Safety operation and maintenance method and system

Abstract

The invention provides a safety operation and maintenance method and system, and relates to the technical field of operation and maintenance operation, and the operation and maintenance method comprises the following steps: creating a maintenance task; after receiving the maintenance task, the terminal equipment sends a maintenance request to the operation and maintenance gateway; the operation and maintenance gateway verifies whether the maintenance request is passed or not, and if the verification is passed, the authority of accessing the operation and maintenance gateway is opened for the terminal equipment; otherwise, blocking; after the terminal equipment accesses the operation and maintenance gateway, the maintenance task is sent to the operation and maintenance gateway; the operation and maintenance gateway executes the following steps: extracting a maintenance instruction from the maintenance task, and evaluating the risk of the maintenance instruction acting on the operation and maintenance object to obtain a maintenance instruction evaluation value; judging whether the maintenance instruction evaluation value belongs to an evaluation threshold interval or not; if so, opening the authority of accessing the operation and maintenance object for the operation and maintenance gateway; after the operation and maintenance gateway accesses the operation and maintenance object, a corresponding maintenance instruction is sent to the operation and maintenance object for maintenance; and if not, blocking is carried out. And the external connection risk and the occurrence probability of malicious code infection are reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of operation and maintenance, and in particular to a safe operation and maintenance method and system. Background Art

[0002] In the operation and maintenance work, there are cases where operation and maintenance personnel use their own laptops and USB flash drives to directly access the monitoring system, which is prone to security risks such as illegal external connections, misoperation, malicious code, and network attacks. The State Grid Safety Supervision Department has repeatedly reported security incidents such as monitoring system infection with malicious code and illegal external connections; external connection risks, illegal operations, and malicious code infection problems have been repeatedly banned. Summary of the invention

[0003] The purpose of the present invention is to provide a safe operation and maintenance method and system, and the technical problem to be solved is how to reduce the risk of external connection and the probability of infection with malicious code in operation and maintenance work.

[0004] The present invention is achieved through the following technical solutions:

[0005] A first aspect provides a secure operation and maintenance method, comprising the following steps:

[0006] S100, creating maintenance tasks for operation and maintenance objects through the master control management platform;

[0007] S200, after receiving the maintenance task, the terminal device sends a maintenance request to the operation and maintenance gateway; the operation and maintenance gateway verifies whether the maintenance request is passed. If the verification is passed, the branch management platform enables the terminal device to access the operation and maintenance gateway; otherwise, the terminal device is blocked from accessing the operation and maintenance gateway;

[0008] S300: After the terminal device is connected to the operation and maintenance gateway, the maintenance task is sent to the operation and maintenance gateway;

[0009] The above operation and maintenance gateway performs the following steps:

[0010] S400, extracting various maintenance instructions from the above maintenance tasks, evaluating the risks of various maintenance instructions acting on the operation and maintenance objects, and obtaining maintenance instruction evaluation values;

[0011] S500, calling the evaluation threshold interval to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0012] If the evaluation value of the maintenance instruction belongs to the evaluation threshold range, the branch management platform will open the permission for the operation and maintenance gateway to access the operation and maintenance object; after the operation and maintenance gateway accesses the operation and maintenance object, the corresponding maintenance instruction will be sent to the operation and maintenance object for maintenance;

[0013] If the evaluation value of the above maintenance instruction does not fall within the evaluation threshold range, the operation and maintenance gateway is blocked from accessing the operation and maintenance object.

[0014] The maintenance tasks are created and managed centrally through the above-mentioned master control management platform, which realizes the unified planning and monitoring of operation and maintenance work, helps to reduce the management loopholes caused by decentralized operations, and ensures that all operation and maintenance activities are carried out within a controllable range; when the terminal device requests to access the operation and maintenance gateway, the verification of the operation and maintenance gateway and the permission opening of the branch management platform realize strict control of access rights. Only verified legal devices can access the operation and maintenance network, which effectively prevents the access of illegal devices and reduces the risk of external connection; before the maintenance instruction is executed, the operation and maintenance gateway will conduct a risk assessment on each maintenance instruction to assess the risks it may cause to the operation and maintenance object. The pre-risk assessment mechanism helps to identify potential security threats in advance and avoid executing instructions that may cause security problems; by comparing the evaluation threshold interval with the maintenance instruction evaluation value, it is ensured that only maintenance instructions with evaluation values ​​within an acceptable range are allowed to be executed. This threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of infection with malicious code due to improper execution of instructions. During the execution of maintenance instructions, the operation and maintenance gateway is used as an intermediary to achieve isolation between terminal devices and operation and maintenance objects. This isolation mechanism effectively prevents potential malicious code on terminal devices from directly infecting operation and maintenance objects, improving the overall security of the system. When the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform will block the operation and maintenance gateway from accessing the operation and maintenance object. This blocking mechanism further enhances the system's protection capabilities and prevents potential high-risk operations from causing damage to the operation and maintenance object. In addition, since maintenance tasks are created and managed through the master control management platform, and the execution of each maintenance instruction is subject to risk assessment and authority control, it can be easily audited and traced, which helps to quickly locate the source of the problem when a security incident occurs and take corresponding measures to deal with it.

[0015] Furthermore, in S200, the specific steps of the operation and maintenance gateway verifying whether the maintenance request is passed include:

[0016] S210. The operation and maintenance gateway is configured with license data, the license data including a licensed user identity information set, a licensed terminal device information set, a designated access port set on the licensed terminal device for connecting to the operation and maintenance gateway, a designated access port set on the operation and maintenance gateway for connecting to the licensed terminal device, and a licensed transmission protocol set;

[0017] S220, obtaining the user identity information, terminal device information, the access port on the terminal device connected to the operation and maintenance gateway, the access port on the operation and maintenance gateway connected to the terminal device, and the transmission protocol in the above maintenance request;

[0018] S230, determining whether the terminal device information belongs to a permitted terminal device information set;

[0019] S240. If yes, call the licensed terminal device corresponding to the terminal device to obtain a first licensed terminal device; call the designated access port set of the first licensed terminal device for connecting to the operation and maintenance gateway to obtain a first designated access port set; call the designated access port set of the operation and maintenance gateway for connecting to the first licensed terminal device to obtain a second designated access port set;

[0020] S250, determining whether the user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port on the terminal device connected to the operation and maintenance gateway belongs to the first designated access port set, and whether the access port on the operation and maintenance gateway connected to the terminal device belongs to the second designated access port set;

[0021] S260: If the above user identity information, transmission protocol, access port on the terminal device connected to the operation and maintenance gateway, and access port on the operation and maintenance gateway connected to the terminal device are all permitted data, the maintenance request verification is passed;

[0022] S270. If any of the above-mentioned terminal device information, user identity information, transmission protocol, access port on the terminal device connected to the operation and maintenance gateway, and access port on the operation and maintenance gateway connected to the terminal device does not belong to the permitted data, the maintenance request verification fails.

[0023] When receiving a maintenance request, the above-mentioned operation and maintenance gateway will comprehensively extract the user identity information, terminal device information, access port and transmission protocol in the request, and compare it with the pre-configured license data. Only requests that meet all licensing conditions can pass the verification, which greatly reduces the security risks caused by information mismatch; the verification process is divided into multiple levels. First, it verifies whether the terminal device information falls within the license scope. Only when the terminal device information verification is passed can the licensed terminal device corresponding to the above-mentioned terminal device be successfully called, and then the user identity information, transmission protocol and access port and other information are verified. The multi-level verification logic makes it possible for failure in any link to result in the request being rejected, ensuring that only fully compliant maintenance requests can connect the terminal device to the operation and maintenance gateway, effectively preventing the potential threat of external terminal devices to the operation and maintenance gateway, and initially reducing the external connection risk in the operation and maintenance work.

[0024] Furthermore, the specific steps of S400 include:

[0025] S410, obtaining the priority of each maintenance instruction in the above maintenance task, sorting each maintenance instruction according to the priority to obtain a first maintenance instruction sequence; sorting the above maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combining the above first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0026] S420, according to the third maintenance instruction sequence, sequentially obtain maintenance instructions, parse the content data when the maintenance instruction is created, and obtain a first content data set; parse the content data carried when the maintenance instruction is transmitted, and obtain a second content data set;

[0027] S430, configuring a first weight for the first content data set, and configuring a second weight for the second content data set;

[0028] S440, calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when it acts on an operation and maintenance object;

[0029] Matching the first content data in the first content data set with the content data in the content risk database respectively, if the match is successful, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0;

[0030] Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0;

[0031] S450, using the following formula to determine the maintenance instruction evaluation value;

[0032]

[0033] Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0034] Evaluate each maintenance instruction in the above maintenance task to ensure that potential risks are fully understood and evaluated before performing the maintenance operation. Considering that maintenance instructions not only affect the operation and maintenance object when executed, but also the order in which the maintenance instructions are executed; therefore, first sort the maintenance instructions to obtain a third maintenance instruction sequence, so that the maintenance instructions act on the operation and maintenance object in sequence; parse the content data when the maintenance instruction is created (i.e., the initial state), a maintenance instruction includes several content data, and the first content data set is composed of several content data; when the maintenance instruction is transmitted (i.e., the current state), the system carries the content data to obtain the second content data set. These two data sets represent the content data of the initial and current states of the maintenance instruction, respectively. By identifying the content data, the content data is determined. The method comprises the following steps: determining whether the content data is malicious code, thereby reducing the probability of the operation and maintenance object being infected with malicious code; configuring a first weight and a second weight for the first content data set and the second content data set, respectively, to reflect the importance or credibility of different data sets; obtaining a risk value when the corresponding content data acts on the operation and maintenance object by matching the first content data set and the second content data set with the content risk database, and calculating a maintenance instruction evaluation value using a given formula, which comprehensively considers the risk values ​​of the first content data set and the second content data set and their respective weights. Specifically, the maintenance instruction evaluation value is the sum of the weighted sum of the risk values ​​of the first content data set and the weighted sum of the risk values ​​of the second content data set.

[0035] Furthermore, the above-mentioned evaluation threshold interval includes a lower threshold interval and an upper threshold interval;

[0036] S510: If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform enables the operation and maintenance gateway to access the operation and maintenance object;

[0037] S520. If the above-mentioned maintenance instruction evaluation value belongs to the upper threshold range, the branch management platform sends an authorization request to the master control management platform. When the branch management platform receives the authorization response sent by the master control management platform, the branch management platform opens the permission for the operation and maintenance gateway to access the operation and maintenance object; when the branch management platform receives the rejection response sent by the master control management platform, the branch management platform blocks the operation and maintenance gateway from accessing the operation and maintenance object.

[0038] Introducing lower threshold intervals and upper threshold intervals in the operation and maintenance process as a further refinement of the evaluation threshold interval provides a more flexible and sophisticated processing method for maintenance instructions of different risk levels. When the evaluation value of a maintenance instruction belongs to the lower threshold interval, it means that the risk level of the maintenance instruction is very low and is within an acceptable safety range; therefore, the branch management platform will directly open the access rights of the operation and maintenance gateway to the operation and maintenance object without further authorization or approval process. This processing method improves the operation and maintenance efficiency, reduces unnecessary waiting time, and also ensures the smooth execution of low-risk maintenance instructions; however, when the evaluation value of the maintenance instruction belongs to the upper threshold interval, the situation becomes more complicated, indicating that the risk level of the maintenance instruction is high and may involve operations that are more sensitive or critical to the operation and maintenance object. Therefore, the branch management platform will not directly authorize, but will send an authorization request to the master control management platform to obtain higher-level approval and After confirmation, the branch management platform submits the detailed information and evaluation results of the maintenance instruction to the master control management platform, requesting the master control management platform for further evaluation and authorization. If the master control management platform believes that the risk of the maintenance instruction is controllable and is necessary for the operation and maintenance work of the operation and maintenance object, then it will send an authorization response to the branch management platform. After receiving the authorization response, the branch management platform will open the access permission of the operation and maintenance gateway to the operation and maintenance object and allow the execution of the maintenance instruction. If the master control management platform believes that the risk of the maintenance instruction is too high, or there are other reasons why it is not suitable for execution, then it will send a rejection response to the branch management platform. After receiving the rejection response, the branch management platform will block the operation and maintenance gateway from accessing the operation and maintenance object to prevent the execution of high-risk maintenance instructions.

[0039] Through the above secondary authorization method, the operation and maintenance system can ensure efficient operation and maintenance while also ensuring the safety and controllability of operation and maintenance operations. For low-risk operations, the system can respond and execute quickly; for high-risk or sensitive operations, the system can ensure the rationality and safety of the operation through a more stringent approval process, which not only improves the efficiency of operation and maintenance, but also reduces the risks in the operation and maintenance process.

[0040] A second aspect provides a security operation and maintenance system, which is used to implement the above-mentioned operation and maintenance method;

[0041] The operation and maintenance system includes:

[0042] A master control management platform, which is used to create maintenance tasks for operation and maintenance objects;

[0043] Terminal equipment, the terminal equipment is connected to the master control management platform for communication, and the terminal equipment is used to send a maintenance request to the operation and maintenance gateway after receiving the maintenance task;

[0044] The operation and maintenance gateway is connected to the terminal device and is used to verify whether the maintenance request is passed and output the verification result;

[0045] The branch management platform is connected to the master control management platform, the operation and maintenance gateway and the terminal devices. The branch management platform is used to receive the verification results, open the access rights of the terminal devices that have passed the verification to the operation and maintenance gateway, and block the terminal devices that have not passed the verification from accessing the operation and maintenance gateway;

[0046] When the above terminal devices are connected to the operation and maintenance gateway, the terminal devices send the maintenance tasks to the operation and maintenance gateway;

[0047] The above operation and maintenance gateway performs the following steps:

[0048] Extract various maintenance instructions from the above maintenance tasks, evaluate the risks of various maintenance instructions acting on the operation and maintenance objects, and obtain the maintenance instruction evaluation value;

[0049] Calling the evaluation threshold interval to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0050] If the evaluation value of the maintenance instruction belongs to the evaluation threshold range, the branch management platform will open the permission for the operation and maintenance gateway to access the operation and maintenance object; after the operation and maintenance gateway accesses the operation and maintenance object, the corresponding maintenance instruction will be sent to the operation and maintenance object for maintenance;

[0051] If the evaluation value of the above maintenance instruction does not fall within the evaluation threshold range, the operation and maintenance gateway is blocked from accessing the operation and maintenance object.

[0052] Furthermore, the operation and maintenance gateway is also used to configure license data, and the license data includes a license user identity information set, a license terminal device information set, a designated access port set on the license terminal device for connecting to the operation and maintenance gateway, a designated access port set on the operation and maintenance gateway for connecting to the license terminal device, and a license transmission protocol set;

[0053] Obtain the user identity information, terminal device information, the access port on the terminal device connected to the operation and maintenance gateway, the access port on the operation and maintenance gateway connected to the terminal device, and the transmission protocol in the above maintenance request;

[0054] Determining whether the terminal device information belongs to a permitted terminal device information set;

[0055] If yes, then call the licensed terminal device corresponding to the terminal device to obtain the first licensed terminal device; call the designated access port set of the first licensed terminal device for connecting to the operation and maintenance gateway to obtain the first designated access port set; call the designated access port set of the operation and maintenance gateway for connecting to the first licensed terminal device to obtain the second designated access port set;

[0056] Determine whether the user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port on the terminal device connected to the operation and maintenance gateway belongs to the first designated access port set, and whether the access port on the operation and maintenance gateway connected to the terminal device belongs to the second designated access port set;

[0057] If the above user identity information, transmission protocol, access port on the terminal device connected to the operation and maintenance gateway, and access port on the operation and maintenance gateway connected to the terminal device are all permitted data, the maintenance request verification is successful;

[0058] If any of the above-mentioned terminal device information, user identity information, transmission protocol, access port on the terminal device connected to the operation and maintenance gateway, and access port on the operation and maintenance gateway connected to the terminal device does not belong to the permitted data, the maintenance request verification will fail.

[0059] Further, the operation and maintenance gateway obtains the priority of each maintenance instruction in the maintenance task, sorts each maintenance instruction according to the priority, and obtains a first maintenance instruction sequence; sorts the maintenance instructions with the same priority according to the creation time, and obtains a second maintenance instruction sequence; combines the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0060] According to the third maintenance instruction sequence, maintenance instructions are sequentially acquired, content data when the maintenance instruction is created is parsed to obtain a first content data set; content data carried when the maintenance instruction is transmitted is parsed to obtain a second content data set;

[0061] configuring a first weight for the first content data set and configuring a second weight for the second content data set;

[0062] Calling a content risk database, the content risk database including content data and risk values ​​corresponding to each content data when acting on an operation and maintenance object;

[0063] Matching the first content data in the first content data set with the content data in the content risk database respectively, if the match is successful, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0;

[0064] Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0;

[0065] The maintenance order evaluation value is determined using the following formula;

[0066]

[0067] Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0068] Furthermore, the evaluation threshold interval in the above operation and maintenance gateway includes a lower threshold interval and an upper threshold interval;

[0069] If the above maintenance instruction evaluation value belongs to the lower threshold range, the branch management platform will open the access permission of the operation and maintenance object for the operation and maintenance gateway;

[0070] If the above-mentioned maintenance instruction evaluation value belongs to the upper threshold range, the branch management platform will send an authorization request to the master control management platform. When the branch management platform receives the authorization response sent by the master control management platform, the branch management platform will open the access permission of the operation and maintenance gateway to the operation and maintenance object; when the branch management platform receives the rejection response sent by the master control management platform, the branch management platform will block the operation and maintenance gateway from accessing the operation and maintenance object.

[0071] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0072] The maintenance tasks are created and managed centrally through the above-mentioned master control management platform, which realizes the unified planning and monitoring of operation and maintenance work, helps to reduce the management loopholes caused by decentralized operations, and ensures that all operation and maintenance activities are carried out within a controllable range; when the terminal device requests to access the operation and maintenance gateway, the verification of the operation and maintenance gateway and the permission opening of the branch management platform realize strict control of access rights. Only verified legal devices can access the operation and maintenance network, which effectively prevents the access of illegal devices and reduces the risk of external connection; before the maintenance instruction is executed, the operation and maintenance gateway will conduct a risk assessment on each maintenance instruction to assess the risks it may cause to the operation and maintenance object. The pre-risk assessment mechanism helps to identify potential security threats in advance and avoid executing instructions that may cause security problems; by comparing the evaluation threshold interval with the maintenance instruction evaluation value, it is ensured that only maintenance instructions with evaluation values ​​within an acceptable range are allowed to be executed. This threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of infection with malicious code due to improper execution of instructions. During the execution of maintenance instructions, the operation and maintenance gateway is used as an intermediary to achieve isolation between terminal devices and operation and maintenance objects. This isolation mechanism effectively prevents potential malicious code on terminal devices from directly infecting operation and maintenance objects, improving the overall security of the system. When the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform will block the operation and maintenance gateway from accessing the operation and maintenance object. This blocking mechanism further enhances the system's protection capabilities and prevents potential high-risk operations from causing damage to the operation and maintenance object. In addition, since maintenance tasks are created and managed through the master control management platform, and the execution of each maintenance instruction is subject to risk assessment and authority control, it can be easily audited and traced, which helps to quickly locate the source of the problem when a security incident occurs and take corresponding measures to deal with it. BRIEF DESCRIPTION OF THE DRAWINGS

[0073] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments. It should be understood that the following drawings only illustrate certain embodiments of the present invention and should not be regarded as limiting the scope. For those of ordinary skill in the art, other relevant drawings can be obtained based on these drawings without creative work. In the drawings:

[0074] Figure 1 This is the main flow chart of the operation and maintenance method;

[0075] Figure 2 This is the connection diagram of the operation and maintenance system.

[0076] Marks and corresponding parts names in the attached drawings:

[0077] 1. General control management platform; 2. Branch management platform; 3. Terminal equipment; 4. Operation and maintenance gateway; 5. Operation and maintenance objects. DETAILED DESCRIPTION

[0078] In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with embodiments and drawings. The exemplary embodiments of the present invention and their description are only used to explain the present invention and are not intended to limit the present invention.

[0079] Embodiment 1:

[0080] This embodiment 1 provides a safe operation and maintenance method, combined with Figure 1 , including the following steps:

[0081] S100, creating a maintenance task for the operation and maintenance object 5 through the master control management platform 1;

[0082] S200, after receiving the maintenance task, the terminal device 3 sends a maintenance request to the operation and maintenance gateway 4; the operation and maintenance gateway 4 verifies whether the maintenance request is passed. If the verification is passed, the branch management platform 2 enables the terminal device 3 to access the operation and maintenance gateway 4; otherwise, the terminal device 3 is blocked from accessing the operation and maintenance gateway 4;

[0083] S300, after the terminal device 3 is connected to the operation and maintenance gateway 4, the maintenance task is sent to the operation and maintenance gateway 4;

[0084] The operation and maintenance gateway 4 performs the following steps:

[0085] S400, extracting various maintenance instructions from the above maintenance tasks, evaluating the risks of various maintenance instructions acting on the operation and maintenance object 5, and obtaining the maintenance instruction evaluation value;

[0086] S500, calling the evaluation threshold interval to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0087] If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform 2 will open the access permission of the operation and maintenance gateway 4 to the operation and maintenance object 5; after the operation and maintenance gateway 4 accesses the operation and maintenance object 5, the corresponding maintenance instruction will be sent to the operation and maintenance object 5 for maintenance;

[0088] If the above maintenance instruction evaluation value does not belong to the evaluation threshold range, the operation and maintenance gateway 4 is blocked from accessing the operation and maintenance object 5 (that is, the operation and maintenance gateway 4 is not granted permission to access the operation and maintenance object 5).

[0089] Through the above-mentioned master control management platform 1, the maintenance tasks are centrally created and managed, which realizes the unified planning and monitoring of the operation and maintenance work, helps to reduce the management loopholes caused by decentralized operations, and ensures that all operation and maintenance activities are carried out within the controllable range; when the terminal device 3 requests to access the operation and maintenance gateway 4, the verification of the operation and maintenance gateway 4 and the permission opening of the branch management platform 2 realize strict control of access rights. Only verified legal devices can access the operation and maintenance network, which effectively prevents the access of illegal devices and reduces the risk of external connection; before the maintenance instruction is executed, the operation and maintenance gateway 4 will conduct a risk assessment on each maintenance instruction to assess the risk it may cause to the operation and maintenance object 5. The pre-risk assessment mechanism helps to identify potential security threats in advance and avoid the execution of instructions that may cause security problems; by comparing the evaluation threshold interval with the maintenance instruction evaluation value, it is ensured that only maintenance instructions with evaluation values ​​within an acceptable range are allowed to be executed. The threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of infection with malicious code due to improper execution of instructions. During the execution of maintenance instructions, the operation and maintenance gateway 4 is used as an intermediary to achieve isolation between the terminal device 3 and the operation and maintenance object 5. This isolation mechanism effectively prevents potential malicious code on the terminal device 3 from directly infecting the operation and maintenance object 5, thereby improving the overall security of the system. When the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform 2 will block the operation and maintenance gateway 4 from accessing the operation and maintenance object 5. This blocking mechanism further enhances the system's protection capabilities and prevents potential high-risk operations from causing damage to the operation and maintenance object 5. In addition, since maintenance tasks are created and managed through the master control management platform 1, and the execution of each maintenance instruction is subject to risk assessment and authority control, it can be easily audited and traced, which helps to quickly locate the source of the problem when a security incident occurs and take corresponding measures to deal with it.

[0090] Embodiment 2:

[0091] On the basis of Example 1, the specific steps of verifying whether the maintenance request is passed by the operation and maintenance gateway 4 in S200 include:

[0092] S210, the operation and maintenance gateway 4 is configured with license data, the license data includes a license user identity information set, a license terminal device 3 information set, a designated access port set on the license terminal device 3 for connecting to the operation and maintenance gateway 4, a designated access port set on the operation and maintenance gateway 4 for connecting to the license terminal device 3, and a license transmission protocol set;

[0093] S220, obtaining the user identity information, the terminal device 3 information, the access port on the terminal device 3 connected to the operation and maintenance gateway 4, the access port on the operation and maintenance gateway 4 connected to the terminal device 3 and the transmission protocol in the above maintenance request;

[0094] S230, determining whether the terminal device 3 information belongs to the permitted terminal device 3 information set;

[0095] S240, if yes, then call the licensed terminal device 3 corresponding to the terminal device 3 to obtain the first licensed terminal device 3; call the designated access port set of the first licensed terminal device 3 for connecting to the operation and maintenance gateway 4 to obtain the first designated access port set; call the designated access port set of the operation and maintenance gateway 4 for connecting to the first licensed terminal device 3 to obtain the second designated access port set;

[0096] S250, determining whether the user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port on the terminal device 3 connected to the operation and maintenance gateway 4 belongs to the first designated access port set, and whether the access port on the operation and maintenance gateway 4 connected to the terminal device 3 belongs to the second designated access port set;

[0097] S260: If the user identity information, transmission protocol, access port on the terminal device 3 connected to the operation and maintenance gateway 4, and access port on the operation and maintenance gateway 4 connected to the terminal device 3 are all permitted data, the maintenance request verification is passed;

[0098] S270. If any of the above-mentioned terminal device 3 information, user identity information, transmission protocol, access port on terminal device 3 connected to operation and maintenance gateway 4, and access port on operation and maintenance gateway 4 connected to terminal device 3 does not belong to the permitted data, the maintenance request verification fails.

[0099] When receiving a maintenance request, the operation and maintenance gateway 4 will comprehensively extract the user identity information, terminal device 3 information, access port and transmission protocol in the request, and compare it with the pre-configured license data. Only requests that meet all licensing conditions can pass the verification, which greatly reduces the security risks caused by information mismatch. The verification process is divided into multiple levels. First, it verifies whether the terminal device 3 information belongs to the licensed scope. Only when the terminal device 3 information verification is passed can the licensed terminal device 3 corresponding to the above-mentioned terminal device 3 be successfully called, and then the user identity information, transmission protocol and access port and other information are verified. The multi-level verification logic makes the failure of any link result in the request being rejected, ensuring that only fully compliant maintenance requests can connect the terminal device 3 to the operation and maintenance gateway 4, effectively preventing the potential threat of external terminal devices 3 to the operation and maintenance gateway 4, and initially reducing the external connection risk in the operation and maintenance work.

[0100] In addition, since the information involved in the verification process is recorded in detail and used for comparison, when a security incident occurs, the audit log can be used to trace the source of the request, the verification process and results, etc., which helps to quickly locate the root cause of the problem and take appropriate remedial measures.

[0101] Embodiment 3:

[0102] Based on any of the above embodiments, the specific steps of S400 include:

[0103] S410, obtaining the priority of each maintenance instruction in the above maintenance task, sorting each maintenance instruction according to the priority to obtain a first maintenance instruction sequence; sorting the above maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combining the above first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0104] S420, according to the third maintenance instruction sequence, sequentially obtain maintenance instructions, parse the content data when the maintenance instruction is created, and obtain a first content data set; parse the content data carried when the maintenance instruction is transmitted, and obtain a second content data set;

[0105] S430, configuring a first weight for the first content data set, and configuring a second weight for the second content data set;

[0106] S440, calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when acting on the operation and maintenance object 5;

[0107] Matching the first content data in the first content data set with the content data in the content risk database respectively, if the match is successful, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0;

[0108] Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0;

[0109] S450, using the following formula to determine the maintenance instruction evaluation value;

[0110]

[0111] Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0112] The above formula includes the risk values ​​of two content data sets (the first content data set and the second content data set), which means that the maintenance instruction evaluation value is not based on a single data source or perspective, but takes into account information from multiple aspects. This fusion of multi-source data helps to more comprehensively reflect the actual situation of the maintenance instruction and reduce miscalculations caused by one-sided information. The first weight and the second weight in the formula allow for flexible adjustment according to actual needs. Different application scenarios or data characteristics may require different weight allocations to more accurately reflect the importance and influence of each data set. This flexibility makes the formula more widely applicable and more practical. By weighted averaging the risk values, a quantitative maintenance instruction evaluation value is provided. Quantitative evaluation helps to reduce the uncertainty caused by subjective judgment and makes the evaluation results more objective, comparable and traceable. At the same time, quantitative evaluation of maintenance instructions can provide strong support for subsequent decision-making. For example, the maintenance priority, maintenance resource allocation or maintenance plan can be determined according to the maintenance instruction evaluation value. This data-based decision optimization helps to improve the efficiency and effectiveness of maintenance work, reduce operating costs and improve overall safety and reliability.

[0113] Evaluate each maintenance instruction in the above maintenance task to ensure that potential risks can be fully understood and evaluated before performing the maintenance operation. Considering that the maintenance instruction not only affects the operation and maintenance object 5 when it is executed, but also the order in which the maintenance instruction is executed has an impact on the operation and maintenance object 5; therefore, first sort the maintenance instructions to obtain the third maintenance instruction sequence, so that the maintenance instructions act on the operation and maintenance object 5 in sequence; parse the content data when creating the maintenance instruction (i.e., the initial state), a maintenance instruction includes a number of content data, and a first content data set is composed of a number of content data; when transmitting the maintenance instruction (i.e., the current state), the system carries the content data to obtain a second content data set. These two data sets represent the content data of the initial and current states of the maintenance instruction, respectively. By identifying the content data, the content is determined. Whether the data is malicious code, thereby reducing the probability of the operation and maintenance object 5 being infected with malicious code; configuring a first weight and a second weight for the first content data set and the second content data set respectively, to reflect the importance or credibility of different data sets; by matching the first content data set and the second content data set with the content risk database, the risk value of the corresponding content data when acting on the operation and maintenance object 5 is obtained, and the maintenance instruction evaluation value is calculated using a given formula, which comprehensively considers the risk values ​​of the first content data set and the second content data set and their respective weights. Specifically, the maintenance instruction evaluation value is the sum of the weighted sum of the risk values ​​of the first content data set and the weighted sum of the risk values ​​of the second content data set.

[0114] Embodiment 4:

[0115] Based on any of the above embodiments, the above evaluation threshold interval includes a lower threshold interval and an upper threshold interval;

[0116] S510: If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform 2 enables the operation and maintenance gateway 4 to access the operation and maintenance object 5;

[0117] S520. If the above-mentioned maintenance instruction evaluation value belongs to the upper limit threshold range, the branch management platform 2 sends an authorization request to the master control management platform 1. When the branch management platform 2 receives the authorization response sent by the master control management platform 1, the branch management platform 2 opens the permission for the operation and maintenance gateway 4 to access the operation and maintenance object 5; when the branch management platform 2 receives the rejection response sent by the master control management platform 1, the branch management platform 2 blocks the operation and maintenance gateway 4 from accessing the operation and maintenance object 5.

[0118] Introducing the lower threshold interval and the upper threshold interval in the operation and maintenance process as a further refinement of the evaluation threshold interval provides a more flexible and sophisticated processing method for maintenance instructions of different risk levels. When the evaluation value of the maintenance instruction belongs to the lower threshold interval, it means that the risk level of the maintenance instruction is very low and is within an acceptable safety range; therefore, the branch management platform 2 will directly open the access permission for the operation and maintenance gateway 4 to the operation and maintenance object 5 without further authorization or approval process. This processing method improves the operation and maintenance efficiency, reduces unnecessary waiting time, and also ensures the smooth execution of low-risk maintenance instructions; however, when the evaluation value of the maintenance instruction belongs to the upper threshold interval, the situation becomes more complicated, indicating that the risk level of the maintenance instruction is high and may involve sensitive or critical operations on the operation and maintenance object 5. Therefore, the branch management platform 2 will not directly authorize, but will send an authorization request to the general control management platform 1 to obtain higher-level approval and confirmation. The branch management platform 2 submits the detailed information and evaluation results of the maintenance instruction to the master control management platform 1, requesting the master control management platform 1 to conduct further evaluation and authorization. If the master control management platform 1 believes that the risk of the maintenance instruction is controllable and is necessary for the operation and maintenance work of the operation and maintenance object 5, then it will send an authorization response to the branch management platform 2. After receiving the authorization response, the branch management platform 2 will open the access permission of the operation and maintenance gateway 4 to the operation and maintenance object 5, allowing the execution of the maintenance instruction; if the master control management platform 1 believes that the risk of the maintenance instruction is too high, or there are other reasons why it is not suitable for execution, then it will send a rejection response to the branch management platform 2. After receiving the rejection response, the branch management platform 2 will block the operation and maintenance gateway 4 from accessing the operation and maintenance object 5 to prevent the execution of high-risk maintenance instructions.

[0119] Through the above secondary authorization method, the operation and maintenance system can ensure efficient operation and maintenance while also ensuring the safety and controllability of operation and maintenance operations. For low-risk operations, the system can respond and execute quickly; for high-risk or sensitive operations, the system can ensure the rationality and safety of the operation through a more stringent approval process, which not only improves the efficiency of operation and maintenance, but also reduces the risks in the operation and maintenance process.

[0120] Embodiment 5:

[0121] This embodiment 5 provides a security operation and maintenance system, combined with Figure 2 , the operation and maintenance system is used to implement the above-mentioned operation and maintenance method;

[0122] The operation and maintenance system includes:

[0123] The master control management platform 1 is used to create maintenance tasks for the operation and maintenance objects 5;

[0124] The terminal device 3 is connected to the master control management platform 1 for communication. The terminal device 3 is used to send a maintenance request to the operation and maintenance gateway 4 after receiving the maintenance task.

[0125] The operation and maintenance gateway 4 is connected to the terminal device 3 and is used to verify whether the maintenance request is passed and output the verification result;

[0126] The branch management platform 2 is connected to the master control management platform 1, the operation and maintenance gateway 4 and the terminal device 3. The branch management platform 2 is used to receive the verification result, and to open the access permission of the terminal device 3 that has passed the verification to the operation and maintenance gateway 4; and to block the terminal device 3 that has not passed the verification from accessing the operation and maintenance gateway 4;

[0127] When the terminal device 3 is connected to the operation and maintenance gateway 4, the terminal device 3 sends the maintenance task to the operation and maintenance gateway 4;

[0128] The operation and maintenance gateway 4 performs the following steps:

[0129] Extract various maintenance instructions from the above maintenance tasks, evaluate the risks of each maintenance instruction acting on the operation and maintenance object 5, and obtain the maintenance instruction evaluation value;

[0130] Calling the evaluation threshold interval to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0131] If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform 2 will open the access permission of the operation and maintenance gateway 4 to the operation and maintenance object 5; after the operation and maintenance gateway 4 accesses the operation and maintenance object 5, the corresponding maintenance instruction will be sent to the operation and maintenance object 5 for maintenance;

[0132] If the maintenance instruction evaluation value does not belong to the evaluation threshold range, the operation and maintenance gateway 4 is blocked from accessing the operation and maintenance object 5 .

[0133] In a specific embodiment, the operation and maintenance gateway 4 is further used to execute the following specific steps of S200:

[0134] S210, configure license data, the license data including a license user identity information set, a license terminal device 3 information set, a designated access port set on the license terminal device 3 for connecting to the operation and maintenance gateway 4, a designated access port set on the operation and maintenance gateway 4 for connecting to the license terminal device 3, and a license transmission protocol set;

[0135] S220, obtaining the user identity information, the terminal device 3 information, the access port on the terminal device 3 connected to the operation and maintenance gateway 4, the access port on the operation and maintenance gateway 4 connected to the terminal device 3 and the transmission protocol in the above maintenance request;

[0136] S230, determining whether the terminal device 3 information belongs to the permitted terminal device 3 information set;

[0137] S240, if yes, then call the licensed terminal device 3 corresponding to the terminal device 3 to obtain the first licensed terminal device 3; call the designated access port set of the first licensed terminal device 3 for connecting to the operation and maintenance gateway 4 to obtain the first designated access port set; call the designated access port set of the operation and maintenance gateway 4 for connecting to the first licensed terminal device 3 to obtain the second designated access port set;

[0138] S250, determining whether the user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port on the terminal device 3 connected to the operation and maintenance gateway 4 belongs to the first designated access port set, and whether the access port on the operation and maintenance gateway 4 connected to the terminal device 3 belongs to the second designated access port set;

[0139] S260: If the user identity information, transmission protocol, access port on the terminal device 3 connected to the operation and maintenance gateway 4, and access port on the operation and maintenance gateway 4 connected to the terminal device 3 are all permitted data, the maintenance request verification is passed;

[0140] S270. If any of the above-mentioned terminal device 3 information, user identity information, transmission protocol, access port on terminal device 3 connected to operation and maintenance gateway 4, and access port on operation and maintenance gateway 4 connected to terminal device 3 does not belong to the permitted data, the maintenance request verification fails.

[0141] In a specific embodiment, the operation and maintenance gateway 4 performs the following specific steps of S400:

[0142] S410, obtaining the priority of each maintenance instruction in the above maintenance task, sorting each maintenance instruction according to the priority to obtain a first maintenance instruction sequence; sorting the above maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combining the above first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0143] S420, according to the third maintenance instruction sequence, sequentially obtain maintenance instructions, parse the content data when the maintenance instruction is created, and obtain a first content data set; parse the content data carried when the maintenance instruction is transmitted, and obtain a second content data set;

[0144] S430, configuring a first weight for the first content data set, and configuring a second weight for the second content data set;

[0145] S440, calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when acting on the operation and maintenance object 5;

[0146] Matching the first content data in the first content data set with the content data in the content risk database respectively, if the match is successful, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0;

[0147] Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0;

[0148] S450, using the following formula to determine the maintenance instruction evaluation value;

[0149]

[0150] Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0151] In a specific embodiment, the evaluation threshold interval in the operation and maintenance gateway 4 includes a lower threshold interval and an upper threshold interval;

[0152] S510: If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform 2 enables the operation and maintenance gateway 4 to access the operation and maintenance object 5;

[0153] S520. If the above-mentioned maintenance instruction evaluation value belongs to the upper limit threshold range, the branch management platform 2 sends an authorization request to the master control management platform 1. When the branch management platform 2 receives the authorization response sent by the master control management platform 1, the branch management platform 2 opens the permission for the operation and maintenance gateway 4 to access the operation and maintenance object 5; when the branch management platform 2 receives the rejection response sent by the master control management platform 1, the branch management platform 2 blocks the operation and maintenance gateway 4 from accessing the operation and maintenance object 5.

[0154] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A safe operation and maintenance method, characterized in that: The following steps are involved: S100, creating a maintenance task for the operation and maintenance object (5) through the master control management platform (1); S200, after receiving the maintenance task, the terminal device (3) sends a maintenance request to the operation and maintenance gateway (4); the operation and maintenance gateway (4) verifies whether the maintenance request is passed. If the verification is passed, the branch management platform (2) enables the terminal device (3) to access the operation and maintenance gateway (4); otherwise, the terminal device (3) is blocked from accessing the operation and maintenance gateway (4); S300, when the terminal device (3) is connected to the operation and maintenance gateway (4), the maintenance task is sent to the operation and maintenance gateway (4); The operation and maintenance gateway (4) performs the following steps: S400, extracting various maintenance instructions from the maintenance task, evaluating the risk of each maintenance instruction acting on the operation and maintenance object (5), and obtaining a maintenance instruction evaluation value; S500, calling the evaluation threshold interval to determine whether the maintenance instruction evaluation value belongs to the evaluation threshold interval; If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); after the operation and maintenance gateway (4) accesses the operation and maintenance object (5), the corresponding maintenance instruction is sent to the operation and maintenance object (5) for maintenance; If the maintenance instruction evaluation value does not belong to the evaluation threshold range, the operation and maintenance gateway (4) is blocked from accessing the operation and maintenance object (5).

2. The operation and maintenance method according to claim 1, characterized in that: The specific steps of verifying whether the maintenance request is passed by the operation and maintenance gateway (4) in S200 include: S210, the operation and maintenance gateway (4) is configured with license data, the license data including a license user identity information set, a license terminal device (3) information set, a designated access port set on the license terminal device (3) for connecting to the operation and maintenance gateway (4), a designated access port set on the operation and maintenance gateway (4) for connecting to the license terminal device (3) and a license transmission protocol set; S220, obtaining the user identity information, the terminal device (3) information, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), the access port on the operation and maintenance gateway (4) connected to the terminal device (3) and the transmission protocol in the maintenance request; S230, determining whether the terminal device (3) information belongs to the permitted terminal device (3) information set; S240, if yes, calling the licensed terminal device (3) corresponding to the terminal device (3) to obtain a first licensed terminal device (3); calling the designated access port set used by the first licensed terminal device (3) to connect to the operation and maintenance gateway (4) to obtain a first designated access port set; calling the designated access port set used by the operation and maintenance gateway (4) to connect to the first licensed terminal device (3) to obtain a second designated access port set; S250, determining whether the user identity information belongs to a permitted user identity information set, whether the transmission protocol belongs to a transmission protocol set, whether the access port on the terminal device (3) connected to the operation and maintenance gateway (4) belongs to a first designated access port set, and whether the access port on the operation and maintenance gateway (4) connected to the terminal device (3) belongs to a second designated access port set; S260: If the user identity information, the transmission protocol, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), and the access port on the operation and maintenance gateway (4) connected to the terminal device (3) are all permitted data, then the maintenance request verification is passed; S270. If any of the terminal device (3) information, user identity information, transmission protocol, access port on the terminal device (3) connected to the operation and maintenance gateway (4), and access port on the operation and maintenance gateway (4) connected to the terminal device (3) does not belong to the permitted data, the maintenance request verification fails.

3. The operation and maintenance method according to claim 1, characterized in that: The specific steps of S400 include: S410, obtaining the priority of each maintenance instruction in the maintenance task, sorting the maintenance instructions according to the priority to obtain a first maintenance instruction sequence; sorting the maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combining the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence; S420, according to the third maintenance instruction sequence, sequentially obtain maintenance instructions, parse the content data when the maintenance instruction is created, and obtain a first content data set; parse the content data carried when the maintenance instruction is transmitted, and obtain a second content data set; S430: configuring a first weight for the first content data set and configuring a second weight for the second content data set; S440, calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when it acts on the operation and maintenance object (5); Matching the first content data in the first content data set with the content data in the content risk database respectively, and if the match succeeds, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0; Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0; S450, using the following formula to determine the maintenance instruction evaluation value; Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

4. The operation and maintenance method according to claim 1, characterized in that: The evaluation threshold interval includes a lower threshold interval and an upper threshold interval; S510: If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); S520. If the maintenance instruction evaluation value belongs to the upper threshold interval, the branch management platform (2) sends an authorization request to the master control management platform (1). When the branch management platform (2) receives the authorization response sent by the master control management platform (1), the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5). When the branch management platform (2) receives the rejection response sent by the master control management platform (1), the branch management platform (2) blocks the operation and maintenance gateway (4) from accessing the operation and maintenance object (5).

5. A security operation and maintenance system, characterized in that: The operation and maintenance system is used to implement the operation and maintenance method described in any one of claims 1 to 4; The operation and maintenance system includes: A master control management platform (1), the master control management platform (1) is used to create maintenance tasks for operation and maintenance objects (5); A terminal device (3), the terminal device (3) being in communication connection with the master control management platform (1), and the terminal device (3) being used to send a maintenance request to the operation and maintenance gateway (4) after receiving a maintenance task; An operation and maintenance gateway (4), the operation and maintenance gateway (4) is connected to the terminal device (3), and the operation and maintenance gateway (4) is used to verify whether the maintenance request is passed and output the verification result; A branch management platform (2), wherein the branch management platform (2) is connected to the master control management platform (1), the operation and maintenance gateway (4) and the terminal device (3), and the branch management platform (2) is used to receive the verification result, and to enable the terminal device (3) that has passed the verification to access the operation and maintenance gateway (4); and to block the terminal device (3) that has not passed the verification from accessing the operation and maintenance gateway (4); When the terminal device (3) is connected to the operation and maintenance gateway (4), the terminal device (3) sends the maintenance task to the operation and maintenance gateway (4); The operation and maintenance gateway (4) performs the following steps: Extracting various maintenance instructions from the maintenance tasks, evaluating the risks of each maintenance instruction acting on the operation and maintenance object (5), and obtaining a maintenance instruction evaluation value; Calling the evaluation threshold interval to determine whether the maintenance instruction evaluation value belongs to the evaluation threshold interval; If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); after the operation and maintenance gateway (4) accesses the operation and maintenance object (5), the corresponding maintenance instruction is sent to the operation and maintenance object (5) for maintenance; If the maintenance instruction evaluation value does not belong to the evaluation threshold range, the operation and maintenance gateway (4) is blocked from accessing the operation and maintenance object (5).

6. The operation and maintenance system according to claim 5, characterized in that: The operation and maintenance gateway (4) is also used to configure license data, wherein the license data includes a license user identity information set, a license terminal device (3) information set, a designated access port set on the license terminal device (3) for connecting to the operation and maintenance gateway (4), a designated access port set on the operation and maintenance gateway (4) for connecting to the license terminal device (3), and a license transmission protocol set; Obtaining user identity information, terminal device (3) information, an access port on the terminal device (3) connected to the operation and maintenance gateway (4), and an access port and transmission protocol on the operation and maintenance gateway (4) connected to the terminal device (3) in the maintenance request; Determining whether the terminal device (3) information belongs to the permitted terminal device (3) information set; If yes, calling the licensed terminal device (3) corresponding to the terminal device (3) to obtain a first licensed terminal device (3); calling the designated access port set used by the first licensed terminal device (3) to connect to the operation and maintenance gateway (4) to obtain a first designated access port set; calling the designated access port set used by the operation and maintenance gateway (4) to connect to the first licensed terminal device (3) to obtain a second designated access port set; Determine whether the user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port on the terminal device (3) connected to the operation and maintenance gateway (4) belongs to the first designated access port set, and whether the access port on the operation and maintenance gateway (4) connected to the terminal device (3) belongs to the second designated access port set; If the user identity information, the transmission protocol, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), and the access port on the operation and maintenance gateway (4) connected to the terminal device (3) are all permitted data, then the maintenance request verification is passed; If any of the terminal device (3) information, user identity information, transmission protocol, access port on the terminal device (3) connected to the operation and maintenance gateway (4), and access port on the operation and maintenance gateway (4) connected to the terminal device (3) does not belong to the permitted data, the maintenance request verification fails.

7. The operation and maintenance system according to claim 5, characterized in that: The operation and maintenance gateway (4) obtains the priority of each maintenance instruction in the maintenance task, sorts the maintenance instructions according to the priority, and obtains a first maintenance instruction sequence; sorts the maintenance instructions with the same priority according to the creation time, and obtains a second maintenance instruction sequence; combines the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence; According to the third maintenance instruction sequence, maintenance instructions are sequentially acquired, content data when the maintenance instructions are created are parsed to obtain a first content data set; content data carried when the maintenance instructions are transmitted are parsed to obtain a second content data set; configuring a first weight for the first content data set and configuring a second weight for the second content data set; Calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when it acts on an operation and maintenance object (5); Matching the first content data in the first content data set with the content data in the content risk database respectively, and if the match is successful, extracting the corresponding risk value as the risk value of the first content data; If the match fails, the risk value of the first content data is assigned 0; Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; If the match fails, the risk value of the second content data is assigned 0; The maintenance order evaluation value is determined using the following formula; Where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

8. The operation and maintenance method according to claim 5, characterized in that: The evaluation threshold interval in the operation and maintenance gateway (4) includes a lower threshold interval and an upper threshold interval; If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); If the maintenance instruction evaluation value belongs to the upper threshold interval, the branch management platform (2) sends an authorization request to the master control management platform (1); when the branch management platform (2) receives the authorization response sent by the master control management platform (1), the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); when the branch management platform (2) receives the rejection response sent by the master control management platform (1), the branch management platform (2) blocks the operation and maintenance gateway (4) from accessing the operation and maintenance object (5).

Images