Method and system for multi-service application operation and maintenance management based on low-voltage intelligent circuit breaker
The operation and maintenance management platform performs unified scheduling and management of multiple service applications of low-voltage intelligent circuit breakers. Through resource allocation and key management, it solves the problem of the inability to uniformly schedule and manage multiple service apps in low-voltage intelligent circuit breakers, and improves the security and efficiency of data interaction.
Patent Information
- Application Number
- CN202510007257.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-03
- Publication Date
- 2025-11-25
- Estimated Expiration
- 2045-01-03
AI Technical Summary
The inability to uniformly schedule and manage multiple services in low-voltage intelligent circuit breakers leads to low data interaction security and efficiency, and there are security risks and management inconvenience when adding new apps.
The operation and maintenance management platform receives registration applications from smart devices, evaluates and allocates resources, installs and isolates new applications, verifies activation applications, removes isolation status and allocates pipeline keys to achieve secure data interaction between applications.
It realizes unified scheduling and management of application programs in low-voltage intelligent circuit breakers, improves the security and efficiency of data interaction, avoids data loss and leakage, and ensures the normal operation and security of newly added applications.
Smart Images

Figure CN119938074B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of computer technology, and in particular to a method and system for operation and maintenance management of multi-service applications based on low-voltage intelligent circuit breakers. Background Technology
[0002] In recent years, circuit breakers (switches) used in low-voltage distribution networks have been continuously developing towards intelligence. Building upon existing intelligent switch measurement, communication, and topology identification technologies, and inheriting the technology of integrated terminals, they have further extended and expanded to achieve "hardware platformization and software APP-based" implementation of low-voltage circuit breakers. However, the APP-based application of business functions has also brought about the following problems:
[0003] (1) The various business apps are highly coupled with each other, and there is a lack of effective supervision in loading and running. When adding a new app, it can only be managed manually by the user or the developer. On the one hand, there are security risks. Once an unknown app is installed privately or by mistake, it may cause the smart circuit breaker to malfunction or even crash. On the other hand, due to the mutual coupling between the businesses, adding a new app may involve the modification of some existing apps, resulting in insufficient scalability. As the number of business apps increases, it becomes very inconvenient to manage.
[0004] (2) Different business apps need to communicate with each other to exchange data. As the number of apps increases, the system resource consumption will increase exponentially. At the same time, due to the lack of unified scheduling, multiple apps are prone to interference when exchanging data at the same time, resulting in data loss and leakage, and the security of data exchange between apps is difficult to guarantee.
[0005] Regarding the operation and maintenance management issues of low-voltage intelligent circuit breakers with multiple service apps coexisting, the current approach mainly relies on manual management by users, which cannot perform overall business operation scheduling and management, and cannot guarantee the security and efficiency of data interaction. Summary of the Invention
[0006] This invention provides a method and system for operation and maintenance management of multi-service applications based on low-voltage intelligent circuit breakers, in order to solve the problem that multi-service APPs in low-voltage intelligent circuit breakers cannot be uniformly scheduled and managed, and to improve the security and efficiency of data interaction.
[0007] According to one aspect of the present invention, a multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker is provided, applied to an operation and maintenance management platform, the operation and maintenance management platform running on an operating system deployed on the low-voltage intelligent circuit breaker, the method comprising:
[0008] Receive a registration request for a new application sent by a smart device, wherein the registration request includes the characteristic information of the new application;
[0009] If the registration application is approved, resources are allocated to the newly added application, and the allocated resource information is fed back to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuring and updating according to the resource information. The allocated resources include: system resources and communication channels.
[0010] Receive the installation package of the newly added application sent by the smart device, install the newly added application according to the installation package, and set the status of the newly added application to the isolated running state;
[0011] The system receives activation requests from newly added applications, verifies the activation requests based on the registration requests, and if the verification passes, releases the isolated running state of the newly added applications and assigns a pipeline key to the newly added applications for secure data interaction between applications.
[0012] According to another aspect of the present invention, a multi-service application operation and maintenance management system based on a low-voltage intelligent circuit breaker is provided, comprising: an operation and maintenance management platform and an application, wherein the operation and maintenance management platform and the application run on an operating system, and the operating system is deployed on the low-voltage intelligent circuit breaker;
[0013] The operation and maintenance management platform is used to receive registration applications for new applications sent by smart devices. The registration applications include characteristic information of the new applications. If the registration applications are approved, resources are allocated to the new applications, and the allocated resource information is fed back to the smart devices so that the smart devices can obtain the installation package of the new applications generated by configuration updates based on the resource information. The allocated resources include system resources and communication channels. The platform also receives the installation package of the new applications sent by the smart devices, installs the new applications according to the installation package, and sets the status of the new applications to isolated running state.
[0014] The newly added application is used to submit an activation request to the operation and maintenance management platform;
[0015] The operation and maintenance management platform is used to receive activation applications reported by the newly added applications, verify the activation applications according to the registration applications, and if the verification is successful, release the isolated running state of the newly added applications and assign pipeline keys to the newly added applications to enable secure data interaction between applications.
[0016] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:
[0017] At least one processor, and a memory communicatively connected to said at least one processor;
[0018] The memory stores a computer program that can be executed by the at least one processor, which is then executed by the at least one processor to enable the at least one processor to execute the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any embodiment of the present invention.
[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions, the computer instructions being configured to cause a processor to execute and implement the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any embodiment of the present invention.
[0020] According to another aspect of the present invention, a computer program product is provided, the computer program product comprising a computer program that, when executed by a processor, implements the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any embodiment of the present invention.
[0021] The technical solution of this invention involves using an operation and maintenance management platform to manage the multi-service applications of low-voltage intelligent circuit breakers. The platform receives registration requests for new applications from intelligent devices, including characteristic information of the new applications. If the registration request passes evaluation, resources are allocated to the new applications, and the allocated resource information is fed back to the intelligent devices so that the intelligent devices can obtain the installation package of the new applications generated by configuration updates based on the resource information. The allocated resources include system resources and communication channels. The platform receives the installation package of the new applications from the intelligent devices, installs the new applications according to the installation package, and sets the status of the new applications to isolated operation. It also receives activation requests reported by the new applications, verifies the activation requests based on the registration requests, and if the verification passes, deactivates the new applications. By isolating the program's running state and assigning pipeline keys to newly added applications for secure data interaction between applications, the problem of inconsistent scheduling and management of multiple service apps in low-voltage smart circuit breakers is solved. The operation and maintenance management platform manages the applications uniformly. When a new application is added to a low-voltage smart circuit breaker, a registration application is sent to the operation and maintenance management platform through the smart device. The operation and maintenance management platform evaluates the registration application, and if the evaluation is passed, resources are allocated to install the new application. After installation, the new application is set to an isolated running state. Upon receiving the activation application reported by the new application and verifying it, the isolated running state is lifted, and the application can then run normally. Information interaction with other applications is conducted through the operation and maintenance management platform. To ensure data security, pipeline keys are assigned to new applications. The unified management of applications through the operation and maintenance management platform effectively improves the security and efficiency of data interaction.
[0022] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description
[0023] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0024] Figure 1 This is a flowchart of a multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker according to Embodiment 1 of the present invention;
[0025] Figure 2 This is an architectural diagram of a low-voltage intelligent circuit breaker according to Embodiment 1 of the present invention;
[0026] Figure 3 This is a flowchart of a multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker according to Embodiment 2 of the present invention;
[0027] Figure 4 This is a schematic diagram of a data interaction management system provided according to Embodiment 2 of the present invention;
[0028] Figure 5 This is a flowchart illustrating the operation status monitoring and anomaly handling of an application according to Embodiment 2 of the present invention;
[0029] Figure 6 This is a schematic diagram of the structure of a multi-service application operation and maintenance management system based on a low-voltage intelligent circuit breaker according to Embodiment 3 of the present invention;
[0030] Figure 7 This is a schematic diagram of the structure of an electronic device that implements the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker according to an embodiment of the present invention. Detailed Implementation
[0031] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.
[0032] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.
[0033] Example 1
[0034] Figure 1This is a flowchart illustrating a multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker, as provided in Embodiment 1 of the present invention. This embodiment is applicable to the operation and maintenance management of multi-service applications on low-voltage intelligent circuit breakers. The method can be executed by an operation and maintenance management platform, which runs on an operating system deployed on the low-voltage intelligent circuit breaker. For example... Figure 2 An architecture diagram of a low-voltage intelligent circuit breaker is provided. An embedded APP-based integrated operation and maintenance management platform 12 is created based on the low-voltage intelligent circuit breaker's software operating system 11. The kernel allocates resources and opens interface call permissions to enable function calls and information exchange between the operation and maintenance management platform 12 and the operating system 11. Each application 13 retains only necessary interface call permissions, such as those for peripherals and the file system. The operation and maintenance management platform 12 performs unified authentication and operation management, and provides security guarantees for the operating status of each APP and their data exchange. The operation and maintenance management platform 12 can interact with users / upper-level devices 14 through external interfaces.
[0035] like Figure 1 As shown, the method includes:
[0036] S101. Receive a registration application for a new application sent by a smart device. The registration application includes the characteristic information of the new application.
[0037] In this embodiment, the smart device can be any electronic device with data processing capabilities, such as a smartphone, computer, or tablet. The registration application can be understood as a request to the operation and maintenance management platform to install an application. The feature information can be understood as information describing the application's operational information, identifiers, and other characteristics. The application can be an application that executes corresponding business functions within a low-voltage smart circuit breaker, and the operation and maintenance management platform can manage different business applications.
[0038] When a low-voltage intelligent circuit breaker needs to load a new application, it first determines the characteristic information of the new application and establishes a communication connection with the operation and maintenance management platform through the intelligent device. The characteristic information of the new application can be manually entered by the user on the intelligent device or pre-saved in a file, which the intelligent device reads to obtain the characteristic information. After determining the characteristic information of the new application, the intelligent device generates a registration application based on the application's characteristic information and sends the registration application to the operation and maintenance management platform.
[0039] The operation and maintenance management platform has a business app security loading management function, responsible for the information authentication, resource allocation, and operation management of all business apps. If a low-voltage intelligent circuit breaker needs to load a new business app, it must first establish communication with the operation and maintenance management platform inside the circuit breaker through an intelligent device (e.g., a client or main station). Communication requires hierarchical permission authentication, including three types of permissions: administrator, commissioning engineer, and auditor. The administrator has the highest permissions and can create new commissioning engineer and auditor accounts; the commissioning engineer has the permission to read circuit breaker operating information and modify equipment setting parameters; and the auditor has the permission to read and query circuit breaker event records and operating logs. Before leaving the factory, the account login passwords are all default values. After the user changes them, the operation and maintenance management platform will create a new login whitelist. Registration requests can be initiated by any account, or the accounts initiating registration requests can be controlled by setting permissions. For example, only the administrator account has the permission to initiate registration requests.
[0040] Optionally, the feature information may include at least one of the following: application name, memory resources used, and number of threads.
[0041] S102. If the registration application is approved, resources are allocated to the newly added application, and the allocated resource information is fed back to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuring and updating according to the resource information. The allocated resources include: system resources and communication channels.
[0042] The registration application is evaluated. Based on the characteristics of the new application, it is determined whether the remaining resources of the operating system in the low-voltage intelligent circuit breaker support the installation of the new application. If so, the registration application is deemed approved; otherwise, it is deemed unsuccessful and the application cannot be installed. If the registration application is approved, resources are allocated to the new application, including system resources and communication channels. System resources may include the starting address and size of memory space, application ID encoding, etc., while communication channels are used for data transmission. The allocated resource information is fed back to the intelligent device, which can then obtain the installation package of the new application generated by updating its configuration based on the resource information. After receiving the allocated resource information, the intelligent device can update the configuration of the new application and generate the installation package accordingly. Alternatively, the intelligent device can send the resource information to other devices, which can then update the configuration of the new application, generate the installation package, and send it back to the intelligent device. The intelligent device then installs the application into the operating system, allowing the new application to install normally. For example, if the allocated processor FLASH starts at address 0x08050000 and has a size of 64k, then the loading domain configuration of the newly added application will be modified accordingly, and so on.
[0043] After evaluating and identifying registration applications, the operations and maintenance management platform can add approved applications to the APP registration information list. This list includes the registration time and account for traceability and can be accessed by administrators. New APPs can update their configurations based on this information and achieve dynamic, distributed loading based on the operating system.
[0044] S103. Receive the installation package of the newly added application sent by the smart device, install the newly added application according to the installation package, and set the status of the newly added application to the isolated running state.
[0045] In this embodiment, the isolated running state can be understood as a running state of an application, in which the application cannot interact with other applications.
[0046] After the newly added application updates its configuration and generates an installation package, it sends the package to the operation and maintenance management platform via a smart device. The operation and maintenance management platform receives the installation package and installs the new application based on it. For example, the platform can call a system interface to flash and install the new application. The application is installed on the operating system, and since the operating system is deployed on the low-voltage intelligent circuit breaker, the application can ultimately run on the low-voltage intelligent circuit breaker. After the application is installed, its status is set to isolated operation mode.
[0047] S104. Receive the activation application reported by the newly added application, verify the activation application according to the registration application, if the verification is successful, release the isolated running state of the newly added application, and assign a pipeline key to the newly added application to enable secure data interaction between applications.
[0048] In this embodiment, the pipeline key can be understood as a key used to encrypt data when the application and the operation and maintenance management platform interact with each other through the communication pipeline.
[0049] The operations and maintenance (O&M) management platform uses system interfaces to monitor the runtime information of newly added applications and waits for activation requests from these applications through the allocated communication channels. New applications can proactively submit activation requests or set reporting conditions, generating and submitting an activation request only after these conditions are met. Reporting conditions could include a specific runtime condition being met, or the runtime exceeding a certain threshold, etc. The O&M management platform receives activation requests from newly added applications through the communication channels allocated to them. Activation requests can carry relevant application information. Upon receiving an activation request, the O&M management platform verifies it against the registration request to determine if the application was installed according to the registration request. If so, the verification passes; otherwise, it fails. If the verification passes, the isolated runtime state of the new application is released, allowing it to interact with other applications normally through the O&M management platform. The operations and maintenance management platform assigns pipeline keys to newly added applications. For example, it can randomly generate pipeline keys and send them to the new applications, or the operations and maintenance management platform and the new applications can pre-store the same key table, which includes keys and their corresponding identifiers. The operations and maintenance management platform instructs the new applications on the identifier of the key. The new applications then look up the corresponding key in the key table based on the identifier and use this key as the pipeline key. When the applications and the operations and maintenance management platform interact with data, they encrypt the data based on the pipeline key to ensure data security.
[0050] This invention provides a multi-service application operation and maintenance management method based on low-voltage intelligent circuit breakers, solving the problem of inconsistent scheduling and management of multiple service apps in low-voltage intelligent circuit breakers. The operation and maintenance management platform centrally manages the applications. When a new application is added to the low-voltage intelligent circuit breaker, a registration application is sent to the operation and maintenance management platform through the intelligent device. The platform evaluates the registration application and, upon successful evaluation, allocates resources to install the new application. System resources are allocated to enable the installation of the new application, and communication channels are allocated to achieve data transmission, avoiding data interference when multiple applications interact simultaneously, preventing data loss and leakage, and ensuring the security of data interaction. After installation, the new application is set to an isolated running state. Upon receiving an activation application reported by the new application and passing verification, the isolated running state is lifted, and the application can now run normally, interacting with other applications through the operation and maintenance management platform. To ensure data security, a channel key is allocated to the new application. The unified management of applications through the operation and maintenance management platform effectively improves the security and efficiency of data interaction.
[0051] Example 2
[0052] Figure 3 This is a flowchart of a multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker, provided in Embodiment 2 of the present invention. This embodiment is a refinement based on the above embodiments. Figure 3 As shown, the method includes:
[0053] S201. Receive a registration request for a new application sent by a smart device, the registration request including the characteristic information of the new application.
[0054] S202. If the registration application is approved, resources are allocated to the newly added application, and the allocated resource information is fed back to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuring and updating according to the resource information. The allocated resources include: system resources and communication channels.
[0055] S203. Receive the installation package of the newly added application sent by the smart device, install the newly added application according to the installation package, and set the status of the newly added application to the isolated running state.
[0056] S204. Receive the activation application reported by the newly added application, encrypt the feature information in the registration application according to the preset encryption algorithm, and obtain the ciphertext to be verified.
[0057] Optionally, the activation request may include: ciphertext obtained by encrypting the feature information of the newly added application;
[0058] The newly added application encrypts the feature information used for registration to obtain corresponding ciphertext, and sends the ciphertext as an activation request to the operation and maintenance management platform through the allocated communication channel. A set algorithm can be used to encrypt the feature information; for example, an irreversible hash algorithm can be used to encrypt the feature information into 16 bytes of data.
[0059] In this embodiment, the ciphertext to be verified can be understood as the ciphertext that needs to be verified. After receiving the activation request, the operation and maintenance management platform encrypts the feature information carried in the registration request using a preset encryption algorithm. The preset encryption algorithm is the same as the algorithm used to encrypt newly added applications, and the encryption algorithm can be agreed upon in advance. By encrypting the feature information, the ciphertext to be verified is obtained.
[0060] S205. Determine whether the ciphertext in the activation application matches the ciphertext to be verified. If not, proceed to S206; if yes, proceed to S207.
[0061] The operation and maintenance management platform compares the encrypted text in the activation application with the encrypted text to be verified to ensure the consistency between the newly added application and the registration information.
[0062] S206. Activation application verification failed.
[0063] If the activation application fails verification, the operations and maintenance management platform will directly terminate the newly added application, which will then need to be re-registered. The operations and maintenance management platform can also unregister this application from the registration information list.
[0064] S207. Confirmation that the activation application verification has passed.
[0065] S208. Remove the isolated running status of the newly added application.
[0066] After the activation verification is successful, the application is confirmed to be installed correctly, and the isolation status of the newly added application is lifted.
[0067] S209. Randomly generate a set number of address numbers, each address number corresponding to one byte of feature information.
[0068] In this embodiment, the quantity can be preset based on the byte length of the feature information. For example, if the byte length of the feature information is 16 bytes, the quantity is set to 16. The address number indicates the address where the key information is stored.
[0069] The byte length of the feature information is determined, and a set quantity is determined based on the byte length. A set number of numbers are randomly generated, and these generated numbers are used as address numbers to indicate the key storage address. Each address number corresponds to one byte of the feature information.
[0070] S210. Generate pipe key information based on each address number. The pipe key information is used to indicate the pipe key.
[0071] In this embodiment, the pipe key information can be understood as information used to describe the pipe key, and the pipe key can be determined through the pipe key information. The pipe key information is generated based on each address number; for example, by sorting the address numbers sequentially, the resulting value is the pipe key information.
[0072] The operations and maintenance management platform sends the pipeline key information to the newly added application via the communication pipeline. After receiving the pipeline key information, the newly added application retrieves the corresponding values from the feature information in sequence according to the address numbers indicated in the pipeline key information to form the pipeline key.
[0073] After a new app is activated and running, it receives pipeline key information automatically created and sent by the operations and maintenance management platform. For example, the pipeline key information is a 16-byte dedicated key address, where each byte represents a randomly generated address number, corresponding to the byte address of the app's feature information content. The actual value is extracted from the corresponding address to form the final pipeline key unique to this application. For instance, if the address numbers are 01, 05, 08, and 07, the corresponding values are extracted from addresses 01, 05, 08, and 07 respectively to form the pipeline key. Since the app's feature information is known only to the app itself and the operations and maintenance management platform, the privacy of the key is guaranteed. To balance communication security and efficiency, the business app's interactive messages use a symmetric key block encryption algorithm. The key length is 16 bytes, the block word length is 32 bits, and the encryption rounds are 6. Data encryption is achieved through multi-round mixed bit operations. Each pipeline group is paired with a dedicated key for encrypting and decrypting interactive messages. The operations and maintenance management platform is responsible for managing the dedicated keys for each pipeline group.
[0074] As an optional embodiment, this optional embodiment further optimizes steps A1-A4:
[0075] A1. Receive the first data to be transmitted sent by the first application through the communication channel between the first application and the first application. The first data to be transmitted is generated by the first application according to the set communication protocol format and encrypted according to the corresponding channel key of the first application.
[0076] In this embodiment, the first data to be transmitted can be understood as data that needs to be transmitted. This could be runtime data generated during application operation, data generated from user interaction during application operation, or data generated from processing user interaction data, etc. The first application and the second application are applications managed by the operation and maintenance management platform. The first and second applications first register on the operation and maintenance management platform, and after approval, are installed. The platform then assigns them a pipeline key, allowing the applications to transmit and interact based on the pipeline key. Any application managed by the operation and maintenance management platform can act as the first application to send data or as the second application to receive data.
[0077] After the first application meets the conditions for data transmission, it generates the first data to be transmitted. For example, the first application obtains data of a specified type and determines that the conditions for data transmission are met; or, after obtaining data, the first application determines that the data exceeds a certain threshold and thus meets the conditions for data transmission, and so on. When generating the first data to be transmitted, the first application first determines the data to be transmitted, and then processes this data according to a set communication protocol format to generate data in a specific format. For example, the set communication protocol format defines the format of the data, which must include the sender and receiver. The first application encrypts the generated data in the specific format according to the corresponding pipeline key to obtain the first data to be transmitted. The first application sends the first data to be transmitted to the operation and maintenance management platform through the communication pipeline between the first application and the operation and maintenance management platform, and the operation and maintenance management platform receives the first data to be transmitted sent by the first application through the communication pipeline between the first application and the first application.
[0078] The first data to be transmitted may include at least one of the following information: a receive identifier, a send identifier, a data length, and a data payload. The payload consists of one or more of the following: a control code, data, and a checksum.
[0079] A2. Decrypt the first data to be transmitted according to the pipe key corresponding to the first application, verify the decrypted first data to be transmitted, and if the verification passes, determine the second application as the data receiver.
[0080] The first application's corresponding pipeline key is determined. The operations and maintenance management platform manages one or more applications, each with its own pipeline key. The platform can store the pipeline key for each application using a data table or other methods. Upon receiving the first data to be transmitted from the first application, the pipeline key corresponding to the first application is determined by querying the data table. The first data to be transmitted is decrypted using the pipeline key, and the decrypted data is then verified. For example, if the plaintext data includes verification parameters such as a checksum, the decrypted plaintext data is verified based on these parameters. If the verification passes, the data recipient is determined based on the information carried in the decrypted data, and this recipient is identified as the second application.
[0081] For example, Table 1 provides a communication protocol format that defines the format for data transmission.
[0082] Table 1
[0083] Frame header Send Identifier Code Receive Identifier Code Frame number Data length Data Payload Frame end 0x68 1 Byte 1 Byte 1 Byte 2 Byte Indefinite length 0x16
[0084] Messages are framed with the least significant byte first, followed by the most significant byte. Specifically: the sender identifier (SID) is the identity code of the sending app, and the receiver identifier (RID) is the identity code of the receiving app, assigned by the operations and maintenance management platform upon app registration. The frame sequence number is used to synchronize request and response frames, improving communication reliability; it is maintained by the requesting party, and the sequence number of adjacent frames increments, with a minimum of 1 and a maximum of 0xFF. The data length indicates the length of the following payload. The payload consists of a control code, data, and a checksum. The control code identifies data characteristics and is used by the receiver to identify the purpose of the frame. The checksum is the binary arithmetic sum of all bytes from the first byte of the payload to the bytes preceding the checksum (excluding overflow values exceeding 256), used to detect transmission errors in the data portion. The verification of interactive data mainly includes: frame header and frame tail identification, sending and receiving identification code legality identification, data length verification, and verification code calculation and comparison. The operation and maintenance management platform performs the verification during data transfer. If the verification finds an anomaly, the frame data is discarded, and an alarm notification of data anomaly is sent directly to the sending APP to remind the APP to perform self-check and resend the message.
[0085] A3. Encrypt the decrypted first data to be transmitted using the pipe key corresponding to the second application to obtain the second data to be transmitted.
[0086] In this embodiment, the second data to be transmitted can be understood as data that needs to be transmitted to the second application. After determining that the recipient is the second application, the operation and maintenance management platform determines the pipeline key corresponding to the second application by querying data tables, etc., and encrypts the decrypted first data to be transmitted according to this pipeline key. The resulting ciphertext data is the second data to be transmitted.
[0087] A4. The second data to be transmitted is sent to the second application through the communication channel between the second application and the second application, so that the second application can decrypt the second data to be transmitted according to the corresponding channel key to obtain the transmitted data.
[0088] The operation and maintenance management platform sends the second data to be transmitted to the second application through a communication channel. After receiving the second data, the second application can decrypt it using the corresponding channel key to obtain the plaintext data, which is the data transmitted by the first application.
[0089] For example, Figure 4 This provides a schematic diagram of data interaction management. The data interaction process of a business application is as follows: Figure 4As shown: When the first application APP1 needs to send data to the second application APP2, it first frames the data into plaintext according to the communication protocol format and encrypts it using a dedicated pipe key A (the resulting data is the first data to be transmitted). Then, it sends the encrypted data to the operation and maintenance management platform via an independent communication pipe. Upon receiving the encrypted data, the operation and maintenance management platform first uses the paired pipe key A to decrypt and verify the data, ensuring the reliability of the frame information. Then, it uses the message identifier to query the recipient as APP2, selects the paired pipe key B to re-encrypt the forwarded data (the resulting data is the second data to be transmitted), and sends the encrypted message to the destination through APP2's independent communication pipe. APP2, upon receiving the encrypted data, uses its dedicated pipe key B to decrypt it and obtain the required data, and vice versa. Because the data within the communication pipes of each application is encrypted during the interaction process, and the keys are exclusive and cannot be shared, the security and reliability of the communication data can be effectively ensured: even if the data is stolen by a third party, it cannot be decrypted to obtain the plaintext; even if the data is tampered with, it cannot be incorrectly received through verification.
[0090] The method provided in this application, for management and security reasons, eliminates the interface for direct external communication of the APP. Instead, the operation and maintenance management platform is responsible for data reading and writing or command control with users or superior devices. External communication of the business APP must be relayed by the platform.
[0091] As an optional embodiment, this optional embodiment further optimizes and includes B1-B2:
[0092] B1. Periodically send online query requests to each application through the communication channel of at least one managed application, and determine the running status of the application based on the response to the online query request.
[0093] In this embodiment, an online query request can be understood as a request to determine whether the application is running normally. The online query request may or may not carry information, only instructing the application to respond. The application's running status can be normal, abnormal, etc.
[0094] The operations and maintenance management platform identifies each application it manages. For each application, it periodically generates online query requests according to a set schedule and sends these requests to the application through its corresponding communication channel. The schedule for sending online query requests to all applications can be the same or different. For example, applications can be categorized by type, with applications of the same type having the same schedule. For ease of management, the sending schedule for online query requests to all applications can be set to the same schedule. Each application responds to the online query request. The operations and maintenance management platform analyzes the received responses and determines the application's operational status based on whether an application has responded. For example, receiving a response indicates the application is operating normally, while not receiving a response indicates the application is operating abnormally.
[0095] As an optional embodiment, this optional embodiment further optimizes the determination of the application's running status based on the response to the online query request, including C1-C2:
[0096] C1. If a response to an online inquiry request is received from the application within a preset time, the application is considered to be running normally.
[0097] In this embodiment, the preset time can be set according to requirements, for example, the preset time is 1 second, 5 seconds, etc. The preset time can be set according to the sending cycle of online inquiry requests. The preset time is less than the sending cycle of sending online inquiry requests, for example, the preset time = 0.5 * cycle.
[0098] For each application, a timer is started after an online query request is sent to it, and it is determined whether the application returns a corresponding response within a preset time. If a response to the online query request is received from the application within the preset time, the application is determined to be running normally.
[0099] C2. If no response to the online query request is received from the application within the preset time, the operating system interface is called to read the application's running information, and the running status of the application is determined based on the running information.
[0100] If no response to the online query request is received from the application within a preset time, the operating system interface is invoked to read the application's runtime information. The runtime information may include thread ID, name, running status, CPU utilization, stack space, and stack pointer. The runtime information is analyzed to determine the application's runtime status. For example, if the application's CPU utilization is too high, the application's runtime status is determined to be abnormal; if the application's runtime information is all normal, the application's runtime status is determined to be normal.
[0101] B2. If the application's running status is abnormal for a preset number of consecutive times, call the system interface to restart the application whose running status is abnormal.
[0102] If, after sending multiple online query requests to the application, the application's running status remains abnormal for a preset number of consecutive times, a system interface is invoked to restart the application. After the application restarts, online query requests continue to be sent periodically to monitor its running status.
[0103] As an optional embodiment, this optional embodiment is further optimized to include: if the number of consecutive restarts of an application with an abnormal running state reaches a preset threshold and the running state of the application is still abnormal, the system restart interface is called to restart the operating system.
[0104] In this embodiment, the preset number of restarts threshold can be set according to requirements, for example, 3, 4, etc. After restarting an application whose running state is abnormal, the number of restarts is recorded, and the running state of the application continues to be monitored. If the running state of the application is still abnormal after a preset number of consecutive restarts, the application is restarted again. If the number of consecutive restarts of the application reaches the preset number of restarts threshold, and the running state of the application is still abnormal, the system restart interface is called to restart the operating system. Restarting the operating system can be a soft reboot of the operating system.
[0105] If the application returns to normal operation, the recorded restart count will be reset to zero; the recorded application restart count can also be reset to zero after the operating system is restarted.
[0106] The operation and maintenance management platform in this embodiment also has APP operation status management and rapid anomaly handling functions, which are used to monitor whether the operation of each business APP is abnormal and to make early warning handling. Figure 5 This document provides a flowchart illustrating the process of monitoring application runtime status and handling anomalies. The operation and maintenance management platform monitors the application's runtime status and handles anomalies. The principles of runtime status monitoring and anomaly handling are the same for each application. Figure 5 Taking the monitoring of an application's runtime status and exception handling as an example, the specific implementation steps include:
[0107] S1. Broadcast an online query request to the APP's communication channel.
[0108] During the operation of the low-voltage intelligent circuit breaker, the operation and maintenance management platform will periodically broadcast online query requests to the communication channels of each APP. The periodicity T is configurable, with a default value of 20 seconds. The business APP needs to respond within 0.5*T time after receiving the request to indicate that it is still in an online operating state.
[0109] S2. Determine if any app has not responded or if the response timed out. If yes, proceed to S3; otherwise, proceed to S11.
[0110] S3. Call the operating system interface to read the APP's running information.
[0111] The APP's running information includes at least one of the following: thread ID, name, running status, CPU usage, stack space, and stack pointer; by reading the running information, it determines whether there are abnormal situations such as thread exit, excessive CPU usage, or stack out of bounds, and records running alarms.
[0112] S4. Determine the running status of the APP based on the running information. If there is an abnormality, execute S5; if there is a normality, execute S11.
[0113] S5. Accumulate the error count for the APP.
[0114] The error count can be incremented by a preset value, for example, by 1.
[0115] S6. Determine if the APP's exception count is greater than the preset number. If yes, execute S7; otherwise, execute S11.
[0116] S7. Call the system interface to restart the corresponding APP.
[0117] S8. Accumulate the number of times the app has been restarted.
[0118] The number of restarts can be incremented by a preset value, for example, by 1.
[0119] S9. Determine whether the number of times the APP has been restarted exceeds the preset threshold. If yes, execute S10; otherwise, execute S12.
[0120] S10: Call the system restart interface to restart the operating system, and then execute S12.
[0121] S11. Clear the app's error count and restart count.
[0122] S12, End.
[0123] For example, if the app continues to exhibit abnormal behavior after three consecutive query requests, the operations and maintenance management platform will call the system interface to restart the corresponding app. If the problem persists after three consecutive app restarts, the operations and maintenance management platform will call the system restart interface to perform a soft restart of the operating system.
[0124] As an optional embodiment, this optional embodiment is further optimized by: performing a hardware watchdog feeding operation according to a preset period, so that the watchdog monitoring loop controls the operating system to restart after the operation and maintenance management platform does not detect the watchdog feeding operation within a preset time range.
[0125] The operation and maintenance management platform feeds the watchdog at preset intervals. If the watchdog feeding operation is not performed within a preset time range, the watchdog monitoring loop will determine that the operation and maintenance management platform is abnormal and control the operating system to restart.
[0126] To ensure the reliable operation of the operation and maintenance management platform, an independent hardware watchdog monitoring loop is designed. During operation, the platform needs to periodically send a "feed" signal to the watchdog loop. If no "feed" signal is detected within a preset time range, the platform is considered faulty, and the watchdog loop resets the main chip, causing the operating system to restart. The main chip is the hardware foundation for the entire software operation, and the operating system runs on it. For example, if the platform feeds the watchdog every 10 seconds, and fails to do so for 20 consecutive seconds, the watchdog loop will determine an anomaly and reset the main chip, causing the operating system to restart. This ensures that the intelligent circuit breaker can respond and handle any operational anomalies immediately, eliminating the need for manual maintenance.
[0127] As the central hub for multi-service APP operation and maintenance management, the operation and maintenance management platform also has functions such as APP upgrade management, APP business traffic monitoring management, APP access object statistics management, APP software version management, and circuit breaker cumulative running time and operation event record management.
[0128] This invention provides a multi-service application operation and maintenance management method based on low-voltage intelligent circuit breakers, solving the problem of the inability to uniformly schedule and manage multiple service apps in low-voltage intelligent circuit breakers. By constructing an independent operation and maintenance management platform within the low-voltage intelligent circuit breaker, it enables interaction with the operating system, communication with users or upper-level devices, and operation and maintenance management of each app. This effectively improves the operational reliability and operation and maintenance efficiency of the circuit breaker, reduces manual management input, and facilitates the expansion of new service apps or functional requirements, resulting in a higher level of intelligence. The app security loading management function of the operation and maintenance management platform can realize information authentication, resource allocation, secure loading, and operation management of new service apps, providing stronger security, more flexible resource allocation methods, and higher management efficiency. Furthermore, with the help of the system's dynamic distributed loading technology, the operation and expansion of service apps can be made more independent and convenient. The data interaction management function of the operation and maintenance management platform can realize communication decoupling and secure encryption management of data interaction between service apps, combining simplicity, speed, and security, effectively solving the problem of insufficient communication security between multiple service apps and improving the confidentiality and integrity of interactive data. The operation and maintenance management platform's APP operation status management function can rely on the current software architecture to more conveniently realize real-time monitoring of the operation status of subordinate business APPs, and has the advantages of rapid identification and autonomous handling of abnormal conditions, which can further improve the reliability of circuit breaker operation and reduce operation and maintenance management costs.
[0129] Example 3
[0130] Figure 6 This is a schematic diagram of the structure of a multi-service application operation and maintenance management system based on a low-voltage intelligent circuit breaker, provided in Embodiment 3 of the present invention. Figure 6 As shown, the system includes: an operation and maintenance management platform 31 and an application 32, which run on an operating system deployed on a low-voltage intelligent circuit breaker.
[0131] The operation and maintenance management platform 31 is used to receive a registration application for a newly added application 32 sent by a smart device. The registration application includes the characteristic information of the newly added application 32. If the registration application passes the evaluation, the platform allocates resources to the newly added application 32 and feeds back the allocated resource information to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuration update based on the resource information. The allocated resources include system resources and communication channels. The platform also receives the installation package of the newly added application sent by the smart device, installs the newly added application 32 according to the installation package, and sets the status of the newly added application 32 to an isolated running state.
[0132] The newly added application 32 is used to submit an activation request to the operation and maintenance management platform 31;
[0133] The operation and maintenance management platform 31 is used to receive the activation application reported by the newly added application 32, verify the activation application according to the registration application, and if the verification is successful, release the isolated running state of the newly added application 32 and allocate a pipeline key to the newly added application 32 for secure data interaction between applications.
[0134] A multi-service application operation and maintenance management system based on low-voltage intelligent circuit breakers typically includes one or more applications, each of which is managed uniformly by the operation and maintenance management platform. When the system is first deployed, the number of applications may be 0. During use, new applications are continuously deployed using the methods provided in the embodiments of this application, increasing the number of applications in the system. Figure 4 Take several applications as examples.
[0135] This invention provides a multi-service application operation and maintenance management system based on low-voltage intelligent circuit breakers, solving the problem of inconsistent scheduling and management of multiple service apps in low-voltage intelligent circuit breakers. The operation and maintenance management platform centrally manages the applications. When a new application is added to the low-voltage intelligent circuit breaker, a registration application is sent to the operation and maintenance management platform via the intelligent device. The platform evaluates the registration application and, upon successful evaluation, allocates resources to install the new application. System resources are allocated to enable installation, and communication channels are allocated to facilitate data transmission, preventing data interference when multiple applications interact simultaneously, thus avoiding data loss and leakage and ensuring data security. After installation, the new application is set to an isolated running state. Upon receiving and verifying an activation request from the new application, the isolated running state is lifted, allowing the application to run normally and interact with other applications through the operation and maintenance management platform. To ensure data security, a channel key is allocated to the new application. The unified management of applications through the operation and maintenance management platform effectively improves the security and efficiency of data interaction.
[0136] Optionally, the feature information may include at least one of the following: application name, memory resources used, and number of threads.
[0137] Optionally, the activation request includes: ciphertext obtained by encrypting the feature information of the newly added application;
[0138] Accordingly, the operation and maintenance management platform 31 includes:
[0139] The feature information encryption module is used to encrypt the feature information in the registration application according to a preset encryption algorithm and key to obtain the ciphertext to be verified.
[0140] The verification module is used to compare whether the ciphertext in the activation application is consistent with the ciphertext to be verified. If they are consistent, the activation application is determined to have passed the verification; otherwise, the activation application is determined to have failed the verification.
[0141] Optionally, the operation and maintenance management platform 31 includes:
[0142] The address number generation module is used to randomly generate a set number of address numbers based on the feature information, and each address number corresponds to one byte.
[0143] The pipeline key generation module is used to generate pipeline key information based on each of the address numbers, and the pipeline key information is used to indicate the pipeline key.
[0144] Optionally, the first application 31 is used to generate and encrypt the first data to be transmitted according to the set communication protocol format and the corresponding pipeline key of the first application, and send the first data to be transmitted to the operation and maintenance management platform through the communication pipeline between the first application and the operation and maintenance management platform 31.
[0145] The operation and maintenance management platform 31 is used to decrypt the first data to be transmitted according to the pipeline key corresponding to the first application, verify the decrypted first data to be transmitted, and if the verification passes, determine the second application as the data receiver; encrypt the decrypted first data to be transmitted according to the pipeline key corresponding to the second application to obtain the second data to be transmitted; and send the second data to be transmitted to the second application through the communication pipeline between the platform and the second application.
[0146] The second application is used to decrypt the second data to be transmitted according to the corresponding pipeline key to obtain the transmitted data.
[0147] Optionally, the operation and maintenance management platform 31 includes:
[0148] The running status determination module is used to periodically send online query requests to each of the managed applications through the communication channels of at least one application, and determine the running status of the application based on the response to the online query request.
[0149] The application restart module is used to call the system interface to restart the application if the application's running state is abnormal for a preset number of consecutive times.
[0150] Optionally, the running status determination module includes:
[0151] The running status determination unit is used to determine that the running status of the application is normal if a response to the online query request is received from the application within a preset time.
[0152] The running information determination unit is used to call the operating system interface to read the running information of the application if no response to the online query request is received from the application within a preset time, and to determine the running status of the application based on the running information.
[0153] Optionally, the operation and maintenance management platform 31 further includes:
[0154] The system restart module is used to call the system restart interface to restart the operating system if the number of consecutive restarts of the application whose running state is abnormal reaches a preset threshold and the application's running state is still abnormal.
[0155] Optionally, the operation and maintenance management platform 31 is further used for:
[0156] The hardware watchdog is fed according to a preset cycle, so that if the watchdog monitoring loop does not detect the operation and maintenance management platform performing the feeding operation within a preset time range, the operating system is controlled to restart.
[0157] The multi-service application operation and maintenance management system based on low-voltage intelligent circuit breakers provided in this invention can execute the multi-service application operation and maintenance management method based on low-voltage intelligent circuit breakers provided in any embodiment of this invention, and has the corresponding functional modules and beneficial effects of the execution method.
[0158] Example 4
[0159] Figure 7 A schematic diagram of an electronic device 40 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.
[0160] like Figure 7As shown, the electronic device 40 includes at least one processor 41 and a memory, such as a read-only memory (ROM) 42 or a random access memory (RAM) 43, communicatively connected to the at least one processor 41. The memory stores computer programs executable by the at least one processor. The processor 41 can perform various appropriate actions and processes based on the computer program stored in the ROM 42 or loaded into the RAM 43 from storage unit 48. The RAM 43 may also store various programs and data required for the operation of the electronic device 40. The processor 41, ROM 42, and RAM 43 are interconnected via a bus 44. An input / output (I / O) interface 45 is also connected to the bus 44.
[0161] Multiple components in electronic device 40 are connected to I / O interface 45, including: input unit 46, such as keyboard, mouse, etc.; output unit 47, such as various types of monitors, speakers, etc.; storage unit 48, such as disk, optical disk, etc.; and communication unit 49, such as network card, modem, wireless transceiver, etc. Communication unit 49 allows electronic device 40 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.
[0162] Processor 41 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 41 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 41 performs the various methods and processes described above, such as the multi-service application operation and maintenance management method based on low-voltage smart circuit breakers.
[0163] In some embodiments, the multi-service application operation and maintenance management method based on low-voltage smart circuit breakers can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 48. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 40 via ROM 42 and / or communication unit 49. When the computer program is loaded into RAM 43 and executed by processor 41, one or more steps of the multi-service application operation and maintenance management method based on low-voltage smart circuit breakers described above can be performed. Alternatively, in other embodiments, processor 41 can be configured to execute the multi-service application operation and maintenance management method based on low-voltage smart circuit breakers by any other suitable means (e.g., by means of firmware).
[0164] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.
[0165] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.
[0166] This invention provides a computer program product, which includes a computer program that, when executed by a processor, implements the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any embodiment of this invention.
[0167] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.
[0168] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).
[0169] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.
[0170] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through a communication network. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.
[0171] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.
[0172] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.
Claims
1. A multi-service application operation and maintenance management method based on low-voltage intelligent circuit breakers, characterized in that, The method, applied to an operation and maintenance management platform running on an operating system deployed on a low-voltage intelligent circuit breaker, includes: Receive a registration request for a new application sent by a smart device, wherein the registration request includes the characteristic information of the new application; If the registration application is approved, resources are allocated to the newly added application, and the allocated resource information is fed back to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuring and updating according to the resource information. The allocated resources include: system resources and communication channels. Receive the installation package of the newly added application sent by the smart device, install the newly added application according to the installation package, and set the status of the newly added application to the isolated running state; The system receives activation requests from newly added applications, verifies the activation requests based on the registration requests, and if the verification passes, releases the isolated running state of the newly added applications and assigns a pipeline key to the newly added applications to enable secure data interaction between applications. Assigning a pipeline key to the newly added application includes: A set number of address numbers are randomly generated, and each address number corresponds to one byte of feature information; Pipe key information is generated based on each of the address numbers, and the pipe key information is used to indicate the pipe key.
2. The method according to claim 1, characterized in that, The feature information includes at least one of the following: application name, memory resources used, and number of threads.
3. The method according to claim 1, characterized in that, The activation request includes: ciphertext obtained by encrypting the feature information of the newly added application; Accordingly, the step of verifying the activation application based on the registration application includes: The feature information in the registration application is encrypted according to a preset encryption algorithm to obtain the ciphertext to be verified. Determine whether the ciphertext in the activation request is consistent with the ciphertext to be verified. If they are consistent, the activation request is deemed to have passed verification; otherwise, the activation request is deemed to have failed verification.
4. The method according to claim 1, characterized in that, Also includes: The system receives first data to be transmitted sent by the first application through a communication channel between the first application and the first application. The first data to be transmitted is generated by the first application according to a set communication protocol format and encrypted according to the channel key corresponding to the first application. The first data to be transmitted is decrypted according to the pipe key corresponding to the first application. The decrypted first data to be transmitted is verified. If the verification passes, the second application is determined as the data receiver. The decrypted first data to be transmitted is encrypted using the pipe key corresponding to the second application to obtain the second data to be transmitted. The second data to be transmitted is sent to the second application through a communication channel between the second application and the second application, so that the second application can decrypt the second data to be transmitted according to the corresponding channel key to obtain the transmitted data.
5. The method according to claim 1, characterized in that, Also includes: The system periodically sends online query requests to each of the managed applications through the communication channels of at least one application, and determines the running status of the applications based on the responses to the online query requests. If the application's running status is abnormal for a preset number of consecutive times, the system interface is called to restart the application whose running status is abnormal.
6. The method according to claim 5, characterized in that, Determining the application's running status based on the response to the online query request includes: If a response to the online query request is received from the application within a preset time, the application is determined to be running normally. If no response to the online query request is received from the application within a preset time, the operating system interface is invoked to read the application's running information, and the running status of the application is determined based on the running information.
7. The method according to claim 5, characterized in that, Also includes: If the number of consecutive restarts of an application whose running status is abnormal reaches a preset threshold, and the application's running status remains abnormal, the system restart interface is called to restart the operating system.
8. The method according to claim 1, characterized in that, Also includes: The hardware watchdog is fed according to a preset cycle, so that if the watchdog monitoring loop does not detect the operation and maintenance management platform performing the feeding operation within a preset time range, the operating system is controlled to restart.
9. A multi-service application operation and maintenance management system based on low-voltage intelligent circuit breakers, characterized in that, include: The operation and maintenance management platform and application run on an operating system, which is deployed on the low-voltage intelligent circuit breaker. The operation and maintenance management platform is used to receive registration applications for newly added applications sent by smart devices, and the registration applications include the characteristic information of the newly added applications; If the registration application is approved, resources are allocated to the newly added application, and the allocated resource information is fed back to the smart device so that the smart device can obtain the installation package of the newly added application generated by configuration update based on the resource information. The allocated resources include: system resources and communication channels; the system receives the installation package of the newly added application sent by the smart device, installs the newly added application according to the installation package, and sets the status of the newly added application to isolated running state; The newly added application is used to submit an activation request to the operation and maintenance management platform; The operation and maintenance management platform is used to receive the activation application reported by the newly added application, verify the activation application according to the registration application, and if the verification is successful, release the isolated running state of the newly added application and allocate a pipeline key to the newly added application to enable secure data interaction between applications. The operation and maintenance management platform includes: The address number generation module is used to randomly generate a set number of address numbers based on the feature information, and each address number corresponds to one byte. The pipeline key generation module is used to generate pipeline key information based on each of the address numbers, and the pipeline key information is used to indicate the pipeline key.
10. The system according to claim 9, characterized in that, The activation request includes: ciphertext obtained by encrypting the feature information of the newly added application; Accordingly, the operation and maintenance management platform includes: The feature information encryption module is used to encrypt the feature information in the registration application according to a preset encryption algorithm to obtain the ciphertext to be verified. The verification module is used to compare whether the ciphertext in the activation application is consistent with the ciphertext to be verified. If they are consistent, the activation application is determined to have passed the verification; otherwise, the activation application is determined to have failed the verification.
11. The system according to claim 9, characterized in that, The first application is used to generate and encrypt the first data to be transmitted according to the set communication protocol format and the corresponding pipeline key of the first application, and send the first data to be transmitted to the operation and maintenance management platform through the communication pipeline between the first application and the operation and maintenance management platform. The operation and maintenance management platform is used to decrypt the first data to be transmitted according to the pipeline key corresponding to the first application, verify the decrypted first data to be transmitted, and if the verification passes, determine the second application as the data receiver. The decrypted first data to be transmitted is encrypted using the pipe key corresponding to the second application to obtain the second data to be transmitted; the second data to be transmitted is then sent to the second application through the communication pipe between the application and the second application. The second application is used to decrypt the second data to be transmitted according to the corresponding pipeline key to obtain the transmitted data.
12. The system according to claim 9, characterized in that, The operation and maintenance management platform includes: The running status determination module is used to periodically send online query requests to each of the managed applications through the communication channels of at least one application, and determine the running status of the application based on the response to the online query request. The application restart module is used to call the system interface to restart the application if the application's running state is abnormal for a preset number of consecutive times.
13. The system according to claim 12, characterized in that, The operating status determination module includes: The running status determination unit is used to determine that the running status of the application is normal if a response to the online query request is received from the application within a preset time. The running information determination unit is used to call the operating system interface to read the running information of the application if no response to the online query request is received from the application within a preset time, and to determine the running status of the application based on the running information.
14. The system according to claim 12, characterized in that, The operation and maintenance management platform also includes: The system restart module is used to call the system restart interface to restart the operating system if the number of consecutive restarts of the application whose running state is abnormal reaches a preset threshold and the application's running state is still abnormal.
15. The system according to claim 9, characterized in that, The operation and maintenance management platform is also used for: The hardware watchdog is fed according to a preset cycle, so that if the watchdog monitoring loop does not detect the operation and maintenance management platform performing the feeding operation within a preset time range, the operating system is controlled to restart.
16. An electronic device, characterized in that, The electronic device includes: At least one processor, and a memory communicatively connected to said at least one processor; The memory stores a computer program that can be executed by the at least one processor, which is then executed by the at least one processor to enable the at least one processor to execute the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any one of claims 1-8.
17. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that cause a processor to execute the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker as described in any one of claims 1-8.
18. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, implements the multi-service application operation and maintenance management method based on a low-voltage intelligent circuit breaker according to any one of claims 1-8.
Citation Information
Patent Citations
Message interaction device and method for low-voltage intelligent circuit breaker
CN116191665A
Intelligent switch control unit, hardware architecture, function implementation method and intelligent switch
CN116723235A