An abnormal message positioning method and device, a terminal device and a storage medium

Abstract

The application discloses an abnormal message positioning method and device, terminal equipment and storage medium, wherein the method comprises the following steps: acquiring all types of messages that may appear in a power line communication full link; for each message, performing message analysis to determine a corresponding business scenario and communication level of the message; then for each business scenario, in the order of the communication level of the business scenario, performing message analysis on the messages of each communication level in sequence to determine whether the message is an abnormal message; when the message is an abnormal message, positioning the abnormal message according to the corresponding business scenario and communication level of the abnormal message. The application realizes automatic positioning of abnormal messages through message analysis, saves manpower and improves efficiency.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to an abnormal message locating method, device, terminal equipment and storage medium. Background Art

[0002] Existing message monitoring and analysis technologies monitor or analyze messages between a single node, such as the concentrator and local communication module, or between the meter and the concentrator, and can only analyze messages of a fixed type. In actual business applications, the normal operation of all nodes in the entire link is required to realize the corresponding business application. However, monitoring a single node cannot locate the abnormal location. The abnormality in the message must be checked one by one from all links in the entire link to locate the abnormal location. Currently, the only way to manually collect the messages or logs monitored at each link and then conduct manual analysis and troubleshooting. However, the methods of monitoring and storing messages at each link vary. The workload of manual troubleshooting is huge, time-consuming, labor-intensive, and inefficient. Summary of the Invention

[0003] The present invention provides a method, apparatus, terminal device and storage medium for locating abnormal messages, so as to solve the technical problem that the definition of abnormal messages in the prior art needs to rely on manual labor, resulting in time-consuming, labor-intensive and low efficiency.

[0004] In order to solve the above technical problems, an embodiment of the present invention provides a method for locating abnormal messages, including:

[0005] Acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link;

[0006] For each message, perform message analysis to determine the business scenario and communication level corresponding to the message. Business scenarios include historical data reading, event reporting, real-time data reading, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction.

[0007] For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message;

[0008] When the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message.

[0009] As a preferred solution, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0010] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0011] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0012] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0013] As a preferred solution, the message analysis to determine the service scenario and communication level corresponding to the message includes:

[0014] Obtaining a first characteristic item in the message;

[0015] For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0016] As a preferred solution, the message analysis of each communication layer is performed in sequence to determine whether the message is an abnormal message, including:

[0017] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0018] Based on the above embodiment, another embodiment of the present invention provides an abnormal message locating device, comprising: a message acquisition module, a message analysis module and an abnormal message locating module;

[0019] The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link;

[0020] The message analysis module is used to analyze each message and determine the business scenario and communication level corresponding to the message. The types of business scenarios include: historical data reading, event reporting, real-time data reading, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction. For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message.

[0021] The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication layer corresponding to the abnormal message when the message is an abnormal message.

[0022] As a preferred solution, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0023] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0024] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0025] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0026] As a preferred solution, the message analysis to determine the service scenario and communication level corresponding to the message includes:

[0027] Obtaining a first characteristic item in the message;

[0028] For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0029] As a preferred solution, the message analysis of each communication layer is performed in sequence to determine whether the message is an abnormal message, including:

[0030] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0031] Based on the above embodiments, another embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, the abnormal message locating method described in the above embodiment of the invention is implemented.

[0032] Based on the above embodiment, another embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method described in the above embodiment of the invention.

[0033] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0034] The present invention obtains all types of messages that may appear in the entire power line communication link; for each message, message analysis is performed to determine the business scenario and communication level corresponding to the message; then for each business scenario, according to the communication level order of the business scenario, message analysis is performed on the messages of each communication level in turn to determine whether the message is an abnormal message; when the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message. The present invention classifies the messages according to the business scenario and communication level to which the message belongs, and then performs anomaly detection on the messages of each communication level of each business scenario. Once an abnormal message is detected, the location of the abnormal message can be directly determined, that is, the location of the abnormal message in the link. The present invention realizes automatic positioning of abnormal messages through message analysis, saves manpower and improves efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 This is a flow chart of a method for locating an abnormal message provided by one embodiment of the present invention;

[0036] Figure 2 It is a structural diagram of an abnormal message locating device provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0037] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0038] Example 1

[0039] Please refer to Figure 1 , which is a flow chart of a method for locating an abnormal message provided by one embodiment of the present invention, including:

[0040] S1. Acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link.

[0041] It should be noted that the full link refers to the complete link of power line communication, and the nodes on this link mainly include: master station, terminal, CCO, STA and meter.

[0042] In step S1, the message capture device can obtain the messages of the entire link, for example, the message monitoring of each node is realized through the local communication message monitoring tool of the concentrator, the reading controller, and the power meter message monitoring tool.

[0043] S2. Perform message analysis on each message to determine the business scenario and communication level corresponding to the message. Business scenarios include historical data reading, event reporting, real-time data transmission, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction.

[0044] It should be noted that this invention covers four business scenarios: historical data reading, event reporting, real-time data logging, and data transparent transmission. Different business scenarios require different communication layer structures and different message types. The communication layer defined in this invention refers to a link between two adjacent nodes in a link with message transmission, for example, a link from node A to node B.

[0045] In step S2, each message is analyzed to determine the business scenario and communication level to which the message belongs.

[0046] In a preferred embodiment, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0047] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0048] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0049] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0050] This example illustrates the communication layer results for each business scenario. These communication layers, when connected in series, form the full chain of the business scenario. For example, the full chain for reading historical data is: master station → terminal → CCO → STA → meter → STA → CCO → terminal → master station; the full chain for reporting events is: meter → STA ← → CCO ← → terminal ← → master station.

[0051] In a preferred embodiment, the performing of message analysis to determine the service scenario and communication level corresponding to the message includes:

[0052] Obtaining a first characteristic item in the message;

[0053] For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0054] It should be noted that the first feature item is a message characteristic used to determine the service scenario and communication layer to which the message belongs. The first feature item of messages in different service scenarios and communication layers varies. Types of first feature items include but are not limited to: message protocol type, application function code, data identifier, transmission direction bit, source address, destination address, data item, transmission direction, function code, and address field.

[0055] The message rule base stores the value rules for the first characteristic item of the message corresponding to each communication layer in each business scenario. The following is an explanation in the form of a table:

[0056] 1. Business Scenario 1: Historical Data Reading

[0057] (1) Communication level 1: from the master station to the terminal

[0058]

[0059] (2) Communication Level 2: From the terminal to the CCO

[0060]

[0061]

[0062] (3) Communication level 3: from CCO to STA

[0063] Message characteristics Feature Value describe Message protocol type Southern Power Grid HPLC Protocol Message content Contains data field message content Broadcast direction Downward Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content

[0064] (4) Communication level 4: from STA to meter

[0065]

[0066] (5) Communication Level 5: From the meter to the STA

[0067]

[0068] (6) Communication Level 6: From STA to CCO

[0069]

[0070] (7) Communication Level 7: From CCO to Terminal

[0071]

[0072] (8) Communication level 8: from the terminal to the master station

[0073]

[0074]

[0075] 2. Business Scenario 2: Event Reporting

[0076] (1) Communication level 1: from the meter to the STA

[0077]

[0078] (2) Communication Level 2: From STA to CCO

[0079]

[0080]

[0081] In particular, the message rules corresponding to the power-off event of the meter in the event report at the communication layer 2 are as follows:

[0082]

[0083] (3) Communication level 3: from CCO to STA

[0084]

[0085]

[0086] In particular, the message rules corresponding to the power-off event of the meter in the event report at the communication layer 2 are as follows:

[0087]

[0088] (4) Communication Level 4: From CCO to Terminal

[0089]

[0090]

[0091] (5) Communication Level 5: From the terminal to the CCO

[0092]

[0093] (6) Communication level 6: from the terminal to the master station

[0094]

[0095]

[0096] 3. Business scenario three: real-time copying

[0097] (1) Communication level 1: from the master station to the terminal

[0098] Message characteristics Feature Value describe Message protocol type Southern Power Grid Metering Automation Protocol Control function code AFN 11 Requesting Level 2 Data Transmission direction bit 0 Downward Start flag 1 Start Station Frame number Frame number Frame number Address field Terminal communication address Application layer function code 0C Read current data pn Collected meter measurement point number Information point identification fn DI Specify the data items to be copied

[0099] (2) Communication Level 2: From the terminal to the CCO

[0100]

[0101]

[0102] (3) Communication level 3: from CCO to STA

[0103] Message characteristics Feature Value describe Message protocol type Southern Power Grid HPLC Protocol Message content Contains data field message content Broadcast direction Downward Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content

[0104] (4) Communication level 4: from STA to meter

[0105]

[0106] (5) Communication Level 5: From the meter to the STA

[0107]

[0108]

[0109] (6) Communication Level 6: From STA to CCO

[0110]

[0111] (7) Communication Level 7: From CCO to Terminal

[0112] 4. Business Scenario 4: Data Transmission

[0113] (1) Communication level 1: from the master station to the terminal

[0114]

[0115] (2) Communication Level 2: From the terminal to the CCO

[0116]

[0117]

[0118] (3) Communication level 3: from CCO to STA

[0119] Message characteristics Feature Value describe Message protocol type Southern Power Grid HPLC Protocol Message content Contains data field message content Broadcast direction Downward Message port number 0x11 Communication module forwarding Business Logo 0x11 Data is transparently transmitted to the device Source Address Masternode address Destination Address Meter address Forwarding data content Data field message content Communication level 1 645 message

[0120] (4) Communication level 4: from STA to meter

[0121] Message characteristics Feature Value describe Message content Communication level 1 645 message

[0122] (5) Communication Level 5: From the meter to the STA

[0123]

[0124] (6) Communication Level 6: From STA to CCO

[0125]

[0126]

[0127] (7) Communication Level 7: From CCO to Terminal

[0128]

[0129] (8) Communication level 8: from the terminal to the master station

[0130] Message characteristics Feature Value describe Message protocol type Southern Power Grid Metering Automation Protocol Control function code AFN 8 Response user data Transmission direction bit 1 Upward Start flag 0 Slave station Frame number Frame number The frame sequence number should be consistent with the downlink Address field Terminal communication address Application layer function code 10H Relay forwarding pn 00 terminal fn E3 02 00 01 Uplink relay data Data content Relay message Reply 645 message

[0131] In this embodiment, if the first feature item of a message satisfies the feature values ​​of all message features in a certain table above, then the message belongs to the business scenario and communication level corresponding to the table.

[0132] S3. For each business scenario, according to the communication level order of the business scenario, perform message analysis on the messages of each communication level in turn to determine whether the message is an abnormal message.

[0133] In step S2, the business scenario and communication level of the message are determined. Then, in step S3, the message of each communication level is analyzed in turn according to the communication level order of the business scenario to which the message belongs to determine whether the message of the communication level is an abnormal message.

[0134] In a preferred embodiment, the step of sequentially analyzing the messages at each communication layer to determine whether the messages are abnormal messages includes:

[0135] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0136] It should be noted that the second feature item is used to determine whether a message is abnormal. The first feature item of messages in different service scenarios and communication layers may vary. Types of first feature items include but are not limited to: frame sequence field, data field message content, message time, source TEI, destination TEI, frame sequence number, and carried data message.

[0137] In this embodiment, when performing anomaly checks on the second characteristic item of a message, it is sometimes necessary to use the second characteristic item of the communication layer preceding the communication layer described in the message, such as the message time. Therefore, the second characteristic items of the message are uniformly stored in the memory. When performing anomaly checks on the message, the second characteristic item of the message itself and the second characteristic items of other messages stored in the memory are used for the check.

[0138] The following table describes the second characteristic items of all communication layers in each business scenario:

[0139] 1. Business Scenario 1: Historical Data Reading

[0140] (1) Communication level 1: from the master station to the terminal

[0141]

[0142] (2) Communication Level 2: From the terminal to the CCO

[0143]

[0144] (3) Communication level 3: from CCO to STA

[0145]

[0146]

[0147] (4) Communication level 4: from STA to meter

[0148]

[0149] (5) Communication Level 5: From the meter to the STA

[0150]

[0151] (6) Communication Level 6: From STA to CCO

[0152]

[0153] (7) Communication Level 7: From CCO to Terminal

[0154]

[0155] (8) Communication level 8: from the terminal to the master station

[0156]

[0157]

[0158] 2. Business Scenario 2: Event Reporting

[0159] (1) Communication level 1: from meter to STA

[0160]

[0161] (2) Communication Level 2: From STA to CCO

[0162]

[0163]

[0164] (3) Communication level 3: from CCO to STA

[0165]

[0166] (4) Communication Level 4: From CCO to Terminal

[0167]

[0168] (5) Communication Level 5: From the terminal to the CCO

[0169]

[0170] 3. Business scenario three: real-time copying

[0171] (1) Communication level 1: from the master station to the terminal

[0172] Message characteristics describe Message protocol type Control function code AFN Requesting Level 2 Data Transmission direction bit Downward Start flag Start Station Frame number Frame number Address field Application layer function code Read current data pn Information point identification fn Specify the data items to be copied

[0173] (2) Communication Level 2: From the terminal to the CCO

[0174]

[0175] (3) Communication level 3: from CCO to STA

[0176]

[0177] (4) Communication level 4: from STA to meter

[0178]

[0179] (5) Communication Level 5: From the meter to the STA

[0180]

[0181] (6) Communication Level 6: From STA to CCO

[0182]

[0183] (7) Communication Level 7: From CCO to Terminal

[0184]

[0185] 4. Business Scenario 4: Data Transmission

[0186] (1) Communication level 1: from the master station to the terminal

[0187] Message characteristics describe Message protocol type Control function code AFN Requesting Level 2 Data Transmission direction bit Downward Start flag Start Station Frame number Frame number Address field Application layer function code Relay forwarding pn Information point identification fn Relay Data Relay Type Port number Relay message

[0188] (2) Communication Level 2: From the terminal to the CCO

[0189]

[0190] (3) Communication level 3: from CCO to STA

[0191]

[0192] (4) Communication level 4: from STA to meter

[0193]

[0194] (5) Communication Level 5: From the meter to the STA

[0195]

[0196] (6) Communication Level 6: From STA to CCO

[0197]

[0198] (7) Communication Level 7: From CCO to Terminal

[0199]

[0200]

[0201] (8) Communication level 8: from the terminal to the master station

[0202] Message characteristics describe Message protocol type Control function code AFN Response user data Transmission direction bit Upward Start flag Slave station Frame number The frame sequence number should be consistent with the downlink Address field Application layer function code Relay forwarding pn terminal fn Uplink relay data Data content Reply 645 message

[0203] S4. When the message is an abnormal message, locate the abnormal message according to the business scenario and communication level corresponding to the abnormal message.

[0204] In step S4, if a message is determined to be an abnormal message, the abnormality can be directly located based on the business scenario and communication layer to which the abnormal message belongs. For example, if the message corresponding to the sixth communication layer of data transparent transmission (sent from STA to CCO) is an abnormal message, the location of the abnormal message is the link from STA to CCO.

[0205] Example 2

[0206] Please refer to Figure 2 , is a structural diagram of an abnormal message locating device provided by an embodiment of the present invention, comprising: a message acquisition module, a message analysis module and an abnormal message locating module;

[0207] The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link;

[0208] The message analysis module is used to analyze each message and determine the business scenario and communication level corresponding to the message. The types of business scenarios include: historical data reading, event reporting, real-time data reading, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction. For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message.

[0209] The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication layer corresponding to the abnormal message when the message is an abnormal message.

[0210] In a preferred embodiment, the communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station;

[0211] The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO;

[0212] The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal;

[0213] The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

[0214] In a preferred embodiment, the performing of message analysis to determine the service scenario and communication level corresponding to the message includes:

[0215] Obtaining a first characteristic item in the message;

[0216] For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

[0217] In a preferred embodiment, the step of sequentially analyzing the messages at each communication layer to determine whether the messages are abnormal messages includes:

[0218] For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

[0219] Example 3

[0220] Accordingly, an embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, it implements the abnormal message locating method described in the above-mentioned embodiment of the invention.

[0221] Example 4

[0222] Accordingly, an embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method described in the above embodiment of the invention.

[0223] It should be noted that the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed across multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. In addition, in the drawings of the device embodiments provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art can understand and implement the present invention without inventive work.

[0224] Those skilled in the art will clearly understand that for the sake of convenience and brevity, the specific working process of the device described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0225] The terminal device may be a computing device such as a desktop computer, a notebook computer, a PDA, a cloud server, etc. The terminal device may include, but is not limited to, a processor and a memory.

[0226] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the device, connecting various parts of the entire device using various interfaces and lines.

[0227] The memory can be used to store the computer program, and the processor realizes various functions of the device by running or executing the computer program stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required for a function, etc.; the data storage area can store data created according to the use of the mobile phone, etc. In addition, the memory can include a high-speed random access memory and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (FlashCard), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0228] The storage medium is a storage medium, and the computer program is stored in the storage medium. When the computer program is executed by the processor, it can implement the steps of the above-mentioned method embodiments. The computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device that can carry the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electric carrier signals and telecommunication signals.

[0229] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A method for locating abnormal messages, characterized in that: include: Acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link; For each message, perform message analysis to determine the business scenario and communication level corresponding to the message. Business scenarios include historical data reading, event reporting, real-time data reading, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction. For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message; When the message is an abnormal message, the abnormal message is located according to the business scenario and communication level corresponding to the abnormal message.

2. The abnormal message locating method according to claim 1, characterized in that: The communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station; The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO; The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal; The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

3. The abnormal message locating method according to claim 1, characterized in that: The message analysis to determine the service scenario and communication level corresponding to the message includes: Obtaining a first characteristic item in the message; For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

4. The abnormal message locating method according to claim 1, characterized in that: The step of analyzing the messages at each communication layer in turn to determine whether the messages are abnormal messages includes: For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

5. An abnormal message locating device, characterized in that: include: Message acquisition module, message analysis module and abnormal message location module; The message acquisition module is used to acquire a plurality of messages; wherein the messages are all types of messages that may appear in the full power line communication link; The message analysis module is used to analyze each message and determine the business scenario and communication level corresponding to the message. The types of business scenarios include: historical data reading, event reporting, real-time data reading, and data transparent transmission. The communication level refers to the link between two adjacent nodes in the entire link of the business scenario with the message transmission direction. For each business scenario, according to the communication level order of the business scenario, the message of each communication level is analyzed in turn to determine whether the message is an abnormal message. The abnormal message locating module is used to locate the abnormal message according to the business scenario and communication layer corresponding to the abnormal message when the message is an abnormal message.

6. The abnormal message locating device according to claim 5, characterized in that: The communication levels for reading historical data include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station; The communication levels of event reporting include: from meter to STA, from STA to CCO, from CCO to STA, from CCO to terminal, and from terminal to CCO; The communication levels of real-time reading include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, and from the CCO to the terminal; The communication levels of data transparent transmission include: from the master station to the terminal, from the terminal to the CCO, from the CCO to the STA, from the STA to the meter, from the meter to the STA, from the STA to the CCO, from the CCO to the terminal, and from the terminal to the master station.

7. The abnormal message locating device according to claim 5, characterized in that: The message analysis to determine the service scenario and communication level corresponding to the message includes: Obtaining a first characteristic item in the message; For each communication level of each business scenario, the message rules of the message corresponding to the communication level of the business scenario are determined according to the preset message rule library, and it is judged whether the first characteristic item meets the message rules. If so, it is determined that the business scenario is the business scenario corresponding to the message, and the communication level is the communication level corresponding to the message.

8. The abnormal message locating device according to claim 5, characterized in that: The step of analyzing the messages at each communication layer in turn to determine whether the messages are abnormal messages includes: For the message of each communication layer, obtain the second characteristic item in the message and save the second characteristic item to the memory; based on the second characteristic item of the message and the second characteristic item saved in the memory, check whether the second characteristic item of the message is abnormal; if so, determine that the message is an abnormal message; otherwise, determine that the message is not an abnormal message.

9. A terminal device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, the abnormal message locating method according to any one of claims 1 to 4 is implemented.

10. A storage medium, characterized in that: The storage medium includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the abnormal message locating method according to any one of claims 1 to 4.

Images