Equipment remote operation and maintenance system, method, device and storage medium

Abstract

The present invention discloses a remote operation and maintenance system, method, device and storage medium for equipment, and relates to the field of information technology. A remote operation and maintenance terminal determines an associated gateway number based on a user account, sends a first VPN request containing the gateway number to a VPN server cluster, and sends a VPN connection notification to a corresponding edge gateway based on the gateway number to trigger the edge gateway to send a second VPN request to the VPN server cluster based on the VPN connection notification. The VPN server cluster selects a VPN server based on the first VPN request and the second VPN request, and then automatically creates a VPN connection between the edge gateway and the remote operation and maintenance terminal. The connection is actively triggered by the remote operation and maintenance terminal, and the VPN configuration is completed in the VPN server cluster. There is no need for complex manual VPN configuration at the edge gateway, thus saving remote operation and maintenance costs. The VPN server cluster also receives a timed shutdown instruction from the VPN server. When the VPN server cluster resources are insufficient, the VPN server is used according to the timed VPN server to avoid wasting cluster resources.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to a remote operation and maintenance system, method, device and storage medium for equipment. Background Art

[0002] A Programmable Logic Controller (PLC) is a digital computing controller with a microprocessor for automated control. It can load control instructions into memory for storage and execution at any time. A PLC consists of a CPU, instruction and data memory, input / output interfaces, a power supply, digital-to-analog converters, and other functional units. Currently, PLCs are widely used in various industries, and different application environments require adjustment of different PLC parameters. With the development of internet technology, on-site PLC operation and maintenance has gradually evolved into remote operation and maintenance.

[0003] Currently, remote operation and maintenance technology uses VPN (Virtual Private Network) technology to establish a connection between the device-side gateway and the PC. When establishing the connection between the two, manual network configuration is required for both the device-side gateway and the PC. The operation process is complicated, and as the number of devices increases, the performance and bandwidth requirements for the cloud server also increase, which increases the cost of remote operation and maintenance of the device. Summary of the Invention

[0004] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention provides a remote equipment operation and maintenance system, method, apparatus and storage medium, which can reduce the cost of remote equipment operation and maintenance.

[0005] In one aspect, an embodiment of the present invention provides a device remote operation and maintenance system, comprising an edge gateway, a remote operation and maintenance terminal, and a VPN server cluster, wherein the VPN server cluster comprises a plurality of VPN servers;

[0006] The remote operation and maintenance terminal is used to obtain a logged-in user account, determine an associated gateway number based on the user account, send a first VPN request including the gateway number to the VPN server cluster, and send a VPN connection notification to the corresponding edge gateway based on the gateway number;

[0007] The edge gateway is configured to send a second VPN request to the VPN server cluster according to the VPN connection notification;

[0008] The VPN server cluster is used to select a VPN server according to the first VPN request and the second VPN request, and to create a VPN connection between the edge gateway and the remote operation and maintenance terminal according to the VPN server;

[0009] The VPN server cluster is further configured to receive a timed shutdown instruction, and when resources of the VPN server cluster are insufficient, shut down the VPN server according to the timed shutdown instruction.

[0010] According to some embodiments of the present invention, the device remote operation and maintenance system further includes an MQTT proxy server, and the remote operation and maintenance terminal sends the VPN connection notification to the edge gateway through the MQTT proxy server.

[0011] According to some embodiments of the present invention, the MQTT proxy server is provided with a message processing component, the message processing component is used to process asynchronous MQTT messages from the client of the MQTT proxy server, the message processing component includes a device status message processing unit and an operation and maintenance timing service processing unit;

[0012] The device status message processing unit is used to put the gateway status message from the edge gateway into the first queue for sequential processing;

[0013] The operation and maintenance timing service processing unit is used to generate a timed shutdown instruction of the VPN server and put it into the second queue to start timing from zero when the edge gateway and the remote operation and maintenance terminal establish a connection through the VPN server. When the timing reaches a preset time, the timed shutdown instruction is taken out from the second queue for scheduling to provide the timed shutdown instruction to the edge gateway or VPN server cluster.

[0014] According to some embodiments of the present invention, the remote operation and maintenance terminal is further used to:

[0015] Get serial port operation and maintenance instructions;

[0016] Start creating a virtual serial port and starting the TCP server according to the serial port operation and maintenance instructions;

[0017] Send a serial port connection notification to the edge gateway so that the edge gateway connects to the TCP server based on the VPN connection.

[0018] According to some embodiments of the present invention, the equipment remote operation and maintenance system further includes a remote maintenance management platform;

[0019] The remote maintenance management platform is used to manage user accounts in a user group and gateway numbers in the user accounts.

[0020] According to some embodiments of the present invention, the VPN server cluster is further configured to:

[0021] Parsing the first VPN request to obtain a gateway number;

[0022] Select an idle VPN server and bind it to the gateway number to update the VPN server management table;

[0023] Returning a first response message to the remote operation and maintenance terminal to obtain a second VPN request from the edge gateway;

[0024] Determining from the VPN server management table whether the edge gateway initiating the second VPN request is bound to a VPN server according to the identity information in the second VPN request;

[0025] When the edge gateway that initiates the second VPN request is bound to the VPN server, a connection between the edge gateway and the VPN server is established, and a second response message is returned to the edge gateway to obtain a third VPN request from the remote operation and maintenance terminal;

[0026] A connection is established between the remote operation and maintenance terminal and the VPN server according to the third VPN request.

[0027] According to some embodiments of the present invention, the VPN server cluster is further configured to:

[0028] Get the shutdown command;

[0029] Querying the corresponding VPN server from the VPN server management table according to the gateway number of the shutdown instruction;

[0030] The VPN server in the VPN server management table is unbound from the gateway number, and the VPN server is shut down.

[0031] On the other hand, an embodiment of the present invention further provides a device remote operation and maintenance method, which is applied to the VPN server cluster as described above. The device remote operation and maintenance method includes the following steps:

[0032] Receive a first VPN request from a remote operation and maintenance terminal and a second VPN request from an edge gateway;

[0033] selecting a VPN server according to the first VPN request and the second VPN request;

[0034] Creating a VPN connection between the edge gateway and the remote operation and maintenance terminal according to the VPN server;

[0035] Monitor the timed shutdown command;

[0036] When the VPN server cluster resources are insufficient, the VPN server is shut down according to the timed shutdown instruction.

[0037] On the other hand, an embodiment of the present invention further provides a device remote operation and maintenance apparatus, comprising:

[0038] at least one processor;

[0039] at least one memory for storing at least one program;

[0040] When the at least one program is executed by the at least one processor, the at least one processor implements the device remote operation and maintenance method as described above.

[0041] On the other hand, an embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the device remote operation and maintenance method as described above.

[0042] The above-mentioned technical solution of the present invention has at least one of the following advantages or beneficial effects: a user account is logged into a remote operation and maintenance terminal, the remote operation and maintenance terminal determines the associated gateway number based on the user account, sends a first VPN request containing the gateway number to the VPN server cluster, sends a VPN connection notification to the corresponding edge gateway based on the gateway number, triggering the edge gateway to send a second VPN request to the VPN server cluster based on the VPN connection notification, the VPN server cluster selects a VPN server based on the first VPN request and the second VPN request, automatically creates a VPN connection between the edge gateway and the remote operation and maintenance terminal based on the VPN server, actively triggers the connection through the remote operation and maintenance terminal, completes VPN configuration in the VPN server cluster, thereby eliminating the need for complex manual VPN configuration at the edge gateway and saving remote operation and maintenance costs. In addition, the VPN server cluster also receives a timed shutdown instruction from the VPN server. When the VPN server cluster resources are insufficient, the VPN server cluster is shut down according to the timed VPN server, thereby avoiding waste of VPN server cluster resources and saving remote operation and maintenance costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 Schematic diagram of a remote equipment operation and maintenance system provided by an embodiment of the present invention;

[0044] Figure 2 This is a flow chart of a remote operation and maintenance process in which a remote operation and maintenance terminal enters a remote operation and maintenance process according to an embodiment of the present invention;

[0045] Figure 3 This is a flow chart of the edge gateway entering remote operation and maintenance process provided by an embodiment of the present invention;

[0046] Figure 4 Schematic diagram of a remote equipment operation and maintenance device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0047] The following describes embodiments of the present invention in detail. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar components or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended only to explain the present invention and are not to be construed as limiting the present invention.

[0048] In the description of the present invention, it should be understood that descriptions involving orientations, such as up, down, left, right, etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, they cannot be understood as limitations on the present invention.

[0049] In the description of the present invention, if there is a description of first, second, etc., it is only for the purpose of distinguishing technical features, and cannot be understood as indicating or suggesting relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0050] Before further describing the embodiments of the present application in detail, the nouns and terms involved in the embodiments of the present application are explained. The nouns and terms involved in the embodiments of the present application are subject to the following interpretations.

[0051] VPN is a remote secure tunnel connection technology. After establishing a VPN dial-up connection, you connect to the remote VPN server using your username and password. Once connected correctly, you will obtain the remote IP address assigned by the server and communicate with other devices in the network segment.

[0052] The embodiment of the present invention provides a remote operation and maintenance system for equipment, referring to Figure 1 ,The equipment remote operation and maintenance system includes an edge gateway, a remote ,operation and maintenance terminal, and a VPN server cluster, ,which includes multiple VPN servers.

[0053] The remote operation and maintenance terminal is used to obtain the logged-in user account, determine the associated gateway number according to the user account, send a first VPN request including the gateway number to the VPN server cluster, and send a VPN connection notification to the corresponding edge gateway according to the gateway number.

[0054] The edge gateway is used to send a second VPN request to the VPN server cluster according to the VPN connection notification.

[0055] The VPN server cluster is used to select a VPN server according to the first VPN request and the second VPN request, and to create a VPN connection between the edge gateway and the remote operation and maintenance terminal according to the VPN server.

[0056] The VPN server cluster is further configured to receive a timed shutdown instruction. When the VPN server cluster resources are insufficient, the VPN server is shut down according to the timed shutdown instruction.

[0057] In this embodiment, the remote operation and maintenance terminal can be a personal computer, mobile phone, tablet computer, or other device, and the VPN server cluster can be installed in a cloud server. After logging in to the remote operation and maintenance terminal, the user can use a single click to activate the VPN server in the cloud server, the VPN client of the edge gateway, and the VPN client of the remote operation and maintenance terminal, thereby establishing a local area network mechanism. This allows for remote maintenance of the edge gateway, maintenance of the PLC connected to the gateway's Ethernet network through the network port bridging function (downloading and downloading PLC ladder diagrams and monitoring PLC operating status), and remote maintenance of the PLC through the PLC's USB download cable connected to the gateway's USB port through serial port transparent transmission and other functions.

[0058] In this embodiment, after the cloud server creates a VPN connection between the edge gateway and the remote operation and maintenance terminal, it starts a timing mechanism to automatically release the VPN server after a certain period of time and when all VPN servers are exhausted, so as to achieve high availability of server resources, thereby saving server performance and bandwidth.

[0059] Furthermore, if Figure 1 As shown, the device remote operation and maintenance system also includes a remote maintenance management platform, which is used to manage user accounts in user groups and the gateway numbers associated with those user accounts. The remote maintenance management platform allows users to create or delete user groups, add or delete user accounts within user groups, register and bind edge gateway numbers to user accounts, and manage VPN server cluster resources.

[0060] For example, a super user logs in to the remote maintenance management platform's web interface, adds a user group on the gateway management page, then adds a user under the newly added user group. Then, under the newly added user, they add a gateway. On the add gateway page, they enter the gateway's 7-digit unique code and related notes to complete platform registration for the edge gateway. Administrators add VPN servers on the VPN management page and can set the maximum number of VPN servers based on the performance and bandwidth of the cloud servers.

[0061] Furthermore, if Figure 1 As shown in the figure, the remote device operation and maintenance system also includes an MQTT proxy server. The remote operation and maintenance terminal sends VPN connection notifications to the edge gateway through the MQTT proxy server. The MQTT proxy server is responsible for receiving all messages, filtering messages by topic, determining the subscribers of each message, and sending the messages to the subscribing clients. The MQTT proxy server maintains a constant connection with the subscribing clients.

[0062] Furthermore, if Figure 1 As shown, the MQTT proxy server is provided with a message processing component, which is used to process asynchronous MQTT messages from the client of the MQTT proxy server. The message processing component includes a device status message processing unit and an operation and maintenance timing service processing unit.

[0063] The device status message processing unit is used to place gateway status messages from the edge gateway into the first queue for sequential processing. By setting up the device status message processing unit, the remote operation and maintenance terminal can query the status of the edge gateway associated with the user account. After verifying that the edge gateway is online, it can request to connect to the VPN server, thereby avoiding invalid VPN requests and reducing the pressure on the cloud server to process requests.

[0064] The operation and maintenance timing service processing unit is used to generate a timed shutdown instruction for the VPN server and put it into the second queue to start timing from zero when the edge gateway and the remote operation and maintenance terminal establish a connection through the VPN server. When the timing reaches the preset time, the timed shutdown instruction is taken out from the second queue for scheduling to provide the timed shutdown instruction to the edge gateway or VPN server cluster. When the VPN server cluster receives the timed shutdown instruction and the VPN server cluster resources are insufficient, the VPN server is shut down according to the timed shutdown instruction, which can reduce the waste of VPN server resources caused by the user forgetting to end the operation and maintenance operation at the remote operation and maintenance terminal. When the edge gateway receives the timed shutdown instruction, it triggers the shutdown of the remote operation and maintenance function, which can reduce the power consumption of the edge gateway. In this embodiment, the preset time can be 2 hours.

[0065] Furthermore, the remote operation and maintenance terminal is provided with a virtual serial port software, which can perform serial port operation and maintenance based on the Ethernet connection. Specifically, the remote operation and maintenance terminal obtains the serial port operation and maintenance instructions, starts to create a virtual serial port and starts the TCP server according to the serial port operation and maintenance instructions, and sends a serial port connection notification to the edge gateway through the MQTT proxy server, so that the edge gateway connects to the TCP server based on the VPN connection, thereby remotely transmitting the edge gateway serial port data to the remote operation and maintenance terminal.

[0066] In other embodiments, the configuration of each component in the remote operation and maintenance system for equipment according to the embodiment of the present invention is described in detail.

[0067] The remote maintenance and management platform is built on top of the underlying VPN server cluster. Its application layer includes functions such as gateway management, VPN management, account management, remote operations and maintenance management, platform log management, and API management. The remote maintenance and management platform is deployed on a cloud server. The specific deployment process involves installing the MySQL 5.7 server Docker image and importing the remote maintenance and management platform's database and table MySQL statements. The platform's web runtime environment is installed. For example, if the web is developed using Python Flask, a Python Virtualenv environment is deployed on the cloud server and relevant dependencies are installed within this environment. The Nginx system is installed, and the VPN service is installed, such as the openvpn-2.4.12 project. When the remote maintenance and management platform is running, VPN configuration parameters are automatically added when a new VPN server is added to the VPN management web interface, allowing management of the VPN server cluster.

[0068] The MQTT proxy server is to install the mosquito docker image on the cloud server, configure a fixed MQTT TCP port and authentication account password, and set up functions such as topic filtering.

[0069] The message processing component mainly includes the device status message processing unit and operation and maintenance timing business processing. The device status message processing unit includes the device status MQTT message processing of the edge gateway and the will MQTT message processing of the PC. The message processing component can be developed in Python. Create a new Virtualenv project environment on the cloud server, install the Python dependency library related to the message processing component, and run it.

[0070] Remote operation and maintenance terminal, install the PC remote operation and maintenance terminal software package, before using the PC remote operation and maintenance terminal, you need to install related drivers, such as tap-windows.exe driver software, OpenVPN-2.5.5-I602-amd64.msi VPN software, SetupVSPE_64.msi virtual serial port driver. Remote operation and maintenance terminal, that is, the PC enters the remote operation and maintenance function such as Figure 2As shown, after a user logs in to the remote operation and maintenance terminal with a user account, all edge gateway devices under the current account group or user account are automatically obtained, and an MQTT message is automatically sent to request the online status of the edge gateway. If the edge gateway device is online, the remote maintenance interface is entered, and then Ethernet remote operation and maintenance or serial port remote operation and maintenance are entered with one click. This allows remote maintenance of the edge gateway or the PLC connected to the edge gateway, displaying the remote maintenance function for multiple devices. When Ethernet remote operation and maintenance or serial port remote operation and maintenance are completed, if the remote operation and maintenance software on the PC is actively closed, the edge gateway and related VPN server will automatically close the remote maintenance function. If the user does not close the PC remote software, the message processing component on the cloud server will automatically close the related VPN server after 2 hours, and the edge gateway will also close the remote maintenance function after 2 hours.

[0071] Edge gateway, install VPN service on the edge gateway, for example, install openvpn-2.4.12 project, copy the gateway operation and maintenance software to the directory, set it to start automatically at boot, and modify the edge gateway unique code, server IP address and port number in yw.xml. At the same time, the gateway operation and maintenance software has network port bridging function and remote serial port transparent transmission function. Specifically, the edge gateway enters the remote maintenance function as follows Figure 3 shown.

[0072] In other embodiments, the process of connecting the edge gateway and the remote operation and maintenance terminal to the VPN server in the remote operation and maintenance system for devices according to the embodiments of the present invention is described in detail.

[0073] The remote maintenance terminal initiates a first VPN request to the VPN server cluster, where the first VPN request includes the gateway number of the edge gateway that requires operation and maintenance;

[0074] After receiving the first VPN request, the VPN server cluster parses the first VPN request to obtain a gateway number, selects an idle VPN server and binds it to the gateway number to update the VPN server management table, and returns a first response message to the remote operation and maintenance terminal. The VPN server management table includes each VPN server created by the administrator, the activation status and binding status of the VPN server, and the corresponding gateway number when in the bound state.

[0075] After receiving the first response message, the remote maintenance terminal sends a VPN connection notification to the edge gateway through the MQTT proxy server;

[0076] After receiving the VPN connection notification, the edge gateway sends a second VPN request to the VPN server cluster using the VPN link credentials;

[0077] The VPN server cluster determines, from the VPN server management table, whether the edge gateway initiating the second VPN request is bound to the VPN server based on the identity information in the second VPN request. If the edge gateway initiating the second VPN request is bound to the VPN server, the VPN server cluster authenticates the edge gateway, establishes a connection between the edge gateway and the VPN server, and returns a second response message to the edge gateway.

[0078] After receiving the second response information, the edge gateway sends a VPN connection success message to the remote maintenance terminal through the MQTT proxy server;

[0079] After receiving the VPN connection success message, the remote maintenance terminal initiates a third VPN request to the VPN server cluster;

[0080] The VPN server cluster authenticates the remote operation and maintenance terminal according to the third VPN request, and then establishes a connection between the remote operation and maintenance terminal and the VPN server.

[0081] In some embodiments, to ensure the security of the operation of VPN clients such as edge gateways and remote operation and maintenance terminals, the authentication credentials of the VPN clients can be regularly updated through the remote maintenance and management platform.

[0082] Furthermore, the VPN server cluster is also used to:

[0083] Get the shutdown command;

[0084] According to the gateway number of the shutdown instruction, the corresponding VPN server is searched from the VPN server management table;

[0085] Unbind the VPN server in the VPN server management table from the gateway number and shut down the VPN server.

[0086] In this embodiment, the shutdown instruction may be a shutdown instruction triggered by the remote operation and maintenance terminal actively withdrawing from the operation and maintenance of the edge network element, or may be a timed shutdown instruction scheduled by the operation and maintenance timed service processing unit.

[0087] On the other hand, an embodiment of the present invention further provides a device remote operation and maintenance method, which is applied to the VPN server cluster as in the previous embodiment. The device remote operation and maintenance method includes the following steps:

[0088] Receive a first VPN request from a remote operation and maintenance terminal and a second VPN request from an edge gateway;

[0089] selecting a VPN server based on the first VPN request and the second VPN request;

[0090] Create a VPN connection between the edge gateway and the remote operation and maintenance terminal based on the VPN server;

[0091] Monitor the timed shutdown command;

[0092] When the VPN server cluster resources are insufficient, the VPN server will be shut down according to the scheduled shutdown instruction.

[0093] It can be understood that the contents of the above-mentioned equipment remote operation and maintenance system embodiments are applicable to the embodiments of this method. The functions specifically implemented by the embodiments of this method are the same as those in the above-mentioned equipment remote operation and maintenance system embodiments, and the beneficial effects achieved are also the same as those achieved by the above-mentioned equipment remote operation and maintenance system embodiments.

[0094] Reference Figure 4 , Figure 4 Schematic diagram of a remote device operation and maintenance apparatus according to an embodiment of the present invention. The remote device operation and maintenance apparatus according to the embodiment of the present invention includes one or more control processors and a memory. Figure 4 A control processor and a memory are taken as an example.

[0095] The control processor and the memory can be connected via a bus or other means. Figure 4 The bus connection is taken as an example.

[0096] The memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer executable programs. In addition, the memory may include a high-speed random access memory and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory may optionally include a memory remotely located relative to the control processor, and these remote memories may be connected to the remote operation and maintenance device of the device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0097] Those skilled in the art will understand that Figure 4 The device structure shown in the figure does not constitute a limitation on the remote operation and maintenance device of the equipment, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0098] The non-transient software programs and instructions required to implement the equipment remote operation and maintenance method applied to the equipment remote operation and maintenance device in the above embodiment are stored in the memory. When executed by the control processor, the equipment remote operation and maintenance method applied to the equipment remote operation and maintenance device in the above embodiment is executed.

[0099] In addition, an embodiment of the present invention also provides a computer-readable storage medium, which stores computer-executable instructions. The computer-executable instructions are executed by one or more control processors, enabling the above-mentioned one or more control processors to execute the equipment remote operation and maintenance method in the above-mentioned method embodiment.

[0100] Those skilled in the art will appreciate that all or some of the steps and systems in the method disclosed above can be implemented as software, firmware, hardware, and appropriate combinations thereof. Some physical components or all physical components can be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software can be distributed on a computer-readable medium, and the computer-readable medium can include computer storage media (or non-transitory media) and communication media (or temporary media). As known to those skilled in the art, the term computer storage media is included in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data) and is volatile and non-volatile, removable, and non-removable. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory, or other memory technology, CD-ROM, digital versatile disks (DVD), or other optical disk storage, magnetic cassettes, magnetic tapes, disk storage, or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, as is well known to those skilled in the art, communication media typically embodies computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0101] The embodiments of the present invention are described in detail above with reference to the accompanying drawings. However, the present invention is not limited to the above embodiments. Various changes can be made within the knowledge of ordinary technicians in the relevant technical field without departing from the scope of the present invention.

Claims

1. A remote equipment operation and maintenance system, characterized in that: It includes an edge gateway, a remote operation and maintenance terminal, and a VPN server cluster, wherein the VPN server cluster includes multiple VPN servers; The remote operation and maintenance terminal is used to obtain a logged-in user account, determine an associated gateway number based on the user account, send a first VPN request including the gateway number to the VPN server cluster, and send a VPN connection notification to the corresponding edge gateway based on the gateway number; The edge gateway is configured to send a second VPN request to the VPN server cluster according to the VPN connection notification; The VPN server cluster is used to select a VPN server according to the first VPN request and the second VPN request, and to create a VPN connection between the edge gateway and the remote operation and maintenance terminal according to the VPN server; The VPN server cluster is further configured to receive a timed shutdown instruction, and when resources of the VPN server cluster are insufficient, shut down the VPN server according to the timed shutdown instruction; The VPN server cluster specifically creates a VPN connection through the following steps: Parsing the first VPN request to obtain a gateway number; Select an idle VPN server and bind it to the gateway number to update the VPN server management table; Returning a first response message to the remote operation and maintenance terminal, so that the remote operation and maintenance terminal sends a VPN connection notification to the edge gateway, and after receiving the VPN connection notification, the edge gateway sends a second VPN request to the VPN server cluster using the VPN link credential; Obtain a second VPN request from the edge gateway; Determining from the VPN server management table whether the edge gateway initiating the second VPN request is bound to a VPN server according to the identity information in the second VPN request; When the edge gateway that initiates the second VPN request is bound to the VPN server, a connection is established between the edge gateway and the VPN server, and a second response message is returned to the edge gateway, so that the edge gateway sends a VPN connection success message to the remote maintenance terminal. After receiving the VPN connection success message, the remote maintenance terminal initiates a third VPN request to the VPN server cluster. Obtain a third VPN request from a remote operation and maintenance terminal; A connection is established between the remote operation and maintenance terminal and the VPN server according to the third VPN request.

2. The equipment remote operation and maintenance system according to claim 1, characterized in that: The device remote operation and maintenance system also includes an MQTT proxy server, and the remote operation and maintenance terminal sends the VPN connection notification to the edge gateway through the MQTT proxy server.

3. The equipment remote operation and maintenance system according to claim 2, characterized in that: The MQTT proxy server is provided with a message processing component, which is used to process asynchronous MQTT messages from the client of the MQTT proxy server, and the message processing component includes a device status message processing unit and an operation and maintenance timing service processing unit; The device status message processing unit is used to put the gateway status message from the edge gateway into the first queue for sequential processing; The operation and maintenance timing service processing unit is used to generate a timed shutdown instruction of the VPN server and put it into the second queue to start timing from zero when the edge gateway and the remote operation and maintenance terminal establish a connection through the VPN server. When the timing reaches a preset time, the timed shutdown instruction is taken out from the second queue for scheduling to provide the timed shutdown instruction to the edge gateway or VPN server cluster.

4. The equipment remote operation and maintenance system according to claim 1, characterized in that: The remote operation and maintenance terminal is also used for: Get serial port operation and maintenance instructions; Start creating a virtual serial port and starting the TCP server according to the serial port operation and maintenance instructions; Send a serial port connection notification to the edge gateway so that the edge gateway connects to the TCP server based on the VPN connection.

5. The equipment remote operation and maintenance system according to claim 1, characterized in that: The equipment remote operation and maintenance system also includes a remote maintenance management platform; The remote maintenance management platform is used to manage user accounts in a user group and gateway numbers in the user accounts.

6. The equipment remote operation and maintenance system according to claim 1, characterized in that: The VPN server cluster is further configured to: Get the shutdown command; Querying the corresponding VPN server from the VPN server management table according to the gateway number of the shutdown instruction; The VPN server in the VPN server management table is unbound from the gateway number, and the VPN server is shut down.

7. A remote operation and maintenance method for equipment, characterized in that: Applied to the VPN server cluster according to claim 1, the device remote operation and maintenance method comprises the following steps: Parsing the first VPN request from the remote operation and maintenance terminal to obtain the gateway number; Select an idle VPN server and bind it to the gateway number to update the VPN server management table; Returning a first response message to the remote operation and maintenance terminal, so that the remote operation and maintenance terminal sends a VPN connection notification to the edge gateway, and after receiving the VPN connection notification, the edge gateway sends a second VPN request to the VPN server cluster using the VPN link credential; Obtain a second VPN request from the edge gateway; Determining from the VPN server management table whether the edge gateway initiating the second VPN request is bound to a VPN server according to the identity information in the second VPN request; When the edge gateway that initiates the second VPN request is bound to the VPN server, a connection is established between the edge gateway and the VPN server, and a second response message is returned to the edge gateway, so that the edge gateway sends a VPN connection success message to the remote maintenance terminal. After receiving the VPN connection success message, the remote maintenance terminal initiates a third VPN request to the VPN server cluster. Obtain a third VPN request from a remote operation and maintenance terminal; Establishing a connection between the remote operation and maintenance terminal and the VPN server according to the third VPN request; Monitor the timed shutdown command; When the VPN server cluster resources are insufficient, the VPN server is shut down according to the timed shutdown instruction.

8. A remote operation and maintenance device for equipment, characterized in that: include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements the device remote operation and maintenance method as described in claim 7.

9. A computer-readable storage medium storing a program executable by a processor, characterized in that: The program executable by the processor is used to implement the device remote operation and maintenance method as claimed in claim 7 when executed by the processor.

Images