Ecological environment quality monitoring system

Abstract

The embodiment of the invention provides an ecological environment quality monitoring system. The ecological environment quality monitoring system is characterized in that a gateway device sends fingerprint information of the gateway device to a remote server; the server processes the fingerprint information by adopting a private conversion algorithm to obtain a gateway ID, and the gateway equipment generates a report message based on the gateway ID, the fingerprint information and report data sent by the environment monitoring equipment, and sends the report message to a remote server; the remote server analyzes the report message to obtain an analysis gateway ID, analysis fingerprint information and analysis report data, and then verifies whether the analysis gateway ID is matched with the analysis fingerprint information based on a storage association relationship in a data table; and when it is determined that the parsed gateway ID is not matched with the fingerprint information and the parsed gateway ID is stored in the data table, deleting the association relationship corresponding to the parsed gateway ID. A data counterfeiting device cannot acquire the gateway ID, so that the data counterfeiting device does not know the corresponding relationship between the gateway ID and the gateway fingerprint information, and counterfeiting of a large number of messages reported by the gateway device is difficult to realize.

Description

Technical Field

[0001] The present disclosure relates to the technical field of Internet of Things, and in particular to an ecological environment quality monitoring system. Background Art

[0002] In order to avoid the problem of human influence and tampering of environmental monitoring data through the upper computer in the system architecture of upper industrial control computers and lower monitoring devices, the relevant technology proposes to use the architecture system of remote servers and gateway devices, use gateway devices to connect remote servers with environmental monitoring devices, and control gateway devices through remote servers. However, in actual applications, the aforementioned gateway devices may flow into the market. Driven by interests, some organizations may design virtual machines based on gateway devices, and use virtual machines to send false environmental monitoring data and quality control data to remote servers by interfering with the communication of various gateway devices. Summary of the invention

[0003] In order to solve the problem that false data may appear in the existing environmental monitoring system without being identified, the embodiment of the present disclosure provides a new ecological environment quality monitoring system.

[0004] In a first aspect, an embodiment of the present disclosure provides an ecological environment quality monitoring system, including a gateway device deployed at a monitoring point and locally connected to a data interface of each environmental monitoring device, and a remote server connected to the gateway device via a communication network;

[0005] After accessing the communication network and establishing a communication connection with the remote server, the gateway device sends its own fingerprint information to the remote server;

[0006] After the remote server receives the fingerprint information, it processes the fingerprint information using a private conversion algorithm to obtain a gateway ID, stores the association between the fingerprint information and the gateway ID in a data table, and returns the gateway ID to the gateway device;

[0007] After receiving the gateway ID, the gateway device generates a report message based on the gateway ID, the fingerprint information and the report data sent by the environment monitoring device, and sends the report message to the remote server;

[0008] After receiving the report message, the remote server parses the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution report data, and then verifies whether the resolution gateway ID and the resolution fingerprint information match based on the stored association relationship in the data table; if it is determined that the resolution gateway ID and the fingerprint information do not match and the resolution gateway ID is stored in the data table, deletes the association relationship corresponding to the resolution gateway ID; and if it is determined that the resolution gateway ID and the fingerprint information do not match, receives and processes the report data.

[0009] Optionally, the gateway device sends its own fingerprint information to the remote server, including:

[0010] Encrypting the fingerprint information by a first encryption method to obtain first encrypted information, and sending the first encrypted information to the remote server;

[0011] Before using the private conversion algorithm to process the fingerprint information to obtain the gateway ID, the remote server uses a first decryption means matching the first encryption means to process the first encrypted information to obtain the decrypted fingerprint information;

[0012] Returning the gateway ID to the gateway device includes: using a second encryption method to obtain second encrypted information from the gateway ID, and sending the second encrypted information to the gateway device;

[0013] After receiving the second encrypted information, the gateway device uses a second decryption means matching the second encryption means to decrypt the second encrypted information to obtain the gateway ID.

[0014] Optionally, the adopting a private conversion algorithm to process the fingerprint information to obtain a gateway ID includes:

[0015] Processing the fingerprint information based on a private conversion algorithm to obtain a random private key;

[0016] Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID;

[0017] The generating of the reporting message based on the gateway ID, the fingerprint information and the reported data sent by the environmental monitoring device, and sending the reporting message to the remote server comprises: encrypting the fingerprint information and the reported data based on the gateway ID to obtain an encrypted message, and adding the fingerprint information to the header of the encrypted message; and using the encrypted message as the reporting message, and sending the encrypted message to the remote server;

[0018] The parsing of the reported message to obtain the parsing gateway ID, the parsing fingerprint information and the parsing reported message includes: obtaining the parsing fingerprint information through the header information of the encrypted message, and decrypting the encrypted message using the corresponding random private key according to the parsing fingerprint information, and using the encrypted public key as the parsing gateway ID if the decryption is successful.

[0019] Optionally, before the remote server uses the private conversion algorithm to process the fingerprint information to obtain the gateway ID, the remote server further includes: determining the validity period of the gateway ID;

[0020] The adopting a private conversion algorithm to process the fingerprint information to obtain the gateway ID includes: adopting a private conversion algorithm to process the fingerprint information and the valid time to obtain the gateway ID.

[0021] Optionally, the gateway device publishes the fingerprint information on a gateway ID request topic, and the remote server receives the fingerprint information by subscribing to the gateway ID request topic.

[0022] Optionally, before sending the report message to the remote server, the gateway device further performs an operation of determining a message publishing topic corresponding to the report message according to a data type of the reported data;

[0023] The sending of the report message to the remote server includes: publishing the report message to the corresponding message publishing topic, and the remote server obtains the report message by subscribing to the message publishing topic.

[0024] Optionally, in the process of obtaining the report message, the remote server identifies abnormal report messages according to the source gateway and timestamp of the report message, and discards the abnormal report message; the abnormal report message is an excess message from the same source gateway within a set time period.

[0025] Optionally, after obtaining the normal reporting message, the remote server uses a load balancing engine to determine a target microservice for processing the normal reporting message;

[0026] Use the target microservice to process normal reporting messages.

[0027] Optionally, the remote server is further used to issue a control instruction to the instruction issuing topic, wherein the control instruction is an instruction for controlling an environmental monitoring device connected to a target gateway device, and the control instruction includes a gateway identifier of the target gateway device and a device identifier of the target environmental monitoring device, and the gateway identifier is the gateway ID or fingerprint information;

[0028] Each gateway device obtains the control instruction by subscribing to the instruction publishing topic, and determines whether to discard the control instruction according to the identifier of the control instruction and its own gateway identifier, and sends the control instruction to the target environment monitoring device without discarding the control instruction.

[0029] Optionally, when the gateway device continuously receives multiple control instructions including its own gateway identifier within a preset time period, the control instruction received first is retained, and other control instructions received within the preset time period are discarded.

[0030] By adopting the solution of the embodiment of the present disclosure, the data forgery device cannot obtain the gateway ID, so it does not know the corresponding relationship between the gateway ID and the gateway fingerprint information, and it is difficult to forge messages reported by a large number of gateway devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art description. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor, including

[0033] Figure 1 is a structural diagram of an ecological environment quality monitoring system provided by an embodiment of the present disclosure;

[0034] Figure 2 It is a flow chart of the interaction between the gateway device and the remote server in the embodiment of the present disclosure. DETAILED DESCRIPTION

[0035] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments described herein, which are instead provided for a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0036] The term "including" and its variations used in this document are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one other embodiment"; the term "some embodiments" means "at least some embodiments". Relevant definitions of other terms will be given in the description below. In this document, relational terms such as "first" and "second" are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations.

[0037] Figure 1 Schematic diagram of the structure of the ecological environment quality monitoring system provided by the embodiment of the present disclosure. Figure 1 As shown, the ecological environment quality monitoring system 100 provided in the embodiment of the present disclosure includes an environmental monitoring device 101, a gateway device 102 and a remote server 103.

[0038] The aforementioned environmental monitoring devices 101 and gateway devices 102 are both deployed as local devices at the environmental monitoring point. In a specific implementation, one environmental monitoring point can deploy multiple different types of environmental monitoring devices 101 and one gateway device 102. The monitoring device connection interface of the aforementioned gateway device 102 is connected to the data IO interface of each environmental monitoring device 101, and data transmission with each environmental monitoring device 101 is realized through a local communication link.

[0039] Each environmental monitoring device 101 can be connected in series with the gateway device 102 (that is, only one environmental monitoring device 101 is directly connected to the gateway device 102, and other environmental monitoring devices 101 communicate with the gateway device 102 through the aforementioned environmental monitoring device 101), or can be connected in parallel with the gateway device 102 (that is, each environmental monitoring device 101 is connected to the gateway device 102 through an independent monitoring device connection interface), which is not limited in the embodiments of the present disclosure. In some embodiments, while ensuring the security and reliability of data communication, the gateway device 102 and the environmental monitoring device 101 can also be connected using short-range wireless communication.

[0040] In the disclosed embodiment, the gateway device 102 does not have the function of directly controlling the environment monitoring device 101 , that is, the gateway device 102 does not have the monitoring device control software for directly controlling the environment monitoring device 101 installed therein.

[0041] The remote server 103 is a server that is not deployed at the environmental monitoring point, but is installed with the monitoring equipment control software. The remote server 103 can send control instructions to the environmental monitoring equipment 101 through network communication, and receive the output data reported by the environmental monitoring equipment 101. In specific implementation, the remote server 103 is mostly deployed in the server room of the environmental supervision entity.

[0042] like Figure 1 As shown, in the embodiment of the present disclosure, the remote server 103 is not directly connected to the aforementioned environment monitoring device 101, but is indirectly connected to the environment monitoring device 101 through the gateway device 102. Specifically, the gateway device 102, as an intermediate communication device, forwards the control instructions issued by the remote server 103 to the corresponding environment monitoring device 101, and reports various output data output by the environment monitoring device 101 to the remote server 103.

[0043] In order to ensure the authenticity of environmental monitoring data and prevent data falsification devices in the network from sending falsified environmental data of various monitoring sites to the remote server without the remote server being able to recognize it, the embodiment of the present disclosure improves the gateway authentication method so that when the remote server recognizes that the identification information of the reported message obtained does not match the local information, it will determine that the relevant reported message is a falsified message.

[0044] Figure 2 is a flow chart of the interaction between the gateway device and the remote server in the embodiment of the present disclosure. Figure 2 As shown, after the gateway device establishes a communication connection with the remote server (for example, using a handshake protocol to achieve mutual communication connection), the gateway device executes S110: sending its own fingerprint information to the remote server. Fingerprint information is information that characterizes the identity of the gateway device itself. In a specific implementation, the fingerprint information can be a unique identifier such as the MAC address of the gateway device, or it can be identification information generated using the aforementioned unique identifier, and it can also include temporarily allocated identification information such as a dynamic IP address. In a specific implementation, the gateway device can generate fingerprint information based on the aforementioned MAC address by executing a fingerprint generation program.

[0045] After generating the fingerprint information, the gateway device sends the fingerprint information to the server. In the specific implementation, in order to ensure the security of the fingerprint information, the gateway device uses an encryption algorithm (first encryption method) to encrypt the fingerprint information to obtain the encrypted fingerprint information. In the specific implementation, the gateway device can use an asymmetric encryption algorithm to encrypt the fingerprint information, that is, use the public key of the remote server to encrypt the fingerprint information.

[0046] After receiving the fingerprint information, the remote server executes S120: using a private conversion algorithm to process the fingerprint information to obtain a gateway ID, storing the association between the fingerprint information and the gateway ID in a data table, and returning the gateway ID to the gateway device.

[0047] The private conversion algorithm is a conversion algorithm that only the remote server has, which means that only the remote server can determine the corresponding gateway ID based on the fingerprint information, while other devices cannot determine the gateway ID based on the fingerprint information. After the remote server obtains the gateway ID, it will store the gateway ID and the corresponding fingerprint information in the relational data table for the purpose of verifying the legitimacy of subsequent reported messages.

[0048] As analyzed above, when the gateway device encrypts the fingerprint information to obtain the encrypted fingerprint information, the remote server first decrypts the encrypted fingerprint information (specifically, uses the first decryption means corresponding to the first encryption means to decrypt), obtains the decrypted fingerprint information, and then obtains the gateway ID based on the decrypted fingerprint information. Corresponding to the above-mentioned use of the public key of the remote server to encrypt the fingerprint information, the remote server uses its own private key to decrypt the encrypted fingerprint information.

[0049] Similarly, in order to ensure the security of the gateway ID, in the specific implementation, the remote server encrypts the gateway ID (using the second encryption means), and then sends the encrypted gateway ID to the gateway device. For example, the gateway ID is encrypted using the public key of the gateway device (using the second decryption means corresponding to the second encryption means), and then the encrypted ID is sent to the gateway device.

[0050] After the gateway device receives the gateway ID, the gateway device executes S130: generating a reporting message based on the gateway ID, the fingerprint information and the reporting data sent by the environment monitoring device, and then sending the reporting message to the remote server.

[0051] After receiving the report message, the server executes the following S140: parse the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution report message, and verify whether the resolution gateway ID and resolution fingerprint information match based on the storage relationship storage association relationship in the data table; if not, execute S150; if match, execute S160.

[0052] S150: discarding the resolution gateway ID as an illegal identifier, and in the case where the resolution gateway ID is stored in the data table, deleting the association relationship corresponding to the resolution gateway ID.

[0053] S160: Receive and process reported data.

[0054] Similar to the previous analysis, the reporting message may be encrypted by the gateway device. The corresponding remote server decrypts the encrypted reporting message through the public decryption strategy to obtain the resolution gateway ID, resolution fingerprint information and resolution reporting data.

[0055] In actual applications, due to malicious fraud, the aforementioned resolved gateway ID, resolved fingerprint information, and resolved reporting data are not sent by a real gateway device (that is, a data fraud device) that has been registered on a remote server and assigned a gateway ID by the remote server. In this case, because the data fraud device cannot obtain the gateway ID, it does not know the correspondence between the gateway ID and the gateway fingerprint information. Since it is also difficult to obtain the IDs of most gateway devices in the entire network, it directly uses the gateway ID of a specific gateway device that has been cracked (it needs to enter the monitoring site computer room for cracking), and forms a fraudulent reporting message based on this gateway ID and the fingerprint information of the corresponding gateway device, and cannot achieve the fraud of sending reporting messages by gateway devices at other monitoring sites.

[0056] In order to be able to falsify data, the data falsification device will most likely send a report message including a randomly generated gateway ID to the remote server through a brute force method. In this case, when the remote server determines that its gateway ID and fingerprint information do not correspond to the local village coarse, it will directly delete the corresponding relationship between the resolved gateway and this ID, and the gateway device will need to re-authenticate, and the aforementioned brute force efforts will be reset to zero. It should be noted here that in the process of the remote server generating the gateway ID at different times, the gateway ID information is not static, but will change dynamically due to the different data and time points used in the private conversion algorithm, ensuring that the aforementioned brute force cracking cannot succeed.

[0057] If the resolved gateway ID and fingerprint information match, it is temporarily determined that the corresponding report message is sent by the authenticated gateway device, and the report data in the report message is processed.

[0058] As mentioned above, the remote server uses a private conversion algorithm to process the fingerprint information to obtain the gateway ID. In a specific implementation, the remote server can use the following S121-S122 to obtain the gateway ID.

[0059] S121: Process the fingerprint information based on a private conversion algorithm to obtain a random private key.

[0060] S122: Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID.

[0061] In a specific implementation, the fingerprint information is processed based on a private conversion algorithm to obtain a random key, and the fingerprint information can be used to generate a random number based on a random number generation algorithm to obtain a private key. Alternatively, the remote server assigns a random number to the fingerprint information as the corresponding random private key. After obtaining the random private key, the remote server can process the random private key according to the adopted asymmetric encryption algorithm to obtain an encrypted public key, and use the encrypted public key as the gateway ID.

[0062] In the case where the aforementioned confidential public key is used as the gateway ID, after the gateway device obtains the aforementioned gateway ID, it can use the following S131 to obtain the report message. S131: Encrypt the fingerprint information and the report data based on the gateway ID to obtain an encrypted message, and add the fingerprint information to the header of the encrypted message; then use the message as a report message to send the encrypted message to the remote server. In other words, the gateway ID is used as the encryption public key to encrypt the fingerprint information and the report message. In this case, only the remote server holding the random private key can decrypt the encrypted message.

[0063] Correspondingly, after receiving the encrypted message, the remote server obtains the resolution gateway ID and resolution fingerprint information using the following S141: Obtain the resolution fingerprint information through the header information of the encrypted message, and decrypt the encrypted message using the corresponding random private key according to the resolution fingerprint information, and use the encrypted public key as the resolution gateway ID if the decryption is successful.

[0064] As analyzed above, in the embodiments of the present disclosure, in order to ensure that the gateway ID is not cracked by brute force, the gateway IDs generated by the remote server for the same gateway device at different times cannot be the same. To solve this problem, in some embodiments, after obtaining the fingerprint information, the remote server will also randomly generate a gateway ID validity period, and then use a private conversion algorithm to process the aforementioned fingerprint information and validity period to obtain the gateway ID.

[0065] In some embodiments, the remote server and the gateway device are directly connected in communication, and the two can directly transmit the aforementioned fingerprint information, gateway ID and report messages to each other. However, in actual applications, due to the large number of monitoring sites, the corresponding number of gateway devices is also large. If the remote server and the gateway device communicate directly, the remote server may fail due to a gateway device failure, and the entire environmental quality monitoring system may crash. To solve this problem, in some embodiments, the remote server and the gateway device are decoupled from each other in communication, specifically, the gateway device and the remote server use a message queue telemetry transmission protocol to send and receive fingerprint information, gateway ID and report messages.

[0066] Specifically, the gateway device publishes the fingerprint information (encrypted fingerprint information) on the gateway ID request topic of the proxy service (this proxy service can be a private proxy service deployed under the entity to which the remote server belongs, or it can be a public proxy service). The program in the remote server for generating the gateway ID receives the fingerprint information by subscribing to the gateway ID request topic.

[0067] The remote service generates a gateway ID (especially an encrypted gateway ID) and publishes it to the gateway delivery topic. The gateway device receives the gateway ID by subscribing to the gateway delivery topic. In the specific implementation, the gateway device will obtain the encrypted gateway IDs of all gateways, but can only obtain its own gateway through decryption, and other subscription content will be discarded.

[0068] Similarly, after generating a report message, the gateway device will publish the report message to the message topic, and the remote server obtains the report message by subscribing to the message topic.

[0069] In a specific implementation, there are various types of report messages sent by the gateway device, such as messages including quality control data, messages including equipment status data, and messages including environmental monitoring data. Among the aforementioned messages, different messages have different processing priorities. If the aforementioned messages are placed in the same message topic, it will be impossible to process them with different priorities. To solve this problem, before the gateway device sends the report message to the remote server, the gateway device then determines the operation of the message publishing topic corresponding to the report message according to the data type of the reported data, and then publishes the report message to the corresponding message publishing topic. The remote server obtains the report message through the corresponding message publishing topic.

[0070] In the specific implementation, some gateway devices may be cracked by data falsification devices, which will send a large number of junk report messages, and use a large number of report messages to cause the remote server processing capacity to crash, and then fail to obtain the report messages sent by other gateway devices. To solve this problem, the remote server will also identify abnormal report messages according to the source gateway and timestamp of the report message when obtaining the report message, and discard the abnormal report message. The aforementioned abnormal report message is an excess message from the same source gateway within a set time period. The aforementioned source gateway means that its fingerprint information and gateway ID are the ID of a gateway.

[0071] In the specific implementation, in order to process the normal report messages sent by the gateway device according to the actual load situation, the remote server processes the normal report messages through microservices, and it determines the number of microservices according to the number of normal report messages. Accordingly, after obtaining the normal report messages, the remote server needs to use the load balancing engine to process the target microservices of each normal report message, and then use the target microservice to process the normal report messages. In the specific implementation, the complex balancing engine in the computing device will determine the same target microservice for the normal report messages from the same gateway device to ensure that the environmental monitoring statistics of a specific site can be determined based on the reported data in the future.

[0072] As previously analyzed, in the disclosed embodiment, the remote server is deployed with environmental monitoring equipment control software, and the environmental monitoring equipment control software directly controls the environmental monitoring equipment of each environmental monitoring site. The corresponding remote server also needs to send control instructions to each gateway device, and the control instructions are instructions for controlling the target gateway device environmental monitoring equipment. The control instructions include the gateway identification of the target gateway device and the device identification of the target environmental monitoring equipment. The gateway identification is the gateway ID or fingerprint information (in the case where the gateway identification is the gateway ID, the gateway identification is encrypted). In order to be able to implement the issuance of control instructions under the aforementioned decoupling, the remote server issues the control instructions to the instruction publishing topic, and each gateway device obtains the control instructions by subscribing to the instruction publishing topic, and determines whether the received control instructions are sent to itself according to the identification of the control instructions and its own gateway identification. If the control instruction is an instruction sent to itself, the control instruction is issued to the corresponding target environmental monitoring device; if the control instruction is not an instruction sent to itself, the control instruction is discarded.

[0073] In actual applications, the remote server may think that there is a problem with itself and send multiple control instructions (most likely the same control instructions) to the target backbone device in a short period of time. If all the above instructions are executed, the device may crash or invalid operation may occur. If this problem is not solved, the gateway device will perform current limiting. Specifically, when the gateway device receives multiple control instructions including its own gateway identification in succession within a preset time, it retains the first control instruction received and discards other control instructions received within the preset time. Specifically, when the gateway device receives multiple control instructions within 15 seconds, it will only execute the first control instruction and directly discard other control instructions.

[0074] The above are only specific embodiments of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to these embodiments herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An ecological environment quality monitoring system, characterized in that: It includes a gateway device deployed at a monitoring point and locally connected to a data interface of each environmental monitoring device, and a remote server connected to the gateway device through a communication network; After accessing the communication network and establishing a communication connection with the remote server, the gateway device sends its own fingerprint information to the remote server; After the remote server receives the fingerprint information, it processes the fingerprint information using a private conversion algorithm to obtain a gateway ID, stores the association between the fingerprint information and the gateway ID in a data table, and returns the gateway ID to the gateway device; After receiving the gateway ID, the gateway device generates a report message based on the gateway ID, the fingerprint information and the report data sent by the environment monitoring device, and sends the report message to the remote server; After receiving the report message, the remote server parses the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution report data, and verifies whether the resolution gateway ID and the resolution fingerprint information match based on the stored association relationship in the data table; if it is determined that the resolution gateway ID and the fingerprint information do not match and the resolution gateway ID is stored in the data table, deletes the association relationship corresponding to the resolution gateway ID; And when it is determined that the resolution gateway ID does not match the fingerprint information, receiving and processing the reported data.

2. The monitoring system according to claim 1, characterized in that: The gateway device sends its own fingerprint information to the remote server, including: Encrypting the fingerprint information by a first encryption method to obtain first encrypted information, and sending the first encrypted information to the remote server; Before using the private conversion algorithm to process the fingerprint information to obtain the gateway ID, the remote server uses a first decryption means matching the first encryption means to process the first encrypted information to obtain the decrypted fingerprint information; Returning the gateway ID to the gateway device includes: using a second encryption method to obtain second encrypted information from the gateway ID, and sending the second encrypted information to the gateway device; After receiving the second encrypted information, the gateway device uses a second decryption means matching the second encryption means to decrypt the second encrypted information to obtain the gateway ID.

3. The monitoring system according to claim 1, characterized in that: The adopting a private conversion algorithm to process the fingerprint information to obtain a gateway ID includes: Processing the fingerprint information based on a private conversion algorithm to obtain a random private key; Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID; The generating of the reporting message based on the gateway ID, the fingerprint information and the reported data sent by the environmental monitoring device, and sending the reporting message to the remote server comprises: encrypting the fingerprint information and the reported data based on the gateway ID to obtain an encrypted message, and adding the fingerprint information to the header of the encrypted message; and using the encrypted message as the reporting message, and sending the encrypted message to the remote server; The parsing of the reported message to obtain the parsing gateway ID, the parsing fingerprint information and the parsing reported message includes: obtaining the parsing fingerprint information through the header information of the encrypted message, and decrypting the encrypted message using the corresponding random private key according to the parsing fingerprint information, and using the encrypted public key as the parsing gateway ID if the decryption is successful.

4. The monitoring system according to claim 1, characterized in that: Before the remote server processes the fingerprint information using a private conversion algorithm to obtain the gateway ID, the remote server also includes: determining the validity period of the gateway ID; The adopting a private conversion algorithm to process the fingerprint information to obtain the gateway ID includes: adopting a private conversion algorithm to process the fingerprint information and the valid time to obtain the gateway ID.

5. The monitoring system according to any one of claims 1 to 4, characterized in that: The gateway device publishes the fingerprint information on a gateway ID request topic, and the remote server receives the fingerprint information by subscribing to the gateway ID request topic.

6. The monitoring system according to any one of claims 1 to 4, characterized in that: Before sending the report message to the remote server, the gateway device further performs an operation of determining a message publishing topic corresponding to the report message according to a data type of the reported data; The sending of the report message to the remote server includes: publishing the report message to the corresponding message publishing topic, and the remote server obtains the report message by subscribing to the message publishing topic.

7. The monitoring system according to claim 6, characterized in that: In the process of obtaining the report message, the remote server identifies the abnormal report message according to the source gateway and timestamp of the report message, and discards the abnormal report message; The abnormal reporting message is an excess message from the same source gateway within a set period of time.

8. The monitoring system according to claim 6, characterized in that: After obtaining the normal report message, the remote server uses the load balancing engine to determine the target microservice for processing the normal report message; Use the target microservice to process normal reporting messages.

9. The monitoring system according to any one of claims 1 to 4, characterized in that: The remote server is further used to issue a control instruction to the instruction issuing subject, wherein the control instruction is an instruction for controlling an environmental monitoring device connected to a target gateway device, and the control instruction includes a gateway identifier of the target gateway device and a device identifier of the target environmental monitoring device, wherein the gateway identifier is the gateway ID or fingerprint information; Each gateway device obtains the control instruction by subscribing to the instruction publishing topic, and determines whether to discard the control instruction according to the identifier of the control instruction and its own gateway identifier, and sends the control instruction to the target environment monitoring device without discarding the control instruction.

10. The monitoring system according to claim 9, characterized in that: Also includes: When the gateway device continuously receives multiple control instructions including its own gateway identifier within a preset time period, the control instruction received first is retained, and other control instructions received within the preset time period are discarded.

Images