Fault detection method, device, equipment and medium for C2F scenarios

Abstract

The embodiment of the present application provides a fault detection method, device, equipment and medium for C2F scenarios, which belongs to the field of industrial message processing technology. The method includes: determining the target link formed between each device node in the target industrial system based on topology information, selecting a device node that works normally under any target link as a reference node, and determining other device nodes under the target link as nodes to be detected; based on the reference message information of the reference node, based on the corresponding functional information of each node to be detected, along the target link, determining the expected message information expected to be output by the target detection node under normal working conditions, wherein the target detection node is obtained by selecting any one of multiple nodes to be detected; and comparing the actual message information actually output by the target detection node with the expected message information to determine the target fault detection result of the target industrial system. The present application can improve the fault detection accuracy and real-time performance of industrial systems.

Description

Technical Field

[0001] The present application relates to the technical field of industrial message processing, and in particular to a fault detection method, device, equipment and medium for a C2F scenario. Background Art

[0002] With the continuous development of the Internet, traditional control systems can no longer meet the interaction needs between users and industrial platforms. As a result, the consumer-to-factory e-commerce model (Customer to Factory, C2F) has gradually emerged. The C2F model enables customer terminals to directly interact with industrial systems related to manufacturing enterprises, thereby greatly meeting users' personalized interaction needs.

[0003] In the related art, in order to realize the fault detection of industrial systems, network packet analysis software is used to analyze the message data of each industrial device in the industrial system. However, the C2F mode involves the interaction between a large number of industrial devices. When the huge communication traffic generated by the industrial system exceeds the processing range of the network packet analysis software, the analysis and processing speed of the message data slows down, resulting in poor accuracy and real-time performance of the fault detection of the industrial system. Summary of the invention

[0004] The main purpose of the embodiments of the present application is to propose a fault detection method, device, equipment and medium for C2F scenarios, aiming to improve the accuracy and real-time performance of fault detection in industrial systems.

[0005] To achieve the above object, a first aspect of an embodiment of the present application proposes a fault detection method in a C2F scenario, including:

[0006] Acquire configuration information of the target industrial system, and determine multiple device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each device node;

[0007] Determine the target link formed between each device node based on the topology information, select a device node that works normally under any target link as a reference node, and determine other device nodes under the target link as nodes to be detected;

[0008] Acquire reference message information on the reference node, and based on the reference message information and corresponding functional information of each node to be detected, determine along the target link the expected message information that the target detection node is expected to output under normal working conditions, wherein the target detection node is obtained by selecting any one of the multiple nodes to be detected;

[0009] The actual message information actually output by the target detection node is obtained, and the target fault detection result of the target industrial system is determined based on the comparison result obtained by comparing the actual message information with the expected message information.

[0010] In some embodiments, the reference message information is a message output by a reference node;

[0011] Based on the reference message information and the corresponding functional information of each node to be detected, the expected message information that the target detection node is expected to output under normal working conditions is determined along the target link, including:

[0012] If the target detection node is located after the reference node and adjacent to the reference node, the reference message information is simulated based on the corresponding functional information of the target detection node to obtain the expected message information that the target detection node is expected to output under normal operation;

[0013] If the target detection node is located after the reference node and is not adjacent to the reference node, the expected message information output by the previous node to be detected is obtained, and the corresponding function of the previous expected message information is simulated based on the corresponding function information of the target detection node to obtain the expected message information that the target detection node is expected to output under normal operation.

[0014] In some embodiments, determining a target fault detection result of a target industrial system according to a comparison result obtained by comparing actual message information with expected message information includes:

[0015] If the comparison result matches the preset detection result, reselect and update the detection node from other nodes to be detected corresponding to the target link where the reference node is located;

[0016] Until the corresponding comparison result of the selected updated detection node does not match the preset detection result, the target fault detection result of the target industrial system is determined.

[0017] In some embodiments, reselecting the update detection node includes:

[0018] If the preset detection result indicates that the actual message information is consistent with the expected message information, a node to be detected adjacent to the target detection node in a preset positive direction is determined as the newly selected update detection node;

[0019] The positive direction is the direction away from the reference node with the current target detection node as the reference point.

[0020] In some embodiments, after the preset detection result indicates that the actual message information is consistent with the expected message information, the method further includes:

[0021] If the number of nodes to be detected between the last node to be detected and the current target detection node in the positive direction is odd, determine the node to be detected with the same distance as the last node to be detected and the target detection node as the reselected update detection node;

[0022] If the number of nodes to be detected between the last node to be detected in the positive direction and the current target detection node is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within the preset difference range is determined as the reselected updated detection node.

[0023] In some embodiments, reselecting the update detection node further includes:

[0024] If the preset detection result indicates that the actual message information is inconsistent with the expected message information, a node to be detected adjacent to the current initial monitoring node in the preset reverse direction is determined as the newly selected updated detection node;

[0025] The reverse direction is the direction towards the reference node with the current target detection node as the reference point.

[0026] In some embodiments, after the preset detection result indicates that the actual message information is inconsistent with the expected message information, the method further includes:

[0027] If the number of nodes to be detected between the last node to be detected and the current target detection node in the reverse direction is odd, determine the node to be detected that has the same distance as the last node to be detected and the target detection node as the reselected update detection node;

[0028] If the number of nodes to be detected between the last node to be detected in the reverse direction and the current target detection node is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within a preset difference range is determined as the reselected updated detection node.

[0029] In some embodiments, determining a target link formed between each device node based on topology information includes:

[0030] Select one of the multiple nodes to be detected as the current node to be detected, and use the current node to be detected as the starting point to access other nodes to be detected that are directly connected to the current node to be detected based on the topology information;

[0031] Obtaining a heuristic function, and determining the access value of the visited node to be detected based on the heuristic function;

[0032] If the access value is lower than the preset value, the updated node to be visited is determined from other nodes to be visited that are directly connected to the current node to be visited, and other nodes to be visited that are only connected to the visited node to be visited are no longer visited;

[0033] By continuing to access other nodes to be detected that are connected to the node to be detected that is updated, a target link formed between each device node is determined.

[0034] In some embodiments, determining a target fault detection result of a target industrial system according to a comparison result obtained by comparing actual message information with expected message information includes:

[0035] Parse configuration information and determine key fields;

[0036] Extracting first message information matching the key field from the actual message information, and extracting second message information matching the key field from the expected message information;

[0037] The first message information and the second message information are compared to obtain a comparison result, and a target fault detection result of the target industrial system is determined based on the comparison result.

[0038] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application proposes a fault detection device for a C2F scenario, including:

[0039] An acquisition module, used to acquire configuration information of a target industrial system, and determine a plurality of device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each device node;

[0040] A node determination module is used to determine a target link formed between each device node based on topology information, select a device node that works normally under any target link as a reference node, and determine other device nodes under the target link as nodes to be detected;

[0041] A message information determination module is used to obtain reference message information on a reference node, and based on the reference message information and the corresponding functional information of each node to be detected, determine along a target link the expected message information that a target detection node is expected to output under a normal working state, wherein the target detection node is obtained by selecting any one of the multiple nodes to be detected;

[0042] The target module is used to obtain the actual message information actually output by the target detection node, and determine the target fault detection result of the target industrial system based on the comparison result obtained by comparing the actual message information with the expected message information.

[0043] To achieve the above objectives, a third aspect of an embodiment of the present application proposes an electronic device, the electronic device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the fault detection method for the C2F scenario of the above first aspect when executing the computer program.

[0044] To achieve the above objectives, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the fault detection method for the C2F scenario of the first aspect is implemented.

[0045] The present application proposes a fault detection method and device, electronic device and storage medium for C2F scenarios. The method obtains configuration information of a target industrial system and determines multiple device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topological information and functional information of each device node; determines a target link formed between each device node based on the topological information, selects a device node that works normally under any target link as a reference node, and determines other device nodes under the target link as nodes to be detected; obtains reference message information on the reference node, and based on the reference message information and the corresponding functional information of each node to be detected, determines along the target link the expected message information that the target detection node is expected to output under normal working conditions, wherein the target detection node is obtained by selecting any one of the multiple nodes to be detected; obtains actual message information actually output by the target detection node, and determines the target fault detection result of the target industrial system based on the comparison result obtained by comparing the actual message information with the expected message information. That is, when the target industrial system contains multiple device nodes, the present application achieves efficient fault detection of the target industrial system by comparing the actual message information and the expected message information of the target detection node, without the need to analyze all the message information one by one, thereby improving the fault detection accuracy and real-time performance of the target industrial system. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 It is a schematic diagram of an application scenario of a fault detection device for a C2F scenario provided by an embodiment of the present application;

[0047] Figure 2 This is an optional flowchart of a fault detection method for a C2F scenario provided in an embodiment of the present application;

[0048] Figure 3 is a schematic diagram of an optional target industrial system provided in an embodiment of the present application;

[0049] Figure 4 This is an optional module diagram of a fault detection device for a C2F scenario provided in an embodiment of the present application;

[0050] Figure 5 is another optional module diagram of a fault detection device for a C2F scenario provided in an embodiment of the present application;

[0051] Figure 6 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0052] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0053] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0054] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0055] First, some nouns involved in this application are analyzed:

[0056] The e-commerce (Customer to Factory, C2F) model refers to the use of advanced information technology and communication technology to enable end customers to interact directly with manufacturing companies, thereby achieving rapid delivery of personalized customized products and services. In this model, customers can submit specific product requirements, specifications or designs through online platforms, and manufacturing companies can flexibly adjust production lines based on this information to meet customers' unique requirements.

[0057] With the continuous development of the Internet, traditional control systems can no longer meet the interaction needs between users and industrial platforms. As a result, the C2F model has gradually emerged. The C2F model enables client terminals to directly interact with industrial systems related to manufacturing enterprises, thereby greatly meeting users' personalized interaction needs.

[0058] In the related art, in order to realize the fault detection of industrial systems, network packet analysis software is used to analyze the message data of each industrial device in the industrial system. However, the C2F mode involves the interaction between a large number of industrial devices. When the huge communication traffic generated by the industrial system exceeds the processing range of the network packet analysis software, the analysis and processing speed of the message data slows down, resulting in poor accuracy and real-time performance of the fault detection of the industrial system.

[0059] Based on this, the embodiments of the present application provide a fault detection method, apparatus, device and medium for a C2F scenario, aiming to improve the fault detection accuracy and real-time performance of an industrial system.

[0060] For example, Figure 1 As shown, Figure 1 1 is a schematic diagram of an application scenario of a fault detection device for a C2F scenario provided by an embodiment of the present application. In an optional application scenario, the target industrial system includes at least one client 11 and a server 12, and the client 11 is in communication connection with the server 12. In actual situations, there are multiple clients 11 in communication connection with the server 12. When each client 11 has an interactive demand with the server 12, the target industrial system generates a large amount of communication message information. The traditional fault detection method needs to collect the message information generated by all clients 11 and analyze all the message information one by one, which results in poor accuracy and real-time performance of fault detection in the target industrial system. In comparison, the embodiment of the present application deploys the fault detection device for the C2F scenario proposed in the embodiment of the present application in the server side 12 (for the sake of ease of description, it may also be referred to as the "fault detection device" below), which can determine at least one target link for interaction based on the configuration information of the target industrial system; then, based on the target link, determine the reference node under normal operation, and based on the reference node, determine the corresponding actual message information and expected message information of any node to be detected, and by comparing the actual message information and the expected message information, achieve efficient fault detection of the target industrial system, without the need to analyze the message information of all clients 11 one by one, thereby improving the fault detection accuracy and real-time performance of the target industrial system.

[0061] It should be noted that in the embodiments of the present application, when it comes to information related to user characteristics such as user basic information or user identity, the user's permission or consent will be obtained first, and the collection, use and processing of these data will comply with relevant laws, regulations and standards. In addition, when the embodiments of the present application need to obtain sensitive personal information of the user, the user's separate permission or separate consent will be obtained first. After the user's separate permission or separate consent is clearly obtained, the necessary data for the normal operation of the embodiments of the present application will be obtained. For example, when obtaining configuration information, the embodiments of the present application will first obtain the authorization or consent of the relevant personnel, otherwise the configuration information that cannot be applied to the embodiments of the present application will be obtained. In addition, the other relevant data obtained by the fault detection device of the present application are all authorized data, which will not be repeated here one by one.

[0062] In the embodiment of the present application, the fault detection device will be described from the perspective of a fault detection device, which can be integrated into a computer device, such as a server. Figure 2 As shown, Figure 2 is an optional flowchart of a fault detection method for a C2F scenario provided in an embodiment of the present application. Figure 2 The flowchart shown may include but is not limited to the following steps 101 to 104. The fault detection device performs a fault detection method for a C2F scenario (hereinafter referred to as a "fault detection method" for ease of description). The specific process is as follows. First, it should be noted that this embodiment Figure 2 The order of step 101 to step 104 is not specifically limited, and the order of steps can be adjusted or some steps can be reduced or added according to actual needs.

[0063] Step 101 : acquiring configuration information of a target industrial system, and determining a plurality of device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each device node.

[0064] The following is a detailed description of step 101.

[0065] Among them, industrial systems refer to integrated control systems used for production, processing, manufacturing and monitoring. Taking into account factors such as safety and work efficiency, industrial systems have extremely high requirements for the accuracy and real-time performance of instruction processing and fault location.

[0066] Furthermore, in the embodiments of the present application, the industrial system that needs to be fault-detected is referred to as the target industrial system. In order to enable the end customer to interact directly with the manufacturing enterprise in the C2F mode, the target industrial system in the embodiments of the present application usually connects and interacts with multiple clients, and then each device node of the target industrial system generates a large amount of message information due to communication with multiple clients.

[0067] Among them, the device node can be a sensor, a controller, an actuator (such as a robotic arm, a conveyor belt, etc.), a monitoring and data acquisition module, etc. Specifically, the sensor is used to collect relevant industrial data, such as temperature, pressure, humidity, etc., according to the instructions transmitted by the client; the controller is used to make decisions based on the data provided by the sensor and issue control instructions. Common controllers include programmable logic controllers (PLC), distributed control systems (DCS), etc.; the actuator is used to perform specific actions according to the control instructions issued by the controller, such as switching valves, adjusting motor speed, etc.; the monitoring and data acquisition module is used to monitor and control the operation process of the device node in real time, collect and process relevant data of other device nodes, and generate reports. Of course, the device nodes in the target industrial system can be adjusted according to the actual situation. No matter what types of device nodes are included in the target industrial system, the fault detection method proposed in the embodiment of the present application can be used to determine the target fault detection result. Therefore, the embodiment of the present application does not limit the specific type of device nodes.

[0068] Among them, topology information describes the physical or logical connection between each device node in the target industrial system. Physical connection refers to the actual physical connection between device nodes, including cable connection, such as twisted pair, coaxial cable, optical fiber, etc., or switch connection, etc.; logical connection refers to the transmission path and protocol of data in the network, including network structure, communication protocol, subnet division, etc.

[0069] Furthermore, network structures include star, ring, bus, etc.; communication protocols include remote terminal protocol (Modbus RTU), field bus protocol (Profibus), industrial Ethernet protocol (Ethernet / IP), etc.; subnet division includes the determination of network information such as Internet Protocol Address (IP address) and subnet mask.

[0070] The functional information specifies the specific implementation role and characteristics of each device node. The functional information includes the technical parameters of the device node, supported functions and supported protocols, etc. The following is an example of the functional information of a device node:

[0071] Device type: temperature sensor;

[0072] Technical parameters:

[0073] Measuring range: -40 degrees Celsius (°C) to +125°C;

[0074] Accuracy level: ±0.1°C;

[0075] Response time: within 1 second;

[0076] Input and output points: 32 digital input points and 24 digital output points;

[0077] Supported functions:

[0078] Data processing capabilities: data collection, recording historical data, generating reports, etc.;

[0079] Control logic: support programming languages ​​such as ladder diagram and function block diagram;

[0080] ·Alarm mechanism: When the detected temperature exceeds the set threshold, the alarm is triggered.

[0081] Furthermore, according to the different functions implemented by the device node, the function information will be adaptively changed, such as the function information may include encryption, decryption, compression, decompression and other related content. The above function information examples are only simple illustrations, and the device node function information included in the configuration information in actual use will be more comprehensive, and the embodiments of the present application do not limit this.

[0082] The configuration information obtained includes the initial configuration information part initially set by the user and the updated configuration information part updated by the target industrial system. Specifically, the user inputs the self-defined initial configuration information into the target industrial system. The initial configuration information includes default configuration information such as topology information representing the connection relationship between different device nodes, and device attribute information collected from each device node based on the default configuration. The device attribute information includes device model, network configuration information, etc.

[0083] Furthermore, the configuration information can be stored in a file in the Comma-Separated Values ​​(CSV) format. A CSV file is a plain text file used to store table and spreadsheet information. A CSV file usually consists of text, numbers, or dates. Each line represents a record, and the data between each comma corresponds to a column. Since the CSV file is in a plain text format, it has strong compatibility and can support almost all device nodes; and it has the characteristics of simplicity and small file size, which can load and process faster when real-time requirements are high, and better adapt to scenarios where the target industrial system needs to process large amounts of data. Of course, in actual use, the configuration information can also be stored in other file formats, and the embodiments of the present application do not limit this.

[0084] Step 102, determining a target link formed between each device node based on the topology information, selecting a device node that works normally under any target link as a reference node, and determining other device nodes under the target link as nodes to be detected.

[0085] The following is a detailed description of step 102.

[0086] The target link refers to the communication path between various device nodes determined according to the topology information, which describes how data is transmitted between different device nodes. Figure 3 As shown, Figure 3 This is an optional target industrial system schematic diagram provided by the embodiment of the present application, wherein the target industrial system includes device nodes A, B, C, D, E, F, G, H, and each device node can form two different target links: ①A-BCD; ②A-EFGH. The target industrial system realizes data transmission through different target links. In actual use, the target industrial system includes more target links, and the number of device nodes included in each target link is huge. Figure 3 This is only an example to facilitate the reader's understanding, and does not limit the number of target links and device nodes included in each target link.

[0087] The reference node represents a device node that works normally on the target link. The device node can provide benchmark data as a node with a known good status. The node to be detected refers to other device nodes on the target link except the reference node. The node to be detected needs to perform further fault detection based on the reference node to locate the fault. Normal operation refers to the ideal working state, that is, when the target industrial system enters the working state, the relevant device nodes work in the absence of any faults. For example, Figure 3 As shown in FIG. 2 , for target link ②, if device node A is determined as the reference node, then device node E, device node F, device node G and device node H are all nodes to be detected. There are two types of nodes to be detected, one is a normal node that represents normal operation, and the other is a faulty node that represents abnormal operation.

[0088] Furthermore, in actual use, the working status of the source device node on the target link is usually normal, and the faulty device node is usually in the middle and back section of the target link, so the source device node can be selected as the reference node. Specifically, the working status of the source device node is determined to be normal through real-time analysis or historical data analysis: (1) After obtaining the configuration information, the message information of the source device node obtained in real time is analyzed. The analysis content includes the working status of the device (such as power on status, indicator light flashing status), device performance (such as throughput, delay status), etc. The analysis results are compared with the expected working status, and the source device node whose message information meets the normal working status is determined as the reference node; (2) If the target industrial system has the function of temporarily retaining historical data, after obtaining the real-time data of the source device node, it can also quickly determine whether the working status of the source device node is normal by comparing it with the historical data.

[0089] In some embodiments, determining a target link formed between each device node based on topology information includes the following steps:

[0090] (102.a.1) Select one of the multiple nodes to be detected as the current node to be detected, and use the current node to be detected as the starting point to access other nodes to be detected that are directly connected to the current node to be detected based on topology information.

[0091] (102.a.2) Obtain a heuristic function, and determine a visit value of a visited node to be detected based on the heuristic function.

[0092] (102.a.3) If the access value is lower than the preset value, the updated node to be visited is re-determined from other nodes to be visited that are directly connected to the current node to be visited, and other nodes to be visited that are only connected to the visited node to be visited are no longer visited.

[0093] (102.a.4) Determine the target link formed between each device node by continuing to access other nodes to be detected that are connected to the node to be detected that is updated.

[0094] Steps (102.a.1) to (102.a.4) are described in detail below.

[0095] For example, Figure 3 As shown, the current node to be detected is device node A, and the nodes to be detected that are directly connected to device node A include device node B and device node E. In the traditional target link determination method, it is necessary to determine a target link by traversing all device nodes. In this way, the target link determination efficiency is low, especially in the scenario with a large number of device nodes, this drawback is more obvious.

[0096] Based on this, after selecting the current node to be detected, the embodiment of the present application determines the access value of the node to be detected that has a direct connection relationship with the current node to be detected through a heuristic function, and determines the next device node to be visited based on the access value. In this way, one of the target links is determined by visiting the nodes to be detected as little as possible, thereby improving the determination efficiency of all target links.

[0097] Among them, the heuristic function is used to estimate the cost or distance from the current device node to the next device node to be visited, which can guide the search process and reduce the time and resources required for the search. The heuristic function can be a Manhattan distance function, a Euclidean function, or other custom heuristic functions. The cost or distance calculated by the heuristic function is the access value. If the cost is high or the distance is long, the access value is low, and if the cost is low or the distance is short, the access value is high.

[0098] Among them, the preset value is used to compare with the access value. If the access value is lower than the preset value, it means that in the process of determining the current target link, the access cost of the device node is too high, resulting in no need to access it. Therefore, in order to improve the efficiency of determining the target link, other nodes to be detected with low access value do not need to be accessed, and then the fault detection device will choose to determine the next updated node to be visited from other nodes to be detected that have a direct connection relationship with the current node to be detected. That is, the fault detection device can reduce invalid accesses through heuristic functions, avoid repeated backtracking of nodes to be detected, and improve the overall fault detection efficiency based on improving the efficiency of determining the target link in scenarios with a large number of nodes to be detected.

[0099] Exemplarily, the access value b of device node B and the access value e of device node E are determined based on the heuristic function. If the access value b < the access value e, device node E is determined as the node to be detected for update access, so that the fault detection device performs the next fault detection process after detecting device node A; and in the process of determining the target link of this round, device node C and device node D that are only connected to device node B are no longer visited, so as to speed up the efficiency of determining the target link. Then, after visiting device node E, repeat the "determine the access value of the visited node to be detected based on the heuristic function" in step (102.a.2) and step (102.a.3) until the target link determination in the current round is completed; then, repeat steps (102.a.1) to (102.a.4) until all target links of the target industrial system are determined, wherein if the heuristic function of each round is the same, it is not necessary to obtain it repeatedly.

[0100] Step 103, obtain reference message information on the reference node, and based on the reference message information and the corresponding functional information of each node to be detected, determine the expected message information that the target detection node is expected to output under normal working conditions along the target link, wherein the target detection node is obtained by selecting any one from multiple nodes to be detected.

[0101] The following is a detailed description of step 103.

[0102] The reference message information refers to the message information output after being processed by the reference node (a node known to be working normally), which is usually obtained from the output end of the reference node. The expected message information refers to the message information that the node to be tested should output under normal working conditions based on the reference message information.

[0103] Wherein, when any target link is selected for fault detection, the target detection node is selected from any node to be detected except the reference node. Figure 3 As shown, in the process of analyzing and processing the target link ②, the reference node is device node A, then one of device node E, device node F, device node G and device node H is selected as the target detection node.

[0104] Furthermore, probes are deployed on each device node to receive message information between device nodes, so that the scope of troubleshooting can be quickly defined based on the probes, thereby improving the efficiency of obtaining message information. Figure 3 In the example, a probe is deployed at the output end of device node A to capture output message information of device node A; or a probe is deployed at the input end of device node E to capture input message information of device node E.

[0105] Among them, the probe is a software or hardware tool that is deployed on the device nodes of the target industrial system to monitor and collect message information representing indicator data such as status and performance. Usually, the probe is set with a data collection frequency to realize automatic data collection within the interval time.

[0106] Furthermore, probes are deployed on all device nodes. Thus, users can control the probes that enter the working state by customizing the fault detection range. For example, users select Figure 3 If fault detection is performed on target link ② in the target link, the corresponding probes of each device node on target link ② enter the working state to collect the message information of the associated device node; or the corresponding probes of device node A to device node E on target link ② are selected to enter the working state.

[0107] Furthermore, if Figure 4 As shown, Figure 4: is an optional module diagram of a fault detection device for a C2F scenario provided in an embodiment of the present application, wherein the fault detection device includes a data processing module and a visualization module, and the visualization module specifically includes:

[0108] (1) User-defined area: used to visualize functions such as uploading initial configuration information and customizing fault detection range;

[0109] (2) Fault alarm area: It notifies users of abnormal conditions in the target industrial system in real time by displaying fault information in a visual way or ringing alarms;

[0110] (3) Fault information display area: provides detailed fault analysis and historical records to help users accurately diagnose and repair faults in target industrial systems;

[0111] (4) Data information statistics area: Statistics and display of message information analysis results to facilitate users to monitor and analyze the target industrial system.

[0112] Among them, each part of the analysis and processing data of the data processing module can be transmitted to the visualization module, and presented to the user in a visual manner through the visualization module. The data processing module specifically includes:

[0113] (1) Monitoring module: Based on the deployed probes, it obtains the message information of relevant device nodes and the configuration information of the target industrial system;

[0114] (2) A first processing module: determines the reference node and the node to be detected based on the information transmitted from the monitoring module, as well as the functional information of the determined nodes, and then determines the reference message information of the reference node, and simulates and calculates the expected message information of the target detection node based on the reference message information;

[0115] (3) The second processing module is used to obtain the actual message information of the target detection node and determine the target detection result of the target industrial system by comparing the message information.

[0116] Furthermore, since the visualization module can present relevant data to the user based on the hardware device, the user can determine the probe that enters the working state based on the user-defined area. In an optional embodiment, the user-defined area visualizes all device nodes, and the user defines the fault detection range by clicking the starting device node and the end device node belonging to the same target link; or, the user clicks on multiple device nodes, and the fault detection device defines the target link where the selected device node is located as the fault detection range. Of course, there are many ways for the user to select the fault detection range through the visualization module, and the embodiments of the present application do not limit this.

[0117] Alternatively, the fault detection device analyzes the historical detection data when acquiring the historical detection data of the target industrial system, and then autonomously defines the fault detection range. For example, the fault detection device determines the nodes to be detected with high fault incidence through historical detection data, and defines the target links where these nodes are located as the fault detection range, and controls the corresponding probes to enter the working state. It is understandable that the embodiment of the present application can accurately lock the fault detection range based on the probe deployment method, and change the global troubleshooting in the traditional detection method into a local troubleshooting, so as to achieve the effect of "pointing where to hit", avoid the low fault detection efficiency caused by analyzing all the message information in the target industrial system one by one, thereby improving the fault detection efficiency of the target industrial system.

[0118] In some embodiments, based on the reference message information and the corresponding functional information of each node to be detected, determining the expected message information that the target detection node is expected to output under normal working conditions along the target link includes the following steps:

[0119] (103.a.1) If the target detection node is located after the reference node and adjacent to the reference node, the reference message information is simulated based on the corresponding functional information of the target detection node to obtain the expected message information that the target detection node is expected to output under normal operation.

[0120] (103.a.2) If the target detection node is located after the reference node and is not adjacent to the reference node, obtain the expected message information output by the previous node to be detected, and simulate the corresponding function of the previous expected message information based on the corresponding functional information of the target detection node to obtain the expected message information that the target detection node is expected to output under normal operation.

[0121] The following describes steps (103.a.1) to (103.a.2) in detail.

[0122] The reference message information refers to the message output by the reference node. The simulation processing refers to simulating and calculating the reference message information or the expected message information of the previous node to be detected based on the functional information of the target detection node, so as to output the message information of the current target detection node under normal working state.

[0123] For example, for Figure 3 Target link ②, device node A is the reference node, and the node E to be detected is selected as the target detection node; since the node E to be detected (target detection node) is located after the device node A (reference node) and adjacent to the device node A, the reference message information output by the device node A is simulated based on the corresponding functional information of the node E to be detected, and the expected message information expected to be output by the node E to be detected under normal working conditions is obtained.

[0124] Or, for Figure 3 The target link ② is selected, the device node A is the reference node, and the node F to be detected is selected as the target detection node; since the node F to be detected (target detection node) is located after the device node A (reference node) and is not adjacent to the device node A; therefore, the expected message information output by the node E to be detected is first determined, and then, based on the corresponding functional information of the node F to be detected, the expected message information output from the node E to be detected is simulated and processed to obtain the expected message information that the node F to be detected is expected to output under normal operation.

[0125] Step 104 , obtaining actual message information actually output by the target detection node, and determining a target fault detection result of the target industrial system according to a comparison result obtained by comparing the actual message information with the expected message information.

[0126] Step 104 is described in detail below.

[0127] Among them, the actual message information refers to the message information actually output by the target detection node. By comparing the actual message information of the target detection node with the expected message information, it is determined whether there is a fault or abnormality between the reference node and the target detection node, thereby determining the target fault detection result. In the embodiment of the present application, the actual message information is obtained by probe monitoring.

[0128] In some embodiments, determining a target fault detection result of a target industrial system according to a comparison result obtained by comparing actual message information with expected message information includes the following steps:

[0129] (104.a.1) Parse configuration information and identify key fields.

[0130] (104.a.2) Extracting first message information matching the key field from the actual message information, and extracting second message information matching the key field from the expected message information.

[0131] (104.a.3) Compare the first message information and the second message information to obtain a comparison result, and determine a target fault detection result of the target industrial system based on the comparison result.

[0132] Steps (104.a.1) to (104.a.3) are described in detail below.

[0133] Among them, the key field is used to represent the fields in the actual message information and the expected message information that the user expects to compare, and the key field may include but is not limited to the node location, device status flag, protocol type, message size, etc. The first message information is used to represent the information that the field attributes in the actual message information match the key field, and the second message information is used to represent the information that the field attributes in the expected message information match the key field.

[0134] For example, if the key field is used to characterize the message size, the field characterizing the message size is extracted from the actual message information as the first message information, and the field characterizing the message size is extracted from the expected message information as the second message information. By parsing the configuration information to determine the key fields that the user expects to compare, invalid comparison of unnecessary fields in the actual message information and the expected message information is avoided to improve the overall fault detection efficiency.

[0135] Furthermore, the number of the first message information and the second message information is usually multiple, and multiple first message information and multiple second message information are stored respectively to form data structure information that is easy to compare. By comparing the message information in batches, the efficiency of generating the target fault detection result is improved.

[0136] In some embodiments, determining a target fault detection result of a target industrial system according to a comparison result obtained by comparing actual message information with expected message information includes the following steps:

[0137] (104.b.1) If the comparison result matches the preset detection result, reselect and update the detection node from other nodes to be detected corresponding to the target link where the reference node is located.

[0138] (104.b.2) until the corresponding comparison result of the selected updated detection node does not match the preset detection result, determining the target fault detection result of the target industrial system.

[0139] The following describes step (104.b.1) to step (104.b.2) in detail.

[0140] Among them, the preset detection result is used to characterize the comparison between the expected actual message information and the expected message information. If the actual comparison result matches the preset detection result, it means that no abnormal device node is found from the many device nodes in normal working state, that is, the preset detection result represents the vast majority of situations encountered in the fault detection process. At this time, it is necessary to reselect and update the detection node to determine the minority of cases representing "mismatch" to determine the target fault detection result. If the actual comparison result does not match the preset detection result, reselect the updated detection node from the nodes to be detected except the target detection node; and perform simulation processing based on the reference message information to determine the expected message information output by the updated detection node; compare the current expected message information and the reference message information again to obtain the updated comparison result; if the updated comparison result still matches the preset detection result, repeat "reselect the updated detection node", "compare the first message information and the second message information to obtain the comparison result", until the comparison result obtained does not match the preset detection result, the target fault detection result is determined.

[0141] It can be understood that the embodiments of the present application gradually narrow the fault detection range by dynamically adjusting the target detection nodes, thereby improving the fault detection efficiency of the target industrial system and ultimately accurately locating the device node with the fault problem.

[0142] In some embodiments, reselecting an update detection node includes the following steps:

[0143] (A.1) If the preset detection result indicates that the actual message information is consistent with the expected message information, the node to be detected adjacent to the target detection node in the preset positive direction is determined as the reselected updated detection node.

[0144] The following is a detailed description of step (A.1).

[0145] For example, Figure 3 In the target link ②, the reference node is device node A and the target detection node is device node E. For example, the positive direction refers to the direction from device node A (reference point) to device node E. In this example, the expected message information e1 and the actual message information e2 corresponding to device node E are compared. If e1 is consistent with e2, it means that device node A and device node E are both in normal working state, and further detection is required for the device nodes after device node E in the target link ②. Therefore, the device node adjacent to device node E in the positive direction (i.e., device node F) is determined as the reselected update detection node. In further detection, if the actual message information and expected message information corresponding to device node F are inconsistent, a target fault detection result indicating that device node F is abnormal is obtained.

[0146] The consistency between the actual message information and the expected message information may refer to that the message information (the first message information and the second message information) obtained by the two based on the key field extraction is completely consistent, or it may refer to that the error between the first message information and the second message information is within the expected range. The degree of consistency between the actual message information and the expected message information can be set according to the actual situation, and the embodiments of the present application do not limit this.

[0147] In some embodiments, after the preset detection result indicates that the actual message information is consistent with the expected message information, the following steps are further included:

[0148] (a.1) If the number of nodes to be detected between the last node to be detected and the current target detection node in the positive direction is odd, determine the node to be detected that has the same distance as the last node to be detected and the target detection node as the reselected update detection node.

[0149] (a.2) If the number of nodes to be detected between the last node to be detected and the current target detection node in the positive direction is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within a preset difference range is determined as the reselected update detection node.

[0150] The following describes steps (a.1) to (a.2) in detail.

[0151] Among them, "same distance" means that the distance from a certain node to two specified nodes is equal; "distance difference is within the preset difference range" means that the distance difference from a certain node to two specified nodes meets the set difference range.

[0152] For example, Figure 3 In the target link ①, the reference node is device node A and the target detection node is device node B. In this example, the expected message information b1 and the actual message information b2 corresponding to device node B are compared. If b1 is consistent with b2, and the number of nodes to be detected between the last node to be detected in the positive direction (device node D) and the current target detection node (device node B) is odd, since the distances between device node C and device node B and device node D are the same, device node C is selected as the reselected update detection node.

[0153] For example, in Figure 3 In the example where the target link ② and the expected message information e1 of device node E are consistent with the actual message information e2, the number of nodes to be detected between the last node to be detected in the positive direction (device node H) and the current target detection node (device node E) is an even number, and the difference range is set to [-1,1]. Since the distance difference between device node F to device node E and device node H is -1, and the distance difference between device node G to device node E and device node H is 1, one of device node F and device node G can be selected as the re-selected update detection node.

[0154] It can be understood that in actual use, the target link includes multiple device nodes. When the actual message information corresponding to the current target detection node is consistent with the expected message information, the update detection node is selected from the remaining nodes to be detected in the current target link through binary thinking. In this way, when there are many device nodes, rapid fault detection can still be achieved to meet the real-time requirements of the target industrial system. If the actual message information corresponding to the update detection node is still consistent with the expected message information, the next update detection node is selected again based on steps (a.1) to (a.2); if the actual message information corresponding to the update detection node is inconsistent with the expected message information, the next update detection node is selected again between the current update detection node and the previous update detection node (in the opposite direction), wherein the specific implementation method refers to step (B.1) and step (b.1) to step (b.2).

[0155] In some embodiments, reselecting the update detection node further includes the following steps:

[0156] (B.1) If the preset detection result indicates that the actual message information is inconsistent with the expected message information, a node to be detected adjacent to the current initial monitoring node in the preset reverse direction is determined as the newly selected updated detection node.

[0157] The following is a detailed description of step (B.1).

[0158] For example, Figure 3 In the target link ②, the reference node is device node A and the target detection node is device node H. For example, the reverse direction refers to the direction from device node H (reference point) to device node A. In this example, the expected message information h1 and the actual message information h2 corresponding to device node H are compared. If h1 and h2 are inconsistent, it means that there are device nodes in abnormal working state among device node E, device node F, device node G, and device node H. It is necessary to further detect the device nodes between device node H and device node A in the target link ②. Therefore, the device node adjacent to device node H in the reverse direction (i.e., device node G) is determined as the reselected updated detection node. In the further detection, if the actual message information corresponding to device node G is consistent with the expected message information, the target fault detection result indicating that device node H is abnormal is obtained.

[0159] The inconsistency between the actual message information and the expected message information may refer to the presence of any different field information in the first message information and the second message information, or the presence of a preset number of different field information. The degree of inconsistency between the actual message information and the expected message information can be set according to the actual situation, and the embodiments of the present application do not limit this.

[0160] In some embodiments, after the preset detection result indicates that the actual message information is inconsistent with the expected message information, the following steps are further included:

[0161] (b.1) If the number of nodes to be detected between the last node to be detected in the reverse direction and the current target detection node is odd, determine the node to be detected that has the same distance as the last node to be detected and the target detection node as the reselected update detection node.

[0162] (b.2) If the number of nodes to be detected between the last node to be detected in the reverse direction and the current target detection node is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within a preset difference range is determined as the reselected updated detection node.

[0163] The following describes steps (b.1) to (b.2) in detail.

[0164] For example, Figure 3 In the target link ①, the reference node is device node A and the target detection node is device node D. In this example, the expected message information d1 and the actual message information d2 corresponding to device node D are compared. If d1 is inconsistent with d2, and the number of nodes to be detected between the last node to be detected in the reverse direction (device node B) and the current target detection node (device node D) is odd, since the distances from device node C to device node B and device node D are the same, device node C is selected as the reselected update detection node.

[0165] For example, in Figure 3 In the example where the target link ② and the expected message information h1 of device node H are inconsistent with the actual message information h2, the number of nodes to be detected between the last node to be detected in the reverse direction (device node E) and the current target detection node (device node H) is an even number, and the difference range is set to [-1,1]. Since the distance difference between device node F to device node E and device node H is -1, and the distance difference between device node G to device node E and device node H is 1, one of device node F and device node G can be selected as the re-selected update detection node.

[0166] It can be understood that in actual use, the target link includes multiple device nodes. When the actual message information corresponding to the current target detection node is inconsistent with the expected message information, the update detection node is selected from the remaining nodes to be detected in the current target link through binary thinking. In this way, when there are many device nodes, rapid fault detection can still be achieved to meet the real-time requirements of the target industrial system. If the actual message information corresponding to the update detection node is still inconsistent with the expected message information, the next update detection node is selected again based on steps (b.1) to (b.2); if the actual message information corresponding to the update detection node is consistent with the expected message information, the next update detection node is selected again between the current update detection node and the previous update detection node (in the positive direction), wherein the specific implementation method refers to step (A.1) and step (a.1) to step (a.2).

[0167] It is understandable that the network packet analysis software used in traditional detection methods, such as network protocol analyzer (Wireshark), cannot analyze and process massive amounts of message information in a timely manner, which results in poor accuracy and real-time performance when using traditional methods to perform fault detection on the target industrial system. In comparison, the fault detection method proposed in the embodiment of the present application, when the target industrial system contains a large number of device nodes, can still accurately and efficiently realize fault detection of the target industrial system by comparing actual message information and expected message information, thereby improving the accuracy and real-time performance of fault detection of the target industrial system.

[0168] like Figure 5 As shown, Figure 5 This is another optional module diagram of a fault detection device for a C2F scenario provided in an embodiment of the present application, including:

[0169] The acquisition module 201 is used to acquire configuration information of a target industrial system and determine a plurality of device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each device node.

[0170] The node determination module 202 is used to determine the target link formed between the device nodes based on the topology information, select a device node that works normally under any target link as a reference node, and determine other device nodes under the target link as nodes to be detected.

[0171] The message information determination module 203 is used to obtain reference message information on the reference node, and based on the reference message information and the corresponding functional information of each node to be detected, determine the expected message information that the target detection node is expected to output under normal working conditions along the target link, wherein the target detection node is obtained by selecting any one from multiple nodes to be detected.

[0172] The target module 204 is used to obtain the actual message information actually output by the target detection node, and determine the target fault detection result of the target industrial system according to the comparison result obtained by comparing the actual message information with the expected message information.

[0173] The specific implementation of the fault detection device for the C2F scenario is basically the same as the specific implementation of the fault detection method for the C2F scenario described above, and will not be repeated here.

[0174] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above-mentioned fault detection method for C2F scenarios when executing the computer program. The electronic device can be any intelligent terminal including a tablet computer, a car computer, etc.

[0175] like Figure 6 As shown, Figure 6 : is a schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application, the electronic device includes:

[0176] The processor 301 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0177] The memory 302 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 302 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 302, and the processor 301 calls and executes the fault detection method for the C2F scenario of the embodiment of this application;

[0178] Input / output interface 303, used to implement information input and output;

[0179] Communication interface 304, used to realize communication interaction between the device and other devices, which can be realized through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.);

[0180] A bus 305 that transmits information between the various components of the device (e.g., the processor 301, the memory 302, the input / output interface 303, and the communication interface 304);

[0181] The processor 301 , the memory 302 , the input / output interface 303 and the communication interface 304 are connected to each other in communication within the device via the bus 305 .

[0182] An embodiment of the present application further provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the fault detection method for the C2F scenario is implemented.

[0183] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0184] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0185] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0186] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0187] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0188] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0189] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0190] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0191] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0192] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0193] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0194] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A fault detection method for C2F scenarios, characterized in that: include: Acquire configuration information of a target industrial system, and determine a plurality of device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each of the device nodes; Determine a target link formed between each of the device nodes based on the topology information, select a device node that works normally under any of the target links as a reference node, and determine other device nodes under the target link as nodes to be detected; Acquire reference message information on the reference node, and based on the reference message information and the corresponding functional information of each of the nodes to be detected, determine along the target link the expected message information that the target detection node is expected to output under normal working conditions, wherein the target detection node is obtained by selecting any one of the multiple nodes to be detected; The actual message information actually output by the target detection node is obtained, and the target fault detection result of the target industrial system is determined according to a comparison result obtained by comparing the actual message information with the expected message information.

2. The fault detection method for C2F scenarios according to claim 1 is characterized in that: The reference message information is a message output by the reference node; The determining, based on the reference message information and the corresponding functional information of each of the nodes to be detected, along the target link, the expected message information that the target detection node is expected to output under a normal working state includes: If the target detection node is located after the reference node and adjacent to the reference node, the reference message information is simulated based on the function information corresponding to the target detection node to obtain the expected message information that the target detection node is expected to output under normal operation; If the target detection node is located after the reference node and is not adjacent to the reference node, the expected message information output by the previous node to be detected is obtained, and based on the corresponding functional information of the target detection node, the corresponding function of the previous expected message information is simulated to obtain the expected message information that the target detection node is expected to output under normal operation.

3. The fault detection method for C2F scenarios according to claim 1 is characterized in that: The determining a target fault detection result of the target industrial system according to a comparison result obtained by comparing the actual message information with the expected message information includes: If the comparison result matches the preset detection result, reselecting an updated detection node from other nodes to be detected corresponding to the target link where the reference node is located; Until the comparison result corresponding to the selected update detection node does not match the preset detection result, the target fault detection result of the target industrial system is determined.

4. The fault detection method for C2F scenarios according to claim 3 is characterized in that: The reselecting and updating the detection node comprises: If the preset detection result indicates that the actual message information is consistent with the expected message information, determining the node to be detected that is adjacent to the target detection node in a preset positive direction as the reselected update detection node; The positive direction is a direction away from the reference node with the current target detection node as a reference point.

5. The fault detection method for C2F scenario according to claim 4 is characterized in that: After the preset detection result indicates that the actual message information is consistent with the expected message information, the method further includes: If the number of the nodes to be detected between the last node to be detected and the current target detection node in the positive direction is odd, determine the node to be detected that has the same distance as the last node to be detected and the target detection node as the reselected update detection node; If the number of nodes to be detected between the last node to be detected in the positive direction and the current target detection node is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within a preset difference range is determined as the reselected updated detection node.

6. The fault detection method for C2F scenario according to claim 3, characterized in that: The reselection of the update detection node also includes: If the preset detection result indicates that the actual message information is inconsistent with the expected message information, determining the node to be detected that is adjacent to the current initial monitoring node in the preset reverse direction as the newly selected updated detection node; The reverse direction is a direction that takes the current target detection node as a reference point and is close to the reference node.

7. The fault detection method for C2F scenarios according to claim 6, characterized in that: After the preset detection result indicates that the actual message information is inconsistent with the expected message information, the method further includes: If the number of the nodes to be detected between the last node to be detected and the current target detection node in the reverse direction is odd, determine the node to be detected that has the same distance as the last node to be detected and the target detection node as the reselected update detection node; If the number of nodes to be detected between the last node to be detected in the reverse direction and the current target detection node is an even number, any node to be detected whose distance difference with the last node to be detected and the target detection node is within a preset difference range is determined as the reselected updated detection node.

8. The fault detection method for C2F scenarios according to claim 1, characterized in that: The determining, based on the topology information, a target link formed between each of the device nodes comprises: Selecting one of the multiple nodes to be detected as the current node to be detected, and taking the current node to be detected as the starting point, accessing other nodes to be detected that are directly connected to the current node to be detected based on the topology information; Obtaining a heuristic function, and determining the access value of the visited node to be detected based on the heuristic function; If the access value is lower than the preset value, re-determine the updated node to be visited from other nodes to be visited that are directly connected to the current node to be visited, and no longer visit other nodes to be visited that are only connected to the visited node to be visited; By continuing to access other nodes to be detected that are connected to the updated node to be detected, a target link formed between each of the device nodes is determined.

9. The fault detection method for C2F scenarios according to claim 1, characterized in that: The determining a target fault detection result of the target industrial system according to a comparison result obtained by comparing the actual message information with the expected message information includes: Parsing the configuration information to determine key fields; Extracting first message information matching the key field from the actual message information, and extracting second message information matching the key field from the expected message information; The first message information and the second message information are compared to obtain the comparison result, and a target fault detection result of the target industrial system is determined based on the comparison result.

10. A fault detection device for C2F scenarios, characterized in that: include: An acquisition module, used to acquire configuration information of a target industrial system, and determine a plurality of device nodes under the target industrial system based on the configuration information, wherein the configuration information includes topology information and function information of each of the device nodes; A node determination module, configured to determine a target link formed between each of the device nodes based on the topology information, select a device node that works normally under any of the target links as a reference node, and determine other device nodes under the target link as nodes to be detected; A message information determination module, used to obtain reference message information on the reference node, and based on the reference message information and the corresponding functional information of each of the nodes to be detected, determine along the target link the expected message information that the target detection node is expected to output under normal working conditions, wherein the target detection node is obtained by selecting any one of the multiple nodes to be detected; The target module is used to obtain the actual message information actually output by the target detection node, and determine the target fault detection result of the target industrial system according to the comparison result obtained by comparing the actual message information with the expected message information.

11. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the fault detection method for the C2F scenario according to any one of claims 1 to 9 when executing the computer program.

12. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the fault detection method for a C2F scenario described in any one of claims 1 to 9 is implemented.

Images