Expressway private cloud server data protection method

Abstract

The invention discloses an expressway private cloud server data protection method, and relates to the technical field of data management, a plurality of sub-servers are deployed according to requirements, communication coverage is performed on each data acquisition terminal deployed on an expressway through the sub-servers, and a high-speed communication local area network is constructed according to the communication coverage range; preprocessing the road data acquired by the corresponding data acquisition terminals through the deployed sub-servers to obtain cloud side node road data; according to the method, the cloud side node road data is subjected to cooperative processing in the cloud server to obtain the cloud data, and the obtained cloud data is subjected to corresponding data protection, so that the safety of the highway data is ensured, the one-time data processing amount is reduced, and the hardware configuration requirement can be reduced in practical application.

Description

Technical Field

[0001] The present invention relates to the technical field of data management, and in particular to a method for protecting data of a private cloud server on a highway. Background Art

[0002] With the rapid development of my country's highway network, the importance of its maintenance and management has become increasingly prominent. However, traditional maintenance and management methods have problems such as incomplete data collection, delayed updates, low analysis and processing efficiency, and weak decision-making support capabilities, which cannot meet the needs of modern highway refined and intelligent maintenance;

[0003] How to achieve collaborative processing of data at various locations on the highway, thereby protecting the highway data, is a problem we need to solve. To this end, a method for protecting highway private cloud server data is now provided. Summary of the invention

[0004] The purpose of the present invention is to provide a method for protecting data of a highway private cloud server.

[0005] The purpose of the present invention can be achieved by the following technical solution: A method for protecting data of a highway private cloud server, comprising the following steps:

[0006] Step S1: deploy several sub-servers according to demand, and use the sub-servers to provide communication coverage for various data collection terminals deployed on the highway, and build a high-speed communication local area network according to the communication coverage range;

[0007] Step S2: pre-processing the highway data acquired by the corresponding data collection terminal through the deployed sub-server to obtain cloud edge node highway data;

[0008] Step S3: The cloud edge node highway data is collaboratively processed in the cloud server to obtain cloud data, and corresponding data protection is performed on the obtained cloud data.

[0009] Furthermore, a number of sub-servers are deployed according to demand, and the process of providing communication coverage to various data collection terminals deployed on the highway through the sub-servers includes:

[0010] A communication module is set in each data collection terminal, and then sub-servers are arranged according to the location of each data collection terminal, and each sub-server is associated with several data collection terminals;

[0011] The data acquisition terminal is connected to the associated sub-server through the communication module;

[0012] The sub-server is provided with a plurality of communication channels, wherein the communication channels include a use channel and a standby channel;

[0013] The number of the use channels is the same as the number of the associated data acquisition terminals, and each use channel corresponds to a data acquisition terminal;

[0014] By using multiple sub-servers to manage different data collection terminals, communication coverage of each data collection terminal deployed on the highway can be achieved.

[0015] Furthermore, the process of constructing a high-speed communication local area network according to the communication coverage includes:

[0016] Mark the communication module set in each data acquisition terminal as a primary communication node;

[0017] Mark the subserver as a secondary communication node;

[0018] The secondary communication node is communicatively connected to a plurality of primary communication nodes, and the primary communication nodes communicatively connected to the same secondary communication node are marked as peer communication nodes;

[0019] A secondary communication node among the same-level communication nodes is communicatively connected to at least one other secondary communication node;

[0020] According to the communication connection relationship between the primary communication nodes and the secondary communication nodes, a corresponding high-speed communication local area network is constructed.

[0021] Furthermore, the road data acquired by the corresponding data collection terminal is preprocessed by the deployed sub-server, and the process of obtaining the road data of the cloud edge node includes:

[0022] Constructing, within the sub-server, a data sub-base associated with each primary communication node that is communicatively connected to the sub-server;

[0023] Periodically upload the highway data acquired by the primary communication node to the corresponding associated data sub-database in the sub-server;

[0024] Each data sub-database is compressed to obtain a corresponding phased data packet, and a corresponding data sub-database is re-established. The first-level communication node uploads the latest highway data to the newly established data sub-database, and so on;

[0025] According to the number of the obtained phased data packets, a data matrix consisting of a plurality of matrix items is constructed, wherein the number of the data matrix is ​​consistent with the number of the phased data packets;

[0026] When the phased data package is uploaded to the corresponding data sub-database, a sequence code is generated, and the generated matrix sequence code is associated with the corresponding phased data package;

[0027] Sort and combine the generated sequence codes according to the generation time to obtain the corresponding matrix sequence code;

[0028] The phased data packets are encrypted by using the obtained matrix sequence code to obtain the corresponding cloud edge node road data, and the obtained cloud edge node road data is uploaded to the cloud server;

[0029] Converting the obtained serial code into a data stream consisting of binary unit codes;

[0030] A corresponding cyclic redundancy code is generated according to the obtained data stream, and a periodic sequence is inserted into the obtained cyclic redundancy code as a decryption key, and the obtained decryption key is uploaded to the cloud server.

[0031] Furthermore, the cloud edge node road data is collaboratively processed in the cloud server, and the process of obtaining cloud data includes:

[0032] Construct a temporary storage data space, and import the received cloud edge node road data into the temporary storage data space;

[0033] The received decryption keys are then summarized and the periodic sequence in the decryption keys is read;

[0034] According to the read periodic sequence, the decryption keys corresponding to the same periodic sequence are aggregated to obtain a corresponding decryption key set;

[0035] Read the number of decryption keys in the decryption key set. When the number of decryption keys in the decryption key set is consistent with the number of sub-servers, it means that the highway data of all sub-servers in the period corresponding to the period sequence have been uploaded, and the decryption key set is marked;

[0036] When the number of decryption keys in the decryption key set is inconsistent with that of the sub-server, the receiving time of the earliest decryption key in the decryption key set is obtained;

[0037] Set the warning duration T;

[0038] When the time from the earliest decryption key receiving time to the current time exceeds the warning time T, a channel detection instruction is generated, and each communication channel in the sub-server is detected according to the channel detection instruction;

[0039] Read each decryption key in the marked decryption key set, and use the read decryption key to decrypt the highway data of each cloud edge node in the temporary storage data space;

[0040] The decrypted cloud edge node highway data is exported to the temporary data storage space, and the cloud edge node highway data in the exported temporary data storage space is decrypted by each decryption key in the decryption key set to obtain the corresponding highway data;

[0041] Updating the obtained data of each highway to the corresponding communication node on the high-speed communication local area network;

[0042] Divide the high-speed communication local area network into sections to obtain several high-speed sections;

[0043] Then the highway condition of the highway section is evaluated, and a highway condition evaluation coefficient is obtained;

[0044] Set different road condition threshold intervals, each road condition threshold interval corresponds to a different road condition level;

[0045] Matching the obtained high-speed road condition evaluation coefficient with the road condition threshold interval, and updating the road condition level corresponding to the road condition threshold interval to which the high-speed road condition evaluation coefficient belongs to the corresponding high-speed road section in the high-speed communication local area network;

[0046] After all expressway sections are updated, the updated high-speed communication LAN and the corresponding expressway data will be saved as cloud data.

[0047] Furthermore, the process of detecting each communication channel in the sub-server according to the channel detection instruction includes:

[0048] Traversing each decryption key in the decryption key set, and marking the sub-server corresponding to the missing decryption key according to the traversal result;

[0049] Detecting the operating status of each usage channel in the sub-server;

[0050] If the operating status of the used channel is abnormal, a backup channel is selected to switch the used channel with the abnormal operating status, and the used channel with the abnormal operating status is marked as a fault channel;

[0051] Uploading corresponding highway data through the switched standby channel;

[0052] If the number of the backup channels is zero, a fault alarm message is generated and sent to the cloud server, and the management personnel arrange personnel to repair and troubleshoot the sub-server.

[0053] Furthermore, the process of performing corresponding data protection on the obtained cloud data includes:

[0054] Constructing a corresponding associated database in the cloud server according to the periodic sequence corresponding to the cloud data;

[0055] Importing the cloud data into an associated database corresponding to the corresponding periodic sequence;

[0056] Setting a corresponding private access path for the set access port;

[0057] Setting a private access right and a public access right for the private access path, and generating a corresponding private access right code according to the private access right and generating a public access right code according to the public access right;

[0058] Set different data access scopes based on private access rights and public access rights;

[0059] Sending the private access permission code to the designated user, so that the designated user can access the data content of the corresponding data access scope in the associated database through the private access permission code held by the designated user;

[0060] The public access permission code is published, and users can access the data content of the corresponding data access range in the associated database through the published public access permission code.

[0061] Compared with the prior art, the present invention has the following beneficial effects:

[0062] Sub-servers are set up, and communication connections are established with different data acquisition terminals in batches through the sub-servers. The obtained highway data are pre-processed through the sub-servers to reduce the processing load on the cloud. The highway data from different sub-servers are then collaboratively processed in the cloud server to achieve highway data collaboration. The highway data is then encrypted and decrypted in batches according to the upload cycle to ensure the security of the highway data. At the same time, the one-time data processing volume is reduced, so that in actual applications, the hardware configuration requirements can be reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0064] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0065] like Figure 1 As shown, a method for protecting data of a highway private cloud server includes the following steps:

[0066] Step S1: deploy several sub-servers according to demand, and use the sub-servers to provide communication coverage for various data collection terminals deployed on the highway, and build a high-speed communication local area network according to the communication coverage range;

[0067] Step S2: pre-processing the highway data acquired by the corresponding data collection terminal through the deployed sub-server to obtain cloud edge node highway data;

[0068] Step S3: The cloud edge node highway data is collaboratively processed in the cloud server to obtain cloud data, and corresponding data protection is performed on the obtained cloud data.

[0069] It should be further explained that, in the specific implementation process, several sub-servers are deployed according to the needs, and the process of communicating with various data collection terminals deployed on the highway through the sub-servers includes:

[0070] A communication module is set in each data collection terminal, and then sub-servers are arranged according to the location of each data collection terminal, and each sub-server is associated with several data collection terminals;

[0071] The data acquisition terminal is connected to the associated sub-server through the communication module;

[0072] The sub-server is provided with a plurality of communication channels, wherein the communication channels include a use channel and a standby channel;

[0073] The number of the use channels is the same as the number of the associated data acquisition terminals, and each use channel corresponds to a data acquisition terminal;

[0074] By using multiple sub-servers to manage different data collection terminals, communication coverage of each data collection terminal deployed on the highway can be achieved.

[0075] It should be further explained that, in the specific implementation process, the process of building a high-speed communication local area network according to the communication coverage includes:

[0076] Mark the communication module set in each data acquisition terminal as a primary communication node;

[0077] Mark the subserver as a secondary communication node;

[0078] The secondary communication node is communicatively connected to a plurality of primary communication nodes, and the primary communication nodes communicatively connected to the same secondary communication node are marked as peer communication nodes;

[0079] A secondary communication node among the same-level communication nodes is communicatively connected to at least one other secondary communication node;

[0080] According to the communication connection relationship between the primary communication nodes and the secondary communication nodes, a corresponding high-speed communication local area network is constructed.

[0081] It should be further explained that, in the specific implementation process, the road data acquired by the corresponding data collection terminal is preprocessed by the deployed sub-server, and the process of obtaining the cloud edge node road data includes:

[0082] Constructing, within the sub-server, a data sub-base associated with each primary communication node that is communicatively connected to the sub-server;

[0083] The highway data acquired by the primary communication node is periodically uploaded to the corresponding associated data sub-database in the sub-server; the highway data includes traffic flow, vehicle speed, accident information and road condition information;

[0084] Each data sub-database is compressed to obtain a corresponding phased data packet, and a corresponding data sub-database is re-established. The first-level communication node uploads the latest highway data to the newly established data sub-database, and so on;

[0085] According to the number of the obtained phased data packets, a data matrix consisting of a plurality of matrix items is constructed, wherein the number of the data matrix is ​​consistent with the number of the phased data packets;

[0086] When the phased data package is uploaded to the corresponding data sub-database, a sequence code is generated, and the generated matrix sequence code is associated with the corresponding phased data package;

[0087] Sort and combine the generated sequence codes according to the generation time to obtain the corresponding matrix sequence code;

[0088] The phased data packets are encrypted by using the obtained matrix sequence code to obtain the corresponding cloud edge node road data, and the obtained cloud edge node road data is uploaded to the cloud server;

[0089] Converting the obtained serial code into a data stream consisting of binary unit codes;

[0090] A corresponding cyclic redundancy code is generated according to the obtained data stream, and a periodic sequence is inserted into the obtained cyclic redundancy code as a decryption key, and the obtained decryption key is uploaded to the cloud server; it should be further explained that in the specific implementation process, the periodic sequence is a sequence code representing the current period.

[0091] It should be further explained that, in the specific implementation process, the cloud edge node road data is collaboratively processed in the cloud server, and the process of obtaining cloud data includes:

[0092] Construct a temporary storage data space, and import the received cloud edge node road data into the temporary storage data space;

[0093] The received decryption keys are then summarized and the periodic sequence in the decryption keys is read;

[0094] According to the read periodic sequence, the decryption keys corresponding to the same periodic sequence are aggregated to obtain a corresponding decryption key set;

[0095] Read the number of decryption keys in the decryption key set. When the number of decryption keys in the decryption key set is consistent with the number of sub-servers, it means that the highway data of all sub-servers in the period corresponding to the period sequence have been uploaded, and the decryption key set is marked;

[0096] When the number of decryption keys in the decryption key set is inconsistent with that of the sub-server, the receiving time of the earliest decryption key in the decryption key set is obtained;

[0097] Set the warning duration T;

[0098] When the time from the earliest decryption key receiving time to the current time exceeds the warning time T, a channel detection instruction is generated, and each communication channel in the sub-server is detected according to the channel detection instruction;

[0099] Read each decryption key in the marked decryption key set, and use the read decryption key to decrypt the highway data of each cloud edge node in the temporary storage data space;

[0100] The decrypted cloud edge node highway data is exported to the temporary data storage space, and the cloud edge node highway data in the exported temporary data storage space is decrypted by each decryption key in the decryption key set to obtain the corresponding highway data;

[0101] Updating the obtained data of each highway to the corresponding communication node on the high-speed communication local area network;

[0102] Divide the high-speed communication local area network into sections to obtain a plurality of high-speed sections; it should be further explained that, in the specific implementation process, there is at least one first-level communication node in the divided high-speed sections;

[0103] The first-level communication nodes in the expressway section are labeled respectively, denoted as i, where i = 1, 2, ..., n, n is an integer, and n ≥ 1;

[0104] The highway data corresponding to the first-level communication node labeled i is recorded as GiS;

[0105] Then the highway condition of the highway section is evaluated, and the highway condition evaluation coefficient is obtained, which is recorded as Gp;

[0106] in,

[0107] Where R is the linear coefficient, ki 数据类型 is the weight coefficient of highway data in different dimensions, GiS 数据类型 For highway data of different dimensions, Gi0 数据类型 are the highway data thresholds of different dimensions;

[0108] Set different road condition threshold intervals, each road condition threshold interval corresponds to a different road condition level;

[0109] Matching the obtained high-speed road condition evaluation coefficient with the road condition threshold interval, and updating the road condition level corresponding to the road condition threshold interval to which the high-speed road condition evaluation coefficient belongs to the corresponding high-speed road section in the high-speed communication local area network;

[0110] After all expressway sections are updated, the updated high-speed communication LAN and the corresponding expressway data will be saved as cloud data.

[0111] It should be further explained that, in a specific implementation process, the process of detecting each communication channel in the sub-server according to the channel detection instruction includes:

[0112] Traversing each decryption key in the decryption key set, and marking the sub-server corresponding to the missing decryption key according to the traversal result;

[0113] Detecting the operating status of each usage channel in the sub-server;

[0114] If the operating status of the used channel is abnormal, a backup channel is selected to switch the used channel with the abnormal operating status, and the used channel with the abnormal operating status is marked as a fault channel;

[0115] Uploading corresponding highway data through the switched standby channel;

[0116] If the number of the backup channels is zero, a fault alarm message is generated and sent to the cloud server, and the management personnel arrange personnel to repair and troubleshoot the sub-server.

[0117] It should be further explained that, in the specific implementation process, the process of performing corresponding data protection on the obtained cloud data includes:

[0118] Constructing a corresponding associated database in the cloud server according to the periodic sequence corresponding to the cloud data;

[0119] Importing the cloud data into an associated database corresponding to the corresponding periodic sequence;

[0120] Setting a corresponding private access path for the set access port;

[0121] Setting a private access right and a public access right for the private access path, and generating a corresponding private access right code according to the private access right and generating a public access right code according to the public access right;

[0122] Set different data access scopes based on private access rights and public access rights;

[0123] Sending the private access permission code to the designated user, so that the designated user can access the data content of the corresponding data access scope in the associated database through the private access permission code held by the designated user;

[0124] The public access permission code is published, and users can access the data content of the corresponding data access range in the associated database through the published public access permission code.

[0125] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Although the present invention has been disclosed as a preferred embodiment as above, it is not used to limit the present invention. Any technical personnel in this field can make some changes or modify the technical contents disclosed above into equivalent embodiments with equivalent changes without departing from the scope of the technical solution of the present invention. However, any modification or equivalent replacement of the above embodiments made according to the technical essence of the present invention without departing from the content of the technical solution of the present invention still falls within the scope of the technical solution of the present invention.

Claims

1. A method for protecting data of a highway private cloud server, characterized in that: The following steps are involved: Step S1: deploy several sub-servers according to demand, and use the sub-servers to provide communication coverage for various data collection terminals deployed on the highway, and build a high-speed communication local area network according to the communication coverage range; Step S2: pre-processing the highway data acquired by the corresponding data collection terminal through the deployed sub-server to obtain cloud edge node highway data; Step S3: The cloud edge node highway data is collaboratively processed in the cloud server to obtain cloud data, and corresponding data protection is performed on the obtained cloud data.

2. A highway private cloud server data protection method according to claim 1, characterized in that: Several sub-servers are deployed according to the needs. The process of using the sub-servers to provide communication coverage for various data collection terminals deployed on the highway includes: A communication module is set in each data collection terminal, and then sub-servers are arranged according to the location of each data collection terminal, and each sub-server is associated with several data collection terminals; The data acquisition terminal is connected to the associated sub-server through the communication module; The sub-server is provided with a plurality of communication channels, wherein the communication channels include a use channel and a standby channel; The number of the use channels is the same as the number of the associated data acquisition terminals, and each use channel corresponds to a data acquisition terminal; By using multiple sub-servers to manage different data collection terminals, communication coverage of each data collection terminal deployed on the highway can be achieved.

3. A highway private cloud server data protection method according to claim 2, characterized in that: The process of building a high-speed communication LAN based on the communication coverage includes: Mark the communication module set in each data acquisition terminal as a primary communication node; Mark the subserver as a secondary communication node; The secondary communication node is communicatively connected to a plurality of primary communication nodes, and the primary communication nodes communicatively connected to the same secondary communication node are marked as peer communication nodes; A secondary communication node among the same-level communication nodes is communicatively connected to at least one other secondary communication node; According to the communication connection relationship between the primary communication nodes and the secondary communication nodes, a corresponding high-speed communication local area network is constructed.

4. A highway private cloud server data protection method according to claim 3, characterized in that: The process of preprocessing the road data acquired by the corresponding data collection terminal through the deployed sub-server to obtain the road data of the cloud edge node includes: Constructing, within the sub-server, a data sub-base associated with each primary communication node that is communicatively connected to the sub-server; Periodically upload the highway data acquired by the primary communication node to the corresponding associated data sub-database in the sub-server; Each data sub-database is compressed to obtain a corresponding phased data packet, and a corresponding data sub-database is re-established. The first-level communication node uploads the latest highway data to the newly established data sub-database, and so on; According to the number of the obtained phased data packets, a data matrix consisting of a plurality of matrix items is constructed, wherein the number of the data matrix is ​​consistent with the number of the phased data packets; When the phased data package is uploaded to the corresponding data sub-database, a sequence code is generated, and the generated matrix sequence code is associated with the corresponding phased data package; Sort and combine the generated sequence codes according to the generation time to obtain the corresponding matrix sequence code; The phased data packets are encrypted by using the obtained matrix sequence code to obtain the corresponding cloud edge node road data, and the obtained cloud edge node road data is uploaded to the cloud server; Converting the obtained serial code into a data stream consisting of binary unit codes; A corresponding cyclic redundancy code is generated according to the obtained data stream, and a periodic sequence is inserted into the obtained cyclic redundancy code as a decryption key, and the obtained decryption key is uploaded to the cloud server.

5. A highway private cloud server data protection method according to claim 4, characterized in that: The process of collaboratively processing the road data of the cloud edge node in the cloud server and obtaining the cloud data includes: Construct a temporary storage data space, and import the received cloud edge node road data into the temporary storage data space; The received decryption keys are then summarized and the periodic sequence in the decryption keys is read; According to the read periodic sequence, the decryption keys corresponding to the same periodic sequence are aggregated to obtain a corresponding decryption key set; Read the number of decryption keys in the decryption key set. When the number of decryption keys in the decryption key set is consistent with the number of sub-servers, it means that the highway data of all sub-servers in the period corresponding to the period sequence have been uploaded, and the decryption key set is marked; When the number of decryption keys in the decryption key set is inconsistent with that of the sub-server, the receiving time of the earliest decryption key in the decryption key set is obtained; Set the warning duration T; When the time from the earliest decryption key receiving time to the current time exceeds the warning time T, a channel detection instruction is generated, and each communication channel in the sub-server is detected according to the channel detection instruction; Read each decryption key in the marked decryption key set, and use the read decryption key to decrypt the highway data of each cloud edge node in the temporary storage data space; The decrypted cloud edge node highway data is exported to the temporary data storage space, and the cloud edge node highway data in the exported temporary data storage space is decrypted by each decryption key in the decryption key set to obtain the corresponding highway data; Updating the obtained data of each highway to the corresponding communication node on the high-speed communication local area network; Divide the high-speed communication local area network into sections to obtain several high-speed sections; Then the highway condition of the highway section is evaluated, and a highway condition evaluation coefficient is obtained; Set different road condition threshold intervals, each road condition threshold interval corresponds to a different road condition level; Matching the obtained high-speed road condition evaluation coefficient with the road condition threshold interval, and updating the road condition level corresponding to the road condition threshold interval to which the high-speed road condition evaluation coefficient belongs to the corresponding high-speed road section in the high-speed communication local area network; After all expressway sections are updated, the updated high-speed communication LAN and the corresponding expressway data will be saved as cloud data.

6. A highway private cloud server data protection method according to claim 5, characterized in that: The process of detecting each communication channel in the sub-server according to the channel detection instruction includes: Traversing each decryption key in the decryption key set, and marking the sub-server corresponding to the missing decryption key according to the traversal result; Detecting the operating status of each usage channel in the sub-server; If the operating status of the used channel is abnormal, a backup channel is selected to switch the used channel with the abnormal operating status, and the used channel with the abnormal operating status is marked as a fault channel; Uploading corresponding highway data through the switched standby channel; If the number of the backup channels is zero, a fault alarm message is generated and sent to the cloud server, and the management personnel arrange personnel to repair and troubleshoot the sub-server.

7. A highway private cloud server data protection method according to claim 5, characterized in that: The process of performing corresponding data protection on the acquired cloud data includes: Constructing a corresponding associated database in the cloud server according to the periodic sequence corresponding to the cloud data; Importing the cloud data into an associated database corresponding to the corresponding periodic sequence; Setting a corresponding private access path for the set access port; Setting a private access right and a public access right for the private access path, and generating a corresponding private access right code according to the private access right and generating a public access right code according to the public access right; Set different data access scopes based on private access rights and public access rights; Sending the private access permission code to the designated user, so that the designated user can access the data content of the corresponding data access scope in the associated database through the private access permission code held by the designated user; The public access permission code is published, and users can access the data content of the corresponding data access range in the associated database through the published public access permission code.

Images