Ecological environment quality monitoring system

Abstract

The disclosed embodiment provides an ecological environment quality monitoring system, comprising: a gateway device sends its own fingerprint information to a remote server; the server uses a private conversion algorithm to process the fingerprint information to obtain a gateway ID; the gateway device generates a report message based on the gateway ID, fingerprint information, and reported data sent by the environmental monitoring device, and sends the report message to the remote server; after the remote server parses the report message to obtain a resolved gateway ID, resolved fingerprint information, and resolved reported data, it verifies whether the resolved gateway ID and resolved fingerprint information match based on the stored association relationship in the data table; if it is determined that the resolved gateway ID and fingerprint information do not match and the resolved gateway ID is stored in the data table, the association relationship corresponding to the resolved gateway ID is deleted. The data falsification device cannot obtain the gateway ID, so it does not know the correspondence between the gateway ID and the gateway fingerprint information, making it difficult to falsify reports from a large number of gateway devices.

Description

Technical Field

[0001] The present disclosure relates to the technical field of Internet of Things, and in particular to an ecological environment quality monitoring system. Background Art

[0002] To avoid the potential for human influence and tampering of environmental monitoring data through the upper computer in an architecture that utilizes a higher-level industrial control computer and lower-level monitoring devices, related technologies have proposed an architecture that utilizes a remote server and gateway device, using the gateway device to connect the remote server to the environmental monitoring devices and control the gateway device through the remote server. However, in practice, these gateway devices may enter the market. Driven by profit, some organizations may design virtual machines based on these gateway devices, interfere with communications with various gateway devices, and use the virtual machines to send fraudulent environmental monitoring and quality control data to remote servers. Summary of the Invention

[0003] In order to solve the problem that falsified data may appear in existing environmental monitoring systems without being identified, the embodiments of the present disclosure provide a new ecological environment quality monitoring system.

[0004] In a first aspect, an embodiment of the present disclosure provides an ecological environment quality monitoring system, comprising a gateway device deployed at a monitoring point and locally connected to a data interface of each environmental monitoring device, and a remote server communicatively connected to the gateway device via a communication network;

[0005] After accessing the communication network and establishing a communication connection with the remote server, the gateway device sends its own fingerprint information to the remote server;

[0006] After receiving the fingerprint information, the remote server processes the fingerprint information using a private conversion algorithm to obtain a gateway ID, stores the association between the fingerprint information and the gateway ID in a data table, and returns the gateway ID to the gateway device;

[0007] After receiving the gateway ID, the gateway device generates a report message based on the gateway ID, the fingerprint information and the report data sent by the environment monitoring device, and sends the report message to the remote server;

[0008] After receiving the report message, the remote server parses the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution reporting data, and verifies whether the resolution gateway ID and the resolution fingerprint information match based on the stored association relationship in the data table; if it is determined that the resolution gateway ID and the fingerprint information do not match and the resolution gateway ID is stored in the data table, deletes the association relationship corresponding to the resolution gateway ID; and if it is determined that the resolution gateway ID does not match the fingerprint information, receives and processes the reporting data.

[0009] Optionally, the gateway device sends its own fingerprint information to the remote server, including:

[0010] Encrypting the fingerprint information using a first encryption method to obtain first encrypted information, and sending the first encrypted information to the remote server;

[0011] Before using the private conversion algorithm to process the fingerprint information to obtain the gateway ID, the remote server uses a first decryption method that matches the first encryption method to process the first encrypted information to obtain decrypted fingerprint information;

[0012] Returning the gateway ID to the gateway device includes: using a second encryption method to obtain second encrypted information from the gateway ID, and sending the second encrypted information to the gateway device;

[0013] After receiving the second encrypted information, the gateway device uses a second decryption means matching the second encryption means to decrypt the second encrypted information to obtain the gateway ID.

[0014] Optionally, the adopting a private conversion algorithm to process the fingerprint information to obtain the gateway ID includes:

[0015] Processing the fingerprint information based on a private conversion algorithm to obtain a random private key;

[0016] Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID;

[0017] Generating a report message based on the gateway ID, the fingerprint information, and the reported data sent by the environmental monitoring device, and sending the report message to the remote server includes: encrypting the fingerprint information and the reported data based on the gateway ID to obtain an encrypted message, and adding the fingerprint information to a header of the encrypted message; and using the encrypted message as a report message, and sending the encrypted message to the remote server;

[0018] The parsing of the reported message to obtain the parsing gateway ID, parsing fingerprint information and parsing the reported message includes: obtaining the parsing fingerprint information through the header information of the encrypted message, and decrypting the encrypted message using the corresponding random private key according to the parsing fingerprint information, and using the encrypted public key as the parsing gateway ID if the decryption is successful.

[0019] Optionally, before the remote server processes the fingerprint information using a private conversion algorithm to obtain the gateway ID, the remote server further includes: determining a validity period of the gateway ID;

[0020] The adopting a private conversion algorithm to process the fingerprint information to obtain the gateway ID includes: adopting a private conversion algorithm to process the fingerprint information and the valid time to obtain the gateway ID.

[0021] Optionally, the gateway device publishes the fingerprint information on a gateway ID request topic, and the remote server receives the fingerprint information by subscribing to the gateway ID request topic.

[0022] Optionally, before sending the report message to the remote server, the gateway device further performs an operation of determining a message publishing topic corresponding to the report message according to a data type of the reported data;

[0023] The sending of the report message to the remote server includes: publishing the report message to the corresponding message publishing topic, and the remote server obtains the report message by subscribing to the message publishing topic.

[0024] Optionally, in the process of obtaining the reporting message, the remote server identifies the abnormal reporting message according to the source gateway and timestamp of the reporting message and discards the abnormal reporting message; the abnormal reporting message is an excess message from the same source gateway within a set time period.

[0025] Optionally, after obtaining the normal reporting message, the remote server uses a load balancing engine to determine a target microservice for processing the normal reporting message;

[0026] Use the target microservice to process normal reporting messages.

[0027] Optionally, the remote server is further used to issue a control instruction to the instruction issuing topic, where the control instruction is an instruction for controlling an environmental monitoring device connected to a target gateway device, and the control instruction includes a gateway identifier of the target gateway device and a device identifier of the target environmental monitoring device, where the gateway identifier is the gateway ID or fingerprint information;

[0028] Each gateway device obtains the control instruction by subscribing to the instruction publishing topic, and determines whether to discard the control instruction based on the identifier of the control instruction and its own gateway identifier, and sends the control instruction to the target environment monitoring device if the control instruction is not discarded.

[0029] Optionally, when the gateway device continuously receives multiple control instructions including its own gateway identifier within a preset time period, the control instruction received first is retained, and other control instructions received within the preset time period are discarded.

[0030] By adopting the solution of the embodiment of the present disclosure, the data forgery device cannot obtain the gateway ID, so it does not know the correspondence between the gateway ID and the gateway fingerprint information, and it is difficult to forge messages reported by a large number of gateway devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0032] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the following briefly introduces the drawings required for the embodiments or the prior art description. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative work, including

[0033] Figure 1 is a structural diagram of the ecological environment quality monitoring system provided by an embodiment of the present disclosure;

[0034] Figure 2 It is a flow chart of the interaction between the gateway device and the remote server in the embodiment of the present disclosure. DETAILED DESCRIPTION

[0035] The following describes embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are for illustrative purposes only and are not intended to limit the scope of protection of the present disclosure.

[0036] As used herein, the term "including" and its variations are open-ended inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description. In this document, relational terms such as "first" and "second" are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations.

[0037] Figure 1 This is a schematic diagram of the structure of the ecological environment quality monitoring system provided by the embodiment of the present disclosure. Figure 1 As shown, the ecological environment quality monitoring system 100 provided by the embodiment of the present disclosure includes an environmental monitoring device 101, a gateway device 102 and a remote server 103.

[0038] The aforementioned environmental monitoring devices 101 and gateway devices 102 are both deployed locally at the environmental monitoring site. In practice, a single environmental monitoring site can host multiple different types of environmental monitoring devices 101 and one gateway device 102. The monitoring device connection interface of the aforementioned gateway device 102 connects to the data IO interface of each environmental monitoring device 101, enabling data transmission with each environmental monitoring device 101 via a local communication link.

[0039] Each environmental monitoring device 101 can be connected in series with the gateway device 102 (that is, only one environmental monitoring device 101 is directly connected to the gateway device 102, and the other environmental monitoring devices 101 communicate with the gateway device 102 through the aforementioned environmental monitoring device 101), or can be connected in parallel with the gateway device 102 (that is, each environmental monitoring device 101 is connected to the gateway device 102 through an independent monitoring device connection interface), which is not limited in the embodiments of the present disclosure. In some embodiments, while ensuring the security and reliability of data communication, the gateway device 102 and the environmental monitoring device 101 can also be connected using short-range wireless communication.

[0040] In the embodiment of the present disclosure, the gateway device 102 does not have the function of directly controlling the environment monitoring device 101 , that is, the gateway device 102 does not have monitoring device control software for directly controlling the environment monitoring device 101 installed therein.

[0041] Remote server 103 is a server not deployed at the environmental monitoring site but installed with monitoring equipment control software. Remote server 103 can send control instructions to environmental monitoring equipment 101 via network communication and receive output data reported by environmental monitoring equipment 101. In practice, remote server 103 is often deployed in the server room of the environmental monitoring entity.

[0042] like Figure 1 As shown, in the embodiment of the present disclosure, the remote server 103 is not directly connected to the aforementioned environmental monitoring device 101, but is indirectly connected to the environmental monitoring device 101 through the gateway device 102. Specifically, the gateway device 102 acts as an intermediate communication device, forwarding the control instructions issued by the remote server 103 to the corresponding environmental monitoring device 101, and reporting various output data output by the environmental monitoring device 101 to the remote server 103.

[0043] In order to ensure the authenticity of environmental monitoring data and prevent data falsification devices in the network from sending falsified environmental data of various monitoring sites to the remote server without the remote server being able to recognize it, the embodiment of the present disclosure improves the gateway authentication method so that when the remote server recognizes that the identification information of the reported message does not match the local information, it will determine that the relevant reported message is a falsified message.

[0044] Figure 2 This is a flow chart of the interaction between the gateway device and the remote server in the embodiment of the present disclosure. Figure 2 As shown, after the gateway device establishes a communication connection with the remote server (e.g., using a handshake protocol to achieve mutual communication), the gateway device executes S110: sending its own fingerprint information to the remote server. Fingerprint information is information that represents the identity of the gateway device. In specific implementations, the fingerprint information can be a unique identifier such as the gateway device's MAC address, or it can be identifying information generated using the aforementioned unique identifier. It can also include temporarily assigned identifying information such as a dynamic IP address. In specific implementations, the gateway device can generate fingerprint information based on, for example, the aforementioned MAC address by executing a fingerprint generation program.

[0045] After generating the fingerprint information, the gateway device sends the fingerprint information to the server. In a specific implementation, to ensure the security of the fingerprint information, the gateway device uses an encryption algorithm (first encryption method) to encrypt the fingerprint information to obtain the encrypted fingerprint information. In a specific implementation, the gateway device can use an asymmetric encryption algorithm to encrypt the fingerprint information, that is, use the public key of the remote server to encrypt the fingerprint information.

[0046] After receiving the fingerprint information, the remote server executes S120: using a private conversion algorithm to process the fingerprint information to obtain a gateway ID, storing the association between the fingerprint information and the gateway ID in a data table, and returning the gateway ID to the gateway device.

[0047] A private conversion algorithm is unique to the remote server. This means that only the remote server can determine the corresponding gateway ID based on the fingerprint information; other devices cannot. After obtaining the gateway ID, the remote server stores the gateway ID and the corresponding fingerprint information in a relational data table for use in verifying the legitimacy of subsequent reports.

[0048] As previously analyzed, when the gateway device encrypts the fingerprint information to obtain encrypted fingerprint information, the remote server first decrypts the encrypted fingerprint information (specifically, using a first decryption method opposite to the first encryption method) to obtain decrypted fingerprint information, and then obtains the gateway ID based on the decrypted fingerprint information. Corresponding to the aforementioned situation where the fingerprint information is encrypted using the remote server's public key, the remote server decrypts the encrypted fingerprint information using its own private key.

[0049] Similarly, in order to ensure the security of the gateway ID, in the specific implementation, the remote server encrypts the gateway ID (using the second encryption method), and then sends the encrypted gateway ID to the gateway device. For example, the gateway ID is encrypted using the public key of the gateway device (using the second decryption method opposite to the second encryption method), and then the encrypted ID is sent to the gateway device.

[0050] After the gateway device receives the gateway ID, the gateway device executes S130: generating a reporting message based on the gateway ID, the fingerprint information and the reporting data sent by the environment monitoring device, and then sending the reporting message to the remote server.

[0051] After receiving the report message, the server executes the following S140: parses the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution report message, and verifies whether the resolution gateway ID and resolution fingerprint information match based on the storage relationship storage association relationship in the data table; if they do not match, execute S150; if they match, execute S160.

[0052] S150: discarding the resolution gateway ID as an illegal identifier, and deleting the association relationship corresponding to the resolution gateway ID when the resolution gateway ID is stored in the data table.

[0053] S160: Receive and process the reported data.

[0054] Similar to the analysis above, the reporting message may be encrypted by the gateway device. The corresponding remote server decrypts the encrypted reporting message using the public decryption strategy to obtain the resolution gateway ID, resolution fingerprint information, and resolution reporting data.

[0055] In actual applications, due to malicious forgery, the aforementioned resolved gateway ID, resolved fingerprint information, and resolved reporting data are not sent by a real gateway device (that is, a data forgery device) that has been registered on the remote server and assigned a gateway ID by the remote server. In this case, because the data forgery device cannot obtain the gateway ID, it does not know the correspondence between the gateway ID and the gateway fingerprint information. Since it is also difficult for it to obtain the IDs of most gateway devices in the entire network, it directly uses the gateway ID of a specific gateway device that has been cracked (it requires entering the monitoring site computer room to crack it), and forms a forged reporting message based on this gateway ID and the fingerprint information of the corresponding gateway device, and cannot achieve the forgery of reporting messages sent by gateway devices at other monitoring sites.

[0056] To achieve this, the data falsification device will likely use brute force to send a report message to the remote server containing a randomly generated gateway ID. In this case, if the remote server determines that its gateway ID and fingerprint information do not correspond to the local gateway ID, it will directly delete the corresponding relationship between the resolved gateway and this ID, requiring the gateway device to re-authenticate, thus reversing the brute force cracking efforts. It should be noted that during the process of the remote server generating the gateway ID at different times, the gateway ID information is not static, but will change dynamically due to the different data and time points used in the private conversion algorithm, ensuring that the aforementioned brute force cracking will not succeed.

[0057] If the resolved gateway ID matches the fingerprint information, it is temporarily determined that the corresponding report message is sent by the authenticated gateway device, and the report data in the report message is processed.

[0058] As mentioned above, the remote server uses a private conversion algorithm to process the fingerprint information to obtain the gateway ID. In a specific implementation, the remote server can use the following S121-S122 to obtain the gateway ID.

[0059] S121: Process the fingerprint information based on a private conversion algorithm to obtain a random private key.

[0060] S122: Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID.

[0061] In a specific implementation, the fingerprint information is processed based on a private conversion algorithm to obtain a random key. A random number generation algorithm can be used to generate a random number using the fingerprint information to obtain a private key. Alternatively, the remote server can assign a random number to the fingerprint information as the corresponding random private key. After obtaining the random private key, the remote server can process the random private key using the adopted asymmetric encryption algorithm to obtain an encrypted public key, which is then used as the gateway ID.

[0062] When the aforementioned confidential public key is used as the gateway ID, after obtaining the gateway ID, the gateway device can obtain the report message using the following step S131. S131: Encrypt the fingerprint information and the reported data based on the gateway ID to obtain an encrypted message, and add the fingerprint information to the header of the encrypted message; then, the message is sent to the remote server as the report message. In other words, the gateway ID serves as the encryption public key for encrypting the fingerprint information and the report message. In this case, only the remote server holding the random private key can decrypt the encrypted message.

[0063] Accordingly, after receiving the encrypted message, the remote server obtains the resolution gateway ID and resolution fingerprint information using the following S141: S141: Obtain the resolution fingerprint information from the header information of the encrypted message, and decrypt the encrypted message using the corresponding random private key based on the resolution fingerprint information, and use the encrypted public key as the resolution gateway ID if the decryption is successful.

[0064] As previously analyzed, in the disclosed embodiments, to prevent the gateway ID from being cracked by brute force, the remote server must generate unique gateway IDs for the same gateway device at different times. To address this issue, in some embodiments, after obtaining the fingerprint information, the remote server will randomly generate a gateway ID validity period. It then uses a proprietary conversion algorithm to process the fingerprint information and validity period to obtain the gateway ID.

[0065] In some embodiments, the remote server and the gateway device are directly connected in communication, and the two can directly transmit the aforementioned fingerprint information, gateway ID, and report messages to each other. However, in actual applications, due to the large number of monitoring sites and the corresponding number of gateway devices, if the remote server and the gateway device communicate directly, the failure of one gateway device may cause the remote server to fail, and the entire environmental quality monitoring system may crash. To solve this problem, in some embodiments, the remote server and the gateway device are decoupled from each other in communication. Specifically, the gateway device and the remote server use a message queue telemetry transmission protocol to send and receive fingerprint information, gateway ID, and report messages.

[0066] Specifically, the gateway device publishes the fingerprint information (encrypted fingerprint information) on the gateway ID request topic of the proxy service (this proxy service can be a private proxy service deployed under the entity to which the remote server belongs, or it can be a public proxy service). The program in the remote server for generating the gateway ID receives the fingerprint information by subscribing to the gateway ID request topic.

[0067] The remote service generates a gateway ID (especially an encrypted gateway ID) and publishes it to the gateway distribution topic. Gateway devices subscribe to the gateway distribution topic to receive the gateway ID. In practice, the gateway device will obtain the encrypted gateway IDs of all gateways, but can only obtain its own gateway through decryption. All other subscription content will be discarded.

[0068] Similarly, after generating a report message, the gateway device will publish the report message to the message topic, and the remote server obtains the report message by subscribing to the message topic.

[0069] In a specific implementation, the report messages sent by the gateway device are of various types, such as messages including quality control data, messages including equipment status data, and messages including environmental monitoring data. Among the aforementioned messages, different messages have different processing priorities. If the aforementioned messages are placed in the same message topic, it will be impossible to use different priorities for processing. To solve this problem, before the gateway device sends the report message to the remote server, the gateway device then determines the operation of the message publishing topic corresponding to the report message based on the data type of the reported data, and then publishes the report message to the corresponding message publishing topic. The remote server obtains the report message through the corresponding message publishing topic.

[0070] In specific implementations, some gateway devices may be hacked by data falsification devices, which may send a large number of junk report messages. These large numbers of report messages may cause the remote server's processing capacity to crash, making it unable to obtain report messages sent by other gateway devices. To solve this problem, the remote server will also identify abnormal report messages based on the source gateway and timestamp of the report message when obtaining the report message, and discard the abnormal report messages. The aforementioned abnormal report messages are excessive messages from the same source gateway within a set time period. The aforementioned coming from the same source gateway means that its fingerprint information and gateway ID are the ID of a gateway.

[0071] In a specific implementation, in order to process the normal reporting messages sent by the gateway device according to the actual load situation, the remote server processes the normal reporting messages through microservices, and it determines the number of microservices based on the number of normal reporting messages. Accordingly, after obtaining the normal reporting messages, the remote server needs to use the load balancing engine to process the target microservices of each normal reporting message, and then use the target microservices to process the normal reporting messages. In a specific implementation, the complex balancing engine in the computing device will determine the same target microservice for normal reporting messages from the same gateway device to ensure that the environmental monitoring statistics of a specific site can be determined based on the reported data.

[0072] As previously analyzed, in the embodiment of the present disclosure, an environmental monitoring device control software is deployed in the remote server, and the environmental monitoring device control software directly controls the environmental monitoring devices of each environmental monitoring site. The corresponding remote server also needs to send a control instruction to each gateway device. The control instruction is an instruction to control the target gateway device environmental monitoring device. The control instruction includes the gateway identifier of the target gateway device and the device identifier of the target environmental monitoring device. The gateway identifier is the gateway ID or fingerprint information (in the case where the gateway identifier is the gateway ID, the gateway identifier is encrypted). In order to be able to implement the issuance of control instructions under the aforementioned decoupling, the remote server issues the control instruction to the instruction publishing topic, and each gateway device obtains the control instruction by subscribing to the instruction publishing topic, and determines whether the received control instruction is a control instruction sent to itself based on the identifier of the control instruction and its own gateway identifier. If the control instruction is an instruction sent to itself, the control instruction is issued to the corresponding target environmental monitoring device; if the control instruction is not an instruction sent to itself, the control instruction is discarded.

[0073] In actual applications, the remote server may think that there is a problem with itself and send multiple control instructions (most likely the same control instructions) to the target backbone device in a short period of time. If all the above instructions are executed, the device may crash or invalid operation may occur. If this problem is not solved, the gateway device will perform current limiting. Specifically, when the gateway device receives multiple control instructions including its own gateway identification continuously within a preset time, it will retain the first control instruction received and discard other control instructions received within the preset time. Specifically, when the gateway device receives multiple control instructions within 15 seconds, it will only execute the first control instruction and directly discard other control instructions.

[0074] The above are merely specific embodiments of the present disclosure, intended to enable those skilled in the art to understand and implement the present disclosure. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure is not limited to these embodiments, but is to be construed in the broadest manner consistent with the principles and novel features disclosed herein.

Claims

1. An ecological environment quality monitoring system, characterized in that: It includes a gateway device deployed at the monitoring point and locally connected to the data interface of each environmental monitoring device, and a remote server connected to the gateway device through a communication network; After accessing the communication network and establishing a communication connection with the remote server, the gateway device sends its own fingerprint information to the remote server; After receiving the fingerprint information, the remote server processes the fingerprint information using a private conversion algorithm to obtain a gateway ID, stores the association between the fingerprint information and the gateway ID in a data table, and returns the gateway ID to the gateway device; After receiving the gateway ID, the gateway device generates a report message based on the gateway ID, the fingerprint information and the report data sent by the environment monitoring device, and sends the report message to the remote server; After receiving the report message, the remote server parses the report message to obtain the resolution gateway ID, resolution fingerprint information and resolution report data, and verifies whether the resolution gateway ID and the resolution fingerprint information match based on the stored association relationship in the data table; if it is determined that the resolution gateway ID and the fingerprint information do not match and the resolution gateway ID is stored in the data table, deletes the association relationship corresponding to the resolution gateway ID; and if it is determined that the resolution gateway ID and the fingerprint information do not match, receives and processes the report data, The process of using a private conversion algorithm to process the fingerprint information to obtain a gateway ID includes: Processing the fingerprint information based on a private conversion algorithm to obtain a random private key; Generate a corresponding encrypted public key based on the random private key, and use the encrypted public key as the gateway ID; Generating a report message based on the gateway ID, the fingerprint information, and the reported data sent by the environmental monitoring device, and sending the report message to the remote server includes: encrypting the fingerprint information and the reported data based on the gateway ID to obtain an encrypted message, and adding the fingerprint information to a header of the encrypted message; and using the encrypted message as a report message, and sending the encrypted message to the remote server; The parsing of the reported message to obtain the parsing gateway ID, parsing fingerprint information and parsing the reported message includes: obtaining the parsing fingerprint information through the header information of the encrypted message, and decrypting the encrypted message using the corresponding random private key according to the parsing fingerprint information, and using the encrypted public key as the parsing gateway ID if the decryption is successful.

2. The monitoring system according to claim 1, characterized in that The gateway device sends its own fingerprint information to the remote server, including: Encrypting the fingerprint information using a first encryption method to obtain first encrypted information, and sending the first encrypted information to the remote server; Before using the private conversion algorithm to process the fingerprint information to obtain the gateway ID, the remote server uses a first decryption method that matches the first encryption method to process the first encrypted information to obtain decrypted fingerprint information; Returning the gateway ID to the gateway device includes: using a second encryption method to obtain second encrypted information from the gateway ID, and sending the second encrypted information to the gateway device; After receiving the second encrypted information, the gateway device uses a second decryption means matching the second encryption means to decrypt the second encrypted information to obtain the gateway ID.

3. The monitoring system according to claim 1, wherein: Before the remote server processes the fingerprint information using a private conversion algorithm to obtain the gateway ID, the remote server further includes: determining the validity period of the gateway ID; The adopting a private conversion algorithm to process the fingerprint information to obtain the gateway ID includes: adopting a private conversion algorithm to process the fingerprint information and the valid time to obtain the gateway ID.

4. The monitoring system according to any one of claims 1 to 3, characterized in that: The gateway device publishes the fingerprint information on a gateway ID request topic, and the remote server receives the fingerprint information by subscribing to the gateway ID request topic.

5. The monitoring system according to any one of claims 1 to 3, characterized in that: Before sending the report message to the remote server, the gateway device further performs an operation of determining a message publishing topic corresponding to the report message according to a data type of the reported data; The sending of the report message to the remote server includes: publishing the report message to the corresponding message publishing topic, and the remote server obtains the report message by subscribing to the message publishing topic.

6. The monitoring system according to claim 5, characterized in that In the process of obtaining the report message, the remote server identifies the abnormal report message according to the source gateway and time stamp of the report message, and discards the abnormal report message; The abnormal reporting message is an excess message from the same source gateway within a set period of time.

7. The monitoring system according to claim 5, characterized in that After obtaining the normal report message, the remote server uses the load balancing engine to determine the target microservice for processing the normal report message; Use the target microservice to process normal reporting messages.

8. The monitoring system according to any one of claims 1 to 3, characterized in that: The remote server is further configured to issue a control instruction to the instruction issuing topic, wherein the control instruction is an instruction for controlling the environmental monitoring device connected to the target gateway device, and the control instruction includes a gateway identifier of the target gateway device and a device identifier of the target environmental monitoring device, wherein the gateway identifier is the gateway ID or fingerprint information; Each gateway device obtains the control instruction by subscribing to the instruction publishing topic, and determines whether to discard the control instruction based on the identifier of the control instruction and its own gateway identifier, and sends the control instruction to the target environment monitoring device if the control instruction is not discarded.

9. The monitoring system according to claim 8, characterized in that Also includes: When the gateway device continuously receives multiple control instructions including its own gateway identifier within a preset time period, the gateway device retains the control instruction received first and discards other control instructions received within the preset time period.

Images