Abnormal message positioning method and device, terminal equipment and storage medium

Abstract

The invention discloses an abnormal message positioning method and device, terminal equipment and a storage medium. The method comprises the following steps: acquiring all types of messages possibly appearing in a power line communication full link; for each message, carrying out message analysis so as to determine a service scene and a communication level corresponding to the message; then, for each service scene, according to a communication level sequence of the service scene, performing message analysis on the message of each communication level in sequence, and judging whether the message is an abnormal message or not; and when the message is an abnormal message, positioning the abnormal message according to the service scene and the communication level corresponding to the abnormal message. According to the invention, automatic positioning of the abnormal message is realized through message analysis, manpower is saved, and efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to an abnormal message locating method, device, terminal equipment and storage medium. Background Art

[0002] Existing message monitoring and analysis technologies monitor or analyze messages between single nodes such as the concentrator and the local communication module, the electric meter and the concentrator, and can only analyze messages of corresponding fixed types. In actual business applications, all nodes in the entire link need to operate normally to realize the corresponding business application, and the monitoring of a single node cannot locate the abnormal location. It is necessary to check the abnormalities in the message one by one from each link in the entire link to locate the abnormal location. At present, it is only possible to manually collect the messages or logs monitored at each link and then conduct manual analysis and investigation. However, there are differences in the way messages are monitored and stored in each link. The workload of manual investigation is huge, time-consuming, labor-intensive, and inefficient. Summary of the invention

[0003] The present invention provides an abnormal message positioning method, device, terminal equipment and storage medium to solve the technical problem that the abnormal message definition in the prior art needs to rely on manual labor, resulting in time-consuming, labor-intensive and low efficiency.

[0004] In order to solve the above technical problems, an embodiment of the present invention provides a method for locating abnormal messages, including:

[0005] Acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full link of power line communication;

[0006] For each message, perform message analysis to determine the business scenario and communication level corresponding to the message; the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction;

[0007] For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message;

[0008] When the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message.

[0009] As a preferred solution, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0010] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0011] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0012] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0013] As a preferred solution, the message analysis to determine the service scenario and communication level corresponding to the message includes:

[0014] Obtaining a first characteristic item in the message;

[0015] For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0016] As a preferred solution, the step of analyzing the messages of each communication layer in turn to determine whether the messages are abnormal messages includes:

[0017] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0018] On the basis of the above embodiment, another embodiment of the present invention provides an abnormal message locating device, including: a message acquisition module, a message analysis module and an abnormal message locating module;

[0019] The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full link of the power line communication;

[0020] The message analysis module is used to perform message analysis on each message to determine the business scenario and communication level corresponding to the message; wherein the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link with the message transmission direction between two adjacent nodes in the entire link of the business scenario; for each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message;

[0021] The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication level corresponding to the abnormal message when the message is an abnormal message.

[0022] As a preferred solution, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0023] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0024] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0025] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0026] As a preferred solution, the message analysis to determine the service scenario and communication level corresponding to the message includes:

[0027] Obtaining a first characteristic item in the message;

[0028] For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0029] As a preferred solution, the step of analyzing the messages of each communication layer in turn to determine whether the messages are abnormal messages includes:

[0030] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0031] Based on the above embodiments, another embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, and when the processor executes the computer program, the abnormal message locating method described in the above invention embodiment is implemented.

[0032] Based on the above embodiments, another embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method described in the above invention embodiment.

[0033] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0034] The present invention obtains all types of messages that may appear in the full link of power line communication; for each message, message analysis is performed to determine the business scenario and communication level corresponding to the message; then for each business scenario, according to the communication level order of the business scenario, message analysis is performed on the messages of each communication level in turn to determine whether the message is an abnormal message; when the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message. The present invention classifies messages according to the business scenario and communication level to which the message belongs, and then performs anomaly detection on the messages of each communication level of each business scenario. By detecting the abnormal message, the location of the abnormal message can be directly determined, that is, the location of the abnormal message in the link. The present invention realizes automatic positioning of abnormal messages through message analysis, saves manpower and improves efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a flow chart of a method for locating an abnormal message provided by an embodiment of the present invention;

[0036] Figure 2 It is a structural diagram of an abnormal message locating device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0037] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0038] Embodiment 1

[0039] Please refer to Figure 1 , is a flow chart of a method for locating an abnormal message provided by an embodiment of the present invention, comprising:

[0040] S1. Obtain a number of messages; wherein the messages are all types of messages that may appear in the full link of power line communication.

[0041] It should be noted that the full link refers to the complete link of power line communication, and the nodes on this link mainly include: master station, terminal, CCO, STA and meter.

[0042] In step S1, the message of the entire link can be obtained through the message capture device, for example: the message monitoring of each node is realized through the local communication message monitoring tool of the concentrator, the reading controller, and the message monitoring tool of the electric energy meter.

[0043] S2. Perform message analysis on each message to determine the business scenario and communication level corresponding to the message; the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link with message transmission direction between two adjacent nodes in the entire link of the business scenario.

[0044] It should be noted that there are four business scenarios involved in the present invention, namely: historical data reading, event reporting, real-time copying and data transparent transmission. Different business scenarios have different communication layer structures and different types of messages involved. The communication layer defined in the present invention refers to a link between two adjacent nodes in a link with message transmission, for example, a link where a message is sent from node A to node B.

[0045] In step S2, each message is analyzed to determine the business scenario and communication level to which the message belongs.

[0046] In a preferred embodiment, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0047] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0048] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0049] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0050] In this embodiment, the communication level results of each business scenario are explained, and these communication levels are connected in series to form the full link of the business scenario. For example, the full link of historical data reading is: master station → terminal → CCO → STA → meter → STA → CCO → terminal → master station; the full link of event reporting is: meter → STA ← → CCO ← → terminal ← → master station.

[0051] In a preferred embodiment, the performing of message analysis to determine the service scenario and communication level corresponding to the message includes:

[0052] Obtaining a first characteristic item in the message;

[0053] For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0054] It should be noted that the first feature item is a message feature used to determine the business scenario and communication level to which the message belongs. The first feature items of messages in different business scenarios and communication levels are different, and the types of first feature items include but are not limited to: message protocol type, application function code, data identifier, transmission direction bit, source address, destination address, data item, transmission direction, function code and address field, etc.

[0055] The message rule base stores the value rules of the first characteristic item of the message corresponding to each communication layer in each business scenario. The following is an explanation in the form of a table:

[0056] 1. Business scenario 1: historical data reading

[0057] (1) Communication level 1: from the master station to the terminal

[0058]

[0059] (2) Communication level 2: from the terminal to the CCO

[0060]

[0061]

[0062] (3) Communication level 3: from CCO to STA

[0063] Message characteristics Feature Value describe Message protocol type Southern Power HPLC Protocol Message Content Contains data domain message content Broadcast direction Downside Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content

[0064] (4) Communication level 4: from STA to meter

[0065]

[0066] (5) Communication level 5: from the meter to the STA

[0067]

[0068] (6) Communication level 6: from STA to CCO

[0069]

[0070] (7) Communication level 7: from CCO to terminal

[0071]

[0072] (8) Communication level 8: from the terminal to the master station

[0073]

[0074]

[0075] 2. Business scenario 2: event reporting

[0076] (1) Communication level 1: from the meter to the STA

[0077]

[0078] (2) Communication level 2: from STA to CCO

[0079]

[0080]

[0081] In particular, the message rules corresponding to the power-off event of the meter in the event report at the communication layer 2 are as follows:

[0082]

[0083] (3) Communication level 3: from CCO to STA

[0084]

[0085]

[0086] In particular, the message rules corresponding to the power-off event of the electric meter in the event report at the communication layer 2 are as follows:

[0087]

[0088] (4) Communication level 4: from CCO to terminal

[0089]

[0090]

[0091] (5) Communication Level 5: From the terminal to the CCO

[0092]

[0093] (6) Communication level 6: from the terminal to the master station

[0094]

[0095]

[0096] 3. Business scenario three: real-time copying

[0097] (1) Communication level 1: from the master station to the terminal

[0098] Message characteristics Feature Value describe Message protocol type Southern Power Grid Metering Automation Protocol Control function code AFN 11 Request Level 2 Data Transmission direction bit 0 Downside Start flag 1 Start Station Frame number Frame number Frame number Address field Terminal communication address Application layer function code 0C Read current data pn The number of the meter measurement point collected Information point identification fn DI Specify the data items to be read

[0099] (2) Communication level 2: from the terminal to the CCO

[0100]

[0101]

[0102] (3) Communication level 3: from CCO to STA

[0103] Message characteristics Feature Value describe Message protocol type Southern Power HPLC Protocol Message Content Contains data domain message content Broadcast direction Downside Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content

[0104] (4) Communication level 4: from STA to meter

[0105]

[0106] (5) Communication level 5: from the meter to the STA

[0107]

[0108]

[0109] (6) Communication level 6: from STA to CCO

[0110]

[0111] (7) Communication level 7: from CCO to terminal

[0112] 4. Business scenario 4: data transparent transmission

[0113] (1) Communication level 1: from the master station to the terminal

[0114]

[0115] (2) Communication level 2: from the terminal to the CCO

[0116]

[0117]

[0118] (3) Communication level 3: from CCO to STA

[0119] Message characteristics Feature Value describe Message protocol type Southern Power HPLC Protocol Message Content Contains data domain message content Broadcast direction Downside Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content Communication level 1 645 message

[0120] (4) Communication level 4: from STA to meter

[0121] Message characteristics Feature Value describe Message Content Communication level 1 645 message

[0122] (5) Communication level 5: from the meter to the STA

[0123]

[0124] (6) Communication level 6: from STA to CCO

[0125]

[0126]

[0127] (7) Communication level 7: from CCO to terminal

[0128]

[0129] (8) Communication level 8: from the terminal to the master station

[0130] Message characteristics Feature Value describe Message protocol type Southern Power Grid Metering Automation Protocol Control function code AFN 8 Response user data Transmission direction bit 1 Up Start flag 0 Slave station Frame number Frame number The frame number should be consistent with the downlink Address field Terminal communication address Application layer function code 10H Relay forwarding pn 00 terminal fn E3 02 00 01 Uplink relay data Data content Relay message Reply 645 message

[0131] In this embodiment, if the first characteristic item of a message satisfies the characteristic values ​​of all message characteristics in the above table, then the message belongs to the business scenario and communication level corresponding to the table.

[0132] S3. For each business scenario, according to the communication level order of the business scenario, analyze the messages of each communication level in turn to determine whether the message is an abnormal message.

[0133] In step S2, the business scenario and communication level of the message are determined, and then in step S3, the message of each communication level is analyzed in turn according to the communication level order of the business scenario to which the message belongs, so as to determine whether the message of the communication level is an abnormal message.

[0134] In a preferred embodiment, the step of analyzing the messages at each communication layer in turn to determine whether the messages are abnormal messages includes:

[0135] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0136] It should be noted that the second feature item is a message feature used to determine whether the message is an abnormal message. The first feature item of messages in different business scenarios and communication layers may be different. The types of first feature items include but are not limited to: frame sequence field, data field message content, message time, source TEI, destination TEI, frame sequence number and carried data message, etc.

[0137] In this embodiment, when performing an abnormality check on the second characteristic item of a message, it is sometimes necessary to use the second characteristic item of the preceding communication layer of the communication layer described in the message, such as the message time. Therefore, the second characteristic items of the message are uniformly saved in the memory, and when performing an abnormality check on the message, the second characteristic item of the message itself and the second characteristic items of other messages saved in the memory are checked.

[0138] The following table describes the second characteristic items of all communication levels for each business scenario:

[0139] 1. Business scenario 1: historical data reading

[0140] (1) Communication level 1: from the master station to the terminal

[0141]

[0142] (2) Communication level 2: from the terminal to the CCO

[0143]

[0144] (3) Communication level 3: from CCO to STA

[0145]

[0146]

[0147] (4) Communication level 4: from STA to meter

[0148]

[0149] (5) Communication level 5: from the meter to the STA

[0150]

[0151] (6) Communication level 6: from STA to CCO

[0152]

[0153] (7) Communication level 7: from CCO to terminal

[0154]

[0155] (8) Communication level 8: from the terminal to the master station

[0156]

[0157]

[0158] 2. Business scenario 2: event reporting

[0159] (1) Communication level 1: from the meter to the STA

[0160]

[0161] (2) Communication level 2: from STA to CCO

[0162]

[0163]

[0164] (3) Communication level 3: from CCO to STA

[0165]

[0166] (4) Communication level 4: from CCO to terminal

[0167]

[0168] (5) Communication Level 5: From the terminal to the CCO

[0169]

[0170] 3. Business scenario three: real-time copying

[0171] (1) Communication level 1: from the master station to the terminal

[0172] Message characteristics describe Message protocol type Control function code AFN Request Level 2 Data Transmission direction bit Downside Start flag Start Station Frame number Frame number Address field Application layer function code Read current data pn Information point identification fn Specify the data items to be read

[0173] (2) Communication level 2: from the terminal to the CCO

[0174]

[0175] (3) Communication level 3: from CCO to STA

[0176]

[0177] (4) Communication level 4: from STA to meter

[0178]

[0179] (5) Communication level 5: from the meter to the STA

[0180]

[0181] (6) Communication level 6: from STA to CCO

[0182]

[0183] (7) Communication level 7: from CCO to terminal

[0184]

[0185] 4. Business scenario 4: data transparent transmission

[0186] (1) Communication level 1: from the master station to the terminal

[0187] Message characteristics describe Message protocol type Control function code AFN Request Level 2 Data Transmission direction bit Downside Start flag Start Station Frame number Frame number Address field Application layer function code Relay forwarding pn Information point identification fn Relay Data Relay Type Port Number Relay message

[0188] (2) Communication level 2: from the terminal to the CCO

[0189]

[0190] (3) Communication level 3: from CCO to STA

[0191]

[0192] (4) Communication level 4: from STA to meter

[0193]

[0194] (5) Communication level 5: from the meter to the STA

[0195]

[0196] (6) Communication level 6: from STA to CCO

[0197]

[0198] (7) Communication level 7: from CCO to terminal

[0199]

[0200]

[0201] (8) Communication level 8: from the terminal to the master station

[0202] Message characteristics describe Message protocol type Control function code AFN Response user data Transmission direction bit Up Start flag Slave station Frame number The frame number should be consistent with the downlink Address field Application layer function code Relay forwarding pn terminal fn Uplink relay data Data content Reply 645 message

[0203] S4. When the message is an abnormal message, locate the abnormal message according to the business scenario and communication level corresponding to the abnormal message.

[0204] In step S4, when a message is determined to be an abnormal message, the abnormality can be directly located according to the business scenario and communication layer to which the abnormal message belongs. For example, assuming that the message corresponding to the sixth communication layer of data transparent transmission (sent from STA to CCO) is an abnormal message, the location of the abnormal message is the link from STA to CCO.

[0205] Embodiment 2

[0206] Please refer to Figure 2 , is a structural diagram of an abnormal message locating device provided by an embodiment of the present invention, comprising: a message acquisition module, a message analysis module and an abnormal message locating module;

[0207] The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full link of the power line communication;

[0208] The message analysis module is used to perform message analysis on each message to determine the business scenario and communication level corresponding to the message; wherein the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link with the message transmission direction between two adjacent nodes in the entire link of the business scenario; for each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message;

[0209] The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication level corresponding to the abnormal message when the message is an abnormal message.

[0210] In a preferred embodiment, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0211] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0212] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0213] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0214] In a preferred embodiment, the performing of message analysis to determine the service scenario and communication level corresponding to the message includes:

[0215] Obtaining a first characteristic item in the message;

[0216] For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0217] In a preferred embodiment, the step of analyzing the messages at each communication layer in turn to determine whether the messages are abnormal messages includes:

[0218] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0219] Embodiment 3

[0220] Accordingly, an embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, and when the processor executes the computer program, it implements the abnormal message locating method described in the above-mentioned embodiment of the invention.

[0221] Embodiment 4

[0222] Accordingly, an embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method described in the above-mentioned embodiment of the invention.

[0223] It should be noted that the device embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. In addition, in the accompanying drawings of the device embodiments provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art may understand and implement it without paying any creative effort.

[0224] Those skilled in the art can clearly understand that for the sake of convenience and brevity, the specific working process of the device described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0225] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The terminal device may include, but is not limited to, a processor and a memory.

[0226] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the device, and various interfaces and lines are used to connect various parts of the entire device.

[0227] The memory can be used to store the computer program, and the processor realizes various functions of the device by running or executing the computer program stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required for a function, etc.; the data storage area can store data created according to the use of the mobile phone, etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (FlashCard), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0228] The storage medium is a storage medium, and the computer program is stored in the storage medium. When the computer program is executed by the processor, the steps of each method embodiment described above can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer readable medium may include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium, etc. It should be noted that the content contained in the computer readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer readable media do not include electric carrier signals and telecommunication signals.

[0229] The above is a preferred embodiment of the present invention. It should be pointed out that a person skilled in the art can make several improvements and modifications without departing from the principle of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A method for locating abnormal messages, characterized in that: include: Acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full link of power line communication; For each message, perform message analysis to determine the business scenario and communication level corresponding to the message; the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction; For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message; When the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message.

2. The abnormal message locating method according to claim 1, characterized in that: The communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station; The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO; The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal; The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

3. The abnormal message locating method according to claim 1, characterized in that: The performing of message analysis to determine the service scenario and communication level corresponding to the message includes: Obtaining a first characteristic item in the message; For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

4. The abnormal message locating method according to claim 1, characterized in that: The performing message analysis on each communication layer message in turn to determine whether the message is an abnormal message includes: For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

5. An abnormal message locating device, characterized in that: include: Message acquisition module, message analysis module and abnormal message location module; The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full link of the power line communication; The message analysis module is used to perform message analysis on each message to determine the business scenario and communication level corresponding to the message; wherein the types of business scenarios include: historical data reading, event reporting, real-time copying and data transparent transmission; the communication level refers to the link with the message transmission direction between two adjacent nodes in the entire link of the business scenario; for each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message; The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication level corresponding to the abnormal message when the message is an abnormal message.

6. The abnormal message locating device according to claim 5, characterized in that: The communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station; The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO; The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal; The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

7. The abnormal message locating device according to claim 5, characterized in that: The performing of message analysis to determine the service scenario and communication level corresponding to the message includes: Obtaining a first characteristic item in the message; For each communication level of each business scenario, determine the message rules of the message corresponding to the communication level of the business scenario according to the preset message rule library, and judge whether the first characteristic item satisfies the message rules. If so, determine that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

8. The abnormal message locating device according to claim 5, characterized in that: The performing message analysis on each communication layer message in turn to determine whether the message is an abnormal message includes: For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

9. A terminal device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor implements the abnormal message locating method as claimed in any one of claims 1 to 8 when executing the computer program.

10. A storage medium, characterized in that: The storage medium includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method according to any one of claims 1 to 8.

Images