Network hidden danger discovery method and system based on digital twinning

Abstract

The invention discloses a network hidden danger discovery method and system based on digital twinning. The method comprises the steps that an optical communication network digital twinning model is established, and hidden danger investigation and optimization are carried out; the method comprises the following steps of: mapping existing optical communication network topology, transmission channel network topology and historical fault information to a digital twinning system in the establishment of an optical communication network digital twinning model; and constructing an optical cable network topology, a transmission channel topology and a relationship between the optical cable network topology and the transmission channel topology according to entity attributes, and reproducing a system operation state according to fault alarm information and service operation information. According to the method, the network model and the operation historical data of the power optical communication network are fully utilized, and the digital twin mirror image of the power optical communication network is constructed on the computer. The operation of the power optical communication network is simulated on the digital twin mirror image, so that active scanning of the whole network and automatic and efficient identification of various hidden danger points become possible on the premise of not invading the actual operation scene of the power grid.

Description

Technical Field

[0001] The present invention relates to a network hidden danger discovery method and system based on digital twins, belonging to the field of network communication security technology. Background Art

[0002] Optical communication network construction has achieved tremendous success to date, but due to historical constraints, the design and construction plans adopted at the time no longer meet current planning and design standards. Various weaknesses and non-standard features exist within the existing communication network, creating potential risks to its normal and stable operation. Given the enormous scale, complex structure, and diverse services of the provincial communication network, particularly its rapid development and growth, manual identification, analysis, and troubleshooting of network-wide potential risks is a time-consuming task.

[0003] Fiber-optic communications are the main artery of dispatching communications infrastructure, carrying the vast majority of dispatching traffic. Therefore, the development of optical communication technology has become a crucial cornerstone for promoting the stable and sustainable development of power grids. Currently, the design of optical transmission systems based on traditional fiber-optic channels has reached its theoretical limits. However, the development of methods and mechanisms for managing hidden dangers in optical communication networks has lagged behind, resulting in inadequate spectrum resource utilization and low operational efficiency. Summary of the Invention

[0004] Purpose of the invention: In response to the problems and shortcomings in the existing technology, the present invention provides a network hidden danger discovery method and system based on digital twins. Based on the real-time data collected by the perception unit, each link in the optical fiber communication system is synchronously digitally mapped, providing real-time physical layer key information for optical network management and control, and has the ability to actively deduce network hidden dangers.

[0005] Technical solution: A network vulnerability discovery method based on digital twins, including establishing a digital twin model of the optical communication network and conducting vulnerability investigation and optimization; In establishing a digital twin model of the optical communication network, the existing optical communication network topology, transmission channel network topology and historical fault information are mapped to the digital twin system; the optical cable network topology, transmission channel topology and the relationship between them are constructed according to the entity attributes, and the system operation status is reproduced based on the fault alarm information and business operation information.

[0006] During risk investigation and optimization, indicators, standards, and rules are designed for equipment, services, and networks. Based on the digital twin model of the optical communication network, indicators are calculated and compliance with the rules is determined. By comparing these indicators with the set compliance standards, services with potential risks are proactively identified, such as overloaded optical cable equipment and facilities, or transmission channel protection paths and working paths passing through the same facilities. These services are rerouted, forcing the working and protection paths to not pass through the same physical facilities.

[0007] The optical communication network topology includes its nodes, equipment, and optical cable information.

[0008] The transmission channel network topology includes transmission channels, logical node information, and channel protection types and methods.

[0009] The historical fault information includes historical operation data and real-time operation status.

[0010] The input business objects of the digital twin model of the optical communication network include the ledgers of optical cable network communication sites, equipment, optical cables and transmission channels, the relationship data between optical cable network and transmission channel network, and the relationship data between transmission channels and services; the input business attributes of the digital twin model of the optical communication network include: 1) network sites, site equipment sets, and the number of site equipment; 2) equipment, the site to which the equipment belongs, and the network to which the equipment belongs; 3) optical cables, starting and ending sites, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which they belong; 4) transmission channels, channel type, protection type, protection mode, ledger statistics type, starting and ending sites, starting and ending equipment, station-by-station routing, transmission channel sets with no common path, and fault alarm information; 5) service, type, protection type, protection mode, starting and ending sites, starting and ending equipment, station-by-station routing, service sets with no common path, and fault alarm information.

[0011] The input business objects for hidden danger investigation and optimization include optical cable network communication sites, equipment, optical cables and transmission channel ledgers, optical cable network and transmission channel network relationship data, and transmission channel and business relationship data.

[0012] Input business attributes for hidden danger investigation and optimization include: 1) Network site, site device set, and number of site devices; 2) The device, the site to which the device belongs, and the network to which the device belongs; 3) Optical cable, starting and ending points, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which it belongs; 4) Transmission channel, channel type, protection type, protection mode, ledger statistics type, start and end sites, start and end devices, site-by-site routing, set of transmission channels without common paths, and fault alarm information; 5) Service,type, protection type, protection mode, start and end sites, start and end equipment, site-by-site routing, no common path service set, fault alarm information.

[0013] A digital twin-based network hazard discovery system, designed using a digital twin system architecture, consists of an application layer, a platform layer, and a data resource layer. The application layer uses network simulation technology and a rule engine to provide hazard identification services for communication networks. The platform layer, comprising a data service engine, a network planning engine, an analysis and calculation engine, a knowledge engine, and a visualization rendering engine, implements communication algorithm simulation of business rules and business logic. It uses an object-oriented approach to encapsulate optical communication network entities and available operations (such as service routing and defect analysis). This is where business rules are implemented and has the most processing tasks. The data resource layer includes a model structure database, a basic geographic information database, and a thematic database, enabling data aggregation, data cleaning, and data storage.

[0014] The application layer includes functions such as hidden danger identification, network simulation, rule management, task management, analysis reporting and system management.

[0015] The platform layer uses Java technology to implement the data service engine, network planning engine, analysis and calculation engine, knowledge engine and visualization service engine.

[0016] The data resource layer manages geographic information, model component information and thematic data through structured data, serialized data and unstructured data.

[0017] The system functions are mainly divided into several first-level functions: digital twin management, hidden danger indicator and rule model management, hidden danger identification plan and task management, hidden danger identification task execution, hidden danger identification report and analysis management, and system management.

[0018] The digital twin management function synchronizes and maps production environment data, and can create and manage digital twins, including network topology management, data management, and visual editing. Hidden danger indicator and rule model management is used to manage the hidden danger rule library, the model configuration and algorithm of each hidden danger rule, and the management of the relevant library of hidden danger response measures. The hidden danger identification plan and task management function is used by users to configure hidden danger identification plans and manage the plan library, as well as to manage hidden danger identification tasks. The hidden danger identification task execution function simulates each hidden danger and outputs the results. The hidden danger identification report and analysis management issues an analysis report, and conducts statistics and analysis on hidden dangers in different ways and angles. The system management function supports permission management and the management of system menus and system execution logs.

[0019] The digital twin management function includes the following secondary functions: production environment data synchronization and mapping, data synchronization scheduled tasks, and digital twin creation and management.

[0020] The secondary functions of hidden danger indicator and rule model management include: hidden danger rule base management, routing hidden danger rule model configuration and algorithm, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, and subnet protection hidden danger rule model and algorithm.

[0021] The secondary functions of hidden danger identification plan and task management include: hidden danger identification plan configuration, hidden danger plan library management, and hidden danger identification task management.

[0022] The secondary functions of hidden danger identification task execution include: hidden danger identification execution engine, routing hidden danger identification, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, and subnet protection hidden danger rule model and algorithm.

[0023] The secondary functions of hidden danger identification reporting and analysis management include: hidden danger identification reporting management, hidden danger identification tracking and analysis management.

[0024] The secondary functions of system management include: role authority management and basic maintenance management.

[0025] Beneficial Effects: Compared to existing technologies, the digital twin-based network vulnerability detection method and system provided by this invention fully utilizes the network model and historical operational data of the electric power optical communication network to construct a digital twin image of the electric power optical communication network on a computer. By simulating the operation of the electric power optical communication network on the digital twin image, it is possible to actively scan the entire network and automatically and efficiently identify various potential hazards without intruding on the actual operation of the power grid. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 is a diagram of the overall system architecture of an embodiment of the present invention; Figure 2 This is a system function distribution diagram of an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The present invention is further illustrated below with reference to specific examples. It should be understood that these examples are only used to illustrate the present invention and are not used to limit the scope of the present invention. After reading the present invention, modifications of various equivalent forms of the present invention made by those skilled in the art all fall within the scope defined by the claims attached to this application.

[0028] A network hazard discovery method based on digital twins, including establishing a digital twin model of an optical communication network and conducting hazard investigation and optimization; In establishing a digital twin model of the optical communication network, the existing optical communication network topology, transmission channel network topology and historical fault information are mapped to the digital twin system; the optical cable network topology, transmission channel topology and the relationship between them are constructed according to the entity attributes, and the system operation status is reproduced based on the fault alarm information and business operation information.

[0029] During risk investigation and optimization, indicators, standards, and rules are designed for equipment, services, and networks. Based on the digital twin model of the optical communication network, indicators are calculated and compliance with the rules is determined. By comparing these indicators with the set compliance standards, services with potential risks are proactively identified, such as overloaded optical cable equipment and facilities, or transmission channel protection paths and working paths passing through the same facilities. These services are rerouted, forcing the working and protection paths to not pass through the same physical facilities.

[0030] The optical communication network topology includes its nodes, equipment, and optical cable information.

[0031] The transmission channel network topology includes transmission channels, logical node information, and channel protection types and methods.

[0032] The historical fault information includes historical operation data and real-time operation status.

[0033] The input business objects of the digital twin model of the optical communication network include the ledgers of optical cable network communication sites, equipment, optical cables and transmission channels, the relationship data between optical cable network and transmission channel network, and the relationship data between transmission channels and services; the input business attributes of the digital twin model of the optical communication network include: 1) network sites, site equipment sets, and the number of site equipment; 2) equipment, the site to which the equipment belongs, and the network to which the equipment belongs; 3) optical cables, starting and ending sites, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which they belong; 4) transmission channels, channel type, protection type, protection mode, ledger statistics type, starting and ending sites, starting and ending equipment, station-by-station routing, transmission channel sets with no common path, and fault alarm information; 5) service, type, protection type, protection mode, starting and ending sites, starting and ending equipment, station-by-station routing, service sets with no common path, and fault alarm information.

[0034] The input business objects for hidden danger investigation and optimization include optical cable network communication sites, equipment, optical cables and transmission channel ledgers, optical cable network and transmission channel network relationship data, and transmission channel and business relationship data.

[0035] Input business attributes for hidden danger investigation and optimization include: 1) Network site, site device set, and number of site devices; 2) The device, the site to which the device belongs, and the network to which the device belongs; 3) Optical cable, starting and ending points, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which it belongs; 4) Transmission channel, channel type, protection type, protection mode, ledger statistics type, start and end sites, start and end devices, site-by-site routing, set of transmission channels without common paths, and fault alarm information; 5) Service,type, protection type, protection mode, start and end sites, start and end equipment, site-by-site routing, no common path service set, fault alarm information.

[0036] like Figure 1 As shown in the figure, the digital twin-based network hazard discovery system adopts a digital twin system architecture design, consisting of the application layer, platform layer, and data resource layer from top to bottom. The application layer uses network simulation technology and a rule engine to provide hazard identification services for communication networks. The platform layer includes a data service engine, a network planning engine, an analysis and calculation engine, a knowledge engine, and a visualization rendering engine. These engines implement communication algorithm simulations based on business rules and business logic, encapsulating various optical communication network entities and available operations (such as service routing and defect analysis) in an object-oriented manner. This is where business rules are implemented and has the most processing tasks. The data resource layer includes a model structure database, a basic geographic information database, and a thematic database, enabling data aggregation, data cleaning, and data storage.

[0037] Based on business rules, statistical analysis is performed to generate a network-wide facility inventory to proactively identify potential service risks. This includes identifying overloaded fiber optic cable equipment and facilities, protection routes passing through shared facilities, overloaded facilities (e.g., equipment or fiber optic cables carrying eight or more relay protection channels), and protection service paths that are not fully mutually exclusive. Once identified, services are rerouted using integer linear programming optimization or heuristic algorithms based on network size to maximize the number of fully mutually exclusive protection routes, minimize the number of overloaded facilities, and achieve load balancing. Network architecture optimization can also be used to modify site links and service routes to mitigate potential risks. Furthermore, by analyzing historical data, time series methods and other methods can be used to predict the timing, facilities, and service impact of future failures.

[0038] Data exchange between the application layer and the platform layer, and between the platform layer and the data resource layer, occurs via message queues. The application layer utilizes a BS architecture to implement functions such as hazard identification, network simulation, rule management, task management, analysis reporting, and system management. The platform layer utilizes Java technology to implement the data service engine, network planning engine, analysis and calculation engine, knowledge engine, and visualization service engine. The data resource layer manages geographic information, model component information, and thematic data using structured, serialized, and unstructured data. The system is divided into three deployment component packages. As a digital twin of the electric power optical communication network, this system supports standalone operation.

[0039] The SG-CIM4.5 data model is adopted, and data analysis is completed by the data middle platform. The system does not obtain detailed data, but only obtains the results of analysis and calculation from the data middle platform.

[0040] The "authentication service" and "identity authority service" provided by unified permissions are used to manage system users and user access rights, and data transmission is encrypted using MD5.

[0041] The system adopts MVC architecture, which is divided into display layer, control layer and model layer. The DAO layer controls the data interaction of the database, which is convenient for system expansion. It adopts a cross-platform high-performance open source framework and can be used across platforms.

[0042] The application layer includes functions such as hidden danger identification, network simulation, rule management, task management, analysis reporting and system management.

[0043] The platform layer uses Java technology to implement the data service engine, network planning engine, analysis and calculation engine, knowledge engine and visualization service engine.

[0044] The data resource layer manages geographic information, model component information and thematic data through structured data, serialized data and unstructured data.

[0045] The system functions are mainly divided into several first-level functions: digital twin management, hidden danger indicator and rule model management, hidden danger identification plan and task management, hidden danger identification task execution, hidden danger identification report and analysis management, and system management.

[0046] like Figure 2 As shown, the digital twin management function can synchronize and map production environment data, and can create and manage digital twins, including network topology management, data management, and visual editing. Hidden danger indicator and rule model management can realize the management of the hidden danger rule library, the model configuration and algorithm of each hidden danger rule, and the management of the related library of hidden danger response measures. The hidden danger identification plan and task management function allows users to configure hidden danger identification plans and manage the plan library, as well as manage hidden danger identification tasks. The hidden danger identification task execution function simulates each hidden danger and outputs the results. The hidden danger identification report and analysis management issues analysis reports and conducts statistics and analysis on hidden dangers in different ways and angles. The system management function supports permission management and the management of system menus and system execution logs.

[0047] The digital twin management function includes the following secondary functions: production environment data synchronization and mapping, data synchronization scheduled tasks, and digital twin creation and management.

[0048] The secondary functions of hidden danger indicator and rule model management include: hidden danger rule base management, routing hidden danger rule model configuration and algorithm, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, and subnet protection hidden danger rule model and algorithm.

[0049] The secondary functions of hidden danger identification plan and task management include: hidden danger identification plan configuration, hidden danger plan library management, and hidden danger identification task management.

[0050] The secondary functions of hidden danger identification task execution include: hidden danger identification execution engine, routing hidden danger identification, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, and subnet protection hidden danger rule model and algorithm.

[0051] The secondary functions of hidden danger identification reporting and analysis management include: hidden danger identification reporting management, hidden danger identification tracking and analysis management.

[0052] The secondary functions of system management include: role authority management and basic maintenance management.

[0053] Production environment data synchronization and mapping, including: (1) Site data synchronization and structure mapping: obtain site information from the communication management system interface and complete structure mapping.

[0054] (2) Optical cable segment data synchronization and structure mapping: obtain optical fiber segment information from the communication management system interface and complete structure mapping.

[0055] (3) Synchronization of optical path and cable routing data and structural mapping: obtaining optical path and cable routing information from the communication management system interface and completing structural mapping.

[0056] (4) Relay protection channel synchronization and structure mapping: obtain relay protection channel information from the communication management system interface and complete structure mapping.

[0057] (5) Network element data synchronization and structure mapping: obtain network element information from the communication management system interface and complete structure mapping.

[0058] (6) Single board slot data synchronization and structure mapping, obtain single board slot information from the communication management system interface to complete structure mapping.

[0059] (7) Port information synchronization and structure mapping: obtain port information from the communication management system interface to complete structure mapping.

[0060] (8) Optical path data synchronization and structure mapping: obtain optical path information from the communication management system interface and complete structure mapping.

[0061] (9) Business channel data synchronization and structure mapping, obtain business channel information from the communication management system interface and complete structure mapping.

[0062] (10) Business channel routing synchronization and structure mapping: obtain business channel routing information from the communication management system interface and complete structure mapping.

[0063] Data synchronization scheduled tasks include: (1) Add, delete and configure site\network element\slot\port\optical path\circuit\circuit routing scheduled tasks, and realize the management and configuration of site\network element\slot\port\optical path\circuit\circuit routing scheduled tasks.

[0064] (2) Schedule management of the execution of site\network element\slot\port\optical path\circuit\circuit routing timed tasks, realizing the schedule configuration and management of site\network element\slot\port\optical path\circuit\circuit routing timed tasks.

[0065] (3) Site\Network Element\Slot\Port\Optical Path\Circuit\Circuit Routing scheduled task execution log and operation status tracking, record the execution log of the scheduled task and the operation status of the task.

[0066] Digital twin creation and management, including: (1) Communication network twin site\equipment\optical cable segment\slot\port\optical path\service path data management, manage the information of a twin copy site\equipment\optical cable segment\slot\port\optical path\service path.

[0067] (2) Communication network twin network topology management, displaying the network topology information within a twin copy.

[0068] Hidden danger rule base management, including: (1) Add and delete hidden danger related indicators and rules to realize the addition and deletion of hidden danger rules.

[0069] (2) Version management of hidden danger rules.

[0070] (3) Customized hidden danger rule configuration: in addition to the hidden danger rules clearly defined in the regulations, you can independently define and configure the required hidden danger rules.

[0071] (4) Retrieval and update of hidden danger rules, realizing retrieval and update of hidden danger rules by group classification.

[0072] Routing hidden danger rule model configuration and algorithm, including: implementing regional inspection hidden danger rule configuration, implementing business type-related hidden danger rule configuration, implementing voltage level-related hidden danger rule configuration, implementing minimum device hidden danger rule configuration, implementing minimum port hidden danger rule configuration, implementing minimum route quantity hidden danger rule configuration, implementing shared equipment / shared route hidden danger rule configuration, implementing regional hidden danger rule configuration, implementing business type hidden danger rule configuration, implementing optical cable overload hidden danger rule configuration, implementing network element overload hidden danger rule configuration, and implementing voltage level hidden danger rule configuration.

[0073] Port hidden danger rule model configuration and algorithm, including: implementing PDH port hidden danger rule configuration, implementing SDH port hidden danger rule configuration, implementing EoS port hidden danger rule configuration, implementing port utilization hidden danger rule configuration, and implementing minimum reserved port hidden danger rule configuration.

[0074] Bandwidth hidden danger rule model configuration and algorithm, including: implementing network element bandwidth hidden danger rule configuration, implementing single board bandwidth hidden danger rule configuration, and implementing bandwidth utilization hidden danger rule configuration.

[0075] Subnet protection hidden danger rule model and algorithm, including: realizing partial subnet protection hidden danger rule configuration, realizing full protection subnet protection hidden danger rule configuration, realizing shared equipment subnet protection hidden danger rule configuration.

[0076] Configure the hidden danger identification plan, filter and configure the rules required in the plan.

[0077] Hidden danger identification task management, including: addition, deletion and configuration of routing hidden danger tasks, routing hidden danger task execution schedule management, routing hidden danger task execution status tracking, addition, deletion and configuration of overload hidden danger tasks, overload hidden danger task execution schedule management, overload hidden danger task execution status tracking, addition, deletion and configuration of port hidden danger tasks, port hidden danger task execution schedule management, port hidden danger task execution status tracking, addition, deletion and configuration of bandwidth hidden danger tasks, bandwidth hidden danger task execution schedule management, bandwidth hidden danger task execution status tracking, addition, deletion and configuration of subnet protection hidden danger tasks, subnet protection hidden danger task execution schedule management, subnet protection hidden danger task execution status tracking.

[0078] Hidden danger identification tracking and analysis management, including: overall statistics of hidden danger identification work, classification and distribution of hidden dangers, spatial distribution of hidden dangers, analysis of hidden danger trends by task sequence, analysis of hidden danger geographical distribution trends by task sequence, and analysis of hidden danger trends by task sequence classification.

Claims

1. A network hidden danger discovery method based on digital twins, characterized in that: This includes establishing a digital twin model of the optical communication network and conducting risk investigation and optimization; In establishing the digital twin model of the optical communication network, the existing optical communication network topology, transmission channel network topology and historical fault information are mapped to the digital twin system; the optical cable network topology, transmission channel topology and the relationship between them are constructed according to the entity attributes, and the system operation status is reproduced according to the fault alarm information and business operation information; During the hidden danger investigation and optimization, indicator standards and rules are designed for equipment, services and networks. The indicators are calculated and the compliance of the rules is judged based on the digital twin model of the optical communication network. By comparing with the set compliance standards, services with hidden dangers are proactively discovered. Services with hidden dangers are rerouted to force the working and protection paths not to pass through any of the same physical facilities.

2. The method for discovering network hidden dangers based on digital twins according to claim 1 is characterized in that: The optical communication network topology includes its nodes, equipment, and optical cable information.

3. The method for discovering network hidden dangers based on digital twins according to claim 1 is characterized in that: The transmission channel network topology includes transmission channels, logical node information, and channel protection types and methods.

4. The method for discovering network hidden dangers based on digital twins according to claim 1 is characterized in that: The historical fault information includes historical operation data and real-time operation status.

5. The method for discovering network hidden dangers based on digital twins according to claim 1 is characterized in that: The input business objects of the digital twin model of the optical communication network include the ledgers of optical cable network communication sites, equipment, optical cables and transmission channels, the relationship data between the optical cable network and the transmission channel network, and the relationship data between the transmission channel and the business; The input service attributes of the digital twin model of the optical communication network include: 1) network sites, site equipment sets, and the number of site equipment; 2) equipment, the site to which the equipment belongs, and the network to which the equipment belongs; 3) optical cable, starting and ending sites, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which it belongs; 4) transmission channel, channel type, protection type, protection mode, ledger statistics type, starting and ending sites, starting and ending equipment, station-by-station routing, a set of transmission channels with no common path, and fault alarm information; 5) service, type, protection type, protection mode, starting and ending sites, starting and ending equipment, station-by-station routing, a set of services with no common path, and fault alarm information.

6. The method for discovering network hidden dangers based on digital twins according to claim 1 is characterized in that: The input business objects for hidden danger investigation and optimization include the optical cable network communication sites, equipment, optical cables and transmission channel ledgers, the optical cable network and transmission channel network relationship data, and the transmission channel and business relationship data; The input business attributes for potential risk detection and optimization include: 1) Network sites, site equipment sets, and number of site equipment; 2) Equipment, the site to which the equipment belongs, and the network to which the equipment belongs; 3) Optical cable, starting and ending points, starting and ending equipment, length, voltage level, number of fiber cores, number of available fiber cores, and network to which it belongs; 4) Transmission channel, channel type, protection type, protection mode, ledger statistics type, start and end sites, start and end equipment, site-by-site routing, set of transmission channels without common paths, and fault alarm information; 5) Service,type, protection type, protection mode, start and end sites, start and end equipment, site-by-site routing, no common path service set, fault alarm information.

7. A network hidden danger discovery system based on digital twins, characterized in that: Adopt digital twin system architecture design, which includes application layer, platform layer and data resource layer from top to bottom; The application layer uses network simulation technology and rule engines to provide hidden danger identification services for communication networks; the platform layer includes data service engines, network planning engines, analysis and calculation engines, knowledge engines, and visualization rendering engines, which implement communication algorithm simulation of business rules and business logic, and encapsulate various entities and available operations of optical communication networks in an object-oriented manner. It is the place where business rules are implemented and has the most processing tasks; the data resource layer includes model structure databases, basic geographic information databases, and thematic databases, which realize data aggregation, data cleaning, and data storage; The application layer includes hidden danger identification, network simulation, rule management, task management, analysis report and system management functions; The platform layer uses Java technology to implement data service engine, network planning engine, analysis and calculation engine, knowledge engine and visualization service engine; The data resource layer manages geographic information, model component information and thematic data through structured data, serialized data and unstructured data.

8. The network hidden danger discovery system based on digital twins according to claim 7, characterized in that: The system functions are divided into the following primary functions: digital twin management, hidden danger index and rule model management, hidden danger identification plan and task management, hidden danger identification task execution, hidden danger identification report and analysis management, and system management; The digital twin management function synchronizes and maps production environment data, and can create and manage digital twins, including network topology management, data management, and visual editing. Hidden danger indicators and rule model management are used to manage the hidden danger rule library, the model configuration and algorithm of each hidden danger rule, and the management of the related library of hidden danger response measures. The hidden danger identification scheme and task management function is used for users to configure hidden danger identification schemes and manage the scheme library, as well as the hidden danger identification tasks. The hidden danger identification task execution function simulates various hidden dangers and outputs the results; the hidden danger identification report and analysis management issues an analysis report, and conducts statistics and analysis on hidden dangers in different ways and angles; the system management function supports permission management and the management of system menus and system execution logs.

9. The network hidden danger discovery system based on digital twins according to claim 8, characterized in that: The digital twin management function includes the following secondary functions: production environment data synchronization and mapping, data synchronization scheduled tasks, digital twin creation and management; The secondary functions of hidden danger index and rule model management include: hidden danger rule base management, routing hidden danger rule model configuration and algorithm, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, subnet protection hidden danger rule model and algorithm; The secondary functions of hidden danger identification scheme and task management include: hidden danger identification scheme configuration, hidden danger scheme library management, hidden danger identification task management; The secondary functions of hidden danger identification task execution include: hidden danger identification execution engine, routing hidden danger identification, overload hidden danger rule model configuration and algorithm, port hidden danger rule model configuration and algorithm, bandwidth hidden danger rule model configuration and algorithm, subnet protection hidden danger rule model and algorithm; The secondary functions of hidden danger identification report and analysis management include: hidden danger identification report management, hidden danger identification tracking and analysis management; The secondary functions of system management include: role authority management and basic maintenance management.

Images