit limits the data of different terminals, and the storage unit adopts a distributed storage architecture to automatically increase storage nodes. The collection unit also sets the data interval and processes the data; The network management module preferentially connects to the wireless network at close range through the local base station, and transmits the terminal data to the IoT cloud platform. The user management module can choose to upload and download terminal data. The network management module has an exception handling mechanism embedded inside, which determines the terminal status and outputs warning information based on the checkHeartbeat function. Its wireless communication access forms are diverse, including Wi-Fi, Bluetooth and other combinations. It also has a network traffic optimization unit that dynamically adjusts the wireless network allocation according to various factors, and can automatically switch or reconstruct when a network node fails. The cross-terminal interaction framework opens up capabilities and interfaces to third-party applications. It integrates a simple application framework internally, integrates third-party service data through configuration files and dependency declarations, and uses virtual interface reference calling protocols to implement synchronous or asynchronous calls to third-party services. When third-party services are accessed, they are protected through the security protection module, and the system's core data and functions are protected through a permission isolation mechanism. The security protection module includes data encryption, device authentication, and intrusion detection units to ensure system security. All parts of the system work closely together, from terminal data collection, transmission, processing to user management, network management, and interaction with third-party applications, forming a complete multi-terminal communication system.

[0030] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A multi-terminal communication system based on the Internet of Things, characterized by: It includes a terminal access module, a data management module, a network management module, a communication protocol stack and a user management module. The terminal access module interacts with the communication protocol stack through an internal register, and the data management module, the network management module and the user management module are connected to the communication protocol stack through a software interface; The network management module preferentially connects to the wireless network in a short distance through a locally deployed base station, the network management module sends data instructions to the first terminal, the second terminal and the third terminal through the wireless network, and the user management module authorizes the terminal access module to passively access the terminal device information through an identity authentication mechanism; The data management module includes a collection unit, a storage unit and a processing unit. The collection unit establishes a sharing mechanism with the database through a built-in configuration file / wireless network, the storage unit is connected to the collection unit / database through a wireless network, and the processing unit establishes a connection with the database according to a database driver; The acquisition unit actively sends a query instruction to the terminal access module through the Ethernet interface, and the query instruction includes a device address and a port number. The data source of the terminal access module is connected to the acquisition unit. The acquisition unit collects the data source repeatedly to the storage unit. The processing unit extracts the data source in the storage unit and marks it with a metadata tag. The data source marked by the processing unit is retained inside the processing unit and is defined as a special data source. The special data source serves as a basic data source for system learning and upgrading.

2. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The terminal access module accesses the data of the first terminal, the second terminal and the third terminal through the hardware interface. The data generated by the first terminal, the second terminal and the third terminal are called data sources. The terminal access module transmits the data source through the positive sequence processing method inside the communication protocol stack. The data management module receives the data source packaged and parsed by the communication protocol stack through the wireless network. The data collected by the collection unit of the data management module in which the first terminal participates is limited to the first data, the second data, and the third data, and the data collected by the second terminal in which the second terminal participates is limited to the first data, the second data, and the third data, and the first data, the second data, and the third data of the second terminal are relatively independent without being reviewed by the user management module.

3. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The first data of the first terminal interacts with the first data, the second data and the third data of the second terminal through a communication protocol stack, the number and distribution positions of the first terminal, the second terminal and the third terminal correspond to the access to the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit respectively, the first signal conditioning circuit, the second signal conditioning circuit and the third signal conditioning circuit are physical signals, the physical signals are converted into corresponding electrical signals through a converter, and the electrical signals are connected to the network management module; The terminal device is connected to the data management module through the built-in cross-end interaction framework with the assistance of the wireless network. The cross-end interaction framework opens capabilities and interfaces to third-party applications through the message array protocol. The cross-end interaction framework internally integrates the simple application framework. The simple application framework integrates third-party service data by internally building configuration files. The configuration files add dependency declarations on third-party service SDKs. The simple application framework references the calling protocol through the virtual interface. Developers call third-party services through the calling protocol. The calling protocol is divided into synchronous calling and asynchronous calling. Asynchronous calling means that request one has not been executed. The developer calls request two. Reply one corresponding to request one and reply two corresponding to request two are carried out simultaneously. The third-party service pushes the callback service to the simple application through a message.

4. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The communication protocol stack transmits messages between the terminal access module and the server through the message queue telemetry transmission protocol. When the calling protocol calls a third-party service involving user personal information, the calling protocol links the corresponding information storage unit to request user permissions through the identity authentication protocol; The communication protocol stack includes a functional structure and a hierarchical structure. The functional structure of the communication protocol stack is divided into device discovery and identification, collection during data transmission, status monitoring, remote control, and data encryption. The hierarchical structure of the communication protocol stack is divided into physical layer, data link layer, transport layer, and application layer. The processing order of the physical layer, data link layer, transport layer, and application layer is performed in sequence, and service interfaces are provided between adjacent layers. The physical layer is responsible for processing the access of the physical media of the first terminal, the second terminal, and the third terminal. The data source is encapsulated as a data frame through the data link layer. At the same time, the frame header contains the clock sequence of the receiving end, and the data frame flows into the terminal access module through the software interface.

5. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The network management module transmits the terminal data to the IoT cloud platform via the wireless network. The IoT cloud platform selects to upload or download the terminal data through the user request of the user management module. The first data of the first terminal is transmitted to the second terminal. The second terminal selects and adapts the data to become the first data of the second terminal through format recognition and conversion by the data management module. The exception handling mechanism is embedded in the network management module. The exception handling mechanism produces results according to the defined checkHeartbeat function. The checkHeartbeat function receives the complete parameter deviceId, uses steady_clock to track time, and obtains the last sending time of the terminal from the lastHeartbeatMap unordered mapping. std chrono secondstimeoutDuration(40) defines the timeout period. If the time is judged to be timed out / not timed out, a warning message is output. The warning message frame header is marked with WARN. 0*01 is a device offline alarm, 0*02 is a device communication failure alarm, and 0*03 is a device suspected hardware failure alarm. The warning identification sequence carries the terminal address and the exception type in sequence.

6. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The communication protocol stack is embedded in the first terminal, the second terminal and the third terminal through the hardware port, and when the user triggers the control operation of the terminal, the control instruction constructs a message according to the protocol format; The communication protocol stack sets a 4-byte frame header, a 2-byte device address, a 1-byte message type, a 1-byte digital length, and a 1-byte checksum. The digital fields are arranged in order according to the message type. The message type is initially identified as 0*01 sensor data reporting, 0*02 control command, 0*03 device status feedback, and 0*04 heartbeat packet; Every 5 seconds, the data collection process constructs a message according to the format and sends it to the collection unit of the network management module. The user management module inputs the behavior instruction, and the application layer constructs a signal with the initial identifier of the control instruction and transmits it to the first terminal, the second terminal and the third terminal. The acceptance signals of the first terminal, the second terminal and the third terminal create an identifier through the 0*03 sequence to feedback to the user management module. The first terminal, the second terminal and the third terminal send a heartbeat packet to the network management module every 30 seconds. If the network management module does not receive the heartbeat packet after 40 seconds, it enters the exception handling mechanism.

7. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The user management module includes user 1, user 2, and user 3 of the first terminal. The user management module sets the permission level according to the account type actively registered by user 1, user 2, and user 3. The permission level includes administrator permission, ordinary user permission, and visitor permission. The user management module generates a user behavior habit log based on big data simulation according to all operation behaviors of the user in the system. The user management module establishes a connection with the storage unit through a software interface. The storage unit splits independent units through a distributed algorithm. The independent units record and retain identity authentication information. The software interface between the user management module and the storage unit automatically generates an independent open instruction with the participation of the communication protocol stack.

8. The multi-terminal communication system based on the Internet of Things according to claim 2, characterized in that: The third-party service passes through the security protection module during the access to the cross-terminal interaction framework. When the third-party application is accessed, the permission isolation mechanism is used to protect the third-party application from illegally accessing the core data and functions of the system; The network management module is equipped with a network traffic optimization unit. The network traffic optimization unit connects to the terminal access module through a wireless network, and sets traffic monitoring points at the terminal access point and the wireless connection node. The traffic monitoring point captures the source device address, destination device address, protocol type, data packet size and timestamp through the Internet Protocol, and embeds detection software through the software interface at the link layer. The detection software monitors bandwidth utilization, delay, and packet loss rate. The network traffic optimization unit dynamically adjusts the wireless network allocation according to the data transmission priority of the terminal device, network congestion and traffic monitoring points, and uses traffic shaping technology to transmit key data in real time. When a network node fails, the traffic shaping technology automatically switches to the backup path / reconstructs the network topology.

9. The multi-terminal communication system based on the Internet of Things according to claim 1, characterized in that: The wireless communication access of the network management module includes one or a combination of Wi-Fi, Bluetooth, ZigBee, 4G / 5G, and the signal conditioning circuit has an adaptive adjustment mechanism, which automatically adjusts the circuit parameters according to the amplitude and frequency of the input physical signal; The storage unit of the data management module adopts a distributed storage architecture. The storage unit automatically adds storage nodes when the data volume increases. The collection unit sets the data interval, and data outside the data interval does not enter the storage unit. The collection unit calculates the mean of continuous data sequences, and sequences with deviations exceeding 30% are automatically deleted.

10. The multi-terminal communication system based on the Internet of Things according to claim 8, characterized in that: The security protection module includes a data encryption unit, a device authentication unit and an intrusion detection unit. The data encryption unit uses a multi-level encryption algorithm to encrypt data within the system. The device authentication unit performs identity authentication on terminal devices connected to the system. The intrusion detection unit monitors abnormal behaviors within the system in real time based on machine learning and behavioral analysis technology. The intrusion detection unit locates abnormal behavior nodes and leaves sequence identifications, and scans for security vulnerabilities to locate identification points.

Images