Data management method and system based on OPC UA information model

Abstract

The invention belongs to the technical field of data management, and discloses a data management method and system based on an OPC UA information model. The method comprises the following steps: constructing an OPC UA information model of a physical entity, and creating an OPC UA information model instance; the data acquisition device is used for acquiring real-time physical data and sending the real-time physical data to the OPC UA server; writing real-time physical data into the OPC UA information model instance, and extracting real-time OPC UA information data; converting the real-time OPC UA information data into a real-time data standard file, and uploading the real-time data standard file to a cloud data center; performing anomaly analysis and distributed storage by using a cloud data center; and carrying out data query by using terminal equipment through the OPC UA client. According to the invention, the problems of poor data transmission security, low data processing efficiency and low data storage reliability in the prior art are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of data management, and in particular relates to a data management method and system based on an OPC UA information model. Background Art

[0002] With the development of industrialization and the digital transformation of production, it is necessary to standardize the management of data collection and access in industrial automation systems to achieve standardized and open data interaction for industrial intelligent manufacturing. The Object Linking and Embedding for Process Control Unified Architecture (OPC UA) information model is an open, cross-platform, standardized data exchange framework that is widely used in the field of industrial automation. The OPC UA information model defines how to represent, organize, access, and control data in industrial automation systems.

[0003] Existing data management technologies have the following defects:

[0004] 1) Poor data transmission security: In existing industrial automation data management, data is easily intercepted or tampered with during transmission, and there is a lack of strict identity authentication mechanism to ensure that only authorized users can access and operate data;

[0005] 2) Low data processing efficiency: The data formats between different physical entities are not unified, which requires a lot of conversion work during data integration and exchange, reducing processing efficiency. The processing of real-time data is not fast enough and cannot meet the high requirements of data real-time in some application scenarios;

[0006] 3) Low data storage reliability: Traditional centralized storage methods are prone to single point failures. Once a problem occurs in the data center, it may lead to data loss or service interruption. When processing large-scale data, centralized storage systems often have insufficient scalability and are difficult to adapt to the rapid growth of data volume. Summary of the invention

[0007] In order to solve the problems of poor data transmission security, low data processing efficiency and low data storage reliability in the prior art, the present invention aims to provide a data management method and system based on the OPC UA information model.

[0008] The technical solution adopted by the present invention is:

[0009] A data management method based on an OPC UA information model comprises the following steps:

[0010] According to the historical physical data of the physical entity, a corresponding OPC UA information model is constructed, and a corresponding OPC UA information model instance is created in the address space of the OPC UA server;

[0011] Using a data acquisition device, collecting real-time physical data according to the OPC UA information model of the physical entity, and sending the real-time physical data to the OPC UA server;

[0012] Write the real-time physical data to the corresponding OPC UA information model instance in the OPC UA server, and extract the real-time OPC UA information data of the OPC UA information model instance;

[0013] Convert real-time OPC UA information data into real-time data standard files in a common format for the cloud data center and OPC UA clients, and upload them to the cloud data center;

[0014] Using the cloud data center, the real-time data standard file is analyzed for abnormality, the real-time abnormality analysis result is obtained, and the real-time data standard file and the real-time abnormality analysis result are distributedly stored;

[0015] Use terminal devices to query data on OPC UA servers and / or cloud data centers through OPC UA clients.

[0016] Further, according to the historical physical data of the physical entity, a corresponding OPC UA information model is constructed, and a corresponding OPC UA information model instance is created in the address space of the OPC UA server, including the following steps:

[0017] Using a data acquisition device, collect historical physical data of the physical entity, and set corresponding nodes, node attributes and node relationships according to physical parameters and physical parameter relationships in the historical physical data;

[0018] Based on nodes, node attributes, and node relationships, build an OPC UA information model of the physical entity, extract model metadata of the OPC UA information model, and send it to the OPC UA server;

[0019] Use the OPC UA server to create a corresponding OPC UA information model instance in the address space based on the model metadata.

[0020] Further, using a data acquisition device to collect real-time physical data according to the OPC UA information model of the physical entity, and sending the real-time physical data to the OPC UA server, includes the following steps:

[0021] Using a data collection device, collecting real-time node values ​​and real-time node attribute values ​​of each dynamic node according to nodes, node attributes, and node relationships in an OPC UA information model of the physical entity;

[0022] Integrate the real-time node values ​​and real-time node attribute values ​​of all dynamic nodes into real-time physical data in the OPC UA information model format;

[0023] Based on the OPC UA protocol, the real-time physical data in OPC UA format is sent to the OPC UA server through the OPC UA client.

[0024] Further, writing the real-time physical data into the corresponding OPC UA information model instance in the OPC UA server and extracting the real-time OPC UA information data of the OPC UA information model instance includes the following steps:

[0025] Use an OPC UA client to access the address space of the OPC UA server and locate the target node in the OPC UA information model instance;

[0026] Encapsulate the real-time node value and the real-time node attribute value of the dynamic node corresponding to the target node in the real-time physical data in the OPC UA format to obtain the corresponding real-time node encapsulation data;

[0027] Use the write service of the OPC UA protocol to write the real-time node encapsulated data of the dynamic node to the target node of the OPC UA information model instance;

[0028] Traverse the real-time node encapsulation data of all dynamic nodes of the real-time physical data until all target nodes of the OPC UA information model instance are written;

[0029] According to the preset subscription service, the real-time node encapsulation data written by all monitoring nodes in the OPC UA information model instance is extracted and integrated to obtain the real-time OPC UA information data.

[0030] Furthermore, it also includes: based on the trusted institution, performing key generation and identity registration for the OPC UA server, including the following steps:

[0031] Based on the trusted organization, key generation and identity registration are performed for all OPC UA servers to obtain the public and private key pairs and signature information of each OPC UA server;

[0032] The private key and signature information in the public-private key pair are returned to the corresponding OPC UA server, and the public key and cloud key in the public-private key pair are stored in a controlled database in the cloud data center.

[0033] Furthermore, the real-time OPC UA information data is converted into a real-time data standard file in a common format of the cloud data center and the OPC UA client, and uploaded to the cloud data center, including the following steps:

[0034] Set the common format of the cloud data center and OPC UA client to XML format, and convert the real-time OPC UA information data into a real-time data standard file in XML format;

[0035] Encrypting the real-time data standard file according to the private key in the public-private key pair to obtain the encrypted real-time data standard file;

[0036] According to the signature information, the encrypted real-time data standard file is signed to obtain the real-time signature data of the encrypted real-time data standard file;

[0037] Upload the encrypted real-time data standard file and real-time signature data in XML format to the cloud data center.

[0038] Furthermore, performing an abnormality analysis on the real-time data standard file to obtain a real-time abnormality analysis result, and performing distributed storage on the real-time data standard file and the real-time abnormality analysis result includes the following steps:

[0039] Based on the cloud data center, a trusted institution is called to perform signature verification on the real-time signature data. If the signature verification passes, the next step is entered; otherwise, data management ends.

[0040] Decrypting the encrypted real-time data standard file according to the public key of the OPC UA server stored in the controlled database to obtain the decrypted real-time data standard file;

[0041] Parse the decrypted real-time data standard file and construct a real-time OPC UA information graph corresponding to the real-time OPC UA information data;

[0042] Use the pre-trained anomaly analysis model to perform anomaly analysis on the real-time OPC UA information graph and obtain real-time anomaly analysis results;

[0043] Use the blockchain network to distribute and store encrypted real-time data standard files and real-time abnormal analysis results.

[0044] Furthermore, the encrypted real-time data standard file and the real-time abnormal analysis results are distributedly stored using the blockchain network, including the following steps:

[0045] Generate a search tag according to the timestamp and physical entity ID corresponding to the encrypted real-time data standard file;

[0046] According to the replica mechanism, the encrypted real-time data standard file is fragmented to obtain a number of data file fragments including replica fragments;

[0047] Sending several data file shards to several nodes in the blockchain network, using the nodes to locally store the received data file shards and obtain the corresponding storage addresses;

[0048] The storage address of each data file shard in the blockchain network, as well as the corresponding retrieval tags and real-time anomaly analysis results are recorded in the distributed ledger.

[0049] Furthermore, using the terminal device to query data on the OPC UA server and / or cloud data center through the OPC UA client includes the following steps:

[0050] If real-time data query is performed, the terminal device is used to connect to the OPC UA server through the OPC UA client and send the real-time query information to the OPC UA server;

[0051] Based on the OPC UA server, according to the real-time query information, the real-time data standard file matching encryption is obtained, and the real-time data standard file matching encryption and the public key in XML format are sent to the terminal device;

[0052] If historical data query is performed, the terminal device is used to connect to the cloud data center through the OPC UA client, and the real-time query information is sent to the cloud data center;

[0053] Based on the cloud data center, according to the real-time query information, search in the distributed ledger to obtain matching search tags;

[0054] According to the matching storage address corresponding to the matching search tag, several matching data file fragments are extracted in the blockchain network and restored to obtain the corresponding matching encrypted historical data standard file;

[0055] Send the matching encrypted historical data standard file and public key in XML format to the terminal device;

[0056] Based on the terminal device, according to the public key, the matching encrypted real-time data standard file and / or the matching encrypted historical data standard file are decrypted to obtain the matching decrypted real-time data standard file and / or the matching decrypted historical data standard file;

[0057] Parse and match the decrypted real-time data standard file and / or the decrypted historical data standard file to obtain corresponding matching real-time OPC UA information data and / or matching historical OPC UA information data.

[0058] A data management system based on an OPC UA information model is used to implement a data management method. The system includes a cloud data center, a trusted organization, several OPC UA servers, several data acquisition devices, and several terminal devices. The trusted organization is respectively communicated with and connected to the several OPC UA servers. The cloud data center is respectively communicated with and connected to the trusted organization, the several OPC UA servers, and the several terminal devices. Each OPC UA server is respectively communicated with and connected to the several terminal devices and several data acquisition devices within a communication range.

[0059] The beneficial effects of the present invention are:

[0060] The present invention discloses a data management method and system based on OPC UA information model, which adopts asymmetric encryption algorithm and digital identity authentication technology to encrypt transmitted data files, ensure the security of data files during transmission and storage, and effectively prevent data files from being leaked and tampered; utilizes the immutability of blockchain technology to realize data source verification and data operation audit, and improves the security and transparency of data management; by building a unified OPC UA information model, it realizes standardized conversion between different data sources, simplifies the data processing flow, and improves the processing efficiency; through the data interaction processing flow between the data acquisition device and the OPC UA server, it can quickly respond to the writing and query of real-time data to meet the real-time requirements; adopts blockchain network for data storage, realizes decentralization, reduces the risk of single point failure, and improves the overall reliability of the system; utilizes the distributed characteristics of blockchain, can easily cope with the rapid growth of data volume, and has good scalability; by providing real-time retrieval of real-time and historical data, it realizes efficient data query and improves user experience; through the constructed abnormal analysis model, it realizes intelligent and automatic abnormal analysis of OPC UA information data, and provides valuable data insight and decision support.

[0061] Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] Figure 1 It is a flowchart of the data management method based on the OPC UA information model in the present invention.

[0063] Figure 2 It is a structural block diagram of the data management system based on the OPC UA information model in the present invention. DETAILED DESCRIPTION

[0064] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments.

[0065] Embodiment 1:

[0066] like Figure 1 As shown, this embodiment provides a data management method based on the OPC UA information model, comprising the following steps:

[0067] S0: Generate keys and register identities for OPC UA servers based on a trusted authority, including the following steps:

[0068] S0-1: Based on the trusted institution, key generation and identity registration are performed for all OPC UA servers to obtain the public and private key pairs and signature information of each OPC UA server;

[0069] S0-1-1: Perform key initialization based on a trusted institution to obtain public parameters, master key and initial key;

[0070] GP={g,g1,g a ,e(g,g) a ,H1,H2,H3,H4,H5,H6}

[0071] PK={g,g1,g a ,e(g,g) a ,H u}

[0072] MSK = {g a ,a}

[0073] Where GP is the public parameter; MSK is the master key; PK is the initial key; a is the integer domain Z p Random numbers; H1, H2, H3, H4, H5, H6, H u All are target hash functions; g, g1, g a are all random numbers that are generators of the cyclic group G; e(g,g) a is a bilinear map of random numbers g;

[0074] S0-1-2: Collect the attribute information and server ID of the OPC UA server, and use the attribute information V u , public parameters, master key and initial key, use asymmetric encryption algorithm to generate keys for the OPC UA server and obtain the corresponding public-private key pair;

[0075] The formula is:

[0076] SK u = {MSK,V u ,K=g a g ab ,L u =g b ,(K' u =H3(V u )b )}

[0077]

[0078] In the formula, SK u is the private key of the OPC UA server u; b is the integer domain Z p Random number; L u , K' u is the second private key parameter of the OPC UA server u; H3 is the target hash function of the public parameter GP; u is the OPC UA server indicator; MSK is the master key; PK is the initial key; PK u is the public key of the OPC UA server u; g b , g a , g ab is the random number of the generator of the cyclic group G; V u It is the attribute information of OPC UA server u;

[0079] S0-1-3: Use the digital identity authentication method to register the identity based on the public-private key pair and the corresponding server ID, and obtain the signature information of the corresponding OPC UA server;

[0080] The formula is:

[0081]

[0082] Where k' is a random number; K u Registration parameters for the OPC UA server u; KID u The registration ID of the OPC UA server u; KID u and the corresponding K u The signature information {K u ,KID u}; H1 is the target hash function; ID u is the server ID of the OPC UA server u; is the prime order; P is the base point of the prime domain; mod(*) is the remainder function;

[0083] S0-2: Return the private key and signature information in the public-private key pair to the corresponding OPC UA server, and store the public key and cloud key in the public-private key pair in the controlled database of the cloud data center;

[0084] S1: According to the historical physical data of the physical entity, a corresponding OPC UA information model is constructed, and a corresponding OPC UA information model instance is created in the address space of the OPC UA server, including the following steps:

[0085] S1-1: using a data acquisition device to collect historical physical data of a physical entity, and setting corresponding nodes, node attributes, and node relationships according to physical parameters and physical parameter relationships in the historical physical data;

[0086] Nodes are the building blocks in the OPC UA Information Model and include, but are not limited to:

[0087] Object nodes: represent objects in the real world, such as devices, systems, or processes;

[0088] Variable node: represents data values, such as temperature, pressure, etc.;

[0089] Method node: represents a function or operation that can be called;

[0090] View Node: represents a subset of the OPC UA Information Model and can be used to organize nodes or provide a specific perspective;

[0091] Node attributes are descriptive attributes of each node. These attributes define the characteristics of the node, including but not limited to:

[0092] NodeId: unique identifier;

[0093] NodeClass: the type of node (such as object, variable, method, etc.);

[0094] BrowseName: the name used for browsing;

[0095] DisplayName: the name used for display;

[0096] Description: text describing the purpose of the node;

[0097] References: a list of references pointing to other nodes;

[0098] Value: For variable nodes, this attribute contains the current value of the variable;

[0099] DataType: For variable nodes, this attribute defines the type of the value;

[0100] Node relationship references are associations between nodes. They define the structure and relationship between nodes. References have a type and a direction. References allow building hierarchies and define how nodes relate to each other in the address space.

[0101] S1-2: Construct the OPC UA information model of the physical entity based on the nodes, node attributes and node relationships, extract the model metadata of the OPC UA information model, which defines the structure of the information model, including objects, variables, methods, references, etc., and send it to the OPC UA server;

[0102] S1-3: Using the OPC UA server, based on the model metadata, create a corresponding OPC UA information model instance in the address space, which involves defining new nodes and their attributes in the server's address space;

[0103] An OPC UA Information Model instance typically includes the following:

[0104] Object instances, such as devices, sensors, etc.

[0105] Variable instances, such as measured values ​​of temperature, pressure, speed, etc.

[0106] Method instances, such as control commands or operations;

[0107] Event instances, such as alarms or notifications;

[0108] The current or historical value of a variable node;

[0109] Timestamp and related information of event triggering;

[0110] The parameters and results of method calls;

[0111] S2: using a data acquisition device to collect real-time physical data according to the OPC UA information model of the physical entity, and sending the real-time physical data to the OPC UA server, including the following steps:

[0112] S2-1: using a data collection device, collecting real-time node values ​​and real-time node attribute values ​​of each dynamic node according to nodes, node attributes, and node relationships in the OPC UA information model of the physical entity;

[0113] Real-time node values ​​include: Real-time node process value: This refers to real-time data collected directly from physical devices or sensors, such as temperature, pressure, flow, etc. Real-time node variable value: If the data written is to a variable node, then this data can be called real-time node variable value;

[0114] Real-time node attribute values: Each node in OPC UA has attributes, such as value, quality, timestamp, etc. The data entered into these attributes is called real-time node attribute values;

[0115] S2-2: Integrate the real-time node values ​​and real-time node attribute values ​​of all dynamic nodes into real-time physical data in the OPC UA information model format;

[0116] S2-3: Based on the OPC UA protocol, the real-time physical data in the OPC UA format is sent to the OPC UA server through the OPC UA client;

[0117] S3: writing the real-time physical data to the corresponding OPC UA information model instance in the OPC UA server, and extracting the real-time OPC UA information data of the OPC UA information model instance, including the following steps:

[0118] S3-1: Use the OPC UA client to access the address space of the OPC UA server and locate the target node in the OPC UA information model instance;

[0119] S3-2: Encapsulate the real-time node value and the real-time node attribute value of the dynamic node corresponding to the target node in the real-time physical data in the OPC UA format to obtain the corresponding real-time node encapsulation data;

[0120] S3-3: Use the write service of the OPC UA protocol to write the real-time node encapsulation data of the dynamic node to the target node of the OPC UA information model instance;

[0121] S3-4: traverse the real-time node encapsulation data of all dynamic nodes of the real-time physical data until all target nodes of the OPC UA information model instance are written;

[0122] S3-5: according to the preset subscription service, extract the real-time node encapsulation data written by all monitoring nodes in the OPC UA information model instance, and integrate them to obtain the real-time OPC UA information data;

[0123] S4: Convert the real-time OPC UA information data into a real-time data standard file in a common format for the cloud data center and the OPC UA client, and upload it to the cloud data center, including the following steps:

[0124] S4-1: Set the common format of the cloud data center and the OPC UA client to XML format, and convert the real-time OPC UA information data into a real-time data standard file in XML format;

[0125] XML is a widely used format, and there are many mature tools and libraries to process XML data. OPC UA clients can parse XML files and convert them back to OPC UA information models for further processing or display.

[0126] S4-2: Encrypt the real-time data standard file according to the private key in the public-private key pair to obtain the encrypted real-time data standard file;

[0127] The formula is:

[0128] M u1 =E(SK u1 ,m u1 )

[0129] Where M u1 is the encrypted real-time data standard file; E(*) is the asymmetric encryption function; m u1 Standard file for real-time data; SK u1 is the private key of OPC UA server u1; u1 is the OPC UA server indicator;

[0130] S4-3: Sign the encrypted real-time data standard file according to the signature information to obtain real-time signature data of the encrypted real-time data standard file;

[0131] The formula is:

[0132]

[0133] In the formula, r' is a random number; is the prime order; P is the base point of the prime domain; H2 is the target hash function; K u1 For the signature information {K u1 ,KID u1 Registration parameters of OPC UA server u1 in}; KID u1 The registration ID of the OPC UA server u1 in the signature information; ID u1 is the server ID of OPC UA server u1; the real-time signature data is {ID u1 ,γ'={K u1 ,R u1 ,M u1 ,B u1}}; R u1 ,B u1 ,γ' are the signature parameters of OPC UA server u1;

[0134] S4-4: Upload the encrypted real-time data standard file and real-time signature data in XML format to the cloud data center;

[0135] S5: Using the cloud data center, performing an anomaly analysis on the real-time data standard file, obtaining the real-time anomaly analysis result, and performing distributed storage on the real-time data standard file and the real-time anomaly analysis result, including the following steps:

[0136] S5-1: Based on the cloud data center, call the trusted organization to perform signature verification on the real-time signature data. If the signature verification passes, proceed to the next step, otherwise, end the data management;

[0137] The formula is:

[0138] β u1 B u1 P=β u1 H2(R u1 ,ID u1 ,K u1 )R u1 +β u1 K u1 +β u1 H1(ID u1 ,K u1 )PK u1

[0139] If the left formula is equal to the right formula, the signature verification is successful;

[0140] S5-2: decrypting the encrypted real-time data standard file according to the public key of the OPC UA server stored in the controlled database to obtain the decrypted real-time data standard file;

[0141] The formula is:

[0142] m' u1 =E - (PK u1 |RR1,M u1 )

[0143] In the formula, m' u1 It is a standard file of real-time data after decryption; E - (*) is an asymmetric decryption function; M u1 It is the encrypted real-time data standard file; PK u1 is the public key of the OPC UA server u1;

[0144] S5-3: parsing the decrypted real-time data standard file, and constructing a real-time OPC UA information graph corresponding to the real-time OPC UA information data;

[0145] S5-4: Use the pre-trained anomaly analysis model to perform anomaly analysis on the real-time OPC UA information graph to obtain real-time anomaly analysis results;

[0146] The anomaly analysis model is built based on the Graph Convolutional Network (GCN). The real-time OPC UA information graph includes the real-time node value features of each node in the OPC UA information model instance, the edge features of the node relationship, and the real-time node attribute value features, which constitute the real-time graph features of the real-time OPC UA information graph. Anomaly analysis is performed based on the real-time graph features to obtain real-time anomaly analysis results.

[0147] S5-5: Use the blockchain network to distribute the encrypted real-time data standard files and real-time abnormal analysis results, including the following steps:

[0148] S5-5-1: Generate a search tag according to the timestamp and physical entity ID corresponding to the encrypted real-time data standard file;

[0149] S5-5-2: According to the replica mechanism, the encrypted real-time data standard file is fragmented to obtain a number of data file fragments including replica fragments;

[0150] S5-5-3: Sending several data file shards to several nodes in the blockchain network, using the nodes to locally store the received data file shards, and obtaining corresponding storage addresses;

[0151] S5-5-4: Record the storage address of each data file shard in the blockchain network, as well as the corresponding search tags and real-time anomaly analysis results in the distributed ledger;

[0152] S6: Use the terminal device to query data on the OPC UA server and / or cloud data center through the OPC UA client, including the following steps:

[0153] S6-1: If real-time data query is performed, the terminal device is used to connect to the OPC UA server through the OPC UA client, and the real-time query information is sent to the OPC UA server;

[0154] S6-2: Based on the OPC UA server, according to the real-time query information, obtain the matching encrypted real-time data standard file, and send the matching encrypted real-time data standard file and the public key in XML format to the terminal device;

[0155] S6-3: If historical data query is performed, the terminal device is used to connect to the cloud data center through the OPC UA client, and the real-time query information is sent to the cloud data center;

[0156] S6-4: Based on the cloud data center, according to the real-time query information, search in the distributed ledger to obtain matching search tags;

[0157] S6-5: According to the matching storage address corresponding to the matching search tag, a number of matching data file fragments are extracted from the blockchain network, and restored to obtain the corresponding matching encrypted historical data standard file;

[0158] S6-6: Send the matching encrypted historical data standard file and the public key in XML format to the terminal device;

[0159] S6-7: Based on the terminal device, decrypt the matching encrypted real-time data standard file and / or the matching encrypted historical data standard file according to the public key to obtain the matching decrypted real-time data standard file and / or the matching decrypted historical data standard file;

[0160] S6-8: Parse the matching decrypted real-time data standard file and / or the matching decrypted historical data standard file to obtain corresponding matching real-time OPC UA information data and / or matching historical OPC UA information data.

[0161] Embodiment 2:

[0162] like Figure 2 As shown, this embodiment provides a data management system based on the OPC UA information model, which is used to implement a data management method. The system includes a cloud data center, a trusted organization, several OPC UA servers, several data acquisition devices, and several terminal devices. The trusted organization is respectively connected to the several OPC UA servers in communication, the cloud data center is respectively connected to the trusted organization, the several OPC UA servers, and the several terminal devices in communication, and each OPC UA server is respectively connected to the several terminal devices and the several data acquisition devices within the communication range in communication;

[0163] The cloud data center is used to perform anomaly analysis on the real-time data standard file, obtain the real-time anomaly analysis results, and perform distributed storage on the real-time data standard file and the real-time anomaly analysis results;

[0164] Trusted authority, used to generate keys and register identities for OPC UA servers;

[0165] The data acquisition device constructs a corresponding OPC UA information model according to the historical physical data of the physical entity; collects real-time physical data according to the OPC UA information model of the physical entity, and sends the real-time physical data to the OPC UA server;

[0166] The OPC UA server is used to create a corresponding OPC UA information model instance in the address space; write the real-time physical data to the corresponding OPC UA information model instance, and extract the real-time OPC UA information data of the OPC UA information model instance; convert the real-time OPC UA information data into a real-time data standard file in a common format for the cloud data center and the OPC UA client, and upload it to the cloud data center;

[0167] Terminal devices are used to query data on OPC UA servers and / or cloud data centers through OPC UA clients.

[0168] The present invention discloses a data management method and system based on OPC UA information model, which adopts asymmetric encryption algorithm and digital identity authentication technology to encrypt transmitted data files, ensure the security of data files during transmission and storage, and effectively prevent data files from being leaked and tampered; utilizes the immutability of blockchain technology to realize data source verification and data operation audit, and improves the security and transparency of data management; by building a unified OPC UA information model, it realizes standardized conversion between different data sources, simplifies the data processing flow, and improves the processing efficiency; through the data interaction processing flow between the data acquisition device and the OPC UA server, it can quickly respond to the writing and query of real-time data to meet the real-time requirements; adopts blockchain network for data storage, realizes decentralization, reduces the risk of single point failure, and improves the overall reliability of the system; utilizes the distributed characteristics of blockchain, can easily cope with the rapid growth of data volume, and has good scalability; by providing real-time retrieval of real-time and historical data, it realizes efficient data query and improves user experience; through the constructed abnormal analysis model, it realizes intelligent and automatic abnormal analysis of OPC UA information data, and provides valuable data insight and decision support.

[0169] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A data management method based on the OPC UA information model, characterized in that: The steps include: According to the historical physical data of the physical entity, a corresponding OPC UA information model is constructed, and a corresponding OPC UA information model instance is created in the address space of the OPC UA server; Using a data acquisition device, collecting real-time physical data according to the OPC UA information model of the physical entity, and sending the real-time physical data to the OPC UA server; Write the real-time physical data to the corresponding OPC UA information model instance in the OPC UA server, and extract the real-time OPC UA information data of the OPC UA information model instance; Convert real-time OPC UA information data into real-time data standard files in a common format for the cloud data center and OPC UA clients, and upload them to the cloud data center; Using the cloud data center, the real-time data standard file is analyzed for abnormality, the real-time abnormality analysis result is obtained, and the real-time data standard file and the real-time abnormality analysis result are distributedly stored; Use terminal devices to query data on OPC UA servers and / or cloud data centers through OPC UA clients.

2. The data management method based on the OPC UA information model according to claim 1, characterized in that: According to the historical physical data of the physical entity, a corresponding OPC UA information model is constructed, and a corresponding OPC UA information model instance is created in the address space of the OPC UA server, including the following steps: Using a data acquisition device, collect historical physical data of the physical entity, and set corresponding nodes, node attributes and node relationships according to physical parameters and physical parameter relationships in the historical physical data; Based on nodes, node attributes, and node relationships, build an OPC UA information model of the physical entity, extract model metadata of the OPC UA information model, and send it to the OPC UA server; Use the OPC UA server to create a corresponding OPC UA information model instance in the address space based on the model metadata.

3. The data management method based on the OPC UA information model according to claim 2, characterized in that: Using a data acquisition device, collecting real-time physical data according to an OPC UA information model of a physical entity, and sending the real-time physical data to an OPC UA server, includes the following steps: Using a data collection device, collecting real-time node values ​​and real-time node attribute values ​​of each dynamic node according to nodes, node attributes, and node relationships in an OPC UA information model of the physical entity; Integrate the real-time node values ​​and real-time node attribute values ​​of all dynamic nodes into real-time physical data in the OPC UA information model format; Based on the OPC UA protocol, the real-time physical data in OPC UA format is sent to the OPC UA server through the OPC UA client.

4. The data management method based on the OPC UA information model according to claim 3, characterized in that: Writing real-time physical data to a corresponding OPC UA information model instance in an OPC UA server and extracting real-time OPC UA information data of the OPC UA information model instance includes the following steps: Use an OPC UA client to access the address space of the OPC UA server and locate the target node in the OPC UA information model instance; Encapsulate the real-time node value and the real-time node attribute value of the dynamic node corresponding to the target node in the real-time physical data in the OPC UA format to obtain the corresponding real-time node encapsulation data; Use the write service of the OPC UA protocol to write the real-time node encapsulated data of the dynamic node to the target node of the OPC UA information model instance; Traverse the real-time node encapsulation data of all dynamic nodes of the real-time physical data until all target nodes of the OPC UA information model instance are written; According to the preset subscription service, the real-time node encapsulation data written by all monitoring nodes in the OPC UA information model instance is extracted and integrated to obtain the real-time OPC UA information data.

5. The data management method based on the OPC UA information model according to claim 1, characterized in that: Also includes: Based on the trusted authority, the key generation and identity registration of the OPC UA server includes the following steps: Based on the trusted organization, key generation and identity registration are performed for all OPC UA servers to obtain the public and private key pairs and signature information of each OPC UA server; The private key and signature information in the public-private key pair are returned to the corresponding OPC UA server, and the public key and cloud key in the public-private key pair are stored in a controlled database in the cloud data center.

6. The data management method based on the OPC UA information model according to claim 5, characterized in that: Converting real-time OPC UA information data into a real-time data standard file in a common format for the cloud data center and the OPC UA client, and uploading it to the cloud data center includes the following steps: Set the common format of the cloud data center and OPC UA client to XML format, and convert the real-time OPC UA information data into a real-time data standard file in XML format; Encrypting the real-time data standard file according to the private key in the public-private key pair to obtain the encrypted real-time data standard file; According to the signature information, the encrypted real-time data standard file is signed to obtain the real-time signature data of the encrypted real-time data standard file; Upload the encrypted real-time data standard file and real-time signature data in XML format to the cloud data center.

7. The data management method based on the OPC UA information model according to claim 6, characterized in that: Performing an abnormality analysis on a real-time data standard file to obtain a real-time abnormality analysis result, and performing distributed storage on the real-time data standard file and the real-time abnormality analysis result, includes the following steps: Based on the cloud data center, a trusted institution is called to perform signature verification on the real-time signature data. If the signature verification passes, the next step is entered; otherwise, data management ends. Decrypting the encrypted real-time data standard file according to the public key of the OPC UA server stored in the controlled database to obtain the decrypted real-time data standard file; Parse the decrypted real-time data standard file and construct a real-time OPC UA information graph corresponding to the real-time OPC UA information data; Use the pre-trained anomaly analysis model to perform anomaly analysis on the real-time OPC UA information graph and obtain real-time anomaly analysis results; Use the blockchain network to distribute and store encrypted real-time data standard files and real-time abnormal analysis results.

8. The data management method based on the OPC UA information model according to claim 7, characterized in that: Using the blockchain network, the encrypted real-time data standard files and real-time abnormal analysis results are distributedly stored, including the following steps: Generate a search tag according to the timestamp and physical entity ID corresponding to the encrypted real-time data standard file; According to the replica mechanism, the encrypted real-time data standard file is fragmented to obtain a number of data file fragments including replica fragments; Sending several data file shards to several nodes in the blockchain network, using the nodes to locally store the received data file shards and obtain the corresponding storage addresses; The storage address of each data file shard in the blockchain network, as well as the corresponding retrieval tags and real-time anomaly analysis results are recorded in the distributed ledger.

9. The data management method based on the OPC UA information model according to claim 8, characterized in that: Use the terminal device to query data on the OPC UA server and / or cloud data center through the OPC UA client, including the following steps: If real-time data query is performed, the terminal device is used to connect to the OPC UA server through the OPC UA client and send the real-time query information to the OPC UA server; Based on the OPC UA server, according to the real-time query information, the real-time data standard file matching encryption is obtained, and the real-time data standard file matching encryption and the public key in XML format are sent to the terminal device; If historical data query is performed, the terminal device is used to connect to the cloud data center through the OPC UA client and send the real-time query information to the cloud data center; Based on the cloud data center, according to the real-time query information, search in the distributed ledger to obtain matching search tags; According to the matching storage address corresponding to the matching search tag, several matching data file fragments are extracted in the blockchain network and restored to obtain the corresponding matching encrypted historical data standard file; Send the matching encrypted historical data standard file and public key in XML format to the terminal device; Based on the terminal device, according to the public key, the real-time data standard file after matching encryption and / or the historical data standard file after matching encryption are decrypted to obtain the real-time data standard file after matching decryption and / or the historical data standard file after matching decryption; Parse and match the decrypted real-time data standard file and / or the decrypted historical data standard file to obtain corresponding matching real-time OPC UA information data and / or matching historical OPC UA information data.

10. A data management system based on an OPC UA information model, used to implement the data management method according to any one of claims 1 to 9, characterized in that: The system includes a cloud data center, a trusted organization, several OPC UA servers, several data acquisition devices and several terminal devices. The trusted organizations are respectively connected to the several OPC UA servers in communication, the cloud data center is respectively connected to the trusted organizations, several OPC UA servers and several terminal devices in communication, and each of the OPC UA servers is respectively connected to the several terminal devices and several data acquisition devices within the communication range.

Images