General detection recording equipment for information system

Abstract

A general detection and recording device for an information system comprises a detection and recording device software module, the detection and recording device software module comprises a recording device software module and an analysis device software module, and the recording device software module comprises a data recording module and a timing system calibration module. The data recording module comprises a collection configuration setting module, a real-time collection module, a collection data analysis and display module and a collection data storage module, and is used for monitoring communication data between devices in the system in real time, analyzing and displaying the communication data and storing the collected data in a local disk; the analysis equipment software module comprises a data query module and a statistical analysis module and is used for carrying out data preprocessing and application analysis on the stored acquired data, and the data query module comprises an information setting sub-module and a query data sub-module. The device is used as a general protocol analyzer, is convenient to check and maintain various system devices, and provides powerful support for fault positioning and training use of an information system.

Description

Technical Field

[0001] The invention relates to the technical field of information system detection and admission, and in particular to a general detection and admission device for an information system. Background Art

[0002] The information system plays an important role in the decision-making and application of joint training. In the training of various tasks, the system generates a large amount of data reflecting the machine operation process and training effectiveness. These data are of great significance to the evaluation of the training effectiveness of the information system. The detection and admission equipment can use Ethernet network monitoring technology, serial port monitoring technology and CAN bus monitoring technology without changing the detection and admission equipment to capture and analyze the comprehensive information system data in real time, monitor the communication data between various devices inside and outside the system, monitor the working status of the system, and perform data analysis afterwards, which is convenient for users to use for training or post-analysis, and provide information drive and application support for the training effectiveness evaluation of the information system. At the same time, the detection and admission equipment can be used as an expansion space for recording files.

[0003] Faced with complex and numerous systems and equipment, communication protocols are constantly being iterated and upgraded, and the amount of communication data has doubled. In order to meet new challenges, the improvement of detection and admission equipment has become particularly important. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a general detection and recording device for information systems in view of the deficiencies in the prior art. The device customizes the message protocol by extracting the device protocols belonging to the entire system through configuration files. The device is used as a general protocol analyzer to facilitate viewing and maintenance of various system devices, and provide strong support for information system fault location and training.

[0005] The technical problem to be solved by the present invention is achieved through the following technical solutions. The present invention is a general detection and admission device for an information system, which is used to collect and analyze the training data in the training work. The device includes a detection and admission device software module, which includes an admission device software module and an analysis device software module. The recording device software module includes a data recording module and a time system calibration module. The data recording module includes a collection configuration setting module, a real-time collection module, a collection data analysis and display module, and a collection data storage module, which is used to monitor the communication data between the devices in the system in real time and analyze and display it, and save the collected data in the local disk; The analysis equipment software module includes a data query module and a statistical analysis module, which perform data preprocessing and application analysis on the stored collected data. The data query module includes an information setting submodule and a query data submodule, which are used to query and perform statistical analysis on the collected information.

[0006] The technical problem to be solved by the present invention can also be further achieved by the following technical solutions: for the above-mentioned general detection and recording device for the information system, the data recording module is used to record data from the Ethernet interface, the serial port interface, and the CAN bus interface at the same time, collect and analyze the specified data on the system network, display the collected data summary information as needed, display the data content by category, and store the received various types of information data in a unified format in the computer system of the portable reinforcement device for subsequent analysis; The time system calibration module is used to receive the timing information of the time system equipment and synchronize the detection and recording equipment with the time system timing to provide time uniformity support for data processing.

[0007] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned general detection and admission device for information systems, the acquisition configuration setting module is used to adapt to the needs of training work. The detection and admission device starts the software by reading the corresponding configuration file, supports modifying the configuration file as needed to achieve work under different configurations, supports customized message protocol functions, and allows setting field type, length, and retained precision information to complete field customization; The real-time acquisition module is used to conduct comprehensive data acquisition of the training data generated during the training work; it has the ability to record network interactive messages, serial port interactive messages, CAN bus interactive messages, and serial port communication capabilities; The analysis and display acquisition data module is used to analyze the test and recorded data; The collected data saving module is used for data storage and management, and stores the parsed various information data in a unified format in the computer system of the detection and admission equipment to facilitate subsequent analysis and use.

[0008] The technical problem to be solved by the present invention can be further achieved by the following technical solution: for the above-mentioned general detection and admission device for information systems, the data preprocessing of the analysis device software module is to screen and process the collected information system readable message data according to the set collection data type and time parameters; The data query module is used to query the stored data collected on the system network; The statistical analysis module is used to support statistical analysis of historical data, can analyze network communication status, and support the development of the information system.

[0009] The technical problem to be solved by the present invention can also be further achieved by the following technical solutions: for the above-mentioned general detection and admission device for information systems, the query data submodule is used to support users to display recorded information through query conditions, display the results of information data analysis, list the actual meaning of each field in the data for users to observe, and display historical data according to query conditions, allowing users to classify and display query result information; The statistical analysis module is used for health monitoring, analyzing the communication status of the network, serial port, and CAN bus, and has a graphic report function. It performs post-analysis on the data collected on the system network and displays the situation map and attack process in the form of graphic reports.

[0010] The technical problem to be solved by the present invention can also be further achieved by the following technical solutions: for the above-mentioned general detection and recording equipment for information systems, the acquisition configuration setting module is used to continuously, accurately and reliably collect the key interactive information of the actual installation between the test equipment, the coordination management and the exchange network equipment system; at the same time, it has the ability to record the mutual reporting messages between the network, serial port and CAN bus, supports the use of customized message protocols, parses and processes the collected information by reading the configuration file, and queries the relevant data for subsequent analysis according to the user's requirements; The device customizes the message protocol by extracting the device protocols of the entire system through the configuration file. Through the protocol file edited by the user, the data message type is displayed on the monitoring setting interface for the user to choose. After the user confirms, the corresponding data message protocol is saved to the protocol cache according to the user's choice. At the same time, a page for displaying the parsed message is generated and the specific name of the display information is displayed on the page; The information configuration submodule is divided into a system initialization phase display information configuration module and an operation phase display information configuration module. The display information configuration module in the initialization phase is used to set the platform type, machine number, task name and acquisition frequency, select the display information type, and complete the initialization information configuration; the display information configuration module in the operation phase is used to select the display information type and filter out unnecessary acquisition information, but does not change the configuration information during initialization.

[0011] The technical problem to be solved by the present invention can also be further achieved by the following technical solutions. For the above-mentioned general detection and admission device for information systems, the real-time acquisition module performs real-time data processing according to the protocol configuration, which includes: After writing data messages into the buffer, they are processed, and error messages are identified and illegal messages are filtered according to message identifiers. The messages are classified according to message types, and all types of information data received are stored in the local hard disk in a unified format for subsequent analysis, display and query. It can monitor multiple pairs of network communications with the same IP and MAC address at the same time, distinguish channels according to IPValid and MACValid, and record and store related messages respectively.

[0012] The technical problem to be solved by the present invention can be further achieved by the following technical solutions. For the above-mentioned general detection and admission device for information systems, the parsing and display acquisition data module performs real-time interface interaction according to the protocol configuration, which includes: According to the header information of the received data message, the corresponding parsing protocol is searched in the protocol buffer, the N types of data messages agreed by the configuration file are parsed, displayed and retrieved, and the collected data is displayed frame by frame on the software interface; Users customize the message protocol according to the configuration file, allowing the field type, length, and precision to be set to complete the customization of the field.

[0013] The technical problem to be solved by the present invention can also be further achieved by the following technical solution. For the above-mentioned general detection and admission device for information systems, the acquisition data storage module further includes a data protocol library and a data storage library, wherein: The data protocol library has multiple data transmission protocols built in it, and different types of training data are collected based on different data transmission protocols; The data repository temporarily caches the collected training data, and the temporarily cached training data is deleted after being entered.

[0014] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the general detection and admission equipment for information systems mentioned above, the equipment adopts a portable all-in-one design, including a display unit, a control unit, an electronic chassis unit and an interface communication unit. The main unit of the equipment is a closed structure made of aluminum alloy.

[0015] Compared with the prior art, the present invention has the following beneficial effects: 1. The present invention realizes the product's self-editable function through model customization. This function can be diversifiedly configured according to actual tasks, such as configuration of collection methods, configuration of collection platforms, configuration of collection contents, and configuration updates of replacement and upgrades, etc., which solves the problems of numerous system models, difficult model adaptation, and single equipment utilization scenarios. It focuses on solving the confidentiality problem of model message protocols, which is convenient for users to independently use and update different usage scenarios, and reduces the degree of user dependence on the developer; 2. The present invention collects the actual interactive information between the information system and other related system equipment in real time, stably and reliably through data monitoring without affecting the normal operation of the equipment and system, analyzes and processes the collected information, and provides support for training, maintenance and guarantee. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A structural schematic diagram of the present invention; Figure 2 It is a module composition diagram of the present invention; Figure 3 A workflow diagram of the present invention; Figure 4 This is a structural unit composition diagram of the present invention. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0018] Reference Figure 1-4 , a general detection and acquisition device for an information system, used for acquiring and analyzing the training data in the training work, including an acquisition device software module and an analysis device software module, the acquisition device software module includes a data acquisition function and a time system calibration function, wherein the data acquisition function is divided into four modules: acquisition configuration setting, real-time acquisition, analysis and display of acquired data, and storage of acquired data, which can monitor the communication data between the devices in the system in real time and analyze and display, and save the acquired data in the local disk; The analysis equipment software module includes data query and statistical analysis functions. Data query includes two sub-functions: information setting and data query, which can query and perform statistical analysis on the collected information. Among them, the main characteristics of information collection methods are: (1) Capable of recording and storing information system communication messages; (2) Do not inject data into the information system and do not interfere with the normal communication of the information system.

[0019] The data acquisition function can simultaneously acquire data from the Ethernet interface, serial port interface, and CAN bus interface, collect and analyze specified data on the system network, display the collected data summary information as needed, classify and display the data content, and store the received various information data in a unified format in the computer system of the portable reinforcement device for subsequent analysis.

[0020] The main monitoring data include: (a) Capable of monitoring the communication data between the test equipment and the coordination equipment; (b) Capable of monitoring the communication data between the coordination device and the interactive network.

[0021] The time system calibration module can receive the timing information of the time system equipment and synchronize the detection and recording equipment with the time system timing at all times, providing time unification support for data processing.

[0022] The data query function performs data query on the stored data collected on the system network: (a) Support users to query relevant data through query conditions, such as admission time and data type; (b) It can display the recorded information including the information collection time, source address, destination address, etc.; it can display the results of information data analysis and list the actual meaning of each field in the data for users to observe.

[0023] The statistical analysis function supports statistical analysis of historical data, can analyze network communication status, and support the development of the information system.

[0024] Specific: The data acquisition function can simultaneously acquire data from the Ethernet interface, serial port interface, and CAN bus interface, collect and analyze specified data on the system network, display the collected data summary information as needed, classify and display the data content, and store the received various information data in a unified format in the computer system of the portable reinforcement device for subsequent analysis.

[0025] The acquisition configuration setting module is used to adapt to the needs of training work. The detection and admission equipment starts the software by reading the corresponding configuration file, and supports modifying the configuration file as needed to achieve work under different configurations; it supports customized message protocol functions, and allows setting field type, length, retention accuracy and other information to complete field customization.

[0026] The real-time acquisition module is used to conduct comprehensive data acquisition of the training data generated during the training work; it has the ability to record network interactive messages, serial port interactive messages, CAN bus interactive messages, and serial port communication capabilities; The module for analyzing and displaying collected data can analyze the data collected during the test; The data collection and storage module is used for data storage and management, and stores the parsed information data in a unified format in the computer system of the detection and recording device for subsequent analysis and use; The time system calibration module can receive the timing information of the time system equipment and synchronize the detection and recording equipment with the time system timing at all times, providing time unification support for data processing.

[0027] The data query module supports users to query relevant data through query conditions, such as admission time, source address, target address and other information, and complete analysis and other operations. It can display the recorded information including the admission time, source address, target address and other information; it can display the results of information data analysis and list the actual meaning of each field in the data for users to observe; it displays historical data according to query conditions and allows users to classify and display query result information; The statistical analysis module and health monitoring module can analyze the communication status of the network, serial port, and CAN bus; it has a graphic report function to perform post-analysis on the data collected on the system network, and display the situation map, attack process, etc. in the form of graphic reports.

[0028] Furthermore, for the collection configuration setting module and the information setting module, the information system is a general detection and recording device. Under the premise of not affecting the normal operation of the actual equipment and the system, it continuously, accurately and reliably collects the key interactive information between the test equipment, the coordination management and the switching network equipment system; it has the ability to record the mutual reporting messages between the network, serial port and CAN bus; it supports the use of customized message protocols to parse and process the collected information by reading the configuration file, and query the relevant data according to the user's requirements for subsequent analysis.

[0029] The device customizes the message protocol by extracting the device protocols belonging to the entire system through the configuration file. The data message type in the protocol file edited by the user is displayed on the monitoring setting interface for the user to choose. After the user confirms, the corresponding data message protocol is saved to the protocol cache according to the user's selection. At the same time, a page displaying the parsed message is generated and the specific name of the display information is displayed on the page.

[0030] The information configuration module is divided into the system initialization phase display information configuration module and the operation phase display information configuration module. The display information configuration module in the initialization phase can set the platform type, machine number, task name and collection frequency, select the display information type, and complete the initialization information configuration. The display information configuration module in the operation phase can select the display information type and filter out unnecessary collection information, but the configuration information during initialization cannot be changed.

[0031] The device can be edited independently, which solves the problems of numerous system models, difficult model adaptation, and single device utilization scenarios. It focuses on solving the confidentiality problem of model message protocols, making it convenient for users to independently use and update different usage scenarios, reducing users' dependence on developers.

[0032] Furthermore, the communication method in the real-time acquisition module includes the following specific contents: The synchronous serial port module can provide 4 serial interface channels, support synchronous DLC / SDLC, asynchronous UART, Bit stream and other working modes according to needs, and the interface types support RS-232, RS-422, RS-485; can be configured for full-duplex and half-duplex operation; The CAN bus module can provide 2 CAN interfaces and support CAN2.0A and CAN2.0B frame protocols.

[0033] In actual use, the device adopts a portable all-in-one design, in which: The portable all-in-one machine is composed of a display unit, a control unit, an electronic chassis unit, an interface communication unit and other housing structural units. Figure 4 Secondly, the main unit is a closed structure made of aluminum alloy, which has good airtight protection performance. The advantages of the present invention are: The present invention realizes the product's independent editable function through model customization. This function can be configured in a diversified manner according to actual tasks, such as configuration of collection methods, configuration of collection platforms, configuration of collection contents, and configuration updates for replacement and upgrades, etc. It solves the problems of numerous system models, difficult model adaptation, and single equipment utilization scenario. It focuses on solving the confidentiality problem of model message protocols, which is convenient for users to independently use and update different usage scenarios, and reduces the degree of user dependence on developers. Secondly, the present invention uses data monitoring to collect the actual installation interaction information between the information system and other related system equipment in real time, stably and reliably without affecting the normal operation of the equipment and system, analyzes and processes the collected information, and provides support for training, maintenance, and assurance.

Claims

1. A general detection and admission device for an information system, characterized in that: The device is used to record and analyze the training data in the training work. The device includes a detection and recording device software module, which includes a recording device software module and an analysis device software module. The recording device software module includes a data recording module and a time system calibration module. The data recording module includes a collection configuration setting module, a real-time collection module, a collection data analysis and display module, and a collection data storage module, which is used to monitor the communication data between the devices in the system in real time and analyze and display it, and save the collected data in the local disk; The analysis equipment software module includes a data query module and a statistical analysis module, which perform data preprocessing and application analysis on the stored collected data. The data query module includes an information setting submodule and a query data submodule, which are used to query and perform statistical analysis on the collected information.

2. The universal detection and admission device for information systems according to claim 1, characterized in that: The data acquisition module is used to simultaneously acquire data from the Ethernet interface, the serial port interface, and the CAN bus interface, collect and analyze the specified data on the system network, display the collected data summary information as needed, classify and display the data content, and store the received various types of information data in a unified format in the computer system of the portable reinforcement device for subsequent analysis; The time system calibration module is used to receive the timing information of the time system equipment and synchronize the detection and recording equipment with the time system timing to provide time uniformity support for data processing.

3. The universal detection and admission device for information systems according to claim 1 or 2, characterized in that: The acquisition configuration setting module is used to meet the needs of training work. The detection and admission equipment starts the software by reading the corresponding configuration file, supports modifying the configuration file as needed to achieve work under different configurations, supports customized message protocol functions, and allows setting field type, length, and retained precision information to complete field customization; The real-time acquisition module is used to conduct comprehensive data acquisition of the training data generated during the training work; it has the ability to record network interactive messages, serial port interactive messages, CAN bus interactive messages, and serial port communication capabilities; The analysis and display acquisition data module is used to analyze the test and recorded data; The collected data saving module is used for data storage and management, and stores the parsed various information data in a unified format in the computer system of the detection and admission equipment to facilitate subsequent analysis and use.

4. The universal detection and admission device for information systems according to claim 1, characterized in that: The data preprocessing of the analysis device software module is to filter and process the collected information system readable message data according to the set collection data type and time parameters; The data query module is used to query the stored data collected on the system network; The statistical analysis module is used to support statistical analysis of historical data, can analyze network communication status, and support the development of the information system.

5. The universal detection and admission device for information systems according to claim 1 or 4, characterized in that: The query data submodule is used to support users to display the recorded information through query conditions, display the results of information data analysis, list the actual meaning of each field in the data for users to observe, and display historical data according to the query conditions, allowing users to classify and display the query result information; The statistical analysis module is used for health monitoring, analyzing the communication status of the network, serial port, and CAN bus, and has a graphic report function. It performs post-analysis on the data collected on the system network and displays the situation map and attack process in the form of graphic reports.

6. The universal detection and recording device for information systems according to claim 1, characterized in that: The acquisition configuration setting module is used to continuously, accurately and reliably collect the key interactive information between the test equipment, coordination management and exchange network equipment systems; it also has the ability to record network, serial port and CAN bus mutual reporting messages, supports customized message protocols, parses and processes the collected information by reading configuration files, and queries relevant data for subsequent analysis according to user requirements; The device customizes the message protocol by extracting the device protocols of the entire system through the configuration file. Through the protocol file edited by the user, the data message type is displayed on the monitoring setting interface for the user to choose. After the user confirms, the corresponding data message protocol is saved to the protocol cache according to the user's choice. At the same time, a page for displaying the parsed message is generated and the specific name of the display information is displayed on the page; The information configuration submodule is divided into a system initialization phase display information configuration module and an operation phase display information configuration module. The display information configuration module in the initialization phase is used to set the platform type, machine number, task name and acquisition frequency, select the display information type, and complete the initialization information configuration; the display information configuration module in the operation phase is used to select the display information type and filter out unnecessary acquisition information, but does not change the configuration information during initialization.

7. The universal detection and admission device for information systems according to claim 1, characterized in that: The real-time acquisition module performs real-time data processing according to the protocol configuration, including: After writing data messages into the buffer, they are processed, and error messages are identified and illegal messages are filtered according to message identifiers. The messages are classified according to message types, and all types of information data received are stored in the local hard disk in a unified format for subsequent analysis, display and query. It can monitor multiple pairs of network communications with the same IP and MAC address at the same time, distinguish channels according to IPValid and MACValid, and record and store related messages respectively.

8. The universal detection and admission device for information systems according to claim 1, characterized in that: The analysis and display acquisition data module performs real-time interface interaction according to the protocol configuration, including: According to the header information of the received data message, the corresponding parsing protocol is searched in the protocol buffer, the N types of data messages agreed by the configuration file are parsed, displayed and retrieved, and the collected data is displayed frame by frame on the software interface; Users customize the message protocol according to the configuration file, allowing the field type, length, and precision to be set to complete the customization of the field.

9. The universal detection and admission device for information systems according to claim 1, characterized in that: The acquisition data storage module further includes a data protocol library and a data storage library, wherein: The data protocol library has multiple data transmission protocols built in it, and different types of training data are collected based on different data transmission protocols; The data repository temporarily caches the collected training data, and the temporarily cached training data is deleted after being entered.

10. The universal detection and admission device for information systems according to claim 1, characterized in that: The device adopts a portable all-in-one design, including a display unit, a control unit, an electronic chassis unit and an interface communication unit. The main unit of the device is a closed structure made of aluminum alloy.

Images