Ecological environment quality monitoring system

Abstract

The embodiment of the invention provides an ecological environment quality monitoring system. The ecological environment quality monitoring system comprises environment monitoring equipment and gateway equipment which are deployed at monitoring point positions, and a remote server which is provided with monitoring equipment control software, a monitoring equipment connection interface of the gateway equipment is connected with a data IO interface of the environment monitoring equipment, and a network communication interface is in communication connection with a remote server through a communication network and is used for forwarding a control instruction issued by the remote server to the environment monitoring equipment and reporting output data of the environment monitoring equipment to the remote server; and the remote server is used for issuing a control instruction for controlling the environment monitoring equipment to the gateway equipment and receiving output data reported by the gateway equipment. By adopting the scheme, the output data transmitted by the gateway equipment cannot be tampered through the gateway equipment and is directly forwarded to the remote server, and the remote server can obtain various original data output by the environment monitoring equipment, so that the corresponding environment monitoring data can be obtained according to the original data.

Description

Technical Field

[0001] The present disclosure relates to the technical field of Internet of Things, and in particular to an ecological environment quality monitoring system. Background Art

[0002] In order to achieve full-area environmental quality monitoring, a large number of monitoring points for air environment quality and water environment quality monitoring have been deployed in various regions across the country. The aforementioned monitoring points are equipped with monitoring equipment for specific environmental quality parameters, which collect data on the corresponding types of environmental quality parameters at the points and report the monitoring data in real time.

[0003] At present, each environmental monitoring point adopts the system architecture of upper industrial computers and lower monitoring equipment. The upper industrial computer is used to realize quality control and data collection of lower monitoring equipment, and report the collected monitoring data to various data sources. Although the upper industrial computer can be operated through remote desktop and set access passwords, it still may cause access password leakage due to its customized commercial software system, which may cause the risk of monitoring data collected by lower monitoring equipment being tampered with. Summary of the invention

[0004] In order to solve the problem that the equipment system architecture of existing environmental monitoring points easily causes monitoring data to be tampered with, the embodiments of the present disclosure provide an ecological environment monitoring system.

[0005] In a first aspect, an embodiment of the present disclosure provides an ecological environment quality monitoring system, comprising: an environmental monitoring device and a gateway device deployed at a monitoring point, and a remote server on which a monitoring device control software is installed;

[0006] The monitoring device connection interface of the gateway device is connected to the data IO interface of the environmental monitoring device, and the network communication interface is connected to the remote server through the communication network, and is used to forward the control instructions issued by the remote server to the environmental monitoring device, and report the output data of the environmental monitoring device to the remote server;

[0007] The remote server is used to send control instructions for controlling the environment monitoring device to the gateway device, and receive the output data reported by the gateway device.

[0008] Optionally, the remote server is further used to send a short-time encryption program to the gateway device, where the short-time encryption program is an encryption program used only within a set time period;

[0009] The gateway device reports the output data of the environment monitoring device to the remote server, including:

[0010] Encrypting the output data using the short-time encryption program to obtain encrypted reporting data, and sending the encrypted reporting data to the remote server;

[0011] When receiving the encrypted reported data, the remote server uses a short-time decryption program to decrypt the encrypted reported data to obtain the output data; the short-time decryption program is a decryption program adapted to the short-time encryption program.

[0012] Optionally, the gateway device is further configured with a long-term encryption program, and the remote server is further configured with a long-term decryption program adapted to the long-term encryption program;

[0013] Before the gateway device uses the short-time encryption program to encrypt the output data to obtain encrypted reporting data, the method further includes: using the long-time encryption program to encrypt the output data to obtain primary encrypted data;

[0014] The gateway device encrypts the output data using the short-time encryption program to obtain encrypted reporting data, including: re-encrypting the once encrypted data using the short-time encryption program to obtain the encrypted reporting data;

[0015] The step of decrypting the encrypted reported data using a short-time decryption program to obtain output data includes: decrypting the encrypted reported data using the short-time decryption program to obtain primary decrypted data; and re-decrypting the primary decrypted data using a long-time decryption program to obtain the output data; or

[0016] After obtaining the encrypted reported data, the gateway device re-encrypts the encrypted reported data using the long-term encryption program to obtain secondary encrypted data, and sends the secondary encrypted data to the remote server;

[0017] After receiving the secondary encrypted data, the remote server uses the long-term decryption program to process the secondary encrypted data to obtain the encrypted reporting data.

[0018] Optionally, the remote server publishes the short-time encryption program to an encryption program topic, and the gateway device obtains the short-time encryption program by subscribing to the encryption program topic.

[0019] Optionally, while publishing the new short-term encryption program, the remote server publishes a program identifier of the new short-term encryption program;

[0020] When the gateway device obtains the new short-term encryption program, it obtains the corresponding program identifier;

[0021] The step of encrypting the output data using the short-time encryption program to obtain encrypted reporting data, and sending the encrypted reporting data to the remote server includes:

[0022] The newly acquired output data is encrypted using a new short-time encryption program to obtain encrypted reporting data;

[0023] Composing a sending data packet based on the encrypted reporting data and the new short-time encryption program identifier, and sending the sending data packet to the remote server; or,

[0024] When publishing the new short-time encryption program, the remote server publishes the effective period of the new short-time encryption program; when the gateway device obtains the new short-time encryption program, it obtains the corresponding effective period;

[0025] The method of using the short-time encryption program to encrypt the output data to obtain encrypted reporting data includes: determining a valid time period for entering a new short-time encryption program, and using the new short-time encryption program to encrypt the newly acquired output data to obtain encrypted reporting data.

[0026] Optionally, the remote server publishes the control instruction including the device identifier and the gateway identifier to an instruction issuing topic, and the gateway device obtains the control instruction by subscribing to the instruction issuing topic;

[0027] When the control instruction is obtained, the gateway device determines whether to discard the control instruction according to the gateway identifier and its own identifier in the control instruction, and sends the control instruction to the corresponding environmental monitoring device according to the device identifier if the control instruction is not discarded.

[0028] Optionally, the output data includes at least two different types of data;

[0029] The gateway device reports the output data of the environment monitoring device to the remote server, including:

[0030] In response to receiving the output data, determining a data type according to a type identifier of the output data;

[0031] According to the data type, publishing the output data to a corresponding type topic;

[0032] The remote server obtains various types of output data by subscribing to various types of topics.

[0033] Optionally, when the gateway device is connected to a communication network or enters a new connection cycle, the gateway device sends its own fingerprint information to the remote server;

[0034] In response to receiving the fingerprint information sent by the gateway device, the remote server generates a site random number according to the fingerprint information, stores the association relationship between the site random number and the fingerprint information in a local data table, and sends the site random number to the gateway device;

[0035] After receiving the site random number and the output data of the monitoring device, the gateway device combines the site random number, the encrypted fingerprint information and the output data into a sending data packet, and sends the sending data packet to the remote server.

[0036] Optionally, after receiving the sent data packet, the remote server parses the sent data packet to obtain the parsing site random number, parsing fingerprint information and parsing output data;

[0037] In the case of verifying that the association relationship between the random number of the parsing site and the parsing fingerprint information is stored in the local data table, taking the parsing output data as legal data; and,

[0038] When it is verified that the parsing site random number and the parsing fingerprint information are not stored in the local data table, the parsing output data is discarded.

[0039] Optionally, when the gateway device is connected to a newly connected environmental monitoring device and receives a device identification of the newly connected monitoring device, the gateway device further comprises generating a device configuration request according to the site random number and the device identification, and sending the request to the remote server;

[0040] After receiving the device configuration request, the remote server parses the device configuration request to obtain a device identifier and a site random number;

[0041] A control instruction is generated according to the parsed device identifier and sent to a gateway device corresponding to the site random identifier.

[0042] The ecological environment quality monitoring system in the disclosed embodiment eliminates the host computer at the environmental monitoring point in the conventional architecture, and instead deploys a gateway device for data relay. At the same time, the control software for controlling the environmental monitoring device is deployed on the remote server side, and the control instructions issued by the remote server are forwarded to the environmental monitoring device through the gateway device, and the various data output by the environmental monitoring device are also directly sent to the remote server through the gateway device. With this solution, the output data transmitted through the gateway device cannot be tampered with through the gateway device, and is directly forwarded to the remote server. The remote server can obtain various original data output by the environmental monitoring device, and can also obtain the corresponding environmental monitoring data based on the original data. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art description. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work, including:

[0045] Figure 1 is a structural diagram of an ecological environment quality monitoring system provided by an embodiment of the present disclosure;

[0046] Figure 2 is a communication timing diagram between a remote server and a gateway device in some embodiments. DETAILED DESCRIPTION

[0047] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments described herein, which are instead provided for a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0048] The term "including" and its variations used in this document are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one other embodiment"; the term "some embodiments" means "at least some embodiments". Relevant definitions of other terms will be given in the description below. In this document, relational terms such as "first" and "second" are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations.

[0049] In order to solve the problem that the system architecture of the upper industrial computer and lower monitoring equipment at the environmental monitoring points in the existing ecological environment quality monitoring system is prone to tampering of monitoring data, the embodiment of the present disclosure provides a new ecological environment quality monitoring system.

[0050] Figure 1 Schematic diagram of the structure of the ecological environment quality monitoring system provided by the embodiment of the present disclosure. Figure 1As shown, the ecological environment quality monitoring system 100 provided in the embodiment of the present disclosure includes an environmental monitoring device 101, a gateway device 102 and a remote server 103.

[0051] The aforementioned environmental monitoring devices 101 and gateway devices 102 are both deployed as local devices at the environmental monitoring point. In a specific implementation, one environmental monitoring point can deploy multiple different types of environmental monitoring devices 101 and one gateway device 102. The monitoring device connection interface of the aforementioned gateway device 102 is connected to the data IO interface of each environmental monitoring device 101, and data transmission with each environmental monitoring device 101 is realized through a local communication link.

[0052] Each environmental monitoring device 101 can be connected in series with the gateway device 102 (that is, only one environmental monitoring device 101 is directly connected to the gateway device 102, and other environmental monitoring devices 101 communicate with the gateway device 102 through the aforementioned environmental monitoring device 101), or can be connected in parallel with the gateway device 102 (that is, each environmental monitoring device 101 is connected to the gateway device 102 through an independent monitoring device connection interface), which is not limited in the embodiments of the present disclosure. In some embodiments, while ensuring the security and reliability of data communication, the gateway device 102 and the environmental monitoring device 101 can also be connected using short-range wireless communication.

[0053] In the disclosed embodiment, the gateway device 102 does not have the function of directly controlling the environment monitoring device 101 , that is, the gateway device 102 does not have the monitoring device control software for directly controlling the environment monitoring device 101 installed therein.

[0054] The remote server 103 is a server that is not deployed at the environmental monitoring point, but is installed with the monitoring equipment control software. The remote server 103 can send control instructions to the environmental monitoring equipment 101 through network communication, and receive the output data reported by the environmental monitoring equipment 101. In specific implementation, the remote server 103 is mostly deployed in the server room of the environmental supervision entity.

[0055] like Figure 1 As shown, in the embodiment of the present disclosure, the remote server 103 is not directly connected to the aforementioned environment monitoring device 101, but is indirectly connected to the environment monitoring device 101 through the gateway device 102. Specifically, the gateway device 102, as an intermediate communication device, forwards the control instructions issued by the remote server 103 to the corresponding environment monitoring device 101, and reports various output data output by the environment monitoring device 101 to the remote server 103.

[0056] As analyzed above, the ecological environment quality monitoring system 100 used in the embodiment of the present disclosure cancels the host computer at the environmental monitoring point in the conventional architecture, and only deploys a gateway device 102 for data relay. At the same time, the control software for controlling the environmental monitoring device 101 is deployed on the remote server 103, and the control instructions issued by the remote server 103 are forwarded to the environmental monitoring device 101 through the gateway device 102, and the various data output by the environmental monitoring device 101 are also directly sent to the remote server 103 through the gateway device 102.

[0057] Because the gateway device 102 is not equipped with monitoring device control software, the output data transmitted by it cannot be tampered with by the gateway device 102, but is directly forwarded to the remote server 103. Using the ecological environment quality monitoring system 100 of the disclosed implementation architecture, the remote server 103 can obtain various raw data output by the environmental monitoring device 101, and can also obtain corresponding environmental monitoring data based on the raw data.

[0058] In a specific implementation, the gateway device 102 can be designed to have only the aforementioned monitoring device connection interface and network communication interface, and no direct physical interface that can realize device status reading and data reading. Accordingly, various data information cannot be intercepted or tampered with through physical connection.

[0059] Because the various data output by the environment monitoring device 101 are confidential data and are at risk of being intercepted by a third party, in actual applications, the output data output by the environment monitoring device 101 and forwarded to the remote server 103 through the gateway device 102 cannot be transmitted in plain text, but should be transmitted in cipher text. In this case, the risk of the encrypted cipher text itself being cracked needs to be considered.

[0060] Figure 2 1 is a timing diagram of communication between the remote server 103 and the gateway device 102 in some embodiments. Figure 2 As shown, in order to achieve reliable ciphertext transmission of output data, after the gateway device 102 establishes a communication connection with the remote server 103 (this can be a direct communication connection or an indirect communication connection (that is, the gateway device 102 and the remote server 103 do not directly know the existence of each other, which will be analyzed later), the remote server 103 sends a short-term encryption program to the gateway device 102.

[0061] The short-term encryption program is an encryption program that can only be used within a set time. After its release (that is, the remote server 103 makes it public) exceeds the set time, the short-term encryption program is no longer useful (specifically, the corresponding short-term decryption program used by the remote server 103 is replaced, so that the data encrypted by the short-term encryption program is no longer useful). In the specific implementation, considering that the gateway device 102 does not have software compilation capabilities, the aforementioned short-term encryption program is a binary program compiled on the remote server 103 side. The aforementioned set time can be determined according to the cracking complexity of the short-term encryption program. The higher the cracking complexity, the longer the corresponding available set time.

[0062] like Figure 2 As shown, in order for the gateway device 102 to use the short-time encryption program to encrypt the output data, the remote server 103 needs to execute S110 to send the short-time encryption program to the gateway device.

[0063] In some embodiments, the remote server 103 and the gateway device 102 are directly connected in communication, and the remote server 103 can directly send the short-term encryption program to the gateway device 102 .

[0064] In some other embodiments, in order to achieve decoupling of the remote server 103 and a large number of gateway devices 102, the remote server 103 and the gateway device 102 use a message queue telemetry transmission protocol to implement the distribution of the short-term encryption program. Specifically, (1) the remote server 103 creates an encryption program topic in the proxy service (this proxy service can be a private proxy service deployed under the entity to which the remote server 103 belongs, or it can be a public proxy service) and publishes the short-term encryption program to the aforementioned encryption program topic; (2) the gateway device 102 subscribes to the aforementioned encryption program topic. After publishing a new short-term encryption program in the encryption program topic and publishing it to the encryption program topic, the proxy service pushes the short-term encryption program to the gateway device 102, so that the gateway device 102 obtains the short-term encryption program.

[0065] After obtaining and loading the aforementioned short-time encryption program, the gateway device 102 executes S120: encrypting the output data using the short-time encryption program to obtain encrypted reporting data, and S130 sending the encrypted reporting data to the remote server. It should be noted that the premise of executing S120 is that the gateway device 102 obtains the output data sent by the environmental monitoring device 101.

[0066] After receiving the encrypted reporting data sent by the gateway device 102, the remote server 103 executes S140: decrypting the encrypted reporting data using a short-time decryption program to obtain output data. The short-time decryption program is a decryption program adapted to the short-time encryption program, which is generated by the remote server 103 according to the short-time encryption program.

[0067] Because the short-time encryption program corresponds to the short-time decryption program, it can decrypt the encrypted reported data to obtain output data. After obtaining the output data, the remote server 103 can analyze the output data to obtain the corresponding output result.

[0068] For example, when the output data is environmental quality monitoring data, the remote server 103 can determine the environmental quality statistical data of the environmental monitoring point based on the environmental quality monitoring data; when the output data is status data of the environmental monitoring device 101, the remote server 103 can determine whether the environmental monitoring device 101 is in an abnormal state and the cause of the abnormal state based on the status data; when the output data is quality control result data of the environmental monitoring device 101, the remote server 103 can determine whether the quality control is qualified based on the quality control result data.

[0069] In some embodiments, in addition to the aforementioned short-term encryption program, the gateway device 102 is also configured with a long-term encryption program. Accordingly, in addition to using the short-term encryption program to encrypt the output data, it can also use the long-term encryption program to encrypt the corresponding data. There may be the following two situations.

[0070] 1. Before the gateway device 102 uses a short-time encryption program to encrypt the output data to obtain encrypted reporting data, the gateway device 102 uses a long-time encryption program to encrypt the output data to obtain encrypted data. The corresponding S120 is specifically S121 using a short-time encryption program to re-encrypt the encrypted data to obtain encrypted reporting data. When executing the above S121, the above S140 is specifically: using a short-time decryption program to decrypt the encrypted reporting data to obtain decrypted data; then using a long-time decryption program to re-decrypt the decrypted data to obtain output data.

[0071] 2. After decrypting the encrypted reported data using the short-term decryption program to obtain output data, the gateway device 102 re-encrypts the encrypted reported data using the long-term encryption program to obtain secondary encrypted data, and sends the secondary encrypted data to the remote server 103. Correspondingly, after receiving the secondary encrypted data, the remote server 103 processes the secondary encrypted data using the long-term available interface program to obtain encrypted reported data, and then executes the aforementioned S140.

[0072] In a specific implementation, the aforementioned long-term encryption program and long-term decryption program may be programs that use symmetric encryption and decryption, or may be programs that use asymmetric encryption and decryption, and the embodiments of the present disclosure do not limit this.

[0073] As analyzed above, the short-term encryption program is only a short-term available encryption program. When it is transmitted to the gateway device 102 using the publish-subscribe mechanism, the problem of asynchronous transmission between the remote server 103 and the gateway device 102 (that is, it is uncertain when the gateway device 102 obtains the short-term encryption program, but the general time range is certain) will affect the coordination of the gateway device 102 using the short-term encryption program and the remote server 103 using the short-term decryption program. In this case, it is necessary to consider how to coordinate the use of the old short-term encryption program and the new short-term encryption program, and how to enable the remote server 103 to determine the corresponding short-term decryption program.

[0074] To solve the aforementioned problem, in some embodiments, while publishing a new short-time encryption program, the remote server 103 publishes the program identifier of the new short-time encryption program. The corresponding gateway device 102 will also obtain the corresponding program identifier when obtaining the new short-time encryption program. In this case, the gateway device 102 can use the new short-time encryption program to encrypt the newly obtained output data to obtain encrypted reporting data. In order for the remote server 103 to determine which short-time decryption program interface to use, the gateway device 102 forms a sending data packet based on the encrypted reporting data and the new short-time encryption program identifier, and sends the sending data packet to the remote server 103.

[0075] In some other embodiments, when publishing a new short-time encryption program, the remote server 103 publishes the effective period of the new short-time encryption program. The corresponding gateway device 102 obtains the corresponding effective period when obtaining the new short-time encryption program. In this case, the gateway device 102 determines that it has entered the effective period of the new short-time encryption program, and uses the new short-time encryption program to encrypt the newly obtained output data to obtain encrypted reporting data. Correspondingly, when the remote server 103 determines that the short-time encryption program is in the effective period, it uses the corresponding short-time interface program to decrypt the received confidential reporting data.

[0076] Based on the actual situation of environmental quality monitoring, there will be a large number of environmental monitoring sites in actual applications, and there will be a large number of gateway devices 102 accordingly. In this case, if the data receiving interfaces of each gateway device 102 and the remote server 103 are directly coupled and connected, the system will be too complicated, which is not convenient for the online use and offline maintenance of the environmental monitoring points. To solve this problem, the gateway device 102 and the remote server 103 can also adopt a publish-subscribe mechanism to transmit output data. Specifically, a data topic is created in the proxy service, and the gateway device 102 publishes the output data (or the aforementioned encrypted reporting data, sending data packets) to the aforementioned data topic, and the remote server 103 subscribes to the aforementioned data topic. After the output data is published to the output data topic, the proxy service pushes the output device to the remote server 103, and the remote server 103 can obtain the output data from the corresponding message queue.

[0077] In some embodiments, different output data have different processing priorities. For example, quality control data and equipment status data have higher priorities than environmental quality monitoring data, and different data topics need to be set, and the aforementioned different types of output data are published on corresponding data topics respectively. To achieve the aforementioned goals, after receiving the output data sent by the environmental monitoring device 101, the gateway device 102 determines the data type according to the type identifier of the output data, and then sends the output data (or encrypted data) to the corresponding type topic according to the data type. Correspondingly, the remote server 103 obtains various types of output data by subscribing to various topics. It should be noted that the output data adopts the aforementioned publish-subscribe mechanism, which does not conflict with the encryption method of the output data in the previous text, and the two can be used at the same time. That is, before the gateway device 102 publishes the output data, the output data can be encrypted using the aforementioned encryption method, and then canvased to the corresponding type topic.

[0078] As analyzed above, the remote server 103 needs to send control instructions to the environmental monitoring device 101. In the case where the strong coupling relationship between the remote server 103 and the gateway device 102 needs to be decoupled, the remote server 103 can also use a message publish-subscribe mechanism to issue control instructions. Specifically, first, an instruction issuance topic is created in the proxy service, and the gateway device 102 subscribes to the aforementioned instruction issuance topic. Then the remote server 103 publishes the control instruction including the device identifier and the gateway identifier to the instruction issuance topic, and issues the control instruction to all gateway devices 102 through the proxy service. After receiving the aforementioned control instruction, the gateway device 102 determines whether the control instruction is an instruction issued to this site based on the gateway identifier and its own identifier in the control instruction: (1) If it is not an instruction issued to this site, the control instruction is directly discarded; (2) If it is a control instruction issued to this site, the corresponding environmental monitoring device 101 is determined based on the device identifier, and the control instruction is issued to this environmental monitoring device 101.

[0079] In the above scheme, when the gateway device 102 interacts with the remote server 103, it needs to write the fingerprint information (identification information) in the header of the corresponding data message so that the remote server 103 can determine the source of the data message. In this case, there may be a problem of intentionally interfering with the message information sent by a specific gateway device 102, which makes the remote server 103 unable to work normally (especially actively discarding data packets). In order to avoid the above problem, the fingerprint information of the gateway device 102 needs to be hidden.

[0080] To achieve the aforementioned objectives, in some embodiments, when the gateway device 102 is connected to the communication network or enters a new connection cycle, the gateway device 102 will obtain its own fingerprint information and send the fingerprint information to the remote server 103. After receiving the fingerprint information sent by the gateway device 102, the remote server 103 generates a site random number according to the fingerprint information (in the specific implementation, the time when the fingerprint information is received will also be considered to make the generated site random number more difficult to crack), and then the remote server 103 stores the association between the site random number and the fingerprint information in the local data table, and sends the site random number to the gateway device 102. In the specific implementation, the remote server 103 can send the fingerprint information and the aforementioned site random number using the aforementioned subscription and publishing mechanism, so that all gateway devices 102 receive the fingerprint information and the site random number, and then use the fingerprint information to determine their own site random number. In a specific implementation, the remote server 103 can encrypt the aforementioned data before publishing the correspondence between the fingerprint information and the site random number to ensure that the corresponding data cannot be easily obtained by a third party (for example, using an asymmetric encryption method, only a specific gateway device 102 can obtain the corresponding fingerprint information and site random number).

[0081] Correspondingly, after the aforementioned specific gateway device 102 receives the corresponding site random number and the monitoring data of the local environment monitoring device 101, the gateway device 102 forms a sending data packet with the site random number, the encrypted fingerprint information and the output data, and sends the sending data packet to the remote server 103. In this case, only the remote server 103 can determine which gateway device 102 sent the data packet based on the site random number.

[0082] Accordingly, after receiving the sent data packet, the remote server 103 can parse the sent data packet to obtain the site random number, parsing fingerprint information and parsing output data. The remote server 103 then verifies whether the correlation between the parsed site random number and the parsed fingerprint information is stored in the local data table. If so, it proves that the corresponding data packet is sent by the real gateway device 102, and the corresponding parsed output data can be used as legal data; on the contrary, if the interpreted site random number and parsing fingerprint information are not stored in the local data table, it is determined that the corresponding data packet is forged, and the corresponding parsed data can be discarded. In some embodiments, if the station random number of the obtained sent data packet is not in the data table, the corresponding data packet can also be directly discarded without unpacking and decrypting.

[0083] In some specific applications, the environmental monitoring site may need to perform iterative updates of the environmental monitoring device 101, or add a new type of environmental monitoring device 101. In this case, the remote server 103 is required to perform parameter configuration, quality control and other operations on the new environmental monitoring device 101. After the gateway device 102 is connected to the newly connected environmental monitoring device 101 and receives the device identification of the newly connected monitoring device, it generates a device configuration request according to the site random number and the device identification, and sends it to the remote server 103. After receiving the device configuration request, the remote server 103 parses the device configuration request to obtain the device identification and the site random number, and then it can generate the corresponding control instruction according to the device identification, and send it to the gateway device 102 corresponding to the site random identification. As analyzed above, the aforementioned control instruction can be sent using a topic publish-subscribe mechanism, so that all gateway devices 102 obtain the control instruction, and only the gateway device 102 corresponding to the site random identification will execute the aforementioned control instruction.

[0084] The above are only specific embodiments of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An ecological environment quality monitoring system, characterized in that: include: Environmental monitoring equipment and gateway devices deployed at monitoring points, as well as remote servers with monitoring equipment control software installed; The monitoring device connection interface of the gateway device is connected to the data IO interface of the environmental monitoring device, and the network communication interface is connected to the remote server through the communication network, and is used to forward the control instructions issued by the remote server to the environmental monitoring device, and report the output data of the environmental monitoring device to the remote server; The remote server is used to send control instructions for controlling the environment monitoring device to the gateway device, and receive the output data reported by the gateway device.

2. The system according to claim 1, characterized in that The remote server is also used to send a short-term encryption program to the gateway device, where the short-term encryption program is an encryption program used within a set time period; The gateway device reports the output data of the environment monitoring device to the remote server, including: Encrypting the output data using the short-time encryption program to obtain encrypted reporting data, and sending the encrypted reporting data to the remote server; When receiving the encrypted reported data, the remote server uses a short-time decryption program to decrypt the encrypted reported data to obtain the output data; the short-time decryption program is a decryption program adapted to the short-time encryption program.

3. The system according to claim 2, characterized in that The gateway device is also configured with a long-term encryption program, and the remote server is also configured with a long-term decryption program adapted to the long-term encryption program; Before the gateway device uses the short-time encryption program to encrypt the output data to obtain encrypted reporting data, the method further includes: using the long-time encryption program to encrypt the output data to obtain primary encrypted data; The gateway device encrypts the output data using the short-time encryption program to obtain encrypted reporting data, including: re-encrypting the once encrypted data using the short-time encryption program to obtain the encrypted reporting data; The step of decrypting the encrypted reported data using a short-time decryption program to obtain output data includes: decrypting the encrypted reported data using the short-time decryption program to obtain primary decrypted data; and re-decrypting the primary decrypted data using a long-time decryption program to obtain the output data; or After obtaining the encrypted reported data, the gateway device re-encrypts the encrypted reported data using the long-term encryption program to obtain secondary encrypted data, and sends the secondary encrypted data to the remote server; After receiving the secondary encrypted data, the remote server uses the long-term decryption program to process the secondary encrypted data to obtain the encrypted reporting data.

4. The system according to claim 2, characterized in that include: The remote server publishes the short-time encryption program to an encryption program topic, and the gateway device obtains the short-time encryption program by subscribing to the encryption program topic.

5. The system according to claim 4, characterized in that When publishing the new short-term encryption program, the remote server publishes the program identifier of the new short-term encryption program; When the gateway device obtains the new short-term encryption program, it obtains the corresponding program identifier; The step of encrypting the output data using the short-time encryption program to obtain encrypted reporting data, and sending the encrypted reporting data to the remote server includes: The newly acquired output data is encrypted using a new short-time encryption program to obtain encrypted reporting data; Composing a sending data packet based on the encrypted reporting data and the new short-time encryption program identifier, and sending the sending data packet to the remote server; or, When publishing the new short-time encryption program, the remote server publishes the effective period of the new short-time encryption program; when the gateway device obtains the new short-time encryption program, it obtains the corresponding effective period; The method of using the short-time encryption program to encrypt the output data to obtain encrypted reporting data includes: determining a valid time period for entering a new short-time encryption program, and using the new short-time encryption program to encrypt the newly acquired output data to obtain encrypted reporting data.

6. The system according to any one of claims 1 to 5, characterized in that: Also includes: The remote server publishes the control instruction including the device identifier and the gateway identifier to the instruction issuing topic, and the gateway device obtains the control instruction by subscribing to the instruction issuing topic; When the control instruction is obtained, the gateway device determines whether to discard the control instruction according to the gateway identifier and its own identifier in the control instruction, and sends the control instruction to the corresponding environmental monitoring device according to the device identifier if the control instruction is not discarded.

7. The system according to any one of claims 1 to 5, characterized in that: The output data includes at least two different types of data; The gateway device reports the output data of the environment monitoring device to the remote server, including: In response to receiving the output data, determining a data type according to a type identifier of the output data; According to the data type, publishing the output data to a corresponding type topic; The remote server obtains various types of output data by subscribing to various types of topics.

8. The system according to any one of claims 1 to 5, characterized in that: Also includes: When the gateway device is connected to the communication network or enters a new connection cycle, the gateway device sends its own fingerprint information to the remote server; In response to receiving the fingerprint information sent by the gateway device, the remote server generates a site random number according to the fingerprint information, stores the association relationship between the site random number and the fingerprint information in a local data table, and sends the site random number to the gateway device; After receiving the site random number and the output data of the monitoring device, the gateway device combines the site random number, the encrypted fingerprint information and the output data into a sending data packet, and sends the sending data packet to the remote server.

9. The system according to claim 8, characterized in that Also includes: After receiving the sent data packet, the remote server parses the sent data packet to obtain the parsing site random number, parsing fingerprint information and parsing output data; When verifying that the association between the random number of the parsing site and the parsing fingerprint information is stored in the local data table, taking the parsing output data as legal data; as well as, When it is verified that the parsing site random number and the parsing fingerprint information are not stored in the local data table, the parsing output data is discarded.

10. The system according to claim 8, characterized in that Also includes: When the gateway device is connected to a newly connected environmental monitoring device and receives a device identification of the newly connected monitoring device, the gateway device further comprises generating a device configuration request according to the site random number and the device identification, and sending the request to the remote server; After receiving the device configuration request, the remote server parses the device configuration request to obtain a device identifier and a site random number; A control instruction is generated according to the parsed device identifier and sent to a gateway device corresponding to the site random identifier.

Images