Data processing system and method and electronic equipment

Abstract

The invention discloses a data processing system and method and electronic equipment. The system comprises a wireless signal monitor, a gateway and an intelligent management system, the wireless signal monitor is used for receiving a radio frequency signal emitted by an indoor distribution antenna, encrypting the radio frequency signal and transmitting the encrypted radio frequency signal to the gateway through a long-distance radio LORA transmission module in the wireless signal monitor; the gateway is used for decrypting the received encrypted radio frequency signal, performing Hash processing on the decrypted radio frequency signal, and forwarding the Hash processed radio frequency signal to the intelligent management system through the secure tunnel link; and the intelligent management system is used for monitoring the radio frequency signal forwarded by the gateway. According to the invention, the technical problem of high cost of indoor distribution system signal monitoring in the prior art is solved.

Description

Technical Field

[0001] The present application relates to the field of wireless communications, and more specifically, to a data processing system, method, and electronic device. Background Art

[0002] Among the related technologies, the 4G / 5G indoor distribution system mainly adopts the traditional passive distributed antenna system (DAS). This system has been widely used as an indoor distribution solution since the 2G era. Its low cost and ability to meet the needs of most scenarios have enabled it to be used in the 3G, 4G and even 5G eras. The base station signal source built by the operator is split through a series of passive devices such as power splitters and couplers, and then the signal is reasonably distributed to low-power antennas installed in different areas of the building through feeders. For multi-system signals, the signals of different systems are merged into a set of indoor distribution systems through combiners or POI (Point of Interface) technology to achieve resource co-construction and sharing.

[0003] However, although the relevant wireless signal monitoring solutions can effectively monitor, automatically monitor, locate faults and perform intelligent fault analysis on passive indoor antennas, the existing wireless monitoring solutions require each wireless signal monitor to be equipped with an independent SIM card, which cannot realize large-scale deployment of intelligent monitors. In addition, wireless signal monitors require high traffic fees during daily monitoring, resulting in high monitoring costs.

[0004] To address the above-mentioned problems, no effective solutions have been proposed so far. Summary of the Invention

[0005] The embodiments of the present application provide a data processing system, method, and electronic device to at least solve the technical problem of high cost in indoor distribution system signal monitoring in related technologies.

[0006] According to one aspect of an embodiment of the present application, a data processing system is provided, including: a wireless signal monitor, a gateway and an intelligent management system, wherein the wireless signal monitor is used to receive the radio frequency signal transmitted by the indoor antenna, encrypt the radio frequency signal, and transmit the encrypted radio frequency signal to the gateway through the long-distance radio LORA transmission module in the wireless signal monitor; the gateway is used to decrypt the received encrypted radio frequency signal, hash the decrypted radio frequency signal, and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link; the intelligent management system is used to monitor the radio frequency signal forwarded by the gateway.

[0007] Optionally, the wireless signal monitor includes a signal receiver, a signal decider, a LORA transmission module, a security control module and a power supply unit, wherein the signal receiver is used to receive the radio frequency signal transmitted by the indoor antenna and send the radio frequency signal to the signal decider; the signal decider is used to extract the key parameters of the radio frequency signal after receiving the radio frequency signal, perform signal quality evaluation on the radio frequency signal based on the key parameters, and obtain a judgment result, wherein the key parameters include received signal strength indication, signal-to-noise ratio, reference signal received power, and physical cell identification; the security control module is used to encrypt and perform integrity check on the judgment result and the radio frequency signal, and after the integrity check passes, the encrypted judgment result and the radio frequency signal are sent to the gateway through the LORA transmission module; the power supply unit is used to power the signal receiver, the signal decider, the LORA transmission module and the security control module.

[0008] Optionally, the gateway includes: a LORA module, an encryption and decryption module, and a security module, wherein the LORA module is used to establish a wireless connection with the wireless signal monitor and receive the encrypted radio frequency signal transmitted by the wireless signal monitor; the encryption and decryption module is used to decrypt the encrypted radio frequency signal; the security module is used to hash the decrypted radio frequency signal and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link.

[0009] Optionally, before forwarding the radio frequency signal to the intelligent management system via the secure tunnel link, the following steps are performed: the gateway receives an encrypted temporary user identity (SUCI) sent by the wireless signal monitor, where the encrypted user identity is obtained by encrypting the permanent user identity (SUPI); the gateway sends the temporary user identity (SUCI) and the gateway identifier (SNID) of the gateway to the intelligent management system, where the intelligent management system parses the SUCI into a SUPI and generates an authentication vector, where the authentication vector is determined by an authentication random number, an authentication token, an encryption key, an integrity key, and an expected value of a response from the wireless signal monitor; the gateway forwards the authentication random number, authentication token, and gateway identifier received from the intelligent management system to the wireless signal monitor; after the wireless signal monitor successfully verifies the authentication token, the gateway forwards an actual authentication response value received from the wireless signal monitor to the intelligent management system for verification, obtaining a verification result, where the intelligent management system obtains the verification result by comparing the actual authentication response value with the expected value; and if the verification result is a successful verification, the gateway receives the SUPI sent by the intelligent management system and sends an authentication success message to the wireless signal monitor.

[0010] Optionally, the security module is used to perform hash processing on the decrypted RF signal, including: filling the RF signal according to a preset rule to obtain a first RF signal; dividing the first RF signal into blocks to obtain multiple blocks; decomposing each block to obtain multiple words; generating a temporary value based on the multiple words and a preset working variable; updating the working variable based on the temporary value; performing an addition operation on the updated working variable and the corresponding initial secure hash value to obtain multiple hash value components; and connecting the multiple hash value components corresponding to each block to obtain a secure hash value.

[0011] Optionally, a tunnel mode is used between the gateway and the intelligent management system, and an Internet Security Protocol IPSec channel transmission mode is used between the gateway and the wireless signal monitor.

[0012] Optionally, the intelligent management system is further configured to trigger a fault management process when the radio frequency signal does not meet a preset security policy.

[0013] According to another aspect of an embodiment of the present application, a data processing method is also provided, including: obtaining an encrypted radio frequency signal transmitted by a wireless signal monitor through a long-distance radio LORA transmission module, wherein the LORA transmission module is a component in the wireless signal monitor, and the radio frequency signal is a radio frequency signal transmitted by an indoor antenna; decrypting the encrypted radio frequency signal and hashing the decrypted radio frequency signal; forwarding the hashed radio frequency signal to an intelligent management system through a secure tunnel link, wherein the intelligent management system is used to monitor the radio frequency signal.

[0014] According to another aspect of the embodiments of the present application, an electronic device is provided, including: a memory and a processor, the memory being used to store program instructions; the processor being connected to the memory and being used to execute and implement the above-mentioned data processing method.

[0015] According to another aspect of the embodiments of the present application, a non-volatile storage medium is provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the above-mentioned data processing method by running the computer program.

[0016] According to another aspect of the embodiments of the present application, a computer program product is provided, including computer instructions, which implement the above-mentioned data processing method when executed by a processor.

[0017] In an embodiment of the present application, through the line signal monitor, gateway and intelligent management system in the data processing system, wherein the wireless signal monitor is used to receive the radio frequency signal transmitted by the indoor antenna, encrypt the radio frequency signal, and transmit the encrypted radio frequency signal to the gateway through the long-distance radio LORA transmission module in the wireless signal monitor; the gateway is used to decrypt the received encrypted radio frequency signal, and hash the decrypted radio frequency signal, and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link; the intelligent management system is used to monitor the radio frequency signal forwarded by the gateway, thereby achieving the purpose of low-cost monitoring of the signal quality of the indoor distribution system, thereby realizing the technical effect of safely monitoring the wireless signal, and thus solving the technical problem of high cost for indoor distribution system signal monitoring in related technologies. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 is a hardware structure block diagram of a computer terminal for implementing a data processing method according to an embodiment of the present application;

[0020] Figure 2 is a structural diagram of a data processing system according to an embodiment of the present application;

[0021] Figure 3 is a schematic diagram of the internal connection structure of a wireless signal monitor according to an embodiment of the present application;

[0022] Figure 4 This is a schematic diagram of the internal components and connection structure of a gateway according to an embodiment of the present application;

[0023] Figure 5 This is a flowchart of a data processing method according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0025] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0026] First, some nouns or terms that appear in the process of explaining the embodiments of this application are subject to the following explanations:

[0027] RFID (Radio Frequency Identification) is a contactless automatic identification technology that uses radio frequency signals to automatically identify a target object and retrieve relevant data. It primarily consists of an electronic tag, a reader, and an antenna. An electronic tag consists of a coupling element and a chip. Each tag has a unique electronic code and is attached to an object to identify the target object. The reader reads (and sometimes writes) the information in the electronic tag. It transmits a radio frequency signal of a specific frequency and receives the reflected signal from the tag, thereby obtaining the tag's data. The antenna transmits the radio frequency signal between the reader and the tag.

[0028] SIM card: Subscriber Identity Module. It is a smart card that stores digital mobile phone customer information. It is mainly used to identify users in mobile communication networks and store some user-related data. The SIM card contains the following main information and functions: User identity information, which stores the International Mobile Subscriber Identity (IMSI), which is used to uniquely identify a mobile phone user. IMSI is key information for identifying mobile users globally; security information, including authentication keys, etc., which are used by the network to authenticate the user's identity and encrypt communications to ensure the security of communications; telephone number, which is associated with the user's mobile phone number, and the network communicates with the user through this number; communication records, which can store a certain number of text messages and call records; network access parameters, which store relevant parameters of the mobile network so that the mobile phone can access a specific mobile communication network.

[0029] LoRa: Long Range Radio. LoRa is a low-power wide area network (LPWAN) technology with the following characteristics: long-range communication: LoRa technology enables long-range communication of several kilometers or even more than ten kilometers, making it particularly suitable for applications with wide coverage and high communication distance requirements; low power consumption: When devices communicate using LoRa technology, their power consumption is very low, which allows battery-powered devices to operate for long periods of time, reducing the need for frequent battery replacement or charging; strong anti-interference capabilities: LoRa uses spread spectrum technology, which can resist interference in complex wireless environments and ensure reliable communication; flexible deployment: LoRa networks can be flexibly deployed according to actual needs. They can be public networks built by operators or private networks established by enterprises or individuals. LoRa technology is mainly used in the Internet of Things (IoT) field, such as smart metering, smart agriculture, environmental monitoring, and logistics tracking, providing reliable long-range communication solutions for various IoT devices.

[0030] Intrinsically Secure Convergence Gateway: This gateway connects to the intelligent management system through a specific "secure tunnel link" mode, primarily using wireless transmission to enhance system deployment flexibility and adapt to more application scenarios where "wired transmission" is not suitable. It consists of a LoRa module, an encryption and decryption module, and an intrinsic security module.

[0031] IPsec: Internet Protocol Security. IPsec is an open-standard network layer security protocol suite that provides security services such as encryption, authentication, and integrity protection for IP packets. Its main functions include: encryption, which ensures the confidentiality of data during network transmission and prevents eavesdropping by encrypting IP packets; authentication, which authenticates the source of IP packets to ensure that data comes from a legitimate sender and prevents data forgery; and integrity protection, which uses mechanisms such as checksums to ensure that IP packets have not been tampered with during transmission, thus ensuring data integrity. IPsec is widely used in virtual private networks (VPNs), enterprise network security, and other fields, providing reliable security for network communications.

[0032] PSK: Pre-Shared Key, a pre-shared password or key. In network communications and encryption technology, shared keys are commonly used in the following areas: encrypted communication, where the communicating parties predetermine a shared key and then use it to encrypt and decrypt data. For example, in some wireless local area networks (WLANs), PSK can be used for encrypted communication between users and access points to protect the security of data transmission within the wireless network; identity authentication, where the shared key can be used as a method of identity authentication. Both parties confirm each other's identity by verifying the correctness of the shared key; and security protocols, where the shared key is used as the basis for establishing a secure connection. For example, the IPsec protocol can use PSK for identity authentication and establishing security associations.

[0033] EAP-AKA: Extensible Authentication Protocol-Authentication and Key Agreement. EAP-AKA is an authentication protocol used in wireless networks and mobile networks, mainly used to implement secure authentication and key agreement between user devices and networks. It is commonly used in third-generation (3G), fourth-generation (4G) and fifth-generation (5G) mobile communication networks and secure access to some wireless local area networks (WLANs). Its main features and functions include: two-way authentication, EAP-AKA provides network authentication of user devices and user device authentication of the network to ensure the legitimacy of both parties; key agreement, during the authentication process, key agreement is performed simultaneously to generate session keys for encrypted communication; high security, using advanced encryption algorithms and security mechanisms to protect the user's identity information and communication data; suitable for mobile networks, especially for authentication and key agreement in mobile environments, and can meet the security and convenience requirements of mobile devices.

[0034] RAND: Random Number, also known as a network authentication random number, is a random value used in the authentication process of communication networks. In mobile communication networks, when performing user identity authentication, the network generates a RAND. It serves the following important functions: It serves as a security challenge. The RAND is provided to the user device (such as a mobile phone) as a randomly generated challenge value. The user device and the network's authentication center (typically the Home Location Register (HLR) or the Authentication Center (AuC)) use this random number, along with information such as keys stored on the user device's SIM card and the network, to perform a series of calculations. The RAND, along with the keys stored on the SIM card and a specific algorithm, is used to calculate important parameters such as the Authentication Response (RES) and encryption keys. The network verifies the user's legitimacy by comparing the authentication response value returned by the user device with the expected value calculated by the network. It also enhances security. Because the RAND is randomly generated, it differs between authentication processes, enhancing authentication security and preventing security threats such as replay attacks.

[0035] SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function with the following characteristics: determinism, always producing the same output for the same input data; irreversibility, making it difficult to reverse engineer the original input data from the output hash value; and collision resistance, making it difficult to find two different inputs that have the same hash value. The SHA-256 algorithm takes an input message of arbitrary length, breaks it into fixed-size blocks, and then processes these blocks through a series of complex mathematical operations, including bitwise operations, logical operations, and circular shifts, to ultimately generate a 256-bit hash value.

[0036] RSSI: Received Signal Strength Indication. RSSI refers to the indication value of the wireless signal strength received by the receiving device. It reflects the power of the received signal, usually in decibel milliwatts (dBm). The main functions of RSSI include: Signal strength assessment: used to evaluate the strength of the wireless signal and help users understand the quality of the current received signal. The stronger the signal strength, the higher the RSSI value is, and vice versa; distance estimation, the RSSI value can be used to estimate the distance between the sending device and the receiving device. The signal strength will weaken as the distance increases, so the distance can be roughly judged based on the changes in RSSI; network optimization, in wireless network deployment and optimization, RSSI can be used as an important parameter. By monitoring the RSSI value, the location of the wireless access point, transmission power and other parameters can be adjusted to improve the coverage and performance of the network.

[0037] SINR (Signal to Interference plus Noise Ratio) is the ratio of the received useful signal power to the sum of the interference signal power (including interference from other signal sources and internal system noise). It is a key indicator of signal quality in wireless communication systems. Specifically, the SINR formula is: SINR = useful signal power / (interference signal power + noise power).

[0038] RSRP stands for Reference Signal Receiving Power. RSRP is the linear average of the signal power received on the resource elements (REs) carrying the cell-specific reference signal (CRS) within a specific measurement frequency bandwidth, measured in dBm. Simply put, it reflects the strength of the reference signal received by the terminal from the base station.

[0039] PCI: Physical Cell Identifier. PCI is a physical layer identifier used to distinguish different cells. In mobile communication networks, especially LTE (Long Term Evolution) and 5G networks, PCI plays a vital role.

[0040] Traditional indoor passive systems have complex structures, with numerous components distributed across different areas. This makes it difficult to directly monitor signals, making it difficult to detect indoor faults in a timely manner. Maintenance work is often triggered passively, and inspection costs are high, hindering user satisfaction. Visual management of all nodes is impossible, and operators' demands for intelligent network operations and maintenance are unsatisfactory. Although wireless signal monitoring solutions in related technologies can effectively monitor, automatically monitor, locate faults, and intelligently analyze faults in passive indoor antennas, they require each wireless signal monitor to be equipped with a separate SIM card, making large-scale deployment of intelligent monitors impossible. Furthermore, wireless signal monitors consume high traffic fees during daily monitoring, resulting in high monitoring costs.

[0041] In order to solve the problems existing in the related art, the embodiment of the present application provides a data processing method, which can be run on Figure 1 In the computer terminal shown, the computer terminal is explained below.

[0042] The data processing method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 FIG1 shows a hardware structure block diagram of a computer terminal for implementing a data processing method. Figure 1As shown, the computer terminal 10 may include one or more (illustrated by 102a, 102b, ..., 102n in the figure) processors (the processor may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission module 106 for communication functions connected via a wired and / or wireless network. In addition, it may also include: a display, a keyboard, a cursor control device, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the I / O interface), a network interface, and a BUS bus. It will be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components than shown, or with Figure 1 Different configurations shown.

[0043] It should be noted that the one or more processors and / or other data processing circuits described above may generally be referred to herein as "data processing circuitry." The data processing circuitry may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuitry may be a single, independent processing module, or may be incorporated in whole or in part into any of the other components of the computer terminal 10. As described in the embodiments of the present application, the data processing circuitry serves as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0044] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the data processing method in the embodiment of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, implementing the above-mentioned data processing method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely located relative to the processor, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0045] The transmission module 106 is configured to receive or transmit data via a network. A specific example of the aforementioned network may include a wireless network provided by the communications provider of the computer terminal 10. In one embodiment, the transmission module 106 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the transmission module 106 may be a radio frequency (RF) module, which is configured to communicate with the Internet wirelessly.

[0046] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 .

[0047] It should be noted that, in some optional embodiments, the above Figure 1 The computer terminal shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. Figure 1 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the computer terminal described above.

[0048] In the above-mentioned operating environment, an embodiment of the present application provides an embodiment of a data processing method. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0049] Figure 2 is a structural diagram of a data processing system according to an embodiment of the present application, such as Figure 2 As shown, the system includes: a wireless signal monitor 20, a gateway 22 and an intelligent management system 24, wherein the wireless signal monitor is used to receive the radio frequency signal transmitted by the indoor antenna, encrypt the radio frequency signal, and transmit the encrypted radio frequency signal to the gateway through the long-distance radio LORA transmission module in the wireless signal monitor; the gateway is used to decrypt the received encrypted radio frequency signal, hash the decrypted radio frequency signal, and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link; the intelligent management system is used to monitor the radio frequency signal forwarded by the gateway.

[0050] In an embodiment of the present application, the wireless signal monitor (which may be referred to as the monitor for short) is a front-end device in the entire system, and its main function is to receive and monitor radio frequency signals (RF signals) transmitted from indoor antennas. Indoor antennas generally refer to antennas used for indoor signal coverage, such as antennas in distributed antenna systems (DAS). The monitor is equipped with a signal receiver for capturing these RF signals, and then analyzing the signal quality through a signal decider, such as key indicators such as RSSI, SINR, and RSRP. The analyzed signal data, combined with the endogenous security control module, will be encrypted using a pre-set encryption algorithm to protect the confidentiality and integrity of the data. After encryption is completed, the encrypted signal data is sent to the gateway through the built-in LoRa transmission module.

[0051] LoRa communication technology is a wireless communication technology based on low-power wide area network (LPWAN) with many significant features and advantages, including:

[0052] 1. Long-distance communication: LoRa can achieve communication distances of several kilometers or even tens of kilometers, making it an ideal choice for long-distance communication. For example, LoRa's link budget is as high as 157dB, allowing its communication distance to reach over 15 kilometers.

[0053] 2. Low power consumption: LoRa is designed for low power operation and is suitable for battery-powered sensors and devices. Its receiving current is only 10mA and the sleep current is 200nA, which greatly extends battery life.

[0054] 3. High anti-interference ability: Due to the use of spread spectrum modulation technology, LoRa has strong anti-interference ability and can work stably in complex environments.

[0055] 4. Multi-node support: LoRa can support a large number of node connections and is suitable for large-scale IoT application scenarios.

[0056] 5. Low cost: LoRa technology has a low cost and is suitable for large-scale deployment, especially in IoT applications that need to cover a wide area.

[0057] 6. Easy to deploy and standardize: LoRa technology is easy to deploy and has standardized protocols such as LoRaWAN, which further simplifies network construction and management.

[0058] 7. Flexible network topology: LoRa supports flexible network topology and can adapt to different application requirements.

[0059] 8. Adaptive Data Rate Strategy: LoRa uses the Adaptive Data Rate (ADR) strategy to automatically adjust the data transmission rate according to environmental conditions to balance the transmission distance and data rate.

[0060] 9. Good penetration: LoRa can also penetrate buildings and other obstacles and is suitable for indoor and outdoor environments.

[0061] Therefore, LoRa, with its advantages of long range, low power consumption, high anti-interference capability, low cost, and excellent penetration, is perfectly suited for indoor signal monitoring and detection, providing a perfect return path for wireless signal monitors. LoRa can achieve long-range coverage of several kilometers or even tens of kilometers, which greatly reduces the number of deployed internal security convergence gateways and further reduces the cost of deploying the entire indoor signal monitoring system. Furthermore, deployment is more flexible, allowing for outdoor deployment or deployment close to the building where the signal monitor is installed. To better utilize the role of the internal security convergence gateway, outdoor installation is more appropriate.

[0062] The gateway (intrinsic security convergence gateway) is the relay and convergence point in the data processing flow. It receives the encrypted RF signal data sent from the wireless signal monitor. The intrinsic security convergence gateway first decrypts the data using the same key as the monitor, and then hashes the decrypted data. This step uses the self-developed intrinsic security hash algorithm SeSHA-256, which converts the data into a fixed-length hash value to ensure data integrity and prevent data tampering. After processing the data, the gateway forwards the hashed data to the intelligent management system through the secure tunnel link constructed by IPsec. IPsec provides a secure data transmission method that can ensure the confidentiality and integrity of data during transmission and prevent data from being eavesdropped or tampered with.

[0063] The intelligent management system is the control and management core of the entire system. It receives data forwarded from the endogenous security convergence gateway. By receiving and processing this data, the intelligent management system can monitor and analyze the signal quality of indoor antennas in real time. The system compares the decrypted data with its stored benchmark data and monitors changes in signal quality to determine whether the antenna is working properly or whether there is a fault. At the same time, the intelligent management system is also responsible for configuration management, task management, fault management, log management, and system management functions to ensure the normal operation and efficiency of the entire signal monitoring system. Through the intelligent management system, operators can achieve remote monitoring and maintenance of indoor distribution systems, improve operation and maintenance efficiency and reduce inspection costs. The functional modules of the intelligent management system and the corresponding function classification and description are shown in the following table:

[0064]

[0065]

[0066] The collaborative work of wireless signal monitors 20, gateways 22, and intelligent management systems 24 enables real-time, secure, and low-cost monitoring of distributed indoor antenna signals. The monitors are responsible for signal capture and initial processing, the gateways for secure data transmission and aggregation, and the intelligent management system for final data analysis and management. Together, these three create an efficient and secure signal monitoring system, effectively addressing the high costs and insecurity inherent in traditional indoor distributed signal monitoring systems. This is explained below.

[0067] In the above-mentioned data processing system, the wireless signal monitor includes a signal receiver, a signal decider, a LORA transmission module, a security control module and a power supply unit, wherein the signal receiver is used to receive the radio frequency signal transmitted by the indoor antenna and send the radio frequency signal to the signal decider; the signal decider is used to extract the key parameters of the radio frequency signal after receiving the radio frequency signal, and perform signal quality evaluation on the radio frequency signal based on the key parameters to obtain a judgment result, wherein the key parameters include the received signal strength indication, signal-to-noise ratio, reference signal received power, and physical cell identification; the security control module is used to encrypt and perform integrity check on the judgment result and the radio frequency signal, and after the integrity check passes, the encrypted judgment result and the radio frequency signal are sent to the gateway through the LORA transmission module; the power supply unit is used to power the signal receiver, signal decider, LORA transmission module and security control module.

[0068] In the embodiment of the present application, the internal connection structure of the wireless signal monitor is as follows: Figure 3 As shown, it includes: a signal receiver, a signal decision maker, a LoRa transmission module, an (endogenous) safety control module, and a power supply unit. The signal receiver, signal decision maker, LoRa transmission module, and safety control module are connected to each other in sequence, while the power supply module is connected to all the above modules to provide them with the required power support.

[0069] Specifically, the signal receiver is responsible for capturing RF signals transmitted by indoor distributed antennas (such as mushroom-shaped antennas or patch antennas). It must have full-band reception capabilities, capable of processing signals in the 200MHz to 7000MHz bandwidth range and performing appropriate filtering to eliminate out-of-band interference. The received RF signals are then sent to the signal decision unit for further analysis.

[0070] The main function of the signal decider (or simply the decider) is to perform the following steps after receiving the RF signal: 1. RF downconversion: converting the high-frequency RF signal to a lower frequency signal for subsequent processing; 2. Analog-to-digital conversion: converting the analog signal to a digital signal, providing the basis for digital signal processing; 3. Digital downconversion: further downconverting the signal to the baseband frequency range; 4. Baseband signal processing: demodulating the baseband signal to obtain key parameters. By extracting key signal parameters, signal quality assessment is performed to determine whether the signal is normal and meets the application standard. Key parameters include received signal strength indicator (RSSI), signal-to-noise ratio (i.e., signal-to-interference-plus-noise ratio SINR), reference signal received power (RSRP), and physical cell identifier (PCI).

[0071] Based on these parameters, the decision maker uses multi-dimensional analysis methods, such as RSSI-based decision criteria, RSRP-based decision criteria, and SINR-based signal-to-interference-and-noise ratio evaluation, to comprehensively analyze the RF signal and ultimately determine whether the signal quality is normal. The following describes some of the decision criteria:

[0072] 1. Decision criteria based on RSSI:

[0073] Given the differences in received signal strength indicators (RSSIs) across antennas in different frequency bands, an adaptive antenna decision threshold processing mechanism is employed to ensure accurate judgment of the signal integrity of each antenna. Specifically, during normal antenna operation, this mechanism determines a baseline value through repeated adaptive learning. It then sets an adjustment value above this baseline to establish a reasonable decision threshold, thereby avoiding erroneous decisions.

[0074] When the system is operating normally, it first performs self-learning to determine the normal average RSSI strength. Typically, three test cycles are used. For example, if the signal is reported once a day, one test cycle is one day, recorded as RSSI_Ref. The data collection test cycle can be customized from 1 minute to 144 hours. This value corresponds to the decision threshold range for a specific frequency band and antenna, and is calculated as: RSSI_Th = RSSI_Ref - RSSI_Delta (where RSSI_Delta ranges from 5 to 10, with a typical value of 8).

[0075] The signal decision maker compares the currently received signal strength indicator (RSSI) with a preset threshold (RSSI_Th). If the RSSI value is greater than or equal to RSSI_Th, the antenna signal is considered normal; if the RSSI value is lower than RSSI_Th, the antenna signal is considered abnormal. After traversing all frequency bands, the signal decision maker performs decisions based on the RSSI standard and displays the results in sequence.

[0076] 2. RSRP-based decision criteria: To further improve the accuracy of detection, RSRP can be used for decision and analysis.

[0077] Given that the RSRP (Receiving Signal Strength) received by each antenna varies across frequency bands, the system requires self-learning during normal operation to determine a normal average RSRP strength. Typically, this self-learning process lasts three test cycles. For example, if the system reports a signal once a day, each test cycle is one day. The data collection test cycle can be customized from 1 minute to 144 hours. This average value, denoted as RSRP_Ref, corresponds to the decision threshold range for a specific frequency band and antenna: RSRP_Th = RSSI_Ref - RSRP_Delta. RSRP_Delta ranges from 5 to 15, with a typical value of 10.

[0078] The signal decision maker compares the Reference Signal Received Power (RSRP) of the currently received signal with a preset threshold (RSRP_Th). If RSRP is greater than or equal to RSRP_Th, the antenna signal is considered normal; if RSRP is less than RSRP_Th, the antenna signal is considered abnormal. After traversing all frequency bands, the decision maker performs the RSRP criterion and outputs the results one by one.

[0079] 3. Multi-parameter comprehensive judgment method: In order to improve the accuracy and reliability of the judgment, a comprehensive judgment of multiple parameters such as RSSI, SINR, and RSRP is introduced.

[0080] First, independent judgments are made based on the RSSI and RSRP criteria described above to obtain preliminary results on the signal status. For the SINR parameter, a minimum acceptable threshold, SINR_Min, is set (for example, 3dB based on system requirements and actual application scenarios). When the signal's SINR is greater than or equal to SINR_Min, the parameter determines that the signal status is normal; if the SINR is less than SINR_Min, the signal is judged to have an abnormal risk in terms of interference and noise.

[0081] The system comprehensively considers the results of RSSI, RSRP, and SINR. If at least one of RSSI and RSRP indicates a normal signal, and SINR is also normal, the signal is considered normal overall. If both RSSI and RSRP are abnormal, or if SINR is abnormal, the signal is considered abnormal. This multi-parameter comprehensive judgment method allows for a more comprehensive assessment of signal quality, avoiding potential misjudgments caused by single-parameter judgments and improving the accuracy and reliability of signal judgments.

[0082] The LoRa transmission module is the communication unit in the wireless signal monitor. It uses LoRa (Long Range Radio) technology to communicate with the inherent security convergence gateway, thereby building a secure intranet transmission network. The low power consumption of LoRa technology makes it well-suited for the long-term operation of the monitor, while its long-range communication capability ensures stable data transmission from the monitor to the gateway. Once the signal decider reaches a decision, the LoRa transmission module sends the decision and related RF signal data to the gateway via LoRa wireless transmission technology, eliminating the need for traditional cellular networks or SIM cards, significantly reducing communication costs.

[0083] The security control module is responsible for encrypting and checking the integrity of the judgment results and RF signal data to ensure the security of the data during transmission. The encryption algorithm and hash algorithm (such as SeSHA-256) used can prevent data from being tampered with and stolen. Only data that has passed the integrity check will be sent to the gateway through the LoRa transmission module. This security control mechanism enhances the overall security protection capability of the system and is particularly suitable for application environments with high security requirements. The core function of the security control module is to implement the encryption and decryption algorithms, IPsec protocols, inherent security control policies, and security level adjustments related to endogenous security. For cost-sensitive application scenarios, some functions of the security control module can be appropriately reduced or bypassed to reduce system costs and deployment complexity, thereby reducing overall application costs.

[0084] The power supply unit is the energy supply part of the monitor, responsible for providing the required power support for the signal receiver, signal decision maker, LoRa transmission module and security control module. Since the entire monitor needs to operate for a long time without maintenance, the design of the power supply unit usually takes into account low power consumption and long-term power supply. For example, it adopts battery power supply and combines low power consumption mode to ensure that the monitor can continue to operate in indoor distributed environments without frequent battery replacement.

[0085] In the above-mentioned data processing system, the gateway includes: a LORA module, an encryption and decryption module, and a security module. The LORA module is used to establish a wireless connection with the wireless signal monitor and receive the encrypted radio frequency signal transmitted by the wireless signal monitor; the encryption and decryption module is used to decrypt the encrypted radio frequency signal; the security module is used to hash the decrypted radio frequency signal and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link.

[0086] In the embodiment of the present application, the internal components and connection structure of the gateway are as follows: Figure 4 As shown, it includes: LORA module, (A-side) encryption and decryption module and (B-side endogenous) security module.

[0087] Specifically, the LoRa module is primarily responsible for establishing a wireless communication connection with the wireless signal monitor. It receives encrypted radio frequency signals transmitted from the wireless signal monitor via LoRa (Long Range Radio) technology. LoRa technology was chosen for its unique long-range, low power consumption, and anti-interference capabilities. This eliminates the need for reliance on carrier networks or SIM cards for communication between the monitor and the gateway, reducing deployment and operating costs.

[0088] The encryption and decryption module decrypts received encrypted RF signals. Before transmission, the wireless signal monitor encrypts the signal decision results and key RF signal parameters using a pre-set encryption algorithm to protect data privacy and security. The encryption and decryption module then restores this encrypted data to the original signal decision results and key parameter information using an encryption algorithm that is the same as or compatible with the wireless signal monitor.

[0089] The security module hashes the received and decrypted RF signal data using the self-developed, intrinsically secure hash algorithm, SeSHA-256. Hashing ensures data integrity and prevents tampering. Even if the data is intercepted during transmission, it cannot be easily deciphered or tampered with. Furthermore, the security module is responsible for establishing a secure tunnel link, encrypting the hashed RF signal data via the IPsec protocol and forwarding it to the intelligent management system. The use of the IPsec protocol not only ensures the confidentiality and integrity of data during transmission but also provides identity authentication and anti-replay protection, ensuring that the data source is reliable and not retransmitted.

[0090] In this embodiment of the present application, the security module can be equipped with an IPsec (Internet Protocol Security) function and establish a dedicated secure VLAN channel. In addition, the system supports multiple IPsec channel establishment methods, including but not limited to the following: 1. IPsec channel establishment method based on pre-shared key (PSK) authentication; 2. IPsec channel establishment method based on digital certificate authentication; 3. IPsec channel establishment method based on EAP-SIM authentication; 4. IPsec channel establishment method based on "intrinsic security EAP-AKA" authentication.

[0091] In the above-mentioned data processing system, before forwarding the radio frequency signal to the intelligent management system via the secure tunnel link, the following steps are performed: a gateway receives an encrypted temporary user identity (SUCI) sent by the wireless signal monitor, wherein the encrypted user identity is obtained by encrypting the permanent user identity (SUPI); the gateway sends the temporary user identity (SUCI) and the gateway identifier (SNID) of the gateway to the intelligent management system, wherein the intelligent management system parses the SUCI into a SUPI and generates an authentication vector, wherein the authentication vector is determined by an authentication random number, an authentication token, an encryption key, an integrity key, and an expected value of a response from the wireless signal monitor; the gateway forwards the authentication random number, authentication token, and gateway identifier received from the intelligent management system to the wireless signal monitor; after the wireless signal monitor successfully verifies the authentication token, the gateway forwards the actual authentication response value received from the wireless signal monitor to the intelligent management system for verification, obtaining a verification result, wherein the intelligent management system obtains the verification result by comparing the actual authentication response value with the expected value; and if the verification result is a successful verification, the gateway receives the SUPI sent by the intelligent management system and sends an authentication success message to the wireless signal monitor.

[0092] In the embodiment of the present application, the secure endogenous EAP-AKA authentication protocol process is as follows: the gateway first receives the encrypted temporary user identity SUCI sent by the wireless signal monitor. SUCI is obtained by encrypting the permanent user identity SUPI, and its purpose is to protect the user's identity information from being stolen or abused during transmission. The gateway then sends the SUCI and its own gateway identifier SNID to the intelligent management system. After receiving the SUCI and SNID, the intelligent management system parses the SUCI and restores it to SUPI. Then, the intelligent management system generates an authentication vector AV based on the SUPI, SNID, and the generated authentication random number RAND and authentication token AUTN. The authentication vector AV contains key information such as XRES (expected value of the wireless signal monitor's response), CK (encryption key), IK (integrity key), and AK (anonymity key), which are used for subsequent identity authentication and secure communication. The intelligent management system uses RAND, AUTN, and SNID to parse the SUCI and restore it to SUPI. The ID is sent back to the gateway, which then forwards it to the wireless signal monitor. After receiving this information, the wireless signal monitor uses the inherent security control module to calculate XAUTN ​​(Extended Authentication Token) and compares it with the received AUTN. If the two are consistent, the authentication token is considered valid, and the actual authentication response value RES is calculated, and then the RES is sent back to the gateway. After the gateway receives the RES, it forwards it to the intelligent management system again. The intelligent management system uses the previously generated RES expected value (XRES) to compare with the actual RES sent by the wireless signal monitor to verify the identity of the wireless signal monitor. If the intelligent management system verifies that the RES is consistent with the expected value, the identity of the wireless signal monitor is confirmed and the SUPI is sent to the gateway. After the gateway receives the SUPI from the intelligent management system, it sends a successful authentication message to the wireless signal monitor, indicating that the authentication process is complete. This process ensures the communication security between the wireless signal monitor and the intelligent management system, preventing identity information leakage and illegal access.

[0093] The calculation formula involved in the above authentication process is as follows:

[0094] AV=RAND||XRES||CK||IK||AUTN

[0095] MAC=f1(K,SQN||RAND)

[0096] XRES=f2(K,RAND)

[0097] CK=f3(K,RAND)

[0098] IK=f4(K,RAND)

[0099] AK=f5(K,RAND)

[0100] AUTN=SQN modulo 2 plus AK||MAC

[0101] XMAC=f1(K,sqn||RAND)

[0102] XAUTN=sqn modulo 2 plus AK||MAC

[0103] RES=f2(K,RAND)

[0104] Among them, RAND is the authentication random number, which serves as a parameter for calculating XRES and is the seed for generating different authentication sets. It is generated at the intelligent management system. The root sequence number sqn is generated when the wireless signal monitor is initialized. It maintains the same root sequence number as the intelligent management system and generates the sequence number SQN according to the rules. K is a shared long-term key, which is also generated when the wireless signal monitor is initialized and stored together with the intelligent management system. f1-f5 are one-way functions to ensure that the key cannot be obtained from the calculation result. AV (Authentication Vector) is the intermediate authentication vector; XRES is the expected value of the wireless signal monitor's response, which serves as a parameter for checking the legitimacy of the wireless signal monitor; CK is the confidentiality encryption key, which serves as the encryption parameter of the wireless signal monitor information; IK is the integrity key, which serves as the integrity protection parameter for the network and terminal signaling and is used for signaling encryption; AK is the anonymous key, which is used to hide the sequence number SQN value; AUTN is the authentication token, which is the parameter used by the wireless signal monitor to confirm the legitimacy of the intelligent management system; MAC is used to verify the correctness of the message to achieve the authentication of the wireless signal monitor to the intelligent management system. XMAC is the extended message authentication code. SUPI is the user's permanent identity. SUPI and K can be used to encrypt SUPI to obtain the user's temporary identity SUCI. SNID is the gateway identifier of the endogenous security convergence gateway.

[0105] Through the above process, a secure connection based on the inherently secure EAP-AKA authentication protocol is established between the gateway and the wireless signal monitor. After successful authentication, the gateway can forward the RF signal data collected by the wireless signal monitor to the intelligent management system through a secure tunnel link. This secure tunnel link is usually constructed using the IPsec protocol, further ensuring the security and integrity of the data transmission process. The entire authentication and data transmission process realizes secure communication between the wireless signal monitor and the intelligent management system during the signal monitoring process, effectively protecting the security of user identity information and monitoring data, while reducing the costs incurred by using traditional SIM cards and public network backhaul data.

[0106] In the above-mentioned data processing system, the security module is used to perform hash processing on the decrypted radio frequency signal, including: filling the radio frequency signal according to a preset rule to obtain a first radio frequency signal; dividing the first radio frequency signal into blocks to obtain multiple blocks; decomposing each block to obtain multiple words; generating a temporary value based on the multiple words and a preset working variable; updating the working variable based on the temporary value; adding the updated working variable and the corresponding initial secure hash value to obtain multiple hash value components; and connecting the multiple hash value components corresponding to each block to obtain a secure hash value.

[0107] In the embodiment of the present application, the "secure intrinsic EAP-AKA" authentication protocol uses the intrinsic secure hash algorithm SeSHA-256, which is a function that maps data of arbitrary length to a string of fixed length (secure hash value). SeSHA-256 has important characteristics such as irreversibility and collision resistance. The SeSHA-256 algorithm processes the input message and ultimately generates a 256-bit (32-byte) secure hash value. The algorithm calculation steps are as follows:

[0108] The security module pads the decrypted RF signal data (assuming the length is L bits) so that its length meets the requirements of the SeSHA-256 algorithm. During the padding process, a "1" is added after the RF signal data, followed by multiple "0s" until the data length reaches 448 bits plus a multiple of 512 bits, that is, the padded data length M is equal to 448 (mod512). Finally, a 64-bit block is added to save the length L of the original RF signal data to ensure data integrity. The data obtained after padding is called the first RF signal. The first RF signal obtained after padding (now a fixed-length string) is divided into a series of blocks according to the size of 512 bits, each block is denoted as Mi, where i is the block number. Each 512-bit block Mi is further decomposed into 16 32-bit words Wj, where j ranges from 0 to 15. Then, these words are expanded according to preset rules to generate 48 additional words from the 16th to the 63rd to ensure the complexity and security of the algorithm. The preset rules are as follows:

[0109] W j =σ(1W j-2 )+W j-7 +σ0(W j-15 )+W j-16

[0110]

[0111] For each block Mi, 64 rounds of calculation are performed using 8 working variables (a, b, c, d, e, f, g, h) and the corresponding 8 32-bit initial secure hash values ​​(SeH0 to SeH7).

[0112] The initial values ​​of the initial secure hash value are as follows: SeH0 = 0x6a09e667, SeH1 = 0xbb67ae85, SeH2 = 0x3c6ef372, SeH3 = 0xa54ff53a, SeH4 = 0x510e527f, SeH5 = 0x9605688c, SeH6 = 0x1f83d9ab, SeH7 = 0x5be0cd19.

[0113] The calculation for each round is as follows:

[0114]

[0115] In each round of calculation, two temporary values, T1 and T2, are generated based on the words in the block and the working variables. The working variables are then updated using Kj (a series of predefined constants that vary for different values ​​of j) and other mathematical operations (such as addition and circular shifts). This step ensures the unpredictability and tamper-resistance of the final secure hash value. For example, the working variable updates can satisfy the following formula: h = g, g = f, f = e, e = d + T1, d = c, c = b, b = a, a = T1 + T2.

[0116] After calculating all blocks, the updated working variables are added to the corresponding initial secure hash values ​​to generate eight new 32-bit values, which are called hash value components. They are as follows: SeH0 = SeH0 + a, SeH1 = SeH1 + b, SeH2 = SeH2 + c, SeH3 = SeH3 + d, SeH4 = SeH4 + e, SeH5 = SeH5 + f, SeH6 = SeH6 + g, and SeH7 = SeH7 + h.

[0117] Finally, the eight hash value components corresponding to each block are concatenated together to form the final 256-bit secure hash value. That is, all the calculated hash value components SeH0||SeH1||SeH2||SeH3||SeH4||SeH5||SeH6||SeH7 are concatenated to obtain the secure hash value of the entire RF signal data.

[0118] In the above data processing system, a tunnel mode is adopted between the gateway and the intelligent management system, and an Internet security protocol IPSec channel transmission mode is adopted between the gateway and the wireless signal monitor.

[0119] In an embodiment of the present application, the IPSec channel transmission mode is used between the gateway and the wireless signal monitor to realize the transmission of IP data packets; the communication between the gateway and the intelligent management system adopts the tunnel mode to ensure the transmission of IP data packets. Among them, the transmission mode is mainly used for end-to-end connection between hosts, and the address information in the original IP packet header is used for positioning. The tunnel mode is mainly used for communication between two security gateways (such as routers), and IP-in-IP encapsulation is realized by appending a new IP packet header in front of the original IP packet header. During the tunnel transmission process, the original IP packet header is retained until it reaches the end of the tunnel and the additional packet header is removed before it is used.

[0120] There are three primary types of backhaul links between the gateway and the intelligent management system: dedicated transmission links with the highest security level, third-party backhaul links with higher security levels, and public network transmission links with lower security levels. Using an IPsec transmission channel in tunnel mode significantly enhances the security of the backhaul link between the intrinsic security convergence gateway and the intelligent management system, making it suitable for a variety of security-critical scenarios.

[0121] The built-in IPSec security module enables the following four functions: First, data confidentiality, which ensures the confidentiality of data during transmission by encrypting it before sending it; second, data integrity, which ensures that data has not been tampered with during transmission by verifying the sender's data packet through IPSec; third, data authentication, which allows the IPSec receiver to confirm the source of the data packet; and finally, anti-replay, which allows the IPSec receiver to detect and reject duplicate packets. Therefore, the built-in IPSec security module further enhances system security and supports multiple IPSec channel establishment methods to meet the needs of a wider range of application scenarios.

[0122] In the above data processing system, the intelligent management system is further configured to trigger a fault management process when the radio frequency signal does not meet a preset security policy.

[0123] In an embodiment of the present application, the intelligent management system presets a series of security policies that cover various security requirements and parameter thresholds in signal monitoring. For example, the policies may include, but are not limited to, RF signal strength, signal quality indicators (such as SINR and RSRP), signal integrity, data transmission security level, and the validity of authentication results. These policies are set based on the signal parameter range and security requirements during normal system operation. The intelligent management system receives RF signal data and related judgment results forwarded by the endogenous security convergence gateway via a secure tunnel link or a dedicated transmission link. After receiving the data, the system first verifies the integrity and correctness of the data, such as by checking whether the data transmitted by LoRa has been tampered with and whether the data in the IPsec tunnel has passed the verification of the security control module. Once the data is verified to be correct, the intelligent management system will analyze the signal data and compare it with the preset security policy to check whether the data is within the expected normal range and whether the signal transmission process meets the security requirements. For example, if the RF signal strength (RSSI) is lower than the preset threshold, or the signal quality (such as SINR, RSRP) is lower than the minimum requirement, the intelligent management system will determine that the signal does not meet the security policy. When the signal data does not meet the preset security policy, the intelligent management system will trigger the fault management process.

[0124] Figure 5 is a flow chart of a data processing method according to an embodiment of the present application, such as Figure 5 As shown, the method includes:

[0125] Step S502: obtaining an encrypted radio frequency signal transmitted by the wireless signal monitor via a long-distance radio LORA transmission module, wherein the LORA transmission module is a component in the wireless signal monitor, and the radio frequency signal is a radio frequency signal transmitted by a room antenna;

[0126] Step S504: decrypting the encrypted radio frequency signal and performing hash processing on the decrypted radio frequency signal;

[0127] Step S506: forwarding the hashed radio frequency signal to the intelligent management system via a secure tunnel link, wherein the intelligent management system is used to monitor the radio frequency signal.

[0128] It should be noted that Figure 5 The data processing method shown can be run on Figure 2 In the data processing system shown, the relevant explanations in the above data processing system are also applicable to the data processing method and will not be repeated here.

[0129] An embodiment of the present application also provides an electronic device, which includes a memory and a processor, wherein the memory is used to store program instructions; the processor is connected to the memory and is used to execute and implement the above-mentioned data processing method.

[0130] An embodiment of the present application further provides a non-volatile storage medium, which includes a stored computer program, wherein a device where the non-volatile storage medium is located executes the above-mentioned data processing method by running the computer program.

[0131] An embodiment of the present application further provides a computer program product, including computer instructions, which, when executed by a processor, implement the steps of the data processing method in each embodiment of the present application.

[0132] The embodiments of the present application also provide a computer program, which, when executed by a processor, implements the steps of the data processing method in each embodiment of the present application.

[0133] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0134] In the above embodiments of the present application, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0135] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of the units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0136] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0137] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0138] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0139] The above is only a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A data processing system, characterized in that: include: Wireless signal monitors, gateways and intelligent management systems, including: The wireless signal monitor is used to receive the radio frequency signal transmitted by the indoor antenna, encrypt the radio frequency signal, and transmit the encrypted radio frequency signal to the gateway through the long-distance radio LORA transmission module in the wireless signal monitor; The gateway is used to decrypt the received encrypted radio frequency signal, perform hash processing on the decrypted radio frequency signal, and forward the hashed radio frequency signal to the intelligent management system through a secure tunnel link; The intelligent management system is used to monitor the radio frequency signals forwarded by the gateway.

2. The system according to claim 1, characterized in that The wireless signal monitor includes a signal receiver, a signal determiner, a LORA transmission module, a safety control module and a power supply unit, wherein: The signal receiver is used to receive the radio frequency signal transmitted by the indoor antenna and send the radio frequency signal to the signal determiner; The signal determiner is used to extract key parameters of the radio frequency signal after receiving the radio frequency signal, and perform signal quality evaluation on the radio frequency signal according to the key parameters to obtain a determination result, wherein the key parameters include a received signal strength indicator, a signal-to-noise ratio, a reference signal received power, and a physical cell identifier; The security control module is used to encrypt and check the integrity of the judgment result and the radio frequency signal. After the integrity check passes, the encrypted judgment result and the radio frequency signal are sent to the gateway through the LORA transmission module; The power supply unit is used to supply power to the signal receiver, the signal determiner, the LORA transmission module and the safety control module.

3. The system according to claim 1, characterized in that The gateway includes: a LORA module, an encryption and decryption module and a security module, wherein: The LORA module is used to establish a wireless connection with the wireless signal monitor and receive the encrypted radio frequency signal transmitted by the wireless signal monitor; The encryption and decryption module is used to decrypt the encrypted radio frequency signal; The security module is used to perform hash processing on the decrypted radio frequency signal, and forward the hashed radio frequency signal to the intelligent management system through the secure tunnel link.

4. The system according to claim 3, characterized in that Before forwarding the radio frequency signal to the intelligent management system through the secure tunnel link, the method includes: The gateway receives the encrypted temporary user identity SUCI sent by the wireless signal monitor, wherein the encrypted user identity is obtained by encrypting the permanent user identity SUPI; The gateway sends the user temporary identity SUCI and the gateway identifier SNID of the gateway to the intelligent management system, wherein the intelligent management system parses the SUCI into the SUPI and generates an authentication vector, wherein the authentication vector is determined by an authentication random number, an authentication token, an encryption key, an integrity key, and an expected value of a response from the wireless signal monitor; The gateway forwards the authentication random number, the authentication token and the gateway identifier received and sent by the intelligent management system to the wireless signal monitor; After the wireless signal monitor passes the verification of the authentication token, the gateway forwards the actual authentication response value sent by the wireless signal monitor to the intelligent management system for verification to obtain a verification result, wherein the intelligent management system obtains the verification result by comparing the actual authentication response value with the expected value; When the verification result is verification passed, the gateway receives the SUPI sent by the intelligent management system, and sends an authentication success to the wireless signal monitor.

5. The system according to claim 3, characterized in that The security module is used to perform hash processing on the decrypted radio frequency signal, including: Filling the radio frequency signal according to a preset rule to obtain a first radio frequency signal; Processing the first radio frequency signal in blocks to obtain a plurality of blocks; Decompose each block to obtain multiple words; generating a temporary value according to the plurality of words and a preset working variable; updating the working variable according to the temporary value; Adding the updated working variable to the corresponding initial secure hash value to obtain multiple hash value components; The multiple hash value components corresponding to each block are connected to obtain a secure hash value.

6. The system according to claim 1, characterized in that A tunnel mode is adopted between the gateway and the intelligent management system, and an Internet security protocol IPSec channel transmission mode is adopted between the gateway and the wireless signal monitor.

7. The system according to claim 1, characterized in that The intelligent management system is also used to trigger a fault management process when the radio frequency signal does not meet a preset security policy.

8. A data processing method, characterized in that: include: Obtaining an encrypted radio frequency signal transmitted by a wireless signal monitor through a long-distance radio LORA transmission module, wherein the LORA transmission module is a component in the wireless signal monitor, and the radio frequency signal is a radio frequency signal transmitted by a room antenna; decrypting the encrypted radio frequency signal, and performing hash processing on the decrypted radio frequency signal; The radio frequency signal after hash processing is forwarded to the intelligent management system through a secure tunnel link, wherein the intelligent management system is used to monitor the radio frequency signal.

9. An electronic device, characterized in that: include: A memory and a processor, wherein the memory is used to store program instructions; and the processor is connected to the memory and is used to execute the data processing method described in claim 8.

10. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the data processing method described in claim 8 by running the computer program.

11. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the data processing method described in claim 8 is implemented.

Images