An integrated alarm system and method

Abstract

The present invention discloses a comprehensive alarm system and method, belonging to the technical field of Internet of Things and alarm data processing, and is used to solve the technical problem that the existing Internet of Things system cannot uniformly collect and process alarm information. The system includes: a data acquisition layer for collecting monitoring data and alarm information from multiple data sources of the monitored system; a data processing layer for analyzing the correlation relationship of the monitoring data according to the correlation relationship between the multiple data sources, and performing data fusion on the monitoring data based on the correlation relationship; an analysis and alarm layer for sending out alarm reminders according to the alarm information and the data fusion result. Through the above solution, the present invention realizes the comprehensive monitoring and intelligent alarm processing of multi-source heterogeneous systems.

Description

Technical Field

[0001] The present invention relates to the technical fields of the Internet of Things and alarm data processing, and in particular, to a comprehensive alarm system and method. Background Art

[0002] With the wide application of the Internet of Things, cloud computing, and big data technologies, various intelligent devices, video surveillance systems, host servers, applications, and services are interconnected, forming a complex ecosystem. However, such a highly integrated system also brings problems such as scattered alarm information, low processing efficiency, and difficulty in unified management.

[0003] Traditional alarm processing methods can no longer meet the current requirements of complex systems for alarm processing. In the traditional information detection and alarm mode, the operation alarms of hardware devices and software systems are usually separated. Hardware devices require proprietary alarm rules and alarm parameters, and the alarms of software business systems including host operation cannot be unifiedly managed. Alarm rules, notification methods, etc. of their respective devices and systems need to be maintained separately in respective business systems such as the Internet of Things platform and the video Internet platform. The workload is large, there is no unified entrance for collecting alarm information, and there is a lack of a unified alarm path. Summary of the Invention

[0004] The present invention provides a comprehensive alarm system and method for solving the technical problem that the existing Internet of Things system cannot collect and process alarm information uniformly.

[0005] The present invention adopts the following technical solutions:

[0006] On the one hand, the present invention provides a comprehensive alarm system, which includes: a data acquisition layer for collecting monitoring data and alarm information from multiple data sources of a monitored system; a data processing layer for analyzing the correlation relationship of the monitoring data according to the correlation relationship between the multiple data sources and performing data fusion on the monitoring data based on the correlation relationship; an analysis and alarm layer for sending out alarm reminders according to the alarm information and the data fusion result.

[0007] In a possible implementation manner of the present invention, the monitoring data at least includes the operation data of the multiple data sources; the data acquisition layer supports multiple communication protocols and data formats and collects the operation data and alarm information respectively corresponding to the multiple data sources in real time.

[0008] In a possible implementation manner of the present invention, the multiple data sources at least include any one of Internet of Things devices, video devices, hosts, applications, and services.

[0009] In a possible implementation manner of the present invention, the data processing layer is further configured to analyze the association relationship between the monitoring data according to the business process relationship and data interaction relationship between the multiple data sources; perform data fusion on partial data with an association relationship in the monitoring data; and identify cross-device and / or cross-service alarm events according to the result of the data fusion.

[0010] In a possible implementation manner of the present invention, the data processing layer is further configured to preprocess the collected monitoring data, and the preprocessing includes at least any one of data cleaning processing, data formatting processing, and invalid and duplicate data removal processing.

[0011] In a possible implementation manner of the present invention, the analysis and alarm layer is further configured to perform data merging processing on the alarm events and the alarm information to eliminate the content that is simultaneously included in the alarm events and the alarm information, so as to obtain the to-be-alarmed events; perform intelligent classification and priority sorting on the to-be-alarmed events, and send an alarm reminder based on the results of the classification and sorting.

[0012] In a possible implementation manner of the present invention, performing intelligent classification and priority sorting on the to-be-alarmed events includes: identifying the corresponding device and / or corresponding event of the to-be-alarmed event; classifying the to-be-alarmed events according to the corresponding device and / or the corresponding event; and performing priority sorting on the to-be-alarmed events according to the importance degree of the corresponding device in the system and / or the influence degree of the corresponding event on the system operation.

[0013] In a possible implementation manner of the present invention, the system further includes: an alarm processing layer, configured to generate an alarm response policy according to the corresponding priority of the alarm reminder, and the alarm response policy includes at least any one of automatic processing and prompt for manual intervention processing.

[0014] In a possible implementation manner of the present invention, the system further includes: an integrated management module, configured to support the customization and dynamic adjustment of alarm rules.

[0015] On the other hand, the present invention further provides a comprehensive alarm method, and the method includes: collecting monitoring data and alarm information from multiple data sources of the monitored system; analyzing the association relationship between the monitoring data according to the association relationship between the multiple data sources, and performing data fusion on the monitoring data based on the association relationship; and sending an alarm reminder according to the alarm information and the data fusion result.

[0016] A comprehensive alarm system and method provided by the present invention have the following beneficial effects:

[0017] By deploying the comprehensive alarm system of the present invention, it is possible to achieve comprehensive monitoring and alarm processing for various Internet of Things devices, video surveillance systems, host servers, applications, and services. The system can collect and process alarm information and monitoring data from different data sources in real time. Through data processing, intelligent analysis, and decision support, the false alarm rate and missed alarm rate of alarms are effectively reduced, the operation and maintenance efficiency and system stability are improved, comprehensive monitoring and intelligent alarm processing of multi-source heterogeneous systems can be achieved, the accuracy and timeliness of alarm processing are improved, and the operation and maintenance costs are reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following will briefly introduce the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings. In the drawings:

[0019] Figure 1 is an architecture diagram of a comprehensive alarm system provided by the present invention;

[0020] Figure 2 is a flowchart of a comprehensive alarm method provided by the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0021] In order to enable those skilled in the art to better understand the technical solutions in the present invention, the following will clearly and completely describe the technical solutions in the present invention in conjunction with the drawings in the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of this specification, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0022] The present invention proposes a comprehensive alarm system and method integrating Internet of Things devices, video devices, hosts, applications, and services. Through a unified alarm processing platform, the system realizes comprehensive monitoring and intelligent alarm processing of multi-source heterogeneous systems, improves the accuracy and timeliness of alarm processing, and reduces the operation and maintenance costs.

[0023] The following will detail the method in the present invention through the drawings.

[0024] Figure 1 is an architecture diagram of a comprehensive alarm system provided by the present invention, as Figure 1As shown in the figure, the system of the present invention includes: a data acquisition layer 101, a data processing layer 102, an analysis and alarm layer 103, an alarm processing layer 104, a user interaction layer 105, and an integrated management module 106. Communication between each layer is carried out through standard interfaces to achieve data acquisition, processing, analysis, and the generation, decision-making, and display of alarms. The specific implementation functions of each layer are as follows:

[0025] The data acquisition layer 101 is used to acquire monitoring data and alarm information from multiple data sources of the monitored system.

[0026] In one example, the monitored system refers to a system in which the alarm system of the present invention is deployed or a system monitored by the alarm system of the present invention. Taking the Internet of Things system as an example, it contains multiple operating Internet of Things devices, services, etc. These devices and services are the key monitoring objects in the monitored system. The data acquisition layer officially obtains or acquires monitoring data and alarm information from these objects. Of course, the alarm information here is not limited to including the alarm information generated by each device or service in the monitored system, but can also be the alarm information issued by the entire Internet of Things system. At the same time, the data acquisition layer can be implemented through various data acquisition interfaces or devices. The present invention does not make any limitations on this, as long as it can support the corresponding communication protocols and data formats of each device or service in the system, ensure that monitoring data can be collected and alarm information can be obtained, and at the same time, the data acquisition layer can support solutions with multiple communication protocols and data formats, and can also ensure the accuracy and comprehensiveness of the collected data.

[0027] In another example, the foregoing data sources may include any one or object of Internet of Things devices, video devices, hosts, applications, and services, and the monitoring information collected from each data source may be the operating data of the foregoing devices or services, such as operating status data, etc. Moreover, the data acquisition layer in the present invention collects data in real time for each data source to ensure that when the monitored system or each data source has an abnormality, alarm information is sent in a timely manner, ensuring the timeliness of the alarm and the normal operation of the system.

[0028] The data processing layer 102 is used to analyze the correlation relationship of the monitoring data according to the correlation relationship between multiple data sources, and perform data fusion on the monitoring data based on the correlation relationship.

[0029] In one example, taking the monitored system as an Internet of Things (IoT) system, the IoT system includes multiple IoT devices and services. These devices and services cooperate with each other to achieve the system functions. During the business cooperation process, there is data flow between these devices and services. The association relationship between devices or services can be defined based on the data flow or transmission. That is, when there is data transmission between any two devices, it can be considered that there is an association relationship between these two devices. Therefore, in the present invention, the association relationship between monitoring data can be analyzed through the business process relationship and data interaction relationship between multiple data sources. For example, taking the association relationship between device A and device B as the association relationship between the corresponding monitoring data of device A and the corresponding monitoring data of device B. After obtaining the association relationship of the monitoring data, data fusion processing is performed on the monitoring data based on this association relationship. For example, the A data of device A collected and the A + B data of device B are fused to obtain A + B data. This can reduce the amount of monitoring data to a certain extent, relieve the data processing pressure of subsequent alarm analysis, and improve efficiency. Finally, cross-device and / or cross-service alarm events and potential problems are identified based on the fused monitoring data.

[0030] In another example, before analyzing the association relationship of the monitoring data, in order to ensure the accuracy of the data and reduce the difficulty and pressure of subsequent data processing, the present invention also preprocesses the collected monitoring data. The preprocessing process here includes any one or more of data cleaning processing, data formatting processing, and removing invalid and duplicate data processing.

[0031] The alarm analysis layer 103 is used to issue an alarm reminder based on the alarm information and the data fusion result.

[0032] In one example, since the alarm information is the alarm information sent by each data source in the monitored system, and the alarm events obtained according to the data fusion result are equivalent to the alarm events existing between multiple devices or services with an association relationship, there may be some duplication between these alarm events and the alarm information. To ensure the accuracy of the alarm, the present invention performs a merging process on the alarm information and the alarm events, and eliminates the content that exists in both the alarm information and the alarm events. It should be noted that the elimination process here is only to eliminate in the alarm information or only in the alarm events to avoid omission of the alarm information or alarm events. The merged alarm information and alarm events are the to-be-alarm events. To facilitate the business personnel to process the alarms issued by the system in a timely manner and avoid abnormal operation of the data source due to untimely alarm processing, which in turn affects the functions of the entire monitored system, after obtaining the to-be-alarm events, the present invention classifies and sorts these to-be-alarm events, and then issues an alarm reminder one by one according to the sorted results.

[0033] Specifically, when classifying warning events, the present invention first identifies the device or service corresponding to the current warning event to be processed, or identifies the type of event corresponding to the current warning event to be processed, such as a test event. The warning events to be processed are classified according to the corresponding device and / or corresponding event of the warning event to be processed. After the classification is completed, if the classification is based on the device, the warning events to be processed are sorted according to the importance of the corresponding device in the monitored system. If the classification is based on the type of event, the warning events to be processed are sorted according to the impact of the corresponding event on the operation of the monitored system. It should be noted that when classifying by device, the more important the device is in the monitored system, that is, the greater the impact on the system operation, the higher the priority of the warning event corresponding to the device. Similarly, when classifying by event type, the more the corresponding event can affect the operation of the monitored system, the higher the priority of the warning event corresponding to it. Thus, the priority sorting of the warning events to be processed is completed. After the sorting is completed, the warning can be issued for the warning events to be processed in sequence according to the sorted sequence.

[0034] In another example, the present invention can also use machine learning algorithms to intelligently classify and prioritize warning events to predict the operation trend of the system and detect anomalies, and give early warnings of potential risks. It should be noted that the machine learning algorithms used herein by the present invention can be a combination of existing classification algorithms and sorting algorithms, or other algorithms that can achieve classification and sorting. The present invention does not make any limitations in this regard. At the same time, existing prediction algorithms can also be used for trend prediction.

[0035] The alarm processing layer 104 is used to generate an alarm response policy according to the corresponding priority of the alarm reminder, and the alarm response policy includes at least one of automatic processing and prompting manual intervention processing.

[0036] For example, if the priority of the warning event corresponding to the currently issued warning reminder is relatively high, and it takes a certain waiting time to notify manual intervention, which may affect the operation of the monitored system due to untimely alarm processing. Therefore, at this time, an automatic processing scheme can be adopted to automatically process the warning event corresponding to the currently issued warning reminder through the server or other devices linked to the alarm system. Of course, if the device automatic processing cannot completely eliminate the alarm event, manual intervention can be notified during or before the processing.

[0037] In one example, the aforementioned way of notifying the person can be through means such as telephone, email or instant messaging tools.

[0038] The user interaction layer 105 is used to provide an intuitive and easy-to-use user interaction interface, on which warning information, processing progress, warning statistical reports and other contents can be displayed for the user to view.

[0039] Meanwhile, notification buttons and the like can be provided on the user interaction interface to support the functions of alarm notification and work order dispatching, ensuring that alarm information can be promptly conveyed to relevant personnel.

[0040] The integrated management module 106 is used to manage and configure the foregoing layers, and at the same time is used to support the customization and dynamic adjustment of alarm rules to meet the alarm handling requirements in different scenarios.

[0041] The above are the various structures or layers in the system provided by the present invention. Of course, the above content is only used to illustrate the system architecture. According to the actual usage scenarios and actual usage requirements, the present invention can also make corresponding modifications, additions or deletions to the various structures or layers in the above system.

[0042] Based on the same inventive concept, the present invention also provides a comprehensive alarm method, and its process is as Figure 2 shown.

[0043] Figure 2 is a flowchart of a comprehensive alarm method provided by the present invention. As Figure 2 shown, the comprehensive alarm method in the present invention at least includes the following execution steps:

[0044] Step 201, collect monitoring data and alarm information from multiple data sources of the monitored system.

[0045] Step 202, analyze the correlation relationship of the monitoring data according to the correlation relationship between multiple data sources, and perform data fusion on the monitoring data based on the correlation relationship.

[0046] Step 203, issue an alarm reminder according to the alarm information and the data fusion result.

[0047] Specifically, when using the comprehensive alarm system provided by the present invention for alarming, alarm information and monitoring data will first be collected from each device and / or each service in the monitored system. According to the correlation relationships such as the business process relationship and the data interaction / transmission relationship between each device and / or each service, the correlation relationship in the foregoing monitoring data is determined, and the monitoring data is subjected to data fusion or data merging based on this correlation relationship to obtain an alarm event. To ensure the accuracy of the alarm and avoid repeated alarms, the present invention will perform a merging process on the alarm information and the alarm event to eliminate the same content between the two. After merging, the events to be alarmed are classified according to the device or event type, and the events to be alarmed after classification are sorted by priority. The sorting principle is that the higher the impact on the monitored system, the higher the priority. After sorting, alarm reminders are issued in sequence according to the obtained sequence order.

[0048] Furthermore, for alarm reminders, automatic processing and / or manual intervention processing can be performed through the alarm handling layer. When manual participation is required, the alarm reminder is sent to the terminals of maintenance personnel or business personnel through the notification button set on the user interaction layer. The sending method here can be implemented through channels such as telephone, email, or instant messaging tools.

[0049] Each embodiment in the present invention is described in a progressive manner. For the same or similar parts among the embodiments, reference can be made to each other. Each embodiment focuses on the differences from other embodiments. In particular, for the method embodiments, since they are basically similar to the system embodiments, the description is relatively simple, and for the relevant parts, reference can be made to the descriptions in the system embodiments.

[0050] The system and method provided by the present invention correspond one by one. Therefore, the method also has beneficial technical effects similar to those of its corresponding system. Since the beneficial technical effects of the system have been described in detail above, the beneficial technical effects of the method will not be elaborated here.

[0051] Those skilled in the art should understand that the embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0052] The present invention is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the present invention. It should be understood that each flow and / or block in the flowchart and / or block diagram, as well as the combination of flows and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to the processors of general-purpose computers, special-purpose computers, embedded processors, or other programmable data processing devices to generate a machine, so that the instructions executed by the processors of the computer or other programmable data processing devices generate means for implementing the functions specified in Figure 1 one or more of the flows Figure 1 or blocks or combinations of blocks.

[0053] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including instruction means that implement the functions specified in Figure 1 one or more of the flows Figure 1The functions specified in one or more boxes.

[0054] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process. Thus, the instructions executed on the computer or other programmable device provide for implementing the steps of the functions specified in one Figure 1 one process or more processes and / or boxes Figure 1 step of the functions specified in one box or more boxes.

[0055] In a typical configuration, a computing device includes one or more processors (CPUs), an input / output interface, a network interface, and a memory.

[0056] The memory may include non-permanent memory in the computer-readable medium, in the form of random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). The memory is an example of a computer-readable medium.

[0057] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology for information storage. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media, such as modulated data signals and carrier waves.

[0058] It should also be noted that the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, such that a process, method, commodity or device comprising a series of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, commodity or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the presence of additional identical elements in the process, method, commodity or device comprising the element.

[0059] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, various modifications and variations can be made to the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. An integrated alarm system, characterized in that, The system includes: A data collection layer for collecting monitoring data and alarm information from multiple data sources of the monitored system; A data processing layer for analyzing the correlation relationship of the monitoring data according to the correlation relationship between the multiple data sources, and performing data fusion on the monitoring data based on the correlation relationship; The data processing layer is further configured to, Analyze the correlation relationship between the monitoring data according to the business process relationship and data interaction relationship between the multiple data sources; Perform data fusion on partial data with a correlation relationship in the monitoring data; Identify alarm events across devices and / or services according to the result of the data fusion; An analysis and alarm layer for sending an alarm reminder according to the alarm information and the data fusion result; The analysis and alarm layer is further configured to, Perform data merging processing on the alarm events and the alarm information to eliminate the content that is included in both the alarm events and the alarm information, and obtain the to-be-alarmed events; Perform intelligent classification and priority sorting on the to-be-alarmed events, and send an alarm reminder based on the classification and sorting results; Performing intelligent classification and priority sorting on the to-be-alarmed events includes: Identifying the corresponding device and / or corresponding event of the to-be-alarmed event; Classifying the to-be-alarmed events according to the corresponding device and / or the corresponding event; Performing priority sorting on the to-be-alarmed events according to the importance degree of the corresponding device in the system and / or the influence degree of the corresponding event on the system operation.

2. The integrated alarm system according to claim 1, wherein The monitoring data at least includes the operation data of the multiple data sources; The data collection layer supports multiple communication protocols and data formats, and real-time collects the operation data and alarm information corresponding to the multiple data sources respectively.

3. The integrated warning system according to claim 2, wherein The multiple data sources at least include any one of Internet of Things devices, video devices, hosts, applications, and services.

4. The integrated alarm system according to claim 1, wherein The data processing layer is further configured to, Perform preprocessing on the collected monitoring data, and the preprocessing at least includes any one of data cleaning processing, data formatting processing, and removing invalid and duplicate data processing.

5. An integrated alarm system according to claim 1, wherein The system further includes: An alarm processing layer for generating an alarm response policy according to the corresponding priority of the alarm reminder, and the alarm response policy at least includes any one of automatic processing and prompting manual intervention processing.

6. The integrated alarm system according to claim 1, characterized in that The system further includes: An integrated management module for supporting the customization and dynamic adjustment of alarm rules.

7. A comprehensive alarm method applied to the comprehensive alarm system according to any one of claims 1-6, characterized in that, The method includes: Collecting monitoring data and alarm information from multiple data sources of the monitored system; Analyzing the correlation relationship of the monitoring data according to the correlation relationship between the multiple data sources, and performing data fusion on the monitoring data based on the correlation relationship; Sending an alarm reminder according to the alarm information and the data fusion result.

Images