Intelligent mapping method and device for power equipment data, equipment and storage medium
By obtaining power equipment data, extracting equipment feature information for trust evaluation and determining security policy, the identity authentication and access control problems of power equipment and users in heterogeneous network environments are solved, and the efficiency and security of data transmission are improved.
Patent Information
- Application Number
- CN202510557286.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-29
- Publication Date
- 2025-07-25
AI Technical Summary
In a heterogeneous network environment, power equipment and users cannot perform safe and reliable identity authentication and access control, resulting in insufficient data transmission efficiency and security.
By obtaining power equipment data, extracting equipment feature information, conducting trust evaluation, determining security policies, and establishing equipment mapping and mutual trust relationships based on authentication methods, safe and reliable identity authentication and access control are achieved.
It improves the efficiency and security of power equipment data transmission in heterogeneous network environments, and ensures the reliability and access control of power equipment and users.
Smart Images

Figure CN120378173A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of power systems, and in particular, to an intelligent mapping method, device, equipment and storage medium for power equipment data. Background Art
[0002] A power system is an electric energy production and consumption system composed of links such as power generation, transformation, transmission, distribution, and power consumption. Its function is to convert primary energy in nature into electric energy through power generation power devices (mainly including boilers, steam turbines, generators, and auxiliary production systems of power plants, etc.), and then supply the electric energy to each load center through the transmission and transformation systems and the distribution system. In an embedded power system, cross-domain processing of data models is required, and thus an intelligent mapping method for cross-domain data models of embedded power systems will be used. Summary of the Invention
[0003] The present invention provides an intelligent mapping method, device, equipment and storage medium for power equipment data to solve the problem that secure and reliable identity authentication and access control for power equipment and users cannot be performed in a heterogeneous network environment.
[0004] According to one aspect of the present invention, an intelligent mapping method for power equipment data is provided. The method includes:
[0005] Obtaining power equipment data respectively corresponding to a plurality of power equipment;
[0006] Extracting device feature information from the power equipment data; performing a trust assessment on the power equipment based on the device information and the device feature information of the power equipment to obtain trust assessment information of the power equipment;
[0007] Determining a security policy for the power equipment based on the trust assessment information of the power equipment, where the security policy includes the interaction permissions of the power equipment;
[0008] Authenticating the power equipment based on at least one authentication method. When the authentication of the power equipment is successful, determining the device mapping relationship between the plurality of power equipment, and establishing a mutual trust relationship between the power equipment with the device mapping relationship.
[0009] According to another aspect of the present invention, an intelligent mapping device for power equipment data is provided. The device includes:
[0010] A data acquisition module for obtaining power equipment data respectively corresponding to a plurality of power equipment;
[0011] A trust assessment module for extracting device feature information from the power equipment data; performing a trust assessment on the power equipment based on the device information and the device feature information of the power equipment to obtain trust assessment information of the power equipment;
[0012] A security policy determination module, configured to determine a security policy for a power device based on the trust evaluation information of the power device, where the security policy includes an interaction policy for the power device;
[0013] A mutual trust relationship establishment module, configured to authenticate a power device based on at least one authentication method. When the power device is successfully authenticated, determine the device mapping relationship between multiple power devices, and establish a mutual trust relationship between the power devices with the device mapping relationship.
[0014] According to another aspect of the present invention, there is provided an electronic device, which includes:
[0015] At least one processor; and
[0016] A memory communicatively connected to the at least one processor; wherein,
[0017] The memory stores a computer program executable by the at least one processor. The computer program is executed by the at least one processor so that the at least one processor can execute the intelligent mapping method for power device data provided in any embodiment of the present invention.
[0018] According to another aspect of the present invention, there is provided a computer-readable storage medium storing computer instructions for causing a processor to implement the intelligent mapping method for power device data provided in any embodiment of the present invention when executed.
[0019] The technical solution of the embodiments of the present invention obtains the power device data respectively corresponding to multiple power devices; extracts the device feature information in the power device data; obtains the device information of the power device, and performs a trust evaluation on the power device based on the device information and the device feature information to obtain the trust evaluation information of the power device; determines the security policy of the power device based on the trust evaluation information of the power device, where the security policy includes the interaction permission of the power device; authenticates the power device based on at least one authentication method. When the power device is successfully authenticated, determines the device mapping relationship between multiple power devices, and establishes a mutual trust relationship between the power devices with the device mapping relationship, solving the problem that secure and reliable identity authentication and access control cannot be performed on power devices and users in a heterogeneous network environment, realizing secure and reliable identity authentication and access control on power devices and users in a heterogeneous network environment, and improving the efficiency and security of power device data transmission in a heterogeneous network environment.
[0020] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present invention, nor is it used to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. Description of the Drawings
[0021] To more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the accompanying drawings required for the description of the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.
[0022] Figure 1 is a flowchart of an intelligent mapping method for power equipment data provided in Embodiment 1 of the present invention;
[0023] Figure 2 is a schematic diagram of an equipment authentication process provided in the embodiments of the present invention;
[0024] Figure 3 is a schematic structural diagram of an intelligent mapping device for power equipment data provided in Embodiment 2 of the present invention;
[0025] Figure 4 is a schematic structural diagram of an electronic device provided in Embodiment 3 of the present invention. Detailed Embodiments
[0026] In order to enable those skilled in the art to better understand the solutions of the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all of them. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.
[0027] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above accompanying drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that such used data can be interchanged under appropriate circumstances so that the embodiments of the present invention described here can be implemented in an order other than those illustrated or described here. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.
[0028] Embodiment 1
[0029] Figure 1This is a flow chart of a method for intelligent mapping of power equipment data provided in the first embodiment of the present invention. The method is applied to a soft bus platform. The soft bus platform can communicate and transmit with multiple power equipment respectively through a soft bus protocol. This embodiment can be applied to improve the transmission efficiency and security of power equipment data in a heterogeneous network environment. The method can be executed by an intelligent mapping device for power equipment data. The intelligent mapping device for power equipment data can be implemented in the form of hardware and / or software. The intelligent mapping device for power equipment data can be configured in an electronic device provided in the embodiment of the present invention. The electronic device can be a server, a computer or a mobile terminal, etc. For example, the mobile terminal can be a mobile phone, a tablet computer, etc. Figure 1 As shown, the method includes:
[0030] S110, obtaining power equipment data corresponding to a plurality of power equipments respectively.
[0031] In this embodiment, the power equipment is a device that performs power services such as power production, power conversion, and power distribution in the power system. Exemplarily, the power equipment may include the same type of power equipment that needs to establish a corresponding account mapping relationship in the information system in order to achieve business collaboration or data integration between different information systems. For example, it may include primary power equipment, secondary equipment, and auxiliary equipment, among which the primary power equipment can be understood as equipment that directly participates in the production, conversion, transmission, distribution, and consumption of electric energy, and the secondary equipment can be understood as equipment that measures, monitors, controls, and adjusts the operating status of the primary equipment in order to protect and ensure its normal operation. Different power equipment can be in different network environments, and they are respectively connected to the soft bus platform through soft bus technology to achieve data transmission.
[0032] The power equipment data includes but is not limited to the operation data and equipment information corresponding to the power equipment, wherein the operation data can be understood as the data generated during the operation of the power system, and the data type of the operation data corresponding to different power equipment can be different, which is determined based on the equipment type of the power equipment. Optionally, the data type of the data to be collected is pre-set based on the equipment type of the power equipment, and during the operation of the power equipment, the corresponding data content is collected in real time or periodically based on the pre-set data type to form the operation data of the power equipment. The equipment information can be understood as the basic information of the power equipment, for example, it may include the name of the power equipment, the model of the power equipment, and the unique identification code of the power equipment. The power equipment data can be obtained by collecting sensors, and can also be obtained by reading from a database. The database stores historical power equipment data of various power equipment. The corresponding power equipment is matched in the database through the unique identification code of the power equipment to obtain the power equipment data of the corresponding power equipment.
[0033] In some embodiments, the power equipment data corresponding to the power equipment may be the power equipment data corresponding to the data model of the power equipment stored in the information system. Each piece of power equipment data may be transmitted by the power equipment. The soft bus platform may perform data transmission with multiple information systems through the soft bus protocol. The soft bus platform can achieve unified support for multiple network protocols and data models by the soft bus.
[0034] The power equipment data is the power equipment data corresponding to the power equipment received by the soft bus platform, or the power equipment data sent by the information system received by the soft bus platform. Optionally, the power equipment data is the data after data conversion of the raw data collected by the power equipment.
[0035] Since there are differences in the raw data collected by different power equipment, the raw data transmitted by the power equipment can be subjected to data conversion to be converted into power equipment data in a set data format, providing a data basis for subsequent work, where the set data format may be the data format corresponding to the soft bus platform.
[0036] Optionally, each power equipment obtains the raw data to be transmitted, and the raw data to be transmitted includes one or more of structured data, unstructured data, and semi-structured data; the power equipment data of the power equipment is obtained by performing data conversion on the raw data to be transmitted based on a multi-data model.
[0037] Specifically, the raw data can be understood as the data directly obtained from the power equipment. The structured data includes, but is not limited to, data of table type, JSON type data, XML type data, etc. The unstructured data includes, but is not limited to, image data, video data, audio data, etc. The semi-structured data includes, but is not limited to, HTML type data, CSV type data, and YAML type data. The multi-data model can be understood as a model for performing data conversion on the raw data to be transmitted by the power equipment, including sub-models such as, but not limited to, a pattern matching model and at least one machine learning model, etc., which can achieve data conversion of the structured data, unstructured data, and semi-structured data in the raw data to obtain power equipment data in a set data format. Optionally, the structure type of each data in the raw data is identified, and the structure type may include structured data, unstructured data, and semi-structured data. The multi-data model includes sub-models corresponding to each structure type, and the corresponding sub-model is called through the structure type of the data to achieve data conversion. By performing data conversion on the raw data to be transmitted, the structure and semantics of the data are identified during the data conversion process, so as to achieve conversion from one data format to another.
[0038] In some embodiments, the power equipment data is the original data transmitted by the power equipment. A multi - data model is set on the soft bus platform, and the power equipment data is data - converted through the multi - data model to obtain the power equipment data in a set data format.
[0039] Optionally, during the transmission of the power equipment data, a transmission strategy for the power equipment data is determined based on the network status of the power equipment and the data type in the power equipment data to adapt to different network conditions and improve data transmission efficiency and performance.
[0040] Obtain the network status of the power equipment. The network status of the power equipment can be determined based on the network speed of the power equipment. Among them, the higher the network speed of the power equipment, the better the network status of the power equipment is characterized. Multiple network statuses are preset in advance, and each network status can correspond to a network speed interval. When the power equipment transmits the power equipment data, obtain the network speed of the power equipment, and determine the network status of the power equipment based on the network interval where the network speed of the network equipment is located.
[0041] Optionally, different network statuses can correspond to different transmission strategies. Execute the transmission strategy to transmit the power equipment data to the soft bus platform. For example, when the network status meets the first condition, the power equipment data can be transmitted as a whole; when the network status meets the second condition, the power equipment data can be divided into multiple data slices for batch transmission. Among them, the first condition indicates that the network status is good, and the second condition indicates that the network status is poor. Optionally, dividing the power equipment data into multiple data slices can be obtained based on a preset unit data volume. Optionally, the power equipment data can be divided based on the data type in the power equipment data. The data of the same data type can correspond to one or more data slices. Set the transmission order of the data slices according to the priority of the data type, and transmit the multiple data slices in sequence based on the transmission order.
[0042] Set different transmission strategies through the network status of the power equipment and the data type in the power equipment data to adapt to different network statuses for data transmission, improve data transmission efficiency, reduce network load, and reduce problems such as packet loss rate.
[0043] S120: Extract the device feature information in the power equipment data; perform a trust assessment on the power equipment based on the device information and device feature information of the power equipment to obtain the trust assessment information of the power equipment.
[0044] In this embodiment, the device feature information can be understood as the semantic features of power device data. Optionally, the power device data may include behavior data. Correspondingly, the device feature information may include the behavior features of the power device. Among them, the behavior data may be data generated by the power device when performing an interaction operation, and the interaction operation may include, but is not limited to, access to other power devices or information systems, data transmission, and data requests. In some embodiments, the feature extraction model can be used to extract features from the power device data. For example, the power device data (or the behavior data in the power device data) is input into the feature extraction model to obtain the device feature information.
[0045] The device information can be understood as the basic information of the power device, and the basic information includes, but is not limited to, the model, name, and performance indicators of the power device. Optionally, the device information of the power device includes the firmware version information and the security record information of the power device. Specifically, the firmware version information of the power device can be understood as the version information of the firmware program written in the power device. The security record information of the power device can be understood as the record information when the power device performs operations in the historical device information of the power device. For example, it may include the log information of the power device performing operations safely.
[0046] The trust evaluation information can be understood as the trust level corresponding to the power device, and it can include a numerical form. The higher the trust level of the power device, the larger the value of the trust evaluation information of the power device.
[0047] Optionally, the trust evaluation information of the power device is obtained by performing a trust evaluation on the power device based on the device information and the device feature information, including: performing a trust evaluation on the firmware version information, security record information, and device feature information of the power device through a pre-trained device trust model to obtain the trust evaluation information of the power device.
[0048] Specifically, the device trust model can be understood as a model for obtaining the trust evaluation information of the power device, including, but not limited to, machine learning models and neural network models. By performing a trust evaluation on the firmware version information, security record information, and device feature information of the power device through a pre-trained device trust model, the trust evaluation information corresponding to the power device can be obtained, and the trust evaluation of the power device can be realized. The trust evaluation information corresponding to the power device can be applied to subsequent task processing and provide a data basis for subsequent task processing.
[0049] S130. Determine the security policy of the power device based on the trust evaluation information of the power device. The security policy includes the interaction permissions of the power device.
[0050] In this embodiment, a security policy can be understood as a policy formulated to avoid information risks and security objectives. The security policy can include the interaction permissions of power equipment, where the interaction permissions can be understood as the permissions corresponding to the interaction operations performed by the power equipment.
[0051] Optionally, the trust evaluation information of the power equipment includes a trust level. Different trust levels correspond to different security policies, and different security policies include different interaction permissions. Optionally, the interaction permissions included in the security policy include one or more of the following: access permission, information query permission, information reference permission, and resource usage permission.
[0052] Specifically, the access permission can be understood as the permission for the power equipment to access other power equipment or information systems. The information query permission can be understood as the permission for the power equipment to query information from other power equipment or information systems. The information reference permission can be understood as the permission for the power equipment to reference information from other power equipment or information systems. The resource usage permission can be understood as the permission for the power equipment to use resources from other power equipment or information systems. Different types of interaction permissions support the power equipment to perform different interaction operations.
[0053] The corresponding relationship between the trust level and the interaction permissions of the power equipment is preset. The interaction permissions of the power equipment can be determined by reading the trust evaluation information of the power equipment. For example, the trust level of the power equipment can be divided into level one, level two, level three, and level four. Among them, the interaction permissions corresponding to level one can include the access permission, the interaction permissions corresponding to level two can include the access permission and the information query permission, the interaction permissions corresponding to level three can include the access permission, the information query permission, and the information reference permission, and the interaction permissions corresponding to level four can include the access permission, the information query permission, the information reference permission, and the resource usage permission. For example, through the trust evaluation of the power equipment, the trust level in the trust evaluation information of the power equipment is obtained as level two. Through the corresponding relationship between the trust level and the interaction permissions, it can be determined that the corresponding interaction permissions of the power equipment are the access permission and the information query permission.
[0054] S140. Authenticate the power equipment based on at least one authentication method. When the power equipment is successfully authenticated, determine the device mapping relationship between multiple power equipment, and establish a mutual trust relationship between the power equipment with the device mapping relationship.
[0055] In this embodiment, the mutual trust relationship can be understood as a relationship of mutual trust between power equipment with a device mapping relationship. By authenticating the power equipment, when the power equipment is successfully authenticated, determine the device mapping relationship between the power equipment and establish a mutual trust relationship between the power equipment with the device mapping relationship. Data can be transmitted between the power equipment with the device mapping relationship.
[0056] Optionally, authenticating the power device includes one or more of the following: authenticating the device identity of the power device, authenticating the associated user of the power device, and authenticating the association relationship between the power device and the associated user.
[0057] Specifically, device identity authentication can be understood as authenticating the device identity of a power device to establish a mutual trust relationship between power devices with device mapping relationships. For example, it can be authenticating the unique identification code of the power device. For example, the device identity information of the power device can be sent to an authentication server, and the authentication server performs authentication processing on the device identity information of the power device and returns an authentication result. For example, it can also be sending an information request carrying the device identity information of the power device to an authentication center, receiving the authentication information returned by the authentication center, generating a verification request carrying the device identity information and authentication information of the power device, sending the verification request to the authentication center, and the authentication center authenticates the device identity information and authentication information of the power device and returns an authentication result.
[0058] Since power devices are not open to everyone, it is necessary to authenticate the associated users of the power devices and the association relationship between the power devices and the associated users. A user who passes the authentication of the associated user of the power device can operate the power device. For example, when the device identity authentication of the power device is successful, the user's login account and login password can be sent to the soft bus platform. When the soft bus platform authenticates successfully based on the user's login account and login password, a mutual trust relationship can be established between power devices with device mapping relationships, and the user can operate the power device according to the interaction permissions of the power device. This user is the associated user of the power device.
[0059] Different authentication methods can be used to authenticate the power device, including but not limited to HTTP authentication method, Session authentication method, and Token authentication method. The authentication of the device identity of the power device, the authentication of the associated user of the power device, and the authentication of the association relationship between the power device and the associated user can be implemented using the same or different authentication methods for authentication, which is not limited here.
[0060] Exemplarily, refer to Figure 2 , Figure 2 which is a schematic diagram of a device authentication process provided by an embodiment of the present invention. Figure 2The front-end system can be a soft bus platform integrated in an electronic device (such as a mobile terminal). By logging in to the microservice gateway, a request route is sent to the system management microservice. The request route can include information to be verified. For example, the information to be verified can include one or more of the identity information of the power device, the associated user of the power device, and the association relationship between the power device and the associated user. After the system management microservice successfully verifies the username and password of the soft bus platform, token information corresponding to the information to be verified is generated and returned to the soft bus platform. The soft bus platform generates a service request, which can include an authentication request, and the service request includes the token information. The service request is sent to the microservice gateway, and the microservice gateway parses the token information in the service request and sends the token information to other microservices. Here, the other microservices can be authentication microservices, which perform authentication processing on the token information and return the authentication result.
[0061] Optionally, the device mapping relationship is determined based on the power device data or device information respectively corresponding to multiple power devices. In different information systems, the storage fields corresponding to power devices are different, and the naming specifications are not the same, but there are also certain common points, which provide a data basis for establishing the device mapping relationship for power devices.
[0062] In this embodiment, the device mapping relationship can be understood as the corresponding relationship of power devices in different information systems. Power devices with a device mapping relationship are the same type of power devices in different information systems.
[0063] Optionally, the device mapping relationship between power devices is determined by the data similarity between the power device data of power devices in different information systems. For example, power devices with a power device data similarity greater than the similarity threshold are established with a device mapping relationship.
[0064] Optionally, the power device data includes device information, and the device information can include the device name. Different device names can be used in different information systems. Correspondingly, different power devices correspond to different device names. Correspondingly, the similarity of the power device data is determined based on the device information in the power device data of power devices in different information systems, and power devices with a power device data similarity greater than the similarity threshold are established with a device mapping relationship.
[0065] The device mapping relationship between different power devices can be determined through the power device data respectively corresponding to multiple power devices, ensuring the power device data transmission and sharing between power devices.
[0066] For the power equipment after successful authentication, it can include power equipment in different information systems. Establish an equipment mapping relationship for the power equipment in different information systems, and establish a mutual trust relationship for the power equipment with the equipment mapping relationship, facilitating information access and interaction between the same type of power equipment in different information systems.
[0067] Optionally, the method further includes: based on a pre-trained equipment status recognition model, perform equipment status recognition on the power equipment data of the power equipment to determine the equipment status of the power equipment; adapt the equipment status of the power equipment to the repair data in the cloud, obtain the repair data adapted to the equipment status of the power equipment from the cloud, and transmit the repair data to the power equipment so that the power equipment performs repair processing based on the repair data.
[0068] Specifically, the equipment status recognition model can be understood as a model for performing equipment status recognition on the power equipment data of the power equipment, including but not limited to machine learning models and deep learning models. The equipment status can be understood as the operating status of the power equipment, which can include normal operating status, abnormal operating status, and abnormal types. The repair data can be understood as the data required to complete the repair of the power equipment when the power equipment is abnormal. Input the power equipment data of the power equipment into the pre-trained equipment status recognition model for equipment status recognition to determine the equipment status of the power equipment. When the power equipment is abnormal, the equipment status recognition model can identify the corresponding abnormal type of the power equipment. According to the corresponding abnormal type of the power equipment, the repair data can be adapted in the cloud, adapt to the repair data corresponding to the abnormal type, download the adapted repair data, transmit the downloaded repair data to the power equipment, and perform repair processing on the power equipment according to the downloaded repair data. By using the pre-trained equipment status recognition model to perform equipment status recognition on the power equipment data of the power equipment, determine the equipment status of the power equipment, adapt the equipment status of the power equipment to the repair data in the cloud, obtain the repair data adapted to the equipment status of the power equipment from the cloud, and transmit the repair data to the power equipment so that the power equipment performs repair processing based on the repair data, the efficiency of remote repair of the power equipment is improved, and the maintenance cost of the power equipment is reduced.
[0069] In some embodiments, the equipment status recognition model can be a neural network model. The equipment status recognition model can include multiple processing blocks, and different processing blocks can output feature information of different depths. The feature information output by the set processing block in the equipment status recognition model can be used as equipment feature information for credit evaluation of the power equipment.
[0070] In some embodiments, an emulation model of a power device may be configured on the soft bus platform. The power device data of the power device is emulated through the emulation model of the power device to simulate the operation process of the power device, and the abnormal state and abnormal type of the power device are identified according to the simulated operation process of the emulation model.
[0071] Optionally, when the power device is abnormal, the abnormal type corresponding to the power device identified by the device status identification model may also be a hardware device abnormality. A corresponding repair prompt or repair work order may be generated according to the hardware device abnormality of the power device, and a repair task is assigned to the repair personnel according to the repair work order to repair the hardware device of the power device.
[0072] The technical solution of this embodiment is as follows: obtain the power device data respectively corresponding to multiple power devices; extract the device feature information in the power device data; perform a trust evaluation on the power device based on the device information and device feature information of the power device to obtain the trust evaluation information of the power device; determine the security policy of the power device based on the trust evaluation information of the power device, where the security policy includes the interaction permissions of the power device; authenticate the power device based on at least one authentication method. When the power device is successfully authenticated, determine the device mapping relationship between multiple power devices, and establish a mutual trust relationship between the power devices with the device mapping relationship. Through credit evaluation and authentication of power devices, a trust basis is provided for establishing a mutual trust relationship, and the efficiency and security of power device data transmission in a heterogeneous network environment are improved through the mutual trust relationship between power devices.
[0073] Embodiment Two
[0074] Figure 3 It is a schematic structural diagram of an intelligent mapping device for power device data provided by Embodiment Two of the present invention. As Figure 3 shown, the device includes:
[0075] A data acquisition module 210, configured to obtain the power device data respectively corresponding to multiple power devices;
[0076] A trust evaluation module 220, configured to extract the device feature information in the power device data; perform a trust evaluation on the power device based on the device information and device feature information of the power device to obtain the trust evaluation information of the power device;
[0077] A security policy determination module 230, configured to determine the security policy of the power device based on the trust evaluation information of the power device, where the security policy includes the interaction policy of the power device;
[0078] The mutual trust relationship establishment module 240 is configured to authenticate a power device based on at least one authentication method. When the power device authentication is successful, determine the device mapping relationship between multiple power devices, and establish a mutual trust relationship between the power devices with the device mapping relationship.
[0079] Based on the above embodiments, optionally, each power device obtains the original data to be transmitted, and the original data to be transmitted includes one or more of structured data, unstructured data, and semi-structured data; the power device data of the power device is obtained by performing data conversion on the original data to be transmitted based on a multivariate data model.
[0080] Optionally, the data acquisition module 210 is further configured to: during the transmission of the power device data, determine the transmission strategy of the power device data based on the network state of the power device and the data type in the power device data.
[0081] Optionally, the device information of the power device includes the firmware version information and security record information of the power device.
[0082] The trust evaluation module 220 is further configured to: through a pre-trained device trust model, perform trust evaluation on the firmware version information, security record information, and device feature information of the power device to obtain the trust evaluation information of the power device.
[0083] Optionally, the trust evaluation information of the power device includes a trust level, different trust levels correspond to different security policies, and different security policies include different interaction permissions; the interaction permissions included in the security policy include one or more of the following: access permission, information query permission, information reference permission, and resource usage permission.
[0084] Optionally, the mutual trust relationship establishment module 240 is further configured to perform one or more of the following: authenticate the device identity of the power device, authenticate the associated user of the power device, and authenticate the association relationship between the power device and the associated user.
[0085] Optionally, the device further includes a repair processing module, configured to: based on a pre-trained device state recognition model, perform device state recognition on the power device data of the power device to determine the device state of the power device; based on the adaptation of the device state of the power device to the repair data in the cloud, obtain the repair data adapted to the device state of the power device from the cloud, and transmit the repair data to the power device so that the power device performs repair processing based on the repair data.
[0086] The intelligent mapping device for power device data provided by the embodiments of the present invention can execute the intelligent mapping method for power device data provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing the method.
[0087] Embodiment 3
[0088] Figure 4 FIG. 5 is a schematic structural diagram of an electronic device provided in Embodiment 3 of the present invention. The electronic device 10 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processors, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or claimed herein.
[0089] As Figure 4 shown, the electronic device 10 includes at least one processor 11, and a memory communicatively connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc. The memory stores a computer program executable by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.
[0090] Multiple components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.
[0091] The processor 11 may be various general-purpose and / or special-purpose processing components having processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the intelligent mapping method for power device data.
[0092] In some embodiments, the intelligent mapping method of power equipment data can be implemented as a computer program tangibly embodied in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the intelligent mapping method of power equipment data described above can be executed. Alternatively, in other embodiments, the processor 11 can be configured to execute the intelligent mapping method of power equipment data in any other suitable manner (e.g., by means of firmware).
[0093] The various embodiments of the systems and techniques described above in this document can be implemented in digital electronic circuitry, integrated circuit systems, field-programmable gate arrays (FPGA), application-specific integrated circuits (ASIC), application-specific standard products (ASSP), systems-on-a-chip (SOC), complex programmable logic devices (CPLD), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special or general programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit the data and instructions to the storage system, the at least one input device, and the at least one output device.
[0094] The computer program for implementing the intelligent mapping method of power equipment data of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to the processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowchart and / or block diagram are implemented. The computer program can be executed entirely on the machine, partially on the machine, as a stand-alone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.
[0095] Embodiment IV
[0096] Embodiment IV of the present invention further provides a computer-readable storage medium storing computer instructions for causing a processor to execute an intelligent mapping method of power equipment data, the method including:
[0097] Obtain power device data corresponding to multiple power devices respectively; extract device feature information from the power device data; perform a trust assessment on the power devices based on the device information and device feature information of the power devices to obtain trust assessment information of the power devices; determine a security policy for the power devices based on the trust assessment information of the power devices, where the security policy includes the interaction permissions of the power devices; authenticate the power devices based on at least one authentication method, and in the case of successful authentication of the power devices, determine the device mapping relationship between the multiple power devices, and establish a mutual trust relationship between the power devices with the device mapping relationship.
[0098] In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium may be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0099] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the electronic device. Other kinds of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, speech input, or tactile input).
[0100] The systems and techniques described herein can be implemented in a computing system including backend components (e.g., as a data server), or a computing system including middleware components (e.g., an application server), or a computing system including frontend components (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described herein), or a computing system including any combination of such backend, middleware, or frontend components. The components of the system can be interconnected to each other by digital data communication in any form or medium (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.
[0101] A computing system can include a client and a server. The client and the server are generally remote from each other and typically interact through a communication network. The client-server relationship is created by computer programs running on respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system, and solves the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS services.
[0102] It should be understood that various forms of the processes shown above can be used, with steps reordered, added, or deleted. For example, the steps recited in the present invention can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved, and no limitation is imposed herein.
[0103] The above specific embodiments do not constitute a limitation on the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.
Claims
1. An intelligent mapping method for power equipment data, characterized in that, Including: Obtain power device data corresponding to multiple power devices respectively; Extract device feature information from the power device data; Perform a trust assessment on the power device based on the device information of the power device and the device feature information to obtain the trust assessment information of the power device; Determine the security policy of the power device based on the trust assessment information of the power device, where the security policy includes the interaction permissions of the power device; Authenticate the power device based on at least one authentication method. When the power device is successfully authenticated, determine the device mapping relationship between the multiple power devices, and establish a mutual trust relationship between the power devices with the device mapping relationship.
2. The method according to claim 1, characterized in that Each of the power devices obtains the original data to be transmitted, and the original data to be transmitted includes one or more of structured data, unstructured data, and semi-structured data; The power device data of the power device is obtained by performing data conversion on the original data to be transmitted based on a multi-source data model.
3. The method according to claim 1 or 2, characterized in that, During the transmission process of the power device data, determine the transmission strategy of the power device data based on the network state of the power device and the data type in the power device data.
4. The method according to claim 1, wherein The device information of the power device includes the firmware version information and security record information of the power device; The performing a trust assessment on the power device based on the device information and the device feature information to obtain the trust assessment information of the power device includes: Perform a trust assessment on the firmware version information, security record information, and device feature information of the power device through a pre-trained device trust model to obtain the trust assessment information of the power device.
5. The method according to claim 1 or 4, characterized in that, The trust assessment information of the power device includes a trust level, different trust levels correspond to different security policies, and different security policies include different interaction permissions; The interaction permissions included in the security policy include one or more of the following: access permission, information query permission, information citation permission, and resource usage permission.
6. The method according to claim 1, wherein Authenticating the power device includes one or more of the following: authenticating the device identity of the power device, authenticating the associated user of the power device, and authenticating the association relationship between the power device and the associated user.
7. The method according to claim 1, characterized in that, The method further includes: Based on a pre-trained device state recognition model, perform device state recognition on the power device data of the power device to determine the device state of the power device; Adapt the device state of the power device to the repair data in the cloud, obtain the repair data adapted to the device state of the power device from the cloud, and transmit the repair data to the power device so that the power device performs repair processing based on the repair data.
8. An intelligent mapping device for power equipment data, characterized in that, Including: A data acquisition module, configured to obtain power device data corresponding to multiple power devices respectively; A trust assessment module, configured to extract device feature information from the power device data; Perform a trust assessment on the power device based on the device information of the power device and the device feature information to obtain the trust assessment information of the power device; A security policy determination module, configured to determine a security policy for the power device based on the trust evaluation information of the power device, where the security policy includes an interaction policy of the power device; A mutual trust relationship establishment module, configured to authenticate the power device based on at least one authentication method, and determine a device mapping relationship between the multiple power devices when the power device is successfully authenticated, and establish a mutual trust relationship between the power devices having the device mapping relationship.
9. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor, so that the at least one processor can execute the intelligent mapping method of the power device data according to any one of claims 1-7.
10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions, and the computer instructions are used to implement the intelligent mapping method of the power device data according to any one of claims 1-7 when executed by a processor.