Main network equipment state comprehensive early warning management and control method and electronic equipment

Abstract

The invention relates to the field of data processing, and discloses a main network equipment state comprehensive early warning management and control method and electronic equipment, based on one-way annular link operation of main network equipment-edge equipment-front-end equipment-main network equipment, under the isolation condition that bidirectional real-time data interaction is forbidden, the front-end equipment is used as a control center, and the main network equipment state comprehensive early warning management and control method is achieved. According to a gravitation calculation factor generated according to related information of the edge devices, data gravitation of each edge device to different main network devices is calculated, then adaptation priorities of the edge devices to the main network devices are quantified, dynamic matching of the main network devices and the edge devices is achieved, the problem of unstable time delay caused by local computing power resource shortage is avoided, and the service life of the main network devices is prolonged. And the real-time requirement of comprehensive early warning management and control of the state of the main network equipment is met.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and particularly to a comprehensive early warning and control method for the state of main network devices and an electronic device. Background Art

[0002] Main network devices include various key devices such as transformers, circuit breakers, switches, and servers. Their states directly affect the reliability and security of the entire system. The faults of main network devices develop rapidly, and usually, it is necessary to complete abnormal identification, early warning push, and control instruction issuance within 10 seconds. Otherwise, it may trigger a chain accident. Timely and accurately grasping the device state and performing effective early warning and control are the keys to ensuring the normal operation of the main network system.

[0003] The power system follows the "Regulations on the Safety Protection of Power Monitoring Systems", which requires physical isolation between the production control area (including device monitoring data) and the information management area (including the front-end control platform), and prohibits two-way real-time data interaction. In the prior art, the algorithms for fault early warning and identification are already very mature. The bottleneck lies in the real-time nature of early warning under the condition of prohibiting two-way real-time data interaction.

[0004] Some solutions perform abnormal identification through local processing at the edge end. However, due to limited computing power, the time required for algorithm execution is relatively long. Some solutions transmit data to the cloud unidirectionally through a network gateway. Although the computing power is sufficient, due to security requirements, complex encryption or desensitization is required, resulting in data delay that is difficult to meet the requirements.

[0005] Therefore, in an isolated environment where two-way real-time data interaction is prohibited, how to ensure that the early warning can meet the delay requirements is a technical problem that urgently needs to be solved at present. Summary of the Invention

[0006] Aiming at the problem of long data delay of early warning information in the existing isolation environment, the present invention provides a comprehensive early warning and control method for the state of main network devices and an electronic device. It operates based on a unidirectional ring link of "main network device → edge device → front-end device → main network device". Under the isolation condition of prohibiting two-way real-time data interaction, taking the front-end device as the control center, according to the gravitational calculation factors generated from the relevant information of the edge device, calculates the data gravitation of each edge device for different main network devices, and then quantifies the adaptation priority of the edge device to the main network device, realizing the dynamic matching of the main network device and the edge device, avoiding the problem of unstable delay caused by local computing resource tension, and meeting the real-time requirements of the comprehensive early warning and control of the state of main network devices.

[0007] The following are the technical solutions of the present invention.

[0008] The comprehensive early warning and control method for the status of main network devices operates based on constructing a unidirectional ring link in the order from main network devices to edge devices and then to front-end devices. The method includes the following steps: The front-end device obtains the temporary key from the edge device, the processing result of the operating parameters of the main network device, and the gravitational calculation factor; Calculate the data gravitation of different edge devices for each main network device according to the gravitational calculation factor; Determine the optimal paired edge device of the main network device according to the data gravitation, and send the temporary key of the optimal paired edge device to the main network device to establish a temporary unidirectional encryption channel from the main network device to the edge device; If the processing result of the operating parameters of the main network device contains abnormal information, determine at least one sub-optimal paired edge device of the corresponding main network device, send the temporary key of the sub-optimal paired edge device to the main network device, and simultaneously perform front-end display of the abnormal information.

[0009] In the present invention, relying on this unidirectional ring link, the front-end device receives various information from the edge device and sends relevant instructions to the main network device, ensuring the absolute security of the main network information while constructing a control closed-loop. At the same time, a unique data gravitation mechanism is adopted to determine the pairing relationship between the main network device and the edge device, realizing the dynamic allocation of the hardware resources of the edge device. Finally, a temporary unidirectional encryption channel from the main network device to the edge device is established through the temporary key, realizing the secure transmission and processing of data on the premise of meeting the physical isolation requirements of the power system (prohibiting two-way real-time interaction).

[0010] As a possible implementation manner, the gravitational calculation factor for calculating data gravitation includes the computing power information of the edge device and the communication delay with the main network device.

[0011] As a possible implementation manner, the calculating the data gravitation of different edge devices for each main network device according to the gravitational calculation factor includes: Package the computing power resources of different architectures in the computing power information into computing power values in a standardized unit; Calculate the data gravitation of different edge devices for each main network device based on the computing power value of the edge device and the communication delay between the main network device and the edge device.

[0012] In the present invention, the calculation principle of data gravitation is that the higher the computing power value, the more attractive, and the lower the communication delay, the more attractive.

[0013] As a possible implementation manner, the packaging the computing power resources of different architectures in the computing power information into computing power values in a standardized unit includes: Determine the computing power hardware architecture of the edge device, define the corresponding computing power conversion formula for different architectures, map the original hardware parameters under the computing power hardware architecture of the edge device to a unified standard unit, calculate and obtain the computing power value under the standard unit, and determine the available computing power value according to the actual occupancy rate.

[0014] As a possible implementation manner, calculating the data gravitation of each edge device to each master network device based on the computing power value of the edge device and the communication delay between the master network device and the edge device includes: Determine the gravitational formula: ; wherein, F is the data gravitation, G is the gravitational constant, M is the available computing power value of the edge device, r is the communication delay between the edge device and the master network device, m is the data volume of the master network device, and G and m do not affect the optimal sorting and are simplified to the constant 1.

[0015] Inspiration is obtained from the universal gravitation formula in the present invention, and the transmission of operating parameters is analogized to the movement of matter. When the available computing power value of the edge device is higher and the communication delay is lower, the attraction of this edge device to the operating parameters will be higher, and finally the operating parameters of this master network device will be transmitted to the edge device with the highest attraction. In addition, since the gravitational constant and the data volume of the master network device do not affect the result when calculating the same master network device, in order to reduce the calculation amount, all are set to 1 here.

[0016] As a possible implementation manner, determining the optimal paired edge device of the master network device according to the data gravitation includes: Sort the data gravitation of different edge devices to the same master network device in reverse order, and the one ranked first is used as the optimal paired edge device of this master network device.

[0017] As a possible implementation manner, determining at least one sub-optimal paired edge device corresponding to the master network device includes: according to the reverse order sorting of the data gravitation, select the first N edge devices except the optimal paired edge device as the sub-optimal pairing, where N≥1.

[0018] As a possible implementation manner, the pairing period between the edge device and the master network device is determined according to the validity period of the temporary key.

[0019] The present invention also provides another comprehensive warning and control method for the master network device state, which runs based on constructing a unidirectional ring link in the order from the master network device to the edge device and then to the front-end device. The method includes the following steps: The edge device receives the encrypted operating parameters sent by the master network device; Decrypt the operation parameters sent by the main network device using its own temporary key. If the decryption is successful, parse them based on a preset processing program to obtain a processing result; Send its own temporary key, the processing result of the main network device operation parameters, and the gravitational calculation factor to the front-end device.

[0020] The present invention also provides another method for comprehensive early warning and control of the main network device status, which operates based on constructing a unidirectional ring link in the order from the main network device to the edge device and then to the front-end device. The method includes the following steps: The main network device receives the temporary key sent by the front-end device and establishes a temporary unidirectional encryption channel from the main network device to the edge device; Obtain the operation parameters, encrypt them using the temporary key, and send them to the edge device; If the temporary key is not unique, it will be periodically and cyclically encrypted using different temporary keys and sent to the corresponding edge device.

[0021] The present invention also provides an electronic device, including a memory and a processor. A computer program is stored in the memory. When the processor calls the computer program in the memory, the steps of any of the above-mentioned methods for comprehensive early warning and control of the main network device status are implemented.

[0022] The present invention also provides a storage medium. Computer-executable instructions are stored in the storage medium. When the computer-executable instructions are loaded and executed by a processor, the steps of the above-mentioned method for comprehensive early warning and control of the main network device status are implemented.

[0023] The substantial effects of the present invention include: Through the unidirectional link design, in principle, data reverse transmission is eliminated, and the attack path from the outside to the main network device is cut off from the architecture; a temporary unidirectional encryption channel from the main network device to the edge device is established using a temporary key. The temporary key is generated by the edge device and relayed and sent down through the front-end device, avoiding the risk of leakage of fixed keys, and the key validity period is bound to the pairing period to achieve dynamic security authentication of the communication link.

[0024] For the diverse hardware architectures of edge devices (such as x86, ARM, ASIC), through standardized computing power encapsulation, the original hardware parameters (such as the number of CPU cores, GPU floating-point computing power) are converted into comparable computing power values, and unique data gravity calculation is combined with communication latency to support the unified management and scheduling of different types of edge devices by the front-end device.

[0025] On this basis, since the computing power resources of edge devices can be fully scheduled and utilized, the complex process of transmitting data to the cloud through a network isolation device in the traditional solution can be avoided, and the data processing delay can be compressed to the local edge node. This not only solves the computing power bottleneck of edge devices but also avoids the complex process required for cloud access, thereby significantly reducing the data delay to meet the early warning requirements of main network devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 is a schematic diagram of a unidirectional ring link according to an embodiment of the present invention; Figure 2 is a flowchart according to an embodiment of the present invention; Figure 3 is another flowchart according to an embodiment of the present invention; Figure 4 is yet another flowchart according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0027] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in combination with the embodiments. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of them. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of protection of the present invention.

[0028] It should be understood that in various embodiments of the present invention, the magnitude of the sequence numbers of the various processes does not mean the order of execution, and the order of execution of the various processes should be determined by their functions and internal logics, and should not constitute any limitation to the implementation process of the embodiments of the present invention.

[0029] It should be understood that in the present invention, "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those clearly listed steps or units, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or devices.

[0030] It should be understood that in the present invention, "a plurality of" means two or more. "And / or" is only a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally represents an "or" relationship between the associated objects before and after. "Including A, B, and C" and "including A, B, C" mean that all of A, B, and C are included. "Including A, B, or C" means including one of A, B, and C. "Including A, B, and / or C" means including any one or any two or all three of A, B, and C.

[0031] The technical solution of the present invention will be described in detail below with specific embodiments. The embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments.

[0032] Embodiment: The comprehensive early warning and control method for the status of main network devices operates based on the construction of a unidirectional ring link in the order from main network devices to edge devices and then to front-end devices as shown in Figure 1 the figure.

[0033] Among them, the main network devices referred to in the unidirectional ring link of this embodiment usually include key devices such as transformers and circuit breakers, which are responsible for collecting operating parameters (such as voltage, current, temperature, etc.), and transmitting them to edge devices after encryption with a temporary key. The edge devices are deployed in the production control area and have a heterogeneous computing power architecture (such as x86 servers, ARM embedded devices, ASIC chips), which are responsible for decrypting the data of the main network devices, performing real-time processing (such as anomaly recognition algorithms), and reporting computing power information, communication delay, and processing results to the front-end devices. The front-end devices, as the control center, are located in the information management area and receive the data of the edge devices through a unidirectional physical isolation channel.

[0034] As shown in Figure 2 the figure, the comprehensive early warning and control method for the status of main network devices in this embodiment includes the following steps: The front-end device obtains the temporary key from the edge device, the processing result of the operating parameters of the main network device, and the gravitational calculation factor; Calculate the data gravity of different edge devices for each main network device according to the gravitational calculation factor; Determine the optimal paired edge device of the main network device according to the data gravity, and send the temporary key of the optimal paired edge device to the main network device to establish a temporary unidirectional encryption channel from the main network device to the edge device; If the processing result of the operating parameters of the main network device contains abnormal information, determine at least one sub-optimal paired edge device of the corresponding main network device, send the temporary key of the sub-optimal paired edge device to the main network device, and at the same time display the abnormal information at the front end.

[0035] Among them, the temporary key is generated by the edge device and is used for encrypting data transmission of the main network device. The key validity period is T (such as several minutes). The processing result refers to the parsing result of the operating parameters of the main network device by the edge device, and usually includes normal / abnormal status and specific abnormal types (such as overload, temperature exceeding the standard).

[0036] As a possible implementation method, the gravitational calculation factor is used to calculate data gravity, including the computing power information of the edge device and the communication delay with the main network device.

[0037] Among them, the computing power information usually includes the hardware architecture (such as x86-6-core CPU, ARM-4-core NPU), the original computing power parameters (such as the CPU main frequency of 2.4 GHz, the floating-point computing power of the NPU of 12 TOPS), and the current computing power occupancy rate (such as 60%). The communication delay refers to the transmission delay between the edge device and the main network device (generally in milliseconds).

[0038] In one implementation, calculating the data gravity of different edge devices for each main network device according to the gravity calculation factor includes: Encapsulate the computing power resources of different architectures in the computing power information into computing power values in a standardized unit; Calculate the data gravity of different edge devices for each main network device based on the computing power value of the edge device and the communication delay between the main network device and the edge device.

[0039] Exemplarily, for the possible heterogeneous architectures of edge devices, computing power standardization needs to be performed: For example, for the x86 architecture: the computing power value M = the number of CPU cores × the main frequency × (1 - occupancy rate), example: 6 cores × 2.4 GHz × 0.4 = 5.76 (standardized unit). For the ARM architecture: M = the floating-point computing power of the NPU × (1 - occupancy rate) ÷ 10 TOPS, example: 12 TOPS × 0.4 ÷ 10 = 0.48 (standardized unit). For the ASIC architecture: M = the fixed computing power value × (1 - occupancy rate), example: the fixed computing power of the dedicated chip is 100, and the occupancy rate is 30%, then M = 70.

[0040] It can be understood that the standardized unit here can be other representation methods, or other calculation methods, and only need to ensure that the unit processing capabilities are as consistent as possible under different architectures.

[0041] In this embodiment, the calculation principle of data gravity is that the higher the computing power value, the more attractive, and the lower the communication delay, the more attractive.

[0042] In one implementation, calculating the data gravity of different edge devices for each main network device based on the computing power value of the edge device and the communication delay between the main network device and the edge device includes: Determine the gravity calculation formula: ; Among them, F is the data gravity, G is the gravitational constant, M is the available computing power value of the edge device, r is the communication delay between the edge device and the main network device, m is the data volume of the main network device, where G and m do not affect the optimal sorting and are simplified to the constant 1.

[0043] That is to say, the simplified gravity calculation formula can be: ; This embodiment draws inspiration from the law of universal gravitation, analogizing the transmission of operating parameters to the motion of matter. When the available computing power value of an edge device is higher and the communication delay is lower, the attraction of this edge device to the operating parameters will be higher, and ultimately the operating parameters of this main network device will be transmitted to the edge device with the highest attraction. Additionally, since the gravitational constant and the data volume of the main network device do not affect the result when calculating for the same main network device, for the sake of reducing the calculation amount, all are set to 1 here.

[0044] In one implementation manner, the determining of the optimal paired edge device of the main network device according to data gravity includes: Sorting the data gravity of different edge devices for the same main network device in reverse order, and the one ranked first is used as the optimal paired edge device of this main network device.

[0045] In one implementation manner, the determining of at least one sub-optimal paired edge device corresponding to the main network device includes: according to the reverse order sorting of the data gravity, selecting the first N edge devices except the optimal paired edge device as the sub-optimal pairing, where N≥1.

[0046] It can be understood that when the processing result fed back by the edge device contains abnormal information (such as the transformer temperature > 90°C), the front-end device will trigger the sub-optimal pairing mechanism, for example, select the first N = 2 edge devices (including the optimal one) according to the data gravity sorting. Then, send the temporary keys of the selected edge devices (such as K2 and K1) to the main network device to ensure that subsequent data is encrypted and transmitted to multiple edge devices simultaneously. At the same time, display the abnormal information in real time on the front-end interface, including the device name, abnormal type, occurrence time, and the current paired edge device list.

[0047] In one implementation manner, the pairing period between the edge device and the main network device is determined according to the validity period of the temporary key. This can prevent unnecessary matching and ensure the effectiveness of encryption. For example, the pairing calculation can start at a time corresponding to 0.1 to 0.2 cycles before the expiration of each temporary key.

[0048] In this embodiment, relying on this unidirectional ring link, the front-end device receives various information of the edge device and sends relevant instructions to the main network device, ensuring the absolute security of the main network information while constructing a control closed-loop. At the same time, a unique data gravity mechanism is adopted to determine the pairing relationship between the main network device and the edge device, realizing the dynamic allocation of the hardware resources of the edge device. Finally, a one-way encrypted channel from the main network device to the edge device is established through the temporary key, achieving the secure transmission and processing of data on the premise of meeting the physical isolation requirements of the power system (prohibiting two-way real-time interaction).

[0049] This embodiment also provides another comprehensive early warning and control method for the main network device status, which operates based on constructing a unidirectional ring link in the order from the main network device to the edge device and then to the front-end device, as Figure 3 shown, and includes the following steps: The edge device receives the encrypted operating parameters sent by the main network device; Use its own temporary key to decrypt the operating parameters sent by the main network device. If the decryption is successful, parse based on a preset processing program to obtain a processing result; Send its own temporary key, the processing result of the main network device operating parameters, and the gravitational calculation factor to the front-end device.

[0050] In one implementation, the symmetric encryption method is adopted. The edge device j receives the encrypted data sent by the main network device i (such as format: [encrypted parameter] + [target edge device identifier]), and attempts to decrypt it using its own temporary key Kj: If the decryption is successful, parse the operating parameters (such as voltage 10 kV, current 500 A); if the decryption fails (such as key mismatch), discard the data and record the log.

[0051] In one implementation, the edge device executes an anomaly recognition algorithm (such as relatively mature threshold judgment, machine learning model, etc.), and outputs a processing result (normal / anomalous) and detailed information (such as anomaly code E001: overload).

[0052] In addition, this embodiment also provides yet another comprehensive early warning and control method for the main network device status, which operates based on constructing a unidirectional ring link in the order from the main network device to the edge device and then to the front-end device, as Figure 4 shown, and includes the following steps: The main network device receives the temporary key sent by the front-end device and establishes a temporary unidirectional encryption channel from the main network device to the edge device; Obtain the operating parameters, encrypt them using the temporary key, and send them to the edge device; If the temporary key is not unique, different temporary keys will be cyclically used for encryption and sent to the corresponding edge device periodically.

[0053] In one implementation, the main network device i receives the list of temporary keys (such as [K2, K1]) sent by the front-end device, establishes a unidirectional encryption channel according to the target edge device identifier, and each channel corresponds to a unique edge device, and only allows data to flow from the main network device to the edge device. This isolation can avoid security problems.

[0054] In one implementation, the main network device periodically collects (for example, with a period of 50 ms) operating parameters (such as temperature, vibration signal). If it is a single-key scenario, directly use the key of the optimal edge device to encrypt all data and send it to the optimal edge device.

[0055] Exemplarily, in the multi-key scenario, in the first cycle, K2 is used for encryption and sent to the sub-optimal edge device, and in the second cycle, K1 is used for encryption and sent to the optimal edge device, and so on in a cycle.

[0056] Therefore, this embodiment provides at least the following new technical ideas for the industry development: This embodiment performs dynamic optimal pairing through edge device localization processing (avoiding complex cloud encryption processes), data gravity model, and standardized computing power encapsulation (unified quantization of heterogeneous architectures): The front-end device calculates the gravity according to the real-time computing power and latency, and preferentially allocates the main network device to the edge device with "strong computing power and low latency", shortening the data transmission and processing path. It realizes the dynamic allocation of edge computing power driven by data gravity and breaks through the latency bottleneck under physical isolation.

[0057] This embodiment performs architecture-level security protection through a unidirectional ring link (main network → edge → front-end, reverse transmission prohibited), a temporary key mechanism (edge generation → front-end transfer → main network use), and key cycle update: It cuts off the attack path from the physical layer (meeting the isolation requirements of the production control area of the power system), and at the same time avoids the risk of fixed key leakage through dynamic keys (the main security vulnerability of traditional solutions). It constructs a trusted communication closed-loop under physical isolation.

[0058] This embodiment performs transparent management of computing power through computing power hardware architecture identification (x86 / ARM / ASIC), computing power conversion formula, and real-time occupancy calibration: It maps heterogeneous parameters such as the number of CPU cores and the floating-point computing power of GPU into a unified standardized unit (such as "computing power value"), and the front-end device can compare the performance of edge devices across architectures. It realizes the standardized encapsulation of heterogeneous computing power and supports cross-architecture unified scheduling and load balancing.

[0059] This embodiment realizes fault tolerance and rapid response through a sub-optimal pairing mechanism (N≥1), multi-key cyclic encryption, front-end anomaly display and linkage: In the normal scenario, it depends on the optimal edge device for processing, and in the abnormal scenario, it triggers the redundant processing of the sub-optimal device, forming a double guarantee of "primary and standby + load sharing". This multi-dimensional redundant design can ensure the stable control of abnormal scenarios.

[0060] Compared with traditional solutions, which are either limited by insufficient edge computing power (slow processing) or limited by cloud transmission latency (complex encryption), this embodiment realizes the triple goals of "secure, real-time, and reliable" through the combined innovation of dynamic scheduling of edge computing power, local real-time processing, and unidirectional secure transmission in a physically isolated environment, filling the technical gap in early warning and control of power monitoring systems.

[0061] This embodiment also provides an electronic device, including a memory and a processor. A computer program is stored in the memory. When the processor calls the computer program in the memory, the steps of any of the above-mentioned comprehensive early warning and control methods for the main network device status are implemented.

[0062] This embodiment also provides a storage medium. Computer-executable instructions are stored in the storage medium. When the computer-executable instructions are loaded and executed by a processor, the steps of the above-mentioned comprehensive early warning and control method for the main network device status are implemented.

[0063] In summary, through the technical chain of "architecture design → computing power scheduling → security mechanism → dynamic control", this embodiment forms a tightly linked technical collaboration. Its substantial effects include: Through the one-way link design, data reverse transmission is theoretically eliminated, and the attack path from the outside to the main network device is cut off from the architecture. A one-way encryption channel from the main network device to the edge device is established using a temporary key. The temporary key is generated by the edge device and transmitted and distributed through the front-end device in transit, avoiding the risk of leakage of fixed keys. Moreover, the key validity period is bound to the pairing period to achieve dynamic security authentication of the communication link.

[0064] For the diverse hardware architectures of edge devices (such as x86, ARM, ASIC), through standardized computing power encapsulation, the original hardware parameters (such as the number of CPU cores, GPU floating-point operation capabilities) are converted into comparable computing power values, and unique data gravity calculations are performed in combination with communication delays, supporting the unified management and scheduling of different types of edge devices by the front-end device.

[0065] On this basis, since the computing power resources of the edge device can be fully scheduled and utilized, the complex process of transmitting data to the cloud through a network isolation device in the traditional solution can be avoided, and the data processing delay is compressed to the local edge node, which not only solves the computing power bottleneck of the edge device but also avoids the complex process required for cloud access, thereby greatly compressing the data delay to meet the early warning requirements of the main network device.

[0066] Through the description of the above embodiments, those skilled in the art can understand that for the convenience and simplicity of description, only the above division of each functional module is used as an example. In actual applications, the above functions can be allocated to different functional modules according to needs, that is, the internal structure of the specific device is divided into different functional modules to complete all or part of the functions described above.

[0067] In the embodiments provided in the present application, it should be understood that the disclosed structures and methods can be implemented in other ways. For example, the embodiments of the structures described above are merely illustrative. For example, the division of modules or units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another structure, or some features can be ignored or not executed. Another point is that the couplings or direct couplings or communication connections shown or discussed with each other can be through some interfaces, and the indirect couplings or communication connections of structures or units can be in electrical, mechanical or other forms.

[0068] The units described as separate components may or may not be physically separated. The components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place, or they may be distributed to multiple different places. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0069] In addition, each functional unit in the embodiments of the present application can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

[0070] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiments of the present application, in essence, or the part that contributes to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions for causing a device (which can be a single-chip microcomputer, a chip, etc.) or a processor to execute all or part of the steps of the methods of the various embodiments of the present application. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks, or optical discs that can store program codes.

[0071] The above content is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art within the technical scope disclosed in the present application can easily think of changes or substitutions, which should all be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A comprehensive early warning and control method for the status of main network devices, characterized in that, It runs by constructing a unidirectional ring link in the order from the main network device to the edge device and then to the front-end device. The method includes the following steps: The front-end device obtains the temporary key from the edge device, the processing result of the main network device operation parameters, and the gravitational calculation factor; Calculate the data gravity of different edge devices for each main network device according to the gravitational calculation factor; Determine the optimal paired edge device of the main network device according to the data gravity, and send the temporary key of the optimal paired edge device to the main network device to establish a temporary unidirectional encryption channel from the main network device to the edge device; If the processing result of the main network device operation parameters contains abnormal information, determine at least one sub-optimal paired edge device of the corresponding main network device, send the temporary key of the sub-optimal paired edge device to the main network device, and at the same time perform front-end display of the abnormal information.

2. The comprehensive early warning and control method for the main network device status according to claim 1, characterized in that The gravitational calculation factor is used to calculate data gravity, including the computing power information of the edge device and the communication delay with the main network device.

3. The comprehensive early warning and control method for the main network device status according to claim 2, characterized in that The calculating the data gravity of different edge devices for each main network device according to the gravitational calculation factor includes: Encapsulate the computing power resources of different architectures in the computing power information into computing power values in a standardized unit; Calculate the data gravity of different edge devices for each main network device based on the computing power value of the edge device and the communication delay between the main network device and the edge device.

4. The comprehensive early warning and control method for the main network device status according to claim 3, characterized in that, The encapsulating the computing power resources of different architectures in the computing power information into computing power values in a standardized unit includes: Determine the computing power hardware architecture of the edge device, define the corresponding computing power conversion formula for different architectures, map the original hardware parameters under the computing power hardware architecture of the edge device to a unified standardized unit, calculate and obtain the computing power value in the standardized unit, and determine the available computing power value according to the actual occupancy rate.

5. The comprehensive early warning and control method for the main network device status according to claim 3, wherein The calculating the data gravity of different edge devices for each main network device based on the computing power value of the edge device and the communication delay between the main network device and the edge device includes: Determine the gravity calculation formula: ； Where F is the data gravity, G is the gravitational constant, M is the available computing power value of the edge device, r is the communication delay between the edge device and the main network device, m is the data volume of the main network device, and G and m do not affect the optimal sorting and are simplified to the constant 1.

6. The comprehensive early warning and control method for the main network device status according to claim 1, wherein The determining the optimal paired edge device of the main network device according to the data gravity includes: Sort the data gravity of different edge devices for the same main network device in reverse order, and the one ranked first is used as the optimal paired edge device of the main network device.

7. The comprehensive early warning and control method for the main network device status according to claim 1, wherein The determining at least one sub-optimal paired edge device of the corresponding main network device includes: according to the reverse order sorting of the data gravity, select the first N edge devices except the optimal paired edge device as the sub-optimal pairing, where N≥1.

8. The comprehensive early warning and control method for the main network device status according to claim 1, characterized in that The pairing period between the edge device and the main network device is determined according to the validity period of the temporary key.

9. The comprehensive early warning and control method for the main network equipment status, characterized in that, It runs by constructing a unidirectional ring link in the order from the main network device to the edge device and then to the front-end device. The method includes the following steps: The edge device receives the encrypted operation parameters sent by the main network device; Use its own temporary key to decrypt the operation parameters sent by the main network device. If the decryption is successful, parse based on the preset processing program to obtain the processing result; Send its own temporary key, the processing result of the main network device operation parameters, and the gravity calculation factor to the front-end device.

10. The comprehensive early warning and control method for the status of main network devices is characterized in that, Operate based on the order of the main network device to the edge device and then to the front-end device to build a unidirectional ring link. The method includes the following steps: The main network device receives the temporary key sent by the front-end device and establishes a temporary unidirectional encryption channel from the main network device to the edge device; Obtain the operation parameters, encrypt them with the temporary key and send them to the edge device; If the temporary key is not unique, it will be encrypted and sent to the corresponding edge device cyclically and periodically using different temporary keys.

11. An electronic device, characterized in that, It includes a memory and a processor. A computer program is stored in the memory. When the processor calls the computer program in the memory, the steps of the main network device status comprehensive early warning and control method described in any one of claims 1 to 10 are implemented.

Images