A security operation and maintenance method and system

Abstract

The present invention provides a security operation and maintenance method and system, which relates to the technical field of operation and maintenance operations. The operation and maintenance method includes the following steps: creating a maintenance task; after receiving the maintenance task, the terminal device sends a maintenance request to the operation and maintenance gateway; the operation and maintenance gateway verifies whether the maintenance request passes. If the verification passes, the operation and maintenance gateway grants the terminal device the permission to access it; otherwise, it blocks; when the terminal device accesses the operation and maintenance gateway, it sends the maintenance task to the operation and maintenance gateway; the operation and maintenance gateway executes: extracts the maintenance instruction from the maintenance task, evaluates the risk of the maintenance instruction acting on the operation and maintenance object, and obtains the maintenance instruction evaluation value; determines whether the maintenance instruction evaluation value belongs to the evaluation threshold range; if it belongs, the operation and maintenance gateway grants the permission to access the operation and maintenance object; when the operation and maintenance gateway accesses the operation and maintenance object, it sends the corresponding maintenance instruction to the operation and maintenance object for maintenance; if it does not belong, it blocks. The external connection risk and the occurrence probability of being infected with malicious code are reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of operation and maintenance operations, and particularly relates to a security operation and maintenance method and system. Background Art

[0002] In operation and maintenance work, there is a situation where operation and maintenance personnel directly connect operation and maintenance tools such as their own laptops and USB flash drives to the monitoring system, which is likely to cause security risks such as unauthorized external connection, misoperation, malicious code, and network attacks. The State Grid Safety Supervision Department has repeatedly reported security incidents such as the monitoring system being infected with malicious code and unauthorized external connection; the risks of external connection, illegal operations, and malicious code infection have persisted despite repeated prohibitions. Summary of the Invention

[0003] The purpose of the present invention is to provide a security operation and maintenance method and system, and the technical problem to be solved is how to reduce the probability of unauthorized external connection risks and malicious code infection in operation and maintenance work.

[0004] The present invention is achieved through the following technical solutions:

[0005] In a first aspect, a security operation and maintenance method is provided, including the following steps:

[0006] S100. Create a maintenance task for the operation and maintenance object through the master control management platform;

[0007] S200. After the terminal device receives the maintenance task, send a maintenance request to the operation and maintenance gateway; the above operation and maintenance gateway verifies whether the maintenance request passes. If the verification passes, the branch management platform grants the terminal device the permission to access the operation and maintenance gateway; otherwise, block the terminal device from accessing the operation and maintenance gateway;

[0008] S300. After the above terminal device accesses the operation and maintenance gateway, send the maintenance task to the operation and maintenance gateway;

[0009] The above operation and maintenance gateway performs the following steps:

[0010] S400. Extract each maintenance instruction from the above maintenance task, evaluate the risk of each maintenance instruction acting on the operation and maintenance object, and obtain a maintenance instruction evaluation value;

[0011] S500. Invoke the evaluation threshold range and determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold range;

[0012] If the above maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform grants the operation and maintenance gateway the permission to access the operation and maintenance object; after the above operation and maintenance gateway accesses the operation and maintenance object, send the corresponding maintenance instruction to the operation and maintenance object for maintenance;

[0013] If the above maintenance instruction evaluation value does not belong to the evaluation threshold range, block the operation and maintenance gateway from accessing the operation and maintenance object.

[0014] By centrally creating and managing maintenance tasks through the above-mentioned overall control management platform, the unified planning and monitoring of operation and maintenance work are realized, which helps to reduce management loopholes caused by decentralized operations and ensure that all operation and maintenance activities are carried out within a controllable range; when a terminal device requests to access the operation and maintenance gateway, through the verification of the operation and maintenance gateway and the permission opening of the branch management platform, strict control of access permissions is achieved. Only legal devices that have passed the verification can access the operation and maintenance network, effectively preventing the access of illegal devices and reducing the risk of external connection; before the execution of a maintenance instruction, the operation and maintenance gateway will conduct a risk assessment on each maintenance instruction to evaluate the possible risks it may pose to the operation and maintenance object. The preposed risk assessment mechanism helps to identify potential security threats in advance and avoid executing instructions that may cause security problems; by comparing the evaluation threshold range with the evaluation value of the maintenance instruction, it is ensured that only maintenance instructions with an evaluation value within the acceptable range will be allowed to be executed. This threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of infecting malicious code due to the execution of improper instructions. During the execution of the maintenance instruction, through the operation and maintenance gateway as an intermediary, the isolation between the terminal device and the operation and maintenance object is realized. This isolation mechanism effectively prevents potential malicious code on the terminal device from directly infecting the operation and maintenance object, improving the overall security of the system; when the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform will block the access of the operation and maintenance gateway to the operation and maintenance object. This blocking mechanism further enhances the protection ability of the system and prevents potential high-risk operations from damaging the operation and maintenance object. In addition, since the maintenance tasks are created and managed through the overall control management platform, and the execution of each maintenance instruction undergoes risk assessment and permission control, it can be conveniently audited and traced, which helps to quickly locate the source of the problem in case of a security incident and take corresponding measures for disposal.

[0015] Furthermore, the specific steps for the above-mentioned operation and maintenance gateway to verify whether the maintenance request passes in S200 include:

[0016] S210. The above-mentioned operation and maintenance gateway is configured with permission data, and the permission data includes a set of permitted user identity information, a set of permitted terminal device information, a set of specified access ports on the permitted terminal device for connecting to the operation and maintenance gateway, a set of specified access ports on the operation and maintenance gateway for connecting to the permitted terminal device, and a set of permitted transmission protocols;

[0017] S220. Obtain the user identity information, terminal device information, access port on the terminal device for connecting to the operation and maintenance gateway, access port on the operation and maintenance gateway for connecting to the terminal device, and transmission protocol in the above-mentioned maintenance request;

[0018] S230. Determine whether the above-mentioned terminal device information belongs to the set of permitted terminal device information;

[0019] S240. If it belongs, call the permitted terminal device corresponding to the above terminal device to obtain the first permitted terminal device; call the specified access port set of the above first permitted terminal device for connecting to the operation and maintenance gateway to obtain the first specified access port set; call the specified access port set of the above operation and maintenance gateway for connecting to the first permitted terminal device to obtain the second specified access port set.

[0020] S250. Determine whether the above user identity information belongs to the permitted user identity information set, whether the transmission protocol belongs to the transmission protocol set, whether the access port of the terminal device connecting to the operation and maintenance gateway belongs to the first specified access port set, and whether the access port of the operation and maintenance gateway connecting to the terminal device belongs to the second specified access port set.

[0021] S260. If the above user identity information, transmission protocol, access port of the terminal device connecting to the operation and maintenance gateway, and access port of the operation and maintenance gateway connecting to the terminal device all belong to the permitted data, the maintenance request verification passes.

[0022] S270. If any one of the above terminal device information, user identity information, transmission protocol, access port of the terminal device connecting to the operation and maintenance gateway, and access port of the operation and maintenance gateway connecting to the terminal device does not belong to the permitted data, the maintenance request verification fails.

[0023] When the above operation and maintenance gateway receives a maintenance request, it will comprehensively extract information such as user identity information, terminal device information, access port, and transmission protocol in the request, and compare it with the pre-configured permitted data. Only requests that meet all permitted conditions can pass the verification, greatly reducing the security risks caused by information mismatch; the verification process is divided into multiple levels. First, verify whether the terminal device information belongs to the permitted range. Only when the terminal device information verification passes can the permitted terminal device corresponding to the above terminal device be successfully called, and then verify information such as user identity information, transmission protocol, and access port. The multi-level verification logic ensures that the failure of any link will cause the request to be rejected, ensuring that only completely compliant maintenance requests can connect the terminal device to the operation and maintenance gateway, effectively preventing potential threats from external connection terminal devices to the operation and maintenance gateway, and initially reducing the external connection risk in operation and maintenance work.

[0024] Further, the specific steps of S400 include:

[0025] S410. Obtain the priorities of the various maintenance instructions in the above maintenance task, sort the various maintenance instructions according to the priorities to obtain the first maintenance instruction sequence; sort the maintenance instructions with the same above priorities according to the creation time to obtain the second maintenance instruction sequence; combine the above first maintenance instruction sequence and the second maintenance instruction sequence to obtain the third maintenance instruction sequence.

[0026] S420. According to the above third maintenance instruction sequence, obtain the maintenance instructions in sequence, parse the content data when creating the maintenance instruction to obtain the first content data set; parse the content data carried when transmitting the maintenance instruction to obtain the second content data set.

[0027] S430. Configure a first weight for the above first content data set and a second weight for the second content data set.

[0028] S440. Call the content risk database, where the content risk database includes content data and the corresponding risk values when each content data acts on the operation and maintenance object.

[0029] Match the first content data in the above first content data set with the content data in the content risk database one by one. If the match is successful, extract the corresponding risk value as the risk value of the first content data; if the match fails, assign 0 to the risk value of the first content data.

[0030] Match the second content data in the above second content data set with the content data in the content risk database one by one. When the match is successful, extract the corresponding risk value as the risk value of the second content data; if the match fails, assign 0 to the risk value of the second content data.

[0031] S450. Determine the maintenance instruction evaluation value using the following formula.

[0032]

[0033] Among them, S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0034] Evaluate each maintenance instruction in the above maintenance tasks to ensure that potential risks can be fully understood and evaluated before performing maintenance operations. Considering that maintenance instructions not only affect the operation and maintenance object during execution, but also the order of execution of maintenance instructions affects the operation and maintenance object; therefore, first sort the maintenance instructions to obtain the third maintenance instruction sequence, so that the maintenance instructions act on the operation and maintenance object in sequence; parse the content data when creating the maintenance instruction (i.e., the initial state). A maintenance instruction includes several content data, which form the first content data set; the content data carried by the system when transmitting the maintenance instruction (i.e., the current state) to obtain the second content data set. These two data sets represent the content data of the initial and current states of the maintenance instruction respectively. By identifying this content data, determine whether the content data is malicious code, thereby reducing the probability of the operation and maintenance object being infected with malicious code; configure the first weight and the second weight for the first content data set and the second content data set respectively, which are used to reflect the importance or credibility of different data sets; by matching the first content data set and the second content data set with the content risk database, obtain the risk value when the corresponding content data acts on the operation and maintenance object, and use the given formula to calculate the maintenance instruction evaluation value, which comprehensively considers the risk values of the first content data set and the second content data set and their respective weights. Specifically, the maintenance instruction evaluation value is the sum of the weighted sum of the risk values of the first content data set and the weighted sum of the risk values of the second content data set.

[0035] Further, the above evaluation threshold interval includes a lower threshold interval and an upper threshold interval;

[0036] S510. If the above maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform grants the operation and maintenance gateway the permission to access the operation and maintenance object;

[0037] S520. If the above maintenance instruction evaluation value belongs to the upper threshold interval, the branch management platform sends an authorization request to the total control management platform. When the branch management platform receives the authorization response sent by the total control management platform, the branch management platform grants the operation and maintenance gateway the permission to access the operation and maintenance object; when the branch management platform receives the rejection response sent by the total control management platform, the branch management platform blocks the operation and maintenance gateway from accessing the operation and maintenance object.

[0038] In the operation and maintenance process, a lower threshold range and an upper threshold range are introduced as further refinements of the evaluation threshold range, providing a more flexible and precise processing method for maintenance instructions of different risk levels. When the evaluation value of a maintenance instruction belongs to the lower threshold range, it means that the risk level of this maintenance instruction is very low and within an acceptable safety range; therefore, the branch management platform will directly grant the operation and maintenance gateway the permission to access the operation and maintenance object without further authorization or approval process. This processing method improves the operation and maintenance efficiency, reduces unnecessary waiting time, and at the same time ensures the smooth execution of low-risk maintenance instructions; however, when the evaluation value of a maintenance instruction belongs to the upper threshold range, the situation becomes more complex, indicating that the risk level of this maintenance instruction is relatively high and may involve sensitive or critical operations on the operation and maintenance object. Therefore, the branch management platform will not directly authorize, but will send an authorization request to the total control management platform to obtain higher-level approval and confirmation. The branch management platform submits the detailed information and evaluation results of the maintenance instruction to the total control management platform, requesting the total control management platform to conduct further evaluation and authorization. If the total control management platform believes that the risk of this maintenance instruction is controllable and necessary for the operation and maintenance work of the operation and maintenance object, then it will send an authorization response to the branch management platform. After receiving the authorization response, the branch management platform grants the operation and maintenance gateway the permission to access the operation and maintenance object, allowing the execution of the maintenance instruction; if the total control management platform believes that the risk of this maintenance instruction is too high or there are other reasons not suitable for execution, then it will send a rejection response to the branch management platform. After receiving the rejection response, the branch management platform will block the operation and maintenance gateway from accessing the operation and maintenance object to prevent the execution of high-risk maintenance instructions.

[0039] Through the above secondary authorization method, the operation and maintenance system can ensure both efficient operation and maintenance and the security and controllability of operation and maintenance operations. For low-risk operations, the system can respond and execute quickly; while for high-risk or sensitive operations, the system can ensure the rationality and security of operations through a more rigorous approval process, not only improving the operation and maintenance efficiency but also reducing the risks in the operation and maintenance process.

[0040] In a second aspect, a secure operation and maintenance system is provided, and this operation and maintenance system is used to implement the above operation and maintenance method;

[0041] This operation and maintenance system includes:

[0042] A total control management platform, and the above total control management platform is used to create maintenance tasks for operation and maintenance objects;

[0043] A terminal device, and the above terminal device is communicatively connected to the total control management platform. The terminal device is used to send a maintenance request to the operation and maintenance gateway after receiving the maintenance task;

[0044] An operation and maintenance gateway, which is connected to a terminal device. The operation and maintenance gateway is used to verify whether a maintenance request passes and output a verification result;

[0045] A branch management platform, which is connected to a total control management platform, an operation and maintenance gateway, and a terminal device. The branch management platform is used to receive the verification result, grant access permission to the operation and maintenance gateway for the terminal device that passes the verification; block the terminal device that fails the verification from accessing the operation and maintenance gateway;

[0046] After the above terminal device accesses the operation and maintenance gateway, the terminal device sends a maintenance task to the operation and maintenance gateway;

[0047] The above operation and maintenance gateway performs the following steps:

[0048] Extract each maintenance instruction from the above maintenance task, evaluate the risk of each maintenance instruction acting on the operation and maintenance object, and obtain a maintenance instruction evaluation value;

[0049] Call an evaluation threshold range to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold range;

[0050] If the above maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform grants access permission to the operation and maintenance object for the operation and maintenance gateway; after the above operation and maintenance gateway accesses the operation and maintenance object, send the corresponding maintenance instruction to the operation and maintenance object for maintenance;

[0051] If the above maintenance instruction evaluation value does not belong to the evaluation threshold range, block the operation and maintenance gateway from accessing the operation and maintenance object.

[0052] Furthermore, the above operation and maintenance gateway is also used to configure permission data, which includes a set of permitted user identity information, a set of permitted terminal device information, a set of specified access ports on the permitted terminal device for connecting to the operation and maintenance gateway, a set of specified access ports on the operation and maintenance gateway for connecting to the permitted terminal device, and a set of permitted transmission protocols;

[0053] Obtain the user identity information, terminal device information, access port on the terminal device connecting to the operation and maintenance gateway, access port on the operation and maintenance gateway connecting to the terminal device, and transmission protocol in the above maintenance request;

[0054] Judge whether the above terminal device information belongs to the set of permitted terminal device information;

[0055] If it belongs, call the permitted terminal device corresponding to the above terminal device to obtain a first permitted terminal device; call the set of specified access ports on the first permitted terminal device for connecting to the operation and maintenance gateway to obtain a first set of specified access ports; call the set of specified access ports on the operation and maintenance gateway for connecting to the first permitted terminal device to obtain a second set of specified access ports;

[0056] Determine whether the above user identity information belongs to the set of permitted user identity information, whether the transmission protocol belongs to the set of transmission protocols, whether the access port of the terminal device connected to the operation and maintenance gateway belongs to the first specified access port set, and whether the access port of the operation and maintenance gateway connected to the terminal device belongs to the second specified access port set;

[0057] If the above user identity information, transmission protocol, access port of the terminal device connected to the operation and maintenance gateway, and access port of the operation and maintenance gateway connected to the terminal device all belong to the permitted data, the maintenance request verification passes;

[0058] If any one of the above terminal device information, user identity information, transmission protocol, access port of the terminal device connected to the operation and maintenance gateway, and access port of the operation and maintenance gateway connected to the terminal device does not belong to the permitted data, the maintenance request verification fails.

[0059] Further, obtain the priorities of the various maintenance instructions in the above maintenance task by the operation and maintenance gateway, sort the various maintenance instructions according to the priorities to obtain the first maintenance instruction sequence; sort the maintenance instructions with the same priority according to the creation time to obtain the second maintenance instruction sequence; combine the first maintenance instruction sequence and the second maintenance instruction sequence to obtain the third maintenance instruction sequence;

[0060] According to the above third maintenance instruction sequence, obtain the maintenance instructions in turn, parse the content data when creating the maintenance instruction to obtain the first content data set; parse the content data carried when transmitting the maintenance instruction to obtain the second content data set;

[0061] Configure a first weight for the above first content data set and a second weight for the second content data set;

[0062] Call the content risk database, which includes content data and the corresponding risk values when each content data acts on the operation and maintenance object;

[0063] Match the first content data in the above first content data set with the content data in the content risk database respectively. If the match is successful, extract the corresponding risk value as the risk value of the first content data; if the match fails, assign the risk value of the first content data to 0;

[0064] Match the second content data in the above second content data set with the content data in the content risk database respectively. When the match is successful, extract the corresponding risk value as the risk value of the second content data; if the match fails, assign the risk value of the second content data to 0;

[0065] Use the following formula to determine the maintenance instruction evaluation value;

[0066]

[0067] Among them, S represents the evaluation value of the maintenance instruction; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content dataset; N represents the number of first content data in the first content dataset; y m represents the risk value of the mth second content data in the second content dataset; M represents the number of second content data in the second content dataset.

[0068] Furthermore, the evaluation threshold interval in the above operation and maintenance gateway includes a lower threshold interval and an upper threshold interval;

[0069] If the above evaluation value of the maintenance instruction belongs to the lower threshold interval, the branch management platform grants the permission for the operation and maintenance gateway to access the operation and maintenance object;

[0070] If the above evaluation value of the maintenance instruction belongs to the upper threshold interval, the branch management platform sends an authorization request to the total control management platform. When the branch management platform receives the authorization response sent by the total control management platform, the branch management platform grants the permission for the operation and maintenance gateway to access the operation and maintenance object; when the branch management platform receives the rejection response sent by the total control management platform, the branch management platform blocks the operation and maintenance gateway from accessing the operation and maintenance object.

[0071] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0072] By centrally creating and managing maintenance tasks through the above-mentioned overall control management platform, the unified planning and monitoring of operation and maintenance work are realized, which helps to reduce management loopholes caused by decentralized operations and ensure that all operation and maintenance activities are carried out within a controllable range. When the terminal device requests to access the operation and maintenance gateway, through the verification of the operation and maintenance gateway and the permission opening of the branch management platform, strict control over access permissions is achieved. Only legitimate devices that have passed the verification can access the operation and maintenance network, effectively preventing the access of illegal devices and reducing the external connection risk. Before the execution of the maintenance instruction, the operation and maintenance gateway will conduct a risk assessment on each maintenance instruction to evaluate the possible risks it may pose to the operation and maintenance object. The pre-set risk assessment mechanism helps to identify potential security threats in advance and avoid executing instructions that may cause security problems. By comparing the evaluation threshold range with the evaluation value of the maintenance instruction, it is ensured that only maintenance instructions with evaluation values within the acceptable range will be allowed to be executed. This threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of infecting malicious code due to improper execution of instructions. During the execution of the maintenance instruction, through the operation and maintenance gateway as an intermediary, the isolation between the terminal device and the operation and maintenance object is realized. This isolation mechanism effectively prevents potential malicious code on the terminal device from directly infecting the operation and maintenance object, improving the overall security of the system. When the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform will block the access of the operation and maintenance gateway to the operation and maintenance object. This blocking mechanism further enhances the protection ability of the system and prevents potential high-risk operations from damaging the operation and maintenance object. In addition, since the maintenance tasks are created and managed through the overall control management platform, and the execution of each maintenance instruction undergoes risk assessment and permission control, it can be conveniently audited and traced, which helps to quickly locate the source of problems in case of security incidents and take corresponding measures for disposal. BRIEF DESCRIPTION OF THE DRAWINGS

[0073] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings. In the drawings:

[0074] Figure 1 is the main flow chart of the operation and maintenance method;

[0075] Figure 2 is the connection block diagram of the operation and maintenance system.

[0076] Reference numerals in the drawings and corresponding component names:

[0077] 1. Overall control management platform; 2. Branch management platform; 3. Terminal device; 4. Operation and maintenance gateway; 5. Operation and maintenance object. Detailed implementation manners

[0078] To make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention will be further described in detail below with reference to embodiments and the accompanying drawings. The illustrative embodiments and descriptions thereof of the present invention are only used to explain the present invention and are not intended to limit the present invention.

[0079] Embodiment 1:

[0080] This Embodiment 1 provides a security operation and maintenance method, in combination with Figure 1 , including the following steps:

[0081] S100. Create a maintenance task for the operation and maintenance object 5 through the master control management platform 1;

[0082] S200. After receiving the maintenance task, the terminal device 3 sends a maintenance request to the operation and maintenance gateway 4; the operation and maintenance gateway 4 verifies whether the maintenance request passes. If the verification passes, the branch management platform 2 grants the terminal device 3 the permission to access the operation and maintenance gateway 4; otherwise, the access of the terminal device 3 to the operation and maintenance gateway 4 is blocked;

[0083] S300. After the terminal device 3 accesses the operation and maintenance gateway 4, send the maintenance task to the operation and maintenance gateway 4;

[0084] The operation and maintenance gateway 4 performs the following steps:

[0085] S400. Extract each maintenance instruction from the above maintenance task, evaluate the risk of each maintenance instruction acting on the operation and maintenance object 5, and obtain a maintenance instruction evaluation value;

[0086] S500. Call the evaluation threshold interval to determine whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0087] If the above maintenance instruction evaluation value belongs to the evaluation threshold interval, the branch management platform 2 grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5; after the operation and maintenance gateway 4 accesses the operation and maintenance object 5, send the corresponding maintenance instruction to the operation and maintenance object 5 for maintenance;

[0088] If the above maintenance instruction evaluation value does not belong to the evaluation threshold interval, block the access of the operation and maintenance gateway 4 to the operation and maintenance object 5 (that is, do not grant the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5).

[0089] By centrally creating and managing maintenance tasks through the above-mentioned overall control management platform 1, the unified planning and monitoring of operation and maintenance work are realized, which helps to reduce management loopholes caused by decentralized operations and ensure that all operation and maintenance activities are carried out within a controllable range; when the terminal device 3 requests to access the operation and maintenance gateway 4, through the verification of the operation and maintenance gateway 4 and the permission opening of the branch management platform 2, strict control of access permissions is achieved. Only legal devices that have passed verification can access the operation and maintenance network, effectively preventing the access of illegal devices and reducing the risk of external connection; before the execution of the maintenance instruction, the operation and maintenance gateway 4 will conduct a risk assessment on each maintenance instruction to evaluate the possible risks it may pose to the operation and maintenance object 5. The preposed risk assessment mechanism helps to identify potential security threats in advance and avoid executing instructions that may cause security problems; by comparing the evaluation threshold range with the evaluation value of the maintenance instruction, it is ensured that only maintenance instructions with an evaluation value within the acceptable range will be allowed to be executed. This threshold control mechanism further reduces the possibility of executing high-risk instructions, thereby reducing the risk of being infected with malicious code due to the execution of improper instructions. During the execution of the maintenance instruction, through the operation and maintenance gateway 4 as an intermediary, the isolation between the terminal device 3 and the operation and maintenance object 5 is realized. This isolation mechanism effectively prevents the potential malicious code on the terminal device 3 from directly infecting the operation and maintenance object 5 and improves the overall security of the system; when the evaluation value of the maintenance instruction exceeds the threshold range, the branch management platform 2 will block the access of the operation and maintenance gateway 4 to the operation and maintenance object 5. This blocking mechanism further enhances the protection ability of the system and prevents potential high-risk operations from damaging the operation and maintenance object 5. In addition, since the maintenance tasks are created and managed through the overall control management platform 1, and the execution of each maintenance instruction undergoes risk assessment and permission control, it can be conveniently audited and traced, which helps to quickly locate the source of the problem in case of a security incident and take corresponding measures for disposal.

[0090] Embodiment 2:

[0091] Based on Embodiment 1, the specific steps for the above-mentioned operation and maintenance gateway 4 to verify whether the maintenance request passes in S200 include:

[0092] S210. The above-mentioned operation and maintenance gateway 4 is configured with permission data, and the permission data includes a set of permitted user identity information, a set of permitted terminal device 3 information, a set of designated access ports on the permitted terminal device 3 for connecting to the operation and maintenance gateway 4, a set of designated access ports on the operation and maintenance gateway 4 for connecting to the permitted terminal device 3, and a set of permitted transmission protocols;

[0093] S220. Obtain the user identity information, terminal device 3 information, access port on the terminal device 3 for connecting to the operation and maintenance gateway 4, access port on the operation and maintenance gateway 4 for connecting to the terminal device 3, and transmission protocol in the above-mentioned maintenance request;

[0094] S230. Determine whether the information of the above terminal device 3 belongs to the set of permitted terminal device 3 information;

[0095] S240. If it belongs, call the permitted terminal device 3 corresponding to the above terminal device 3 to obtain the first permitted terminal device 3; call the specified access port set of the above first permitted terminal device 3 for connecting to the operation and maintenance gateway 4 to obtain the first specified access port set; call the specified access port set of the above operation and maintenance gateway 4 for connecting to the first permitted terminal device 3 to obtain the second specified access port set;

[0096] S250. Determine whether the above user identity information belongs to the set of permitted user identity information, whether the transmission protocol belongs to the set of transmission protocols, whether the access port of the terminal device 3 connecting to the operation and maintenance gateway 4 belongs to the first specified access port set, and whether the access port of the operation and maintenance gateway 4 connecting to the terminal device 3 belongs to the second specified access port set;

[0097] S260. If the above user identity information, transmission protocol, the access port of the terminal device 3 connecting to the operation and maintenance gateway 4, and the access port of the operation and maintenance gateway 4 connecting to the terminal device 3 all belong to the permitted data, the maintenance request verification passes;

[0098] S270. If any one of the above terminal device 3 information, user identity information, transmission protocol, the access port of the terminal device 3 connecting to the operation and maintenance gateway 4, and the access port of the operation and maintenance gateway 4 connecting to the terminal device 3 does not belong to the permitted data, the maintenance request verification fails.

[0099] When the above operation and maintenance gateway 4 receives a maintenance request, it will comprehensively extract information such as user identity information, terminal device 3 information, access port, and transmission protocol in the request, and compare them with the pre-configured permitted data. Only requests that meet all permitted conditions can pass the verification, greatly reducing the security risks caused by information mismatch; the verification process is divided into multiple levels. First, it is verified whether the information of the terminal device 3 belongs to the permitted range. Only when the information of the terminal device 3 passes the verification can the permitted terminal device 3 corresponding to the above terminal device 3 be successfully called, and then the user identity information, transmission protocol, access port, etc. are verified. The multi-level verification logic makes the failure of any link result in the rejection of the request, ensuring that only fully compliant maintenance requests can connect the terminal device 3 to the operation and maintenance gateway 4, effectively preventing potential threats from external connection terminal devices 3 to the operation and maintenance gateway 4, and initially reducing the external connection risk in operation and maintenance work.

[0100] In addition, since all the information involved in the verification process is detailedly recorded and used for comparison, in the event of a security incident, the source of the request, the verification process, and the result and other information can be traced through the audit log, which helps to quickly locate the root cause of the problem and take corresponding remedial measures.

[0101] Embodiment 3:

[0102] Based on any of the above embodiments, the specific steps of S400 include:

[0103] S410. Obtain the priorities of the various maintenance instructions in the above maintenance tasks, sort the various maintenance instructions according to the priorities to obtain a first maintenance instruction sequence; sort the maintenance instructions with the same priorities according to the creation time to obtain a second maintenance instruction sequence; combine the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0104] S420. According to the above third maintenance instruction sequence, sequentially obtain the maintenance instructions, parse the content data when creating the maintenance instruction to obtain a first content data set; parse the content data carried when transmitting the maintenance instruction to obtain a second content data set;

[0105] S430. Configure a first weight for the above first content data set and a second weight for the second content data set;

[0106] S440. Call the content risk database, where the content risk database includes content data and the corresponding risk values when each content data acts on the operation and maintenance object 5;

[0107] Match the first content data in the first content data set with the content data in the content risk database respectively. If the match is successful, extract the corresponding risk value as the risk value of the first content data; if the match fails, assign 0 to the risk value of the first content data;

[0108] Match the second content data in the second content data set with the content data in the content risk database respectively. When the match is successful, extract the corresponding risk value as the risk value of the second content data; if the match fails, assign 0 to the risk value of the second content data;

[0109] S450. Determine the maintenance instruction evaluation value using the following formula;

[0110]

[0111] where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0112] The above formula includes the risk values of two content data sets (the first content data set and the second content data set), which means that the maintenance instruction evaluation value is not only based on a single data source or perspective, but comprehensively considers information from multiple aspects. The fusion of such multi-source data helps to more comprehensively reflect the actual situation of the maintenance instruction and reduce miscomputation caused by one-sided information; the first weight and the second weight in the formula allow for flexible adjustment according to actual needs. Different application scenarios or data characteristics may require different weight allocations to more accurately reflect the importance and influence of each data set. This flexibility makes the formula have a wider applicability and higher practical value; by performing a weighted average of the risk values, a quantitative maintenance instruction evaluation value is provided. Quantitative evaluation helps to reduce the uncertainty brought by subjective judgment, making the evaluation results more objective, comparable, and traceable. At the same time, by quantitatively evaluating the maintenance instruction, it can provide strong support for subsequent decision-making; for example, the priority of maintenance, allocation of maintenance resources, or formulation of a maintenance plan can be determined according to the level of the maintenance instruction evaluation value. This data-based decision optimization helps to improve the efficiency and effectiveness of the maintenance work, reduce operating costs, and enhance the overall safety and reliability.

[0113] Evaluate each maintenance instruction in the above-mentioned maintenance task to ensure that potential risks can be fully understood and evaluated before performing maintenance operations. Considering that the maintenance instruction not only has an impact on the operation and maintenance object 5 during execution, but the execution order of the maintenance instruction also has an impact on the operation and maintenance object 5; therefore, first sort the maintenance instructions to obtain the third maintenance instruction sequence, so that the maintenance instructions act on the operation and maintenance object 5 in order; analyze the content data when creating the maintenance instruction (i.e., the initial state). A maintenance instruction includes several content data, which form the first content data set; obtain the content data carried by the system when transmitting the maintenance instruction (i.e., the current state), and get the second content data set. These two data sets respectively represent the content data of the initial and current states of the maintenance instruction. By identifying this content data, determine whether the content data is malicious code, thereby reducing the probability of the operation and maintenance object 5 being infected with malicious code; configure the first weight and the second weight for the first content data set and the second content data set respectively, to reflect the importance or credibility of different data sets; by matching the first content data set and the second content data set with the content risk database, obtain the risk value when the corresponding content data acts on the operation and maintenance object 5, and calculate the maintenance instruction evaluation value using the given formula, comprehensively considering the risk values of the first content data set and the second content data set and their respective weights. Specifically, the maintenance instruction evaluation value is the sum of the weighted sum of the risk value of the first content data set and the weighted sum of the risk value of the second content data set.

[0114] Example 4:

[0115] Based on any of the above embodiments, the above evaluation threshold range includes a lower threshold range and an upper threshold range;

[0116] S510. If the above maintenance instruction evaluation value belongs to the lower threshold range, the branch management platform 2 grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5;

[0117] S520. If the above maintenance instruction evaluation value belongs to the upper threshold range, the branch management platform 2 sends an authorization request to the total control management platform 1. When the branch management platform 2 receives the authorization response sent by the total control management platform 1, the branch management platform 2 grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5; when the branch management platform 2 receives the rejection response sent by the total control management platform 1, the branch management platform 2 blocks the operation and maintenance gateway 4 from accessing the operation and maintenance object 5.

[0118] Introducing the lower threshold range and the upper threshold range as a further refinement of the evaluation threshold range in the operation and maintenance process provides a more flexible and refined processing method for maintenance instructions of different risk levels. When the evaluation value of the maintenance instruction belongs to the lower threshold range, it means that the risk level of the maintenance instruction is very low and within an acceptable safety range; therefore, the branch management platform 2 directly grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5 without further authorization or approval processes. This processing method improves the operation and maintenance efficiency, reduces unnecessary waiting time, and at the same time ensures the smooth execution of low-risk maintenance instructions; however, when the evaluation value of the maintenance instruction belongs to the upper threshold range, the situation becomes more complex, indicating that the risk level of the maintenance instruction is relatively high and may involve sensitive or critical operations on the operation and maintenance object 5. Therefore, the branch management platform 2 does not directly authorize, but sends an authorization request to the total control management platform 1 to obtain higher-level approval and confirmation. The branch management platform 2 submits the detailed information and evaluation results of the maintenance instruction to the total control management platform 1, requesting the total control management platform 1 to conduct further evaluation and authorization. If the total control management platform 1 believes that the risk of the maintenance instruction is controllable and necessary for the operation and maintenance work of the operation and maintenance object 5, then it will send an authorization response to the branch management platform 2. After receiving the authorization response, the branch management platform 2 grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5 and allows the execution of the maintenance instruction; if the total control management platform 1 believes that the risk of the maintenance instruction is too high or there are other reasons not suitable for execution, then it will send a rejection response to the branch management platform 2. After receiving the rejection response, the branch management platform 2 will block the operation and maintenance gateway 4 from accessing the operation and maintenance object 5 to prevent the execution of high-risk maintenance instructions.

[0119] Through the above secondary authorization method, the operation and maintenance system can ensure the security and controllability of operation and maintenance operations while ensuring efficient operation and maintenance. For low-risk operations, the system can respond and execute quickly; while for high-risk or sensitive operations, the system can ensure the rationality and security of operations through a more rigorous approval process, not only improving the operation and maintenance efficiency but also reducing the risks in the operation and maintenance process.

[0120] Embodiment 5:

[0121] This Embodiment 5 provides a security operation and maintenance system, combined with Figure 2 , this operation and maintenance system is used to implement the above operation and maintenance method;

[0122] This operation and maintenance system includes:

[0123] The overall control management platform 1, the above overall control management platform 1 is used to create maintenance tasks for the operation and maintenance object 5;

[0124] The terminal device 3, the above terminal device 3 is communicatively connected to the overall control management platform 1, and the terminal device 3 is used to send a maintenance request to the operation and maintenance gateway 4 after receiving the maintenance task;

[0125] The operation and maintenance gateway 4, the above operation and maintenance gateway 4 is connected to the terminal device 3, and the operation and maintenance gateway 4 is used to verify whether the maintenance request passes and output the verification result;

[0126] The branch management platform 2, the above branch management platform 2 is connected to the overall control management platform 1, the operation and maintenance gateway 4 and the terminal device 3, and the branch management platform 2 is used to receive the verification result, grant access rights to the operation and maintenance gateway 4 for the verified terminal device 3; block the access of the terminal device 3 with unverified access to the operation and maintenance gateway 4;

[0127] When the above terminal device 3 accesses the operation and maintenance gateway 4, the terminal device 3 sends the maintenance task to the operation and maintenance gateway 4;

[0128] The above operation and maintenance gateway 4 executes the following steps:

[0129] Extract each maintenance instruction from the above maintenance task, evaluate the risk of each maintenance instruction acting on the operation and maintenance object 5, and obtain the maintenance instruction evaluation value;

[0130] Call the evaluation threshold interval, and judge whether the above maintenance instruction evaluation value belongs to the evaluation threshold interval;

[0131] If the above maintenance instruction evaluation value belongs to the evaluation threshold interval, the branch management platform 2 grants access rights to the operation and maintenance gateway 4 to access the operation and maintenance object 5; when the above operation and maintenance gateway 4 accesses the operation and maintenance object 5, send the corresponding maintenance instruction to the operation and maintenance object 5 for maintenance;

[0132] If the evaluation value of the above maintenance instruction does not belong to the evaluation threshold range, access of the operation and maintenance gateway 4 to the operation and maintenance object 5 is blocked.

[0133] In a specific embodiment, the operation and maintenance gateway 4 is further configured to perform the following specific steps of S200:

[0134] S210. Configure permission data, where the permission data includes a set of permission user identity information, a set of information of the permission terminal device 3, a set of specified access ports on the permission terminal device 3 for connecting to the operation and maintenance gateway 4, a set of specified access ports on the operation and maintenance gateway 4 for connecting to the permission terminal device 3, and a set of permission transmission protocols;

[0135] S220. Obtain the user identity information, terminal device 3 information, access port on the terminal device 3 for connecting to the operation and maintenance gateway 4, access port on the operation and maintenance gateway 4 for connecting to the terminal device 3, and transmission protocol in the above maintenance request;

[0136] S230. Determine whether the above terminal device 3 information belongs to the set of information of the permission terminal device 3;

[0137] S240. If it belongs, call the permission terminal device 3 corresponding to the above terminal device 3 to obtain the first permission terminal device 3; call the set of specified access ports on the first permission terminal device 3 for connecting to the operation and maintenance gateway 4 to obtain the first set of specified access ports; call the set of specified access ports on the operation and maintenance gateway 4 for connecting to the first permission terminal device 3 to obtain the second set of specified access ports;

[0138] S250. Determine whether the above user identity information belongs to the set of permission user identity information, whether the transmission protocol belongs to the set of transmission protocols, whether the access port on the terminal device 3 for connecting to the operation and maintenance gateway 4 belongs to the first set of specified access ports, and whether the access port on the operation and maintenance gateway 4 for connecting to the terminal device 3 belongs to the second set of specified access ports;

[0139] S260. If the above user identity information, transmission protocol, access port on the terminal device 3 for connecting to the operation and maintenance gateway 4, and access port on the operation and maintenance gateway 4 for connecting to the terminal device 3 all belong to the permission data, the maintenance request is verified and passed;

[0140] S270. If any one of the above terminal device 3 information, user identity information, transmission protocol, access port on the terminal device 3 for connecting to the operation and maintenance gateway 4, and access port on the operation and maintenance gateway 4 for connecting to the terminal device 3 does not belong to the permission data, the maintenance request is not verified and passed.

[0141] In a specific embodiment, the operation and maintenance gateway 4 performs the following specific steps of S400:

[0142] S410. Obtain the priorities of the various maintenance instructions in the above maintenance tasks, sort the various maintenance instructions according to the priorities to obtain a first maintenance instruction sequence; sort the maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combine the above first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence;

[0143] S420. According to the above third maintenance instruction sequence, obtain the maintenance instructions in sequence, parse the content data when creating the maintenance instruction to obtain a first content data set; parse the content data carried when transmitting the maintenance instruction to obtain a second content data set;

[0144] S430. Configure a first weight for the above first content data set and a second weight for the second content data set;

[0145] S440. Call the content risk database, where the content risk database includes content data and the corresponding risk values when each content data acts on the operation and maintenance object 5;

[0146] Match the first content data in the above first content data set with the content data in the content risk database respectively. If the match is successful, extract the corresponding risk value as the risk value of the first content data; if the match fails, assign the risk value of the first content data to 0;

[0147] Match the second content data in the above second content data set with the content data in the content risk database respectively. When the match is successful, extract the corresponding risk value as the risk value of the second content data; if the match fails, assign the risk value of the second content data to 0;

[0148] S450. Determine the maintenance instruction evaluation value using the following formula;

[0149]

[0150] where S represents the maintenance instruction evaluation value; a1 represents the first weight; a2 represents the second weight; x n represents the risk value of the nth first content data in the first content data set; N represents the number of first content data in the first content data set; y m represents the risk value of the mth second content data in the second content data set; M represents the number of second content data in the second content data set.

[0151] In a specific embodiment, the evaluation threshold interval in the above operation and maintenance gateway 4 includes a lower threshold interval and an upper threshold interval;

[0152] S510. If the above maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform 2 grants the operation and maintenance gateway 4 the permission to access the operation and maintenance object 5;

[0153] S520. If the evaluation value of the above maintenance instruction belongs to the upper threshold range, the branch management platform 2 sends an authorization request to the total control management platform 1. When the branch management platform 2 receives the authorization response sent by the total control management platform 1, the branch management platform 2 enables the operation and maintenance gateway 4 to access the operation and maintenance object 5; when the branch management platform 2 receives the rejection response sent by the total control management platform 1, the branch management platform 2 blocks the operation and maintenance gateway 4 from accessing the operation and maintenance object 5.

[0154] The specific embodiments described above further elaborate on the purpose, technical solutions, and beneficial effects of the present invention. It should be understood that the above are only specific embodiments of the present invention and are not used to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection scope of the present invention.

Claims

1. A safe operation and maintenance method, characterized in that: The following steps are involved: S100, creating a maintenance task for the operation and maintenance object (5) through the master control management platform (1); S200, after receiving the maintenance task, the terminal device (3) sends a maintenance request to the operation and maintenance gateway (4); the operation and maintenance gateway (4) verifies whether the maintenance request is passed. If the verification is passed, the branch management platform (2) enables the terminal device (3) to access the operation and maintenance gateway (4); otherwise, the terminal device (3) is blocked from accessing the operation and maintenance gateway (4); S300, when the terminal device (3) is connected to the operation and maintenance gateway (4), the maintenance task is sent to the operation and maintenance gateway (4); The operation and maintenance gateway (4) performs the following steps: S400, extracting various maintenance instructions from the maintenance task, evaluating the risk of each maintenance instruction acting on the operation and maintenance object (5), and obtaining a maintenance instruction evaluation value; S500, calling the evaluation threshold interval to determine whether the maintenance instruction evaluation value belongs to the evaluation threshold interval; If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); after the operation and maintenance gateway (4) accesses the operation and maintenance object (5), the corresponding maintenance instruction is sent to the operation and maintenance object (5) for maintenance; If the maintenance instruction evaluation value does not belong to the evaluation threshold range, blocking the operation and maintenance gateway (4) from accessing the operation and maintenance object (5); The specific steps of verifying whether the maintenance request is passed by the operation and maintenance gateway (4) in S200 include: S210, the operation and maintenance gateway (4) is configured with license data, the license data including a license user identity information set, a license terminal device (3) information set, a designated access port set on the license terminal device (3) for connecting to the operation and maintenance gateway (4), a designated access port set on the operation and maintenance gateway (4) for connecting to the license terminal device (3) and a license transmission protocol set; S220, obtaining the user identity information, the terminal device (3) information, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), the access port on the operation and maintenance gateway (4) connected to the terminal device (3) and the transmission protocol in the maintenance request; S230, determining whether the terminal device (3) information belongs to the permitted terminal device (3) information set; S240, if yes, calling the licensed terminal device (3) corresponding to the terminal device (3) to obtain a first licensed terminal device (3); calling the designated access port set used by the first licensed terminal device (3) to connect to the operation and maintenance gateway (4) to obtain a first designated access port set; calling the designated access port set used by the operation and maintenance gateway (4) to connect to the first licensed terminal device (3) to obtain a second designated access port set; S250, determining whether the user identity information belongs to a permitted user identity information set, whether the transmission protocol belongs to a transmission protocol set, whether the access port on the terminal device (3) connected to the operation and maintenance gateway (4) belongs to a first designated access port set, and whether the access port on the operation and maintenance gateway (4) connected to the terminal device (3) belongs to a second designated access port set; S260: If the user identity information, the transmission protocol, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), and the access port on the operation and maintenance gateway (4) connected to the terminal device (3) are all permitted data, then the maintenance request verification is passed; S270: If any of the terminal device (3) information, user identity information, transmission protocol, access port on the terminal device (3) connected to the operation and maintenance gateway (4), and access port on the operation and maintenance gateway (4) connected to the terminal device (3) does not belong to the permitted data, the maintenance request verification fails.

2. The operation and maintenance method according to claim 1, characterized in that: The specific steps of S400 include: S410, obtaining the priority of each maintenance instruction in the maintenance task, sorting the maintenance instructions according to the priority to obtain a first maintenance instruction sequence; sorting the maintenance instructions with the same priority according to the creation time to obtain a second maintenance instruction sequence; combining the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence; S420, according to the third maintenance instruction sequence, sequentially obtain maintenance instructions, parse the content data when the maintenance instruction is created, and obtain a first content data set; parse the content data carried when the maintenance instruction is transmitted, and obtain a second content data set; S430: configuring a first weight for the first content data set and configuring a second weight for the second content data set; S440, calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when it acts on the operation and maintenance object (5); Matching the first content data in the first content data set with the content data in the content risk database respectively, and if the match succeeds, extracting the corresponding risk value as the risk value of the first content data; if the match fails, assigning the risk value of the first content data to 0; Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; if the match fails, assigning the risk value of the second content data to 0; S450, using the following formula to determine the maintenance instruction evaluation value; ， in, Indicates the evaluation value of the maintenance instruction; represents the first weight; represents the second weight; Indicates the first content data set The risk value of the first content data; Indicates the number of first content data in the first content data set; Indicates the second content data set a risk value of the second content data; Indicates the number of second content data in the second content data set.

3. The operation and maintenance method according to claim 1, characterized in that: The evaluation threshold interval includes a lower threshold interval and an upper threshold interval; S510: If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); S520. If the maintenance instruction evaluation value belongs to the upper threshold interval, the branch management platform (2) sends an authorization request to the master control management platform (1). When the branch management platform (2) receives the authorization response sent by the master control management platform (1), the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5). When the branch management platform (2) receives the rejection response sent by the master control management platform (1), the branch management platform (2) blocks the operation and maintenance gateway (4) from accessing the operation and maintenance object (5).

4. A security operation and maintenance system, characterized in that: The operation and maintenance system is used to implement the operation and maintenance method described in any one of claims 1 to 3; The operation and maintenance system includes: A master control management platform (1), the master control management platform (1) being used to create maintenance tasks for operation and maintenance objects (5); A terminal device (3), the terminal device (3) being in communication connection with the master control management platform (1), the terminal device (3) being used to send a maintenance request to the operation and maintenance gateway (4) after receiving a maintenance task; An operation and maintenance gateway (4), the operation and maintenance gateway (4) being connected to the terminal device (3), and the operation and maintenance gateway (4) being used to verify whether the maintenance request is passed and output a verification result; A branch management platform (2), the branch management platform (2) being connected to the master control management platform (1), the operation and maintenance gateway (4) and the terminal device (3), the branch management platform (2) being used to receive the verification result, to enable the terminal device (3) that has passed the verification to access the operation and maintenance gateway (4), and to block the terminal device (3) that has failed the verification from accessing the operation and maintenance gateway (4); When the terminal device (3) is connected to the operation and maintenance gateway (4), the terminal device (3) sends the maintenance task to the operation and maintenance gateway (4); The operation and maintenance gateway (4) performs the following steps: Extract various maintenance instructions from the maintenance tasks, evaluate the risks of each maintenance instruction acting on the operation and maintenance object (5), and obtain a maintenance instruction evaluation value; Calling the evaluation threshold interval to determine whether the maintenance instruction evaluation value belongs to the evaluation threshold interval; If the maintenance instruction evaluation value belongs to the evaluation threshold range, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); after the operation and maintenance gateway (4) accesses the operation and maintenance object (5), the corresponding maintenance instruction is sent to the operation and maintenance object (5) for maintenance; If the maintenance instruction evaluation value does not belong to the evaluation threshold range, the operation and maintenance gateway (4) is blocked from accessing the operation and maintenance object (5).

5. The operation and maintenance system according to claim 4, characterized in that: The operation and maintenance gateway (4) is also used to configure license data, the license data including a license user identity information set, a license terminal device (3) information set, a designated access port set on the license terminal device (3) for connecting to the operation and maintenance gateway (4), a designated access port set on the operation and maintenance gateway (4) for connecting to the license terminal device (3) and a license transmission protocol set; Obtaining user identity information, terminal device (3) information, an access port on the terminal device (3) connected to the operation and maintenance gateway (4), and an access port and transmission protocol on the operation and maintenance gateway (4) connected to the terminal device (3) in the maintenance request; Determining whether the terminal device (3) information belongs to a permitted terminal device (3) information set; If yes, calling the licensed terminal device (3) corresponding to the terminal device (3) to obtain a first licensed terminal device (3); calling the designated access port set used by the first licensed terminal device (3) to connect to the operation and maintenance gateway (4) to obtain a first designated access port set; calling the designated access port set used by the operation and maintenance gateway (4) to connect to the first licensed terminal device (3) to obtain a second designated access port set; Determining whether the user identity information belongs to a permitted user identity information set, whether the transmission protocol belongs to a transmission protocol set, whether the access port on the terminal device (3) connected to the operation and maintenance gateway (4) belongs to a first designated access port set, and whether the access port on the operation and maintenance gateway (4) connected to the terminal device (3) belongs to a second designated access port set; If the user identity information, the transmission protocol, the access port on the terminal device (3) connected to the operation and maintenance gateway (4), and the access port on the operation and maintenance gateway (4) connected to the terminal device (3) are all permitted data, then the maintenance request verification is passed; If any of the terminal device (3) information, user identity information, transmission protocol, access port on the terminal device (3) connected to the operation and maintenance gateway (4), and access port on the operation and maintenance gateway (4) connected to the terminal device (3) does not belong to the permitted data, the maintenance request verification fails.

6. The operation and maintenance system according to claim 4, characterized in that: The operation and maintenance gateway (4) obtains the priority of each maintenance instruction in the maintenance task, sorts the maintenance instructions according to the priority, and obtains a first maintenance instruction sequence; sorts the maintenance instructions with the same priority according to the creation time, and obtains a second maintenance instruction sequence; combines the first maintenance instruction sequence and the second maintenance instruction sequence to obtain a third maintenance instruction sequence; According to the third maintenance instruction sequence, maintenance instructions are sequentially acquired, content data when the maintenance instructions are created are parsed to obtain a first content data set; content data carried when the maintenance instructions are transmitted are parsed to obtain a second content data set; configuring a first weight for the first content data set and configuring a second weight for the second content data set; Calling a content risk database, wherein the content risk database includes content data and a risk value corresponding to each content data when it acts on an operation and maintenance object (5); Matching the first content data in the first content data set with the content data in the content risk database respectively, and if the match is successful, extracting the corresponding risk value as the risk value of the first content data; If the match fails, the risk value of the first content data is assigned 0; Matching the second content data in the second content data set with the content data in the content risk database respectively, and when the match succeeds, extracting the corresponding risk value as the risk value of the second content data; If the match fails, the risk value of the second content data is assigned 0; The maintenance order evaluation value is determined using the following formula; ， in, Indicates the evaluation value of the maintenance instruction; represents the first weight; represents the second weight; Indicates the first content data set The risk value of the first content data; Indicates the number of first content data in the first content data set; Indicates the second content data set a risk value of the second content data; Indicates the number of second content data in the second content data set.

7. The operation and maintenance system according to claim 4, characterized in that: The evaluation threshold interval in the operation and maintenance gateway (4) includes a lower threshold interval and an upper threshold interval; If the maintenance instruction evaluation value belongs to the lower threshold interval, the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); If the maintenance instruction evaluation value belongs to the upper threshold interval, the branch management platform (2) sends an authorization request to the master control management platform (1); when the branch management platform (2) receives the authorization response sent by the master control management platform (1), the branch management platform (2) enables the operation and maintenance gateway (4) to access the operation and maintenance object (5); when the branch management platform (2) receives the rejection response sent by the master control management platform (1), the branch management platform (2) blocks the operation and maintenance gateway (4) from accessing the operation and maintenance object (5).

Images