Mining equipment supervision method, computing equipment and readable storage medium

Abstract

The invention discloses a monitoring method of mining equipment, computing equipment and a computer readable storage medium, and the monitoring method of the mining equipment comprises the steps: building wireless communication connection with the mining equipment, receiving ciphertext information sent by the mining equipment, the ciphertext information is obtained after the mining equipment carries out encryption operation through an encryption algorithm based on encryption operation time; performing decoding verification according to the ciphertext information to obtain a decoding result; when the decoding operation time in the decoding result and the encryption operation time in the ciphertext information accord with a verification passing condition, receiving equipment operation information corresponding to the ciphertext information; and performing supervision control based on the equipment operation information. Therefore, the remote monitoring of the mining equipment can be safely and effectively realized, so that the purposes of reducing the maintenance cost of the mining equipment and improving the working efficiency of monitoring the mining equipment can be realized.

Description

Technical Field

[0001] The present application relates to the field of smart mining technology, and in particular to a monitoring method for mining equipment, a computing device, and a computer-readable storage medium. Background Art

[0002] Mining equipment mainly refers to mining, screening, transportation and other special equipment used in the production process of coal, ferrous metals and non-ferrous metals. Mining equipment includes mining equipment, crushing equipment, screening equipment, transportation equipment (such as mining trucks), etc. Since mines are usually located far away from human settlements, there is no mobile communication network coverage in these places.

[0003] In the process of conceiving and implementing the present application, the inventors found that there are at least the following problems: how to enhance the security of remote communications while remotely monitoring mining equipment. Summary of the invention

[0004] The purpose of the present application is to provide a method for monitoring mining equipment, a computing device and a computer-readable storage medium, which can enhance the security of remote communication while remotely monitoring mining equipment.

[0005] To achieve the above objectives: In a first aspect, an embodiment of the present application provides a method for supervising mining equipment, comprising: establishing a wireless communication connection with the mining equipment, receiving ciphertext information sent by the mining equipment, the ciphertext information being obtained after the mining equipment performs an encryption operation using an encryption algorithm based on encryption operation time; performing decoding verification based on the ciphertext information to obtain a decoding result; when the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the verification pass condition, receiving equipment operation information corresponding to the ciphertext information; and performing supervision and control based on the equipment operation information.

[0006] In one embodiment, the decoding verification includes using a decryption algorithm to perform a decryption operation on the ciphertext information, wherein the order of steps of the decryption algorithm is opposite to the order of steps of the encryption algorithm.

[0007] In one embodiment, the steps of the encryption algorithm include: taking the initial encryption time as a basic seed, and performing bit operations on the basic seed and a specific encryption seed to obtain a basic encryption seed; performing bit operations and expansion operations on the basic encryption seed to obtain an encryption seed; performing bit expansion on the initial plaintext information and adding time data to obtain target plaintext information; performing multiple encryption operations based on the target plaintext information and the encryption seed to obtain ciphertext information; wherein the encryption operation includes at least one of bit operations on the encryption seed, byte exchange processing, group byte displacement exchange processing, inter-group exchange mixing processing, and key processing.

[0008] In one embodiment, the key processing includes: using a key calculation operation of an elliptic cryptographic curve to obtain at least one base key; selecting a base key as a target key, and performing a cryptographic operation based on the target key.

[0009] In one embodiment, the expression of the elliptic cryptographic curve is:

[0010] in, and Used to collaboratively represent points on elliptic cryptographic curves, represents the preset first encryption constant, is the preset second encryption constant, Represents an encrypted prime number.

[0011] In one embodiment, the key calculation operation includes: Determine any two points on an elliptic cryptographic curve: and ; exist , then the value of the base key is determined as: ; exist , then the value of the base key is determined as: .

[0012] In one embodiment, the device operation information is in the form of CAN data; the step of performing supervision and control based on the device operation information includes: reading at least one DBC file according to the device operation information; performing DBC file parsing according to at least one DBC file to construct at least one CAN message object; performing CAN data parsing on CAN message message data in the device operation information according to the CAN message object to convert the CAN message message data into application data; and supervising the application according to the application data.

[0013] In one embodiment, the regulatory application includes at least one of the following: The application data is stored in association with the equipment identification of the mining equipment; Control the display of application data; Based on application data, the leasing of mining equipment is supervised; Perform diagnostic processing based on the application data to obtain and / or output diagnostic results; When the diagnosis result includes fault information, fault alarm control is performed based on the fault information.

[0014] In one embodiment, it also includes: receiving an access request; opening access rights to data resources corresponding to the access request based on user authority information corresponding to the access request, wherein the data resources include application data stored in association with a device identification of the mining equipment, and the user authority information is preset.

[0015] In one embodiment, the steps of leasing and supervising mining equipment based on application data include: triggering a request to lock the mining equipment when it is determined that the conditions for rent arrears are met based on the application data corresponding to the mining equipment; in response to a confirmation operation on the lock request, locking the mining equipment and outputting an unlocking key to the management side; upon receiving a password obtained and output by the management side based on the unlocking key, completing an unlocking check based on the password, and unlocking the mining equipment.

[0016] In a second aspect, an embodiment of the present application provides a computing device, comprising: a processor and a memory storing a computer program, and when the processor runs the computer program, the steps of the method for supervising mining equipment as described in any of the above items are implemented.

[0017] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of the method for supervising mining equipment as described in any of the above items are implemented.

[0018] The embodiments of the present application provide a method for supervising mining equipment, a computing device, and a computer-readable storage medium. The method for supervising mining equipment includes: establishing a wireless communication connection with the mining equipment, receiving ciphertext information sent by the mining equipment, the ciphertext information being obtained after the mining equipment performs an encryption operation using an encryption algorithm based on encryption operation time; performing decoding verification based on the ciphertext information to obtain a decoding result; when the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the verification pass condition, receiving equipment operation information corresponding to the ciphertext information; and performing supervision and control based on the equipment operation information. In this way, the technical solution of the present application can add encryption and decryption means after establishing a wireless communication connection and before receiving the equipment operation information of the mining equipment to ensure the security of communication, and also increase the verification of the decoding operation time and the encryption operation time during decryption to further improve the security of communication. Therefore, the technical solution of the present application can simplify the data transmission method of the mining equipment through wireless connection, and by adding encryption and decryption means and increasing the verification of the decoding operation time and the encryption operation time, it can improve the reliability and flexibility of data transmission. Therefore, the technical solution of the present application can safely and effectively realize remote supervision of mining equipment, and then can achieve the purpose of reducing the maintenance cost of mining equipment and improving the work efficiency of supervising mining equipment. Therefore, the technical solution of the present application can enhance the security of remote communication while realizing remote supervision of mining equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present application, and are used together with the specification to explain the principles of the present application. In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor.

[0020] Figure 1 It is a flow chart of the method for supervising mining equipment provided in an embodiment of the present application.

[0021] Figure 2 It is a schematic diagram of the step framework of the encryption algorithm of the embodiment of the present application.

[0022] Figure 3 It is a schematic diagram of the data parsing process of an example embodiment of the present application.

[0023] Figure 4 It is a schematic diagram of the framework of the fault alarm control of the embodiment example of the present application.

[0024] Figure 5 It is a schematic diagram of user management according to an example of an embodiment of the present application.

[0025] Figure 6 It is a structural diagram of the device supervision system of the present application example.

[0026] Figure 7 It is a schematic diagram of the structure of the computing device provided in an embodiment of the present application.

[0027] The realization of the purpose, functional features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. The above-mentioned drawings have shown clear embodiments of this application, which will be described in more detail later. These drawings and textual descriptions are not intended to limit the scope of the concept of this application in any way, but to illustrate the concept of this application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0028] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0029] It should be noted that, in this article, the terms "include", "comprises" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element. In addition, components, features, and elements with the same name in different embodiments of the present application may have the same meaning or different meanings, and their specific meanings need to be determined by their explanation in the specific embodiment or further combined with the context of the specific embodiment.

[0030] It should be understood that, although the terms first, second, third, etc. may be used to describe various information in this article, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of this article, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein can be interpreted as "at the time of..." or "when..." or "in response to determination". Furthermore, as used in this article, the singular forms "one", "one" and "the" are intended to also include plural forms, unless there is an opposite indication in the context. It should be further understood that the terms "comprising", "including" indicate that there are described features, steps, operations, elements, components, projects, kinds, and / or groups, but do not exclude the existence, occurrence or addition of one or more other features, steps, operations, elements, components, projects, kinds, and / or groups. The terms "or" and "and / or" used herein are interpreted as inclusive, or mean any one or any combination. Thus, “A, B, or C” or “A, B and / or C” means “any of the following: A; B; C; A and B; A and C; B and C; A, B, and C.” An exception to this definition will occur only when a combination of elements, functions, steps, or operations are inherently mutually exclusive in some manner.

[0031] It should be understood that, although the various steps in the flowchart in the embodiment of the present application are displayed in sequence according to the indication of the arrows, these steps are not necessarily performed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and it can be performed in other orders. Moreover, at least a portion of the steps in the figure may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and their execution order is not necessarily performed in sequence, but can be performed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0032] It should be noted that, in this article, step codes such as S11, S12, etc. are used for the purpose of expressing the corresponding content more clearly and concisely, and do not constitute a substantial limitation on the sequence. When implementing it specifically, those skilled in the art may execute S12 first and then S11, etc., but these should all be within the scope of protection of this application.

[0033] It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0034] In the subsequent description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present application, and have no specific meanings. Therefore, "module", "component" or "unit" can be used in a mixed manner.

[0035] See also Figure 1 , is a method for supervising mining equipment provided in an embodiment of the present application, which can be executed by a computing device provided in an embodiment of the present application, and the computing device can be implemented in software and / or hardware. Optionally, the computing device is, for example, a server, a host computer of the mining equipment, etc.

[0036] This embodiment provides a method for supervising mining equipment, including: Step S11: establishing a wireless communication connection with the mining equipment, and receiving ciphertext information sent by the mining equipment, where the ciphertext information is obtained after the mining equipment performs an encryption operation using an encryption algorithm based on encryption operation time.

[0037] In one embodiment, mining equipment may represent various mining, screening, transportation and other special equipment used in various mining production processes. Optionally, mining equipment includes one of mining equipment, crushing equipment, screening equipment, transportation equipment (such as mining trucks), etc.

[0038] In one embodiment, the communication technology used for the wireless communication connection includes at least one of a short-range wireless communication technology, a long-range wireless transmission technology, and the like.

[0039] In one embodiment, short-range wireless communication technology: This type of technology is usually used in a smaller area, such as wireless personal area network (WPAN) and wireless local area network (WLAN). Common technologies include: WiFi technology, Bluetooth, ZigBee (a low-power, low-rate wireless communication technology), etc.

[0040] In one embodiment, long-distance wireless transmission technology: This type of technology is suitable for communications over longer distances, for example: wide area network communications (such as 5G communications), spread spectrum microwave communications (with characteristics such as long transmission distance and wide coverage), satellite communications, TCP network communications, etc.

[0041] In one implementation, the communication technology used for the wireless communication connection of this embodiment may be WiFi technology, and the mining equipment may convert its own data into WiFi signals and output them through the wireless communication connection. For example, the equipment operation information in the form of CAN data in the mining equipment may be converted into WiFi signals for output, and the encrypted information may be converted into WiFi signals for output.

[0042] In one embodiment, the ciphertext information may be obtained by a security module in the mining equipment through an encryption operation performed by an encryption algorithm based on the encryption operation time. Optionally, the security module of the mining equipment may also perform decoding verification after receiving the ciphertext information obtained through an encryption operation performed by an encryption algorithm based on the encryption operation time.

[0043] In one embodiment, an encryption algorithm is used to convert plaintext information (or plaintext data) into ciphertext information (or ciphertext data) to protect the data of mining equipment from unauthorized access; the encryption algorithm ensures that only a recipient with the correct key can decode and verify to obtain the data in the mining equipment, thereby protecting the privacy and confidentiality of the data in the mining equipment, and can also ensure that the data transmitted by the wireless communication connection is trusted data.

[0044] In one embodiment, an encryption algorithm based on encryption operation time can be characterized by incorporating encryption operation time into the encryption process as a verification factor in subsequent decoding verification. Optionally, in the process of decoding verification of ciphertext information obtained by the encryption algorithm, a key is used to decode the ciphertext information and record the decoding operation time, so that when the time code corresponding to the encryption operation time parsed from the ciphertext information is greater than the time code corresponding to the currently recorded decoding operation time, it is determined to meet the verification pass condition (or decoding verification pass).

[0045] In one embodiment, the steps of the encryption algorithm include but are not limited to: using the initial encryption time as the basic seed, and performing bit operations on the basic seed and the specific encryption seed to obtain the basic encryption seed; performing bit operations and expansion operations on the basic encryption seed to obtain the encryption seed; performing bit expansion on the initial plaintext information and adding time data to obtain the target plaintext information; performing multiple encryption operations according to the target plaintext information and the encryption seed to obtain the ciphertext information; wherein the encryption operation includes performing at least one of bit operations, byte exchange processing, group byte displacement exchange processing, inter-group exchange mixing processing, and key processing on the encryption seed. In this way, the encryption process of the encryption algorithm in the technical solution of this embodiment can incorporate time as a verification factor in the subsequent decoding verification.

[0046] In one embodiment, the encryption start time may represent the current time when encryption starts.

[0047] In one embodiment, the encryption operation time may include at least one of the initial encryption time and the time data included in the initial plaintext information.

[0048] In one embodiment, the key processing includes: using a key calculation operation of an elliptic cryptographic curve to obtain at least one base key; selecting a base key as a target key, and performing a cryptographic operation based on the target key.

[0049] In one embodiment, the expression of the elliptic cryptographic curve is:

[0050] in, and Used to collaboratively represent points on elliptic cryptographic curves, represents the preset first encryption constant, is the preset second encryption constant, Represents an encrypted prime number.

[0051] In one implementation, the first encryption constant, the second encryption constant, and the encryption prime number in the elliptic encryption curve may be obtained through experiments and tuning.

[0052] In one embodiment, the key calculation operation includes: Determine any two points on an elliptic cryptographic curve: and ; exist , then the value of the base key is determined as: ; exist , then the value of the base key is determined as: .

[0053] In one embodiment, for any two points on the elliptic cryptographic curve, and , their sum It also conforms to the expression formula of elliptic encryption curve.

[0054] In one implementation, this embodiment may assume that P is set as the base point, k is the base key, and Q is the public key. Two situations may be considered: (1) If , we can find the R coordinates as follows, first assuming that the value of the base key is ,but ,y coordinate method, ,then, ; (2) If , this is quite special, meaning that point P and point Q are the same. At this time, it is assumed that the value of the basic key is ,but , the method of finding the y coordinate, ,then, ; Here, R represents another point mapped after function processing through the expression of the elliptic encryption curve.

[0055] In one implementation, this embodiment may define kP to represent P plus itself k-1 times. Then a basic key is selected as the target key, and the key pair generation method included in the step of performing the encryption action based on the target key may be: first take a randomly selected integer k as the target key (or private key), then the public key Q is kP, where P is a base point on the elliptic curve.

[0056] In one embodiment, the encryption operation (i.e., the encryption process of elliptic encryption) is performed based on the target key: Assuming that the message m to be encrypted (such as plaintext information or ciphertext information to be encrypted again) is an integer, the encryption process is as follows: randomly select an integer k as the target key; calculate the points C1 = kP and C2 = kQ; calculate the hash value H(m) of the message m; multiply H(m) by C2 to get the point C3 = H(m)Q. The encrypted ciphertext is the coordinates of points C1 and C3, that is, the ciphertext information is represented as (C1, C3).

[0057] In one embodiment, the decryption action performed in the subsequent decoding verification (i.e., the decryption process of elliptic encryption): determine the decryption private key d and the encrypted ciphertext information (C1, C3); calculate the points S1 = dC1 and S3 = dC3; S3 must be equal to the original message point C2, and the original message m is obtained by calculating S3 - C2.

[0058] In one embodiment, see Figure 2 , the steps of the encryption algorithm include: (1) Determine the initial plaintext information; (2) Entering the plaintext exchange processing layer to perform bit expansion on the initial plaintext information and add time data to obtain the target plaintext information, and the collaborative key calculation layer sets the key 0 to the target plaintext information to obtain the initial ciphertext information; (3) Perform n rounds of encryption operations. The process of each round of encryption operation includes: 3.1 Performing bit operations on the initial encryption seed through the byte exchange processing layer to obtain a new encryption seed; wherein the initial encryption seed may be an encryption seed obtained by performing bit operations and expansion operations on the basic encryption seed, or an encryption seed updated by the previous round of encryption operations; 3.2 Performing byte shift exchange processing on the new encryption seed through the byte shift exchange layer to update the encryption seed; 3.3 Through the inter-group exchange and mixing processing layer, the updated encryption seed is subjected to inter-group exchange and mixing processing to update the encryption seed; 3.4 In the key processing layer, the collaborative key calculation layer sets the key according to the updated encryption seed, and encrypts the initial ciphertext information or the ciphertext information updated in the previous round of encryption operation according to the key to obtain new ciphertext information; (4) Output the ciphertext information obtained by the nth round of encryption operation.

[0059] In one embodiment, the plaintext exchange processing layer may further include plaintext exchange processing. The plaintext exchange processing may be the initial stage of the encryption process, and may perform some form of exchange or arrangement on the plaintext information to increase the complexity of encryption.

[0060] Step S12: Perform decoding verification according to the ciphertext information to obtain a decoding result.

[0061] In one embodiment, the decoding verification includes using a decryption algorithm to perform a decryption operation on the ciphertext information, wherein the order of steps of the decryption algorithm may be opposite to the order of steps of the encryption algorithm described above.

[0062] Step S13: When the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the verification pass condition, the device operation information corresponding to the ciphertext information is received.

[0063] In one implementation, the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meeting the verification pass condition may represent adding verification of the decoding operation time and the encryption operation time to further enhance the security of communication.

[0064] In one embodiment, the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the inspection pass condition, including but not limited to one of the following: The time code corresponding to the decoding operation time in the decoding result is greater than the time code corresponding to the encryption operation time in the ciphertext information; The decoding operation time in the decoding result is later than the encryption operation time in the ciphertext information.

[0065] The technology of this embodiment can receive the ciphertext information before establishing a wireless communication connection and receiving the data output by the mining equipment (such as equipment operation information). The main functions include: (1) Confidentiality: Protect the received data from being modified by a third party or maliciously loaded with illegal data. Even if the data is intercepted during transmission, it cannot be reprocessed; (2) Data integrity: ensuring that the received data has not been tampered with during transmission; (3) Preventing replay attacks: Encryption can be combined with timestamps or other mechanisms to ensure that the received data is up to date and prevent attackers from replaying old data packets. (4) Improving trust: Encryption can increase the trust between communicating parties because it reduces the risk of data being leaked or misused.

[0066] Step S14: Perform supervision and control based on the equipment operation information.

[0067] In one embodiment, the device operation information is in the form of CAN data.

[0068] In one embodiment, see Figure 3 The step of performing supervision and control based on the equipment operation information includes: reading at least one DBC file according to the equipment operation information; parsing the DBC file according to the at least one DBC file to construct at least one CAN message object; parsing the CAN message message data in the equipment operation information according to the CAN message object to convert the CAN message message data into application data; and supervising the application according to the application data.

[0069] In one embodiment, a DBC (Database CAN) file is a standardized format for defining CAN message objects corresponding to equipment operation information in the form of CAN (Controller Area Network) data. The DBC file contains detailed information of CAN message objects corresponding to all CAN message message data in the CAN network in the mining equipment, such as message ID, signal name, signal data type, signal size, signal start bit, signal unit, etc.

[0070] In one embodiment, the application data can be used for data analysis and / or reading, so as to intuitively present the operation status of specific functions or modules of the mining equipment to relevant personnel. In this way, the technical solution of this embodiment can convert the original, complex, and difficult to distinguish CAN message data in the mining equipment into application data that is easy to analyze and / or read.

[0071] In one implementation, the monitoring application may represent a specific form of controlling the mining equipment or processing the data of the mining equipment based on the CAN message data.

[0072] In one embodiment, the regulatory application includes, but is not limited to, at least one of the following: Associate application data with the device identification of mining equipment and store it (which can be used for subsequent access or call based on demand); Control the display of application data; Based on application data, the leasing of mining equipment is supervised; Perform diagnostic processing based on the application data to obtain and / or output diagnostic results; When the diagnosis result includes fault information, fault alarm control is performed based on the fault information.

[0073] In one implementation, the application data is displayed and controlled, for example, the application data is sent to a human-computer interaction interface so that the human-computer interaction interface displays the application data.

[0074] In one embodiment, the steps of leasing and supervising mining equipment based on application data include: triggering a lock request for the mining equipment when determining that the mining equipment meets the rent arrears condition according to the application data corresponding to the mining equipment; in response to the confirmation operation on the lock request, locking the mining equipment and outputting the unlocking key to the management end; upon receiving the password obtained and output by the management end based on the unlocking key, completing the unlocking verification according to the password, and unlocking the mining equipment. In this way, the technical solution of this embodiment can facilitate management personnel to accurately and effectively supervise the leasing of mining equipment.

[0075] In one embodiment, the rent arrears conditions include but are not limited to at least one of the following: The current usage date represented by the application data corresponding to the mining equipment complies with the lease term; The usage time represented by the application data corresponding to the mining equipment reaches the preset time.

[0076] In one implementation, the management terminal may be a terminal or server used by an organization or person providing mining equipment rental services.

[0077] In one embodiment, the method provided in this embodiment further includes: establishing a wireless communication connection with the mining equipment, and before sending the control information to the mining equipment, obtaining and sending the second ciphertext information to the mining equipment, so that the mining equipment performs decoding verification according to the second ciphertext information, and waits to receive the control information when the decoding operation time in the decoding result and the encryption operation time in the second ciphertext information meet the verification pass condition.

[0078] In one implementation, the encryption algorithm used by the second ciphertext information may refer to the aforementioned encryption algorithm, which will not be described in detail here.

[0079] In one embodiment, the locking control, unlocking control, etc. will output corresponding control information to the mining equipment to control the locking of the mining equipment or the unlocking of the mining equipment.

[0080] In this way, the technical solution of this embodiment can add encryption and decryption means after establishing a wireless communication connection and before exchanging information or data with mining equipment to ensure the security of communication, and also add verification of the decoding operation time and the encryption operation time during decryption to further enhance the security of communication.

[0081] In one embodiment, see Figure 4 , when the diagnosis result includes fault information, performing fault alarm control based on the fault information includes at least one of the following: When the fault information already exists within the preset time range, the alarm time corresponding to the fault information in the human-computer interaction interface is updated to the current time; When the fault information does not exist within the preset time range, an alarm item is added on the human-computer interaction interface based on the fault information; Delete the fault information of the alarm items that have exceeded the validity period to delete the expired alarm items.

[0082] In one embodiment, the method provided in this embodiment also includes: receiving an access request; opening access rights to data resources corresponding to the access request based on user authority information corresponding to the access request, wherein the data resources include application data stored in association with a device identification of the mining equipment, and the user authority information is pre-set.

[0083] In one implementation, the method provided in this embodiment may further include: in response to the user account management operation, updating the user information of the target user account.

[0084] In one embodiment, the user account management operation may include at least one of the following: 1) User management, including but not limited to: a) Manage users’ basic information, including but not limited to user ID, password, description, etc.

[0085] b) Add, delete, and modify user accounts.

[0086] 2) Role management, including but not limited to: a) Manage the basic information of the role, including but not limited to the role ID, description, user permission information, etc.

[0087] b) Add, delete, and modify roles.

[0088] 3) Rights management, including but not limited to: a) User permission information of management roles, including but not limited to the name and content of the permission.

[0089] b) Create, delete, and modify permission content.

[0090] 4) Access control, including but not limited to: a) Control access to specific data resources based on user account roles and user permission information.

[0091] b) Determine whether the user has the right to access specific data resources based on the user's role, and perform corresponding permission control based on the permission management settings.

[0092] In one embodiment, the step of receiving an access request may include: in response to a user logging into a user account, receiving an access request from the user, the access request corresponding to the role of the user account and its user authority information.

[0093] In one embodiment, see Figure 5 The technical solution of this embodiment can assign roles to each user account, wherein each role corresponds to user permission information; thus, it is possible to manage the access rights of each user and ensure that only authorized users can access specific data resources. Each user account has a role, and each role can be configured with different access permission information. When accessing a specific data resource, only the role corresponding to the user account, which has the permission for this specific data resource, can access it normally.

[0094] A method for supervising mining equipment provided in this embodiment includes: step S11: establishing a wireless communication connection with the mining equipment, receiving ciphertext information sent by the mining equipment, where the ciphertext information is obtained after the mining equipment performs an encryption operation through an encryption algorithm based on the encryption operation time; step S12: performing decoding verification according to the ciphertext information to obtain a decoding result; step S13: when the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the verification pass condition, receiving the equipment operation information corresponding to the ciphertext information; step S14: performing supervision and control based on the equipment operation information. In this way, the technical solution of this embodiment can add encryption and decryption means after establishing a wireless communication connection and before receiving the equipment operation information of the mining equipment to ensure the security of communication, and also add the verification of the decoding operation time and the encryption operation time during decryption to further improve the security of communication. Therefore, the technical solution of this embodiment can simplify the data transmission method of the mining equipment through wireless connection, and can improve the reliability and flexibility of data transmission by adding encryption and decryption means and increasing the verification of the decoding operation time and the encryption operation time. Therefore, the technical solution of this embodiment can safely and effectively realize remote supervision of mining equipment, thereby achieving the purpose of reducing the maintenance cost of mining equipment and improving the work efficiency of supervising mining equipment. Therefore, the technical solution of this embodiment can enhance the security of remote communication while realizing remote supervision of mining equipment.

[0095] Based on the same inventive concept as the above-mentioned embodiment, the above-mentioned embodiment is described in detail below through a specific example. In this example, the device supervision system is taken as an example.

[0096] See also Figure 6,The equipment supervision system includes mining vehicles (i.e. the aforementioned mining equipment, such as mining trucks) and a service diagnosis and operation and maintenance platform.

[0097] Among them, the service diagnosis and operation and maintenance platform (such as a PC host computer) can be configured based on the aforementioned mining equipment supervision method, including a network communication module, an encryption / decryption algorithm module, a data analysis module, a diagnosis and alarm module, a user authority module and a human-computer interaction interface.

[0098] The mining vehicle includes vehicle functional hardware, a hardware layer diagnostic recorder, and a CAN bus that connects the vehicle functional hardware to the hardware layer diagnostic recorder. The vehicle functional hardware includes, for example, an engine, a transmission, an onboard controller, and an instrument.

[0099] The hardware layer diagnostic recorder includes but is not limited to a WIFI communication module and a security module. Optionally, the hardware layer diagnostic recorder may also include a power module, a sleep and wake-up module, an isolation module, a backup power module, a data conversion module, etc., wherein the power module is used for power supply, the sleep and wake-up module is used to switch the hardware layer diagnostic recorder between sleep state and working state, the backup power module is used to provide emergency power supply, and the isolation module includes but is not limited to at least one of the following: electrical isolation, signal isolation, elimination of signal interference, signal conversion, data conversion, etc.

[0100] Among them, the WIFI communication module can have CAN to WIFI technology, which can convert the information in the form of CAN data of the mining vehicle into WIFI signals in real time, so that after establishing a WiFi communication connection with the network communication module of the service diagnosis and operation and maintenance platform, the mining vehicle can be remotely monitored and diagnosed through the service diagnosis and operation and maintenance platform. The aforementioned method of establishing a WiFi communication connection can simplify the data transmission method of the mining vehicle, improve the reliability and flexibility of data transmission, and at the same time reduce maintenance costs and improve work efficiency.

[0101] Optionally, a hardware layer diagnostic recorder can be developed using an STM32H723VGT6 chip and mounted on the CAN bus of a mining vehicle, so that the data collected on the CAN bus can be sent to a service diagnostic operation and maintenance platform (such as a PC host computer) through the WIFI communication module of the hardware layer diagnostic recorder.

[0102] Optionally, the application layer of the service diagnosis and operation and maintenance platform processes the data received through the network communication module (for example, the encryption / decryption algorithm module performs encryption / decryption processing, the data analysis module performs data analysis processing, and the diagnostic alarm module performs fault diagnosis processing and alarm processing), and the data finally processed is displayed on the human-computer interaction interface. First, the communication between the service diagnosis and operation and maintenance platform and the hardware layer diagnostic recorder is WiFi communication. The service diagnosis and operation and maintenance platform is the server, and the hardware layer diagnostic recorder is the client. An active reconnection mechanism is adopted. When the network connection is found to be invalid, the client will actively reconnect. At the same time, verification will be performed based on the encryption algorithm at the beginning of the connection, and only after the verification is passed can normal communication be achieved (for example, mining vehicles send the operating information of each vehicle functional hardware to the service diagnosis and operation and maintenance platform in the form of WIFI signals in the form of CAN data through the hardware layer diagnostic recorder). After a large number of experiments, an encryption algorithm similar to an elliptic curve is tuned to encrypt the data and output a string of ciphertext (the aforementioned ciphertext information). And this encryption algorithm will randomly use the internal encryption algorithm according to the time and number of times, to ensure that different ciphertexts are output for the same data over a long period of time, which is difficult to crack, and ensures the security and reliability of the data. The data parsing module in the service diagnosis and maintenance platform can convert the operation information of each vehicle functional hardware in the original CAN data format into a readable data format (i.e., application data). The data parsing module includes a DBC file parsing submodule and a CAN data parsing submodule; the DBC file parsing submodule is responsible for reading different DBC files, and can parse multiple DBC files at the same time, and construct various different CAN message objects in memory; the CAN data parsing submodule processes the corresponding CAN message message data in the operation information through the constructed CAN message objects, so as to convert complex CAN message message data into application data in the CAN message object for easy use.

[0103] The user permission module in the service diagnosis and maintenance platform is responsible for granting different access rights to different user accounts to ensure that only authorized user accounts can access specific data resources. The design is as follows: Assume that each user account has a role, and configure different permissions for each role. When accessing a specific data resource, only the access request triggered by the user account of the corresponding role can have the permission to access this specific data resource normally.

[0104] The diagnostic alarm module in the service diagnosis and maintenance platform processes and diagnoses the converted application data to determine the fault information, and displays the fault alarm related to the fault information on the human-computer interaction interface. Optionally, the diagnostic alarm module can also analyze the CAN message data, and when a fault alarm message is found, it will alarm according to the fault alarm message. The diagnostic alarm module controls human-computer interaction and the processing methods for alarms include: updating the alarm update time for existing fault alarms; adding non-existent alarms; deleting alarms that are not within the validity period; thereby, the alarm information is displayed in real time on the human-computer interaction interface.

[0105] In addition, the human-computer interaction interface will display some control information of mining vehicles so that the operation and maintenance personnel can keep track of the vehicle situation at any time. Furthermore, in order to strengthen the management of vehicles and reduce the occurrence of rent arrears, the service diagnosis and operation and maintenance platform of this example can also add a service unlocking function, which mainly includes locking service, locking service, and unlocking record. The service unlocking function can be controlled by receiving instructions through the human-computer interaction interface. The service diagnosis and operation and maintenance platform of this example has special restrictions on the locking service. When you click the locking service in the human-computer interaction interface, the security code verification interface will pop up, and the dynamic key in the interface will be sent to the rental service provider. The rental service provider uses a professional password calculation tool, enters the dynamic key, and calculates the password, so that the password is given to the operation and maintenance personnel of the service diagnosis and operation and maintenance platform to enter into the human-computer interaction interface, so that the service diagnosis and operation and maintenance platform can execute the locking control after the security code verification is successful, which greatly improves the safety of mining vehicles when they are rented.

[0106] Among them, the service diagnosis and operation and maintenance platform can add self-developed encryption algorithms and / or decryption algorithms to the diagnostic software to make data communication secure, unique, and not easy to be cracked.

[0107] Among them, the data analysis module in the service diagnosis and maintenance platform can make data analysis more convenient, faster and reusable.

[0108] Among them, the service diagnosis and operation and maintenance platform can realize the functions of alarm display, analysis and decision-making for mining vehicles, vehicle control operation, user authority management, etc. The service diagnosis and operation and maintenance platform connects to mining vehicles via Wifi, and can view the relevant status information of the vehicle in real time, and can know the fault alarm of mining vehicles in time and solve them, which improves work efficiency and prolongs the use time of vehicles.

[0109] This example can provide a hardware-level diagnostic recorder for mining vehicles based on CAN to WIFI technology, which can achieve efficient, reliable and secure wireless data transmission, providing strong support for the intelligence and automation of mining vehicles. At the same time, the equipment supervision system of this example also has the advantages of simple structure and easy implementation, and has broad application prospects.

[0110] The development of the equipment supervision system based on CAN to WIFI technology has the following innovations: 1. Compared with the diagnostic recorder of traditional mining vehicles, the hardware-layer diagnostic recorder in the equipment supervision system of this example has developed effective encryption security means that is not easy to be cracked, safe and efficient; 2. The equipment monitoring system in this example can make data analysis more convenient, faster and reusable.

[0111] 3. This example can add various diagnostic interfaces and alarm interfaces to the service diagnosis and maintenance platform built based on the diagnostic software, which can display the relevant status of the vehicle in real time and detect the vehicle's fault alarm in time and solve it.

[0112] 4. This example adds a more convenient vehicle control function to perform relevant control on the vehicle.

[0113] The equipment monitoring system in this example enhances the security of communications, makes data analysis simpler and more convenient, and enhances the graphical display of vehicle status and fault alarm management, adding more convenient vehicle control operations and improving work efficiency.

[0114] Based on the same inventive concept as the above embodiments, the present application embodiment provides a computing device, such as Figure 7 As shown, the device includes: a processor 310 and a memory 311 storing a computer program; wherein, Figure 7 The processor 310 shown in the figure is not used to indicate that the number of the processor 310 is one, but is only used to indicate the positional relationship of the processor 310 relative to other devices. In actual applications, the number of the processor 310 may be one or more; similarly, Figure 7 The memory 311 shown in the figure has the same meaning, that is, it is only used to refer to the position relationship of the memory 311 relative to other devices. In practical applications, the number of memories 311 can be one or more. When the processor 310 runs the computer program, the monitoring method of the mining equipment applied to the above-mentioned device is implemented.

[0115] The device may also include: at least one network interface 312. The various components in the device are coupled together via a bus system 313. It is understood that the bus system 313 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 313 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Figure 7 Various buses are labeled as bus system 313.

[0116] The memory 311 may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. The non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM); the magnetic surface memory may be a disk memory or a tape memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAMbus random access memory (DRRAM, Direct Rambus Random Access Memory).The memory 311 described in the embodiments of the present application is intended to include but is not limited to these and any other suitable types of memories.

[0117] The memory 311 in the embodiment of the present application is used to store various types of data to support the operation of the device. Examples of these data include: any computer program used to operate on the device, such as an operating system and an application program. Among them, the operating system includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and handle hardware-based tasks. The application program may include various applications, such as a media player (MediaPlayer), a browser (Browser), etc., which are used to implement various application services. Here, the program that implements the method of the embodiment of the present application may be included in the application program.

[0118] Based on the same inventive concept as the above-mentioned embodiment, this embodiment further provides a computer-readable storage medium, in which a computer program is stored. The computer-readable storage medium may be a magnetic random access memory (FRAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM) or other memory; it may also be various devices including one or any combination of the above-mentioned memories, such as a mobile phone, a computer, a tablet device, a personal digital assistant, etc. When the computer program stored in the computer-readable storage medium is executed by the processor, the above-mentioned method for supervising mining equipment is implemented. For the specific steps implemented when the computer program is executed by the processor, please refer to Figure 1 The description of the illustrated embodiment will not be repeated here.

[0119] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0120] In this document, the terms "comprises," "comprising," or any other variations thereof, are intended to cover a non-exclusive inclusion of elements other than those listed and may also include additional elements not expressly listed.

[0121] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for supervising mining equipment, characterized in that: include: Establishing a wireless communication connection with the mining equipment, and receiving ciphertext information sent by the mining equipment, wherein the ciphertext information is obtained after the mining equipment performs an encryption operation using an encryption algorithm based on encryption operation time; Perform decoding verification according to the ciphertext information to obtain a decoding result; When the decoding operation time in the decoding result and the encryption operation time in the ciphertext information meet the verification pass condition, receiving the device operation information corresponding to the ciphertext information; Supervision and control are performed based on the equipment operation information.

2. The method according to claim 1, characterized in that The decoding verification includes using a decryption algorithm to decrypt the ciphertext information, wherein the order of steps of the decryption algorithm is opposite to the order of steps of the encryption algorithm; The steps of the encryption algorithm include: Taking the encryption initial time as a basic seed, and performing a bit operation on the basic seed and a specific encryption seed to obtain a basic encryption seed; Performing bit operations and expansion operations on the basic encryption seed to obtain an encryption seed; Bit expansion is performed on the initial plaintext information and time data is added to obtain the target plaintext information; Multiple encryption operations are performed according to the target plaintext information and the encryption seed to obtain the ciphertext information; wherein the encryption operation includes at least one of bit operation, byte exchange processing, group byte shift exchange processing, inter-group exchange mixing processing, and key processing on the encryption seed.

3. The method according to claim 2, characterized in that The key processing includes: A key computation operation using an elliptic cryptographic curve to obtain at least one base key; One of the base keys is selected as a target key, and an encryption action is performed based on the target key.

4. The method according to claim 3, characterized in that The expression of the elliptic encryption curve is: in, and for collaboratively characterizing points on the elliptic cryptographic curve, represents the preset first encryption constant, is the preset second encryption constant, Represents an encrypted prime number; The key calculation operation includes: Determine any two points on the elliptic cryptographic curve: and ; exist , then the value of the base key is determined as: ; exist , then the value of the base key is determined as: .

5. The method according to claim 1, characterized in that The equipment operation information is in the form of CAN data; The step of performing supervision and control based on the equipment operation information includes: Read at least one DBC file according to the device operation information; Performing DBC file parsing according to at least one of the DBC files to construct at least one CAN message object; Performing CAN data parsing on the CAN message data in the device operation information according to the CAN message object to convert the CAN message data into application data; The application is supervised according to the application data.

6. The method according to claim 5, characterized in that The regulatory application includes at least one of the following: storing the application data in association with the device identification of the mining equipment; Performing display control on the application data; Based on the application data, leasing supervision of the mining equipment is performed; Performing diagnostic processing based on the application data to obtain and / or output a diagnostic result; When the diagnosis result includes fault information, fault alarm control is performed based on the fault information.

7. The method according to claim 6, characterized in that Also includes: receiving access requests; According to the user authority information corresponding to the access request, the access rights to the data resources corresponding to the access request are opened, the data resources include the application data stored in association with the device identification of the mining equipment, and the user authority information is preset.

8. The method according to claim 6, characterized in that The steps of leasing and supervising the mining equipment based on the application data include: When it is determined according to the application data corresponding to the mining equipment that the rent arrears condition is met, triggering a lock request for the mining equipment; In response to a confirmation operation on the lock request, locking the mining equipment and outputting an unlocking key to a management end; When receiving the password obtained and output by the management end based on the unlocking key, the unlocking verification is completed according to the password, and the mining equipment is unlocked and controlled.

9. A computing device, characterized in that include: A processor and a memory storing a computer program, when the processor runs the computer program, the steps of the method for supervising mining equipment according to any one of claims 1 to 8 are implemented.

10. A computer-readable storage medium, characterized in that: A computer program is stored, and when the computer program is executed by a processor, the steps of the method for supervising mining equipment described in any one of claims 1 to 8 are implemented.

Images