Security device instruction management and execution method

Abstract

The invention discloses a security device instruction management method, which comprises the following steps of: collecting at least one device instruction supported by various security devices respectively and instruction information of each device instruction; according to the instruction information of each equipment instruction, dividing the at least one equipment instruction into a belonging category in predefined categories; for each category, mapping a plurality of equipment instructions of the category into a unified instruction of the category; the unified instruction of the category is pre-created and is used for uniformly starting execution of a plurality of equipment instructions of the category on respective corresponding safety equipment; unified instructions of each category are stored in an instruction data set. Therefore, a user can realize unified management of the device instructions of various safety devices through the unified instruction, including unified starting of execution of a plurality of device instructions of the category on respective corresponding safety devices, so that the efficiency of docking the safety device instructions by the system is improved.

Description

Technical Field

[0001] This application relates to the technical field of safety device management, and in particular, to a method for managing and executing safety device instructions. Background Art

[0002] Safety devices refer to technologies and devices used to ensure the safe operation of various industries and fields. With the rapid development of industrialization and informatization, the application of safety devices in multiple key fields such as industrial automation, aerospace, and transportation has become increasingly common.

[0003] In an emergency, operators must quickly and accurately execute instructions on safety devices in the system, which is crucial for ensuring device operation and personnel safety. However, these safety devices are often numerous and diverse in type, and their operation instructions are often incompatible and increasingly complex, posing great challenges to operators. The traditional operation mode of safety devices highly relies on operation manuals and training materials, but this method has obvious deficiencies in terms of search efficiency and accuracy.

[0004] Therefore, how to efficiently and accurately dock instructions with multiple safety devices managed by the system has become an urgent problem to be solved. Summary of the Invention

[0005] The embodiments of this application provide a method for managing and executing safety device instructions, as well as a computing device, which can efficiently and accurately dock instructions with multiple safety devices.

[0006] In a first aspect, the embodiments of this application provide a method for managing safety device instructions. The method includes: collecting at least one device instruction supported by each of multiple safety devices, and instruction information of each device instruction; the device instruction is used to control or operate a safety device, and the instruction information includes the task carried by the device instruction; according to the instruction information of each device instruction, classifying at least one device instruction into the corresponding category in a predefined category; each category represents a type of task; for each category, converting several device instructions of this category into a unified instruction of this category; the unified instruction of this category is pre-created and used to uniformly start the execution of several device instructions of this category on their respective corresponding safety devices; the unified instructions of each category are stored in an instruction data set.

[0007] Thus, users can achieve unified management of device instructions of multiple safety devices through unified instructions, including uniformly starting the execution of several device instructions of this category on their respective corresponding safety devices, thereby improving the management efficiency of the system for device instructions.

[0008] In a possible implementation, mapping a number of device instructions of this category to a unified instruction of this category includes: for each device instruction of each category, establishing a mapping relationship between the device instruction and the unified instruction of this category according to the matching rule; the mapping relationship includes the mapping relationship between the instruction name of the device instruction and the instruction name of the unified instruction of this category.

[0009] Thus, a number of device instructions of each category can be mapped to a unified instruction of each category, which is convenient for users to manage uniformly.

[0010] In a possible implementation, for each device instruction of each category, the mapping relationship includes the mapping relationship between the parameter name of the device instruction and the parameter name of the unified instruction of this category; mapping a number of device instructions of this category to a unified instruction of this category includes: for each device instruction of each category, establishing an instruction conversion rule between the device instruction and the unified instruction of this category according to the mapping relationship; the instruction conversion rule includes the rule of passing the parameter value of the unified instruction of this category to the device instruction.

[0011] Thus, the correct transfer of the parameter value of the unified instruction to the device instruction can be realized.

[0012] In a possible implementation, the method further includes: using natural language processing technology to extract at least one device instruction, as well as entities and relationships in the instruction information of each device instruction; constructing a knowledge base and / or a knowledge graph as an initial instruction data set according to the entities and relationships; storing the mapping relationship of each device instruction of each category in the instruction data set.

[0013] Thus, by constructing a knowledge base and / or a knowledge graph as the instruction data set, the efficiency of querying and reasoning about device instructions and unified instructions can be improved.

[0014] In a second aspect, an embodiment of the present application provides a method for executing a secure device instruction. The method includes: in response to receiving a user query, performing matching in the instruction data set to obtain a target unified instruction and displaying it; the instruction data set includes unified instructions of each category in a predefined category; the unified instructions of each category are pre-created for uniformly starting the execution of a number of device instructions of each category on their respective corresponding secure devices; each category represents a type of task, and a number of device instructions of each category are divided into this category according to the tasks they carry; in response to the user triggering the target unified instruction, distributing a number of device instructions of the category corresponding to the target unified instruction to their respective corresponding secure devices for execution.

[0015] Thus, the user can trigger a target unified instruction once to uniformly start several device instructions of a category, achieving the effect of simultaneously sending compatible device instructions to multiple security devices, thereby improving the efficiency of the system for docking security device instructions.

[0016] In a possible implementation, a natural language processing library is used to convert the user query into natural language, and the semantic similarity between the converted user query and each unified instruction in the instruction dataset is calculated respectively; the unified instructions in the instruction dataset are sorted according to the semantic similarity to obtain a preset number of unified instructions ranked at the top; the preset number of unified instructions ranked at the top includes the target unified instruction.

[0017] Thus, by performing fuzzy matching on the user query, the search results desired by the user can be accurately obtained, even if the query proposed by the user is not "so" accurate.

[0018] In a possible implementation, distributing several device instructions of the category corresponding to the target unified instruction to their respective corresponding security devices for execution includes: for each device instruction among the several device instructions of the category corresponding to the target unified instruction, after passing the parameter value of the target unified instruction to the device instruction by using the instruction conversion rule corresponding to the device instruction, distributing it to the corresponding security device for execution; the parameter value of the target unified instruction is set by the user.

[0019] Thus, the parameter value of the target unified instruction can be passed to several device instructions of the corresponding category, and the several device instructions are distributed to their respective corresponding multiple security devices for execution.

[0020] In a possible implementation, distributing several device instructions of the category corresponding to the target unified instruction to their respective corresponding security devices for execution includes: for each device instruction of the category corresponding to the target unified instruction, after encrypting the device instruction according to the instruction information of the device instruction, distributing it to the corresponding security device for execution.

[0021] Thus, the encryption requirement for device instruction distribution can be achieved.

[0022] In a possible implementation, the method further includes: obtaining the respective execution results of several device instructions of the category corresponding to the target unified instruction; establishing a security dataset according to the execution results; the security dataset is used to evaluate the security threats of multiple security devices.

[0023] Thus, it is convenient for the user to perform performance analysis or potential security risk assessment on multiple security devices communicatively connected to the system.

[0024] In a third aspect, an embodiment of the present application provides a computing device, including:

[0025] At least one memory for storing programs;

[0026] At least one processor for executing the programs stored in the memory. When the programs stored in the memory are executed, the processor is used to execute the method described in the first aspect or any possible implementation manner of the first aspect, and to execute the method described in the second aspect or any possible implementation manner of the second aspect.

[0027] In a fourth aspect, an embodiment of the present application provides a computer storage medium. Instructions are stored in the computer storage medium. When the instructions run on a computer, the computer is caused to execute the method described in the first aspect or any possible implementation manner of the first aspect, and to execute the method described in the second aspect or any possible implementation manner of the second aspect.

[0028] In a fifth aspect, an embodiment of the present application provides a computer program product containing instructions. When the instructions run on a computer, the computer is caused to execute the method described in the first aspect or any possible implementation manner of the first aspect, and to execute the method described in the second aspect or any possible implementation manner of the second aspect.

[0029] It can be understood that for the beneficial effects of the above third aspect to the fifth aspect, reference can be made to the relevant descriptions in the first aspect above, and details are not described herein again. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0031] Figure 1 It is a system architecture diagram of a security device instruction docking system provided by an embodiment of the present application;

[0032] Figure 2 It is a flowchart of a security device instruction management method provided by an embodiment of the present application;

[0033] Figure 3 It is a flowchart of a security device instruction execution method provided by an embodiment of the present application;

[0034] Figure 4 It is a schematic diagram of a security device instruction docking process provided by an embodiment of the present application;

[0035] Figure 5 It is a schematic diagram of the structure of a computing device provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0036] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions in the embodiments of this application will be described below with reference to the accompanying drawings.

[0037] In the description of the embodiments of this application, any embodiment or design solution with the words "exemplary", "for example", or "for instance" should not be understood as being more preferred or having more advantages than other embodiments or design solutions. Rather, the words "exemplary", "for example", or "for instance" are used to present relevant concepts in a specific manner.

[0038] In addition, the terms "first" and "second" are only used for descriptive purposes and should not be construed as indicating or implying relative importance or implicitly specifying the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include one or more of such features. The terms "include", "comprise", "have" and their variants all mean "including but not limited to", unless otherwise specifically emphasized in other ways. "At least one" may be one or more, and multiple means two or more.

[0039] Knowledge bases and knowledge graphs are two tools for organizing, storing, and retrieving knowledge, and they are playing an increasingly important role in the fields of information management and knowledge engineering. For example, as a structured storage system, a knowledge base can store detailed documents and data, while a knowledge graph can use graphical methods to represent and analyze the relationships between data. By constructing a knowledge base or a knowledge graph, the system can not only query and reason data more effectively but also ensure the timeliness and reliability of information.

[0040] In the embodiments of this application, at least one device instruction supported by each of multiple security devices in the system is classified into the corresponding category in a predefined category according to their respective instruction information, and several device instructions in each category are mapped to a unified instruction pre-created under this category. The unified management of the device instructions of multiple security devices can be achieved through the unified instruction, improving the management efficiency of the system for device instructions.

[0041] Based on this, a target unified instruction is obtained from these unified instructions according to the user query. By triggering the target unified instruction by the user, several device instructions in the category corresponding to the target unified instruction are distributed to their respective corresponding security devices for execution. In this way, by triggering a unified instruction by the user once, several device instructions in a category are uniformly started, achieving the effect of simultaneously sending the device instructions compatible with each other to multiple security devices, thereby improving the efficiency of the system for device instruction docking.

[0042] In addition, the embodiments of the present application also construct a knowledge base and / or knowledge graph including device instructions of multiple security devices, instruction information of each device instruction, the above division results, and unified instructions. The knowledge base and / or knowledge graph can be searched according to user queries to quickly provide the target unified instruction as the search result for the user, thereby further improving the efficiency of the system for device instruction docking.

[0043] Exemplarily, Figure 1 FIG. shows an architecture diagram of a security device instruction docking system provided by the embodiments of the present application.

[0044] In this embodiment, the security device instruction docking system 100 is an instruction docking implementation platform for implementing instruction management and instruction distribution for multiple security devices. This platform can be embodied as any computing unit, server, device, device cluster, etc. with computing and processing capabilities. The security device instruction docking system 100 is communicatively connected to multiple security devices Devicel - DeviceN, and these security devices are the objects for the security device instruction docking system 100 to perform device instruction docking.

[0045] Such as Figure 1 shown, in the security device instruction docking system 100, it includes a data collection and collation module 110, a knowledge base and / or knowledge graph management module 120, a device instruction management module 130, and a device instruction distribution module 140. The above modules are connected and called in the manner shown in Figure 1 Based on these modules, the security device instruction docking system 100 executes the security device instruction docking method including steps 1 - 7 in Figure 1 to implement the management and distribution of at least one device instruction supported by each of the multiple security devices Devicel - DeviceN.

[0046] Specifically, the data collection and collation module 110 is used to execute step 1: device instruction and instruction information collection, and step 2: data collation. It collects and collates at least one device instruction supported by each of the multiple security devices Devicel - DeviceN, as well as the instruction information of each device instruction. These device instructions can be sent to the security device through a software interface or other means to complete the tasks carried by the device instructions. The instruction information is used to help users (such as operators) understand how to correctly use the device instructions and explain the situations that may be encountered when executing the device instructions.

[0047] Exemplarily, the data collection and collation module 110 can obtain device instructions supported by the security device and instruction information of the device instructions from multiple different sources or channels. The multi-source can be reflected in multiple aspects such as data collection, analysis, and communication. By integrating multiple data sources, the integrity and accuracy of information can be improved. After collecting device instructions and instruction information from multiple data sources, the data collection and collation module 110 also needs to clean and integrate them, remove error, duplicate, or incomplete data to ensure data quality, and convert the cleaned data into a data format recognizable by a computer for storage.

[0048] The knowledge base and / or knowledge graph management module 120 is used to execute step 3: construct and update the knowledge base and / or knowledge graph. It constructs an initial knowledge base and / or knowledge graph based on the cleaned and integrated data, and dynamically updates the knowledge base and / or knowledge graph based on the addition or deletion of security devices connected to the security device instruction docking system 100 for easy query and reasoning.

[0049] The device instruction management module 130 is used to execute step 4: device instruction category classification and mapping. It classifies each device instruction in the knowledge base and / or knowledge graph into the corresponding category in the predefined category, and maps several device instructions of each category to the unified instruction of that category. The device instruction management module 130 pre-creates these unified instructions, and the unified instructions are used to uniformly start the execution of several device instructions of the corresponding category on their respective corresponding security devices. It can be understood that due to the diversity of instructions, for different types of security devices, the instructions they are compatible with for completing the same or similar tasks may be different. The unified instruction is a standardized instruction designed to be compatible with different types or models of security devices, and it can only be executed in the security device instruction docking system 100.

[0050] The knowledge base and / or knowledge graph management module 120 is also used to store the above classification results and unified instructions in the knowledge base and / or knowledge graph.

[0051] Based on this, when the security device instruction docking system 100 receives a user query sent by the user, the knowledge base and / or knowledge graph management module 120 is used to execute step 5: search for and display the target unified instruction. It can perform fuzzy matching in the knowledge base and / or knowledge graph based on the user query, and obtain and display multiple unified instructions including the target unified instruction from the unified instructions of each category. In this way, the user can determine the target unified instruction from the displayed multiple unified instructions.

[0052] When the security device instruction docking system 100 detects that the user triggers a target unified instruction, the device instruction management module 130 is further configured to execute step 6: uniformly start the execution of device instructions, and it uniformly starts the execution of several device instructions corresponding to the category of the target unified instruction.

[0053] The security device instruction docking system 100 provides a user interface, through which the user can send user queries and trigger target unified instructions by inputting or clicking buttons on the user interface.

[0054] Next, the device instruction distribution module 140 is configured to execute step 7: distribute device instructions for execution, and it distributes several device instructions corresponding to the category of the target unified instruction to their respective corresponding security devices to execute the tasks carried by the device instructions.

[0055] Thus, the security device instruction docking system 100 enables the user to issue respective compatible device instructions to multiple security devices simultaneously by triggering a target unified instruction once. In addition, the construction of the knowledge base and / or knowledge graph can improve the efficiency and accuracy of the system in querying and reasoning about device instructions or unified instructions.

[0056] Exemplarily, Figure 2 The flowchart of a security device instruction management method provided by an embodiment of the present application is shown. The security device instruction management method includes the following implementation steps:

[0057] Step S201, collect at least one device instruction supported by each of multiple security devices, and instruction information of each device instruction. The device instruction is used to control or operate the security device, and the instruction information includes the task carried by the instruction.

[0058] In one embodiment, the security device instruction management method can be implemented by the security device instruction docking system 100, and the multiple security devices can be security devices Device1 - DeviceN as Figure 1 shown. They support multiple device instructions included in each of them through device instruction functions. Common security devices include surveillance cameras, network security software, emergency lighting and evacuation indication systems, fire alarm systems, etc.

[0059] The device instruction refers to a command or signal used to control and operate the security device, and it is the basis for realizing the automation and remote control of the security device.

[0060] Exemplarily, the instruction includes an instruction structure and an instruction syntax. The instruction structure includes an instruction name and parameters, and these parameters provide additional information required to execute the instruction. The instruction syntax includes the arrangement manner of the instruction name and parameters, which includes the arrangement order, arrangement format, etc.

[0061] Device instruction example: set_temp value 22

[0062] The task carried by the above device instruction is to adjust the temperature of the security device. The instruction structure includes the instruction name: set_temp, and the parameter: value 22. Among them, "value" is the parameter name, and "22" is the parameter value. This device instruction means to adjust the device temperature to 22 degrees. The instruction syntax includes the arrangement order: the instruction name followed by the parameter, and also includes the arrangement format: there is a space separation between the instruction name and the parameter name, and between the parameter name and the parameter value respectively.

[0063] When the device instruction is sent to the security device, the security device will call the device instruction function to parse the device instruction and execute the task carried by the device instruction.

[0064] Instruction information provides a detailed description of the device instruction. It is used to explain the task carried by the device instruction, information about the instruction parameters, such as the meaning of the parameter and the value range of the parameter value, encryption information for transmitting the device instruction, such as the encryption password and encryption protocol, and the communication protocol for transmitting the instruction, such as TCP / IP. Instruction information also provides usage examples to help users understand how to use the instruction correctly, and explanations of the situations that may be encountered when executing the instruction.

[0065] Exemplarily, collect and clean all device instructions of Device1 - DeviceN and the instruction information of each device instruction, and convert the cleaned data into a computer - understandable format for integration, such as JSON, XML, or a specific database schema. Using knowledge representation methods in natural language processing technology, such as Ontology, Semantic Web, etc., define entity types, attributes, and relationships for the data, thereby constructing a structured knowledge representation, and build a knowledge base and / or knowledge graph according to the structured indication identifiers as the initial instruction dataset.

[0066] When constructing the knowledge base and / or knowledge graph, the instruction name can be used as an entity, while the instruction information can be used as an attribute of the entity or a relationship with other entities. In this way, the system can more effectively organize and retrieve information related to device instructions.

[0067] In addition, it regularly detects the addition or deletion of the security devices connected to the security device instruction docking system 100. When a new security device is added, store the device instructions and instruction information it supports into the knowledge base and / or knowledge graph. When an old security device is deleted, perform the reverse operation to update the instruction dataset.

[0068] Thus, by constructing a dynamically updated knowledge base and / or knowledge graph, the system can support complex queries and inferences, thereby improving the intelligence level of the system.

[0069] Step S202: According to the instruction information of each device instruction, at least one device instruction is respectively classified into the category it belongs to in the predefined categories. Each category represents a type of task.

[0070] In one embodiment, the multiple predefined categories provide a classification mechanism for the tasks carried by the device instructions. Each category can represent a type of task. The granularity of the defined categories can be relatively large, such as "monitoring control", "alarm control", "access control", etc., or can be more specific with a small granularity, such as "start monitoring recording", "stop monitoring recording", "adjust monitoring angle", etc. The design of the multiple categories should focus on referring to the characteristics of the collected device instructions and the instruction information of the device instructions, and be adjusted in a timely manner according to the effect of issuing instructions to the security devices, so as to efficiently handle the control and operation work of various security devices.

[0071] For example, by analyzing the collected device instructions and the instruction information of the device instructions, it is found that the two tasks of "start monitoring recording" and "stop monitoring recording" are each implemented by one instruction in various security devices. Taking a certain security device as an example, this device supports the device instruction set_monitor, and the "start monitoring recording" and "stop monitoring recording" are achieved by setting the instruction parameter state of this device instruction to on / off. If the predefined categories include "start monitoring recording" and "stop monitoring recording", then the device instruction set_monitor will be classified into both categories simultaneously for the subsequent instruction docking process, which will obviously reduce the efficiency of the system for instruction docking. Therefore, it is more reasonable to unify the above two categories of "start monitoring recording" and "stop monitoring recording" into one category of "monitoring control".

[0072] In one implementation, for each device instruction, if the task carried by the device instruction can be attributed to the task type represented by a certain category, then the device instruction is classified into that category. It can be understood that an instruction may be classified into more than one category, and at least classified into one category. The category adjustment of the predefined categories and the multiple instruction classifications can be carried out in the system based on the instruction docking effect to achieve the required instruction docking effect. The above classification process can be automatically completed based on software, or manually completed, or a combination of the two methods, which is not limited here.

[0073] Exemplarily, store the above classification results in the instruction data set for easy query and retrieval.

[0074] Specifically, add category labels to several device instructions classified into the same category to provide preliminary classification information about the instruction entities. If the instruction dataset is a knowledge base, in the knowledge base, store the category label as an attribute of the instruction entity, so that relevant device instructions can be quickly found through attribute filtering during querying. If the instruction dataset is a knowledge graph, in the knowledge graph, the category label can be used as an attribute or relationship of the entity and associated with the instruction entity to facilitate quick retrieval of relevant device instructions through the label.

[0075] Step S203: For each category, map several device instructions of this category to a unified instruction of this category. The unified instruction of this category is pre-created and used to uniformly start the execution of several device instructions of this category on their respective corresponding security devices. The unified instructions of each category are stored in the instruction dataset.

[0076] In one embodiment, due to differences in the operating systems used by various security devices, their working environments, etc., the instructions classified into the same category may be different, even though the tasks carried by these instructions in their respective corresponding security devices are the same or similar. Therefore, the device instruction management module 130 shown in Figure 1 can be used to map several device instructions of each category to a unified instruction of this category, so as to uniformly manage the device instructions of the same type through the unified instruction, thereby improving the management efficiency of the system for device instructions.

[0077] For each category, the unified instruction of this category is pre-created.

[0078] When pre-creating the unified instruction, the characteristics of several device instructions and instruction information classified into this category can be referred to for the design of the instruction structure and instruction syntax, so as to obtain the unified instruction of this category and the unified instruction information of the unified instruction.

[0079] Specifically, conduct in-depth analysis on several device instructions and instruction information of this category to determine the common operations and parameters of several device instructions. Based on these common operations and parameters, define the instruction structure and instruction syntax of the unified instruction to create the unified instruction, and generate the unified instruction information used to describe the unified instruction. The content included in the unified instruction information is the same or similar to the information included in the instruction information.

[0080] In one implementation manner, a modeling language such as the Unified Modeling Language (UML) can be used in the device instruction management module 130 to design the structure and syntax of the unified instruction. In another implementation manner, a specific Domain-Specific Language (DSL) is used to define the instruction structure and instruction syntax of the unified instruction. During the process of creating the unified instruction, the unified instruction information used to describe the unified instruction is also generated.

[0081] It can be understood that the unified instruction is a standardized instruction designed to achieve compatibility with different types or models of safety devices, and it can only be executed in the safety device instruction docking system 100.

[0082] For example, the system includes a predefined category: "Temperature Control", and the pre-created unified instruction for this category can be represented in json format as follows:

[0083]

[0084] Among them, the instruction structure of the unified instruction includes the instruction name: "set_temperature", and the instruction parameter: "temperature": 22. Here, "temperature" is the parameter name and "22" is the parameter value. This unified instruction means to adjust the device temperature to 22 degrees. The instruction syntax of the unified instruction includes the arrangement order and format of the instruction name and parameters. The specific arrangement is as shown in the above json format and will not be elaborated here.

[0085] Exemplarily, the pre-created unified instructions for each category are stored in the instruction data set for easy query and retrieval.

[0086] Next, based on the pre-created unified instructions, several device instructions under each category are mapped to the unified instructions of this category.

[0087] Instruction mapping refers to the process of establishing a mapping relationship between instructions of one format or type and instructions of another format or type. This mapping usually occurs between different systems or devices to ensure that the instructions can be executed in the correct environment. Instruction mapping can be achieved through software tools, protocols, or hardware adapters, aiming to improve the compatibility and operability between systems.

[0088] Exemplarily, for each device instruction of each category, the instruction mapping process includes establishing a mapping relationship between this device instruction and the unified instruction of this category according to the matching rules. The mapping relationship includes the mapping relationship between the instruction name of this device instruction and the instruction name of the unified instruction of this category.

[0089] According to the specific instruction structures and instruction syntaxes of several device instructions and unified instructions of each category, define the matching rules for how to map the device instructions of this category to the unified instructions. The matching rules can be simple field matching, such as direct comparison of strings; or complex logical judgments, which not only involve direct comparison of strings, but may also involve conditional judgments, range checks, regular expression matching, etc. When making complex logical judgments, it is also necessary to refer to the content included in the instruction information and the unified instruction information.

[0090] For example, for each device instruction of each category, the similarity of the character strings corresponding to the instruction name of the device instruction and the unified instruction of the category is calculated. If the similarity reaches a preset threshold, it is considered that the device instruction and the instruction name of the unified instruction of the category are successfully matched. A mapping relationship between the instruction name of the successfully matched device instruction and the instruction name of the unified instruction is established.

[0091] For device instructions whose instruction structures only include instruction names but not parameters, such as most device instructions used to implement control functions, their instruction mapping process has been completed.

[0092] For device instructions whose instruction structures include instruction names and parameters, for example, most device instructions for implementing operation functions, a mapping relationship between the parameter names of the device instructions and the parameter names of the unified instructions is also established during the instruction mapping process.

[0093] Exemplarily, the mapping relationship of each device instruction of each category is stored in the instruction data set to facilitate query and retrieval.

[0094] For each category, a unique unified instruction can be created for the category. If necessary, more than one unified instruction, such as 2 or 3, can be created for the category, and a mapping relationship between the unified instruction of the category and several device instructions of the category can be established. This process may involve, for each device instruction of the category, selecting the most matching unified instruction from multiple unified instructions by directly comparing the character strings corresponding to the instruction names, and then establishing a mapping relationship between the most matching unified instruction and the device instruction using the scheme involved in the above-mentioned instruction mapping process. It can be understood that the number of unified instructions for each category is much smaller than the number of device instructions under the category. By creating more than one unified instruction for several device instructions of the same category, flexible instruction mapping options can be provided to adapt to different usage scenarios and user needs.

[0095] As described above, for each device instruction of each category, the mapping relationship between the device instruction and the unified instruction of the category includes at least the mapping relationship of the instruction name, and sometimes also includes the mapping relationship of the parameter name. The instruction mapping process does not pay attention to the mapping relationship of the parameter values ​​between the above two instructions. This is because the system manages several device instructions of the category corresponding to the unified instruction in a unified manner through the unified instruction, and when distributing several device instructions to their corresponding security devices for execution, the parameter values ​​required by the several device instructions are transmitted through the unified instruction.

[0096] Further, for each device instruction of each category, if the mapping relationship between the device instruction and the unified instruction of the category includes the mapping relationship of parameter names, an instruction conversion rule between the device instruction and the unified instruction of the category is established. The instruction conversion rule includes the rule of passing the parameter value of the unified instruction of the category to the device instruction.

[0097] In the process of passing the parameter value of the unified instruction of the category to the corresponding device instruction, at least the following two situations are included:

[0098] For two parameter names with a mapping relationship, if the data types of the parameters they represent are the same, directly assign the parameter value of the unified instruction to the corresponding parameter of the device instruction.

[0099] If the data types of the parameters they represent are different, the parameter value of the unified instruction needs to be converted in data type first, and then assigned to the corresponding parameter of the device instruction.

[0100] Correspondingly, according to the mapping relationship of parameter names between the device instruction and the unified instruction of the category, the instruction conversion rule needs to cover the above two situations of direct assignment and indirect assignment. When establishing the instruction conversion rule involving indirect assignment, the relevant content about the parameter data type in the instruction information and the unified instruction information also needs to be referred to. Thus, by establishing the instruction conversion rule between the device instruction and the unified instruction of the category, the parameter value of the unified instruction of the category can be correctly passed to the device instruction. The parameter value of the unified instruction is set by the user.

[0101] Continuing with the example of the above predefined category: "Temperature Control", there are two device instructions A and B in this category that are mapped to the unified instruction "set_temperature". Device instructions A and B belong to two different safety devices, one is thermostat A and the other is thermostat B.

[0102] Similarly, the device instruction A represented in json format is as follows:

[0103]

[0104] The device instruction B represented in json format is as follows:

[0105]

[0106] Among them, for device instruction A, "set_temp" is the instruction name, "value" is the parameter name, and the subsequent number "22" is the parameter value, indicating that the temperature of thermostat A is adjusted to 22 degrees. For device instruction B, "temperature_set" is the instruction name, "temp" is the parameter name, and the subsequent number "22" is the parameter value, indicating that the temperature of thermostat B is adjusted to 22 degrees.

[0107] Based on the above information, examples of instruction conversion rules A: convert_to_device_a and instruction conversion rule B: convert_to_device_b for device instructions A and B written in python are as follows:

[0108]

[0109]

[0110] As shown above, in instruction conversion rules A and B, it is respectively indicated that the parameter value temperature of the parameter "temperature" of the unified instruction is passed to the parameter "value" of device instruction A and the parameter "temp" of device instruction B.

[0111] Instruction conversion rules can be implemented in various ways. For example, a custom instruction conversion engine, or a JSON converter, or an online JSON tool can be used in the device instruction management module 130 for implementation. These tools and methods can be used alone or in combination to implement complex instruction conversion rules. The specific method to be selected depends on the complexity of the instruction, the performance requirements of the conversion rule, and the available resources. Thus, the user can achieve unified management of device instructions for multiple security devices through the unified instruction, including uniformly starting the execution of several device instructions of this category on their respective corresponding security devices, thereby improving the management efficiency of the system for device instructions.

[0112] Exemplarily, Figure 3 The flowchart of a method for executing a security device instruction provided by an embodiment of the present application is shown. The method for executing a security device instruction includes the following implementation steps:

[0113] Step S301, in response to receiving a user query, perform matching in the instruction dataset to obtain a target unified instruction and display it. The instruction dataset includes unified instructions for each category in the predefined categories. The unified instructions for each category are pre-created to uniformly start the execution of several device instructions of each category on their respective corresponding security devices. Each category represents a type of task, and several device instructions of each category are divided into this category according to the tasks they carry.

[0114] In one embodiment, a user query refers to a specific inquiry made by a user when seeking an instruction docking solution. The user makes a user query to ensure that their needs can be met. Generally, the user can make an inquiry to the system by inputting voice, text, etc.

[0115] Sometimes the inquiries made by the user are relatively accurate. For example, "I need to restart our internal system. Can you provide the corresponding instructions?". However, often the user queries are not accurate enough. For example, "I need to make some adjustments to the device". Therefore, a fuzzy query method can be used to match the user queries with the unified instructions of multiple predefined categories respectively, so that the user can determine the target unified instruction according to their own intention.

[0116] Among them, fuzzy query allows the user to still be able to retrieve relevant information when they are not sure about the specific keywords or have spelling mistakes. This query method processes the user's input through a certain algorithm to match the closest option, rather than requiring an exact match. Fuzzy query is usually implemented by using wildcards, similarity algorithms or fuzzy logic to improve the flexibility and accuracy of the search.

[0117] Exemplarily, in the security device instruction docking system 100 as Figure 1 shown, a visual user query interface can be provided for the user to input a user query.

[0118] The instruction dataset includes the unified instructions for each category in the predefined categories. The unified instructions for each category are pre-created to uniformly initiate the execution of several device instructions for each category on their respective corresponding security devices. Each category represents a type of task, and several device instructions for each category are divided into this category according to the tasks they carry.

[0119] After receiving the user query, the system also uses a natural language processing library to convert the user query into the form of natural language, and calculates the semantic similarity between the converted user query and each unified instruction in the instruction dataset respectively. When calculating the similarity, the unified instruction information of the unified instructions for each category can also be referred to to improve the calculation accuracy.

[0120] For example, convert the user query into a query vector, and convert the unified instruction and its unified instruction information into a unified instruction vector, and then calculate the similarity between the query vector and the unified instruction vector based on algorithms such as Jaccard similarity.

[0121] Further, sort the unified instructions in the instruction dataset according to semantic similarity. For example, sort them in descending order of similarity scores and display them in order in the user query interface for the user to select. The number of displayed unified instructions can be limited. For example, display the preset number of unified instructions with higher rankings.

[0122] Meanwhile, the display method also includes displaying detailed information such as the task description, parameter name, parameter type, usage examples, etc. of the unified instructions, and providing a link to view the detailed information.

[0123] Based on this, the user can view the preset number of unified instructions with higher rankings and their respective unified instruction information displayed, and determine the target unified instruction that best meets the user's intention from them. The target unified instruction is the unified instruction that the user finally selects to trigger the device instruction docking.

[0124] Thus, by performing fuzzy matching on the user query, the search results desired by the user can be accurately obtained, even if the query proposed by the user is not "so" accurate.

[0125] Optionally, elements such as a drop-down menu, check box, or search box are also used in the visual user query interface to allow the user to select or input the category of the unified instruction they want to query. And based on the category, the user query can be input, which can narrow the query scope and further improve the query efficiency. In the system background, it is necessary to ensure that the knowledge base and / or knowledge graph stores the classification hierarchy of the unified instructions and related classification data, etc.

[0126] Optionally, different user permissions can also be set for different unified instructions in the system to ensure that only the unified instructions within the user's authorized scope are displayed to the user.

[0127] Step S302, in response to the user triggering the target unified instruction, distribute several device instructions corresponding to the target unified instruction category to their respective corresponding security devices for execution.

[0128] In one embodiment, in the security device instruction docking system 100 as shown in Figure 1 a user interface is also provided for the user to trigger the target unified instruction.

[0129] In response to the user triggering a target unified instruction, the system distributes several device instructions classified under the target unified instruction to their respective corresponding security devices for execution. And it obtains the execution results of these instructions, and establishes a security data set based on the execution results to facilitate the user to perform performance analysis on various security devices communicating with the system or evaluate potential security threats. Among them, the security data set is a set of data specifically used for security research and testing. It usually includes network traffic, system logs, application data, etc., and is used to develop and evaluate the effectiveness of security devices to help improve the security of the system.

[0130] Exemplarily, for each device instruction classified under the target unified instruction, after using the instruction conversion rule corresponding to the device instruction to pass the parameter value of the target unified instruction to the device instruction, it is distributed to the corresponding security device for execution. This may involve operations such as parameter value assignment and data type conversion. The parameters of the target unified instruction are set when the user triggers the target unified instruction. If the target unified instruction has no parameters, it is in the default state.

[0131] Specifically, the user triggers the target unified instruction on the visual instruction trigger interface. For example, the user enters the target unified instruction in the dialog box of the user interface and confirms it. In addition, when the user triggers the target unified instruction, parameters are also set as the parameters of the target unified instruction. Based on the target unified instruction, a search is performed in the above knowledge base and / or knowledge graph to obtain several device instructions classified under the target unified instruction. For each of these device instructions, the instruction conversion rule is used to pass the parameter value of the target unified instruction to the device instruction, so as to distribute the device instruction to the corresponding security device for execution.

[0132] Continuing with the example of the predefined category: "Temperature Control", in the device instruction management module 130 as shown in Figure 1 the corresponding instruction conversion function is called:

[0133]

[0134]

[0135] In this way, the device instruction management module 130 can correctly pass the parameter value of the unified instruction to device instruction A and device instruction B. Sometimes, this parameter value passing process also needs to consider the conversion of parameter data types, which will not be elaborated here.

[0136] Furthermore, the device instruction distribution module 140 distributes device instructions A and B to thermostat A and B to execute the tasks carried by device instructions A and B.

[0137] Optionally, if the instruction information further includes encryption information for transmitting device instructions, such as keys and authentication data. For each device instruction corresponding to the target unified instruction category, the device instruction is encrypted according to the instruction information and then distributed to the corresponding security device.

[0138] Optionally, if the instruction information further includes communication protocol information for transmitting instructions, such as TCP / IP, Modbus. For each device instruction corresponding to the target unified instruction category, the instruction is sent to the security device according to the communication protocol.

[0139] Optionally, for each device instruction corresponding to the target unified instruction category, before sending it, a security verification is also performed on it to ensure that the device instruction does not contain malicious code or offensive content.

[0140] Optionally, for each device instruction corresponding to the target unified instruction category, a log of its distribution situation is also recorded for auditing and tracking.

[0141] Finally, after distributing several device instructions corresponding to the target unified instruction category to their respective corresponding security devices, the execution results of each of the several device instructions corresponding to the target unified instruction category are obtained, and a security data set is established based on the execution results.

[0142] For example, the execution results of the above device instructions A and B on thermostat A and B respectively are returned to the security device instruction docking system 100 to establish a security data set. Thus, the user can use the security data set to perform performance analysis or assessment of potential security threats on various security devices communicatively connected to the system.

[0143] Thus, by the user triggering a unified instruction once to uniformly start several device instructions of a category, the effect of simultaneously distributing respective compatible device instructions to various security devices can be achieved, thereby improving the efficiency of the system for instruction docking.

[0144] It can be understood that the magnitudes of the sequence numbers of the steps in the above embodiments do not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiments of the present application. In addition, in some possible implementation manners, the steps in the above embodiments can be selectively executed according to the actual situation, can be partially executed, or can be fully executed, which is not limited herein. Additionally, all or part of any feature in the above embodiments can be freely combined arbitrarily on the premise of not being contradictory. The combined technical solutions are also within the scope of the present application.

[0145] Exemplarily, Figure 4 shows a schematic diagram of a security device instruction docking process provided by an embodiment of the present application.

[0146] As shown Figure 4 in the figure, the figure shows an application scenario where a security device instruction docking system is pre-built, such as Figure 1 the security device instruction docking system 100 shown. This system can trigger a unified instruction by the user once, and uniformly start several device instructions of a category, so as to achieve the effect of sending device instructions to multiple security devices at the same time. It also constructs a knowledge base and / or a knowledge graph to store the mapping relationships between device instructions and instruction information, unified instructions and unified instruction information, and unified instructions and device instructions, so as to realize the function of being able to truly feedback the execution situation of device instructions. The following are the implementation steps for this system to conduct security device instruction docking:

[0147] Step S401, the user logs in to the system.

[0148] Exemplarily, the user first needs to log in to the system 100 through identity verification. The user can only query and operate on the unified instructions within the scope of identity permissions, which ensures the security of device instruction operations.

[0149] Step S402, query the target unified instruction.

[0150] Exemplarily, this step is the starting point of the interaction between the user and the system. The user can input the target unified instruction or its keyword that they want to trigger as the user query.

[0151] Step S403, fuzzy matching.

[0152] Exemplarily, the system 100 uses the built-in fuzzy matching algorithm to find the unified instruction most similar to the user query in the knowledge base and / or the knowledge graph. This step respectively compares the user query with each unified instruction stored in the knowledge base and / or the knowledge graph through the algorithm to find the best at least one matching item.

[0153] Step S404, device instruction distribution and execution.

[0154] Exemplarily, after the user determines the target unified instruction from at least one matching item, the target unified instruction is triggered, so that the system 100 distributes several device instructions corresponding to the target unified instruction to their respective corresponding devices for execution. This step is the core of the system 100, ensuring that several device instructions can be correctly understood and executed by the corresponding security devices.

[0155] Step S405, feedback on the execution result of the device instruction.

[0156] Exemplarily, after multiple security devices execute instructions, the system 100 collects the execution results of the device instructions and feeds them back to the user. This step provides transparency of operations for the user, enabling the user to monitor the execution status of device instructions in real time and ensuring the correctness and effectiveness of operations.

[0157] Through the above process, the security device instruction docking system 100 can not only quickly issue instructions but also provide real-time feedback on the execution status, thereby improving the overall operation efficiency and security guarantee level.

[0158] Exemplarily, an embodiment of the present application further provides a computing device 1000. As Figure 5 shown, the computing device 1000 includes: a bus 1002, a processor 1004, a memory 1006, and a communication interface 1008. The processor 1004, the memory 1006, and the communication interface 1008 communicate with each other through the bus 1002. It should be understood that the present application does not limit the number of processors and memories in the computing device 1000.

[0159] The bus 1002 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the sake of representation, Figure 5 a single line is used in the figure, but it does not mean that there is only one bus or one type of bus. The bus 1004 can include a path for transmitting information between various components (for example, the memory 1006, the processor 1004, the communication interface 1008) of the computing device 1000.

[0160] The processor 1004 can include any one or more of a central processing unit, a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP), a baseboard management controller, and other processors.

[0161] The memory 1006 may include volatile memory, such as random access memory (RAM). The processor 1004 may also include non-volatile memory, such as read-only memory (ROM), flash memory, hard disk drive (HDD), or solid state drive (SSD).

[0162] The communication interface 1008 uses a transceiver module, such as but not limited to a network interface card or a transceiver, to implement communication between the computing device 1000 or a cluster composed of multiple computing devices 1000 and other devices or communication networks.

[0163] The computing device 1000 includes internal network devices, or the computing device 1000 is externally connected to multiple network devices. The internal network devices communicate with the processor 1004, the memory 1006, and the communication interface 1008 through the bus 1002, and the external network devices communicate with the computing device 1000 through interfaces such as Ethernet, Fibre Channel, and InfiniBand.

[0164] The memory 1006 stores executable program code / instructions, and the processor 1004 executes the executable program code / instructions to implement Figure 2 or Figure 3 the method flow shown in, thereby implementing all or part of the steps of the method in the above embodiments. In other words, the memory 1006 stores a program / instructions for executing all or part of the steps of the method in the above embodiments.

[0165] An embodiment of the present application provides a computing device, including: a memory and a processor; the memory and the processor are coupled; the memory is used to store a program; the processor is used to execute the program stored in the memory, and when the program stored in the memory is executed, the processor is used to execute the method in the above embodiments.

[0166] Based on the method in the above embodiments, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program, and when the computer program runs on a processor, the processor is caused to execute the method in the above embodiments.

[0167] Based on the method in the above embodiments, an embodiment of the present application provides a computer program product, and when the computer program product runs on a processor, the processor is caused to execute the method in the above embodiments.

[0168] The method steps in the embodiments of this application can be implemented in a hardware manner or by a processor executing software instructions. The software instructions can be composed of corresponding software modules, and the software modules can be stored in a random access memory (RAM), flash memory, read-only memory (ROM), programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), registers, hard disks, removable hard disks, CD-ROMs, or any other form of storage medium well-known in the art. An exemplary storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an ASIC.

[0169] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions according to the embodiments of this application are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium or transmitted through a computer-readable storage medium. The computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired manner (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or a wireless manner (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that the computer can access or a data storage device such as a server or data center that includes one or more integrated available media. The available medium can be a magnetic medium (for example, floppy disk, hard disk, magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, solid state disk (SSD)), etc.

[0170] It can be understood that the various numerical numbers involved in the embodiments of this application are only for the convenience of description and are not used to limit the scope of the embodiments of this application.

Claims

1. A method for managing security device instructions, characterized in that, The method comprises: Collecting at least one device instruction supported by each of the multiple security devices and instruction information of each device instruction; the device instruction is used to control or operate the security device, and the instruction information includes the task carried by the device instruction; According to the instruction information of each device instruction, at least one device instruction is classified into a category in the predefined categories; each category represents a type of task; For each category, several device instructions of the category are mapped to a unified instruction of the category; the unified instruction of the category is created in advance and used to uniformly start the execution of several device instructions of the category on the corresponding security devices; the unified instructions of each category are stored in the instruction data set.

2. The method according to claim 1, wherein The mapping of the plurality of device instructions of the category into a unified instruction of the category includes: For each device instruction of each category, a mapping relationship between the device instruction and the unified instruction of the category is established according to the matching rule; the mapping relationship includes a mapping relationship between the instruction name of the device instruction and the instruction name of the unified instruction of the category.

3. The method according to claim 2, characterized in that, For each device instruction of each category, the mapping relationship includes a mapping relationship between a parameter name of the device instruction and a parameter name of a unified instruction of the category; The mapping of the plurality of device instructions of the category into a unified instruction of the category includes: For each device instruction of each category, an instruction conversion rule between the device instruction and the unified instruction of the category is established according to the mapping relationship; the instruction conversion rule includes a rule for transferring the parameter value of the unified instruction of the category to the device instruction.

4. The method according to claim 2, wherein The method further comprises: Extracting at least one device instruction and entities and relationships in instruction information of each device instruction using natural language processing technology; Constructing a knowledge base and / or a knowledge graph as an initial instruction data set according to the entities and relationships; The mapping relationship of each device instruction of each category is stored in the instruction data set.

5. A method for executing a security device instruction, characterized in that, The method comprises: In response to receiving a user query, matching is performed in the instruction data set to obtain a target unified instruction and display it; the instruction data set includes unified instructions for each category in the predefined categories; the unified instructions for each category are pre-created to uniformly start the execution of several device instructions for each category on their corresponding security devices; each category represents a type of task, and several device instructions for each category are respectively divided into the category according to the tasks they carry; In response to the user triggering the target unified instruction, a number of device instructions of a category corresponding to the target unified instruction are distributed to the corresponding security devices for execution.

6. The method according to claim 5, characterized in that, The matching in the instruction data set includes: Using a natural language processing library to convert the user query into natural language, and respectively calculating the semantic similarity between the converted user query and each unified instruction in the instruction data set; The unified instructions in the instruction data set are sorted according to the semantic similarity to obtain a preset number of top-ranked unified instructions; the preset number of top-ranked unified instructions include the target unified instruction.

7. The method according to claim 5, wherein The step of distributing a plurality of device instructions of a category corresponding to the target unified instruction to respective corresponding security devices for execution includes: For each device instruction among several device instructions corresponding to the target unified instruction category, after passing the parameter value of the target unified instruction to the device instruction by using the instruction conversion rule corresponding to the device instruction, distribute it to the corresponding security device for execution; the parameter value of the target unified instruction is set by the user.

8. The method according to claim 5, wherein The instruction information further includes the encryption information for transmitting the device instruction. The distributing the several device instructions corresponding to the target unified instruction category to their respective corresponding security devices for execution includes: For each device instruction corresponding to the target unified instruction category, encrypt the device instruction according to the instruction information of the device instruction, and then distribute it to the corresponding security device for execution.

9. The method according to claim 5, wherein The method further includes: Obtaining the execution results of several device instructions corresponding to the target unified instruction category respectively; Establishing a security data set according to the execution results; the security data set is used to evaluate the security threats of multiple security devices.

10. A computing device, characterized in that, Including: At least one memory for storing programs; At least one processor for executing the programs stored in the memory. When the programs stored in the memory are executed, the processor is used to execute the method according to any one of claims 1-9.

Images