A set-top box control method and system

Abstract

The application discloses a set top box control method and system, and relates to the technical field of data processing.The method comprises the following steps: generating a control instruction, generating a dynamic check code, and acquiring a main channel and a backup channel; acquiring a historical data processing period, acquiring a historical response time sequence and a historical calling time sequence, acquiring a historical channel stability index based on a stability model, the historical response time sequence and the historical calling time sequence, acquiring a correction ratio according to the historical channel stability index, and acquiring n' according to the correction ratio and n; acquiring a current response time sequence of the main channel and a current calling time sequence of the backup channel in a current data processing period; and acquiring a risk control strategy according to the historical response time sequence, the historical calling time sequence, the current response time sequence and the current calling time sequence.The application has the advantages of dynamic adjustment, good control effect and intelligent self-optimization.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, in particular to a set-top box control method and system. BACKGROUND

[0002] In the current control process of set-top boxes in complex home network environments, there is a problem that the instruction transmission reliability and response efficiency cannot be considered at the same time. In some cases, the existing technology adopts a double-channel fault-tolerant mechanism (such as main WiFi + backup infrared), and usually adopts a fixed delay switching control method - when the main channel does not respond for a preset fixed time (n seconds), the backup channel is started. However, this control method has many defects.

[0003] Specifically, the home network is affected by factors such as router performance, signal shielding, and multi-device interference. The response delay of the main channel presents strong time-varying fluctuations (such as the response time suddenly changes from milliseconds to seconds), and the fixed switching delay cannot dynamically adapt to changes in channel quality. If the value of n is set too long, the main channel may still be waiting when it has actually failed, resulting in delayed user operation response or even lost instructions. If the value of n is too short, the system will frequently switch between the two channels without effect (such as when the main channel resumes transmission after a short fluctuation, the backup channel has already been started, causing repeated transmission of check codes). This not only increases system power consumption and resource conflict risk, but also reduces overall efficiency due to the redundant use of backup channels (such as low-speed infrared). Further, the existing solution lacks a quantitative evaluation mechanism for historical channel performance, and cannot optimize the switching strategy based on long-term operation data. In the case of continuous deterioration of channel quality, it cannot identify and actively shorten the switching delay in advance to avoid response interruption. SUMMARY

[0004] In order to solve the technical problems of rigidity of fixed delay strategy, resource waste of invalid switching, and risk-free suppression control strategy for sudden channel degradation, there is an urgent need for a control method that can real-time perceive channel stability, dynamically adjust the switching time threshold, and actively implement risk control through multi-period data analysis. Therefore, the present application provides a set-top box control method and system.

[0005] The application discloses a set-top box control method, which comprises the following steps: generating a control instruction according to a user operation, generating a dynamic check code according to the control instruction, and acquiring a main channel and a backup channel for data transmission; acquiring a previous data processing period before a current data processing period as a historical data processing period, transmitting the dynamic check code through the main channel after the dynamic check code is acquired in the historical data processing period, calling the backup channel to transmit the dynamic check code when the main channel is unresponsive for n seconds, acquiring a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, acquiring a historical channel stability index based on a stability model, the historical response time sequence and the historical calling time sequence, acquiring a correction ratio based on the historical channel stability index, and acquiring n' based on the correction ratio and n; in the current data processing period, transmitting the dynamic check code through the main channel after the dynamic check code is acquired, calling the backup channel to transmit the dynamic check code when the main channel is unresponsive for n' seconds, and acquiring a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period; and acquiring a risk control strategy based on the historical response time sequence, the historical calling time sequence, the current response time sequence and the current calling time sequence.

[0006] Optionally, acquiring the risk control strategy based on the historical response time sequence, the historical calling time sequence, the current response time sequence and the current calling time sequence comprises the following steps: acquiring a historical dual-channel efficiency based on the historical response time sequence and the historical calling time sequence; acquiring a current dual-channel efficiency based on the current response time sequence and the current calling time sequence; and acquiring the risk control strategy based on the historical dual-channel efficiency and the current dual-channel efficiency.

[0007] Optionally, acquiring the historical dual-channel efficiency based on the historical response time sequence and the historical calling time sequence comprises the following steps: counting a total number of backup channel calling events based on the historical calling time sequence, identifying the occurrence number of dual-channel effective events for each backup channel calling transmission event in the historical data processing period, and dividing the occurrence number of the dual-channel effective events by the total number of the backup channel calling events to obtain the historical dual-channel efficiency.

[0008] Optionally, identifying the occurrence number of dual-channel effective events for each backup channel calling transmission event in the historical data processing period comprises the following steps: starting backup channel transmission of the dynamic check code when the main channel is unresponsive for n seconds, and recording as dual-channel effective if the main channel has not successfully transmitted the dynamic check code before the backup channel transmitted dynamic check code is received and verified; starting backup channel transmission of the dynamic check code when the main channel is unresponsive for n seconds, and recording as dual-channel ineffective if the main channel successfully transmits the dynamic check code before the backup channel transmitted dynamic check code is received and verified; and counting the occurrence number of the dual-channel effective events in the historical data processing period.

[0009] Optionally, the risk index is obtained according to the historical dual-channel efficiency and the current dual-channel efficiency, and the risk control strategy comprises: comparing the difference between the historical dual-channel efficiency and the current dual-channel efficiency; if the current dual-channel efficiency is lower than the historical dual-channel efficiency and the decline amplitude exceeds a safe threshold range, determining that it is in a high-risk state, and when in the high-risk state, reducing the value of n in the next data processing cycle to make the backup channel calling time advance, thereby forming the risk control strategy; if the current dual-channel efficiency is higher than or equal to the historical dual-channel efficiency, determining that it is in a low-risk state, and when in the low-risk state, increasing the value of n in the next data processing cycle to make the backup channel calling time delay, thereby forming the risk control strategy.

[0010] Optionally, the stability model in the historical channel stability index is obtained based on the stability model, the historical response time sequence and the historical calling time sequence, and the stability model is expressed as: wherein, is the historical channel stability index, is the number of times of backup channel calling in the historical calling time sequence, is a standard threshold value of the difference between the time consumption of adjacent two transmissions in the channel, is the number of responses of the main channel in the historical response time sequence, is the response time length of the i+1th main channel in the historical response time sequence, is the response time length of the ith main channel in the historical response time sequence, is the calling time length of the i+1th backup channel in the historical calling time sequence, is the calling time length of the ith backup channel in the historical calling time sequence.

[0011] Optionally, the correction ratio is obtained according to the historical channel stability index, which comprises: obtaining a preset threshold value, if the historical channel stability index exceeds the preset threshold value, calculating the correction ratio according to the size of the historical channel stability index exceeding the preset threshold value; if the historical channel stability index does not exceed the preset threshold value, calculating the correction ratio according to the size of the preset threshold value exceeding the historical channel stability index.

[0012] Optionally, the dynamic check code comprises an operation time stamp and a user identity.

[0013] The application further provides a set-top box control system, which comprises: a data generation module, configured to generate a control instruction according to a user operation, generate a dynamic check code according to the control instruction, and acquire a main channel and a backup channel for data transmission; a data processing module, configured to acquire a previous data processing period as a historical data processing period, acquire the dynamic check code, and transmit the dynamic check code through the main channel in the historical data processing period, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n seconds, acquire a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, acquire a historical channel stability index based on a stability model, the historical response time sequence and the historical calling time sequence, acquire a correction ratio based on the historical channel stability index, and acquire n' based on the correction ratio and n; a first control module, configured to acquire the dynamic check code, transmit the dynamic check code through the main channel in a current data processing period, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n' seconds, acquire a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period; and a second control module, configured to acquire a risk control strategy based on the historical response time sequence, the historical calling time sequence, the current response time sequence and the current calling time sequence.

[0014] Optionally, the second control module is further configured to: acquire a historical dual-channel efficiency based on the historical response time sequence and the historical calling time sequence; acquire a current dual-channel efficiency based on the current response time sequence and the current calling time sequence; and acquire the risk control strategy based on a risk index acquired based on the historical dual-channel efficiency and the current dual-channel efficiency.

[0015] The application has the following beneficial effects:

[0016] In the whole set top box control method and the method, the switching waiting time is intelligently corrected based on the historical channel stability, the fluctuation characteristics (such as the adjacent transmission time difference) of the historical response / call time sequence are quantitatively analyzed by using the stability model, the correction ratio is used to dynamically adjust n value to n', so that the standby channel starting opportunity is no longer fixed but is flexibly adapted to the current network condition - when the historical channel stability is delayed, the main channel waiting time is lengthened, the high-speed channel is fully utilized to reduce redundant switching; on the contrary, when the network is deteriorated, the waiting time is shortened, and the standby channel is started in advance to avoid command loss. Further, precise risk early warning is realized by the dual-channel efficiency, when the effectiveness index of the current period is compared with that of the historical period, when the efficiency drops sharply, it is determined that the risk is high, and the n value is shortened in the next period (response to channel mutation), and when the efficiency is flat or improved, the n value is lengthened (optimizing resource allocation). Further, a closed-loop control optimization system is formed, the response / call time sequence is continuously collected in units of data processing period, short-term self-adaptation is realized through stability correction, and long-term optimization is realized through efficiency risk strategy, which avoids the problem of fixed delay rigidity, and completely solves the problems of increased power consumption, channel conflict and transmission efficiency reduction caused by invalid switching, especially for sudden network interference, millisecond-level response guarantee is realized, and finally the dynamic balance of reliability and response speed is achieved. BRIEF DESCRIPTION OF DRAWINGS

[0017] In order to more clearly illustrate the specific embodiments of the present application or the technical solutions in the prior art, the drawings needed in the specific embodiments or the prior art description will be briefly introduced below. In all the drawings, similar elements or parts are generally identified by similar reference numerals. In the drawings, each element or part is not necessarily drawn according to the actual proportion.

[0018] Figure 1 Part of the flowchart of S2 in the set top box control method of the present application;

[0019] Figure 2 Part of the flowchart of S4 in the set top box control method of the present application;

[0020] Figure 3 Another part of the flowchart of S4 in the set top box control method of the present application;

[0021] Figure 4 Step diagram of the set top box control method of the present application;

[0022] Figure 5 Part of the step diagram of S4 in the set top box control method of the present application;

[0023] Figure 6 Step diagram of S41 in the set top box control method of the present application;

[0024] Figure 7A step schematic diagram for S411 in the set top box control method of the present application;

[0025] Figure 8 A step schematic diagram for S43 in the set top box control method of the present application;

[0026] Figure 9 A step schematic diagram for S2 in the set top box control method of the present application. DETAILED DESCRIPTION

[0027] For the purpose, technical solutions and advantages of the embodiments of the present application to be clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings herein can be arranged and designed in various different configurations.

[0028] Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present application.

[0029] It should be noted that: similar reference numbers and letters represent similar items in the following drawings, therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. In addition, the terms "first", "second", etc. are only used for differentiation in description, and cannot be understood as indicating or implying relative importance.

[0030] As shown in Figure 1 , Figure 2 , Figure 3 and Figure 4 , a set top box control method is provided, comprising:

[0031] S1, generating a control instruction according to a user operation, generating a dynamic check code according to the control instruction, and acquiring a main channel and a backup channel for data transmission;

[0032] S2, obtaining a previous data processing period as a historical data processing period before the current data processing period, in the historical data processing period, obtaining the dynamic check code and transmitting through the main channel, calling the backup channel to transmit the dynamic check code when the main channel is not responsive for n seconds, and obtaining a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, and obtaining a historical channel stability index based on the stability model, the historical response time sequence and the historical calling time sequence, and obtaining a correction ratio according to the historical channel stability index, and obtaining n' according to the correction ratio and n;

[0033] S3, in the current data processing period, obtaining the dynamic check code and transmitting through the main channel, calling the backup channel to transmit the dynamic check code when the main channel is not responsive for n' seconds, and obtaining a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period;

[0034] S4, obtaining a risk control strategy according to the historical response time sequence, the historical calling time sequence, the current response time sequence and the current calling time sequence.

[0035] In the embodiment, it should be noted that in S1, in response to a user operation, for example, the user presses the channel switching key through the remote control, inputs the instruction through the voice or inputs the instruction through the shortcut key, the operation intention is first captured and converted into specific electrical signal data (control instruction) that can be understood by the set top box processor. In order to enhance the security of instruction transmission and prevent replay attacks, a dynamic check code is dynamically generated at the same time as the basic control instruction is generated. This dynamic check code is not fixed, but is generated according to the content of the control instruction and combined with additional variable security elements. For example, it will contain an accurate operation timestamp (accurate to milliseconds) and user identity information (such as the unique code of a specific machine or account ID) initiating the operation. This design ensures that the check code corresponding to each control instruction is unique and time-limited, so that even if the same operation instruction is repeatedly sent or maliciously intercepted, due to the difference in time stamp and identity, the generated check code is completely different, thereby effectively resisting replay and impersonation risks.

[0036] Further, the physical path of the instruction transmission is determined. A dual-channel guarantee mechanism is preset: one is a high-speed main channel (a typical representative is the Wi-Fi network available in the current environment), and the other is a reliable backup channel (a common one is infrared transmission). Before the instruction transmission is performed, the available state information of the two channels is obtained. The acquisition here not only confirms whether the channel exists, but also contains the perception of the current network environment: for example, it is checked whether the Wi-Fi module has been normally connected to the home router and the signal strength is available, and at the same time, it is checked whether the infrared emission component is in standby working state. The two channels have significant differences in physical characteristics (Wi-Fi relies on radio electromagnetic waves, and infrared relies on optical signals) and transmission performance (usually the Wi-Fi rate is much higher than that of infrared). Identifying and preparing the two heterogeneous channels lays a physical foundation for the set-top box control process in the subsequent steps.

[0037] In S2, the historical running data is used to optimize the control strategy of the current period. It first defines the historical data processing period, that is, the complete running period before the current operation period (for example, it can be defined every minute, every ten minutes, or every processing of a number of user instructions as a period). In this period marked as history, the traditional dual-channel fault-tolerant logic is strictly followed: the instruction and dynamic check code are first transmitted through the main channel (such as WiFi). Key time data in each instruction transmission process is accurately recorded: this includes the response time of the main channel each time (from the response time to the time when the set-top box confirmation is received) to form a "historical response time sequence"; and when the main channel fails to respond in time due to delay or interruption (after waiting for a fixed n seconds), the calling time point of the backup channel (such as infrared) and its transmission time are triggered, which constitute a "historical calling time sequence". These time sequence data essentially reflect the average performance, fluctuation situation (such as fast and slow response time) of the main channel and the frequency and timing of the backup channel being enabled in the historical period.

[0038] Further, the channel stability evaluation and the dynamic correction of the switching threshold. The valuable information is mined from the historical time series to guide the current control; a built-in stability model is used, which comprehensively analyzes all the "historical response time series" and "historical call time series" collected in the historical period. The model finally calculates a quantitative historical channel stability index by examining the change amplitude of adjacent data points in the sequence and the number of times the standby channel is called. The high and low of the index value intuitively reflects the stability degree of the overall performance of the channel in the historical period: the high index value means that the channel quality is good and the fluctuation is small, and the low index value means that the channel is unstable or the quality is poor. Then, a dynamic correction coefficient (correction ratio) is calculated according to the stability index. The core logic is: when the historical stability is high (exceeding the preset standard value), it means that the main channel is reliable in the historical environment, and the main channel can be trusted for a longer time, so the correction ratio will be greater than 1, which will result in the new waiting threshold n' greater than the original n; on the contrary, when the historical stability is low, it means that the main channel has poor historical performance, and the standby channel needs to be started in advance more cautiously, so the correction ratio will be less than 1, which will result in the new waiting threshold n' less than the original n. Finally, multiply the original fixed value n by the calculated correction ratio and perform the necessary rounding, and the dynamic switching waiting threshold n' suitable for the current data processing period is obtained. This n' is no longer a fixed value, but a key parameter that is self-adapted based on the historical running performance.

[0039] In S3, the dynamic adjustment result obtained based on the historical data analysis forms the control logic in the current data processing period. Specifically, in the current data processing period, after the user operation instruction and the corresponding dynamic verification code are generated, the main channel is preferred to be used for transmission. However, the waiting time threshold for judging whether the main channel is invalid is no longer fixed n seconds, but the dynamic threshold n' seconds calculated in the previous step S2. This means that the length of time for waiting for the response of the main channel can be "flexibly" determined according to the historical channel stability performance - the historical stability is good, n' can be longer, and vice versa. In this waiting period, if the main channel successfully responds and completes the transmission within n' seconds, the standby channel will not be triggered. Only when the main channel does not return a valid response after sending for more than n' seconds, the standby channel (such as infrared) will be started to transmit the dynamic verification code as a protection channel when the main channel fails. At the same time, in the whole instruction transmission process in the current period, the key time information of all transmission events will be collected and stored in real time and in detail, just like recording historical data: this includes the specific time length of each successful response of the main channel (constituting the "current response time series"), and the time when each standby channel is called due to the timeout of the main channel and the transmission time (constituting the "current call time series").

[0040] Further, S3 provides a real-time monitoring window and a data basis for closed-loop feedback. By using a dynamically adjusted n' value, the behavior in the current cycle is adaptive: if the history shows that the channel environment is reliable (n' becomes larger), more time is given to the main channel to try to recover, reducing the situation of blind switching to the low-speed backup channel due to temporary fluctuations in the channel, improving efficiency and reducing redundant switching overhead; on the contrary, if the history shows that the environment is poor or unstable (n' becomes smaller), the backup channel is enabled earlier, improving the reliability of successful command transmission in the current poor environment, reducing the risk of user operation timeout or loss. More importantly, by collecting the response time sequence and the call time sequence in the current cycle, S3 provides the latest and most direct observation data of the running state for the subsequent S4 step of risk control strategy making. These current data, together with the historical data used by S2, are comprehensively analyzed in S4 to assess whether the current channel environment is improving or deteriorating compared to the history, and then guide the direction of the n value adjustment strategy in the next cycle (for example, in S4, judge whether to further advance or delay the switching time), thereby forming a closed-loop optimization.

[0041] In S4, by comparing the history with the current running data, the core performance indicator, dual-channel efficiency, is used to formulate a risk control strategy. First, the dual-channel efficiency is calculated for the historical cycle and the current cycle, respectively. The calculation of this efficiency depends on the calling of the backup channel. Specifically, for the cycle under consideration (whether historical or current), the total number of times the backup channel is actually called in the cycle (i.e., the number of times the backup is started after the main channel times out for n seconds / n' seconds) is counted. Then, each backup channel calling event is analyzed in detail: whether the calling is really effective in making up for the failure of the main channel (i.e., a dual-channel effective event). The core criterion is: after the backup channel starts transmitting the dynamic check code, and before the data transmitted by the backup channel is received and successfully verified by the set-top box, if the main channel has always failed to successfully transmit its check code, it is proved that the backup channel is necessary and successfully completes the command transmission (marked as effective); otherwise, if the main channel suddenly recovers and successfully sends before the backup transmission is completed, it means that the calling of the backup channel is unnecessary (marked as ineffective), which is a redundant call. By strictly counting the number of effective backup calling events in each cycle and dividing it by the total number of backup calling events in the cycle, an important indicator of the efficiency of channel cooperation, dual-channel efficiency, is obtained. The higher the index, the more accurate the decision to call the backup channel in the history or the current environment (avoiding ineffective switching), the higher the reliability; on the contrary, the lower the index, the more unnecessary switching waste or unstable channel environment.

[0042] Further, the calculated historical dual-channel efficiency is compared with the current dual-channel efficiency for analysis, so as to actively identify the network environment risk and adjust the control strategy in real time. The change range and direction of the efficiency of the current period relative to the historical reference period are evaluated: if the current dual-channel efficiency is significantly lower than the historical level (the decrease range exceeds the set safety threshold range), it is determined that the current is in a high-risk state. This state usually means that the channel environment has undergone an adverse mutation (such as the sudden emergence of strong interference), and the effectiveness of the standby channel decision decreases sharply. To deal with this risk, the n value will be shortened in the next data processing period, so that the standby channel is started more quickly in the future when the main channel is unresponsive, with the purpose of guaranteeing the transmission reliability in advance and avoiding the loss of instructions due to delayed decision-making. On the contrary, if the current dual-channel efficiency is higher than or equal to the historical level, it is determined that the current is in a low-risk state, indicating that the channel is stable or improved, and the standby decision is reasonable. At this time, in order to maximize the use of the more efficient main channel, reduce the probability of invalid start of the low-speed standby channel, and improve the overall efficiency, the n value will be extended in the next data processing period, giving the main channel a longer tolerance time to try to recover. In this way, S4 realizes dynamic early warning and active intervention on the running risk through continuous monitoring and comparison of the core efficiency indicators, forms a closed-loop feedback of strategy adjustment, and ensures that the reliability and efficiency are dynamically balanced under different channel conditions.

[0043] In summary, in the whole set-top box control method and the method, the switching waiting time is intelligently corrected based on the historical channel stability, the fluctuation characteristics (such as the difference between adjacent transmission time consumptions) of the historical response / call time sequence are quantitatively analyzed by using the stability model, the correction ratio is generated to dynamically adjust the n value to n', so that the standby channel starting time is no longer fixed but flexibly adapts to the current network condition - when the historical channel stability is prolonged, the main channel waiting time is prolonged, the high-speed channel is fully utilized to reduce redundant switching; on the contrary, when the network is deteriorated, the waiting time is shortened, the standby channel is started in advance to avoid instruction loss. Further, precise risk early warning is realized through the dual-channel efficiency, the effectiveness indicators of the current period and the historical period are compared, when the efficiency drops sharply, it is determined that the risk is high and the n value is shortened in the next period (responding to channel mutation), and when the efficiency is flat or improved, the n value is extended (optimizing resource allocation). Further, a closed-loop control optimization system is formed, the response / call time sequence is continuously collected in units of data processing periods, short-term self-adaptation is realized through stability correction, and long-term optimization is realized through the efficiency risk strategy, which avoids the problem of fixed delay rigidity, completely solves the problems of increased power consumption, channel conflict and decreased transmission efficiency caused by invalid switching, especially for sudden network interference, millisecond-level response guarantee is realized, and finally the dynamic balance of reliability and response speed is achieved.

[0044] As Figure 2 , Figure 3 and Figure 5As shown, in one embodiment, the acquiring the risk control strategy according to the historical response time sequence, the historical call time sequence, the current response time sequence and the current call time sequence in S4 comprises:

[0045] S41, acquiring a historical dual-channel efficiency according to the historical response time sequence and the historical call time sequence;

[0046] S42, acquiring a current dual-channel efficiency according to the current response time sequence and the current call time sequence;

[0047] S43, acquiring a risk index according to the historical dual-channel efficiency and the current dual-channel efficiency to acquire the risk control strategy.

[0048] In the present embodiment, it is to be noted that in S41, the actual effective degree of the standby channel call in the historical period is quantified. Firstly, the total number of times that the standby channel is actually enabled in the period is counted from the historical call time sequence (i.e. the number of times that the standby is started due to the timeout of the main channel for n seconds). Then, each standby call event is analyzed one by one: the core is to determine whether this standby start has really solved the problem of non-response of the main channel. The determination standard is very critical and depends on accurate time recording - from the time when the standby channel transmission of the dynamic check code is started until the check code of the standby transmission is successfully received and verified by the set-top box, if the main channel has always failed to successfully transmit its check code, it means that the standby start is necessary and the only channel for successful delivery of instructions, and this event is counted as "effective". On the contrary, if the main channel suddenly recovers and successfully transmits the check code first or at the same time within this critical window period, this standby start is invalid (or redundant), because it does not play a key remedial role. Finally, the number of all standby call events determined as "effective" in the entire historical period is divided by the total number of standby call events, and the historical dual-channel efficiency is obtained. This ratio intuitively reflects the accuracy of the switching decision based on the n-second strategy in the historical period: the closer to 1, the more necessary the standby is almost every time it is started; the lower, the more unnecessary switching waste exists.

[0049] In S42, the calculation process in S41 is completely isomorphic to the current data processing period, the purpose of real-time evaluation of the actual running efficiency of the channel under the current strategy (using dynamic threshold n'). The current response time sequence and the current call time sequence collected and recorded in real time in S3 are used. Similarly, the total number of calls to the standby channel in the current period (activated due to the timeout of the main channel for n' seconds) is first calculated from the current call time sequence. Then, according to the same judgment logic as in S41, for each standby activation event in the current period: during the period from the standby activation to the successful verification of the verification code by the set-top box, whether the main channel successfully resumes transmission or not. If it does not resume, it is recorded as valid, and if it does, it is recorded as invalid. Finally, the number of all valid standby call events in the current period is divided by the total number of standby call events to obtain the current dual-channel efficiency. This indicator reflects the adaptability of the dynamic switching threshold n' in the current actual network environment.

[0050] In S43, the relative changes of the historical and current dual-channel efficiency are analyzed, and the network risk is predicted and intervention measures are developed accordingly. First, the current dual-channel efficiency calculated in S42 is compared with the historical dual-channel efficiency provided in S41, focusing on the difference between the current value and the historical value. According to the change direction of the difference, different control strategies are adopted in the upcoming next data processing period. For example, actively reducing the value of n (i.e., shortening the upper limit of the time for the main channel), forcing the standby channel to start early, and prioritizing the basic reliability of command transmission, even if it may slightly increase the probability of invalid switching. Conversely, increasing the value of n (giving the main channel a longer tolerance period) is intended to allow the high-speed main channel to complete transmission as much as possible, minimizing unnecessary activation of the low-speed standby, and thus improving overall response speed and resource utilization efficiency. Through this differentiated regulation based on the change in efficiency, S43 achieves sensitive perception and proactive response to network risks, ensuring that the optimal performance balance is maintained in a changing environment.

[0051] As shown in Figure 2 and Figure 6 In one embodiment, obtaining the historical dual-channel efficiency in S41 based on the historical response time sequence and the historical call time sequence includes:

[0052] S411, according to the historical call time sequence, the total number of standby channel calls is calculated, and for each standby channel call transmission event in the historical data processing period, the number of dual-channel effective events is identified and identified;

[0053] S412, the number of dual-channel effective events is divided by the total number of standby channel call events to obtain the historical dual-channel efficiency.

[0054] In this embodiment, it is noted that in S411, each backup channel activation event in the historical period is determined to confirm whether it actually played a remedial role. First, the historical call time sequence is searched to accurately obtain the specific time point of each backup activation event. Then, the event is analyzed in detail for associated behavior: the state of the main channel is investigated in the time window from after the backup channel activation transmits the dynamic check code until the set-top box successfully receives and checks the check code transmitted by the backup channel. If the main channel has always failed to successfully transmit its own dynamic check code during the entire key decision window, the backup activation is determined to be "effective" (marked as "double channel effective event"). This proves that the main channel has indeed failed during this period, and the activation of the backup channel is the only and successful remedial measure. Conversely, if the main channel successfully resumes transmission and delivers the check code before the backup channel transmission is completed and verified (for example, after a short delay, the main channel suddenly recovers, and its data is later than the backup activation but earlier than the backup completion), the backup activation is determined to be "ineffective". At this time, the backup channel not only does not play a key role, but also causes redundant transmission and even potential instruction conflict or resource waste. The above strict determination process is performed on all backup call events in the historical period.

[0055] In S412, after S411 completes the marking of all historical backup call events, S412 calculates the performance indicator, the historical double channel effective rate, based on the marking results. First, the total number of times the backup channel is actually called in the historical period is simply counted (the denominator). Second, the number of "effective" (i.e. "double channel effective event") determined in S411 is accurately counted (the numerator). Finally, the number of backup activation events marked as effective is divided by the total number of backup activation events in the period to obtain a ratio between 0 and 1, which is the historical double channel effective rate. This effective rate is not a simple call frequency, but reflects the accuracy of the decision under the fixed switching delay (n seconds) strategy adopted in the historical period. A high effective rate indicates that the backup activation in the historical strategy is always necessary and successful; while a low effective rate means that a large number of unnecessary switching occurs when the main channel still has recovery ability, exposing the risk of resource waste caused by the rigidity of the strategy. This indicator provides a key historical reference benchmark for subsequent S43 to compare network environment changes and develop risk control strategies.

[0056] As shown in Figure 2 and Figure 7 In one embodiment, the identification determination for each backup channel call transmission event in the historical data processing period in S411 and the identification of the number of double channel effective events include:

[0057] S411a, when the main channel is no response to start the standby channel transmission dynamic check code, if the standby channel transmission of dynamic check code is received before the check, the main channel always successfully transmitted dynamic check code, recorded as dual channel effective;

[0058] S411b, when the main channel is no response to start the standby channel transmission dynamic check code, if the standby channel transmission of dynamic check code is received before the check, the main channel successfully transmitted dynamic check code, recorded as dual channel invalid;

[0059] S411c, statistics history data processing period within the number of dual channel effective event.

[0060] In this embodiment, it should be noted that in S411a, in the process of instruction transmission, when the main channel fails to give a response after reaching the preset fixed time (n seconds), the standby channel (such as infrared) is started to send dynamic check code according to the strategy. The key point of judgment is that from the start of transmission of the standby channel, until the check code transmitted by the standby channel is finally successfully received by the check module of the set top box and the verification is completed, if the main channel (such as WiFi) continues to be in the state of incomplete transmission or complete non-response, that is, the check code of the main channel has not been successfully delivered to the set top box (the late delivery is meaningless). In this case, the start of the standby channel becomes the only feasible channel for the instruction to be delivered, successfully ensuring the timeliness and loss prevention of the instruction. Therefore, this event is marked as "dual channel effective". This indicates that the intervention of the standby channel is necessary and successful, and the switching decision at this moment accurately identifies the real failure of the main channel.

[0061] In S411b, the opposite case of S411a is the invalid standby start event. Specifically, because the main channel is timed out for n seconds, the standby channel is started to transmit, and before the check code transmitted by the standby channel is successfully received and verified by the set top box, the main channel suddenly recovers from failure and successfully transmits its own dynamic check code (for example, the temporary interference is eliminated and the transmission speed of the main channel is faster than that of the standby channel). At this time, although the standby channel has been called and data has been transmitted, its operation is actually redundant because the high-speed main channel has successfully recovered the service. More than that, in the case of the main channel transmitting later or at the same time, the check code may be repeated, the receiving end may be conflicted, or resources may be wasted. Therefore, this event is marked as dual channel invalid. This reveals the rigidity of the fixed delay strategy in dealing with temporary fluctuations: switching is initiated when it should not be switched.

[0062] In S411c, it is a global statistical summary after the completion of each standby call event in the history period is marked (valid or invalid) in S411a and S411b: it calculates and outputs the total number of events marked as "dual-channel valid" (i.e. meeting the S411a rule) in the period. This number is the key numerator data for calculating the historical dual-channel validity rate (S412).

[0063] As shown in Figure 3 and Figure 8 In one embodiment, obtaining a risk control strategy according to the historical dual-channel validity rate and the current dual-channel validity rate in S43 includes:

[0064] S431, compare the difference between the historical dual-channel validity rate and the current dual-channel validity rate;

[0065] S432, if the current dual-channel validity rate is lower than the historical dual-channel validity rate and the decline amplitude exceeds the safe threshold range, it is determined as a high-risk state, and when in the high-risk state, the value of n is reduced in the next data processing period, so that the standby channel calling time is advanced, thereby forming a risk control strategy;

[0066] S433, if the current dual-channel validity rate is higher than or equal to the historical dual-channel validity rate, it is determined as a low-risk state, and when in the low-risk state, the value of n is increased in the next data processing period, so that the standby channel calling time is delayed, thereby forming a risk control strategy.

[0067] In this embodiment, it is necessary to note that in S431, the historical dual-channel validity rate calculated by S41 and the current dual-channel validity rate calculated by S42 are received, and the relative change trend and fluctuation amplitude (i.e. "difference") between the two are evaluated. This difference evaluation usually focuses on the increase or decrease direction of the current validity rate relative to the historical benchmark value and the specific decline or rise amplitude ratio. For example, it will be calculated whether the current validity rate has decreased by a certain percentage or has remained stable or increased. This quantitative difference is the core basis for judging whether the current running state is healthy or not, and provides data support for subsequent risk classification. Its essence is to compare the deviation between "the benchmark performance under the historical strategy" and "the implementation effect of the current dynamic adjustment strategy".

[0068] In S432, this step focuses on identifying and handling adverse channel state mutations. Two key trigger conditions are met: 1) the current dual-channel efficiency is significantly lower than the historical value; 2) the drop amplitude exceeds a preset safety threshold (this safety threshold is an empirical value or set through training, representing the upper limit of acceptable normal fluctuations). The determination of the safety threshold is a dynamic optimization process, which needs to be combined with system design requirements, historical operation statistics, and real-time environmental adaptability for comprehensive judgment. Commonly, the safety threshold is based on the statistical baseline of historical fluctuation rules. In the initial deployment stage, the normal fluctuation range of dual-channel efficiency is determined by continuously monitoring the historical fluctuation range (such as the mean and variance of the historical efficiency). For example, if the observed historical efficiency fluctuates within ±10%, the initial threshold can be set to a drop of more than 10% (such as a 15% drop in efficiency is considered abnormal). At the same time, the safety threshold can also be based on the physical constraints of channel performance, considering the inherent defects of backup channels (such as infrared) (low bandwidth, easy to block), ensuring that they are only activated when the main channel is substantially disabled, and the threshold needs to avoid frequent triggering of backup channels to cause a sharp drop in overall efficiency. For example, if the infrared transmission time is significantly higher than WiFi (such as 200ms for infrared and 20ms for WiFi), the tolerance threshold should be set to be sensitive enough (such as an efficiency drop of >5%) to prevent users from perceiving obvious delays due to redundant switching.

[0069] Further, if the two key trigger conditions of channel state mutation are met simultaneously, it is determined that the current state is high-risk, which usually indicates that the network environment has deteriorated, resulting in that the n' value based on historical stability adjustment is still too conservative (the waiting time is too long), and the effectiveness of the backup decision has decreased sharply (the backup was delayed when it should have been activated), there is a high risk of command loss. As a response, the aggressive risk suppression strategy is immediately implemented: in the next upcoming data processing period, the n' value is reduced (i.e., the new upper limit of the waiting time is shortened), and n" is obtained for controlling the next data processing period. The core purpose is to force the backup channel transmission to start faster and earlier when facing the main channel response delay, thereby maximizing the priority of ensuring the reliability of command transmission and avoiding complete failure of user operations due to decision delay in a high-risk environment.

[0070] In S433, performance optimization focusing on stabilizing or improving the environment. When the analysis of S431 shows that the current dual-channel efficiency is equal to or better than the historical value (i.e. the difference degree shows no significant decline or there is an improvement), it is determined that the current is a low-risk state. At this time, the decision to call the standby channel is proved to be reasonable and effective, and the risk of resource waste is low. Take advantage of this favorable opportunity, implement the efficiency-first resource optimization strategy: in the next data processing period, actively increase the value of n (give the main channel a longer tolerant waiting period). This can reduce the number of unnecessary standby channel starts, especially avoiding the additional power consumption, transmission conflicts, and overall response speed decline caused by switching to a low-speed standby channel (such as infrared) due to temporary fluctuations, thereby maximizing the use of the main channel and improving the overall resource utilization efficiency and user experience smoothness.

[0071] In one embodiment, the stability model in the historical channel stability index based on the stability model, the historical response time sequence and the historical call time sequence in S2 is represented as: Wherein, is the historical channel stability index, is the number of standby channel calls in the historical call time sequence, is the standard threshold value of the difference between the time consumption of adjacent two transmissions in the channel, is the number of responses of the main channel in the historical response time sequence, is the response time of the i+1th main channel in the historical response time sequence, is the response time of the ith main channel in the historical response time sequence, is the call time of the i+1th standby channel in the historical call time sequence, is the call time of the ith standby channel in the historical call time sequence.

[0072] In this embodiment, it should be noted that in the entire expression, first segment processing is performed to distinguish the channel behavior density. Among them, in the high call scenario (p>1), the standby channel is called multiple times, indicating that the main channel frequently fails, and in this case, the response volatility of the main channel and the standby channel call volatility should be quantified at the same time, fully reflecting the cooperative stability of the dual channel; when both the main channel and the standby channel are unstable, the overall cooperative performance will drop sharply (such as intermittent interruption of WiFi and unstable response delay of infrared). In the low call scenario (p≤1), the standby channel is rarely or not enabled, indicating that the main channel is overall reliable, and only the stability of the main channel itself needs to be evaluated Ignore backup channel statistics (which do not contribute to stability degradation); avoid introducing computational interference in a stable primary channel environment to reduce the accuracy of stability calculations.

[0073] Furthermore, volatility quantization employs differential summation of adjacent transmission times. Specifically, the expression for quantizing the volatility of the master channel response is as follows: It calculates the absolute difference between adjacent response delays on the primary channel and averages them; it can capture sudden fluctuations (such as routing interference causing delays to increase from 20ms to 1000ms, with a single difference as high as 980ms); it can also suppress the effects of slowly varying interference (such as linear increases in delay due to temperature, with adjacent differences remaining stable); thus solving the problem of transient spikes and continuous degradation that fixed-delay strategies cannot distinguish. Similarly, it addresses the volatility of backup channel calls. Quantify the volatility of the time taken to invoke the backup channel itself.

[0074] Furthermore, a standard threshold is set for the difference in transmission time between two adjacent transmissions in the channel. This is used as a normalization factor. Specifically, the original fluctuation values ​​of the primary and backup channels are divided by... This eliminates performance differences between different hardware components (such as the different latency benchmarks of WiFi and infrared); in practical applications, Dynamic calibration can be achieved using historical data (e.g., taking the average of historical fluctuations). This allows channels with different performance levels to be evaluated for stability under a unified standard. Furthermore, in scenarios where p>1, considering the fluctuations in the primary channel response and the backup channel call-up, it is necessary to divide by 2 to average the impact of both. After association, it becomes .

[0075] Furthermore, The exponential function penalizes and suppresses high volatility. The exponential function exhibits non-linear sensitivity to volatility amplitude: the output is close to 1 for small fluctuations and rapidly approaches 0 for large fluctuations; in scenarios where p>1, the volatility value is amplified by a factor of p. Multiply by the normalized value to strengthen the penalty for fluctuations in frequently called scenarios; ensure that occasional fluctuations do not affect the score (such as a single interference), while continuous high fluctuations cause the index to drop sharply; drive the system to actively shorten the n value (through historical correction ratio) when stability drops sharply.

[0076] Example: If the average sum of the differences in adjacent transmission times in a historical response time series is 50ms, the standard threshold... ms, .

[0077] The existing method does not trigger adjustments because the average latency does not exceed the threshold.

[0078] In the algorithm model of this embodiment, the adjacent difference | ms, If the value is lower than the stable value of 0.4, the channel is immediately determined to be degraded, and the value of n is shortened to activate the backup channel in advance.

[0079] like Figure 9 As shown, in one embodiment, obtaining the correction ratio based on historical channel stability indicators in S2 includes:

[0080] S21. Obtain a preset threshold. If the historical channel stability index exceeds the preset threshold, calculate the correction ratio based on the magnitude of the historical channel stability index exceeding the preset threshold.

[0081] S22. If the historical channel stability index does not exceed the preset threshold, the correction ratio is calculated based on the magnitude of the difference between the preset threshold and the historical channel stability index.

[0082] In this embodiment, it should be noted that in S21, a threshold relaxation strategy is implemented under high stability conditions. When the historical channel stability index exceeds a preset threshold, it indicates that the historical performance of the main channel is significantly better than expected. At this time, a "reward amplification" mechanism is used to calculate the historical correction ratio: Historical correction ratio = 1 + ( -Preset threshold). Wherein... The portion exceeding a preset threshold is directly converted into additional correction gain. For example, if the preset threshold is 0.8, the actual... Therefore, the correction ratio = 1 + (0.9 - 0.8) = 1.1. In a highly stable channel environment, by actively extending the primary channel waiting time, unnecessary activation of the backup channel can be suppressed to the greatest extent, avoiding efficiency loss and resource waste caused by frequent switching to low-speed backup channels (such as infrared).

[0083] In S22, a defensive contraction strategy in a low-stability environment. When If the preset threshold is not reached, it indicates a reliability risk in the main channel. This triggers a "penalty reduction" mechanism, where the historical correction ratio is calculated as 1 - (preset threshold - ...). Among them, the preset threshold and The difference is directly converted into the reduction amount of the correction coefficient. For example, when the preset threshold is 0.8, if Therefore, the correction ratio = 1 - (0.8 - 0.7) = 0.9. For channels with drastic historical fluctuations, the backup channel should be activated in advance to avoid the risk of command loss due to over-reliance on the main channel, especially to deal with millisecond-level network paralysis caused by sudden interference from microwave ovens.

[0084] In one implementation, the dynamic verification code in S1 includes an operation timestamp and a user identity identifier.

[0085] In the embodiment, it is to be noted that the dynamic check code is generated by combining the operation time stamp (millisecond level) with the user identity (device / account ID). The receiving end checks the rationality of the time stamp and the current time, so that the intercepted check code is automatically invalidated when it is out of time. The identity isolation prevents unauthorized operation, and the check code is bound to the exclusive device ID (such as the MAC address of the remote controller), thereby preventing malicious control across devices. For example, when a neighbor attempts to use his own remote controller to simulate instructions, a security alarm is triggered due to the mismatch of the ID.

[0086] Further, the same instruction generates completely different check codes at different times / users, so that the attacker cannot reverse the instruction mode.

[0087] A set-top box control system is also provided, and the system comprises:

[0088] a data generation module configured to generate a control instruction according to a user operation, generate a dynamic check code according to the control instruction, and acquire a main channel and a backup channel for data transmission;

[0089] a data processing module configured to acquire a previous data processing period as a historical data processing period, transmit the dynamic check code through the main channel in the historical data processing period, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n seconds, acquire a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, acquire a historical channel stability index based on a stability model, the historical response time sequence, and the historical calling time sequence, acquire a correction ratio based on the historical channel stability index, and acquire n' based on the correction ratio and n;

[0090] a first control module configured to, in a current data processing period, transmit the dynamic check code through the main channel, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n' seconds, and acquire a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period;

[0091] a second control module configured to acquire a risk control strategy based on the historical response time sequence, the historical calling time sequence, the current response time sequence, and the current calling time sequence.

[0092] In one embodiment, the second control module is further configured to: acquire a historical dual-channel efficiency based on the historical response time sequence and the historical calling time sequence; acquire a current dual-channel efficiency based on the current response time sequence and the current calling time sequence; and acquire a risk index based on the historical dual-channel efficiency and the current dual-channel efficiency to acquire the risk control strategy.

[0093] The preferred embodiments of the present application are described in detail above with reference to the drawings, but the present application is not limited to the specific details in the above-described embodiments, and various simple modifications can be made to the technical solutions of the present application within the technical concept of the present application, and these simple modifications all belong to the protection scope of the present application.

[0094] In addition, it should be noted that each specific technical feature described in the above-described specific embodiments can be combined in any appropriate manner without contradiction. In order to avoid unnecessary repetition, the present application will not make further description on various possible combinations.

[0095] In addition, various different embodiments of the present application can also be combined in any manner, as long as it does not deviate from the idea of the present application, and it should also be considered as disclosed by the present application.

[0096] Finally, it should be noted that: the above examples are only used to illustrate the technical solutions of the present application, and not to limit it; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement on part or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application, and they should all be covered in the scope of the claims and the description of the present application.

Claims

1. A set-top box control method, characterized by, The method comprises the following steps: generating a control instruction according to a user operation, generating a dynamic check code according to the control instruction, and obtaining a main channel and a backup channel for data transmission; obtaining a previous data processing period as a historical data processing period, in the historical data processing period, transmitting the dynamic check code through the main channel after the dynamic check code is obtained, calling the backup channel to transmit the dynamic check code when the main channel is unresponsive for n seconds, obtaining a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, obtaining a historical channel stability index based on a stability model, the historical response time sequence and the historical calling time sequence, obtaining a correction ratio based on the historical channel stability index, and obtaining n' based on the correction ratio and n; wherein the stability model is represented as: wherein, is a historical channel stability index, is a number of backup channel invocations in a historical invocation time series, is a standard threshold value of a difference between time consumptions of two adjacent transmissions in a channel, is a number of responses of a primary channel in a historical response time series, is a response duration of an i+1th primary channel in a historical response time series, is a response duration of an ith primary channel in a historical response time series, is a call duration of an i+1th backup channel in a historical invocation time series, is a call duration of an ith backup channel in a historical invocation time series; wherein the correction ratio is obtained by obtaining a preset threshold value, calculating the correction ratio according to the size of the historical channel stability index exceeding the preset threshold value if the historical channel stability index exceeds the preset threshold value, and calculating the correction ratio according to the size of the preset threshold value exceeding the historical channel stability index if the historical channel stability index does not exceed the preset threshold value; in the current data processing period, transmitting the dynamic check code through the main channel after the dynamic check code is obtained, calling the backup channel to transmit the dynamic check code when the main channel is unresponsive for n' seconds, and obtaining a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period; obtaining a historical dual-channel efficiency according to the historical response time sequence and the historical calling time sequence, and obtaining a current dual-channel efficiency according to the current response time sequence and the current calling time sequence; comparing the difference between the historical dual-channel efficiency and the current dual-channel efficiency, determining a high-risk state if the current dual-channel efficiency is lower than the historical dual-channel efficiency and the decline amplitude exceeds a safety threshold range, shortening the value of n to make the backup channel calling time advance in the next data processing period when in the high-risk state, forming a risk control strategy, and determining a low-risk state if the current dual-channel efficiency is higher than or equal to the historical dual-channel efficiency, increasing the value of n to make the backup channel calling time delay in the next data processing period when in the low-risk state, and forming a risk control strategy.

2. The set-top box control method of claim 1, wherein, The historical dual-channel efficiency is obtained according to the historical response time sequence and the historical calling time sequence, which comprises: statistically obtaining the total number of backup channel calling according to the historical calling time sequence, executing recognition judgment for each backup channel calling transmission event in the historical data processing period, and recognizing the number of dual-channel effective event occurrences; dividing the number of dual-channel effective event occurrences by the total number of backup channel calling events to obtain the historical dual-channel efficiency.

3. The set-top box control method of claim 2, wherein, The number of dual-channel effective event occurrences is recognized by executing recognition judgment for each backup channel calling transmission event in the historical data processing period, which comprises: starting backup channel transmission of the dynamic check code when the main channel is unresponsive for n seconds, and recording as a dual-channel effective event if the main channel has not successfully transmitted the dynamic check code before the backup channel transmitted dynamic check code is received and verified. When the main channel is unresponsive for n seconds, the backup channel is started to transmit the dynamic check code; if the dynamic check code transmitted on the main channel is successfully received before the dynamic check code transmitted on the backup channel is received and checked, it is recorded as a dual-channel invalid event; The number of dual-channel valid events in the historical data processing period is counted.

4. The set-top box control method of claim 1, wherein, The dynamic check code comprises an operation timestamp and a user identity.

5. A set-top box control system, characterized by The system comprises: a data generation module configured to generate a control instruction according to user operation, generate a dynamic check code according to the control instruction, and obtain a main channel and a backup channel for data transmission; a data processing module configured to obtain a previous data processing period as a historical data processing period, transmit the dynamic check code through the main channel after the dynamic check code is obtained in the historical data processing period, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n seconds, obtain a historical response time sequence of the main channel and a historical calling time sequence of the backup channel in the historical data processing period, obtain a historical channel stability index based on a stability model, the historical response time sequence and the historical calling time sequence, obtain a correction ratio based on the historical channel stability index, and obtain n' based on the correction ratio and n; The stability model is represented as follows: wherein, is a historical channel stability index, is a number of backup channel invocations in a historical invocation time series, is a standard threshold value of a difference between time consumptions of two adjacent transmissions in a channel, is a number of responses of a primary channel in a historical response time series, is a response duration of an i+1th primary channel in a historical response time series, is a response duration of an ith primary channel in a historical response time series, is a call duration of an i+1th backup channel in a historical invocation time series, is a call duration of an ith backup channel in a historical invocation time series; The correction ratio is obtained by: obtaining a preset threshold value, calculating the correction ratio according to the size of the historical channel stability index exceeding the preset threshold value if the historical channel stability index exceeds the preset threshold value, and calculating the correction ratio according to the size of the preset threshold value exceeding the historical channel stability index if the historical channel stability index does not exceed the preset threshold value; a first control module configured to transmit the dynamic check code through the main channel in the current data processing period, call the backup channel to transmit the dynamic check code when the main channel is unresponsive for n' seconds, and obtain a current response time sequence of the main channel and a current calling time sequence of the backup channel in the current data processing period; a second control module configured to obtain a historical dual-channel validity rate based on the historical response time sequence and the historical calling time sequence, obtain a current dual-channel validity rate based on the current response time sequence and the current calling time sequence, compare the difference between the historical dual-channel validity rate and the current dual-channel validity rate, determine a high-risk state if the current dual-channel validity rate is lower than the historical dual-channel validity rate and the decline amplitude exceeds a safety threshold range, shorten the value of n to make the backup channel calling time advance in the next data processing period when in the high-risk state, form a risk control strategy in this way, and determine a low-risk state if the current dual-channel validity rate is higher than or equal to the historical dual-channel validity rate, lengthen the value of n to make the backup channel calling time delay in the next data processing period when in the low-risk state, and form a risk control strategy in this way.

Images