A method and system for securely collecting data of long-distance pipelines

Abstract

The present invention provides a method and system for secure data collection of long-distance pipelines, wherein the method comprises: presetting a pipeline data security collection scenario; constructing a smart pipeline data security authentication center; obtaining a target data collection agency set based on the pipeline data security collection scenario; sending the subject information and collection operation information of the target data collection agency set to the smart pipeline data security authentication center for authorization application, and obtaining a first audit result; based on a data collection dedicated network, sending the authorization license code key file of the first audit result to the authorization agency set, wherein the authorization agency set is included in the target data collection agency set; according to the pipeline data security collection authentication module and the authorization license code key file, the authorization agency set performs an authentication test on the access rights and the operation collection content message template to generate a first authentication result; according to the first authentication result, the authorization agency set performs the collection operation based on the pipeline data security collection scenario.

Description

Technical Field

[0001] The present invention relates to the technical field related to pipeline data management, and in particular to a method and system for securely collecting data on a long-distance pipeline. Background Art

[0002] Pipeline transportation plays an extremely important role in resource scheduling and industrial development. Against the background of rapid development of pipeline construction, it is necessary to detect pipeline data of newly built and old pipelines to provide data foundation for the construction of long-distance smart pipelines.

[0003] At present, due to the coexistence of a large number of new and old pipelines, the current pipeline data collection methods and collection equipment levels are uneven. In the process of collecting pipeline data, technical personnel are required to manually participate in the collection and entry, and the collection of pipeline data is mainly completed manually.

[0004] However, the inventors of this application found that the above technology has at least the following technical problems in the process of implementing the technical solution of the invention in the embodiment of this application:

[0005] In the existing technology, due to the coexistence of a large number of new and old pipelines, the pipeline data collection methods and equipment levels are uneven, and the degree of manual participation in the pipeline data collection work is high. There are actual conditions such as difficult pipeline data collection, difficult transfer, and difficult application. In addition, the core direction data of the pipeline, as the core asset of the enterprise, has the problem of insufficient confidentiality and security. In summary, there are technical problems in the existing technology that the pipeline data collection operation is difficult and the data security is insufficient. Summary of the invention

[0006] The embodiment of the present application provides a long-distance pipeline data security collection method and system, which is used to solve the existing problems in the existing technology, such as the coexistence of a large number of new and old pipelines, uneven pipeline data collection methods and equipment levels, high degree of manual participation in pipeline data collection, and the actual conditions of difficult pipeline data collection, difficult transfer, and difficult application. In addition, the pipeline core direction data, as the core asset of the enterprise, has insufficient confidentiality and security. In summary, the technical problems of high difficulty in pipeline data collection and insufficient data security in the existing technology are solved.

[0007] In view of the above problems, an embodiment of the present application provides a method and system for securely collecting data on a long-distance pipeline.

[0008] In a first aspect of an embodiment of the present application, a method for secure data collection of a long-distance pipeline is provided, the method comprising: presetting a pipeline data security collection scenario; constructing a smart pipeline data security authentication center; obtaining a target data collection agency set based on the pipeline data security collection scenario; sending the subject information and collection operation information of the target data collection agency set to the smart pipeline data security authentication center for an authorization application to obtain a first audit result; based on a data collection dedicated network, sending an authorization license code key file of the first audit result to an authorization agency set, wherein the authorization agency set is included in the target data collection agency set; according to a pipeline data security collection authentication module and the authorization license code key file, the authorization agency set performs an authentication test on access rights and a job collection content message template to generate a first authentication result; according to the first authentication result, the authorization agency set performs a collection operation based on the pipeline data security collection scenario.

[0009] According to a second aspect of an embodiment of the present application, a long-distance pipeline data security collection system is provided, wherein the system includes: a first construction unit, the first construction unit is used to preset a pipeline data security collection scenario; a second construction unit, the second construction unit is used to construct a smart pipeline data security authentication center; a first acquisition unit, the first acquisition unit is used to obtain a target data collection agency set based on the pipeline data security collection scenario; a first processing unit, the first processing unit is used to send the subject information and collection operation information of the target data collection agency set to the smart pipeline data security authentication center for authorization application, and obtain a first audit result; a second processing unit, the second processing unit is used to send the authorization license code key file of the first audit result to the authorization agency set based on a data collection private network, wherein the authorization agency set is included in the target data collection agency set; a third processing unit, the third processing unit is used to perform an authentication test on the access authority and the operation collection content message template by the authorization agency set according to the pipeline data security collection authentication module and the authorization license code key file, and generate a first authentication result; a first management unit, the first management unit is used to perform a collection operation by the authorization agency set based on the pipeline data security collection scenario according to the first authentication result.

[0010] A third aspect of an embodiment of the present application provides a long-distance pipeline data security collection system, including: a processor, the processor is coupled to a memory, the memory is used to store a program, and when the program is executed by the processor, the system executes the steps of the method of the first aspect.

[0011] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0012] The embodiment of the present application constructs a smart pipeline data security authentication center by presetting a pipeline data security collection scenario, obtains a target data collection agency set based on a set of agencies that perform data collection in the pipeline data security collection scenario, sends the subject information and collection operation information of the target collection agency set to the smart pipeline data security authentication center for an authorization application, and after the authorization is completed, the authorized authorization agency obtains a unique authorization license code key file, and performs an authentication test on the access rights and operation collection content message template of the authorization agency through the pipeline data security collection authentication module and the authorization license code key file. According to the first authentication result, the authorized agency set performs pipeline data collection operations based on the pipeline data security collection scenario. The embodiment of the present application digitizes, standardizes and intelligentizes the smart pipeline data collection operation process by setting up modules such as a smart pipeline data security authentication center, a data collection dedicated network, and a pipeline data security collection authentication module, and covers the entire data collection operation process in terms of data security supervision and protection, effectively preventing unauthorized personnel, equipment, institutions and unauthorized collection operations from occurring, improving the efficiency and level of data collection, making the management, planning and monitoring and assessment of data collection work more scientific, promoting the development of pipelines in a systematic, refined and intelligent direction, laying the foundation for the ultimate realization of the overall goal of smart pipelines, and achieving the technical effects of improving pipeline data collection efficiency, reducing collection difficulty, and improving data security.

[0013] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 A schematic diagram of a flow chart of a method for securely collecting data on a long-distance pipeline provided in an embodiment of the present application;

[0015] Figure 2 A schematic block diagram of a method for securely collecting data on a long-distance pipeline provided in an embodiment of the present application;

[0016] Figure 3 A schematic diagram of the structure of an authentication module for a pipeline data security collection device in a long-distance pipeline data security collection method provided in an embodiment of the present application;

[0017] Figure 4 A schematic diagram of the structure of a long-distance pipeline data security collection system is provided for an embodiment of the present application;

[0018] Figure 5 It is a schematic diagram of the structure of an exemplary electronic device according to an embodiment of the present application.

[0019] Explanation of the figure marks: first building unit 11, second building unit 12, first obtaining unit 13, first processing unit 14, second processing unit 15, third processing unit 16, first management unit 17, electronic device 300, memory 301, processor 302, communication interface 303, bus architecture 304. DETAILED DESCRIPTION

[0020] The embodiment of the present application provides a method and system for securely collecting data on long-distance pipelines, which is used to solve the problems in the prior art, such as the coexistence of a large number of new and old pipelines, uneven pipeline data collection methods and equipment levels, a high degree of manual participation in pipeline data collection, and difficulties in collecting, transferring, and applying pipeline data. In addition, as the core assets of the enterprise, the core direction data of the pipeline has insufficient confidentiality and security.

[0021] The embodiment of the present application constructs a smart pipeline data security authentication center by presetting a pipeline data security collection scenario, obtains a target data collection agency set based on a set of agencies that perform data collection in the pipeline data security collection scenario, sends the subject information and collection operation information of the target collection agency set to the smart pipeline data security authentication center for an authorization application, and after the authorization is completed, the authorized authorization agency obtains a unique authorization license code key file, and performs an authentication test on the access rights and operation collection content message template of the authorization agency through the pipeline data security collection authentication module and the authorization license code key file. According to the first authentication result, the authorized agency set performs pipeline data collection operations based on the pipeline data security collection scenario. The embodiment of the present application digitizes, standardizes and intelligentizes the smart pipeline data collection operation process by setting up modules such as a smart pipeline data security authentication center, a data collection dedicated network, and a pipeline data security collection authentication module, and covers the entire data collection operation process in terms of data security supervision and protection, effectively preventing unauthorized personnel, equipment, institutions and unauthorized collection operations from occurring, improving the efficiency and level of data collection, making the management, planning and monitoring and assessment of data collection work more scientific, promoting the development of pipelines in a systematic, refined and intelligent direction, laying the foundation for the ultimate realization of the overall goal of smart pipelines, and achieving the technical effects of improving pipeline data collection efficiency, reducing collection difficulty, and improving data security.

[0022] Application Overview

[0023] Pipeline transportation plays an extremely important role in resource scheduling and industrial development. Timely, complete and accurate entry of pipeline data is crucial for the construction of long-distance smart pipelines. In the context of rapid development of pipeline construction, it is necessary to detect pipeline data for newly built and old pipelines to serve as a data basis for the construction of long-distance smart pipelines. At present, due to the coexistence of a large number of new and old pipelines, the current methods and equipment levels for collecting pipeline data are uneven. In the process of collecting pipeline data, technicians are required to manually participate in the collection and entry, and the collection of pipeline data is mainly completed manually. On the one hand, in the existing technology, due to the coexistence of a large number of new and old pipelines, the pipeline data collection methods and equipment levels are uneven, and the degree of manual participation in the collection of pipeline data is high. There are actual conditions such as difficult pipeline data collection, difficult transfer, and difficult application, which restricts the development of smart pipeline full life cycle management from the perspective of collection technology. On the other hand, pipeline core trend data, industrial control system command data, smart device communication data, etc. are the core assets of enterprises, and even key industry data that are focused on security supervision. If the security cannot be guaranteed, it will cause huge property losses and even social harm. At the same time, a large amount of the above data is restricted in collection and transmission due to the lack of security technical protection measures, which makes it impossible to realize the true value of core assets.

[0024] In summary, pipeline data collection in the prior art has the following specific problems:

[0025] 1. Manual data collection is still the main method. The data collection format is chaotic, the error rate is high, the timeliness is poor, and it cannot reflect the actual status of pipeline operation;

[0026] 2. The existing collection and transmission of sensitive data such as pipeline direction data lacks security supervision of data collection operation organizations, personnel, and equipment. Data security issues such as data loss and unauthorized access are common during transmission and storage;

[0027] 3. The secure collection and transmission of sensitive data still relies on paper handover forms and confidentiality agreements, and uses simple encryption or offline handover by dedicated personnel, which is costly, inefficient, and cannot fundamentally prevent data leaks from a technical perspective.

[0028] In response to the above technical problems, the overall idea of ​​the technical solution provided by this application is as follows:

[0029] Preset a pipeline data security collection scenario; build a smart pipeline data security authentication center; based on the pipeline data security collection scenario, obtain a target data collection agency set; send the subject information and collection operation information of the target data collection agency set to the smart pipeline data security authentication center for authorization application, and obtain a first audit result; based on the data collection dedicated network, send the authorization license code key file of the first audit result to the authorization agency set, wherein the authorization agency set is included in the target data collection agency set; according to the pipeline data security collection authentication module and the authorization license code key file, the authorization agency set performs authentication tests on access rights and job collection content message templates to generate a first authentication result; according to the first authentication result, the authorization agency set performs collection operations based on the pipeline data security collection scenario.

[0030] After introducing the basic principles of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments of the present application. It should be understood that the present application is not limited to the example embodiments described here. Based on the embodiments of the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application. It should also be noted that, for the convenience of description, only the parts related to the present application are shown in the accompanying drawings, rather than all of them.

[0031] Embodiment 1

[0032] like Figure 1 As shown, an embodiment of the present application provides a method for securely collecting data on a long-distance pipeline, the method comprising:

[0033] S100: preset pipeline data security collection scenario;

[0034] Figure 2 A possible schematic block diagram of the method provided by an embodiment of the present application is shown. Specifically, before performing pipeline data collection work, first obtain the information of the target pipeline, as well as the collection organization, personnel, equipment, collection area, etc., and then comprehensively form a preset pipeline data security collection scenario. The pipeline data security collection scenario is a safe collection scenario for collecting pipeline data of any long-distance pipeline, and its security is mainly achieved through the following intelligent pipeline data security authentication center, data collection dedicated network, pipeline data security collection authentication module, etc.

[0035] S200: Build a smart pipeline data security certification center;

[0036] Step S200 in the method provided in the embodiment of the present application includes:

[0037] S210: Building a permission database of authentication subjects according to the smart pipeline data security authentication center, wherein the authentication subjects include internal operation management units and data collection agencies;

[0038] S220: Based on the smart pipeline data security certification center, the data collection agency submits the electronic version of the collection subject qualification for approval and obtains a first approval result;

[0039] S230: adding the data collection agency to a data collection job whitelist according to the first approval result;

[0040] S240: Obtain the target data collection organization set according to the data collection operation whitelist.

[0041] Specifically, the Smart Pipeline Data Security Certification Center is responsible for building a database of permissions related to multiple certification entities, including collection agencies, personnel, equipment, business processes, regions, authorization codes, validity periods, etc. The Smart Pipeline Data Security Certification Center includes multiple categories, including internal operation management units and data collection agencies, and can perform security certification on multiple categories.

[0042] Exemplarily, the data collection agency that conducts pipeline data collection needs to submit an electronic copy of the collection subject's qualifications to the above-mentioned smart pipeline data security certification center. The smart pipeline data security certification center will review and approve the electronic copy of the collection subject's qualifications. After approval, the data collection agency will be added to the collection operation whitelist in the authority database. Only then can the data collection structure apply for and conduct collection operations. All collection agencies in the collection operation whitelist constitute the above-mentioned target data collection agency set.

[0043] When data collection agencies on the whitelist need to carry out data collection projects, they need to apply to the Smart Pipeline Data Security Certification Center and generate a collection operation license key. Only after obtaining permission can they carry out pipeline data collection operations.

[0044] By establishing a smart pipeline data security certification center, it is responsible for the data security collection supervision of the entire pipeline data collection life cycle. The collection agencies, personnel, and devices need to be evaluated, reviewed, and authorized at the security certification center, and a unique authorization authentication code is sent for each data collection process. The entire data collection process can be recorded, a complete data collection process can be built, and the authorization boundaries for data collection work can be defined to avoid unauthorized data operations.

[0045] S300: Based on the pipeline data security collection scenario, a target data collection mechanism set is obtained;

[0046] Specifically, based on the above pipeline data security collection scenario, a set of data collection agencies that can perform pipeline data collection in the pipeline data security collection scenario can be obtained. For example, if the pipeline data security collection scenario is a newly constructed pipeline, the data collection agencies in the corresponding target data collection agency set need to be equipped with a higher level of data collection equipment that matches the newly constructed pipeline data collection.

[0047] S400: Sending the subject information and collection operation information of the target data collection organization set to the smart pipeline data security certification center for authorization application to obtain a first review result;

[0048] S500: Based on the data collection dedicated network, sending the authorization license code key file of the first audit result to the authorization agency set, wherein the authorization agency set is included in the target data collection agency set;

[0049] Specifically, among the set of target data collection agencies that can perform pipeline data collection for pipeline data security collection scenarios, they need to apply to the Smart Pipeline Data Security Certification Center before conducting a pipeline data collection project. The Smart Pipeline Data Security Certification Center authorizes or rejects the application and obtains the first review result.

[0050] If authorization is applied, a unique authorization license code key file corresponding to the first audit result is generated, and the authorization license code key file is generated by encrypting the timestamp, organization identification code, personnel information code, equipment information code, business information code, effective area information code and validity period information. The authorization license code key file is sent to the authorized collection agency, wherein the authorized agency is included in the above-mentioned data collection agency set.

[0051] The data collection network is a private network used by pipeline operating companies to transmit internal data. Unauthorized external devices and IP addresses cannot access it. Depending on the importance of the data content being transmitted, the data collection network uses encryption, signature, or message verification code and other technologies to perform security and anti-tampering settings to ensure the security of data within the data collection network. For example, the unique authorization license code key file is transmitted from the smart pipeline data security certification center to the authorization agency through the data collection network, and the transmission process and file content are encrypted to package security and prevent data leakage or tampering.

[0052] S600: According to the pipeline data security collection authentication module and the authorization license code key file, the authorization agency set performs an authentication test on the access authority and the operation collection content message template to generate a first authentication result;

[0053] S700: According to the first authentication result, the authorized agency set performs a collection operation based on the pipeline data security collection scenario.

[0054] Specifically, the pipeline data security collection authentication module can perform multi-factor verification on the above-mentioned unique authorization license code key file, complete the authentication test, and obtain the first authentication result. After the first authentication result is verified, the authorized agency can perform collection operations in the data security collection scenario.

[0055] The above-mentioned multi-factor verification includes verification and authentication of multiple types of information such as timestamp, organization identification code, personnel information code, equipment information code, business information code, effective area information code and validity period information in the authorization license code key file.

[0056] The embodiment of the present application pre-sets data security collection scenarios for different pipelines and different data collection scenarios, designs pipeline data security collection authentication modules, and technical methods for data collection messages, builds a data collection dedicated network, establishes a security authentication center, and other steps to evaluate, authenticate, and authorize data collection organizations, personnel, equipment, and technologies, digitizes, standardizes, and intelligentizes the smart pipeline data collection operation process, and covers the entire data collection operation process in terms of data security supervision and protection, effectively preventing unauthorized personnel, equipment, organizations, and unauthorized collection operations from occurring, and improving the efficiency and level of data collection, thereby strengthening the security monitoring and control of smart pipeline data collection and transmission and other tasks, and achieving the technical effect of improving pipeline data collection efficiency, reducing collection difficulty, and improving data security.

[0057] Compared with the current traditional extensive data management method, the method provided by the embodiment of the present application can reduce a large amount of heavy and error-prone manual work, prevent unauthorized data collection, avoid the leakage of core business data, and improve the security of data related to the construction and operation of long-distance oil and gas pipeline smart pipe networks. On the basis of data security, the smart pipe network data collection operation process is further refined, the accuracy of data collection is improved, and the level of pipeline operation management is improved.

[0058] The method provided in the embodiment of the present application further includes step S800, which includes:

[0059] S810: Obtaining a collection operation type according to the pipeline data security collection scenario;

[0060] S820: Designing a data security transmission message format according to the acquisition operation type, wherein the data security transmission message format includes a data acquisition message format and a data transmission message format.

[0061] Specifically, according to the pipeline type, area and other information of the pipeline data collection project corresponding to the pipeline data security collection scenario, the collection operation type is obtained, and the data security transmission message format of the pipeline data during the collection and transmission process is designed according to the collection operation type, and then provided for transmission and storage by the data collection dedicated network to ensure the security of the pipeline data and prevent it from being tampered with.

[0062] The data security transmission message format includes the data collection message format and the data transmission message format. Both the data collection message format and the data transmission message format include three categories: core fields, content fields, and custom fields.

[0063] Among them, the core field consists of two parts: the message header file and the basic information of the collection. The message header file is automatically generated after the authorization license key file is authenticated and decrypted. According to the authorization license key file, the total length of the message, the type of collection operation and the metadata information of the collection content, as well as the encryption information and verification information of the message are automatically generated. The basic information part consists of the common key information of the collection operation, such as the message collection personnel, collection time, collection equipment, collection area, etc. The basic information part can be automatically generated by the pipeline data security collection authentication module.

[0064] The content field consists of the type and content of the specific collection operation, which is generated by the data dictionary collection template defined by each information system within the pipeline operating enterprise that needs to perform data collection input. This part of the content is automatically generated by the collection equipment of the authorized agency.

[0065] Custom fields are collection fields added or explained by authorized collection personnel based on actual conditions. Custom fields are filled in by authorized collection personnel within the authorized organization according to the circumstances during the collection process.

[0066] The embodiments of the present application design data collection and transmission message formats for different scenarios according to different collection operation types, standardize the safe collection technical solutions for the scenarios, complete the automated data collection operations through collection technology and insulation standardization, prevent illegal collection in advance, limit abnormal collection and non-standard collection, avoid data collection and transmission chaos from the source, and achieve the technical effect of improving pipeline data collection efficiency and quality.

[0067] Step S500 in the method provided in the embodiment of the present application includes:

[0068] S510: Performing regional analysis and network coverage estimation on the pipeline data security collection scenario, and generating a network node deployment plan;

[0069] S520: Send the networking node deployment plan to the smart pipeline data security authentication center to apply for authorization and obtain an authorization authentication code;

[0070] S530: constructing the data collection private network for the pipeline data security collection scenario according to the authorization authentication code, wherein the data collection private network includes a dedicated channel encrypted transmission, an encrypted transmission internal network, and a local transmission private network;

[0071] S540: Connecting the data collection private network to the smart pipeline data security authentication center, performing a data transmission test, and obtaining a first test result;

[0072] S550: judging whether the data transmission satisfies a preset test result according to the first test result;

[0073] S560: If the data transmission meets the preset test result, a data collection operation application is performed based on the data collection dedicated network.

[0074] Specifically, different pipeline data security collection scenarios are analyzed to obtain the area where the pipeline corresponding to the pipeline data security collection scenario is located, as well as the estimated network coverage range, and generate a networking node layout plan that corresponds to the pipeline data security collection scenario one by one.

[0075] After the network node deployment plan is authorized by the Smart Pipeline Data Security Certification Center, the corresponding data collection network is built according to the authorization authentication code. In the actual construction process, for different pipeline data collection scenarios, the data collection network includes at least three types: dedicated channel encrypted transmission, encrypted transmission internal network, and local transmission network.

[0076] Dedicated channel encrypted transmission is established by purchasing operator resources, and dedicated channel encrypted transmission is constructed through tunnel encryption technology, etc. For example, by purchasing 4G-LTE IoT cards or 5G dedicated bandwidth technology, this method is applicable to areas covered by operator communication networks, or areas covered by operator base stations if conditions permit.

[0077] The encrypted transmission internal network can be used in the pipeline data security collection and authentication module to build a long-distance LoRaWAN network suitable for long-distance pipelines. It is composed of multiple pipeline LoRa private gateway transmission base stations with pipeline data security collection and authentication modules. This method is suitable for providing private network data transmission services along narrow and long pipelines where operators cannot provide services.

[0078] The local transmission private network can choose a combination of the above two technical means according to the actual scenario, such as a communication vehicle carrying a pipeline data security collection and authentication module, or an unmanned aerial vehicle, or a portable communication base station, to provide technical support for the private network transmission needs of local scenarios.

[0079] In this way, at least three types of data collection private networks can be constructed for different areas corresponding to different pipeline data security collection scenarios to complete data collection and transmission. After the data collection private network is constructed, the data collection private network is connected to the smart pipeline data security certification center to conduct data transmission testing and obtain the first test result. The first test result includes transmission speed, delay rate, packet loss rate, etc. If the first test result meets the preset test result, the data collection private network meets the application requirements and the data collection operation application can be carried out.

[0080] The embodiment of the present application achieves the technical effect of improving the timeliness of data collection by constructing a dedicated data collection network for smart pipelines in different areas and designing a data collection network suitable for different scenarios of smart pipelines to perform safe collection and transmission work, thereby avoiding untimely data collection and difficult monitoring of data collection operations, ensuring the security and controllability of the data itself, and achieving the timeliness of data collection.

[0081] The pipeline data security collection authentication module in the method provided in the embodiment of the present application can be used as an edge computing node to provide security collection edge computing, and the embedding method of the module into the data collection device can be matched according to the module. There are at least two embedding methods for the pipeline data security collection device authentication module:

[0082] Embedded: The module is integrated into the equipment for data collection, and the relevant interface of the module's control unit is connected to the control interface of the data collection operation. The data collection operation is authorized and collected through the embedded pipeline data security collection device authentication module.

[0083] Plug-in: Inserted through the external interface of the acquisition device, access the module through the specified security application to obtain device authorization, connect to the network and perform acquisition operations.

[0084] The data of the collection operation will not be stored directly on the collection device. If external storage is required, it needs to be encrypted and can only be read and written through the authentication authorization between the pipeline data security collection device authentication module and the external storage.

[0085] like Figure 3 As shown, the pipeline data security collection and authentication module includes: a core computing unit, a sensing unit, a control unit, a transmission unit, a support unit, and an integrated expansion unit.

[0086] The core computing unit is the computing core of the entire authentication module. The core computing unit is installed with a secure and trusted embedded operating system to perform task scheduling, program arrangement, calculation, message security encryption, decryption, and data communication between various functional units. Furthermore, corresponding expansion modules can be added according to later costs and special needs. For example, the core computing unit can add a GPU module to build an image recognition computing function; a security encryption chip can be added to build a high-intensity security encryption environment; WiFi and USB modules can be added to support local hardware module expansion.

[0087] The perception unit is used to collect the environment in the pipeline data security collection scenario for authentication confirmation (such as collection point location information, weather conditions, time information, etc.), module body perception (such as module boundary intrusion, disassembly, abnormal offline, out of position, etc.), target multi-factor authentication (such as image, face, fingerprint and other sensors), and special data collection perception such as visible light or thermal infrared. The perception unit can be embedded with meteorological element sensors, Beidou, GPS positioning sensors, thermal infrared and visible light cameras, etc.

[0088] The control unit is used to perform command control, explosion-proof monitoring of the embedded data acquisition equipment or device, as well as control and protection control of the node itself.

[0089] The transmission unit is used to ensure that the authentication device can be connected to the private network. It should support at least the network protocols and technologies of the three communication scenarios (including but not limited to LoRaLAN / LoRaWAN, 4G / 5G, ZigBee, nb-IoT, Beidou short message, etc.) for networking transmission and data transmission and reception.

[0090] The support unit is used to provide the authentication device with support functions such as power supply, local storage, and a three-proof housing, as well as an expansion interface.

[0091] Integrated expansion unit, which is mainly used to reserve integration functions for subsequent expansion protocols and devices. For example, it is used to expand the authentication embedded in the acquisition equipment using new technologies, or to support new private network acquisition protocols. It provides support for multiple data transmission protocols and interfaces such as SPI, I2C, RS485, MQTT, etc., to facilitate the control of various types of acquisition operation equipment. For example, it can be integrated with mobile terminals, drones, intelligent robots and other facilities and equipment.

[0092] The pipeline data security collection authentication module in the embodiment of the present application can authorize personnel, equipment and collection operations in various scenarios, and automatically upload the collected data to the data collection network, thereby improving the security of data collection and avoiding errors and delays caused by heavy manual input. The security encryption function can avoid unauthorized access to data. The perception and control unit can perceive the collection process and perform linkage command control on the collection equipment. It can also customize extended functions and embedding methods according to specific needs to meet the complex and changeable collection needs of pipeline data.

[0093] After step S700, the method provided in the embodiment of the present application further includes:

[0094] S710: Send the authorization license code key file to the smart pipeline data security authentication center for recycling closed-loop management;

[0095] S720: Based on the data collection dedicated network, encrypt the collected data and transmit it to the data demand part for storage and use;

[0096] S730: If the transmission of the collected data is completed, the retained data on the collection device is overwritten and deleted based on the pipeline data security collection authentication module.

[0097] Specifically, after the collection operation is completed, the unique authorization license key file is sent to the Smart Pipeline Data Security Certification Center for closed-loop management. The authorization license key file encrypts the collected data corresponding to the collection operation and is transmitted to the data demand part through the data collection dedicated network for storage, use and other subsequent processes.

[0098] The data of the collection operation will not be directly stored on the collection device. If external storage is required, it needs to be encrypted and can only be read and written after the authentication authorization between the pipeline data security collection device authentication module and the external storage. When the collection data obtained by the collection device is transmitted through the data collection dedicated transmission, the pipeline data security collection device authentication module is unplugged from the collection device, the data stored on the collection device cannot be read, and the application program periodically performs overwriting and clearing of the collection data.

[0099] The embodiment of the present application performs closed-loop management of the unique authorization license code key file, encrypts the data on the collection device and regularly clears it, so as to cover the entire data collection operation process in terms of data security supervision and protection, protect the security and non-tamperability of the collection receipts, and achieve the technical effect of improving the security of the collection operation and data.

[0100] The method provided in the embodiment of the present application further includes step S900, and step S900 includes:

[0101] S910: Based on the sensing unit of the pipeline data security collection and authentication module, the data collection operation of the authorized agency set is detected to obtain real-time detection results;

[0102] S920: judging whether there is an unauthorized organization performing unauthorized operations according to the real-time detection result;

[0103] S930: If there is an unauthorized organization performing the unauthorized operation, generate a first termination instruction;

[0104] S940: According to the first termination instruction, the control unit of the pipeline data security collection and authentication module is started, the data collection dedicated network is disconnected, and the collection operation of the collection device is terminated.

[0105] Specifically, based on the sensing unit of the pipeline data security collection and authentication module embedded in the collection equipment, technical control is carried out to detect the data collection operations of the authorized agency set and obtain real-time detection results. Among them, data collection in various pipeline application scenarios is authorized and authenticated through the authorization authentication code. If there is an unauthorized agency performing unauthorized operations, it can be known based on the real-time detection results. When the sensing unit of the pipeline data security collection and authentication module detects unauthorized data collection personnel, institutions or unauthorized operations, the first termination instruction is produced, which can start the control unit of the pipeline data security collection and authentication module, disconnect the connection of the data collection dedicated network, send a termination shutdown instruction to the collection equipment, and terminate the collection operation of the collection equipment.

[0106] The embodiments of the present application can improve the security of data collection by detecting whether there are unauthorized organizations conducting unauthorized data collection operations, standardize data collection operation standards, prevent illegal collection in advance, limit abnormal collection and non-standard collection, and avoid data collection chaos from the source.

[0107] The following describes the scenarios of actual applications of the method provided in the embodiments of the present application to provide a better understanding of the technical solution of the present application, but does not serve as a limitation of the present application.

[0108] In the emergency scenario of pipeline leakage, the steps for collecting safe pipeline data are as follows:

[0109] 1. The data collection agencies on the whitelist of the security certification center shall send the equipment, personnel and agency information for data collection in this scenario, as well as the collection operation type, collection area, collection time period and other collection operation information to the Smart Pipeline Data Security Certification Center for authorization application.

[0110] 2. The certification center will check and confirm the qualification information of the organization, personnel and equipment through database information comparison, and verify the rationality of the collection operation content, area and time. After the review is passed, the data collection operation authorization license code key file will be issued through the data collection dedicated network to start monitoring records.

[0111] 3. After the authorized agency obtains the operation authorization through the collection dedicated network, it arranges the collection personnel to conduct the authorization confirmation test of the pipeline data security collection authentication module of the collection equipment. Check whether the access rights of personnel, equipment, and dedicated network are normal. And check and confirm whether the collection content message template of the operation directly referenced and executed is consistent with the content of this collection operation.

[0112] 4. After confirmation, it was found that due to special circumstances, the emergency collection of this leak required the design of additional custom fields in the message. The data collection agency can refer to the collection requirements of similar scenarios or conduct self-assessment to design custom collection fields in the data message.

[0113] 5. Institutions and personnel related to data collection work and collection devices shall promptly carry out collection operations on site in accordance with collection operation standards.

[0114] 6. If the site does not have the conditions for smart pipeline IoT private network coverage, the collection private network construction and access testing should be carried out first, and then the data collection work application can be made.

[0115] The steps to implement the on-site collection dedicated network solution are as follows:

[0116] 1) Analyze the scenes and areas where data collection is required at the site of the pipeline leakage, estimate the coverage of the environmental dedicated network, and design a reasonable layout plan for the network nodes based on the coverage. If there is an environmental network construction plan for similar scenarios, you can directly refer to it.

[0117] 2) The networking nodes are based on a network transmission gateway or self-built base station embedded with a pipeline data security collection and authentication module authorization, which strengthens the networking transmission function and is assisted by the protection of the support unit and control unit to ensure the stability and reliability of the data transmission device.

[0118] 3) All networking node construction operations must refer to the data collection operation application process and be deployed after obtaining the authorization authentication code of personnel, institutions, devices and time and space boundaries.

[0119] 4) After the scene networking is completed, data transmission testing should be carried out with the security certification center to confirm that the security encryption, decryption and transmission performance of data transmission meet expectations. After the test passes, the data collection network can be used to apply for data collection operations.

[0120] 7. In some special cases, operations belonging to multiple collection agencies can be carried out at the same site, and the Safety Certification Center can allow multiple authorizations in the same scene. For example, in this emergency scenario, professional drone collection agencies can be allowed to enter the scene to collect aerial data on site to provide emergency auxiliary support. The collection operations of the collection agencies are all authorized, and the operation process does not interfere with each other and is supervised throughout the process.

[0121] 8. The collected data is submitted through the data collection network. The data demander confirms it through the data collection network and notifies the security certification center that the collection work is completed.

[0122] 9. After the data collection operation is completed, the authorization code for this data collection becomes invalid. The data retained on the collection device is deleted by overwriting through the pipeline data security collection authentication module and confirmed.

[0123] In summary, the embodiment of the present application provides a method for secure data collection of long-distance pipelines, which digitizes, standardizes, and intelligentizes the data collection operation process of smart pipelines, and covers the entire data collection operation process in terms of data security supervision and protection, effectively preventing unauthorized personnel, equipment, and unauthorized collection operations from occurring, improving the efficiency and level of data collection, making the management, planning, and monitoring and assessment of data collection work more scientific, and promoting the development of pipelines in a systematic, refined, and intelligent direction, laying the foundation for the ultimate realization of the overall goal of smart pipelines. The following technical effects are mainly achieved:

[0124] 1. The pipeline data security collection authentication module can authorize personnel, equipment and collection operations in various scenarios, and automatically upload the collected data to the data collection network, which improves the security of data collection and avoids errors and delays caused by heavy manual input. The security encryption function can avoid unauthorized access to data. The perception and control unit can perceive the collection process and perform linkage command control on the collection equipment. It can also customize the extended functions and embedding methods according to specific needs to meet the complex and changeable collection needs of pipeline data.

[0125] 2. The pipeline data security collection authentication module supports being embedded in various intelligent collection terminals, collection devices, and equipment in different ways. For example, through the linkage of the sensing and control unit with other pipeline industrial automation control equipment, an industrial control security collection terminal is constructed to collect industrial automation data securely; for specific scenario requirements such as emergency rescue and on-site patrol, the universal interface of new collection terminals (such as drones, VR helmets, etc.) can be quickly inserted and integrated to meet specific scenario requirements.

[0126] 3. Design data collection content, data collection devices, message formats, etc. for different scenarios, standardize the safe collection technology solutions for the scenarios, and complete the automated data collection operations through collection technology standardization. Prevent illegal collection in advance, limit abnormal collection and non-standard collection, and avoid data collection chaos from the source.

[0127] 4. Establish a smart pipeline data security certification center to be responsible for the data security collection supervision of the entire pipeline data collection life cycle. The collection agencies, personnel, and devices need to be evaluated, reviewed, and authorized at the security certification center, and a unique authorization authentication code is sent for each data collection process. The entire data collection process can be recorded, a complete data collection process can be built, and authorization boundaries can be defined for data collection work to avoid unauthorized data operations.

[0128] 5. By building a dedicated data collection network for smart pipelines and designing data collection networks suitable for different scenarios of smart pipelines to carry out safe data collection and transmission, we can avoid untimely data collection and difficult monitoring of data collection operations, ensure the security and controllability of the data itself, and improve the timeliness of data collection.

[0129] Embodiment 2

[0130] Based on the same inventive concept as the method for securely collecting data of a long-distance pipeline in the above-mentioned embodiment, Figure 4 As shown, an embodiment of the present application provides a long-distance pipeline data security collection system, wherein the system includes:

[0131] A first construction unit 11, wherein the first construction unit 11 is used to preset a pipeline data security collection scenario;

[0132] A second construction unit 12, the second construction unit 12 is used to construct a smart pipeline data security authentication center;

[0133] A first obtaining unit 13, the first obtaining unit 13 is used to obtain a target data collection mechanism set based on the pipeline data security collection scenario;

[0134] The first processing unit 14 is used to send the subject information and collection operation information of the target data collection organization set to the smart pipeline data security certification center for authorization application to obtain a first review result;

[0135] The second processing unit 15 is used to send the authorization license code key file of the first audit result to the authorization agency set based on the data collection dedicated network, wherein the authorization agency set is included in the target data collection agency set;

[0136] The third processing unit 16 is used to perform an authentication test on the access authority and the job collection content message template according to the pipeline data security collection authentication module and the authorization license code key file, and generate a first authentication result;

[0137] The first management unit 17 is used for the authorized agency set to perform a collection operation based on the pipeline data security collection scenario according to the first authentication result.

[0138] Furthermore, the system also includes:

[0139] A second obtaining unit, the second obtaining unit is used to obtain a collection operation type according to the pipeline data security collection scenario;

[0140] The third obtaining unit is used to design a data security transmission message format according to the acquisition operation type, wherein the data security transmission message format includes a data acquisition message format and a data transmission message format.

[0141] Furthermore, the system also includes:

[0142] A fourth processing unit, the fourth processing unit is used to perform regional analysis and network coverage estimation on the pipeline data security collection scenario, and generate a network node layout plan;

[0143] A fifth processing unit, the fifth processing unit is used to send the networking node layout plan to the smart pipeline data security authentication center for authorization application to obtain an authorization authentication code;

[0144] A sixth processing unit, the sixth processing unit is used to construct the data collection private network of the pipeline data security collection scenario according to the authorization authentication code, the data collection private network includes a dedicated channel encrypted transmission, an encrypted transmission internal network and a local transmission private network;

[0145] A seventh processing unit, the seventh processing unit is used to connect the data collection private network and the smart pipeline data security authentication center to perform a data transmission test and obtain a first test result;

[0146] A first judging unit, the first judging unit being used to judge whether the data transmission satisfies a preset test result according to the first test result;

[0147] An eighth processing unit, wherein the eighth processing unit is used to apply for a data collection operation based on the data collection dedicated network if the data transmission meets the preset test result.

[0148] Furthermore, the system also includes:

[0149] A ninth processing unit, the ninth processing unit is used to construct a permission database of the authentication subject according to the smart pipeline data security authentication center, wherein the authentication subject includes an internal operation management unit and a data collection agency;

[0150] A tenth processing unit, the tenth processing unit is used for obtaining a first approval result by the data collection agency submitting an electronic copy of the collection subject qualification for approval based on the smart pipeline data security certification center;

[0151] an eleventh processing unit, the eleventh processing unit being configured to add the data collection agency to a data collection job whitelist according to the first approval result;

[0152] A fourth obtaining unit, the fourth obtaining unit is used to obtain the target data collection agency set according to the data collection job whitelist.

[0153] Furthermore, the system also includes:

[0154] A twelfth processing unit, the twelfth processing unit is used to send the authorization license code key file to the smart pipeline data security authentication center for recycling closed-loop management;

[0155] A thirteenth processing unit, the thirteenth processing unit is used to encrypt the collected data based on the data collection dedicated network, and transmit it to the data demand part for storage and use;

[0156] A fourteenth processing unit is used to overwrite and delete the retained data on the collection device based on the pipeline data security collection authentication module if the transmission of the collected data is completed.

[0157] Furthermore, the system also includes:

[0158] A fifth obtaining unit, the fifth obtaining unit is used to detect the data collection operation of the authorized agency set based on the sensing unit of the pipeline data security collection authentication module to obtain a real-time detection result;

[0159] a second judgment unit, the second judgment unit being used to judge whether there is an unauthorized organization performing unauthorized operations according to the real-time detection result;

[0160] a fifteenth processing unit, the fifteenth processing unit being configured to generate a first termination instruction if the unauthorized institution performs the unauthorized operation;

[0161] The second management unit is used to start the control unit of the pipeline data security collection and authentication module according to the first termination instruction, disconnect the data collection dedicated network, and terminate the collection operation of the collection equipment.

[0162] Exemplary Electronic Devices

[0163] Reference below Figure 5 To describe the electronic device of the embodiment of the present application,

[0164] Based on the same inventive concept as the method for secure data collection of a long-distance pipeline in the aforementioned embodiment, the embodiment of the present application also provides a system for secure data collection of a long-distance pipeline, including: a processor, the processor is coupled to a memory, the memory is used to store a program, and when the program is executed by the processor, the system executes the steps of the method in embodiment one.

[0165] The electronic device 300 includes: a processor 302, a communication interface 303, and a memory 301. Optionally, the electronic device 300 may also include a bus architecture 304. The communication interface 303, the processor 302, and the memory 301 may be interconnected via the bus architecture 304; the bus architecture 304 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus architecture 304 may be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, Figure 5 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0166] The processor 302 may be a CPU, a microprocessor, an ASIC, or one or more integrated circuits for controlling the execution of the program of the present application.

[0167] The communication interface 303 uses any transceiver-like system for communicating with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area networks (WLAN), wired access networks, etc.

[0168] The memory 301 may be a ROM or other static storage device that can store static information and instructions, a RAM or other dynamic storage device that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disk, or a read-only optical disk.

[0169] read-only memory, CD-ROM) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by the computer, but is not limited to this. The memory can be independent and connected to the processor through the bus architecture 304. The memory can also be integrated with the processor.

[0170] The memory 301 is used to store computer-executable instructions for executing the solution of the present application, and the execution is controlled by the processor 302. The processor 302 is used to execute the computer-executable instructions stored in the memory 301, thereby realizing a method for safely collecting long-distance pipeline data provided in the above embodiment of the present application.

[0171] Optionally, the computer-executable instructions in the embodiments of the present application may also be referred to as application code, which is not specifically limited in the embodiments of the present application.

[0172] The embodiment of the present application constructs a smart pipeline data security authentication center by presetting a pipeline data security collection scenario, obtains a target data collection agency set based on a set of agencies that perform data collection in the pipeline data security collection scenario, sends the subject information and collection operation information of the target collection agency set to the smart pipeline data security authentication center for an authorization application, and after the authorization is completed, the authorized authorization agency obtains a unique authorization license code key file, and performs an authentication test on the access rights and operation collection content message template of the authorization agency through the pipeline data security collection authentication module and the authorization license code key file. According to the first authentication result, the authorized agency set performs pipeline data collection operations based on the pipeline data security collection scenario. The embodiment of the present application digitizes, standardizes and intelligentizes the smart pipeline data collection operation process by setting up modules such as a smart pipeline data security authentication center, a data collection dedicated network, and a pipeline data security collection authentication module, and covers the entire data collection operation process in terms of data security supervision and protection, effectively preventing unauthorized personnel, equipment, institutions and unauthorized collection operations from occurring, improving the efficiency and level of data collection, making the management, planning and monitoring and assessment of data collection work more scientific, promoting the development of pipelines in a systematic, refined and intelligent direction, laying the foundation for the ultimate realization of the overall goal of smart pipelines, and achieving the technical effects of improving pipeline data collection efficiency, reducing collection difficulty, and improving data security.

[0173] Those of ordinary skill in the art will appreciate that the various digital numbers such as the first and second involved in the present application are only for the convenience of description, and are not used to limit the scope of the embodiments of the present application, nor do they represent the order of precedence. "And / or" describes the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one" refers to one or more. At least two refers to two or more. "At least one", "any one" or similar expressions refer to any combination of these items, including any combination of single items (individuals) or plural items (individuals). For example, at least one item (individual, kind) of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0174] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loading and executing computer program instructions on a computer, the process or function according to the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server, a data center, etc. that includes one or more available media integrated. The available medium can be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk (SSD)), etc.

[0175] The various illustrative logic units and circuits described in the embodiments of the present application can be implemented or operated by a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic, a discrete hardware component, or the design of any combination of the above functions. The general-purpose processor can be a microprocessor, and optionally, the general-purpose processor can also be any traditional processor, controller, microcontroller or state machine. The processor can also be implemented by a combination of computing devices, such as a digital signal processor and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a digital signal processor core, or any other similar configuration to implement.

[0176] The steps of the method or algorithm described in the embodiments of the present application can be directly embedded in hardware, a software unit executed by a processor, or a combination of the two. The software unit can be stored in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium in the art. Exemplarily, the storage medium can be connected to the processor so that the processor can read information from the storage medium and can write information to the storage medium. Optionally, the storage medium can also be integrated into the processor. The processor and the storage medium can be arranged in an ASIC, and the ASIC can be arranged in a terminal. Optionally, the processor and the storage medium can also be arranged in different components in the terminal. These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are performed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide for implementing the process in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0177] Although the present application has been described in conjunction with specific features and embodiments thereof, it is obvious that various modifications and combinations may be made thereto without departing from the spirit and scope of the present application. Accordingly, this specification and the drawings are merely exemplary illustrations of the present application as defined by the appended claims, and are deemed to have covered any and all modifications, variations, combinations or equivalents within the scope of the present application. Obviously, a person skilled in the art may make various modifications and variations to the present application without departing from the scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is intended to include these modifications and variations.

Claims

1. A method for securely collecting data on a long-distance pipeline, wherein: The method comprises: Preset pipeline data security collection scenarios; Build a smart pipeline data security certification center; Based on the pipeline data security collection scenario, a target data collection mechanism set is obtained; Send the subject information and collection operation information of the target data collection organization set to the smart pipeline data security certification center for authorization application to obtain a first review result; Based on the data collection dedicated network, the authorization license code key file of the first audit result is sent to the authorization agency set, wherein the authorization agency set is included in the target data collection agency set, and the authorization license code key file is generated by encrypting the timestamp, agency identification code, personnel information code, equipment information code, business information code, effective area information code and validity period information; According to the pipeline data security collection authentication module and the authorization license code key file, the authorization agency set performs an authentication test on the access authority and the job collection content message template to generate a first authentication result, wherein the pipeline data security collection authentication module performs multi-factor verification on the unique authorization license code key file to complete the authentication test, and the multi-factor verification includes verifying and authenticating multiple categories of information in the authorization license code key file, including a timestamp, an agency identification code, a personnel information code, a device information code, a business information code, an effective area information code, and a validity period information; According to the first authentication result, the authorized agency set performs a collection operation based on the pipeline data security collection scenario; Wherein, the data collection dedicated network includes: For the pipeline data security collection scenario, regional analysis and network coverage estimation are performed to generate a network node layout plan; Send the networking node layout plan to the smart pipeline data security authentication center to apply for authorization and obtain an authorization authentication code; According to the authorization authentication code, the data collection private network of the pipeline data security collection scenario is constructed, and the data collection private network includes a dedicated channel encrypted transmission, an encrypted transmission internal network, and a local transmission private network; Connecting the data collection private network to the smart pipeline data security authentication center, performing a data transmission test, and obtaining a first test result; According to the first test result, determining whether the data transmission meets the preset test result; If the data transmission meets the preset test result, a data collection operation application is performed based on the data collection dedicated network.

2. The method of claim 1, wherein: The method further comprises: According to the pipeline data security collection scenario, obtaining a collection operation type; According to the type of the acquisition operation, a data security transmission message format is designed, wherein the data security transmission message format includes a data acquisition message format and a data transmission message format.

3. The method of claim 2, wherein: The construction of the smart pipeline data security authentication center includes: According to the smart pipeline data security authentication center, a permission database of authentication subjects is constructed, wherein the authentication subjects include internal operation management units and data collection agencies; Based on the smart pipeline data security certification center, the data collection agency submits the electronic version of the collection subject qualification for approval and obtains a first approval result; According to the first approval result, adding the data collection agency to a data collection job whitelist; According to the data collection operation whitelist, the target data collection organization set is obtained.

4. The method of claim 2, wherein: The collection operation based on the pipeline data security collection scenario includes: Send the authorization license code key file to the smart pipeline data security authentication center for recycling closed-loop management; Based on the data collection dedicated network, the collected data is encrypted and transmitted to the data demand part for storage and use; If the transmission of the collected data is completed, the retained data on the collection device is overwritten and deleted based on the pipeline data security collection authentication module.

5. The method of claim 1, wherein: The pipeline data security collection and authentication module includes: According to the pipeline data security collection and authentication module, matching the embedding mode of the data collection device; The pipeline data security collection and authentication module includes: a core computing unit, a sensing unit, a control unit, a transmission unit, a support unit and an integrated expansion unit.

6. The method of claim 2, wherein: The method further comprises: Based on the sensing unit of the pipeline data security collection and authentication module, the data collection operation of the authorized agency set is detected to obtain real-time detection results; According to the real-time detection results, determining whether there is an unauthorized organization performing unauthorized operations; If the unauthorized organization performs the unauthorized operation, generating a first termination instruction; According to the first termination instruction, the control unit of the pipeline data security collection and authentication module is started, the data collection dedicated network is disconnected, and the collection operation of the collection device is terminated.

7. A long-distance pipeline data security collection system, wherein: A method for safely collecting data on a long-distance pipeline according to any one of claims 1 to 6, the system comprising: A first construction unit, the first construction unit is used to preset a pipeline data security collection scenario; A second construction unit, the second construction unit is used to construct a smart pipeline data security authentication center; A first obtaining unit, the first obtaining unit is used to obtain a target data collection mechanism set based on the pipeline data security collection scenario; A first processing unit, the first processing unit is used to send the subject information and collection operation information of the target data collection organization set to the smart pipeline data security certification center for authorization application, and obtain a first review result; A second processing unit, the second processing unit is used to send the authorization license code key file of the first audit result to the authorization agency set based on the data collection dedicated network, wherein the authorization agency set is included in the target data collection agency set, and the authorization license code key file is generated by encrypting the timestamp, agency identification code, personnel information code, equipment information code, business information code, effective area information code and validity period information; A third processing unit, the third processing unit is used to perform an authentication test on the access authority and the job collection content message template according to the pipeline data security collection authentication module and the authorization license code key file, and generate a first authentication result, wherein the pipeline data security collection authentication module performs multi-factor verification on the unique authorization license code key file to complete the authentication test, and the multi-factor verification includes verifying and authenticating multiple categories of information in the authorization license code key file, including a timestamp, an organization identification code, a personnel information code, a device information code, a business information code, an effective area information code, and a validity period information; A first management unit, wherein the first management unit is configured to enable the authorized agency set to perform a collection operation based on the pipeline data security collection scenario according to the first authentication result.

8. A long-distance pipeline data security collection system, comprising: A processor is coupled to a memory, and the memory is used to store a program. When the program is executed by the processor, the system executes the steps of any one of the methods of claims 1 to 6.

Images