Space-time signal isolation protection method and system

Abstract

The invention provides a space-time signal isolation protection method and system, and relates to the technical field of information security, and the method comprises the steps: 1, constructing a multi-layer time reference architecture in a preset key system, and determining an internal time reference; 2, monitoring and collecting internal signals of a preset type of a preset key system, and establishing a reference feature model; 3, external signals are monitored and collected based on preset monitoring equipment, the external signals are classified based on the internal time reference and the reference feature model, and then abnormal signals are determined; 4, multi-stage isolation protection is started for the classified abnormal signals, and meanwhile, multi-layer early warning and corresponding processing are carried out according to the classified abnormal signals; and step 5, detecting whether the external signal is recovered to be stable, if so, gradually exiting the isolation mechanism through a progressive optimization mode, and introducing the external signal to carry out time synchronization correction. And the space-time protection and recovery capability of the system is enhanced.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a space-time signal isolation protection method and system. Background Art

[0002] As the complexity and interdependence of modern information systems continue to increase, the demand for precise time synchronization and signal isolation protection has increased significantly. Many critical systems are vulnerable to timing misalignment and signal attacks when dealing with external signal interference.

[0003] In the existing technology, some solutions achieve system protection by establishing simple time references and signal monitoring methods. A common practice is to use a fixed monitoring mechanism to check external signals, or to initiate a single level of isolation when an abnormal signal appears. However, this solution usually lacks a sophisticated multi-level isolation mechanism and is difficult to deal with complex and continuous signal interference attacks. In addition, the existing methods lack dynamic response capabilities for warning and processing abnormal signals, and it is difficult to exit isolation in time after the external signal is restored.

[0004] Therefore, the present invention provides a spatiotemporal signal isolation protection method and system. Summary of the invention

[0005] The present invention provides a space-time signal isolation protection method and system, which are used to realize intelligent monitoring, accurate classification and dynamic isolation of internal and external signals of the system by constructing a multi-level time reference architecture and a reference feature model. Through multi-level isolation and multi-layer early warning processing mechanisms, the adaptability and safety of the system in dealing with abnormal signals are improved. At the same time, a smooth transition is achieved through gradual exit after the signal is restored, which significantly enhances the space-time protection and recovery capabilities of the system.

[0006] The present invention provides a time-space signal isolation protection method, comprising: Step 1: Build a multi-level time base architecture within the preset key system and determine the internal time base; Step 2: monitor and collect internal signals of a preset type of a preset key system through a preset monitoring device, and establish a baseline feature model based on the collected internal signals; Step 3: Monitor and collect external signals based on preset monitoring equipment, and classify the external signals based on the internal time reference and the reference feature model to determine abnormal signals; Step 4: Start multi-level isolation protection for the classified abnormal signals. At the same time, perform multi-layer warnings and take corresponding measures based on the classified abnormal signals. Step 5: Check whether the external signal has returned to stability. If it has returned to stability, gradually exit the isolation mechanism through the progressive optimization mode and introduce the external signal for time synchronization correction.

[0007] The present invention provides a time-space signal isolation and protection method, wherein abnormal signals include: known abnormal signals, unknown abnormal signals, first abnormal signals and second abnormal signals.

[0008] The present invention provides a time-space signal isolation protection method to construct a multi-level time reference architecture within a preset key system and determine the internal time reference, including: Obtaining several preset time sources, and determining a master clock from the several time sources through a preset selection mechanism; Use a preset time source other than the primary clock as a backup clock.

[0009] The present invention provides a time source preset in a time-space signal isolation protection method, including: an atomic clock time source, a GPS time signal time source, an optical fiber synchronization signal, an inertial navigation system time source and a network time protocol signal time source.

[0010] The present invention provides a time-space signal isolation protection method for obtaining a plurality of preset time sources, and determining a master clock from the plurality of time sources through a preset selection mechanism, including: Obtain several preset time sources, set a preset signal receiving device corresponding to each preset time source, and then connect all preset time sources to the system; Determine the signal acquisition frequency and acquisition accuracy of each time source based on the preset time source device manual, and perform real-time sampling of the signal of each time source based on the preset sampling device; Determine a score for each time source based on a preset evaluation criterion and sampled signals of all time sources; Determine a time source whose score is greater than a preset score threshold as a first time source; Determine the priority of each first time source based on a preset time source-priority data table, and determine the first time source with a priority higher than the preset priority as the second time source; The second time source with the highest priority is determined as the master clock.

[0011] The present invention provides a spatiotemporal signal isolation protection method, which determines the score of each time source based on a preset evaluation standard and the sampled signals of all time sources, including: Determine several scoring factors based on preset evaluation criteria; Analyze the sampling signals of the time sources to obtain the score-related data of each time source; Determine the score for each time source based on all scoring factors and the score-related data for each time source:

[0012] in, is the score of the i-th time source, To rate the preset base, is the time error of the ith time source, is the preset maximum time error, is the signal acquisition frequency of the i-th time source, is the preset expected acquisition frequency, is the transmission delay value of the signal of the i-th time source, is the preset maximum delay value, is the data packet loss rate of the i-th time source, is the preset adjustment factor corresponding to the packet loss rate.

[0013] The present invention provides a spatiotemporal signal isolation protection method, which monitors and collects internal signals of preset types of preset key systems through preset monitoring devices, and establishes a reference feature model based on the collected internal signals, including: Start the preset monitoring device to sample the preset type of internal signals of the preset key system in real time; Perform multi-dimensional feature analysis on the collected data and extract signal features of preset types based on preset methods; A baseline feature model of the internal signal is established based on the extracted signal features and the preset learning algorithm.

[0014] The present invention provides a spatiotemporal signal isolation protection method, which monitors and collects external signals based on a preset monitoring device, and classifies the external signals to further determine abnormal signals, including: Starting a preset monitoring device to monitor and collect external signals, and extracting features of a preset type of signal based on a preset extraction method; Obtaining a historical external signal database to train a preset classification model; Inputting the extracted features of the preset type into the trained classification model, and outputting the first classification result, including: normal signal, known abnormal signal and unknown abnormal signal; Compare the normal signal with the internal time reference, and if the difference between the normal signal and the internal time reference exceeds a preset tolerance range, determine the signal as a first abnormal signal, and determine other normal signals except the first abnormal signal as abnormal signals to be analyzed; Based on a preset deviation analysis method, the deviation between the feature of the preset type of the abnormal signal to be analyzed and the reference feature model is obtained, and the abnormal signal to be analyzed whose deviation exceeds a preset threshold is determined as a second abnormal signal.

[0015] The present invention provides a time-space signal isolation protection system, comprising: Benchmark determination module: builds a multi-level time benchmark architecture within the preset key system and determines the internal time benchmark; Model building module: monitors and collects preset types of internal signals of preset key systems through preset monitoring devices, and establishes a benchmark feature model based on the collected internal signals; Signal determination module: monitors and collects external signals based on preset monitoring equipment, and classifies external signals based on internal time reference and reference feature model, thereby determining abnormal signals; Signal warning module: Start multi-level isolation protection for classified abnormal signals. At the same time, perform multi-layer warning and corresponding processing based on classified abnormal signals. Time correction module: detects whether the external signal has returned to stability. If so, the isolation mechanism is gradually exited through the progressive optimization mode, and the external signal is introduced for time synchronization correction.

[0016] Compared with the prior art, the present invention has the following beneficial effects: By constructing a multi-level time reference architecture and reference feature model, intelligent monitoring, precise classification and dynamic isolation of internal and external signals of the system are achieved. Through multi-level isolation and multi-layer early warning processing mechanisms, the system's adaptability and security in dealing with abnormal signals are improved. At the same time, a smooth transition is achieved through gradual exit after the signal is restored, which significantly enhances the system's time and space protection and recovery capabilities. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 It is a flow chart of a spatiotemporal signal isolation and protection method provided in an embodiment of the present invention.

[0019] Figure 2 It is a structural schematic diagram of a spatiotemporal signal isolation protection system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] Example 1 The embodiment of the present invention provides a time-space signal isolation protection method, such as Figure 1 As shown, including: Step 1: Build a multi-level time base architecture within the preset key system and determine the internal time base; Step 2: monitor and collect internal signals of preset types of preset key systems through preset monitoring devices, and establish a baseline feature model based on the collected internal signals; Step 3: Monitor and collect external signals based on preset monitoring equipment, and classify the external signals based on the internal time reference and the reference feature model to determine abnormal signals; Step 4: Start multi-level isolation protection for the classified abnormal signals. At the same time, perform multi-layer warnings and take corresponding measures based on the classified abnormal signals. Step 5: Check whether the external signal has returned to stability. If it has returned to stability, gradually exit the isolation mechanism through the progressive optimization mode and introduce the external signal for time synchronization correction.

[0022] In this embodiment, the preset critical system refers to a system that needs to be protected in specific circumstances, whose operation and safety are crucial to the overall environment. It is a clock synchronization system that requires a high-precision and stable time signal.

[0023] In this embodiment, the multi-level time reference architecture is a hierarchically designed time synchronization system that ensures that modules at different levels have independent and reliable time references. For example, the first layer can be responsible for the core timing by an internal high-precision clock, the second layer can be calibrated by the synchronized time provided by the Network Time Protocol (NTP), and the third layer can be used as a redundant or backup time reference to minimize the clock differences between the layers in abnormal situations; In this embodiment, the internal time reference is the main time reference used in critical systems, which is usually independent of the external network time and is generated by a high-precision atomic clock or a local server to ensure accurate timing even when external synchronization is lost.

[0024] In this embodiment, the preset monitoring device refers to a monitoring device installed in the system, which continuously monitors key parameters according to preset requirements. For example, the device may be a supervisory control and data acquisition system (SCADA) for acquiring data such as signals, loads, and temperatures in real time; In this embodiment, the preset type of internal signal is a collection of normal operating signals within the key system, which may include voltage, frequency, temperature or other indicators of normal operation of the system, for example, the speed signal of the generator, the temperature signal of the transformer, etc., which are all types of internal signals to ensure the smooth operation of the system; In this embodiment, the benchmark characteristic model is a reference model generated based on the collected internal signal and is used to determine the normal fluctuation range and mode of the signal.

[0025] In this embodiment, the monitoring of the preset monitoring device refers to the monitoring device collecting signals in the external environment for comparison with the internal reference, for example, for monitoring external electromagnetic waves, time synchronization signals or temperature changes, etc. The collection of these external signals helps the system to dynamically understand the changes in external conditions; In this embodiment, the external signal is a signal type from outside the critical system, including electromagnetic signals, time synchronization signals or temperature signals, etc., which are usually the data source for the system to interact with the outside world, but are easily affected by external interference.

[0026] In this embodiment, multi-level isolation protection refers to the isolation measures that the system implements step by step according to the abnormal level of the external signal. For example, for a minor abnormal signal, the first level of protection is activated to isolate only some non-critical interfaces; for a serious abnormality, the external interaction of the system is fully isolated to ensure that the internal timing and data are not affected; In this embodiment, multi-layer warning is based on multi-level isolation protection, generating corresponding warning signals for different levels of abnormal signals and starting the processing mechanism. For example, a mild abnormality may trigger a low-level alarm to alert maintenance personnel, while a severe abnormality will directly trigger an emergency alarm and record a log for subsequent investigation.

[0027] In this embodiment, the time synchronization correction is that after the external signal is restored to stability, the system gradually synchronizes by introducing an external time signal to ensure that the internal time reference is consistent with the external time. For example, the system clock is recalibrated through the Network Time Protocol (NTP) or the Global Positioning System (GPS) so that the system can be restored to the standard timing state as soon as possible after exiting isolation.

[0028] The beneficial effects of the above technical solution are: by constructing a multi-level time reference architecture and reference feature model, intelligent monitoring, accurate classification and dynamic isolation of internal and external signals of the system can be achieved; through multi-level isolation and multi-layer early warning processing mechanisms, the system's adaptability and security in dealing with abnormal signals are improved; at the same time, a smooth transition is achieved through gradual exit after the signal is restored, significantly enhancing the system's time and space protection and recovery capabilities.

[0029] Example 2 The embodiment of the present invention provides a time-space signal isolation and protection method, wherein the abnormal signal includes: a known abnormal signal, an unknown abnormal signal, a first abnormal signal and a second abnormal signal.

[0030] In this embodiment, a known abnormal signal refers to an abnormal signal that has been identified in the system and has clear characteristics. Such signals have usually been recorded in the system and have historical data or feature templates, which facilitates rapid identification and processing. For example, in a network security system, if a specific data packet format is often used maliciously, the system will record this data packet feature as a known abnormal signal and trigger protective measures when the same format is encountered later; In this embodiment, unknown abnormal signals refer to new abnormal signals whose features have not been identified and archived in the system. Such signals may represent potential new threats and require more flexible detection methods to analyze and classify. For example, in the monitoring of the power supply system, if an unknown signal causes unstable voltage of the equipment, and the signal feature has not been recorded, it is regarded as an unknown abnormal signal, and the system will take preventive isolation measures to prevent further impact; In this embodiment, the first abnormal signal: this is one of the classifications of abnormal signals by priority or type. Usually, the first abnormal signal refers to a signal that has a greater impact on the safety of system operation and requires a priority response. For example, a timing abnormality causes a time base of a critical system to be out of adjustment, which will cause a series of synchronization problems. Therefore, it is listed as the first abnormal signal, and the system will quickly isolate it to ensure the accuracy of the time base; In this embodiment, the second abnormal signal is another classification of abnormal signals by priority or type, usually referring to signals with lower impact or secondary risks. Although such signals have an impact on the operational safety of the system, they are not as urgent as the first abnormal signal. For example, a short-term and low-amplitude signal fluctuation in the system also needs to be detected and recorded, but the risk is lower and can be processed as a second abnormal signal to prioritize the protection of more important signal needs.

[0031] The beneficial effects of the above technical solution are: by distinguishing known, unknown, first and second abnormal signals, refined identification and classification processing of abnormal signals can be achieved, the system's abnormality detection and response capabilities are enhanced, thereby improving the accuracy and reliability of space-time signal protection.

[0032] Example 3 The embodiment of the present invention provides a time-space signal isolation protection method, which constructs a multi-level time reference architecture inside a preset key system and determines an internal time reference, including: Obtaining several preset time sources, and determining a master clock from the several time sources through a preset selection mechanism; Use a preset time source other than the primary clock as a backup clock.

[0033] In this embodiment, the master clock is a time source selected as the main time reference in the system, which is used to provide the core time signal of the system. The master clock is usually provided by a time source with high stability and high precision to ensure that the system relies on a reliable time reference in normal operation. Once the master clock is selected, it will become the basis for all timing operations of the system. For example, in a satellite communication system, the master clock may come from the time signal of a GPS receiver, because the GPS signal has extremely high time synchronization accuracy and stability. In this system, all satellite data transmission and communication rely on this master clock to maintain time synchronization.

[0034] In this embodiment, the backup clock is a preset backup time reference source in the system, which automatically switches when the main clock fails or is abnormal to ensure that the system's time reference is not interrupted. The existence of the backup clock enhances the redundancy and fault tolerance of the system. Usually, the time difference between the backup clock and the main clock is kept within a controllable range to reduce the impact on the system after switching. For example, in a financial transaction system, if the main clock comes from the time signal of the Network Time Protocol (NTP) server, the backup clock can be a high-precision quartz oscillator inside the system. When the network connection failure causes the NTP server to be unavailable, the system will automatically switch to the time source of the quartz oscillator to ensure the continuous stability of the transaction time. In the aviation navigation system, the main clock may be a time signal from the Global Navigation Satellite System (GNSS), while the backup clock may be provided by an onboard high-precision clock. When the satellite signal is interrupted due to interference or other reasons, the system will automatically switch to the onboard clock to provide the time reference to ensure the timing continuity of the flight navigation system.

[0035] The beneficial effects of the above technical solution are: by setting the main clock and backup clock through a multi-level time reference architecture, a stable and redundant time source is provided for key systems, ensuring that the system can automatically switch to the backup clock when the main clock is abnormal, improving the reliability of the clock source and the system's anti-interference ability, and effectively ensuring the continuity and accuracy of space-time signals.

[0036] Example 4 The embodiment of the present invention provides a space-time signal isolation protection method, wherein the preset time sources include: an atomic clock time source, a GPS time signal time source, an optical fiber synchronization signal, an inertial navigation system time source, and a network time protocol signal time source.

[0037] In this embodiment, the atomic clock time source: such as a cesium atomic clock or a rubidium atomic clock, has extremely high time stability and is suitable as a long-term master time reference; In this embodiment, the GPS time signal time source: obtains globally unified time by receiving GPS satellite signals, which is suitable for high-precision short-term time synchronization; In this embodiment, the optical fiber synchronization signal time source: a high-precision time signal transmitted through an optical fiber network, which is often used for precise synchronization within a local area; In this embodiment, the inertial navigation system time source: provides a backup time reference when the GPS signal or external time signal is interfered with; In this embodiment, the network time protocol signal time source: a time synchronization signal obtained through the Internet, is used as an auxiliary signal source.

[0038] The beneficial effects of the above technical solution are: through a diversified combination of time sources, including atomic clocks, GPS, fiber optic synchronization, inertial navigation and network time protocol, multiple redundancy and high-precision protection of space-time signals are achieved, the system's time synchronization reliability in various environments is improved, and the anti-interference and fault-tolerant capabilities of key systems are enhanced.

[0039] Example 5 The embodiment of the present invention provides a time-space signal isolation protection method, which obtains a plurality of preset time sources and determines a master clock from the plurality of time sources through a preset selection mechanism, including: Obtain several preset time sources, set a preset signal receiving device corresponding to each preset time source, and then connect all preset time sources to the system; Determine the signal acquisition frequency and acquisition accuracy of each time source based on the preset time source device manual, and perform real-time sampling of the signal of each time source based on the preset sampling device; Determine a score for each time source based on a preset evaluation criterion and sampled signals of all time sources; Determine a time source whose score is greater than a preset score threshold as a first time source; Determine the priority of each first time source based on a preset time source-priority data table, and determine the first time source with a priority higher than the preset priority as the second time source; The second time source with the highest priority is determined as the master clock.

[0040] In this embodiment, the preset signal receiving device is a device in the system for receiving various types of time source signals. Different types of receiving devices are selected as needed to ensure accurate and stable time information is obtained from various time sources. Each time source may have a dedicated receiving device to ensure signal compatibility and accuracy. For example, for GPS time signals, the preset signal receiving device is a GPS receiver that can decode the time data sent by the satellite and transmit it to the system. For example, when acquiring atomic clock time signals, the preset signal receiving device may be a dedicated frequency counter or time code interface to ensure high-precision reception of atomic clock signals. In this embodiment, the preset scoring threshold is a scoring standard for the quality of the time source, which is used to screen out time sources with signal quality that meets the requirements. The time sources are scored based on multiple factors such as the frequency, accuracy, and stability of signal acquisition. Only time sources with scores exceeding the preset threshold will enter the next round of screening. For example, in an environment with higher requirements, the preset scoring threshold may be set to 90 points. Only time sources with scores of 90 points or more in terms of sampling stability, signal strength, accuracy, etc. are listed as candidates. In this embodiment, the first time source is a time source with a score greater than a preset score threshold. These time sources have passed the preliminary screening, have a high signal quality, and can provide relatively accurate time information. The first time source constitutes a candidate group for further screening in the system. For example, if the system collects signals from four time sources such as atomic clocks, GPS, fiber optic synchronization, and inertial navigation, after scoring, the scores of atomic clocks, GPS, and fiber optic signals are higher than the preset score threshold and become the first time source, while the inertial navigation system is eliminated due to its low score.

[0041] In this embodiment, the second time source is a time source with a higher priority selected from the first time source based on a preset priority data table. The second time source is further screened from the first time source to ensure that the finally selected time source not only meets the accuracy requirements but also meets the system priority preferences. For example, if the first time source includes GPS, atomic clocks, and fiber optic synchronization signals, according to the priority data table, GPS is given the highest priority due to its global applicability and high accuracy, the atomic clock is the second priority, and the fiber optic synchronization has the lowest priority. Therefore, GPS is determined as the second time source. For example, in a financial system, assuming that the first time source includes NTP, GPS, and fiber optic synchronization signals, according to the system priority data table, fiber optic synchronization is given the highest priority due to its minimal delay and strong anti-interference ability, and is selected as the second time source as a candidate for the system's master clock.

[0042] The beneficial effects of the above technical solution are: through a multi-level scoring and priority screening mechanism, the master clock is dynamically selected from multiple time sources, and the acquisition frequency, accuracy and scoring threshold are comprehensively collected to ensure the best selection of the master clock, thereby enhancing the clock stability and anti-interference ability of the system, and effectively improving the accuracy and reliability of the space-time signal.

[0043] Example 6 The embodiment of the present invention provides a spatiotemporal signal isolation protection method, which determines the score of each time source based on a preset evaluation standard and the sampled signals of all time sources, including: Determine several scoring factors based on preset evaluation criteria; Analyze the sampling signals of the time sources to obtain the score-related data of each time source; Determine the score for each time source based on all scoring factors and the score-related data for each time source:

[0044] in, is the score of the i-th time source, To rate the preset base, is the time error of the ith time source, is the preset maximum time error, is the signal acquisition frequency of the i-th time source, is the preset expected acquisition frequency, is the transmission delay value of the signal of the i-th time source, is the preset maximum delay value, is the data packet loss rate of the i-th time source, is the preset adjustment factor corresponding to the packet loss rate.

[0045] In this embodiment, the transmission delay value refers to the time delay from when the time source sends a time signal to when the system receives the signal. Transmission delay will affect the accuracy of time synchronization. Therefore, when evaluating the time source, the smaller the delay value, the better, to ensure that the system can receive accurate time signals in a timely manner. For example, when using GPS time signals, there will be a delay of several microseconds from when the satellite sends the signal to when the ground receiver obtains the signal. This delay needs to be recorded as a transmission delay value to determine whether the response speed of the time source in the system meets the requirements. For example, the transmission delay of the optical fiber synchronization signal is usually very small (a few nanoseconds to microseconds), while the delay in obtaining the time signal through a wireless network may be as high as several milliseconds. The system will adjust the score of the time source based on these transmission delay values; In this embodiment, the preset adjustment factor is a weight or adjustment parameter for a specific scoring factor, which is used to adjust the influence of the scoring factor. For example, if the data packet loss rate has a greater impact on the time synchronization of the system, a higher adjustment factor value can be set to give it a greater weight when calculating the score. In the time synchronization system of the server cluster, if the system has very high requirements for the reliability of time signal transmission, the preset adjustment factor of the data packet loss rate can be set to 2, so that the weight of this factor is larger, thereby reducing the score of the time source with a higher packet loss rate; In this embodiment, the data packet loss rate refers to the probability or percentage of the time signal losing data packets during transmission. The packet loss rate directly affects the stability and accuracy of time synchronization. The higher the packet loss rate, the lower the reliability of the time signal. When scoring, time sources with higher packet loss rates will be deducted points, thereby reducing their priority as the master clock. For example, in a system that receives time signals through the Network Time Protocol (NTP), if the packet loss rate exceeds 1%, it may cause inaccurate time synchronization or intermittent interruptions. When scoring, the score of the NTP signal source whose packet loss rate exceeds the preset threshold will be significantly reduced.

[0046] The beneficial effects of the above technical solution are: through real-time acquisition and multi-dimensional feature analysis, a benchmark feature model is established for key systems, achieving high-precision benchmark management of internal signals. With the help of preset learning algorithms, the system can dynamically adapt to changes in signal characteristics, effectively improve the sensitivity and accuracy of anomaly detection, thereby strengthening the system's self-monitoring and anti-interference capabilities.

[0047] Example 7 The embodiment of the present invention provides a spatiotemporal signal isolation protection method, which monitors and collects internal signals of preset types of preset key systems through a preset monitoring device, and establishes a reference feature model based on the collected internal signals, including: Start the preset monitoring device to sample the preset type of internal signals of the preset key system in real time; Perform multi-dimensional feature analysis on the collected data and extract signal features of preset types based on preset methods; A baseline feature model of the internal signal is established based on the extracted signal features and the preset learning algorithm.

[0048] In this embodiment, the preset feature types include: time domain features, frequency domain features, time-frequency features, statistical features, nonlinear features, and delay features; In this embodiment, the preset learning methods include: statistical analysis method: such as setting mean and variance thresholds to establish a model of the normal fluctuation range of the signal; time series analysis method: using a time series model (such as ARIMA, LSTM, etc.) to analyze the time series characteristics of the signal; frequency domain analysis: extracting the spectral characteristics of the signal through Fourier transform to identify normal and abnormal signals in the frequency dimension.

[0049] The beneficial effects of the above technical solution are: a dynamic score is assigned to each time source through a multi-dimensional scoring system, and key factors such as time error, acquisition frequency, transmission delay and packet loss rate are comprehensively considered, thereby ensuring high accuracy and stability of time source selection, enabling the system to give priority to the optimal time source and improve the synchronization reliability and anti-interference ability of space-time signals.

[0050] Example 8 The embodiment of the present invention provides a spatiotemporal signal isolation protection method, which monitors and collects external signals based on a preset monitoring device, and classifies the external signals to further determine abnormal signals, including: Starting a preset monitoring device to monitor and collect external signals, and extracting features of a preset type of signal based on a preset extraction method; Obtaining a historical external signal database to train a preset classification model; Inputting the extracted features of the preset type into the trained classification model, and outputting the first classification result, including: normal signal, known abnormal signal and unknown abnormal signal; Compare the normal signal with the internal time reference, and if the difference between the normal signal and the internal time reference exceeds a preset tolerance range, determine the signal as a first abnormal signal, and determine other normal signals except the first abnormal signal as abnormal signals to be analyzed; Based on a preset deviation analysis method, the deviation between the feature of the preset type of the abnormal signal to be analyzed and the reference feature model is obtained, and the abnormal signal to be analyzed whose deviation exceeds a preset threshold is determined as a second abnormal signal.

[0051] In this embodiment, the preset classification model is a model built by machine learning or rule algorithms, which is used to identify and classify signal types. The system uses historical external signal data to train the classification model so that it can learn the regularity and classification criteria of different signal features. In the context of the present invention, the preset classification model helps the system to classify the collected signals into normal signals, known abnormal signals, and unknown abnormal signals. For example, the system uses external traffic data to establish a preset classification model. Through the machine learning algorithm, the model can classify the signal data into normal traffic, known malicious traffic (such as a specific type of attack), and unknown potential malicious traffic.

[0052] In this embodiment, the preset deviation analysis method is an analysis method for quantifying the deviation between a signal and a benchmark feature model. The method determines whether a signal is inconsistent with a system benchmark based on a specific feature deviation index, thereby helping to identify potential anomalies. Typically, the deviation analysis method sets a preset threshold, and deviations exceeding the threshold will be judged as anomalies. For example, the preset deviation analysis method may use indicators such as delay deviation and signal strength fluctuation. If the signal monitored by the system exceeds the threshold in terms of fluctuation deviation of transaction timestamps or price data, it will be judged as a potential anomaly to prevent malicious transactions or system errors.

[0053] The beneficial effects of the above technical solution are: by combining the preset classification model and deviation analysis, a multi-layer screening mechanism is established to achieve accurate classification and anomaly identification of external signals. First, normal and abnormal signals are preliminarily screened through the classification model, and then in-depth detection is performed based on the time benchmark and deviation threshold to identify potential risks, ensuring the high reliability and security of the system's space-time signals, effectively isolating abnormal interference, and improving the stability and protection capabilities of key systems.

[0054] Example 9 The embodiment of the present invention provides a time-space signal isolation protection system, such as Figure 2 As shown, including: Benchmark determination module: builds a multi-level time benchmark architecture within the preset key system and determines the internal time benchmark; Model building module: monitors and collects preset types of internal signals of preset key systems through preset monitoring devices, and establishes a benchmark feature model based on the collected internal signals; Signal determination module: monitors and collects external signals based on preset monitoring equipment, and classifies external signals based on internal time reference and reference feature model, thereby determining abnormal signals; Signal warning module: Start multi-level isolation protection for classified abnormal signals. At the same time, perform multi-layer warning and corresponding processing based on classified abnormal signals. Time correction module: detects whether the external signal has returned to stability. If so, the isolation mechanism is gradually exited through the progressive optimization mode, and the external signal is introduced for time synchronization correction.

[0055] The beneficial effects of the above technical solution are: by constructing a multi-level time reference architecture and reference feature model, intelligent monitoring, accurate classification and dynamic isolation of internal and external signals of the system can be achieved; through multi-level isolation and multi-layer early warning processing mechanisms, the system's adaptability and security in dealing with abnormal signals are improved; at the same time, a smooth transition is achieved through gradual exit after the signal is restored, significantly enhancing the system's time and space protection and recovery capabilities.

[0056] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A spatiotemporal signal isolation protection method, characterized in that: include: Step 1: Build a multi-level time base architecture within the preset key system and determine the internal time base; Step 2: monitor and collect internal signals of a preset type of a preset key system through a preset monitoring device, and establish a baseline feature model based on the collected internal signals; Step 3: Monitor and collect external signals based on preset monitoring equipment, and classify the external signals based on the internal time reference and the reference feature model to determine abnormal signals; Step 4: Start multi-level isolation protection for the classified abnormal signals. At the same time, perform multi-layer warnings and take corresponding measures based on the classified abnormal signals. Step 5: Check whether the external signal has returned to stability. If it has returned to stability, gradually exit the isolation mechanism through the progressive optimization mode and introduce the external signal for time synchronization correction.

2. A spatiotemporal signal isolation protection method according to claim 1, characterized in that: Abnormal signals include: known abnormal signals, unknown abnormal signals, first abnormal signals and second abnormal signals.

3. A spatiotemporal signal isolation protection method according to claim 1, characterized in that: Build a multi-level time base architecture within the preset key systems and determine the internal time base, including: Obtaining several preset time sources, and determining a master clock from the several time sources through a preset selection mechanism; Use a preset time source other than the primary clock as a backup clock.

4. A spatiotemporal signal isolation protection method according to claim 3, characterized in that: The preset time sources include: atomic clock time source, GPS time signal time source, optical fiber synchronization signal, inertial navigation system time source and network time protocol signal time source.

5. A spatiotemporal signal isolation protection method according to claim 3, characterized in that: Obtain several preset time sources and determine the master clock from among them through a preset selection mechanism, including: Obtain several preset time sources, set a preset signal receiving device corresponding to each preset time source, and then connect all preset time sources to the system; Determine the signal acquisition frequency and acquisition accuracy of each time source based on the preset time source device manual, and perform real-time sampling of the signal of each time source based on the preset sampling device; Determine a score for each time source based on a preset evaluation criterion and sampled signals of all time sources; Determine a time source whose score is greater than a preset score threshold as a first time source; Determine the priority of each first time source based on a preset time source-priority data table, and determine the first time source with a priority higher than the preset priority as the second time source; The second time source with the highest priority is determined as the master clock.

6. A spatiotemporal signal isolation protection method according to claim 5, characterized in that: The score of each time source is determined based on preset evaluation criteria and the sampled signals of all time sources, including: Determine several scoring factors based on preset evaluation criteria; Analyze the sampling signals of the time sources to obtain the score-related data of each time source; Determine the score for each time source based on all scoring factors and the score-related data for each time source: in, is the score of the i-th time source, To rate the preset base, is the time error of the ith time source, is the preset maximum time error, is the signal acquisition frequency of the i-th time source, is the preset expected acquisition frequency, is the transmission delay value of the signal of the i-th time source, is the preset maximum delay value, is the data packet loss rate of the i-th time source, is the preset adjustment factor corresponding to the packet loss rate.

7. A spatiotemporal signal isolation protection method according to claim 1, characterized in that: The preset monitoring device monitors and collects the preset type of internal signals of the preset key system, and establishes a baseline characteristic model based on the collected internal signals, including: Start the preset monitoring device to sample the preset type of internal signals of the preset key system in real time; Perform multi-dimensional feature analysis on the collected data and extract signal features of preset types based on preset methods; A baseline feature model of the internal signal is established based on the extracted signal features and the preset learning algorithm.

8. A spatiotemporal signal isolation protection method according to claim 1, characterized in that: Based on the preset monitoring equipment, external signals are monitored and collected, and the external signals are classified to determine abnormal signals, including: Starting a preset monitoring device to monitor and collect external signals, and extracting features of a preset type of signal based on a preset extraction method; Obtaining a historical external signal database to train a preset classification model; Input the extracted features of the preset type into the trained classification model, and output the first classification result, including: normal signal, known abnormal signal and unknown abnormal signal; Compare the normal signal with the internal time reference, and if the difference between the normal signal and the internal time reference exceeds a preset tolerance range, determine the signal as a first abnormal signal, and determine other normal signals except the first abnormal signal as abnormal signals to be analyzed; Based on a preset deviation analysis method, the deviation between the feature of the preset type of the abnormal signal to be analyzed and the reference feature model is obtained, and the abnormal signal to be analyzed whose deviation exceeds a preset threshold is determined as a second abnormal signal.

9. A space-time signal isolation protection system, characterized in that: include: Benchmark determination module: builds a multi-level time benchmark architecture within the preset key system and determines the internal time benchmark; Model building module: monitors and collects preset types of internal signals of preset key systems through preset monitoring devices, and establishes a benchmark feature model based on the collected internal signals; Signal determination module: monitors and collects external signals based on preset monitoring equipment, and classifies external signals based on internal time reference and reference feature model, thereby determining abnormal signals; Signal warning module: Start multi-level isolation protection for classified abnormal signals. At the same time, perform multi-layer warning and corresponding processing based on classified abnormal signals. Time correction module: detects whether the external signal has returned to stability. If so, the isolation mechanism is gradually exited through the progressive optimization mode, and the external signal is introduced for time synchronization correction.

Images