Chemical industrial park safety monitoring method and system based on Internet of Things

Abstract

The invention provides a chemical industry park safety monitoring method and system based on the Internet of Things, and belongs to the technical field of the Internet of Things, in the method, a service management entity receives abnormal information reported by a first access point, the abnormal information is used for indicating that communication of a plurality of terminals accessing the first access point is abnormal, and the abnormal information is sent to the first access point; the signal range of the first access point covers the chemical industry park, and the first access point provides services of a ground network; if the monitoring terminal in the plurality of terminals meets the preset condition, the service management entity determines that the monitoring terminal has a security abnormal condition; and when the monitoring terminal has security and protection abnormity, the service management entity instructs a second access point capable of providing non-ground network service to provide non-ground network service for the plurality of terminals, and the signal range of the second access point covers the chemical industry park.

Description

Technical Field

[0001] The present application relates to the technical field of Internet of Things, and in particular to a chemical park safety monitoring method and system based on the Internet of Things. Background Art

[0002] Chemical parks are an important part of industrial production, and their safe operation is of great significance to the country's economic development and social stability. With the continuous development of science and technology, chemical parks have gradually realized intelligent and unmanned operations, which can effectively improve production efficiency, reduce human errors, and ensure the safety and stability of the production process. However, the realization of intelligent control has also brought new security issues, especially network security issues.

[0003] Specifically, the intelligent control of chemical parks is mainly achieved by connecting various sensors, actuators, controllers and other devices to a network to achieve information exchange and collaborative work between devices. This intelligent control method can effectively improve production efficiency, reduce human errors, and ensure the safety and stability of the production process. However, the implementation of intelligent control also brings new security issues, especially network security issues. If an attacker launches a network attack on a chemical park, such as interfering with the signal by means of signal interference, signal shielding, etc., the monitoring equipment in the park will be interfered with and unable to monitor normally, resulting in the inability to promptly determine whether there are any illegal persons entering the park in an intelligent and unmanned scenario, which will affect the production of the park, or even endanger it, and there is a security risk.

[0004] Therefore, for chemical parks, how to take effective safety measures to reduce safety risks is a current research issue. Summary of the invention

[0005] The embodiments of the present application provide a chemical park security monitoring method and system based on the Internet of Things, which are used to reduce security risks by switching networks with different communication modes.

[0006] In order to achieve the above objectives, this application adopts the following technical solutions:

[0007] In a first aspect, a chemical park security monitoring method based on the Internet of Things is provided, the method comprising: a service management entity receives abnormal information reported from a first access point, wherein the abnormal information is used to indicate that communication of multiple terminals accessing the first access point has abnormal conditions, the signal range of the first access point covers the chemical park, and the first access point provides ground network services; if a monitoring terminal among the multiple terminals meets a preset condition, the service management entity determines that a security abnormality occurs in the monitoring terminal; in the case of a security abnormality in the monitoring terminal, the service management entity instructs a second access point capable of providing non-ground network services to provide non-ground network services to the multiple terminals, and the signal range of the second access point covers the chemical park.

[0008] Optionally, the monitoring terminal among multiple terminals satisfies preset conditions including one or more of the following: the number of monitoring terminals is greater than or equal to a first upper limit number; or; when the number of multiple terminals is greater than or equal to a second upper limit number, the number ratio of the monitoring terminals among the multiple terminals is greater than or equal to the upper limit of the number ratio; or; the number of monitoring terminals is greater than or equal to the first upper limit number, and the number of multiple terminals is greater than or equal to the second upper limit number.

[0009] Optionally, the method also includes: the service management entity obtains the respective contexts of the multiple terminals from the local service management entity or from the data management network element according to the respective identifiers of the multiple terminals in the exception information; the service management entity determines, according to the respective device types of the terminals in the respective contexts of the multiple terminals, the terminals whose device type is non-mobile and has visual monitoring capability among the multiple terminals, wherein the terminals whose device type is non-mobile and has visual monitoring capability are monitoring terminals.

[0010] Optionally, if a monitoring terminal among multiple terminals meets preset conditions, the service management entity determines that a security anomaly occurs in the monitoring terminal, including: if a monitoring terminal among multiple terminals meets preset conditions, the service management entity determines whether the monitoring terminal is located in an area with a high security level, wherein the area with a high security level refers to an area with a security level greater than a level threshold; if the monitoring terminal is located in an area with a high security level, the service management entity determines that a security anomaly occurs in the monitoring terminal.

[0011] Optionally, the service management entity determines whether the monitoring terminal is located in an area with a high security level, including: the service management entity obtains, based on the identifier of the monitoring terminal, information about the monitoring service of the application network element for the monitoring terminal from the application network element serving the monitoring terminal, wherein the monitoring service of the application network element for the monitoring terminal indicates that the monitoring service needs to be executed by the monitoring terminal, and the information about the monitoring service of the application network element for the monitoring terminal is used to indicate multiple areas covered by the service and the security levels of each of the multiple areas; the service management entity determines one or more areas among the multiple areas where the monitoring terminal is located, and if the number of areas with a high security level in one or more areas exceeds a preset number threshold, the service management entity determines that the monitoring terminal is located in the area with a high security level; otherwise, the service management entity determines that the monitoring terminal is not located in the area with a high security level.

[0012] Optionally, the service management entity instructs a second access point capable of providing non-terrestrial network services to provide non-terrestrial network services to multiple terminals, including: the service management entity determines whether multiple terminals have accessed the second access point through non-terrestrial network access; if multiple terminals have accessed the second access point through non-terrestrial network access, the service management entity instructs the second access point to provide enhanced non-terrestrial network services to the multiple terminals; if multiple terminals have not accessed the second access point through non-terrestrial network access, the service management entity instructs the second access point to access the multiple terminals through non-terrestrial network access, and provides enhanced non-terrestrial network services to the multiple terminals when all terminals access the second access point.

[0013] Optionally, the service management entity determines whether multiple terminals have accessed the second access point through a non-terrestrial network access method, including: the service management entity determines whether there is an identifier of the second access point in the context of each of the multiple terminals; if there is an identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have accessed the second access point through a non-terrestrial network access method; if there is no identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have not accessed the second access point through a non-terrestrial network access method.

[0014] Optionally, the service management entity instructs the second access point to provide enhanced services of non-terrestrial networks for multiple terminals, including: the service management entity sends indication information to the second access point, wherein the indication information jointly indicates that the second access point needs to provide enhanced services of non-terrestrial networks for multiple terminals by carrying multiple terminals and information for indicating enhanced services, and the enhanced services of non-terrestrial networks mean that the second access point needs to establish two or more connections for each of the multiple terminals at the same time.

[0015] Optionally, the service management entity instructs the second access point to access multiple terminals through a non-terrestrial network access method, and provides enhanced services of the non-terrestrial network for the multiple terminals when the multiple terminals are all connected to the second access point, including: the service management entity selects an access network device related to the first access point, wherein the access network device related to the first access point is the second access point; the service management entity sends indication information to the second access point, wherein the indication information carries multiple terminals, information for indicating that the terminals are accessed through a non-terrestrial network method, and information for indicating enhanced services to jointly indicate that the second access point needs to access the multiple terminals through a non-terrestrial network access method, and when the multiple terminals are all connected to the second access point, provides enhanced services of the non-terrestrial network for the multiple terminals, and the enhanced service of the non-terrestrial network means that the second access point needs to establish two or more connections for each of the multiple terminals at the same time.

[0016] Optionally, the abnormal information includes at least one of the following information: an identifier of the first access point, identifiers of each of the multiple terminals, or signal strength change information of each of the multiple terminals, where the signal strength change information of each of the multiple terminals is used to indicate that the communication signal strengths of each of the multiple terminals have changed from being higher than an upper communication limit value to being lower than a lower communication limit value; and the at least one item of information is used to jointly indicate that an abnormality has occurred in the communication of the multiple terminals accessing the first access point.

[0017] In a second aspect, a remote visual security prevention and command and dispatch device based on 5G enhancement is provided, and the device is configured as follows: a service management entity receives abnormal information reported from a first access point, wherein the abnormal information is used to indicate that communication of multiple terminals accessing the first access point has abnormal conditions, the signal range of the first access point covers the chemical park, and the first access point provides ground network services; if the monitoring terminal among the multiple terminals meets the preset conditions, the service management entity determines that a security abnormality occurs in the monitoring terminal; in the event of a security abnormality in the monitoring terminal, the service management entity instructs a second access point that can provide non-ground network services to provide non-ground network services to multiple terminals, and the signal range of the second access point covers the chemical park.

[0018] Optionally, the monitoring terminal among multiple terminals satisfies preset conditions including one or more of the following: the number of monitoring terminals is greater than or equal to a first upper limit number; or; when the number of multiple terminals is greater than or equal to a second upper limit number, the number ratio of the monitoring terminals among the multiple terminals is greater than or equal to the upper limit of the number ratio; or; the number of monitoring terminals is greater than or equal to the first upper limit number, and the number of multiple terminals is greater than or equal to the second upper limit number.

[0019] Optionally, the device is configured as a service management entity that obtains the respective contexts of multiple terminals from the service management entity locally or from a data management network element according to the respective identifiers of the multiple terminals in the exception information; the service management entity determines, according to the respective device types of the terminals in the respective contexts of the multiple terminals, a terminal whose device type is non-mobile and has visual monitoring capability among the multiple terminals, wherein the terminal whose device type is non-mobile and has visual monitoring capability is a monitoring terminal.

[0020] Optionally, the device is configured as follows: if a monitoring terminal among multiple terminals meets preset conditions, the service management entity determines whether the monitoring terminal is located in an area with a high security level, wherein the area with a high security level refers to an area with a security level greater than a level threshold; if the monitoring terminal is located in the area with a high security level, the service management entity determines that a security abnormality occurs in the monitoring terminal.

[0021] Optionally, the device is configured as follows: the service management entity obtains information about monitoring services of the application network element for the monitoring terminal from the application network element serving the monitoring terminal according to the identification of the monitoring terminal, wherein the monitoring services of the application network element for the monitoring terminal indicate that the monitoring services need to be executed by the monitoring terminal, and the information about the monitoring services of the application network element for the monitoring terminal is used to indicate multiple areas covered by the services and the security levels of the multiple areas; the service management entity determines one or more areas among the multiple areas where the monitoring terminal is located, and if the number of areas with high security levels in one or more areas exceeds a preset number threshold, the service management entity determines that the monitoring terminal is located in the area with high security levels; otherwise, the service management entity determines that the monitoring terminal is not located in the area with high security levels.

[0022] Optionally, the device is configured as follows: the service management entity determines whether multiple terminals have accessed the second access point through a non-terrestrial network access method; if multiple terminals have accessed the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to provide enhanced services of the non-terrestrial network for the multiple terminals; if multiple terminals have not accessed the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to access the multiple terminals through a non-terrestrial network access method, and when the multiple terminals all access the second access point, provides enhanced services of the non-terrestrial network for the multiple terminals.

[0023] Optionally, the device is configured as follows: the service management entity determines whether there is an identifier of the second access point in the context of each of the multiple terminals; if there is an identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have accessed the second access point through a non-terrestrial network access method; if there is no identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have not accessed the second access point through a non-terrestrial network access method.

[0024] Optionally, the device is configured as follows: the service management entity sends an indication message to the second access point, wherein the indication message carries multiple terminals and information for indicating enhanced services to jointly indicate that the second access point needs to provide enhanced services of non-terrestrial networks for multiple terminals, and the enhanced services of non-terrestrial networks mean that the second access point needs to establish two or more connections for each of the multiple terminals at the same time.

[0025] Optionally, the device is configured as follows: a service management entity selects an access network device associated with a first access point, wherein the access network device associated with the first access point is a second access point; the service management entity sends indication information to the second access point, wherein the indication information carries multiple terminals, information for indicating that the terminals are to be accessed via a non-terrestrial network, and information for indicating enhanced services to jointly indicate that the second access point needs to access the multiple terminals via a non-terrestrial network access method, and when the multiple terminals are all accessed by the second access point, enhanced services of the non-terrestrial network are provided to the multiple terminals, wherein the enhanced services of the non-terrestrial network mean that the second access point needs to simultaneously establish two or more connections for each of the multiple terminals.

[0026] Optionally, the abnormal information includes at least one of the following information: an identifier of the first access point, identifiers of each of the multiple terminals, or signal strength change information of each of the multiple terminals, where the signal strength change information of each of the multiple terminals is used to indicate that the communication signal strengths of each of the multiple terminals have changed from being higher than an upper communication limit value to being lower than a lower communication limit value; and the at least one item of information is used to jointly indicate that an abnormality has occurred in the communication of the multiple terminals accessing the first access point.

[0027] In summary, when the service management entity determines that a security abnormality has occurred in the monitoring terminal, or that the monitoring terminal has been interfered with or shielded by the signal through the abnormal information reported by the first access point that provides ground network services, the service management entity can instruct the second access point to provide non-ground network services to multiple terminals, that is, satellite communication services to solve the security risks caused by the interference or shielding of the ground signals of the monitoring equipment, that is, to reduce the impact of network attacks by switching networks with different communication methods to reduce security risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 A schematic diagram of the architecture of the Internet of Things system provided in an embodiment of the present application;

[0029] Figure 2 A schematic diagram of a process flow of a chemical park safety monitoring method based on the Internet of Things provided in an embodiment of the present application;

[0030] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0031] For ease of understanding, the technical terms involved in the embodiments of the present application are first introduced below.

[0032] In the embodiment of the present application, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information (such as the first indication information, the second indication information, or the third indication information, etc. below) is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be realized by means of the arrangement order of each information agreed in advance (such as specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and uniformly indicated to reduce the indication overhead caused by indicating the same information separately.

[0033] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present application does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present application should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0034] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present application do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or a communication device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or a communication device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present application.

[0035] The "protocol" involved in the embodiments of the present application may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol used in future communication systems, and the embodiments of the present application do not make specific limitations on this.

[0036] In the embodiments of the present application, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will make corresponding processing under certain objective circumstances. It does not limit the time, nor does it require the device to have a judgment action when implementing it, nor does it mean that there are other limitations.

[0037] In the description of the embodiments of the present application, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present application is only a description of the association relationship of the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present application, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or its similar expression refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present application, in the embodiments of the present application, the words "first" and "second" are used to distinguish the same or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0038] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0039] To facilitate understanding of the embodiments of the present application, first Figure 2 The communication system shown in the example is used to describe in detail the communication system applicable to the embodiment of the present application. Figure 2 A schematic diagram of the architecture of a communication system applicable to the chemical park safety monitoring method based on the Internet of Things provided in an embodiment of the present application.

[0040] like Figure 2 As shown, the Internet of Things system mainly includes: a service management entity and an access point.

[0041] The service management entity may be a device that controls and manages the access point, such as a device / entity that manages the domain.

[0042] There may be multiple access points, such as multiple nodes of different types. For example, a first access point and a second access point. The first access point may be a ground access point, such as a ground base station, a gateway, an AP, etc., for providing services of a ground network, that is, the terminal can access the first access point through a ground network access method. The second access point may be a satellite access point. The satellite has data processing capabilities, and has the functions of a base station or part of the functions of a base station, that is, the satellite can be understood as a base station. In other words, the second access point can provide services of a non-ground network, that is, the terminal can access the second access point through a non-ground network access method.

[0043] It is understandable that the above is an introduction based on satellites as an example, and satellites can also be replaced by other high altitude platform stations (HAPS) or drones. Satellites can also be subdivided into medium orbit satellites, high orbit satellites, inclined synchronous orbit satellites, synchronous orbit satellites, etc.

[0044] The following will be combined Figure 2 , the interaction process between each network element / device in the above-mentioned Internet of Things system is specifically introduced through the method embodiment. The chemical park safety monitoring method based on the Internet of Things provided in the embodiment of the present application can be applied to the above-mentioned Internet of Things system, and is specifically applied to the various scenarios / processes mentioned in the above-mentioned Internet of Things system, which are specifically introduced below.

[0045] Figure 2 A schematic diagram of a process flow of a chemical park safety monitoring method based on the Internet of Things provided in an embodiment of the present application. The process flow of the chemical park safety monitoring method based on the Internet of Things is as follows:

[0046] S301: A service management entity receives abnormal information reported from a first access point.

[0047] The abnormal information is used to indicate that the communication of multiple terminals accessing the first access point is abnormal, and the first access point provides ground network services. For example, the abnormal information includes at least one of the following information: an identifier of the first access point, an identifier of each of the multiple terminals, or signal strength change information of each of the multiple terminals. The signal strength change information of each of the multiple terminals is used to indicate that the communication signal strength of each of the multiple terminals has changed from being higher than the upper limit of the communication to being lower than the lower limit of the communication. In this way, this at least one piece of information can be used to jointly indicate that the communication of multiple terminals accessing the first access point is abnormal.

[0048] Exemplarily, the multiple terminals include UE1-UE6, a total of 6 UEs, and the signal strength change information of each UE1-UE6 can indicate that the signal strength of each UE1-UE6 (such as the reference signal strength continuously measured by the first access point) changes from higher than the communication upper limit value to lower than the communication lower limit value, and continues for a preset period of time below the communication lower limit value, thereby indicating that the communication of UE1-UE6 may be maliciously interfered with by an attacker.

[0049] S302: If the monitoring terminal among the multiple terminals meets the preset conditions, the service management entity determines that a security abnormality occurs in the monitoring terminal.

[0050] The preset conditions satisfied by the monitoring terminal among multiple terminals may include one or more of the following: the number of monitoring terminals is greater than or equal to the first upper limit number; or; when the number of multiple terminals is greater than or equal to the second upper limit number, the proportion of the number of monitoring terminals among the multiple terminals is greater than or equal to the upper limit of the proportion; or; the number of monitoring terminals is greater than or equal to the first upper limit number, and the number of multiple terminals is greater than or equal to the second upper limit number; that is, when the number or proportion satisfies the above conditions, the service management entity can determine that the monitoring terminals among multiple terminals meet the preset conditions.

[0051] Continuing with the above example, the first upper limit number is 3, the upper limit of the number ratio may be 50%, and the second upper limit number is 6. If UE1, UE2, and UE4 in UE1-UE6 are monitoring terminals, the service management entity may determine that the number of monitoring terminals is equal to the first upper limit number, that is, 3, or the service management entity may determine that the number of monitoring terminals 3 accounts for the proportion of the 6 UEs is equal to the upper limit of the number ratio, that is, 50%, or the service management entity may determine that the number of monitoring terminals 3 is equal to the first upper limit number, and the number of 6 UEs is equal to the second upper limit number, that is, 6.

[0052] In an embodiment of the present application, the service management entity may obtain the respective configuration information of the multiple terminals in the local service management entity based on the respective identifiers of the multiple terminals in the abnormal information. The service management entity may determine the terminal whose device type is a non-mobile device with visual monitoring capability among the multiple terminals based on the respective device types of the terminals in the respective configuration information of the multiple terminals, wherein the terminal whose device type is a non-mobile device with visual monitoring capability is a monitoring terminal. For example, the device type information in the context may be represented by a 2-bit information element, such as 00 represents a terminal whose device type is a mobile device, such as a conventional UE, 01 represents a terminal whose device type is a mobile device with visual monitoring capability, such as a mobile monitoring robot, and 10 represents a terminal whose device type is a non-mobile device with visual monitoring capability, that is, a monitoring terminal in an embodiment of the present application, such as a fixed monitoring camera.

[0053] In the embodiment of the present application, if the monitoring terminal among the multiple terminals meets the preset conditions, the service management entity determines that the monitoring terminal has a security anomaly, including: if the monitoring terminal among the multiple terminals meets the preset conditions, the service management entity can determine whether the monitoring terminal is located in a high security level area, wherein the high security level area refers to an area with a security level greater than the level threshold. If the monitoring terminal is located in the high security level area, the service management entity determines that the monitoring terminal has a security anomaly.

[0054] For example, the service management entity obtains information about the monitoring service of the application network element (such as the above-mentioned AF) for the monitoring terminal from the application network element serving the monitoring terminal according to the identification of the monitoring terminal. Among them, the service management entity is locally configured with the correspondence between the identification of the terminal and the identification of the application function serving the terminal, so that the service management entity can determine the application network element serving the monitoring terminal and request the application network element to provide information about the monitoring service of the application network element for the monitoring terminal. The monitoring service of the application network element for the monitoring terminal indicates that the monitoring service needs to be executed by the monitoring terminal, and the information about the monitoring service of the application network element for the monitoring terminal is used to indicate the multiple areas covered by the service and the respective security levels of the multiple areas. Since the service management entity already performs mobility management on the monitoring terminal and knows the respective locations of the monitoring terminals, the service management entity can determine one or more areas where the monitoring terminal is located in multiple areas. If the number of high-security areas in one or more areas exceeds a preset number threshold, the service management entity determines that the monitoring terminal is located in an area with a high security level, otherwise, the service management entity determines that the monitoring terminal is not located in an area with a high security level.

[0055] Continuing with the above example, UE1 is located in area 1, UE2 is located in area 2 and UE4 is located in area 2. If area 1 and area 2 are areas with high security levels, and the preset number threshold is 1, it means that the preset number threshold is exceeded, and the service management entity determines that the monitoring terminal is located in an area with a high security level.

[0056] S303: When a security anomaly occurs in the monitoring terminal, the service management entity instructs a second access point capable of providing non-terrestrial network services to provide non-terrestrial network services to multiple terminals.

[0057] Among them, the service management entity can determine whether the multiple terminals have accessed the second access point through the non-terrestrial network access method. For example, the service management entity can determine whether there is an identifier of the second access point in the context of each of the multiple terminals (or whether there is an identifier of an access network device that can provide non-terrestrial network services). If there is an identifier of the second access point in the context of each of the multiple terminals, it means that the multiple terminals have accessed the second access point through the non-terrestrial network access method; otherwise, if there is no identifier of the second access point in the context of each of the multiple terminals, it means that the multiple terminals have not accessed the second access point through the non-terrestrial network access method.

[0058] On this basis, if multiple terminals have accessed the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to provide enhanced services of the non-terrestrial network for multiple terminals. For example, the service management entity can send indication information to the second access point. Among them, the indication information carries multiple terminals and information for indicating enhanced services to jointly indicate that the second access point needs to provide enhanced services of the non-terrestrial network for multiple terminals. The enhanced service of the non-terrestrial network means that the second access point needs to establish two or more connections for each of the multiple terminals at the same time. For example, the network defaults that the terminals that can access the network through the non-terrestrial network are terminals with multiple antenna panels. In this way, the second access point can send requests to establish enhanced services to multiple terminals respectively according to the indication information. At this time, since the communication frequency band of the second access point is usually different from the communication frequency band of the first access point, the second access point can communicate normally with the multiple terminals that are interfered with without interference. In this way, multiple terminals can respond to the request and establish two or more connections with the second access point at the same time, which can also be understood as dual connection or multiple connection.

[0059] It is understandable that since ground communications are interfered with, it is necessary to establish dual or multiple connections to increase the bandwidth of satellite communications to ensure that the monitoring terminal can still transmit the surveillance video stream it shoots normally. In other words, remote visual security prevention and command and dispatch are achieved through satellite network communications to ensure that the surveillance video stream can still be transmitted safely and normally.

[0060] It can be understood that the establishment of each connection can reuse the existing connection establishment method, such as end-to-end connection, PC5 connection, air interface connection, etc., which will not be described in detail.

[0061] If multiple terminals do not access the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to access the multiple terminals through a non-terrestrial network access method, and provides enhanced services of the non-terrestrial network for the multiple terminals when the multiple terminals are all connected to the second access point. For example, the service management entity selects an access network device related to the first access point, such as selecting an access network device that has a corresponding relationship with the first access point. Among them, the access network device related to the first access point is the second access point. The service management entity can send indication information to the second access point. Among them, the indication information carries multiple terminals, information for indicating that the terminal is accessed through a non-terrestrial network method, and information for indicating enhanced services to jointly indicate that the second access point needs to access multiple terminals through a non-terrestrial network access method. When multiple terminals are all connected to the second access point, enhanced services of the non-terrestrial network are provided to multiple terminals. The enhanced service of the non-terrestrial network means that the second access point needs to establish two or more RRC connections for each of the multiple terminals at the same time. In this way, the second access point can indicate to multiple terminals that they need to access the second access point according to the indication information, that is, the second access point unicasts trigger information to multiple terminals respectively, so that multiple terminals can trigger the initiation of random access in a non-terrestrial network mode to the second access point according to the trigger information, thereby accessing the second access point. After that, the second access point can send requests to establish enhanced services to multiple terminals respectively, and accordingly, multiple terminals can respond to the request and establish two or more RRC connections with the second access point at the same time.

[0062] In summary, when the service management entity determines that a security abnormality has occurred in the monitoring terminal, or that the monitoring terminal has been interfered with or shielded by the signal through the abnormal information reported by the first access point that provides ground network services, the service management entity can instruct the second access point to provide non-ground network services to multiple terminals, that is, satellite communication services to solve the security risks caused by the interference or shielding of the ground signals of the monitoring equipment, that is, to reduce the impact of network attacks by switching networks with different communication methods to reduce security risks.

[0063] Combination of the above Figure 3 The chemical park safety monitoring method based on the Internet of Things provided in the embodiment of the present application is described in detail. The following describes an apparatus for executing the chemical park safety monitoring method based on the Internet of Things provided in the embodiment of the present application.

[0064] The device is configured as follows: a service management entity receives abnormal information reported from a first access point, wherein the abnormal information is used to indicate that abnormal conditions occur in the communication of multiple terminals accessing the first access point, and the first access point provides ground network services; if a monitoring terminal among the multiple terminals meets a preset condition, the service management entity determines that a security abnormality occurs in the monitoring terminal; when a security abnormality occurs in the monitoring terminal, the service management entity instructs a second access point capable of providing non-ground network services to provide non-ground network services to the multiple terminals.

[0065] Optionally, the monitoring terminal among multiple terminals satisfies preset conditions including one or more of the following: the number of monitoring terminals is greater than or equal to a first upper limit number; or; when the number of multiple terminals is greater than or equal to a second upper limit number, the number ratio of the monitoring terminals among the multiple terminals is greater than or equal to the upper limit of the number ratio; or; the number of monitoring terminals is greater than or equal to the first upper limit number, and the number of multiple terminals is greater than or equal to the second upper limit number.

[0066] Optionally, the device is configured as a service management entity that obtains the respective contexts of multiple terminals from the service management entity locally or from a data management network element according to the respective identifiers of the multiple terminals in the exception information; the service management entity determines, according to the respective device types of the terminals in the respective contexts of the multiple terminals, a terminal whose device type is non-mobile and has visual monitoring capability among the multiple terminals, wherein the terminal whose device type is non-mobile and has visual monitoring capability is a monitoring terminal.

[0067] Optionally, the device is configured as follows: if a monitoring terminal among multiple terminals meets preset conditions, the service management entity determines whether the monitoring terminal is located in an area with a high security level, wherein the area with a high security level refers to an area with a security level greater than a level threshold; if the monitoring terminal is located in the area with a high security level, the service management entity determines that a security abnormality occurs in the monitoring terminal.

[0068] Optionally, the device is configured as follows: the service management entity obtains information about monitoring services of the application network element for the monitoring terminal from the application network element serving the monitoring terminal according to the identification of the monitoring terminal, wherein the monitoring services of the application network element for the monitoring terminal indicate that the monitoring services need to be executed by the monitoring terminal, and the information about the monitoring services of the application network element for the monitoring terminal is used to indicate multiple areas covered by the services and the security levels of the multiple areas; the service management entity determines one or more areas among the multiple areas where the monitoring terminal is located, and if the number of areas with high security levels in one or more areas exceeds a preset number threshold, the service management entity determines that the monitoring terminal is located in the area with high security levels; otherwise, the service management entity determines that the monitoring terminal is not located in the area with high security levels.

[0069] Optionally, the device is configured as follows: the service management entity determines whether multiple terminals have accessed the second access point through a non-terrestrial network access method; if multiple terminals have accessed the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to provide enhanced services of the non-terrestrial network for the multiple terminals; if multiple terminals have not accessed the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to access the multiple terminals through a non-terrestrial network access method, and when the multiple terminals all access the second access point, provides enhanced services of the non-terrestrial network for the multiple terminals.

[0070] Optionally, the device is configured as follows: the service management entity determines whether there is an identifier of the second access point in the context of each of the multiple terminals; if there is an identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have accessed the second access point through a non-terrestrial network access method; if there is no identifier of the second access point in the context of each of the multiple terminals, it indicates that the multiple terminals have not accessed the second access point through a non-terrestrial network access method.

[0071] Optionally, the device is configured as follows: the service management entity sends an indication message to the second access point, wherein the indication message jointly indicates that the second access point needs to provide enhanced services of non-terrestrial networks for multiple terminals by carrying multiple terminals and information for indicating enhanced services, and the enhanced services of non-terrestrial networks mean that the second access point needs to simultaneously establish two or more RRC connections for each of the multiple terminals.

[0072] Optionally, the device is configured as follows: a service management entity selects an access network device associated with a first access point, wherein the access network device associated with the first access point is a second access point; the service management entity sends indication information to the second access point, wherein the indication information carries multiple terminals, information for indicating that the terminals are to be accessed via a non-terrestrial network, and information for indicating enhanced services to jointly indicate that the second access point needs to access the multiple terminals via a non-terrestrial network access method, and when the multiple terminals are all accessed by the second access point, enhanced services of the non-terrestrial network are provided to the multiple terminals, wherein the enhanced services of the non-terrestrial network mean that the second access point needs to simultaneously establish two or more RRC connections for each of the multiple terminals.

[0073] Optionally, the abnormal information includes at least one of the following information: an identifier of the first access point, identifiers of each of the multiple terminals, or signal strength change information of each of the multiple terminals, where the signal strength change information of each of the multiple terminals is used to indicate that the communication signal strengths of each of the multiple terminals have changed from being higher than an upper communication limit value to being lower than a lower communication limit value; and the at least one item of information is used to jointly indicate that an abnormality has occurred in the communication of the multiple terminals accessing the first access point.

[0074] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. For example, the electronic device may be a network device, or a chip (system) or other component or assembly that can be set in a network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0075] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0076] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or may be application specific integrated circuits (ASICs), or may be configured to implement one or more integrated circuits of the embodiments of the present application, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0077] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 3 The chemical park safety monitoring method based on the Internet of Things is shown.

[0078] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0079] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0080] The memory 402 is used to store the software program for executing the solution of the present application, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0081] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in the embodiment of the present application.

[0082] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0083] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0084] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 (not shown) is coupled to the processor 401, which is not specifically limited in the embodiment of the present application.

[0085] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0086] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0087] It should be understood that the processor in the embodiments of the present application may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0088] It should also be understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0089] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0090] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0091] In this application, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0092] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0093] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0094] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0095] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0096] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0097] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0098] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0099] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A chemical park safety monitoring method based on the Internet of Things, characterized in that: The method comprises: The service management entity receives abnormal information reported from the first access point, wherein the abnormal information is used to indicate that abnormal conditions occur in the communications of multiple terminals accessing the first access point, the signal range of the first access point covers the chemical park, and the first access point provides services of the ground network; If a monitoring terminal among the multiple terminals meets a preset condition, the service management entity determines that a security abnormality occurs in the monitoring terminal; In the event of a security anomaly at the monitoring terminal, the service management entity instructs a second access point capable of providing non-terrestrial network services to provide non-terrestrial network services to the multiple terminals, wherein the signal range of the second access point covers the chemical park; The monitoring terminal among the multiple terminals satisfies the preset condition including one or more of the following: The number of monitoring terminals is greater than or equal to a first upper limit number; or; When the number of the multiple terminals is greater than or equal to the second upper limit, the proportion of the monitoring terminals in the multiple terminals is greater than or equal to the upper limit of the proportion; or; The number of the monitoring terminals is greater than or equal to the first upper limit number, and the number of the plurality of terminals is greater than or equal to the second upper limit number.

2. The method according to claim 1, characterized in that: The method further comprises: The service management entity obtains, according to the respective identifiers of the plurality of terminals in the abnormal information, the respective contexts of the plurality of terminals from the service management entity locally or from a data management network element; The service management entity determines the terminal whose device type is non-mobile and has visual monitoring capability among the multiple terminals according to the device type of each terminal in the context of each of the multiple terminals, wherein the terminal whose device type is non-mobile and has visual monitoring capability is the monitoring terminal.

3. The method according to claim 2, characterized in that If a monitoring terminal among the multiple terminals meets a preset condition, the service management entity determines that a security abnormality occurs in the monitoring terminal, including: If the monitoring terminal among the multiple terminals meets the preset condition, the service management entity determines whether the monitoring terminal is located in an area with a high security level, wherein the area with a high security level refers to an area with a security level greater than a level threshold; If the monitoring terminal is located in an area with a high security level, the service management entity determines that a security anomaly occurs in the monitoring terminal.

4. The method according to claim 3, characterized in that The service management entity determines whether the monitoring terminal is located in an area with a high security level, including: The service management entity obtains, from an application network element serving the monitoring terminal, information about a monitoring service of the application network element for the monitoring terminal according to the identifier of the monitoring terminal, wherein the monitoring service of the application network element for the monitoring terminal indicates that the monitoring service needs to be executed by the monitoring terminal, and the information about the monitoring service of the application network element for the monitoring terminal is used to indicate multiple areas covered by the service and respective security levels of the multiple areas; The service management entity determines one or more areas where the monitoring terminal is located in the multiple areas, If the number of high security level areas among the one or more areas exceeds a preset number threshold, the service management entity determines that the monitoring terminal is located in the high security level area; otherwise, the service management entity determines that the monitoring terminal is not located in the high security level area.

5. The method according to claim 1, characterized in that The service management entity instructs a second access point capable of providing a non-terrestrial network service to provide the non-terrestrial network service for the multiple terminals, including: The service management entity determines whether the plurality of terminals have accessed the second access point in a non-terrestrial network access manner; If the plurality of terminals have accessed the second access point in a non-terrestrial network access manner, the service management entity instructs the second access point to provide enhanced services of the non-terrestrial network for the plurality of terminals; If the multiple terminals do not access the second access point through a non-terrestrial network access method, the service management entity instructs the second access point to access the multiple terminals through a non-terrestrial network access method, and provides enhanced services of the non-terrestrial network for the multiple terminals when the multiple terminals all access the second access point.

6. The method according to claim 5, characterized in that The service management entity determines whether the plurality of terminals have accessed the second access point in a non-terrestrial network access manner, including: Determining, by the service management entity, whether there is an identifier of the second access point in the context of each of the plurality of terminals; If there is an identifier of the second access point in the context of each of the multiple terminals, it means that the multiple terminals have accessed the second access point through a non-terrestrial network access method; if there is no identifier of the second access point in the context of each of the multiple terminals, it means that the multiple terminals have not accessed the second access point through a non-terrestrial network access method.

7. The method according to claim 6, characterized in that The service management entity instructs the second access point to provide the plurality of terminals with enhanced services of the non-terrestrial network, including: The service management entity sends indication information to the second access point, wherein the indication information jointly indicates that the second access point needs to provide enhanced services of a non-terrestrial network for the multiple terminals by carrying the multiple terminals and information for indicating enhanced services, and the enhanced services of the non-terrestrial network mean that the second access point needs to establish two or more connections for each of the multiple terminals at the same time.

8. The method according to claim 6, characterized in that The service management entity instructs the second access point to access the multiple terminals through a non-terrestrial network access method, and provides enhanced services of the non-terrestrial network for the multiple terminals when the multiple terminals all access the second access point, including: The service management entity selects an access network device associated with the first access point, wherein the access network device associated with the first access point is the second access point; The service management entity sends indication information to the second access point, wherein the indication information carries the multiple terminals, information used to indicate that the terminals are to be accessed in a non-terrestrial network manner, and information used to indicate enhanced services to jointly indicate that the second access point needs to access the multiple terminals in a non-terrestrial network access manner, and when the multiple terminals all access the second access point, provides the multiple terminals with enhanced services of the non-terrestrial network, where the enhanced service of the non-terrestrial network means that the second access point needs to simultaneously establish two or more connections for each of the multiple terminals.

9. The method according to any one of claims 1 to 8, characterized in that The abnormal information includes at least one of the following information: an identifier of the first access point, an identifier of each of the multiple terminals, or signal strength change information of each of the multiple terminals, wherein the signal strength change information of each of the multiple terminals is used to indicate that the communication signal strength of each of the multiple terminals changes from being higher than an upper communication limit value to being lower than a lower communication limit value; the at least one item of information is used to jointly indicate that abnormal conditions occur in the communication of the multiple terminals accessing the first access point.

Images