Ecological environment quality monitoring system

Abstract

The embodiment of the present disclosure provides an ecological environment quality monitoring system, wherein the host computer interface of the gateway device is connected with the data IO interface of the host computer, the lower computer interface is connected with the data IO interface of the environment monitoring device, and the network communication interface is connected with the remote server through the communication network; the gateway device is used for receiving the control instruction issued by the host computer and forwarding the control instruction to the environment monitoring device, receiving the device reported data of the environment monitoring device and forwarding the device reported data to the host computer, and reporting the control instruction and the device reported data to the remote server; the remote server is used for identifying whether the environment monitoring is artificially interfered according to the control instruction and / or the device reported data. The scheme appropriately increases the device on the basis of the existing monitoring system, does not change the original monitoring system control architecture, that is, the remote server can obtain the bottom layer data, and then can identify whether the environment monitoring data is artificially interfered according to the bottom layer data.

Description

Technical Field

[0001] This disclosure relates to the field of Internet of Things (IoT) technology, specifically to an ecological environment quality monitoring system. Background Technology

[0002] To achieve comprehensive environmental quality monitoring, numerous monitoring stations for air and water quality monitoring have been deployed across all levels of government in China. These monitoring stations are equipped with monitoring devices for specific environmental quality parameters. These devices collect data on the corresponding types of environmental quality parameters at each station and report the monitoring data in real time.

[0003] Currently, existing environmental monitoring sites employ a system architecture consisting of a host industrial control computer (HPC) and lower-level monitoring equipment. The HPC is used for quality control and data acquisition of the lower-level monitoring equipment, and determines the environmental quality reporting data based on the periodically collected monitoring data, then reports this environmental quality data to various data sources. Since the aforementioned reported data has already undergone processing, it is impossible to determine whether the environmental quality reporting data has been tampered with through data traceability. Furthermore, the procurement costs of various environmental monitoring devices and their associated HPCs are very high, making replacement in the short term prohibitively expensive. Summary of the Invention

[0004] In order to monitor whether environmental monitoring data is subject to human interference without changing the existing control architecture of environmental monitoring equipment, this disclosure provides a new ecological environment quality monitoring system.

[0005] In a first aspect, embodiments of this disclosure provide an ecological environment quality monitoring system, including: a remote server, and a host computer, environmental monitoring equipment, and gateway equipment deployed at monitoring points;

[0006] The gateway device’s host computer interface is connected to the host computer’s data I / O interface, the slave computer interface is connected to the environmental monitoring device’s data I / O interface, and the network communication interface is connected to the remote server through a communication network.

[0007] The gateway device is used to receive control commands issued by the host computer and forward them to the environmental monitoring device, receive data reported by the environmental monitoring device and forward it to the host computer, and report the control commands and the data reported by the device to the remote server.

[0008] The remote server is used to identify whether environmental monitoring has been interfered with by human intervention based on the control commands and / or data reported by the device.

[0009] Optionally, the control instructions include quality control instructions, and the data reported by the device includes quality control result data;

[0010] The step of identifying whether the environmental monitoring equipment has been interfered with by human intervention based on the control commands and / or data reported by the equipment includes:

[0011] Based on the time stamp of the quality control instructions or quality control result data, it is determined whether the environmental monitoring equipment has continuously performed multiple quality control operations.

[0012] When the environmental monitoring equipment performs multiple quality control operations continuously, the quality control deviation is calculated based on the nominal concentration and the quality control results data of each quality control operation.

[0013] If the quality control deviation of the last more than one quality control operation is within the deviation threshold range, and the quality control deviation of the last quality control operation is negative, it is determined that the environmental monitoring equipment is subject to human quality control interference.

[0014] Optionally, the data reported by the device includes environmental monitoring data;

[0015] The step of identifying whether the environmental monitoring equipment has been interfered with by human intervention based on the control commands and / or data reported by the equipment includes:

[0016] Calculate the mean and standard deviation of environmental monitoring data within a continuously set time period, as well as the median and mode of environmental monitoring data within a continuously set time period;

[0017] Calculate a first difference between the median and the mean, and a second difference between the mode and the mean, and determine the larger of the first difference and the second difference;

[0018] A weighted sum is obtained by performing a weighted sum based on the larger value, the standard deviation, and predetermined weighting coefficients.

[0019] If the weighted sum is greater than the set sum, it is determined that the environment in which the environmental monitoring equipment is located has been disturbed by human intervention.

[0020] Optionally, the remote server is also used to acquire meteorological data of the area where the monitoring point is located;

[0021] The determination that the environment in which the environmental monitoring equipment is located is subject to human interference includes: determining that the environment in which the environmental monitoring equipment is located is subject to human interference when the meteorological data determines that the continuous set duration is within a meteorologically stable period.

[0022] Optionally, the remote server is further configured to calculate the overall pollutant concentration within a set time period based on the environmental monitoring data within a set time period in the data reported by the device, receive the reported pollutant concentration sent by the host computer, and identify whether the reported pollutant concentration is a falsified concentration based on the overall pollutant concentration and the reported pollutant concentration.

[0023] Optionally, the gateway device publishes the control commands and the device-reported data to an original data topic, and the remote server obtains the control commands and the device-reported data by subscribing to the original data topic.

[0024] Optionally, the remote server is also used to send a short-time encryption program to the gateway device, the short-time encryption program being an encryption program used within a set duration;

[0025] The step of forwarding the control commands and the data reported by the device to the remote server includes:

[0026] The control command and the data reported by the device are encrypted using the short-time encryption program to obtain encrypted forwarding data, and the encrypted forwarding data is sent to the remote server.

[0027] Before identifying whether the environmental monitoring data has been interfered with by human intervention based on the control command and the data reported by the device, the remote server executes a short-time decryption procedure to decrypt the encrypted forwarded data to obtain the control command and the data reported by the device.

[0028] The short-time decryption program is a decryption program adapted to the short-time encryption program.

[0029] Optionally, the remote server publishes the short-term encryption program to an encryption program topic, and the gateway device obtains the short-term encryption program by subscribing to the encryption program topic.

[0030] Optionally, the gateway device is further configured with a long-term encryption program, and the remote server is further configured with a long-term decryption program adapted to the long-term encryption program.

[0031] Before the gateway device uses the short-time encryption program to encrypt the control command and the device-reported data to obtain encrypted forwarding data, the method further includes: using the long-time encryption program to encrypt the control command and the device-reported data to obtain encrypted data once;

[0032] The gateway device uses the short-time encryption program to encrypt the control command and the data reported by the device to obtain encrypted forwarding data, including: using the short-time encryption program to re-encrypt the first-time encrypted data to obtain the encrypted forwarding data;

[0033] The step of decrypting the encrypted forwarding data using a short-time decryption procedure to obtain control commands and device-reported data includes: decrypting the encrypted forwarding data using the short-time decryption procedure to obtain first-time decrypted data; and then decrypting the first-time decrypted data again using a long-time decryption procedure to obtain the control commands and device-reported data; or...

[0034] After obtaining the encrypted forwarding data, the gateway device uses the long-time encryption program to re-encrypt the encrypted forwarding data to obtain secondary encrypted data, and then sends the secondary encrypted data to the remote server.

[0035] After receiving the secondary encrypted data, the remote server processes the secondary encrypted data using the long-time decryption program to obtain the encrypted forwarding data.

[0036] The ecological environment quality monitoring system in this embodiment adds a gateway device compared to existing systems. The gateway device acts as a data relay between the host computer and the environmental monitoring equipment, forwarding relevant data to a remote server while performing its data relay function. In other words, this solution appropriately adds equipment to the existing monitoring system without changing the original control architecture, enabling the remote server to obtain underlying data and thus identify whether the environmental monitoring data has been interfered with. Attached Figure Description

[0037] The accompanying drawings, which are incorporated in and form a part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure.

[0038] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, those skilled in the art can obtain other drawings based on these drawings without any creative effort, wherein...

[0039] Figure 1 This is a schematic diagram of the structure of the ecological environment quality monitoring system provided in this embodiment;

[0040] Figure 2 These are flowcharts of methods for identifying whether environmental monitoring is being interfered with by human intervention, provided in some embodiments;

[0041] Figure 3 This is a flowchart illustrating some embodiments for identifying whether the environment in which environmental monitoring equipment is located is subject to human interference;

[0042] Figure 4 This is a flowchart illustrating another embodiment of identifying whether the environment in which the environmental monitoring equipment is located is subject to human interference;

[0043] Figure 5 This is a flowchart in some embodiments for identifying whether the environment in which the environmental monitoring equipment is located is being interfered with by human intervention. Detailed Implementation

[0044] Embodiments of this disclosure will now be described in more detail with reference to the accompanying drawings. While some embodiments of this disclosure are shown in the drawings, it should be understood that this disclosure can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of this disclosure. It should be understood that the accompanying drawings and embodiments of this disclosure are for illustrative purposes only and are not intended to limit the scope of protection of this disclosure.

[0045] The term "comprising" and its variations as used herein are open-ended inclusion, meaning "including but not limited to". The term "based on" means "at least partially based on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". Definitions of other terms will be given in the description below. In this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations.

[0046] To address the problem of tampering with environmental monitoring data generated under the existing system architecture of upper-level industrial control computers and lower-level monitoring devices at environmental monitoring points, this disclosure provides an ecological environment quality monitoring system.

[0047] Figure 1 This is a schematic diagram of the structure of the ecological environment quality monitoring system provided in this embodiment. Figure 1 As shown, the ecological environment quality monitoring system 100 provided in this embodiment includes local equipment located at environmental monitoring points and a remote server 104 not located at environmental monitoring points.

[0048] The local equipment located at the environmental monitoring point includes a host computer 101, environmental monitoring equipment 102, and gateway equipment 103.

[0049] The host computer 101 is a computing device used to directly manage and control the environmental monitoring equipment 102 located at the environmental monitoring point. It is equipped with monitoring equipment control software to control the environmental monitoring equipment 102.

[0050] Gateway device 103 is used to relay communication between host computer 101 and environmental monitoring device 102. Its host computer 101 interface is connected to the data I / O interface of host computer 101, and its slave computer interface is connected to the data I / O interface of environmental monitoring device 102. After receiving control commands from host computer 101, gateway device 103 forwards the control commands to environmental monitoring device 102; and after receiving device-reported data sent by environmental receiving device, it forwards the device-reported data to host computer 101. In addition, gateway device 103 also communicates with remote server 104 through a communication network, reporting control commands and device-reported data to remote server 104.

[0051] The aforementioned control commands and device-reported data are the underlying data generated during the environmental monitoring process. They contain various basic data information during the environmental monitoring process. The remote server 104 can identify whether the environmental monitoring data of the environmental monitoring point has been interfered with by human intervention by processing the control commands and / or device-reported data.

[0052] As analyzed above, the ecological environment quality monitoring system 100 in this embodiment adds a gateway device 103 compared to existing systems. The gateway device 103 serves as a data relay device between the host computer 101 and the environmental monitoring device 102, and forwards the corresponding data to the remote server 104 while performing the data relay function. In other words, this solution appropriately adds equipment to the existing monitoring system without changing the original monitoring system control architecture, enabling the remote server 104 to obtain the underlying data, and then identify whether the environmental monitoring data has been interfered with by human intervention based on the underlying data.

[0053] In practice, the control commands issued by the host computer 101 to the environmental monitoring equipment 102 include quality control commands, which are instructions to control the environmental monitoring equipment 102 to perform equipment calibration. The corresponding equipment-reported data includes the quality control result data reported by the environmental monitoring equipment 102 after completing equipment calibration. In practice, relevant personnel may intentionally control the equipment calibration to systematically lower the environmental monitoring data generated by the environmental monitoring equipment 102 during environmental quality monitoring.

[0054] For ease of reading later, the serial numbers of the aforementioned devices will no longer be shown in the following text.

[0055] Figure 2 This is a flowchart illustrating a method for identifying whether environmental monitoring has been interfered with by human intervention, provided in some embodiments. For example... Figure 2 As shown, the remote server can identify whether the quality control of the environmental monitoring equipment is being controlled by humans through the following steps S110-S140.

[0056] S110: Identify and determine whether environmental monitoring equipment has continuously performed multiple quality control operations based on the time stamp of quality control instructions or quality control result data.

[0057] S120: When environmental monitoring equipment performs multiple quality control operations continuously, calculate the quality control deviation based on the nominal concentration and the quality control results data of each quality control operation.

[0058] S130: If the quality control deviation of the last quality control operation is within the deviation threshold range, determine whether the quality control deviation of the last quality control operation is negative; if yes, execute S140; if no, execute S150.

[0059] S140: It has been determined that there is human interference with the environmental monitoring equipment.

[0060] S150: It is determined that human interference with quality control cannot be identified.

[0061] In practical applications, due to limitations in the operating characteristics and cost control of environmental monitoring equipment, the concentration of components in calibration samples (such as calibration gas and calibration solution) measured by the equipment during quality control operations may not reach the nominal concentration. Instead, there may be a certain difference between the measured concentration and the nominal concentration, but this difference will not be too large. In specific implementation, after obtaining the quality control result data (i.e., the concentration data obtained by measuring the standard sample) from the environmental monitoring equipment, the host computer will determine whether the concentration data is within a set range determined based on the standard sample concentration (e.g., within a fluctuation range of ±15% centered on the set concentration). If it is within the aforementioned range, the quality control result data is determined to be usable. The host computer then determines a correction equation based on the quality control result data and the nominal concentration, and uses the correction equation to correct subsequent environmental monitoring data to obtain the output monitoring data.

[0062] Because the concentration of the calibration standard is fixed, the larger the quality control result data (within the set range), the smaller the correction coefficient of the correction equation, and consequently, the smaller the output monitoring data obtained from subsequent environmental monitoring data processing. Since a larger quality control result data can lead to a smaller output monitoring data, relevant personnel considered intentionally controlling the quality control result data to systematically reduce the output monitoring data.

[0063] In practice, relevant personnel will control the environmental monitoring equipment to perform quality control operations and check whether the results obtained from the quality control process meet the goal of being as large as possible. If the aforementioned goal is met, the last quality control result data will be used. If the quality control result data does not meet the aforementioned goal, the environmental monitoring equipment will be controlled to perform the quality control operation again.

[0064] Correspondingly, if staff intentionally manipulate quality control, environmental monitoring equipment will likely require multiple quality control operations (at least twice). Therefore, the presence of human interference with quality control can be identified by examining whether multiple quality control operations are performed, whether those operations are usable, and the magnitude of the final quality control result.

[0065] Specifically, if the environmental monitoring equipment is continuously subjected to multiple quality control operations based on the time stamp of the quality control instructions or the quality control result data, the difference between each quality control result data and the nominal concentration is calculated to obtain the quality control deviation. In essence, the quality control deviation is the deviation obtained by subtracting the quality control result data from the nominal concentration.

[0066] After obtaining the quality control deviation, data identification begins from the deviation of the last quality control operation. If the quality control deviation of more than one last quality control operation is within the deviation threshold range, but the quality control deviation of the last operation is negative, there is reason to suspect that the staff re-performed the quality control operation to make the deviation negative, thereby artificially controlling the systemic deviation and causing the output monitoring data to be lower than expected. In this case, it can be determined that there is human interference with the environmental monitoring equipment.

[0067] In practice, it can be further determined whether the quality control deviation of the last quality control operation falls within the set negative value range. The aforementioned set negative value range is the range adjacent to the fluctuation range determined based on the fluctuation range. For example, for the aforementioned fluctuation range of ±15%, the set negative value range can be set to (-10%, 15%) (expressed here in the form of a percentage of the nominal concentration). If the quality control deviation of the last quality control operation falls within the aforementioned set negative value range, it can be basically confirmed that there is human interference with the environmental monitoring equipment.

[0068] After the remote server automatically determines that there is human interference with the environmental monitoring equipment, it can also feed back the corresponding quality control results to the management personnel, who can then perform manual identification.

[0069] In some specific implementations, to improve environmental monitoring data, the environmental conditions at monitoring sites may be artificially interfered with to reduce pollutant concentrations or improve corresponding data indicators (such as increasing dissolved oxygen levels). For example, increasing air humidity can induce particulate matter sedimentation, thereby reducing the particulate matter concentration at the monitoring site. However, such interference cannot be performed continuously; if it were, falsification could be detected through other data indicators. Therefore, artificial interference can only be performed intermittently. Intermittently performing interference will cause abnormal fluctuations in environmental monitoring data, thus allowing for the identification of whether abnormal fluctuations exist in the data and whether the environment in which the monitoring equipment is located (i.e., the environment at the monitoring site) has been artificially interfered with.

[0070] Figure 3 This is a flowchart illustrating an embodiment of identifying whether the environment in which an environmental monitoring device is located has been subject to human interference. For example... Figure 3 As shown, identifying whether the environment in which the environmental monitoring equipment is located is subject to human interference may include the following steps S210-S260.

[0071] S210: Perform nearest neighbor difference processing on environmental monitoring data within a continuously set time period to obtain differential data, and calculate the mean and standard deviation of the differential data.

[0072] S220: Determine the credible range of variation based on the mean and standard deviation, and determine the credible percentage of variation corresponding to the credible range of variation.

[0073] S230: Calculate the actual percentage of differential data that falls within the credible range of variation.

[0074] S240: Determine whether the actual percentage is less than the credible change percentage; if yes, execute S250; if no, execute S260.

[0075] S250: It is determined that the environment in which the environmental monitoring equipment is located has been interfered with by human activities.

[0076] S260: It cannot be determined whether the environment in which the environmental monitoring equipment is located has been interfered with by human activities.

[0077] Analysis of normal environmental monitoring data revealed that, under conditions of minimal or no external disturbance, the differential data conforms to a normal distribution. Conversely, environmental monitoring data subject to human interference is highly unlikely to exhibit a normal distribution. Based on this analysis, the remote server first performs nearest-neighbor difference processing on continuous environmental monitoring data for a set duration to obtain differential data. Subsequently, statistical analysis is performed on the differential data to obtain the mean and standard deviation. A confidence range is then determined based on the mean and standard deviation, which can be centered on the mean and defined as two or three times the standard deviation.

[0078] After determining the credible range of variation, the proportion of the aforementioned differential data within that range can then be determined. If the differential data is large within the credible range, it is highly likely that the differential data conforms to a normal distribution; conversely, it is highly likely that the differential data does not conform to a normal distribution. As analyzed earlier, if it is determined that the differential data does not conform to a normal distribution, it can be concluded that the environmental monitoring data does not conform to the state under normal conditions, thus indicating that the environment in which the environmental monitoring equipment is located has been subject to human interference.

[0079] As analyzed above, the prerequisite for executing S210-S260 is that the environment in which the environmental monitoring equipment is located is considered to be a steady-state environment. In specific implementation, this means that the meteorological conditions of the environment in which the environmental monitoring equipment is located are stable. To this end, the remote server will also obtain meteorological data of the area where the monitoring point is located, and identify whether the meteorological conditions are stable for a continuously set period of time based on the meteorological data; if the meteorological conditions are stable, then if the actual proportion is less than the credible change proportion, it is determined that the environment in which the environmental monitoring equipment is located has been disturbed by human intervention.

[0080] In other cases, the environment in which the environmental monitoring equipment is located is a non-steady-state environment, but the environmental state changes gradually, rather than fluctuating as in the case of human interference. Figure 4 This is another embodiment of a flowchart for identifying whether the environment in which the environmental monitoring equipment is located has been interfered with by human intervention. For example... Figure 4 As shown, in some other embodiments, the method for identifying whether the environment in which the environmental monitoring equipment is located is subject to human interference includes S310-S360.

[0081] S310: Sort environmental monitoring data for a set duration by size to obtain a sorted sequence, determine two quartiles, and calculate the quartile interval based on the two quartiles.

[0082] S320: Determine a reasonable range of numerical variation based on the quantile intervals and predetermined empirical coefficients.

[0083] S330: Statistically calculate the percentage of environmental monitoring data within a reasonable range of value variation over a continuously set time period.

[0084] S340: Determine if the percentage is less than the preset percentage; if yes, execute S350; if no, execute S360.

[0085] S350: The environment in which the environmental monitoring equipment is located has been interfered with by human activities.

[0086] S360: Unable to determine whether the environment where the environmental monitoring equipment is located has been interfered with by human intervention.

[0087] When environmental conditions gradually change, environmental monitoring data fluctuates due to external factors, causing the differential data to no longer conform to the normal distribution. In this case, dispersion analysis can be used to determine the quartiles of the environmental monitoring data over a continuously set time period and calculate the quartile intervals. After determining the aforementioned quartile intervals, the reasonable range of numerical variation under gradually changing environmental conditions can be determined using these intervals and empirical coefficients. Then, the proportion of environmental monitoring data within the reasonable range of numerical variation over the continuously set time period is calculated. If this proportion is less than a preset proportion, it is considered that the environmental monitoring data has abnormal fluctuations, and thus it can be concluded that the environment in which the environmental monitoring equipment is located has been subject to human interference.

[0088] In practical applications, after acquiring environmental monitoring data, the host computer calculates the overall pollutant concentration within a set time period based on the data. Driven by performance indicators, relevant personnel may tamper with the environmental monitoring data or the overall pollutant concentration data, and then report the tampered overall pollutant concentration as the reported pollutant concentration to the remote server. After receiving the environmental monitoring data and quality control data sent by the gateway device, the remote server can also calculate the overall pollutant concentration if it determines that the quality control has not been interfered with. After obtaining the overall pollutant concentration and the reported pollutant concentration, the remote server can determine whether the reported pollutant concentration is falsified based on the overall pollutant concentration. In specific implementation, if the overall pollutant concentration differs from the reported pollutant concentration, or if the difference is too large, the reported pollutant concentration is determined to be falsified.

[0089] Figure 5 This is a flowchart in some embodiments for identifying whether the environment in which the environmental monitoring equipment is located has been interfered with by human intervention. For example... Figure 5 As shown, in some other embodiments, the method for identifying whether the environment in which the environmental monitoring equipment is located is subject to human interference includes S410-S440.

[0090] S410: Calculate the mean and standard deviation of environmental monitoring data within a continuously set time period, as well as the median and mode of environmental monitoring data within a continuously set time period.

[0091] S420: Calculate the first difference between the median and the mean, and the second difference between the mode and the mean, and determine the larger of the first and second differences.

[0092] S430: The weighted sum is obtained by weighting the larger value and standard deviation, as well as the predetermined weighting coefficients.

[0093] S440: If the ratio of the weighted sum to the mean is greater than a set ratio, the environment in which the environmental monitoring equipment is located is deemed to be subject to human interference.

[0094] In some specific applications, when interfering with the environment of an environmental monitoring station, only low-frequency interference is used to reduce the number of small values ​​in the environmental monitoring data (especially pollutant concentrations), thereby lowering the overall pollutant concentration. However, if the aforementioned method is used, the mean and standard deviation do not possess the characteristics of representing a normal distribution, and the median, mode, and mean differ significantly. Based on the above, this embodiment calculates a first difference and a second difference between the median and the mean / mode, uses the larger of these differences and the standard deviation to obtain a weighted sum, and then uses the ratio of the weighted sum to the mean to determine whether the environment of the environmental monitoring equipment has been artificially interfered with.

[0095] Based on the actual situation of environmental quality monitoring, there are a large number of environmental monitoring stations and correspondingly a large number of gateway devices in practical applications. In this case, directly coupling the data receiving interfaces of each gateway device and the remote server would make the system overly complex and inconvenient for both online deployment and offline maintenance of environmental monitoring points. To solve this problem, in specific implementations, a publish-subscribe mechanism is used between the gateway devices and the remote server to transmit the aforementioned control commands and device-reported data. Specifically, an original data topic is created in the proxy service. The gateway devices publish control commands and device-reported data to the aforementioned original data topic, and the remote server subscribes to the aforementioned original data topic. After the gateway devices upload the control commands and device-reported data to the original data topic, the proxy service pushes the aforementioned data to the remote server.

[0096] In some embodiments, different types of data have different processing priorities. For example, quality control data and equipment status data have higher priority than environmental quality monitoring data, and different raw data topics need to be set. The aforementioned different types of control instructions and equipment-reported data are published to their respective raw data topics.

[0097] Specifically, after receiving control commands or quality control result data, the gateway device will publish the aforementioned data on the quality control raw data topic; after receiving environmental monitoring data, it will publish the environmental monitoring data on the monitoring raw data topic.

[0098] Because control commands and various device-reported data output by environmental monitoring equipment are confidential and at risk of being intercepted by third parties, device-reported data forwarded to the remote server through the gateway device should not be transmitted in plaintext but in encrypted form. In this case, the risk of the encrypted data itself being cracked needs to be considered.

[0099] In some embodiments, a remote server distributes a short-time encryption program to the network management device. This short-time encryption program is usable only for a set duration. After the set duration has elapsed since its distribution (i.e., the remote server makes it public), the short-time encryption program becomes unusable (the remote server uses a different short-time decryption program, rendering the data encrypted with the short-time encryption program useless). In specific implementations, considering that the gateway device lacks software compilation capabilities, the aforementioned short-time encryption program is a binary program compiled on the remote server. The set duration can be determined based on the cracking complexity of the short-time encryption program; the higher the cracking complexity, the longer the usable set duration.

[0100] In order for the gateway device to use a short-time encryption program to encrypt the data reported by the device, the remote server needs to send the short-time encryption program to the gateway device.

[0101] In some embodiments, the remote server and the gateway device communicate directly, and the server can directly send short-term encryption programs to the gateway device.

[0102] In other embodiments, to decouple the remote server and a large number of gateway devices, the remote server and gateway devices use a message queue telemetry transport protocol to distribute short-term encryption programs. Specifically, (1) the remote server creates an encryption program topic in a proxy service (this proxy service can be a private proxy service deployed under the subject to which the remote server belongs, or it can be a public proxy service), and publishes the short-term encryption program to the aforementioned encryption program topic; (2) the gateway device subscribes to the aforementioned encryption program topic. After a new short-term encryption program is published in the encryption program topic, the proxy service pushes the short-term encryption program to the gateway device, enabling the gateway device to obtain the short-term encryption program.

[0103] After obtaining and loading the aforementioned short-time encryption program, the gateway device uses the short-time encryption program to encrypt the control commands and device-reported data to obtain encrypted forwarding data, and then sends the encrypted forwarding data to the remote server.

[0104] After the remote server receives the encrypted forwarded data sent by the gateway device, it uses a short-time decryption program to decrypt the encrypted forwarded data to obtain control commands and device-reported data. The short-time decryption program is a decryption program adapted to the short-time encryption program, which is generated by the remote server based on the short-time encryption program.

[0105] Because short-time encryption and short-time decryption procedures correspond, the system can decrypt encrypted forwarded data to obtain the device-reported data. After obtaining the device-reported data, the remote server can analyze it and obtain the corresponding output results.

[0106] In some embodiments, in addition to the aforementioned short-time encryption program, the gateway device is also configured with a long-time encryption program. Accordingly, besides using the short-time encryption program to encrypt control commands and device-reported data, it can also use the long-time encryption program to encrypt the corresponding data. Specifically, there may be two scenarios.

[0107] 1. Before the gateway device encrypts the device-reported data using a short-time encryption procedure to obtain encrypted forwarded data, the gateway device uses a long-time encryption procedure to encrypt the control commands and device-reported data, obtaining encrypted data once. Correspondingly, the gateway device uses a short-time encryption procedure to re-encrypt the once-encrypted data, obtaining encrypted forwarded data. Under the aforementioned encryption process, the remote server uses a short-time decryption procedure to decrypt the encrypted forwarded data, obtaining decrypted data once; subsequently, it uses a long-time decryption procedure to re-decrypt the decrypted data, obtaining the upper-level monitoring commands and device-reported data.

[0108] 2. After the network management device uses a short-time encryption program to encrypt control commands and device-reported data to obtain encrypted forwarding data, the gateway device uses a long-time encryption program to re-encrypt the encrypted forwarding data to obtain secondary encrypted data, and then sends the secondary encrypted data to the remote server. Correspondingly, after receiving the secondary encrypted data, the remote server uses a long-time encryption program to process the secondary encrypted data to obtain encrypted forwarding data, and then uses a short-time decryption program to process the encrypted forwarding data to obtain the upper-level monitoring commands and device-reported data.

[0109] In specific implementation, the aforementioned long-time encryption program and long-time decryption program can be programs that use symmetric encryption and decryption or programs that use asymmetric encryption and decryption. This disclosure does not limit the implementation.

[0110] As analyzed earlier, short-time encryption programs are only available for a short period. When they are transmitted to the gateway device using a publish-subscribe mechanism, the asynchronous transmission between the remote server and the gateway device (i.e., when the gateway device receives the short-time encryption program is uncertain, but the general timeframe is determined) affects the coordination between the gateway device's use of the short-time encryption program and the remote server's use of the short-time decryption program. In this situation, it is necessary to consider how the old and new short-time encryption programs can be coordinated, and how to ensure the remote server determines the corresponding short-time decryption program.

[0111] To address the aforementioned issues, in some embodiments, the remote server publishes a program identifier for the new short-time encryption program simultaneously with its release. The corresponding gateway device, upon acquiring the new short-time encryption program, also acquires the corresponding program identifier. In this case, the gateway device can use the new short-time encryption program to encrypt newly acquired device-reported data, obtaining encrypted forwarded data. To enable the remote server to determine which short-time encryption program to use, the gateway device composes a data packet based on the encrypted forwarded data and the new short-time encryption program identifier, and sends the data packet to the remote server.

[0112] In some other embodiments, the remote server publishes the validity period of the new short-term encryption program simultaneously with its release. The corresponding gateway device, upon acquiring the new short-term encryption program, also acquires the corresponding validity period. In this case, the gateway device, upon determining that it has entered the validity period of the new short-term encryption program, encrypts newly acquired device-reported data using the new short-term encryption program to obtain encrypted forwarded data. Correspondingly, the remote server, upon determining that the short-term encryption program is within its validity period, decrypts the received confidential reported data using the corresponding short-term encryption program.

[0113] As analyzed above, the remote server needs to send control commands to the environmental monitoring equipment. In cases where it is necessary to decouple the strong coupling between the remote server and the gateway device, the remote server can also use a message publish-subscribe mechanism to issue control commands. Specifically, firstly, a command issuance topic is created in the proxy service, and the gateway device subscribes to the aforementioned command issuance topic. Subsequently, the remote server publishes the control command, which includes the device identifier and the gateway identifier, to the command issuance topic, and issues the control command to all gateway devices through the proxy service. After receiving the aforementioned control command, the gateway device determines whether the control command is an instruction to be issued to its own site based on the gateway identifier and its own identifier in the control command: (1) If it is not an instruction to be issued to its own site, the control command is discarded directly; (2) If it is a control command to be issued to its own site, the corresponding environmental monitoring device is determined based on the device identifier, and the control command is issued to this environmental monitoring device.

[0114] The above are merely specific embodiments of this disclosure, enabling those skilled in the art to understand or implement this disclosure. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this disclosure. Therefore, this disclosure is not to be limited to these embodiments, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An ecological environment quality monitoring system, characterized in that, This includes: remote servers, as well as host computers, environmental monitoring equipment, and gateway devices deployed at monitoring points; The gateway device’s host computer interface is connected to the host computer’s data I / O interface, the slave computer interface is connected to the environmental monitoring device’s data I / O interface, and the network communication interface is connected to the remote server through a communication network. The gateway device is used to receive control commands issued by the host computer and forward them to the environmental monitoring device, receive data reported by the environmental monitoring device and forward it to the host computer, and report the control commands and the data reported by the device to the remote server. The remote server is used to identify whether environmental monitoring has been interfered with by human intervention based on the control commands and / or data reported by the device. The control commands include quality control commands, and the data reported by the device includes quality control result data. The step of identifying whether the environmental monitoring equipment has been interfered with by human intervention based on the control commands and / or data reported by the equipment includes: Based on the time stamp of the quality control instructions or quality control result data, it is determined whether the environmental monitoring equipment has continuously performed multiple quality control operations. When the environmental monitoring equipment performs multiple quality control operations continuously, the quality control deviation is calculated based on the nominal concentration and the quality control results data of each quality control operation. If the quality control deviation of the last more than one quality control operation is within the deviation threshold range, and the quality control deviation of the last quality control operation is negative, it is determined that the environmental monitoring equipment is subject to human quality control interference.

2. The monitoring system according to claim 1, characterized in that, The data reported by the device includes environmental monitoring data; The step of identifying whether the environmental monitoring equipment has been interfered with by human intervention based on the control commands and / or data reported by the equipment includes: The environmental monitoring data within a continuously set time period are subjected to nearest neighbor difference processing to obtain differential data, and the mean and standard deviation of the differential data are calculated. The range of credible variation is determined based on the mean and standard deviation, and the percentage of credible variation corresponding to the range of credible variation is determined. Calculate the actual percentage of the differential data that falls within the reliable range of variation; If the actual percentage is less than the credible percentage of change, it is determined that the environment in which the environmental monitoring equipment is located has been subject to human interference.

3. The monitoring system according to claim 1, characterized in that, The data reported by the device includes environmental monitoring data; The step of identifying whether the environmental monitoring equipment has been interfered with by human intervention based on the control commands and / or data reported by the equipment includes: Calculate the mean and standard deviation of environmental monitoring data within a continuously set time period, as well as the median and mode of environmental monitoring data within a continuously set time period; Calculate a first difference between the median and the mean, and a second difference between the mode and the mean, and determine the larger of the first difference and the second difference; A weighted sum is obtained by performing a weighted sum based on the larger value, the standard deviation, and predetermined weighting coefficients. If the weighted sum is greater than the set sum, it is determined that the environment in which the environmental monitoring equipment is located has been interfered with by human intervention.

4. The monitoring system according to claim 2 or 3, characterized in that, The remote server is also used to acquire meteorological data of the area where the monitoring point is located; The determination that the environment in which the environmental monitoring equipment is located is subject to human interference includes: determining that the environment in which the environmental monitoring equipment is located is subject to human interference when the meteorological data determines that the continuous set duration is within a meteorologically stable period.

5. The monitoring system according to claim 1, characterized in that, The remote server is also used to calculate the overall pollutant concentration within a set time period based on the environmental monitoring data within a set time period in the data reported by the device, receive the reported pollutant concentration sent by the host computer, and identify whether the reported pollutant concentration is a falsified concentration based on the overall pollutant concentration and the reported pollutant concentration.

6. The monitoring system according to any one of claims 1-3 or claim 5, characterized in that: The gateway device publishes the control commands and the device-reported data to the original data topic, and the remote server obtains the control commands and the device-reported data by subscribing to the original data topic.

7. The monitoring system according to any one of claims 1-3 or claim 5, characterized in that, The remote server is also used to send a short-time encryption program to the gateway device. The short-time encryption program is an encryption program used within a set duration. The step of forwarding the control commands and the data reported by the device to the remote server includes: The control command and the data reported by the device are encrypted using the short-time encryption program to obtain encrypted forwarding data, and the encrypted forwarding data is sent to the remote server. Before identifying whether the environmental monitoring data has been interfered with by human intervention based on the control command and the data reported by the device, the remote server executes a short-time decryption procedure to decrypt the encrypted forwarded data to obtain the control command and the data reported by the device. The short-time decryption program is a decryption program adapted to the short-time encryption program.

8. The monitoring system according to claim 7, characterized in that, The remote server publishes the short-time encryption program to an encryption program topic, and the gateway device obtains the short-time encryption program by subscribing to the encryption program topic.

9. The monitoring system according to claim 7, characterized in that, The gateway device is also configured with a long-term encryption program, and the remote server is also configured with a long-term decryption program adapted to the long-term encryption program. Before the gateway device uses the short-time encryption program to encrypt the control command and the device-reported data to obtain encrypted forwarding data, the method further includes: using the long-time encryption program to encrypt the control command and the device-reported data to obtain encrypted data once; The gateway device uses the short-time encryption program to encrypt the control command and the data reported by the device to obtain encrypted forwarding data, including: using the short-time encryption program to re-encrypt the first-time encrypted data to obtain the encrypted forwarding data; The step of decrypting the encrypted forwarding data using a short-time decryption procedure to obtain control commands and device-reported data includes: decrypting the encrypted forwarding data using the short-time decryption procedure to obtain first-time decrypted data; and then decrypting the first-time decrypted data again using a long-time decryption procedure to obtain the control commands and device-reported data; or... After obtaining the encrypted forwarding data, the gateway device uses the long-time encryption program to re-encrypt the encrypted forwarding data to obtain secondary encrypted data, and then sends the secondary encrypted data to the remote server. After receiving the secondary encrypted data, the remote server processes the secondary encrypted data using the long-time decryption program to obtain the encrypted forwarding data.

Images