Operation auditing method and device of hydropower station monitoring system, medium and product

Abstract

The embodiment of the invention discloses an operation auditing method and device of a hydropower station monitoring system, a medium and a product. The method comprises the following steps: analyzing instruction data of a hydropower station monitoring system in real time, marking key operation in the instruction data, and obtaining a key operation command; performing signature confirmation on the key operation command by using a private key of an operator corresponding to the key operation command; after signature confirmation is completed, generating a block chain transaction based on the key operation command and signature data corresponding to the key operation command, and broadcasting the block chain transaction to a block chain network; after all block chain nodes in the block chain network reach a consensus for the block chain transaction based on the newly generated operation command block, adding a link corresponding to the block chain transaction to the monitoring instruction block chain; and carrying out real-time monitoring and auditing on the updated block in the monitoring instruction block chain. The method can realize non-repudiation, traceability and non-tampering of the operation process of the hydropower station monitoring system.

Description

Technical Field

[0001] The present disclosure relates to the technical field of hydropower station construction, and in particular to an operation audit method, device, medium and product of a hydropower station monitoring system. Background Art

[0002] With the continuous improvement of the informationization and automation level of the power system, the monitoring system of the hydropower station has gradually become the core hub for the safe and stable operation of the power grid. At present, the monitoring system of the hydropower station collects key parameters such as water conditions and unit status in real time through various sensors, and transmits them to the monitoring center through the communication network for unified monitoring, analysis and dispatching control. Among them, the core control behavior of the monitoring system of the hydropower station is to directly affect the safe and stable operation of the power station by issuing key operation commands.

[0003] At present, the relevant technologies mainly issue key operation commands through manual operation on the monitoring system interface, or audit and confirm key operation commands through an independent security authentication system, and adopt some security communication protocols to ensure the integrity of commands during the communication between the monitoring system and the on-site equipment. The relevant technologies have the risk of operational errors, and it is difficult to strictly identify the identity of the operator, resulting in the inability to verify the actual operation facts. In addition, the monitoring system is complex to operate and has poor real-time performance. In the case of tampering with the authentication information, the operator's operation behavior cannot be confirmed. The communication protocol algorithm is simple and easy to be analyzed and cracked. The authenticity of the source of key operation commands cannot be ensured. There are many risk points for issuing commands, operators can easily tamper with them, and they cannot be traced, and the security and stability of the power grid are poor. Summary of the invention

[0004] In view of this, the embodiments of the present disclosure provide an operation audit method, device, medium and product for a hydropower station monitoring system, which can make the operation process of the hydropower station monitoring system non-repudiable, traceable and non-tamperable, improve the security protection capability of key operation commands, and ensure the safe and stable operation of the power grid.

[0005] In a first aspect, the present disclosure provides an operation audit method of a hydropower station monitoring system, which adopts the following technical solution:

[0006] Analyze the command data of the hydropower station monitoring system in real time, mark the key operations in the command data, and obtain the key operation commands;

[0007] Use the private key of the operator corresponding to the key operation command to sign and confirm the key operation command;

[0008] After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, and the blockchain transaction is broadcasted to the blockchain network;

[0009] After all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, a link corresponding to the blockchain transaction is added to the monitoring instruction blockchain;

[0010] The updated blocks in the monitoring instruction blockchain are monitored and audited in real time.

[0011] In some embodiments, using a private key of an operator corresponding to the key operation command to sign and confirm the key operation command includes:

[0012] Based on the key operation command, a prompt message is sent to the client to prompt the operator to use the private key to sign and confirm the key operation command;

[0013] Receiving signature data sent by the client based on signature confirmation completed by the operator;

[0014] After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, including:

[0015] When the authenticity of the signature data is verified, the key operation command and the signature data corresponding to the key operation command are packaged into a blockchain transaction.

[0016] In some embodiments, after all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, adding a link corresponding to the blockchain transaction to the monitoring instruction blockchain includes:

[0017] After the blockchain node receives the blockchain transaction corresponding to the key operation command, triggering a consensus process;

[0018] Confirming the newly generated operation command block among the trusted nodes of the blockchain node through a fast consensus algorithm;

[0019] When the newly generated operation command block is confirmed, the newly generated operation command block is linked to the monitoring instruction blockchain to complete the chain entry and evidence storage.

[0020] In some embodiments, the method further comprises:

[0021] Based on the operation command feature extraction rules, structured feature data is extracted from the historical operation command data to form a training sample set;

[0022] Dividing the structured feature data into a plurality of portions to obtain a plurality of feature data slices;

[0023] Distribute and store the plurality of feature data slices to a plurality of blockchain nodes;

[0024] Inputting the sample data in the training sample set into an initial operation command evaluation model, and training the initial operation command evaluation model using federated learning to obtain a trained operation command evaluation model;

[0025] When a new operation command block is submitted to the blockchain network after being digitally signed, the blockchain node uses the trained operation command evaluation model to evaluate and package the new operation command block in real time;

[0026] When it is confirmed that the new operation command block is a safe block, the new operation command block is linked to the monitoring instruction blockchain.

[0027] In some embodiments, the sample data in the training sample set is input into an initial operation command evaluation model, and the initial operation command evaluation model is trained using federated learning to obtain a trained operation command evaluation model, including:

[0028] Using the plurality of blockchain nodes as participants in federated learning, and training the initial operation command evaluation model locally using sample data in the training sample set;

[0029] Using a differential privacy algorithm, each of the blockchain nodes is independently trained;

[0030] After each of the blockchain nodes has completed independent training, the model parameters are uploaded to the federated aggregation server;

[0031] The trained operation command evaluation model is generated by the federated aggregation server based on the model parameter aggregation.

[0032] In some embodiments, real-time monitoring and auditing of updated blocks in the monitoring instruction blockchain includes:

[0033] Monitor the operation data of the updated block in the monitoring instruction blockchain in real time;

[0034] Parsing the block content of the update block based on the operation data to obtain a parsing result;

[0035] At least one of the command operator, operation object or operation parameter of the update block is obtained according to the analysis result.

[0036] In some embodiments, the method further comprises:

[0037] Based on the operation compliance rule base, the operation data of the update block monitored in real time is matched and checked to obtain a matching check result; wherein the operation compliance rule base contains at least one of the time, amplitude, frequency limit, operation precondition, and operation mutual exclusion constraint of different types of operations;

[0038] When it is confirmed based on the matching verification result that the operation data of the updated block does not meet the specification requirements, a graded warning is issued based on the degree of deviation of the operation data in combination with a machine learning algorithm.

[0039] In a second aspect, the embodiment of the present disclosure further provides an operation audit device of a hydropower station monitoring system, which adopts the following technical solution:

[0040] An acquisition unit is configured to analyze the command data of the hydropower station monitoring system in real time, mark key operations in the command data, and acquire key operation commands;

[0041] A signature confirmation unit, configured to use a private key of an operator corresponding to the key operation command to sign and confirm the key operation command;

[0042] A generating unit, configured to generate a blockchain transaction based on the key operation command and the signature data corresponding to the key operation command after completing the signature confirmation, and broadcast the blockchain transaction to the blockchain network;

[0043] A linking unit is configured to add a link corresponding to the blockchain transaction to a monitoring instruction blockchain after all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block;

[0044] The monitoring and auditing unit is configured to monitor and audit the updated blocks in the monitoring instruction blockchain in real time.

[0045] In a third aspect, the embodiments of the present disclosure further provide a computer device, which adopts the following technical solution:

[0046] The computer device comprises:

[0047] at least one processor; and,

[0048] a memory communicatively connected to the at least one processor; wherein,

[0049] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute any of the above-mentioned operation audit methods of the hydropower station monitoring system.

[0050] In a fourth aspect, an embodiment of the present disclosure further provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to execute any of the above-mentioned operation audit methods of the hydropower station monitoring system.

[0051] In a fifth aspect, an embodiment of the present disclosure further provides a computer program product, including a computer program / instruction, which implements the steps of any of the above methods when executed by a processor.

[0052] The operation audit method of the hydropower station monitoring system provided by the embodiment of the present disclosure achieves the goal of non-repudiation and traceability of the operation process based on blockchain and digital signatures, and carries out systematic design in terms of identifying key operation commands, building a monitoring instruction blockchain, and realizing real-time security auditing. It specifically solves the technical difficulties in the current hydropower station monitoring system in the operation compliance management, and can achieve the non-repudiation, traceability, and non-tamperability of the operation process of the hydropower station monitoring system, improves the security protection capability of key operation commands, and ensures the safe and stable operation of the power grid.

[0053] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the following preferred embodiments are specifically cited and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0055] Figure 1 A schematic diagram of a flow chart of an operation audit method of a hydropower station monitoring system provided by an embodiment of the present disclosure;

[0056] Figure 2 A schematic diagram of the structure of an operation audit device of a hydropower station monitoring system provided by an embodiment of the present disclosure;

[0057] Figure 3 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0058] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0059] It should be clear that the following embodiments of the present disclosure are described by specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other in the absence of conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0060] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.

[0061] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0062] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

[0063] Figure 1 The flowchart of the operation audit method of the hydropower station monitoring system provided by the embodiment of the present disclosure is as follows:

[0064] S101. Analyze the command data of the hydropower station monitoring system in real time, mark key operations in the command data, and obtain key operation commands.

[0065] S102: Use the private key of the operator corresponding to the key operation command to sign and confirm the key operation command.

[0066] By establishing a corresponding mapping relationship between operators and their private keys, when the hydropower station monitoring system is initialized, the CA organization (the certificate issuing organization, which is a third-party organization responsible for the management and issuance of certificates and is a widely trusted organization) issues a digital certificate to each operator with operating authority. The digital certificate contains the operator's identity information and public key, and the public key is stored publicly, and the private key paired with the public key is kept by the operator himself.

[0067] When the hydropower station monitoring system recognizes a key operation command, it immediately triggers the operator's identity authentication process through passwords, faces, fingerprints, etc. When the operator's identity authentication is passed, the operator takes out the private key from a personal key device (such as a USB Key).

[0068] The operator's private key is loaded into the hydropower station monitoring system, and a digital signature is generated from the private key and the original text of the key operation command using a cryptographic algorithm (such as RSA, SM2). The digital signature and the original text of the key operation command are interdependent. If the content of either side is changed, the signature verification will fail.

[0069] S103. After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, and the blockchain transaction is broadcast to the blockchain network.

[0070] S104: After all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, a link corresponding to the blockchain transaction is added to the monitoring instruction blockchain.

[0071] S105. Monitor and review the updated blocks in the monitoring instruction blockchain in real time.

[0072] The operation audit method of the hydropower station monitoring system provided by the embodiment of the present disclosure achieves the goal of non-repudiation and traceability of the operation process based on blockchain and digital signatures, and carries out systematic design in terms of identifying key operation commands, building a monitoring instruction blockchain, and realizing real-time security auditing. It specifically solves the technical difficulties in the current hydropower station monitoring system in the operation compliance management, and can achieve the non-repudiation, traceability, and non-tamperability of the operation process of the hydropower station monitoring system, improves the security protection capability of key operation commands, and ensures the safe and stable operation of the power grid.

[0073] In some embodiments, using a private key of an operator corresponding to the key operation command to sign and confirm the key operation command includes:

[0074] Based on the key operation command, a prompt message is sent to the client to prompt the operator to use the private key to sign and confirm the key operation command;

[0075] Receiving signature data sent by the client based on signature confirmation completed by the operator;

[0076] After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, including:

[0077] When the authenticity of the signature data is verified, the key operation command and the signature data corresponding to the key operation command are packaged into a blockchain transaction.

[0078] Optionally, the signing process needs to be completed in a physically isolated authentication terminal that meets security level requirements. Even if the hydropower station monitoring system is hacked, malicious code cannot be implanted in the authentication terminal.

[0079] Optionally, a key information summary of the key operation command that the operator is about to sign is clearly displayed on the authentication terminal interface. The key information summary includes information such as operation category, target object, key parameters, etc., for the operator to confirm and compare.

[0080] Optionally, after the operator confirms that the information is correct, the loaded private key is used to complete the signing action, and the authentication terminal transmits the signature result data back to the hydropower station monitoring system through a secure channel. In order to prevent the middleman from launching a network attack during the signing process, a one-time session key encryption is used in the return process.

[0081] Optionally, after receiving the signature data transmitted back, the monitoring system first retrieves the public key of the corresponding operator from the operator certificate public key library, and uses the public key, the command original text, and the signature data to perform signature verification.

[0082] Optionally, when the signature verification is passed, it indicates that the key operation command has been confirmed by the authorized operator and the signature process is authentic. At this time, the original text of the key operation command is associated with the signature data and stored, and packaged into a complete blockchain transaction. The packaged blockchain transaction is pushed to the blockchain network node to prepare to trigger the consensus process and generate a legal operation command block.

[0083] The disclosed embodiment completes the digital signature process in the key operation instructions, realizes the verifiable binding of the operator's identity, and ensures that the operation of the key operation instructions cannot be denied. First, the operator's private key is kept in a physical medium controlled by the individual, and has undergone biometric authentication, which can ensure the unique correspondence between the signature private key and the operator's real identity, and eliminates the possibility of others using the private key signature. With the help of mature cryptographic algorithms, the digital signature and the operation instruction are interlocked and cannot be forged. Any tampering will cause the signature verification to fail. Secondly, the disclosed embodiment guarantees the operator's right to know the content of the signature through an intuitive and reliable signature interface, preventing the operator from denying his operation. Furthermore, the strict signature environment control of the disclosed embodiment forms physical isolation around key links such as key loading, use, and destruction, and avoids private key leakage to the greatest extent. Finally, the public key certificate system of the disclosed embodiment ensures that the signature verification link can obtain a reliable operator public key, laying the foundation for subsequent backtracking and verification.

[0084] In summary, the digital signature process of the disclosed embodiment is the first line of defense to ensure the security and reliability of key operation commands. Through the identity authentication of trusted operators and the cryptographic unforgeable mechanism, the operation responsibility is anchored before the command is uploaded to the chain, which is an important basis for subsequent judicial evidence collection and security audits. Combined with other mechanisms of the blockchain, digital signatures are conducive to the ultimate realization of traceability, verifiability, and non-repudiation of the operation process. The technical design proposed by the disclosed embodiment around digital signatures is feasible, safe and controllable.

[0085] In some embodiments, after all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, adding a link corresponding to the blockchain transaction to the monitoring instruction blockchain includes:

[0086] After the blockchain node receives the blockchain transaction corresponding to the key operation command, triggering a consensus process;

[0087] Confirming the newly generated operation command block among the trusted nodes of the blockchain node through a fast consensus algorithm;

[0088] When the newly generated operation command block is confirmed, the newly generated operation command block is linked to the monitoring instruction blockchain to complete the chain entry and evidence storage.

[0089] Optionally, after the key operation commands are signed and packaged to form a blockchain transaction, they are broadcasted to the blockchain network, and all blockchain nodes in the blockchain network can receive the blockchain transaction. The blockchain node puts the blockchain transaction into the transaction pool, and triggers the consensus protocol based on the hash value of the blockchain transaction data to start the new block generation process. The consensus protocol determines which blockchain node obtains the right to package the block this time, and mature consensus algorithms such as proof of work (PoW), proof of stake (PoS), and practical Byzantine fault tolerance (PBFT) can be used.

[0090] Optionally, through a customized fast consensus algorithm, the newly generated operation command block is confirmed between the trusted nodes of the blockchain node. In view of the real-time requirements of key operation instructions, a customized consensus mechanism for monitoring scenarios is designed to maximize the speed of consensus while meeting security requirements. A consortium chain can be used, with a blockchain network composed of trusted nodes such as power grid companies and third-party service agencies. Compared with a public chain, a consortium chain can support faster transaction confirmation.

[0091] Optionally, the consensus protocol may adopt a threshold signature scheme to set a trusted node signature confirmation ratio (for example, the confirmation ratio is set to two-thirds). When the newly generated operation command block reaches this confirmation ratio, the newly generated operation command block can be quickly confirmed, reducing the confirmation delay.

[0092] Optionally, the newly generated operation command block is linked to the monitoring instruction blockchain to complete the chain storage. When consensus is reached, the packaging node calculates the execution result of the blockchain transaction to form a newly generated operation command block. The newly generated operation command block contains operation command data, timestamp, previous block hash, self-hash and other information. The newly generated operation command block is linked to the previous block through cryptographic hash, and added to the dedicated monitoring instruction blockchain in chronological order to achieve chain storage of key operation instructions. The packaging node broadcasts the newly generated operation command block to other nodes in the entire network. After verification by other nodes, the blockchain ledger is synchronized and updated locally.

[0093] The disclosed embodiment forms a traceable and tamper-proof chain data structure through blockchain processing, which has the following security advantages:

[0094] (1) Distributed storage: Each blockchain node stores a complete copy of the ledger of key operation instructions. Even if some nodes fail, the record integrity of the entire hydropower station monitoring system will not be affected.

[0095] (2) Cryptographic protection: Blocks are linked in a chain based on hashes. Any tampering with the content of a block will cause the verification of all subsequent blocks to fail, and tampering can be easily discovered.

[0096] (3) Consensus mechanism: Multiple blockchain nodes complete block confirmation based on the consensus algorithm. It is difficult for a single blockchain node to influence the recorded content, and the consensus result is undeniable.

[0097] (4) Real-time traceability: The blockchain records the timing information of key operation commands and can accurately trace the initiation time, operator and other detailed information of each key operation command.

[0098] (5) Full disclosure of data: Blockchain makes operation records fully public and transparent, subject to supervision and audit by all relevant parties, making it difficult to falsify or delete data.

[0099] In summary, building a blockchain network based on the alliance chain combined with a customized consensus mechanism can ensure data security and cannot be tampered with while meeting the real-time chain requirements of monitoring instructions. Block data relies on cryptographic mechanisms and is difficult to forge, and can form effective evidence during subsequent retrospective verification and judicial evidence collection. Combined with digital signature technology, the monitoring instruction blockchain constructed by the disclosed embodiment can ensure that the operation instructions can be verified to be from authorized operators, and the operators cannot deny it, the operation instruction data cannot be tampered with, and can be accurately traced, and multiple nodes can reach an undeniable history of operation instructions. This solution can reliably achieve full-process security protection of key operation commands, which is of great significance for ensuring the safe and stable operation of hydropower stations and even the entire power grid.

[0100] In some embodiments, the method further comprises:

[0101] Based on the operation command feature extraction rules, structured feature data is extracted from the historical operation command data to form a training sample set;

[0102] Dividing the structured feature data into a plurality of portions to obtain a plurality of feature data slices;

[0103] Distribute and store the plurality of feature data slices to a plurality of blockchain nodes;

[0104] Inputting the sample data in the training sample set into an initial operation command evaluation model, and training the initial operation command evaluation model using federated learning to obtain a trained operation command evaluation model;

[0105] When a new operation command block is submitted to the blockchain network after being digitally signed, the blockchain node uses the trained operation command evaluation model to evaluate and package the new operation command block in real time;

[0106] When it is confirmed that the new operation command block is a safe block, the new operation command block is linked to the monitoring instruction blockchain.

[0107] In some embodiments, the sample data in the training sample set is input into an initial operation command evaluation model, and the initial operation command evaluation model is trained using federated learning to obtain a trained operation command evaluation model, including:

[0108] Using the plurality of blockchain nodes as participants in federated learning, and training the initial operation command evaluation model locally using sample data in the training sample set;

[0109] Using a differential privacy algorithm, each of the blockchain nodes is independently trained;

[0110] After each of the blockchain nodes has completed independent training, the model parameters are uploaded to the federated aggregation server;

[0111] The trained operation command evaluation model is generated by the federated aggregation server based on the model parameter aggregation.

[0112] The disclosed embodiment protects the privacy of model training through federated learning, realizes multi-party collaboration under the premise of protecting data privacy, and then combines blockchain to store data in an encrypted and distributed manner, achieving the goals of greater security, privacy, efficiency and intelligence.

[0113] The key operation commands of the disclosed embodiment are digitally signed to form structured messages, which usually contain rich feature data such as operation type, target device, and operation parameters. Based on the customized operation command feature extraction rules, structured feature data can be automatically extracted from the historical operation command data to form a training sample set. The structured feature data is divided into N parts and stored in N blockchain nodes. Each blockchain node only stores a part of the data features to protect data privacy.

[0114] Federated learning is used to train the initial operation command evaluation model. N blockchain nodes are used as participants in federated learning. The initial operation command evaluation model is trained locally using some of the feature samples obtained above. Encryption mechanisms such as differential privacy algorithms are used to ensure that the original sample data of each blockchain node will not be leaked to other nodes. After each blockchain node is trained independently, the local model parameters are uploaded to the federated aggregation server, which aggregates and generates a global model to obtain a trained operation command evaluation model.

[0115] When a new key operation command is submitted to the blockchain network with a digital signature, the blockchain node uses the trained operation command evaluation model to evaluate the new key operation command in real time. The scoring result of the new key operation command is attached to the packaged transaction and submitted to the consensus network for block competition. The scoring result will serve as an important reference for the consensus algorithm. Among them, the new operation command block that obtains the accounting right must meet two conditions: (1) meet the block difficulty requirements of the traditional consensus algorithm (such as PoW); (2) the average score of the key operation commands contained in the new operation command block must reach the pre-set security threshold.

[0116] In the disclosed embodiment, when a new operation command block meets the block difficulty requirement of a traditional consensus algorithm (such as PoW), or the average score of the key operation commands contained in the block meets a pre-set security threshold, the blockchain network can confirm the new operation command block as a legal block and add the new operation command block to the blockchain.

[0117] The new operation command block packages the operation command, operation score, previous block hash and other information according to the established structure to complete the link with the previous block. The packaging node broadcasts the new operation command block to the blockchain network, verifies the legitimacy of the score and link of the new operation command block through other blockchain nodes, and completes the local ledger update.

[0118] In the disclosed embodiment, the trained operation command evaluation model obtained by federated learning training makes it difficult for abnormal operation commands with security risks to pass the consensus verification of nodes, thereby building a filtering defense line before the data is uploaded to the chain. This solution combining blockchain consensus and federated learning evaluation has the following advantages:

[0119] (1) Taking advantage of the multi-node redundant storage feature of blockchain, the training samples are distributedly stored to ensure the comprehensiveness of training while protecting data privacy.

[0120] (2) By utilizing the architecture of local training and cloud aggregation through federated learning, the collaborative evolution of multi-node intelligent models can be achieved without leaking the original data, making the evaluation results more accurate and reliable.

[0121] (3) The scoring results of key operation commands are embedded in the blockchain consensus protocol, making it difficult for potential high-risk operations to enter the block through consensus, further strengthening the security of block data.

[0122] (4) The trained operation command evaluation model obtained through federated learning training can be continuously retrained and optimized using newly generated on-chain data. The evaluation rules can be adjusted in real time according to the actual operation scenario and have the ability to continuously evolve.

[0123] (5) Trustworthy federal scoring can help achieve consistent evaluation standards across organizations and regions, and provide new ideas for regulatory coordination.

[0124] In some embodiments, real-time monitoring and auditing of updated blocks in the monitoring instruction blockchain includes:

[0125] Monitor the operation data of the updated block in the monitoring instruction blockchain in real time;

[0126] Parsing the block content of the update block based on the operation data to obtain a parsing result;

[0127] At least one of the command operator, operation object or operation parameter of the update block is obtained according to the analysis result.

[0128] The disclosed embodiment parses the block content of the updated block by continuously monitoring the updates on the chain. Specifically, by deploying a number of blockchain parsing nodes and running synchronously with the blockchain core network nodes, when the core network generates a new block, the blockchain parsing node obtains the operation data of the new block in real time. The blockchain parsing node uses cryptographic algorithms to verify the integrity of the operation data of the new block and the validity of the link to ensure that the obtained on-chain data is credible. The blockchain parsing node extracts key elements such as operation instructions, operators, timestamps, etc. from the operation data of the new block and converts them into structured records that are easy to analyze. Information such as the command operator, operation object, and operation parameters are pushed in real time for subsequent audit operations. The blockchain parsing node pushes structured operation instruction data in real time through the message middleware for subsequent audit operations.

[0129] Based on the stream computing framework (for example, Storm, Spark Streaming), the operation data of the new block obtained in real time is stream processed and analyzed. Stream computing first cleans and normalizes the operation data of the new block, unifies different formats, and divides the operation data of the new block into different processing streams for targeted analysis based on data characteristics.

[0130] In some embodiments, the method further comprises:

[0131] Based on the operation compliance rule base, the operation data of the update block monitored in real time is matched and checked to obtain a matching check result; wherein the operation compliance rule base contains at least one of the time, amplitude, frequency limit, operation precondition, and operation mutual exclusion constraint of different types of operations;

[0132] When it is confirmed based on the matching verification result that the operation data of the updated block does not meet the specification requirements, a graded warning is issued based on the degree of deviation of the operation data in combination with a machine learning algorithm.

[0133] The disclosed embodiment intelligently determines the operational compliance of operators based on the operational compliance rule base and issues an alert for high-risk operations. The built-in operational compliance rule base contains rules such as time, amplitude, frequency limits, operational preconditions, and operational mutual exclusion constraints for different types of operations. The operational data of the update block is matched and verified with the operational compliance rule base, and the operational data of the update block is judged to be in compliance with the specification requirements based on the matching verification results. At the same time, the deviation degree of the operational data is graded and warned in combination with the machine learning algorithm.

[0134] The disclosed embodiment provides graded warnings for abnormal operations discovered during the audit according to their severity. First, for primary warnings, the hydropower station monitoring system automatically sends alarm information to the duty supervisor. Second, for advanced warnings, the emergency plan process is initiated.

[0135] The disclosed embodiment relies on blockchain to build a reliable operation behavior data foundation, and uses emerging technologies such as big data analysis and machine learning to deeply mine operation behavior patterns, assist in discovering illegal operations, and prevent operational risks before they occur. It has the following advantages: (1) Real-time: Directly connect with the blockchain parsing node, obtain on-chain operation data with minimum delay, and respond to abnormal behaviors in minutes. (2) Comprehensiveness: The characteristics of blockchain that cannot be tampered with or deleted ensure that the data foundation of audit analysis is safe, reliable, and complete. (3) Intelligence: Relying on technologies such as big data analysis and machine learning, combined with the operation compliance rule base summarized by manual experience, the automation of the audit process is maximized and the employment risk is reduced. (4) Explanable: The chain storage structure of the blockchain network retains the complete time clues of key operation instructions, which can assist in accident investigation and retrospective analysis and restore the process of operation accidents. (5) Quantifiable: By defining clear audit rules, the compliance score of each operation is quantitatively assessed, so that the cost of operation violations is increased and the behavior is more standardized.

[0136] In summary, the disclosed embodiment is based on the trusted data foundation constructed by blockchain, and uses the operation compliance rule library, big data analysis, and machine learning as means to build a set of automated abnormal operation behavior discovery mechanisms and early warning suppression mechanisms, and then combines digital signatures, blockchain and other underlying technologies to weave a tight security protection network to improve the complete protection performance of hydropower safe operation.

[0137] like Figure 2 As shown, Figure 2 The present invention provides a schematic diagram of the structure of an operation audit device of a hydropower station monitoring system. The present invention also provides an operation audit device of a hydropower station monitoring system, including:

[0138] The acquisition unit 21 is configured to analyze the command data of the hydropower station monitoring system in real time, mark the key operations in the command data, and acquire the key operation commands;

[0139] The signature confirmation unit 22 is configured to use the private key of the operator corresponding to the key operation command to sign and confirm the key operation command;

[0140] A generating unit 23 is configured to generate a blockchain transaction based on the key operation command and the signature data corresponding to the key operation command after completing the signature confirmation, and broadcast the blockchain transaction to the blockchain network;

[0141] The linking unit 24 is configured to add a link corresponding to the blockchain transaction to the monitoring instruction blockchain after all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block;

[0142] The monitoring and auditing unit 25 is configured to monitor and audit the updated blocks in the monitoring instruction blockchain in real time.

[0143] The computer device according to the embodiment of the present disclosure includes a memory and a processor. The memory is used to store non-temporary computer-readable instructions. Specifically, the memory may include one or more computer program products, and the computer program product may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may, for example, include a read-only memory (ROM), a hard disk, a flash memory, etc.

[0144] The processor may be a central processing unit (CPU) or other forms of processing units with data processing capabilities and / or instruction execution capabilities, and may control other components in the computer device to perform desired functions. In one embodiment of the present disclosure, the processor is used to run the computer-readable instructions stored in the memory, so that the computer device executes all or part of the steps of the operation audit method of the hydropower station monitoring system of each embodiment of the present disclosure.

[0145] Those skilled in the art should be able to understand that in order to solve the technical problem of how to obtain a good user experience, the present embodiment may also include well-known structures such as a communication bus and an interface, and these well-known structures should also be included in the protection scope of the present disclosure.

[0146] like Figure 3 A schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure is shown, which is a schematic diagram of the structure of a computer device suitable for implementing the embodiment of the present disclosure. Figure 3 The computer device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0147] like Figure 3 As shown, the computer device may include a processor (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) or a program loaded from a storage device into a random access memory (RAM). In the RAM, various programs and data required for the operation of the computer device are also stored. The processor, ROM, and RAM are connected to each other via a bus. An input / output (I / O) interface is also connected to the bus.

[0148] Typically, the following devices can be connected to the I / O interface: input devices such as sensors or visual information acquisition devices; output devices such as display screens; storage devices such as tapes, hard disks, etc.; and communication devices. The communication device can allow the computer device to communicate with other devices (such as edge computing devices) wirelessly or by wire to exchange data. Figure 3 A computer device having various devices is shown, but it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed instead.

[0149] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processor, all or part of the steps of the operation audit method of the hydropower station monitoring system of the embodiment of the present disclosure are executed.

[0150] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

[0151] The computer-readable storage medium according to the embodiment of the present disclosure stores non-transitory computer-readable instructions, which, when executed by a processor, execute all or part of the steps of the operation audit method of the hydropower station monitoring system of each embodiment of the present disclosure.

[0152] The above-mentioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card) and media with built-in ROM (e.g., ROM box).

[0153] For detailed description of this embodiment, reference may be made to the corresponding descriptions in the aforementioned embodiments, which will not be repeated here.

[0154] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0155] In the present disclosure, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. The block diagrams of the devices, devices, equipment, and systems involved in the present disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, devices, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The words "such as" used here refer to the phrase "such as but not limited to", and can be used interchangeably with them.

[0156] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.

[0157] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0158] Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.

[0159] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0160] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. The operation audit method of the hydropower station monitoring system is characterized by: include: Analyze the command data of the hydropower station monitoring system in real time, mark the key operations in the command data, and obtain the key operation commands; Use the private key of the operator corresponding to the key operation command to sign and confirm the key operation command; After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, and the blockchain transaction is broadcasted to the blockchain network; After all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, a link corresponding to the blockchain transaction is added to the monitoring instruction blockchain; The updated blocks in the monitoring instruction blockchain are monitored and audited in real time.

2. The operation audit method of the hydropower station monitoring system according to claim 1 is characterized in that: Using the private key of the operator corresponding to the key operation command to sign and confirm the key operation command includes: Based on the key operation command, a prompt message is sent to the client to prompt the operator to use the private key to sign and confirm the key operation command; Receiving signature data sent by the client based on signature confirmation completed by the operator; After completing the signature confirmation, a blockchain transaction is generated based on the key operation command and the signature data corresponding to the key operation command, including: When the authenticity of the signature data is verified, the key operation command and the signature data corresponding to the key operation command are packaged into a blockchain transaction.

3. The operation audit method of the hydropower station monitoring system according to claim 1 is characterized in that: After all blockchain nodes in the blockchain network reach a consensus on the blockchain transaction based on the newly generated operation command block, a link corresponding to the blockchain transaction is added to the monitoring instruction blockchain, including: After the blockchain node receives the blockchain transaction corresponding to the key operation command, triggering a consensus process; Confirming the newly generated operation command block among the trusted nodes of the blockchain node through a fast consensus algorithm; When the newly generated operation command block is confirmed, the newly generated operation command block is linked to the monitoring instruction blockchain to complete the chain entry and evidence storage.

4. The operation audit method of the hydropower station monitoring system according to claim 3 is characterized in that: The method further comprises: Based on the operation command feature extraction rules, structured feature data is extracted from the historical operation command data to form a training sample set; Dividing the structured feature data into a plurality of portions to obtain a plurality of feature data slices; Distribute and store the plurality of feature data slices to a plurality of blockchain nodes; Inputting the sample data in the training sample set into an initial operation command evaluation model, and training the initial operation command evaluation model using federated learning to obtain a trained operation command evaluation model; When a new operation command block is submitted to the blockchain network after being digitally signed, the blockchain node uses the trained operation command evaluation model to evaluate and package the new operation command block in real time; When it is confirmed that the new operation command block is a safe block, the new operation command block is linked to the monitoring instruction blockchain.

5. The operation audit method of the hydropower station monitoring system according to claim 4 is characterized in that: Inputting the sample data in the training sample set into the initial operation command evaluation model, and training the initial operation command evaluation model by using federated learning to obtain a trained operation command evaluation model, including: Using the plurality of blockchain nodes as participants in federated learning, and training the initial operation command evaluation model locally using sample data in the training sample set; Using a differential privacy algorithm, each of the blockchain nodes is independently trained; After each of the blockchain nodes has completed independent training, the model parameters are uploaded to the federated aggregation server; The trained operation command evaluation model is generated by the federated aggregation server based on the model parameter aggregation.

6. The operation audit method of the hydropower station monitoring system according to claim 1 is characterized in that: Real-time monitoring and review of updated blocks in the monitoring instruction blockchain, including: Monitor the operation data of the updated block in the monitoring instruction blockchain in real time; Parsing the block content of the update block based on the operation data to obtain a parsing result; At least one of the command operator, operation object or operation parameter of the update block is obtained according to the analysis result.

7. The operation audit method of the hydropower station monitoring system according to claim 6 is characterized in that: The method further comprises: Based on the operation compliance rule base, the operation data of the update block monitored in real time is matched and checked to obtain a matching check result; wherein the operation compliance rule base contains at least one of the time, amplitude, frequency limit, operation precondition, and operation mutual exclusion constraint of different types of operations; When it is confirmed based on the matching verification result that the operation data of the updated block does not meet the specification requirements, a graded warning is issued based on the degree of deviation of the operation data in combination with a machine learning algorithm.

8. A computer device, characterized in that: The computer device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the operation audit method of the hydropower station monitoring system as described in any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, which are used to enable a computer to execute the operation audit method of the hydropower station monitoring system as described in any one of claims 1 to 7.

10. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the steps of the operation audit method of the hydropower station monitoring system described in any one of claims 1 to 7 are implemented.

Images