Intelligent Internet of Things gateway based on edge computing
By designing the operation monitoring protection system and emergency storage mechanism in the intelligent IoT gateway, the problem of data processing and security when the calculation exceeds the limit is solved, the effective protection and processing of data is achieved, and the security and stability of data transmission are ensured.
Patent Information
- Application Number
- CN202411568455.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-05
- Publication Date
- 2025-01-24
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
When the computing of the intelligent IoT gateway exceeds its burden limit, how to effectively protect and process data, alleviate the computing burden, and ensure the security of data transmission.
Designed a intelligent IoT level based on edge computing, including running monitoring and protection systems and cloud servers. The combination of dual -channel treatment unit, safety protection regulation unit, computing threshold monitoring unit and emergency storage unit to realize the temporary emergency storage of data And subsequent extraction.
When the gateway operation exceeds the limit, part of the data can be stored in time to ensure the efficiency of data processing and the security of communication transmission, avoid data loss or incorrect transmission, and improve the security protection effect of the gateway.
Smart Images

Figure CN119363515A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to an intelligent Internet of Things gateway, and in particular to an edge computing-based intelligent Internet of Things gateway applied in the field of digital information transmission. Background Art
[0002] Edge computing is a distributed computing model in which data processing and storage occur close to the data source rather than in a centralized data center or cloud computing center. This model can reduce data transmission delays, improve response speed, and save bandwidth. Smart IoT gateways are network devices with intelligent processing capabilities that can connect various IoT devices to achieve information interaction and collaborative work between devices.
[0003] The edge computing-based smart IoT gateway, also known as the edge gateway, is a computing device located at the edge of the network. It integrates multiple functions such as wireless communication, data processing, and intelligent decision-making. It is a core component in the edge computing architecture. The edge gateway can collect data from various sensors and devices and process it locally in real time, which not only reduces the delay of data transmission, but also improves the response speed. Through data screening, compression and optimization, the edge gateway can reduce the bandwidth occupancy of network transmission and improve network performance and efficiency.
[0004] In the application process of the smart IoT gateway based on edge computing (hereinafter referred to as the gateway), it not only needs to connect the device side, user side and cloud side for data processing, transmission and execution, but also needs to deal with security attacks to ensure the stability and security of data transmission. However, when the gateway is in a high-traffic period or the amount of data is too large, its calculation may exceed the load limit, which directly leads to service interruption, data loss or error, and reduced security. Therefore, how to effectively protect and process data when the gateway's calculation exceeds its load limit, and how to alleviate the calculation burden to ensure the security of data transmission, is one of the important issues that need to be solved urgently. Summary of the invention
[0005] In view of the above-mentioned prior art, the technical problem to be solved by the present invention is how to effectively protect and process data when the calculation of the gateway exceeds its load limit, and to alleviate the calculation burden to ensure the security of data transmission.
[0006] In order to solve the above problems, the present invention provides an intelligent Internet of Things gateway based on edge computing, including a gateway body, an operation monitoring and protection system mounted in the gateway body, and a cloud server connected to the operation monitoring and protection system. An emergency slot is provided at the right end of the gateway body, and an emergency memory is plugged into the emergency slot;
[0007] The operation monitoring and protection system includes a dual-channel processing unit, and the input end of the dual-channel processing unit is connected to a device data acquisition unit, a user data acquisition unit and a cloud feedback data receiving unit;
[0008] The output end of the dual-channel processing unit is connected to a data display unit, an instruction execution unit, a cloud output transmission unit, a safety protection control unit, an operation threshold monitoring unit and an emergency storage unit;
[0009] The output end of the safety protection control unit is connected to the abnormal alarm unit, the output end of the operation threshold monitoring unit is respectively connected to the safety protection control unit and the emergency storage unit, and the output end of the emergency storage unit is also connected to the dual-channel processing unit;
[0010] The device data collection unit and the user data collection unit are respectively connected to the device end and the user end through the communication interface set on the gateway body, and the input end of the cloud feedback data receiving unit is connected to the cloud server signal;
[0011] The output end of the data display unit is connected to the display device signal of the user end through the communication interface set on the gateway body, the output end of the instruction execution unit is connected to the device end signal through the communication interface set on the gateway body, and the output end of the cloud output transmission unit is connected to the cloud server signal;
[0012] The input end of the dual-channel processing unit is also connected to a storage and retrieval unit, and the input end of the storage and retrieval unit is respectively connected to the operation threshold monitoring unit and the emergency memory signal;
[0013] The output end of the emergency storage unit is connected to the emergency storage signal, the output end of the abnormal alarm unit is respectively connected to the alarm set on the gateway body and the cloud server signal, and the output end of the abnormal alarm unit is also connected to the display device signal of the user end through the communication interface set on the gateway body.
[0014] In the above-mentioned intelligent IoT gateway based on edge computing, when the computing exceeds the limit, some non-immediate response data can be temporarily stored in an emergency manner in a timely manner. While ensuring the data processing efficiency of the gateway body and promoting the normal operation of the gateway body, the data in the emergency storage can be extracted and processed after the subsequent gateway body operation space is released, avoiding data loss or erroneous transmission, and effectively ensuring the security of the gateway body's data processing and communication transmission.
[0015] As a supplement to the present application, the dual-channel processing unit includes a data communication processing module and a safety verification processing module, and the output ends of the data communication processing module and the safety verification processing module are both connected to the operation threshold monitoring unit signal;
[0016] The input end of the safety verification processing module is respectively connected to the device data acquisition unit, the user data acquisition unit, the emergency storage unit and the cloud feedback data receiving unit, and the output end of the safety verification processing module is connected to the safety communication module, the doubt verification module and the abnormal blocking module;
[0017] The input end of the data communication processing module is connected to the safety communication module signal, and the output end of the data communication processing module is respectively connected to the data display unit, the instruction execution unit and the cloud output transmission unit signal;
[0018] The output end of the doubtful verification module is respectively connected to the safety communication module and the abnormal blocking module signal, and the output end of the abnormal blocking module is connected to the safety protection control unit and the emergency storage unit signal.
[0019] As a supplement to the present application, the operation threshold monitoring unit includes an operation over-limit monitoring module, and the input end of the operation over-limit monitoring module is respectively connected to the data communication processing module and the safety verification processing module by signal;
[0020] The output end of the operation over-limit monitoring module is respectively connected with the safety protection control unit and the emergency storage unit signal.
[0021] As a further improvement of the present application, the operation threshold monitoring unit also includes a communication threshold monitoring module and a safety protection threshold monitoring module, the input end of the communication threshold monitoring module is connected to the data communication processing module signal, and the input end of the safety protection threshold monitoring module is connected to the safety verification processing module signal;
[0022] The dual-channel processing unit also includes a dual-channel coordination module, and the output end of the dual-channel coordination module is respectively connected to the data communication processing module and the security verification processing module by signal;
[0023] The output ends of the communication threshold monitoring module and the safety protection threshold monitoring module are connected to the operation conversion channel shunt unit, and the output end of the operation conversion channel shunt unit is connected to the dual-channel coordination module signal.
[0024] As a further improvement of the present application, the output end of the safety protection control unit is also connected to an emergency storage pop-up control unit, a blocking piece is fixedly connected to the right end of the emergency storage device, a pop-up reserved groove is provided at the right end of the emergency slot, and self-pop-up structures that cooperate with the blocking piece are provided on the upper and lower sides of the left inner wall of the pop-up reserved groove, and the output end of the emergency storage pop-up control unit is connected to the self-pop-up structure signal.
[0025] As a further improvement and supplement to the present application, the self-pop-up structure includes an elastic strip fixedly connected to the left inner wall of the pop-up reserved groove, a deformation cavity is opened in the elastic strip, electric heating plates are fixedly connected to the inner walls on both sides of the deformation cavity, a thermal deformation strip is fixedly connected between the left and right electric heating plates in the same deformation cavity, and the output end of the emergency storage pop-up control unit is connected to the electric heating plate signal.
[0026] As a further improvement of the present application, a linkage plate is fixedly connected to the right end of the elastic strip, the linkage plate is detachably connected to the blocking plate by bolts, and the front and rear ends of the linkage plate are in sliding cooperation with the pop-up reserved groove.
[0027] As a further improvement of the present application, the elastic strip is made of transparent elastic material, the deformation direction of the thermal deformation strip is parallel to the plugging direction of the emergency storage device and the emergency slot, and the inner wall of the elastic strip is coated with a thermochromic layer.
[0028] As another improvement of the present application, the output end of the security protection control unit is also connected to a communication interception unit, and the output end of the communication interception unit is respectively connected to the communication interface provided on the gateway body and the cloud server signal.
[0029] In summary, through the cooperation of the security protection control unit, the operation threshold monitoring unit, the emergency storage unit and the storage retrieval unit, on the one hand, it will not affect the normal operation of the gateway body, ensuring its effectiveness in data processing and communication transmission; on the other hand, it can also effectively monitor the operating space status during the operation of the gateway body. When the operation exceeds the limit, it can timely perform temporary emergency storage for some non-immediate response data, while ensuring the data processing efficiency of the gateway body and promoting the normal operation of the gateway body. After the subsequent gateway body operation space is released, the emergency stored data can be extracted and processed to avoid data loss or erroneous transmission, effectively ensuring the security of the gateway body for data processing and communication transmission, effectively promoting the performance applicability of the gateway body in the application process, and can also monitor the operating space status, promote the security protection effect of the gateway body, leave enough operating space for the security protection of the gateway body, and ensure the effectiveness of the security protection measures. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] Figure 1 This is a topological diagram of the operation monitoring and protection system and the gateway body in the first to third implementation modes of this application;
[0031] Figure 2 This is the operation logic diagram of the operation monitoring and protection system of the first to third implementation modes of this application;
[0032] Figure 3 This is an axonometric diagram of the gateway body of the first to third implementation modes of the present application;
[0033] Figure 4 This is a logic diagram of the cooperation between the dual-channel processing unit, the operation threshold monitoring unit and the safety protection control unit in the first embodiment of the present application;
[0034] Figure 5 A logic diagram of the cooperation between the dual-channel processing unit, the operation threshold monitoring unit and the safety protection control unit in the second embodiment of the present application;
[0035] Figure 6 This is an operation logic diagram of the operation threshold monitoring unit of the second embodiment of the present application;
[0036] Figure 7 A logic diagram of the coordinated operation of the dual-channel processing unit, the operation threshold monitoring unit and the safety protection control unit in the third implementation mode of the present application;
[0037] Figure 8 This is a front cross-sectional view of the gateway body when the emergency storage device of the third embodiment of the present application is not ejected;
[0038] Fig. 9 For the third implementation of this application Figure 8 A magnified view of the local section at center A;
[0039] Fig.10 This is a front cross-sectional view of the gateway body when the emergency storage is ejected according to the third embodiment of the present application;
[0040] Fig.11 For the third implementation of this application Fig.10 A magnified view of the local section at point B;
[0041] Fig.12 This is an axonometric diagram of the gateway body when the emergency storage is ejected according to the third embodiment of the present application;
[0042] Fig.13 This is a main view of the gateway body when the emergency storage is popped up in the third implementation mode of the present application;
[0043] Fig.14 This is an exploded diagram of the gateway body, emergency storage and self-pop-up structure of the third implementation mode of the present application.
[0044] Description of the numbers in the figure:
[0045] 1 gateway body, 11 emergency slot, 2 emergency storage, 21 blocking piece, 3 self-pop-up structure, 31 elastic strip, 32 deformation cavity, 33 electric heating sheet, 34 thermal deformation strip, 4 linkage plate. DETAILED DESCRIPTION
[0046] The following is a detailed description of three implementation methods of the present application in conjunction with the accompanying drawings.
[0047] The first implementation method:
[0048] Figure 1 - Figure 4 The figure shows an intelligent IoT gateway based on edge computing, which includes a gateway body 1, an operation monitoring and protection system mounted in the gateway body 1, and a cloud server connected to the operation monitoring and protection system. An emergency slot 11 is provided at the right end of the gateway body 1, and an emergency memory 2 is inserted into the emergency slot 11;
[0049] The operation monitoring and protection system includes a dual-channel processing unit, and the input end of the dual-channel processing unit is connected to a device data acquisition unit, a user data acquisition unit and a cloud feedback data receiving unit;
[0050] The output end of the dual-channel processing unit is connected to a data display unit, an instruction execution unit, a cloud output transmission unit, a safety protection control unit, an operation threshold monitoring unit and an emergency storage unit;
[0051] The output end of the safety protection control unit is connected to the abnormal alarm unit, the output end of the operation threshold monitoring unit is respectively connected to the safety protection control unit and the emergency storage unit, and the output end of the emergency storage unit is also connected to the dual-channel processing unit;
[0052] The device data collection unit and the user data collection unit are respectively connected to the device end and the user end through the communication interface set on the gateway body 1, and the input end of the cloud feedback data receiving unit is connected to the cloud server signal;
[0053] The output end of the data display unit is connected to the display device signal of the user end through the communication interface set on the gateway body 1, the output end of the instruction execution unit is connected to the device end signal through the communication interface set on the gateway body 1, and the output end of the cloud output transmission unit is connected to the cloud server signal;
[0054] The input end of the dual-channel processing unit is also connected to a storage and retrieval unit, and the input end of the storage and retrieval unit is respectively connected to the operation threshold monitoring unit and the emergency memory 2 signal;
[0055] The output end of the emergency storage unit is connected to the emergency memory 2 by signal, and the output end of the abnormal alarm unit is respectively connected to the alarm device and the cloud server signal provided on the gateway body 1. The output end of the abnormal alarm unit is also connected to the display device signal of the user end through the communication interface provided on the gateway body 1. Through the cooperation of the security protection control unit, the operation threshold monitoring unit, the emergency storage unit and the storage retrieval unit, on the one hand, it will not affect the normal operation of the gateway body 1, and ensure its effectiveness in data processing and communication transmission. On the other hand, it can also effectively monitor the operation space state during the operation of the gateway body 1. When the operation exceeds the limit, it can timely perform temporary emergency storage on some non-immediate response data. While ensuring the data processing efficiency of the gateway body 1 and promoting the normal operation of the gateway body 1, it can also extract and process the emergency stored data after the subsequent gateway body 1 operation space is released to avoid data loss or erroneous transmission, effectively ensure the security of the gateway body 1 for data processing and communication transmission, effectively promote the performance applicability of the gateway body 1 in the application process, and can also achieve the monitoring effect on the operation space state, promote the security protection effect of the gateway body 1, leave enough operation space for the security protection of the gateway body 1, and ensure the effectiveness of the security protection measures.
[0056] Figure 1 , Figure 2 and Figure 4 The dual-channel processing unit is shown to include a data communication processing module and a safety verification processing module, and the output ends of the data communication processing module and the safety verification processing module are both connected to the operation threshold monitoring unit signal;
[0057] The input end of the safety verification processing module is respectively connected to the device data acquisition unit, the user data acquisition unit, the emergency storage unit and the cloud feedback data receiving unit, and the output end of the safety verification processing module is connected to the safety communication module, the doubt verification module and the abnormal blocking module;
[0058] The input end of the data communication processing module is connected to the safety communication module signal, and the output end of the data communication processing module is respectively connected to the data display unit, the instruction execution unit and the cloud output transmission unit signal;
[0059] The output end of the doubtful verification module is respectively connected to the security communication module and the abnormal blocking module signal, and the output end of the abnormal blocking module is connected to the security protection control unit and the emergency storage unit signal. Through the cooperation of the dual-channel processing ends of the data communication processing module and the security verification processing module, it can effectively realize independent branch processing in the data communication and security protection processes. On the one hand, it effectively promotes the security of the gateway body 1 in the data processing and communication process, avoids the data from being maliciously tampered with or stolen, and can also ensure the security of the data, and avoid the continued transmission and dissemination of suspicious data. On the other hand, it can effectively improve the efficiency of the gateway body 1 in processing and calculating the received data and instructions, improve the effectiveness of data communication transmission, and thereby improve the reaction speed and response speed of the gateway body 1, and improve the performance of the gateway body 1.
[0060] Figure 1 , Figure 2 and Figure 4 It is shown that the operation threshold monitoring unit includes an operation over-limit monitoring module, and the input end of the operation over-limit monitoring module is respectively connected to the data communication processing module and the safety verification processing module;
[0061] The output end of the operation over-limit monitoring module is respectively connected to the signal of the security protection control unit and the emergency storage unit. The setting of the operation over-limit monitoring module, on the one hand, can effectively use the emergency storage unit to perform temporary emergency storage of some non-immediate response data when the data communication processing module and the security verification processing module have operation over-limit, release the operating space of the data communication processing module and the security verification processing module, and ensure the stability and effectiveness of their data processing and communication transmission; on the other hand, when the security verification processing module receives a security attack, the security protection control unit can be used to timely perform security protection and abnormal reminders on the data, thereby effectively ensuring the security of the gateway body 1 during the application process, and can also cooperate with the emergency storage unit to realize emergency storage of data to prevent it from being stolen or easily tampered with, thereby ensuring the security of the data.
[0062] Figure 1 - Figure 4It is shown that during the operation of the gateway body 1, the security verification processing module in the dual-channel processing unit receives the data from the user end and the device end through the cooperation of the user data acquisition unit, the device data acquisition unit and the communication interface, and also receives the feedback data in the cloud server through the cloud feedback data receiving unit. The security verification processing module first verifies and judges the received data, transmits the verified safe data to the data communication processing module through the security communication module, transmits the doubtful data to the doubtful verification module for re-verification, blocks and shields the abnormal data, and also transmits the abnormal data signal to the abnormal blocking module, wherein the doubtful verification module re-verifies the doubtful data, transmits the judged safe data to the data communication processing module through the security communication module, blocks and shields the abnormal data, and also transmits the abnormal data signal to the abnormal blocking module;
[0063] After receiving the security data, the data communication processing module processes the data, and then transmits them to the user end for display and the device end for execution through the data display unit, the instruction execution unit and the data interface, and transmits the data to the cloud server for operation and storage through the cloud output transmission unit; after the abnormal blocking module receives the signal of abnormal data, it first transmits the abnormal protection instruction to the security protection control unit, so that the security protection control unit transmits the abnormal data signal to the abnormal alarm unit, and the abnormal alarm unit activates the alarm to remind the on-site personnel to check the gateway body 1, and at the same time transmits the abnormal data to the display devices of the cloud server and the user end, respectively, to remind the user or warn the attacker, and also performs auxiliary processing and maintenance transmission of the attack data through the cloud server;
[0064] During the operation of the gateway body 1, the operation overlimit monitoring module in the operation threshold monitoring unit collects and judges the operation space status of the data communication processing module and the security verification processing module. When it is judged that the operation space is within the limited range, no action is taken. When it is judged that the operation space exceeds the limit, the data is transmitted to the emergency storage unit. After the emergency storage unit is started, an emergency storage start is directly issued to the security verification processing module, so that the security verification processing module directly transmits part of the data to the abnormal blocking module, so that the abnormal blocking module stores part of the data in the emergency storage 2 through the emergency storage unit, releases the operation space of the security verification processing module and the data communication processing module, ensures the operation efficiency of the data communication processing module, and ensures the safety protection function of the security verification processing module;
[0065] After the subsequent operation over-limit monitoring module determines that the operating space of the data communication processing module and the safety verification processing module has recovered to within the specified range, the instruction is transmitted to the emergency memory 2 through the emergency storage unit, so that the emergency memory 2 transmits the stored data to the safety verification processing module through the storage retrieval unit, and performs subsequent processing on the emergency stored data to ensure the effectiveness of data processing and communication transmission, avoid data loss or errors, and ensure the safety of the operation of the gateway body 1 while ensuring the stability of the operation of the gateway body 1.
[0066] Second implementation method:
[0067] Figure 1 - Figure 3 , Figure 5 and Figure 6 The intelligent Internet of Things gateway based on edge computing is shown. Based on the further improvement of the first embodiment, the functionality of the gateway body 1 is increased, so that it has multiple optional specifications of functions, suitable for different market demands, and promotes the economic applicability of the gateway body 1. The operation threshold monitoring unit also includes a communication threshold monitoring module and a safety protection threshold monitoring module. The input end of the communication threshold monitoring module is connected to the data communication processing module signal, and the input end of the safety protection threshold monitoring module is connected to the safety verification processing module signal.
[0068] The dual-channel processing unit also includes a dual-channel coordination module, and the output end of the dual-channel coordination module is respectively connected to the data communication processing module and the security verification processing module by signal;
[0069] The output ends of the communication threshold monitoring module and the security protection threshold monitoring module are connected to the operation conversion channel shunt unit, and the output end of the operation conversion channel shunt unit is connected to the dual-channel coordination module signal. Through the cooperation of the communication threshold monitoring module, the security protection threshold monitoring module, the operation conversion channel shunt unit and the dual-channel coordination module, while independently monitoring the operating space status of the data communication processing module and the security verification processing module, it is also possible to dynamically adjust and adapt the operating space between the data communication processing module and the security verification processing module according to their operating space status, effectively promoting the intelligence of the gateway body 1. While promoting its data processing efficiency, it can also effectively improve the ability of the gateway body 1 to resist security attacks, and fully ensure the safety of the operation of the gateway body 1.
[0070] Figure 1 - Figure 4It is shown that the output end of the security protection control unit is also connected to a communication interception unit, and the output end of the communication interception unit is respectively connected to the communication interface set in the gateway body 1 and the cloud server signal. The setting of the communication connection unit further intercepts the abnormal data in the gateway body 1. When the gateway body 1 receives a security attack, it can effectively avoid the spread of malicious data and the pollution of network data, and effectively improve the protection effect of the gateway body 1.
[0071] Figure 1 - Figure 3 , Figure 5 and Figure 6 It is shown that during the operation of the gateway body 1, the safety protection threshold monitoring module in the operation threshold monitoring unit collects the operation space data of the safety verification processing module in real time, and the communication threshold monitoring module collects the operation space data in the data communication processing module in real time, and then judges each operation space threshold. When it is judged that the operation space of the data communication processing module and the safety verification processing module is within the limited range, no action is taken. When it is judged that one of the data communication processing module and the safety verification processing module exceeds the limit, the operation limit data is transmitted to the operation conversion channel diversion unit, so that the operation conversion diversion channel dynamically allocates the operation space of the dual channels, and then the diversion data is transmitted to the dual-channel coordination module in the dual-channel processing unit, so that the dual-channel coordination module reproduces and coordinates the operation space of the data communication processing module and the safety verification processing module, effectively ensuring the operation speed of data communication processing, ensuring the effectiveness of data processing, and also ensuring the effectiveness and timeliness of safety protection. By increasing the dynamic space regulation method, the functionality of the gateway body 1 is further promoted, and the dynamic applicability of the operation data is realized.
[0072] Moreover, when the security verification processing module receives a security attack and its security protection operating space is gradually dynamically adjusted to a large range, when the operation overlimit monitoring module determines that the operations of the data communication processing module and the security verification processing module are both facing overlimits, it will transmit the data to the emergency storage unit while also transmitting the data to the security protection regulation unit. The emergency storage unit partially stores the data and releases the operating space, thereby increasing the computing efficiency of the gateway body 1 during the security protection process and improving the security protection effect. After the security protection regulation unit outputs the abnormal data through the abnormal alarm unit, it reminds the maintenance personnel to manually participate and check, and also sends a protection regulation instruction to the communication interception unit, so that the communication interception unit intercepts the communication of the gateway body 1 and prevents continuous data transmission between the user end, the device end and the cloud server. On the one hand, it can effectively reserve sufficient security protection operating space for the gateway body 1, and on the other hand, it can effectively avoid the propagation and spread of malicious data, thereby ensuring the security of the gateway body 1 application.
[0073] The third implementation method:
[0074] Figure 1 - Figure 3 and Figure 7 - Fig.14 The invention shows an intelligent Internet of Things gateway based on edge computing, which is based on the further improvement of the first embodiment or the second embodiment, further increases the functionality of the gateway body 1, promotes the diversification of its specifications, promotes the intelligence of the gateway body 1, and promotes the economic benefits of the application of the gateway body 1 in the market. The output end of the security protection control unit is also connected to an emergency storage pop-up control unit. The right end of the emergency storage 2 is fixedly connected to a blocking piece 21. The right end of the emergency slot 11 is provided with a pop-up reserved groove. The upper and lower sides of the left inner wall of the pop-up reserved groove are provided with a self-pop-up structure 3 that cooperates with the blocking piece 21. The output end of the emergency storage pop-up control unit is connected to the self-pop-up structure 3 signal. The cooperation of the emergency storage pop-up control unit and the self-pop-up structure 3 can further protect the operation safety of the gateway body 1. When a security attack occurs, and the security attack intensity is large so that most of the operation space is used in the security protection process, the received data can be effectively stored in an emergency, and the emergency storage 2 can be automatically popped out to avoid the security attack data from tampering with and stealing the data stored in the emergency storage 2, effectively ensuring the security of the data in the emergency storage 2, and fully improving the security protection effect of the gateway body 1.
[0075] Figure 7 - Fig.14 The self-pop-up structure 3 is shown to include an elastic strip 31 fixedly connected to the left inner wall of the pop-up reserved groove, a deformation cavity 32 is opened in the elastic strip 31, and electric heating plates 33 are fixedly connected to the inner walls on both sides of the deformation cavity 32, and a thermal deformation strip 34 is fixedly connected between the left and right electric heating plates 33 located in the same deformation cavity 32, and the output end of the emergency storage pop-up control unit is connected to the electric heating plate 33 signal. Under the action of the electric heating plate 33, the thermal deformation strip 34 produces thermal elongation deformation, which can effectively drive the emergency storage 2 to produce autonomous pop-up, and physically disconnect the data inside it to protect it, fully ensuring the safety of the data stored inside it, and after the safety protection is completed, the thermal deformation strip 34 can restore the deformation after natural cooling, drive the emergency storage 2 to be reinserted into the gateway body 1, ensure the subsequent data processing, and promote the stability of the gateway body 1.
[0076] Figure 3 and Figure 7 - Fig.14It is shown that the right end of the elastic strip 31 is fixedly connected with a linkage plate 4, which is detachably connected to the blocking plate 21 by bolts, and the front and rear ends of the linkage plate 4 are in sliding cooperation with the pop-up reserved groove, which is convenient for the disassembly, assembly and maintenance of the emergency storage 2, and can also realize the linkage effect of the emergency storage 2, with the effect of automatic pop-up protection and subsequent automatic resetting and plugging. The sliding cooperation between the linkage plate 4 and the pop-up reserved groove can also have the function of guiding and limiting, thereby ensuring the smoothness of pop-up and re-plugging, and ensuring safety and effectiveness.
[0077] Figure 3 and Figure 7 - Fig.14 It is shown that the elastic strip 31 is made of transparent elastic material, the deformation direction of the heat deformation strip 34 is parallel to the plug-in direction of the emergency storage 2 and the emergency slot 11, and the inner wall of the elastic strip 31 is coated with a temperature-sensitive color-changing layer. When the emergency storage 2 is ejected, the elastic strip 31 can produce a color-changing effect through heat, which intuitively displays the abnormality to the maintenance personnel, increases the effect of the abnormal phenomenon, and promotes the maintenance personnel to effectively identify the abnormal state, thereby ensuring the operation safety and stability of the gateway body 1.
[0078] Figure 1 - Figure 3 and Figure 7 - Fig.14It is shown that in the process of the gateway body 1 being continuously attacked by security, after the communication interception unit is activated, the operation over-limit monitoring module still continuously monitors that the operation space of the security verification processing module at this time is over-limit, and the operation over-limit data is continuously transmitted to the security protection regulation unit, so that the security protection regulation unit sends a regulation signal to the emergency storage pop-up regulation unit, so that the emergency storage pop-up regulation unit connects the current of the electric heater 33, and the heat generated by the electric heater 33 continuously acts on the thermal deformation strip 34, so that the thermal deformation strip 34 is elongated and deformed, and the linkage of the linkage plate 4 and the blocking piece 21 pushes the emergency storage 2 to move to the right in the emergency slot 11, and the emergency slot 11 is automatically popped out, and the data stored in the emergency storage 2 is physically isolated and protected, effectively ensuring the security of the data in the emergency storage 2, and the temperature will also cause the elastic strip 31 to change color, and the maintenance personnel are reminded of the abnormal gateway body 1 through the color change imaging method, thereby reducing the difficulty of maintenance; in the subsequent installation After the full verification processing module completes the protection against security attacks, the operation over-limit monitoring module detects that the operating space of the security verification processing module is gradually released. After it is restored to a limited range, the signal is transmitted to the security protection control unit. On the one hand, the security protection control unit controls the communication interception unit to close and restores the communication signal of the gateway body 1, so that it can establish contact with the user end, the device end and the cloud server. It also controls the emergency storage pop-up control unit to close and cut off the current of the electric heating plate 33. After the subsequent temperature gradually recovers, the thermal deformation strip 34 resumes its deformation, and through the linkage of the linkage plate 4 and the blocking plate 21, the emergency storage 2 is driven to be reinserted into the emergency slot 11. At this time, the operation over-limit monitoring module will also transmit the restored data to the emergency storage 2 through the emergency storage unit, so that the emergency storage 2 releases the previously stored data to the security verification processing module through the storage retrieval unit, processes and transmits the data, and ensures the integrity of the data during the operation of the gateway body 1.
[0079] In view of current practical needs, the above-mentioned implementation mode adopted in this application is not limited to the scope of protection. Various changes made within the knowledge scope of technical personnel in this field without departing from the concept of this application still fall within the scope of protection of the present invention.
Claims
1. An intelligent IoT gateway based on edge computing, characterized in that: The invention comprises a gateway body (1), an operation monitoring and protection system mounted in the gateway body (1), and a cloud server connected to the operation monitoring and protection system. An emergency slot (11) is provided at the right end of the gateway body (1), and an emergency memory (2) is inserted into the emergency slot (11); The operation monitoring and protection system includes a dual-channel processing unit, and the input end of the dual-channel processing unit is connected to a device data acquisition unit, a user data acquisition unit and a cloud feedback data receiving unit; The output end of the dual-channel processing unit is connected to a data display unit, an instruction execution unit, a cloud output transmission unit, a security protection control unit, an operation threshold monitoring unit and an emergency storage unit; The output end of the safety protection control unit is connected to the abnormal alarm unit, the output end of the operation threshold monitoring unit is respectively connected to the safety protection control unit and the emergency storage unit, and the output end of the emergency storage unit is also connected to the dual-channel processing unit; The device data collection unit and the user data collection unit are respectively connected to the device end and the user end through a communication interface provided on the gateway body (1), and the input end of the cloud feedback data receiving unit is connected to the cloud server by signal; The output end of the data display unit is connected to the display device signal of the user end through the communication interface provided on the gateway body (1), the output end of the instruction execution unit is connected to the device end signal through the communication interface provided on the gateway body (1), and the output end of the cloud output transmission unit is connected to the cloud server signal; The input end of the dual-channel processing unit is also connected to a storage retrieval unit, and the input end of the storage retrieval unit is respectively connected to the operation threshold monitoring unit and the emergency memory (2) by signal; The output end of the emergency storage unit is signal-connected to the emergency storage (2), the output end of the abnormal alarm unit is signal-connected to an alarm device and a cloud server respectively arranged on the gateway body (1), and the output end of the abnormal alarm unit is also signal-connected to a display device at the user end via a communication interface arranged on the gateway body (1).
2. According to claim 1, the smart Internet of Things gateway based on edge computing is characterized in that: The dual-channel processing unit includes a data communication processing module and a safety verification processing module, and the output ends of the data communication processing module and the safety verification processing module are both connected to the operation threshold monitoring unit signal; The input end of the security verification processing module is respectively connected to the device data acquisition unit, the user data acquisition unit, the emergency storage unit and the cloud feedback data receiving unit, and the output end of the security verification processing module is connected to the security communication module, the doubt verification module and the abnormal blocking module; The input end of the data communication processing module is connected to the security communication module by signal, and the output end of the data communication processing module is connected to the data display unit, the instruction execution unit and the cloud output transmission unit by signal respectively; The output end of the doubtful verification module is respectively connected to the safety communication module and the abnormal blocking module by signal, and the output end of the abnormal blocking module is connected to the safety protection control unit and the emergency storage unit by signal.
3. According to claim 2, the smart Internet of Things gateway based on edge computing is characterized in that: The operation threshold monitoring unit includes an operation over-limit monitoring module, and the input end of the operation over-limit monitoring module is respectively connected to the data communication processing module and the safety verification processing module by signal; The output end of the operation over-limit monitoring module is respectively connected to the safety protection control unit and the emergency storage unit by signal.
4. According to claim 3, the smart Internet of Things gateway based on edge computing is characterized in that: The operation threshold monitoring unit also includes a communication threshold monitoring module and a safety protection threshold monitoring module, the input end of the communication threshold monitoring module is connected to the data communication processing module signal, and the input end of the safety protection threshold monitoring module is connected to the safety verification processing module signal; The dual-channel processing unit also includes a dual-channel coordination module, and the output end of the dual-channel coordination module is respectively connected to the data communication processing module and the security verification processing module by signal; The output ends of the communication threshold monitoring module and the safety protection threshold monitoring module are connected to an operation conversion channel shunt unit, and the output end of the operation conversion channel shunt unit is connected to the dual-channel coordination module signal.
5. The smart IoT gateway based on edge computing according to claim 1, characterized in that: The output end of the safety protection control unit is also connected to an emergency storage pop-up control unit, the right end of the emergency storage (2) is fixedly connected to a blocking piece (21), the right end of the emergency slot (11) is provided with a pop-up reserved groove, the upper and lower sides of the left inner wall of the pop-up reserved groove are provided with self-pop-up structures (3) that cooperate with the blocking piece (21), and the output end of the emergency storage pop-up control unit is connected to the self-pop-up structure (3) by signal.
6. The smart IoT gateway based on edge computing according to claim 5, characterized in that: The self-ejecting structure (3) comprises an elastic strip (31) fixedly connected to the left inner wall of the ejection reserved groove, a deformation cavity (32) is provided in the elastic strip (31), electric heating plates (33) are fixedly connected to the inner walls on the left and right sides of the deformation cavity (32), a thermal deformation strip (34) is fixedly connected between the two left and right electric heating plates (33) located in the same deformation cavity (32), and the output end of the emergency storage ejection control unit is connected to the electric heating plate (33) by signal.
7. The edge computing-based smart IoT gateway according to claim 6, characterized in that: The right end of the elastic strip (31) is fixedly connected to a linkage plate (4), the linkage plate (4) is detachably connected to the blocking plate (21) via bolts, and the front and rear ends of the linkage plate (4) are in sliding cooperation with the ejection reserved groove.
8. The edge computing-based smart IoT gateway according to claim 6, characterized in that: The elastic strip (31) is made of a transparent elastic material, the deformation direction of the thermal deformation strip (34) is parallel to the plugging direction of the emergency storage device (2) and the emergency slot (11), and the inner wall of the elastic strip (31) is coated with a temperature-sensitive color-changing layer.
9. The smart IoT gateway based on edge computing according to claim 1, characterized in that: The output end of the security protection control unit is also connected to a communication interception unit, and the output end of the communication interception unit is respectively connected to a communication interface arranged on the gateway body (1) and a cloud server signal.
Citation Information
Patent Citations
Network security emergency linkage device and system
CN115987632A
Substation remote online patrol system with auxiliary monitoring function
CN116436159A
Power edge gateway equipment
CN216959901U
Temporary storage buffer device
JP2017158004A