Information transmission method and system based on engineering supervision platform

Abstract

The invention relates to the technical field of engineering supervision platform information transmission, and discloses an information transmission method and system based on an engineering supervision platform, and the method comprises the steps: obtaining construction data uploaded by an on-site supervisor, executing a classification compression preprocessing strategy, and carrying out the classification compression and robust coding of the construction data; executing a double-layer encryption strategy according to the execution key and the construction data, generating a digital signature, and encrypting the construction data, the execution key and the digital signature; sending the encrypted construction data, the execution key and the digital signature to a project manager through a network transmission path; executing a fault monitoring strategy on each node in the network transmission path, and judging whether the node has a fault or not; if the faulty node is monitored, executing a multi-level redundant backup strategy, and replacing the faulty node with the backup node; a hierarchical processing strategy is performed on the abnormal network behavior, the security of a network transmission path is maintained, and the efficiency and security of data transmission are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of information transmission of an engineering supervision platform, and in particular to an information transmission method and system based on an engineering supervision platform. Background Art

[0002] In modern engineering supervision projects, information transmission has become an indispensable part, especially in large-scale engineering projects. The large amount of data transmitted in real time involves many aspects such as project progress, quality control, cost management and safety management. Therefore, it is very important to ensure the security of information transmission. At present, the common practice is to use firewalls and intrusion detection systems at the network level to prevent external attacks, and use SSL / TLS protocols for encryption and decryption communication during the transmission process to ensure the confidentiality and integrity of information.

[0003] Traditional SSL / TLS encryption mechanisms may cause increased delays in network congestion, affecting the efficiency of information transmission; in addition, in the face of increasingly sophisticated network attack methods, it is difficult to completely avoid the risk of information leakage by relying solely on these general encryption technologies.

[0004] This scheme proposes an information transmission method and system based on the engineering supervision platform to implement an optimization strategy for data transmission, which can not only improve the quality and efficiency of engineering supervision work, but also provide strong technical support for the successful implementation of the entire engineering project. Summary of the invention

[0005] The present invention provides an information transmission method and system based on an engineering supervision platform, which promotes solving the problems mentioned in the above background technology.

[0006] In a first aspect, the present application provides an information transmission method based on an engineering supervision platform, which adopts the following technical scheme: an information transmission method based on an engineering supervision platform, comprising: a field supervisor sends construction data to a project manager via the engineering supervision platform, and the engineering supervision platform generates a conversation between the field supervisor and the project manager;

[0007] By generating sessions, the system can effectively manage the context and authentication process of data transmission, ensuring the uniqueness and integrity of data transmission. Session records can trace historical operations and provide a basis for subsequent management and division of responsibilities. At the same time, session management can detect and handle session anomalies in real time, improving the stability and security of data transmission.

[0008] During the session:

[0009] Get the current bandwidth of the engineering supervision platform transmission network and packet loss rate ;

[0010] Execute adaptive traffic control strategy according to bandwidth and packet loss rate to adjust the encryption strength of construction data;

[0011] Obtain the construction data uploaded by the on-site supervisor, implement the classification compression preprocessing strategy, and classify, compress and robustly encode the construction data;

[0012] Set the master key and session key;

[0013] According to the master key and the session key, execute the key update strategy to update the master key and the session key;

[0014] Get the session key for this session, recorded as the execution key;

[0015] According to the execution key and construction data, a double-layer encryption strategy is implemented to generate a digital signature, and the construction data, execution key and digital signature are encrypted;

[0016] Obtaining a network transmission path for this session, where the network transmission path consists of multiple nodes;

[0017] Send the encrypted construction data, execution key and digital signature to the project manager via the network transmission path;

[0018] Execute the fault monitoring strategy for each node in the network transmission path to determine whether the node is faulty;

[0019] If a faulty node is detected, a multi-level redundant backup strategy is implemented to replace the faulty node with a backup node.

[0020] Use AI to intelligently detect abnormal network behavior at each node in the network transmission path;

[0021] Implement hierarchical disposal strategies for abnormal network behaviors to maintain the security of network transmission paths;

[0022] This session is recorded using blockchain logs.

[0023] Preferably, the adaptive flow control strategy is executed according to the bandwidth and the packet loss rate to adjust the encryption strength of the construction data, including:

[0024] Setting bandwidth weight factor ;

[0025] Set the packet loss rate weight factor ;

[0026] Get the maximum bandwidth of the engineering supervision platform to transmit data ;

[0027] Execute the following formula to calculate the encryption strength ;

[0028] ,in, , , .

[0029] By monitoring network bandwidth and packet loss rate, the system can dynamically optimize encryption strength, thereby improving transmission efficiency while ensuring security. Reducing encryption strength under low bandwidth can save transmission resources; while increasing encryption strength under high bandwidth conditions can enhance data security and meet the needs of different environments.

[0030] Preferably, the step of obtaining the construction data uploaded by the on-site supervisor, executing a classification compression preprocessing strategy, and classifying, compressing and robustly encoding the construction data includes:

[0031] Said construction data is divided into the categories of project schedule, quality control, cost management and safety management;

[0032] For any type of construction data, obtain the compression algorithm that the engineering supervision platform matches for this type of construction data, and obtain the compression rate of the compression algorithm ;

[0033] Get the file of construction data ;

[0034] Execute the classification compression preprocessing strategy to compress the construction data into ;

[0035] Robust Coding:

[0036] Obtain a standard check matrix H;

[0037] Use Gaussian elimination method to decompose the check matrix H to obtain the first matrix P;

[0038] ,in, The first matrix The transpose of for The identity matrix of

[0039] Calculate the generated matrix ,in, for The identity matrix of

[0040] Calculate the codeword after robust coding .

[0041] By classifying and compressing construction data, the optimal compression algorithm can be used for different types of data to improve the compression rate and data transmission efficiency. At the same time, classification compression can reduce the system's storage requirements and transmission bandwidth load, and improve the overall performance and resource utilization of the platform.

[0042] Preferably, executing a key update strategy according to the master key and the session key to update the master key and the session key includes:

[0043] Every time the on-site supervisor uploads construction data to the engineering supervision platform, the session key for this session is generated based on the current master key, specifically:

[0044] Get the corresponding session when the on-site supervisor uploads the construction data to the engineering supervision platform ;

[0045] Get the current master key ;

[0046] use The algorithm calculates the session key for this session ;

[0047] Set the master key update interval ;

[0048] Get the time when the master key was last updated ;

[0049] exist Always update the master key, using The algorithm obtains the updated master key .

[0050] By setting the master key and session key and updating them dynamically, you can prevent security risks caused by long-term use of keys. The key update strategy ensures that each session has an independent key, reducing the possibility of key cracking or leakage, and further improving the security of the system.

[0051] Preferably, the double-layer encryption strategy is executed according to the execution key and the construction data to generate a digital signature, and the construction data, the execution key and the digital signature are encrypted, including:

[0052] Obtain the codeword obtained after robust coding;

[0053] Obtain the private key of the on-site supervisor, use the private key to asymmetrically encrypt the codeword, and obtain a digital signature;

[0054] Symmetrically encrypt the codeword using the execution key;

[0055] Obtain the public key of the project manager and use the public key to asymmetrically encrypt the execution key.

[0056] Through double-layer encryption and digital signature, data can be effectively prevented from being tampered with and leaked during transmission. Asymmetric encryption provides identity authentication, while symmetric encryption ensures transmission efficiency. The combination of double-layer encryption further enhances data protection capabilities.

[0057] Preferably, the step of sending the encrypted construction data, execution key and digital signature to the project manager via a network transmission path includes:

[0058] For any on-site supervisor:

[0059] Get the digital signature uploaded by the on-site supervisor , encrypted codeword and the encrypted execution key ;

[0060] Calculating cryptographic hash values , get the unique ID of the on-site supervisor ;

[0061] Obtain the face recognition image of the on-site supervisor and perform the Gaussian blur algorithm on the face recognition image to protect privacy. Specifically:

[0062] Establish a two-dimensional coordinate system at the center of the face recognition image, where the face recognition image is a square, and length = width = 2q;

[0063] Calculate the pixel value of each pixel on the face recognition image after performing the Gaussian blur algorithm: ,in, The horizontal and vertical coordinates The pixel value of is the blur intensity;

[0064] Get the face recognition image with Gaussian blur algorithm ;

[0065] Obtain the identity information of the on-site supervisor , the time of uploading data and location information of on-site supervisors ;

[0066] Setting the data block of the on-site supervisor ;

[0067] Get the data blocks of all on-site supervisors, implement the group upload strategy, and upload the data blocks to the blockchain network in groups. Specifically:

[0068] Set group size ;

[0069] Divide the acquired data blocks of all on-site supervisors into Groups, each containing data blocks;

[0070] Pack each set of data and calculate its overall hash value ,

[0071] in, , the calculated overall hash value is stored in the blockchain network;

[0072] The blockchain aggregation node downloads all data uploaded to the blockchain through distributed storage;

[0073] The project manager enters the identity information of the on-site supervisor, the time of uploading data, the location information of the on-site supervisor, and other data blocks required for the query in the blockchain.

[0074] By encrypting the construction data and keys separately, the system can decrypt and restore them on the project management side to ensure the integrity and confidentiality of the data. The combination of asymmetric and symmetric encryption can balance security and efficiency.

[0075] Preferably, executing a fault monitoring strategy on each node in the network transmission path to determine whether the node is faulty includes:

[0076] For each node in the network transmission path, set the node health status ;

[0077] Get the resource utilization of the node ;

[0078] Get the response time of a node ;

[0079] Get the load level of a node ;

[0080] Execute the following formula to calculate ;

[0081] ,in, , and are the resource utilization weight, response time weight and load level weight respectively, and ;

[0082] Setting health thresholds ;

[0083] Compare the node's health status to the health threshold;

[0084] like , then the node is healthy;

[0085] like , the node fails.

[0086] By monitoring the health status of nodes, the system can identify potential faults in the network in real time and take timely measures to reduce the risk of transmission interruption. This improves the reliability and availability of the network while reducing the impact of faults on overall transmission efficiency.

[0087] Preferably, if a failed node is detected, a multi-level redundant backup strategy is executed to replace the failed node with a backup node, including:

[0088] Set the backup radius;

[0089] Get the node to monitor the fault, and make a circle with the location of the faulty node as the center and the backup radius as the radius as the backup area;

[0090] Get all idle nodes in the backup area, calculate the distance from the failed node, sort them by distance, select the first three idle nodes, and record them as the first node, the second node, and the third node respectively;

[0091] activating the first node to replace the failed node;

[0092] Notify the second node to start the high-availability HA cluster;

[0093] Set the third node to hot standby status.

[0094] Through multi-level redundant backup strategies, the system can quickly replace faulty nodes to ensure the continuity and stability of transmission. Enabling HA cluster and hot backup mechanisms can further improve the system's disaster recovery capabilities and enhance the high availability of the platform.

[0095] Preferably, the method uses AI to intelligently detect abnormal network behavior for each node in the network transmission path, and implements a hierarchical disposal strategy for the abnormal network behavior to maintain the security of the network transmission path, including:

[0096] Detect abnormal network behavior based on the joint model of Transformer and Autoencoder:

[0097] Transformer encoding module:

[0098] Extract the characteristics of node transmission traffic , use the embedding layer to map features to high-dimensional space, and the multi-head attention mechanism to extract key temporal features:

[0099] ,in, , , , , They are query, key, and value vector three dimensions, time step, and value respectively;

[0100] Capture high-dimensional features of global temporal dependencies;

[0101] Autoencoder decoding module:

[0102] Get high-dimensional features;

[0103] Use fully connected layers to restore high-dimensional features to the original space;

[0104] Minimize the reconstruction error: ,in, is the number of features, It is a feature of reconstruction;

[0105] Anomaly Detection Module:

[0106] Calculate the mean of the extracted node transmission traffic characteristics and standard deviation ;

[0107] calculate , recorded as the abnormal score;

[0108] Set anomaly thresholds;

[0109] If the anomaly score ≧ the anomaly threshold, the network behavior is abnormal;

[0110] If the anomaly score ≦ anomaly threshold, the network behavior is normal;

[0111] When abnormal network behavior is detected, an alarm message is generated and uploaded to the security management center of the engineering supervision platform;

[0112] The moment when the abnormal network behavior is detected is recorded as the first moment;

[0113] Set abnormal alarm period;

[0114] Record the time after the first moment and the interval of the alarm period as the second moment;

[0115] At the second moment, it is detected whether the abnormal network behavior has ended. If the abnormal network behavior has not ended, the abnormal network behavior is automatically terminated.

[0116] Through the hierarchical disposal strategy, the system can take appropriate response measures according to the severity of abnormal behavior to prevent the network from being attacked or abused. This process can eliminate threats in a timely manner, maintain network security, and reduce the interference of false alarms on the system.

[0117] In a second aspect, the present application provides a system for an information transmission method based on an engineering supervision platform, which adopts the following technical solution: A system for an information transmission method based on an engineering supervision platform, comprising:

[0118] The session management module generates and maintains the sessions between the on-site supervisors and the project managers;

[0119] Network monitoring and traffic control module, monitoring bandwidth and packet loss rate, dynamically adjusting encryption strength;

[0120] The data classification and compression module classifies the construction data by category and executes the corresponding compression algorithm;

[0121] Key management module, generates and updates master keys and session keys, and distributes execution keys;

[0122] Data encryption and signature module, realizing double-layer encryption and digital signature to ensure data security;

[0123] Data transmission and fault handling module, which manages data encryption transmission, monitors node health, and performs fault redundancy backup;

[0124] Abnormal behavior detection and processing module, identifying abnormal access and unknown IP, and implementing hierarchical disposal strategies;

[0125] The blockchain logging module records session logs to ensure that data cannot be tampered with;

[0126] User rights management module, which controls user rights and ensures data access security;

[0127] The security management center handles network anomalies and fault alarms and provides system-level security protection.

[0128] The present invention has the following beneficial effects:

[0129] 1. This information transmission method based on the engineering supervision platform can intelligently adjust the encryption strength by obtaining network bandwidth and packet loss rate in real time, thereby achieving a balance between security and efficiency. When the network bandwidth is limited, reducing the encryption strength can reduce data processing and transmission time and avoid network congestion; while under high bandwidth conditions, by increasing the encryption strength, the data protection capability can be enhanced and the confidentiality of information can be guaranteed. This dynamic adjustment strategy can not only adapt to complex and changing network environments, but also effectively optimize resource utilization and improve the efficiency and security of construction data transmission.

[0130] 2. This information transmission method based on the engineering supervision platform can classify and compress construction data. The system can select the best compression algorithm according to the type of data, significantly improving the compression efficiency. For example, project progress data may require a high-precision compression algorithm, while image data is more suitable for lossless or lossy compression. This preprocessing method can reduce the volume of transmitted data, reduce the occupancy of network bandwidth, and reduce the storage pressure of the server. In addition, classification processing can also optimize the processing effect of specific types of data in a targeted manner, further improving the stability and accuracy of data transmission.

[0131] 3. This information transmission method based on the engineering supervision platform can significantly reduce the risk of key leakage or cracking by setting the master key and session key and dynamically updating them. An independent session key is generated for each session to ensure the uniqueness of data encryption and effectively prevent replay attacks or other malicious behaviors. Regular updates of the master key can reduce the security risks caused by long-term use and maintain the cutting-edge and reliability of the encryption mechanism. This dynamic key management strategy not only ensures the security of data transmission, but also improves the system's protection capabilities in complex scenarios.

[0132] 4. This information transmission method based on the engineering supervision platform implements a double-layer encryption strategy, combining the identity authentication function of asymmetric encryption with the efficient transmission performance of symmetric encryption. The system can meet the security and efficiency requirements at the same time. In addition, the generated digital signature can verify the integrity and source of the data and prevent the data from being tampered with during the transmission process. This combined strategy can not only resist a variety of security threats, but also provide reliable encryption protection in every link of data transmission, fully ensuring the privacy and credibility of construction data.

[0133] 5. This information transmission method based on the engineering supervision platform can quickly identify potential faults and take emergency measures by monitoring the health status of each node in the transmission path in real time. For faulty nodes, the multi-level redundant backup strategy allows the system to select replacement nodes from nearby idle nodes and start high-availability clusters and hot backup mechanisms at the same time. This mechanism can minimize the impact of network interruptions and ensure the continuous transmission and processing capabilities of construction data. The combination of fault management and backup strategies significantly improves the reliability of the network and the high availability of the platform.

[0134] 6. This information transmission method based on the engineering supervision platform can take targeted security measures according to the severity of the incident through the hierarchical treatment of abnormal network behaviors. For example, minor abnormal access can be handled by warnings or temporary restrictions, while serious threats will trigger automatic blocking mechanisms. This hierarchical strategy ensures that security incidents can be responded to efficiently while reducing the interference of false alarms on normal operations. Combined with automatic detection of abnormal behaviors and alarm upload, the system can continuously maintain the security of the transmission path and avoid the impact of external threats on data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0135] Figure 1 It is a schematic diagram of the process of the present invention.

[0136] Figure 2 It is a schematic diagram of the module division of the system of the present invention.

[0137] Figure 3 It is a schematic diagram of the module division of the system of the present invention. DETAILED DESCRIPTION

[0138] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0139] Embodiment 1, refer to Figure 1 .An information transmission method based on an engineering supervision platform, comprising:

[0140] The on-site supervisor sends the construction data to the project manager through the engineering supervision platform, and the engineering supervision platform generates a conversation between the on-site supervisor and the project manager;

[0141] By creating sessions between on-site supervisors and project managers, the system can track and record the entire data transmission process, ensuring that data interactions have a clear context. This mechanism can effectively avoid confusion or omissions in multi-party interactions, while giving each transmission a unique identifier. Session-based management also allows real-time monitoring of the flow and status of data. Once an abnormal situation occurs, such as data loss or repeated transmission, the system can respond quickly and locate the problem. This session management mechanism not only provides strong support for data transmission, but also provides a reliable foundation for subsequent process management and auditing.

[0142] During the session:

[0143] Get the current bandwidth of the engineering supervision platform transmission network and packet loss rate ;

[0144] Execute adaptive traffic control strategy according to bandwidth and packet loss rate to adjust the encryption strength of construction data;

[0145] Obtain the construction data uploaded by the on-site supervisor, implement the classification compression preprocessing strategy, and classify, compress and robustly encode the construction data;

[0146] Set the master key and session key;

[0147] According to the master key and the session key, execute the key update strategy to update the master key and the session key;

[0148] Get the session key for this session, recorded as the execution key;

[0149] According to the execution key and construction data, a double-layer encryption strategy is implemented to generate a digital signature, and the construction data, execution key and digital signature are encrypted;

[0150] Get the network transmission path of this session. The network transmission path consists of multiple nodes.

[0151] Send the encrypted construction data, execution key and digital signature to the project manager via the network transmission path;

[0152] Execute the fault monitoring strategy for each node in the network transmission path to determine whether the node is faulty;

[0153] If a faulty node is detected, a multi-level redundant backup strategy is implemented to replace the faulty node with a backup node.

[0154] Use AI to intelligently detect abnormal network behavior at each node in the network transmission path;

[0155] Implement hierarchical disposal strategies for abnormal network behaviors to maintain the security of network transmission paths;

[0156] This session is recorded using blockchain logs.

[0157] By recording the key information of each session on the blockchain, the system achieves data immutability and permanent traceability. This feature not only enhances the credibility of data storage, but also provides technical support for the platform's operational transparency. In data audits, legal disputes, and compliance inspections, blockchain logs can serve as authoritative evidence to ensure the integrity and authenticity of data. Through this decentralized recording mechanism, the overall trust and reliability of the platform have been further improved, laying a solid foundation for the digital development of engineering supervision.

[0158] Based on bandwidth and packet loss rate, adaptive traffic control strategies are implemented to adjust the encryption strength of construction data, including:

[0159] Setting bandwidth weight factor ;

[0160] Set the packet loss rate weight factor ;

[0161] Get the maximum bandwidth of the engineering supervision platform to transmit data ;

[0162] Execute the following formula to calculate the encryption strength ;

[0163] ,in, , , .

[0164] By real-time detection of the bandwidth and packet loss rate of the transmission network, the system dynamically adjusts the encryption strength of the data to achieve a balance between security and efficiency. When the network load is large, reducing the encryption strength can reduce data processing time, thereby ensuring that important data is delivered in a timely manner; when the network conditions are good, increasing the encryption strength can provide higher security protection. This strategy not only significantly optimizes the utilization of network resources, but also adapts to different network environments and application scenarios. Through this dynamic adjustment mechanism, the system can achieve the best balance between security and performance, and improve the transmission efficiency and stability of the entire engineering supervision platform.

[0165] Obtain the construction data uploaded by the on-site supervisor, implement the classification compression preprocessing strategy, and classify, compress and robustly encode the construction data, including:

[0166] Construction data was divided into the categories of project schedule, quality control, cost management, and safety management;

[0167] For any type of construction data, obtain the compression algorithm that the engineering supervision platform matches for this type of construction data, and obtain the compression rate of the compression algorithm ;

[0168] Get the file of construction data ;

[0169] Execute the classification compression preprocessing strategy to compress the construction data into ;

[0170] Robust Coding:

[0171] Obtain a standard check matrix H;

[0172] Use Gaussian elimination method to decompose the check matrix H to obtain the first matrix P;

[0173] ,in, The first matrix The transpose of for The identity matrix of

[0174] Calculate the generated matrix ,in, for The identity matrix of

[0175] Calculate the codeword after robust coding .

[0176] By classifying construction data and using targeted compression algorithms, the system can significantly reduce data volume and alleviate network bandwidth pressure. For example, for project progress data, an efficient compression algorithm is used to ensure content accuracy, while for multimedia data, a lossy compression method that takes into account both quality and volume is selected. This classification compression strategy not only improves the efficiency of data transmission, but also reduces storage space usage, providing support for the long-term stable operation of the engineering supervision platform. In addition, data classification compression can further improve the availability of different types of data, ensuring that key information can be quickly restored and used when necessary.

[0177] According to the master key and session key, execute the key update policy to update the master key and session key, including:

[0178] Every time the on-site supervisor uploads construction data to the engineering supervision platform, the session key for this session is generated based on the current master key, specifically:

[0179] Get the corresponding session when the on-site supervisor uploads the construction data to the engineering supervision platform ;

[0180] Get the current master key ;

[0181] use The algorithm calculates the session key for this session ;

[0182] Set the master key update interval ;

[0183] Get the time when the master key was last updated ;

[0184] exist Always update the master key, using The algorithm obtains the updated master key .

[0185] In this embodiment, the dynamic key update mechanism automatically changes the master key every 12 hours. Each change of the master key will trigger the system to automatically notify all participants to update the local key library;

[0186] The blockchain log management system will record the timestamp, initiator ID and operation results of each encryption and decryption operation in detail, forming an unalterable log chain and providing a basis for subsequent audits.

[0187] Through the dynamic management of master keys and session keys, the system effectively reduces the risk of key leakage. Each session generates an independent session key, so that even if the key of a session is stolen, it will not affect the data security of other sessions. At the same time, the regular update of the master key can reduce the security risks caused by long-term use and maintain the cutting-edge and high-intensity of the encryption strategy. Through the key update strategy, the system improves the ability to resist external attacks while ensuring data confidentiality, providing stronger security for construction data transmission.

[0188] According to the execution key and construction data, a double-layer encryption strategy is implemented to generate a digital signature, and the construction data, execution key and digital signature are encrypted, including:

[0189] Obtain the codeword obtained after robust coding;

[0190] Obtain the private key of the on-site supervisor, use the private key to asymmetrically encrypt the codeword, and obtain a digital signature;

[0191] Symmetrically encrypt the codeword using the execution key;

[0192] Obtain the public key of the project manager and use the public key to asymmetrically encrypt the execution key.

[0193] In this embodiment, when transmitting video surveillance information at the construction site, the engineering supervision platform will first perform H.265 encoding compression on the video stream, and then use the AES-256 algorithm to encrypt it, and at the same time generate a corresponding RSA digital signature to ensure that a high transmission rate can be maintained even in poor network conditions, and project managers can ensure that the data has not been tampered with by verifying the digital signature.

[0194] By combining symmetric encryption and asymmetric encryption, the system achieves a good balance between security and efficiency. First, the generation of digital signatures verifies the authenticity of the data source and prevents malicious tampering and impersonation. Second, the fast encryption characteristics of symmetric encryption ensure the efficient transmission of large quantities of data, while asymmetric encryption is used to protect the confidentiality of session keys. This double-layer encryption mechanism can effectively defend against multiple security threats such as replay attacks and man-in-the-middle attacks, thereby fully ensuring the confidentiality and reliability of construction data during transmission.

[0195] The encrypted construction data, execution key and digital signature are sent to the project manager via the network transmission path, including:

[0196] For any on-site supervisor:

[0197] Get the digital signature uploaded by the on-site supervisor , encrypted codeword and the encrypted execution key ;

[0198] Calculating cryptographic hash values , get the unique ID of the on-site supervisor ;

[0199] Obtain the face recognition image of the on-site supervisor and perform the Gaussian blur algorithm on the face recognition image to protect privacy. Specifically:

[0200] Establish a two-dimensional coordinate system at the center of the face recognition image, where the face recognition image is a square, and length = width = 2q;

[0201] Calculate the pixel value of each pixel on the face recognition image after performing the Gaussian blur algorithm: ,in, The horizontal and vertical coordinates The pixel value of is the blur intensity;

[0202] Get the face recognition image with Gaussian blur algorithm ;

[0203] Obtain the identity information of the on-site supervisor , the time of uploading data and location information of on-site supervisors ;

[0204] Setting the data block of the on-site supervisor ;

[0205] Get the data blocks of all on-site supervisors, implement the group upload strategy, and upload the data blocks to the blockchain network in groups. Specifically:

[0206] Set group size ;

[0207] Divide the acquired data blocks of all on-site supervisors into Groups, each containing data blocks;

[0208] Pack each set of data and calculate its overall hash value ,

[0209] in, , the calculated overall hash value is stored in the blockchain network;

[0210] The blockchain aggregation node downloads all data uploaded to the blockchain through distributed storage;

[0211] The project manager enters the identity information of the on-site supervisor, the time of uploading data, the location information of the on-site supervisor, and other data blocks required for the query in the blockchain.

[0212] Execute the fault monitoring strategy for each node in the network transmission path to determine whether the node is faulty, including:

[0213] For each node in the network transmission path, set the node health status ;

[0214] Get the resource utilization of the node ;

[0215] Get the response time of a node ;

[0216] Get the load level of a node ;

[0217] Execute the following formula to calculate ;

[0218] ,in, , and are the resource utilization weight, response time weight and load level weight respectively, and ;

[0219] Setting health thresholds ;

[0220] Compare the node's health status to the health threshold;

[0221] like , then the node is healthy;

[0222] like , the node fails.

[0223] If a faulty node is detected, a multi-level redundant backup strategy is implemented to replace the faulty node with a backup node, including:

[0224] Set the backup radius;

[0225] Get the node to monitor the fault, and make a circle with the location of the faulty node as the center and the backup radius as the radius as the backup area;

[0226] Get all idle nodes in the backup area, calculate the distance to the failed node, and sort them from near to far according to the distance. Select the first three idle nodes and record them as the first node, the second node, and the third node respectively.

[0227] activating the first node to replace the failed node;

[0228] Notify the second node to start the high-availability HA cluster;

[0229] Set the third node to hot standby status.

[0230] By monitoring the health status of network nodes in real time, the system can quickly detect potential faults and take timely remedial measures. For faulty nodes, the system activates backup nodes through a multi-level redundant backup strategy to ensure the continuous and stable operation of the network. At the same time, the hierarchical design of backup nodes includes primary, secondary and hot backup states, which further improves the fault tolerance of the system. Through this fault management and backup mechanism, the risk of network interruption and data loss is greatly reduced, and transmission efficiency and data availability are significantly improved.

[0231] AI is used to intelligently detect abnormal network behavior at each node in the network transmission path, and a hierarchical disposal strategy is implemented for abnormal network behavior to maintain the security of the network transmission path, including:

[0232] Detect abnormal network behavior based on the joint model of Transformer and Autoencoder:

[0233] Transformer encoding module:

[0234] Extract the characteristics of node transmission traffic , use the embedding layer to map features to high-dimensional space, and the multi-head attention mechanism to extract key temporal features:

[0235] ,in, , , , , They are query, key, and value vector three dimensions, time step, and value respectively;

[0236] Capture high-dimensional features of global temporal dependencies;

[0237] Autoencoder decoding module:

[0238] Get high-dimensional features;

[0239] Use fully connected layers to restore high-dimensional features to the original space;

[0240] Minimize the reconstruction error: ,in, is the number of features, It is a feature of reconstruction;

[0241] Anomaly Detection Module:

[0242] Calculate the mean of the extracted node transmission traffic characteristics and standard deviation ;

[0243] calculate , recorded as the abnormal score;

[0244] Set anomaly thresholds;

[0245] If the anomaly score ≧ the anomaly threshold, the network behavior is abnormal;

[0246] If the anomaly score ≦ anomaly threshold, the network behavior is normal;

[0247] When abnormal network behavior is detected, an alarm message is generated and uploaded to the security management center of the engineering supervision platform;

[0248] The moment when the abnormal network behavior is detected is recorded as the first moment;

[0249] Set abnormal alarm period;

[0250] Record the time after the first moment and the interval of the alarm period as the second moment;

[0251] At the second moment, it is detected whether the abnormal network behavior has ended. If the abnormal network behavior has not ended, the abnormal network behavior is automatically terminated.

[0252] Through intelligent monitoring and hierarchical response, the system can accurately identify abnormal network behaviors, such as frequent access and unknown IP access. The system takes targeted disposal measures for different levels of threats. Minor anomalies alert administrators through alarms, while major threats trigger automatic blocking mechanisms to prevent malicious behaviors from affecting system operations. Through this hierarchical disposal strategy, the platform can achieve efficient management of security incidents while minimizing interference with normal business operations and providing lasting security protection for transmission paths.

[0253] Embodiment 2, a system for information transmission method based on an engineering supervision platform, comprising:

[0254] In this embodiment, refer to Figure 2 .

[0255] The session management module generates and maintains the sessions between the on-site supervisors and the project managers;

[0256] Network monitoring and traffic control module, monitoring bandwidth and packet loss rate, dynamically adjusting encryption strength;

[0257] The data classification and compression module classifies the construction data by category and executes the corresponding compression algorithm;

[0258] Key management module, generates and updates master keys and session keys, and distributes execution keys;

[0259] Data encryption and signature module, realizing double-layer encryption and digital signature to ensure data security;

[0260] Data transmission and fault handling module, which manages data encryption transmission, monitors node health, and performs fault redundancy backup;

[0261] In this embodiment, refer to Figure 3 ;

[0262] Abnormal behavior detection and processing module, identifying abnormal access and unknown IP, and implementing hierarchical disposal strategies;

[0263] The blockchain logging module records session logs to ensure that data cannot be tampered with;

[0264] User rights management module, which controls user rights and ensures data access security;

[0265] The security management center handles network anomalies and fault alarms and provides system-level security protection.

[0266] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0267] The above are only preferred embodiments of the present invention. It should be pointed out that, for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as within the scope of protection of the present invention.

Claims

1. An information transmission method based on an engineering supervision platform, characterized in that: include: The on-site supervisor sends the construction data to the project manager through the engineering supervision platform, and the engineering supervision platform generates a conversation between the on-site supervisor and the project manager; During the session: Get the current bandwidth of the engineering supervision platform transmission network and packet loss rate ; Execute adaptive traffic control strategy according to bandwidth and packet loss rate to adjust the encryption strength of construction data; Obtain the construction data uploaded by the on-site supervisor, implement the classification compression preprocessing strategy, and classify, compress and robustly encode the construction data; Set the master key and session key; According to the master key and the session key, execute the key update strategy to update the master key and the session key; Get the session key for this session, recorded as the execution key; According to the execution key and construction data, a double-layer encryption strategy is implemented to generate a digital signature, and the construction data, execution key and digital signature are encrypted; Obtaining a network transmission path for this session, where the network transmission path consists of multiple nodes; Send the encrypted construction data, execution key and digital signature to the project manager via the network transmission path; Execute the fault monitoring strategy for each node in the network transmission path to determine whether the node is faulty; If a faulty node is detected, a multi-level redundant backup strategy is implemented to replace the faulty node with a backup node. Use AI to intelligently detect abnormal network behavior at each node in the network transmission path, and implement hierarchical disposal strategies for abnormal network behavior to maintain the security of the network transmission path; This session is recorded using blockchain logs.

2. The information transmission method based on the engineering supervision platform according to claim 1 is characterized in that: The adaptive flow control strategy is executed according to the bandwidth and the packet loss rate to adjust the encryption strength of the construction data, including: Setting bandwidth weight factor ; Set the packet loss rate weight factor ; Get the maximum bandwidth of the engineering supervision platform to transmit data ; Execute the following formula to calculate the encryption strength ; ,in, , , .

3. The information transmission method based on the engineering supervision platform according to claim 1 is characterized in that: The method of obtaining the construction data uploaded by the on-site supervisor, executing the classification compression preprocessing strategy, and classifying, compressing and robustly encoding the construction data includes: Said construction data is divided into the categories of project schedule, quality control, cost management and safety management; For any type of construction data, obtain the compression algorithm that the engineering supervision platform matches for this type of construction data, and obtain the compression rate of the compression algorithm ; Get the file of construction data ; Execute the classification compression preprocessing strategy to compress the construction data into ; Robust Coding: Obtain a standard check matrix H; Use Gaussian elimination method to decompose the check matrix H to obtain the first matrix P; ,in, The first matrix The transpose of for The identity matrix of Calculate the generated matrix ,in, for The identity matrix of Calculate the codeword after robust coding .

4. The information transmission method based on the engineering supervision platform according to claim 1 is characterized in that: The step of executing a key update strategy according to the master key and the session key to update the master key and the session key includes: Every time the on-site supervisor uploads construction data to the engineering supervision platform, the session key for this session is generated based on the current master key, specifically: Get the session of this session ; Get the current master key ; use The algorithm calculates the session key for this session ; Set the master key update interval ; Get the time when the master key was last updated ; exist Always update the master key, using The algorithm obtains the updated master key .

5. The information transmission method based on the engineering supervision platform according to claim 3 is characterized in that: The method of executing a double-layer encryption strategy based on the execution key and the construction data, generating a digital signature, and encrypting the construction data, the execution key and the digital signature includes: Obtain the codeword obtained after robust coding; Obtain the private key of the on-site supervisor, use the private key to asymmetrically encrypt the codeword, and obtain a digital signature; Symmetrically encrypt the codeword using the execution key; Obtain the public key of the project manager and use the public key to asymmetrically encrypt the execution key.

6. The information transmission method based on the engineering supervision platform according to claim 5 is characterized in that: The encrypted construction data, execution key and digital signature are sent to the project manager via a network transmission path, including: For any on-site supervisor: Get the digital signature uploaded by the on-site supervisor , encrypted codeword and the encrypted execution key ; Calculating cryptographic hash values , get the unique ID of the on-site supervisor ; Obtain the face recognition image of the on-site supervisor and perform the Gaussian blur algorithm on the face recognition image to protect privacy. Specifically: Establish a two-dimensional coordinate system at the center of the face recognition image, where the face recognition image is a square, and length = width = 2q; Calculate the pixel value of each pixel on the face recognition image after performing the Gaussian blur algorithm: ,in, The horizontal and vertical coordinates The pixel value of is the blur intensity; Get the face recognition image with Gaussian blur algorithm ; Obtain the ID number of the on-site supervisor , the time of uploading data and location information of on-site supervisors ; Setting the data block of the on-site supervisor ; Get the data blocks of all on-site supervisors, implement the group upload strategy, and upload the data blocks to the blockchain network in groups. Specifically: Set group size ; Divide the acquired data blocks of all on-site supervisors into Groups, each containing data blocks; Pack each set of data and calculate its overall hash value , in, is a set of data blocks, , , the calculated overall hash value is stored in the blockchain summary node; The blockchain aggregation node downloads all data uploaded to the blockchain through distributed storage; The project manager enters the identity information of the on-site supervisor, the time of uploading the data, and the location information of the on-site supervisor into the blockchain to query the data blocks required.

7. The information transmission method based on the engineering supervision platform according to claim 1 is characterized in that: The executing of the fault monitoring strategy on each node in the network transmission path to determine whether the node is faulty includes: For each node in the network transmission path, set the node health status ; Get the resource utilization of the node ; Get the response time of a node ; Get the load level of a node ; Execute the following formula to calculate ; ,in, , and are the resource utilization weight, response time weight and load level weight respectively, and ; Setting health thresholds ; Compare the node's health status to the health threshold; like , then the node is healthy; like , the node fails.

8. The information transmission method based on the engineering supervision platform according to claim 7 is characterized in that: If a failed node is detected, a multi-level redundant backup strategy is executed to replace the failed node with a backup node, including: Set the backup radius; Get the node to monitor the fault, and make a circle with the location of the faulty node as the center and the backup radius as the radius as the backup area; Get all idle nodes in the backup area, calculate the distance from the failed node, sort them by distance, select the first three idle nodes, and record them as the first node, the second node, and the third node respectively; activating the first node to replace the failed node; Notify the second node to start the high-availability HA cluster; Set the third node to hot standby status.

9. The information transmission method based on the engineering supervision platform according to claim 1 is characterized in that: The method uses AI to intelligently detect abnormal network behavior at each node in the network transmission path, and implements a hierarchical disposal strategy for abnormal network behavior to maintain the security of the network transmission path, including: Detect abnormal network behavior based on the joint model of Transformer and Autoencoder: Transformer encoding module: Extract the characteristics of node transmission traffic , use the embedding layer to map features to high-dimensional space, and the multi-head attention mechanism to extract key temporal features: ,in, , , , , are query, key, value vector dimensions, time steps, and values, respectively; Capture high-dimensional features of global temporal dependencies; Autoencoder decoding module: Get high-dimensional features; Use fully connected layers to restore high-dimensional features to the original space; Minimize the reconstruction error: ,in, is the number of features, It is a feature of reconstruction; Anomaly Detection Module: Calculate the mean of the extracted node transmission traffic characteristics and standard deviation ; calculate , recorded as the abnormal score; Set an abnormal threshold. If the abnormal score ≧ the abnormal threshold, the network behavior is abnormal. If the anomaly score ≦ anomaly threshold, the network behavior is normal; When abnormal network behavior is detected, an alarm message is generated and uploaded to the security management center of the engineering supervision platform; The moment when the abnormal network behavior is detected is recorded as the first moment; Set abnormal alarm period; Record the time after the first moment and the interval of the alarm period as the second moment; At the second moment, it is detected whether the abnormal network behavior has ended. If the abnormal network behavior has not ended, the abnormal network behavior is automatically terminated.

10. A system for implementing the information transmission method based on the engineering supervision platform of claim 1, characterized in that: include: The session management module generates and maintains the sessions between the on-site supervisors and the project managers; Network monitoring and traffic control module, monitoring bandwidth and packet loss rate, dynamically adjusting encryption strength; The data classification and compression module classifies the construction data by category and executes the corresponding compression algorithm; Key management module, generates and updates master keys and session keys, and distributes execution keys; Data encryption and signature module, realizing double-layer encryption and digital signature to ensure data security; Data transmission and fault handling module, which manages data encryption transmission, monitors node health, and performs fault redundancy backup; Abnormal behavior detection and processing module, identifying abnormal access and unknown IP, and implementing hierarchical disposal strategies; The blockchain logging module records session logs to ensure that data cannot be tampered with; User rights management module, which controls user rights and ensures data access security; The security management center handles network anomalies and fault alarms and provides system-level security protection.

Images