Scheduling instruction execution method and device, equipment, storage medium and product

Abstract

The invention discloses a scheduling instruction execution method and device, equipment, a storage medium and a product. The first device obtains first sensing data and sends the first sensing data to the second device, so that the second device generates a target scheduling instruction of the first sensing data under the condition that the first sensing data meets a data verification rule; the first device receives a target scheduling instruction sent by the second device; and under the condition that the target scheduling instruction meets the instruction verification rule, executing the target scheduling instruction by using the hydraulic engineering industrial control system. The sensing data is verified before the scheduling instruction is generated, the scheduling instruction is verified before the scheduling instruction is executed, and the industrial control system executes the scheduling instruction only after the two times of verification are passed, so that the industrial control system is prevented from executing a wrong scheduling instruction, and the safety is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular, to a method, device, equipment, storage medium and product for executing a scheduling instruction. Background Art

[0002] The digital twin model is mainly based on computer technology and information technology. Through means such as data collection, processing, analysis, and modeling and simulation, a digital representation of the physical entity of a water conservancy project is constructed in a virtual space. It realizes the simulation, verification, prediction, and control of the entire life cycle of the water conservancy project by creating a virtual mapping of the physical project and using historical data, real-time data, and algorithm models. Through the industrial control system of the water conservancy project, the remote control of water storage and release of the water conservancy project can be realized, and the comprehensive scheduling of water resource control and flood prevention of the entire basin can be achieved. However, if the industrial control system of the water conservancy project executes incorrect scheduling instructions such as water storage and release, it is easy to cause accidents such as water resource loss and sudden reservoir flood discharge.

[0003] In the prior art, usually, existing dedicated lines, 4G, 5G communication networks, etc. are used to install security devices such as firewalls in front of the industrial control system of the water conservancy project to prevent scheduling instructions from being tampered with. However, once the security device has a security vulnerability, the scheduling instruction may still be tampered with, and the security is relatively low. Summary of the Invention

[0004] The embodiments of the present application provide a method, device, equipment, storage medium and product for executing a scheduling instruction, which can prevent the industrial control system of the water conservancy project from executing incorrect scheduling instructions and improve the security.

[0005] In a first aspect, the embodiments of the present application provide a method for executing a scheduling instruction, which is applied to a first device and includes:

[0006] Obtain first perception data;

[0007] Send the first perception data to a second device for the second device to generate a target scheduling instruction for the first perception data when the first perception data meets the data verification rule;

[0008] Receive the target scheduling instruction sent by the second device;

[0009] When the target scheduling instruction meets the instruction verification rule, use the industrial control system of the water conservancy project to execute the target scheduling instruction.

[0010] In a possible implementation embodiment, obtaining the first perception data includes:

[0011] Use the water conservancy project perception system to obtain initial perception data;

[0012] Encrypt the initial sensing data using the first encryption key to obtain the first sensing data.

[0013] In a possible implementation example, before encrypting the initial sensing data using the first encryption key to obtain the first sensing data, the method further includes:

[0014] Receive the first encryption key sent by the mobile storage device;

[0015] Delete the first encryption key in the mobile storage device.

[0016] In a possible implementation example, the target scheduling instruction is an encrypted instruction; when the target scheduling instruction meets the instruction verification rule, using the water conservancy project industrial control system to execute the target scheduling instruction includes:

[0017] Decrypt the target scheduling instruction using the second decryption key corresponding to the second encryption key to obtain the initial scheduling instruction;

[0018] When the initial scheduling instruction meets the instruction verification rule, use the water conservancy project industrial control system to execute the target scheduling instruction.

[0019] In a possible implementation example, before using the water conservancy project industrial control system to execute the target scheduling instruction when the target scheduling instruction meets the instruction verification rule, the method further includes:

[0020] Receive the second decryption key and the instruction verification rule sent by the mobile storage device;

[0021] Delete the second decryption key and the instruction verification rule in the mobile storage device.

[0022] In a possible implementation example, the first sensing data includes water level;

[0023] In a possible implementation example, before using the water conservancy project industrial control system to execute the target scheduling instruction when the target scheduling instruction meets the instruction verification rule, the method further includes:

[0024] Receive the third sensing data sent by the second device, where the third sensing data is the predicted sensing data of the basin where the first device is located after encryption;

[0025] Decrypt the third sensing data using the second decryption key corresponding to the second encryption key to obtain the second sensing data;

[0026] Simulate the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensing data and the water level;

[0027] When the target water level is not greater than the water level threshold, determine that the target scheduling instruction meets the instruction verification rule.

[0028] In a second aspect, an embodiment of the present application provides a method for executing a scheduling instruction, which is applied to a second device and includes:

[0029] Receiving first sensing data sent by a first device;

[0030] Generating a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule;

[0031] Sending the target scheduling instruction to the first device for the first device to execute the target scheduling instruction using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule.

[0032] In a possible implementation embodiment, the first sensing data is encrypted data; generating a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule includes:

[0033] Using a first decryption key corresponding to the first encryption key to decrypt the first sensing data to obtain initial sensing data, where the initial sensing data is obtained by the first device through the water conservancy project sensing system;

[0034] Generating a target scheduling instruction for the initial sensing data when the initial sensing data meets the data verification rule.

[0035] In a possible implementation embodiment, generating a target scheduling instruction for the initial sensing data when the initial sensing data meets the data verification rule includes:

[0036] Obtaining second sensing data of the basin where the first device is located, where the second sensing data is forecast sensing data;

[0037] Determining the deviation degree between the initial sensing data and the second sensing data;

[0038] Generating a target scheduling instruction for the initial sensing data when the deviation degree is less than the deviation threshold.

[0039] In a possible implementation embodiment, generating a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule includes:

[0040] Generating an initial scheduling instruction for the first sensing data when the first sensing data meets the data verification rule;

[0041] Using a second encryption key to encrypt the initial scheduling instruction to obtain the target scheduling instruction.

[0042] In a possible implementation embodiment, the first sensing data includes water level; sending the target scheduling instruction to the first device includes:

[0043] Encrypt the second sensed data using the second encryption key to obtain third sensed data;

[0044] Send the target scheduling instruction and the third sensed data to the first device, so that the first device can decrypt the third sensed data using the second decryption key corresponding to the second encryption key to obtain the second sensed data, simulate the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensed data and the water level, and determine that the target scheduling instruction meets the instruction verification rule when the target water level is not greater than the water level threshold.

[0045] In a possible implementation embodiment, before receiving the first sensed data sent by the first device, the method further includes:

[0046] Obtain the location information of the first device;

[0047] Generate a first key pair and a second key pair corresponding to the location information using a preset key generation rule, where the first key pair includes a first encryption key and a first decryption key, and the second key pair includes a second encryption key and a second decryption key;

[0048] Send the first encryption key and the second decryption key to the mobile storage device, so that after the mobile storage device sends the first encryption key and the second decryption key to the first device, the first device deletes the first encryption key and the second decryption key.

[0049] In a third aspect, an embodiment of the present application provides an execution device for a scheduling instruction, which is applied to the first device and includes:

[0050] An acquisition module, configured to acquire the first sensed data;

[0051] A sending module, configured to send the first sensed data to the second device, so that the second device generates a target scheduling instruction for the first sensed data when the first sensed data meets the data verification rule;

[0052] A receiving module, configured to receive the target scheduling instruction sent by the second device;

[0053] An execution module, configured to execute the target scheduling instruction using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule.

[0054] In a fourth aspect, an embodiment of the present application provides an execution device for a scheduling instruction, which is applied to the second device and includes:

[0055] A receiving module, configured to receive the first sensed data sent by the first device;

[0056] A generation module, configured to generate a target scheduling instruction for the first perception data when the first perception data meets the data verification rule;

[0057] A sending module, configured to send the target scheduling instruction to a first device, so that the first device, when the target scheduling instruction meets the instruction verification rule, uses the water conservancy project industrial control system to execute the target scheduling instruction.

[0058] In a fifth aspect, an embodiment of the present application provides an electronic device, including:

[0059] A processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the execution method of the scheduling instruction described in any one of the above is implemented.

[0060] In a sixth aspect, an embodiment of the present application provides a computer storage medium, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the execution method of the scheduling instruction described in any one of the above is implemented.

[0061] In a seventh aspect, an embodiment of the present application provides a computer program product, and when the instructions in the computer program product are executed by a processor of an electronic device, the electronic device can execute the execution method of the scheduling instruction described in any one of the above.

[0062] In the execution method, device, equipment, storage medium and product of the scheduling instruction according to the embodiment of the present application, a first device obtains first perception data and sends the first perception data to a second device, so that the second device generates a target scheduling instruction for the first perception data when the first perception data meets the data verification rule; the first device receives the target scheduling instruction sent by the second device; when the target scheduling instruction meets the instruction verification rule, the water conservancy project industrial control system is used to execute the target scheduling instruction. The perception data is verified before generating the scheduling instruction, and the scheduling instruction is verified before executing the scheduling instruction. Only after both verifications pass, the industrial control system will execute the scheduling instruction, avoiding the industrial control system from executing incorrect scheduling instructions and improving security. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings required to be used in the embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

[0064] Figure 1 It is a flowchart of the execution method of the scheduling instruction provided by an embodiment of the present application;

[0065] Figure 2It is a schematic flowchart of a method for executing a scheduling instruction provided by another embodiment of the present application;

[0066] Figure 3 It is a schematic flowchart of a method for executing a scheduling instruction provided by another embodiment of the present application;

[0067] Figure 4 It is a schematic flowchart of a method for executing a scheduling instruction provided by yet another embodiment of the present application;

[0068] Figure 5 It is a schematic structural diagram of a system for executing a scheduling instruction provided by yet another embodiment of the present application;

[0069] Figure 6 It is a schematic structural diagram of a device for executing a scheduling instruction applied to a first device provided by yet another embodiment of the present application;

[0070] Figure 7 It is a schematic structural diagram of a device for executing a scheduling instruction applied to a second device provided by yet another embodiment of the present application;

[0071] Figure 8 It is a schematic structural diagram of an electronic device provided by yet another embodiment of the present application. Detailed Embodiments

[0072] The features and exemplary embodiments of various aspects of the present application will be described in detail below. To make the objectives, technical solutions, and advantages of the present application clearer and more understandable, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without some of these specific details. The following description of the embodiments is only intended to provide a better understanding of the present application by showing examples of the present application.

[0073] It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variation thereof is intended to cover a non-exclusive inclusion, such that a process, method, article or device comprising a series of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article or device. Without further limitation, elements defined by the statement "comprising..." do not preclude the existence of additional identical elements in the process, method, article or device comprising the said elements.

[0074] The embodiments of this application relate to the field of digital twin technology in the water conservancy industry. Digital twin technology is applied to the water conservancy sector, constructing a digital watershed identical to the physical one, which is simulated and runs synchronously with the real watershed. In this digital scenario, the physical watershed can be digitally mapped, intelligently simulated, and previewed, thereby better supporting scientific and intelligent decision-making in water conservancy, and playing a prominent role in water resource scheduling, river basin flood control, and water environment protection. Water conservancy projects are an important part of the digital twin watershed and a key direction for the current development of water conservancy informatization.

[0075] Digital twin models are primarily based on computer technology and information technology. Through data collection, processing, analysis, modeling, and simulation, they create a digital representation of the physical entity of a water conservancy project in a virtual space. By creating a virtual representation of the physical project and leveraging historical and real-time data and algorithmic models, they enable simulation, verification, prediction, and control of the entire life cycle of the project. The industrial control system of a water conservancy project enables remote control of water storage and release, enabling comprehensive scheduling for water resources control and flood control across the entire river basin. However, if a water conservancy project's industrial control system incorrectly executes scheduling commands, such as storage and release, it can easily lead to water resource loss and unexpected reservoir flooding. This poses a significant safety hazard to public life and property, necessitating the enhanced security of the industrial control systems of water conservancy projects.

[0076] Water conservancy projects are generally divided into medium-sized and large-scale projects and small-scale projects. Large and medium-sized hydropower stations are high-level and expensive, and their industrial control system security is generally achieved through the construction of dedicated industrial control networks and professional safety facilities, which reduces the risk of safety accidents.

[0077] Small-scale water conservancy projects are characterized by a wide variety, large number, and scattered construction locations. Types include small reservoirs, sluices, dams, ponds, water diversion projects, pumping stations, small hydropower stations, etc. The construction sites cover a wide range of areas such as the main stream, tributaries, and rainwater collection points of the river basin. Improving safety through large-scale construction of industrial control networks and adding professional safety facilities is costly.

[0078] Existing technologies typically utilize existing dedicated lines, 4G, and 5G communication networks, and deploy security devices such as firewalls in front of industrial control systems to prevent scheduling instructions from being tampered with, which could lead to the industrial control system executing incorrect scheduling instructions. However, if security vulnerabilities exist in these security devices, scheduling instructions can still be tampered with, resulting in lower security.

[0079] To solve the problems of the prior art, the embodiments of the present application provide a method, apparatus, device, storage medium, and product for executing a scheduling instruction. In the embodiments of the present application, a first device acquires first sensing data and sends the first sensing data to a second device, so that the second device generates a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule; the first device receives the target scheduling instruction sent by the second device; and when the target scheduling instruction meets the instruction verification rule, the water conservancy project industrial control system is used to execute the target scheduling instruction. By verifying the sensing data before generating the scheduling instruction and verifying the scheduling instruction before executing it, the water conservancy project industrial control system will execute the scheduling instruction only after both verifications pass, avoiding the execution of incorrect scheduling instructions by the water conservancy project industrial control system and improving security.

[0080] First, the method for executing a scheduling instruction provided by the embodiments of the present application will be introduced in detail below.

[0081] As Figure 1 shown, the method for executing a scheduling instruction provided by the embodiments of the present application includes the following steps S110 to S150.

[0082] S110. The first device acquires first sensing data.

[0083] Among them, the first device is a water conservancy project industrial control system. The water conservancy project industrial control system refers to the industrial control system in a water conservancy project.

[0084] In some embodiments, the first device acquires the first sensing data by using a sensing data receiving module. The first sensing data may include, but is not limited to, sensing data such as the water level corresponding to the water conservancy project, actual rainfall, and soil moisture.

[0085] S120. The first device sends the first sensing data to the second device.

[0086] Among them, the second device is a digital twin server.

[0087] In some embodiments, the first device may use any one of multiple transmission channels such as 4G, 5G, Beidou, and dedicated lines to send the first sensing data to the second device.

[0088] In some embodiments, the first device uses the sensing data receiving module to send the first sensing data to the sensing data aggregation module of the second device.

[0089] S130. When the first sensing data meets the data verification rule, the second device generates a target scheduling instruction for the first sensing data.

[0090] Among them, the data verification rule is set in advance.

[0091] In some embodiments, each first device has a uniquely corresponding data verification rule. The second device obtains the location information of the first device and determines the data verification rule corresponding to the first device based on the location information of the first device.

[0092] In some embodiments, the security management module of the second device stores the data verification rules. The server verification management module of the second device reads and stores the data verification rules from the security management module.

[0093] In some embodiments, the second device transmits the first sensed data from the sensed data aggregation module to the server verification management module, and uses the server verification management module to verify the first sensed data. When the first sensed data meets the data verification rules, a target scheduling instruction for the first sensed data is generated. The process of generating the target scheduling instruction is not specifically limited herein. For example, using the overall computing service of the digital twin server, perform calculations such as basin digital twin water resource scheduling, flood control scheduling, and comprehensive scheduling on the first sensed data that passes the verification, and obtain the basin digital twin scheduling calculation results. Generate a scheduling instruction for the corresponding water conservancy project according to the basin digital twin scheduling calculation results.

[0094] S140. The second device sends the target scheduling instruction to the first device.

[0095] In some embodiments, the second device uses the industrial control scheduling module to obtain the target scheduling instruction and sends the target scheduling instruction to the industrial control verification module of the first device.

[0096] In some embodiments, the second device can use any one of multiple transmission channels such as 4G, 5G, Beidou, and dedicated lines to send the target scheduling instruction to the industrial control verification module of the first device.

[0097] S150. When the target scheduling instruction meets the instruction verification rules, the first device uses the water conservancy project industrial control system to execute the target scheduling instruction.

[0098] Among them, the instruction verification rules are set in advance. For example, the target scheduling instruction meets the instruction verification rules means that the target scheduling instruction includes a preset identifier, etc.

[0099] In some embodiments, each first device has a uniquely corresponding instruction verification rule, and the instruction verification rule is bound to the location information of the first device. For the target scheduling instruction verified by the industrial control verification module, the industrial control verification module sends it to the water conservancy project industrial control system through the industrial control interface, and uses the water conservancy project industrial control system to execute the target scheduling instruction.

[0100] In some embodiments, the target scheduling instruction may, but is not limited to, include engineering scheduling instructions such as gate opening, gate closing, and flow control, for implementing engineering controls such as gate opening, gate closing, and flow control.

[0101] In the embodiment of the present application, the first device obtains first sensed data and sends the first sensed data to the second device, so that the second device generates a target scheduling instruction for the first sensed data when the first sensed data meets the data verification rule; the first device receives the target scheduling instruction sent by the second device; when the target scheduling instruction meets the instruction verification rule, the water conservancy project industrial control system is used to execute the target scheduling instruction. Verifying the sensed data before generating the scheduling instruction and verifying the scheduling instruction before executing the scheduling instruction. Only after both verifications pass will the water conservancy project industrial control system execute the scheduling instruction, avoiding the execution of incorrect scheduling instructions by the water conservancy project industrial control system and improving safety.

[0102] Based on this, in some embodiments, the first sensed data is encrypted data; as Figure 2 shown, the above S110 may specifically include S111 and S112.

[0103] S111. The first device uses the water conservancy project sensing system to obtain initial sensed data.

[0104] Among them, the initial sensed data is the actual sensed data obtained by the first device from the water conservancy project sensing system using the sensed data receiving module. The initial sensed data may, but is not limited to, include sensed data such as the water level corresponding to the water conservancy project, actual rainfall, and soil moisture.

[0105] In some embodiments, the initial sensed data may be structured sensed data.

[0106] S112. The first device uses the first encryption key to encrypt the initial sensed data to obtain the first sensed data.

[0107] Among them, the first encryption key is set in advance.

[0108] In some embodiments, the first device transfers the first encryption key from the industrial control verification module to the sensed data receiving module, and uses the sensed data receiving module to encrypt the initial sensed data to obtain the first sensed data.

[0109] The above S130 may specifically include S131 and S132.

[0110] S131. The second device uses the first decryption key corresponding to the first encryption key to decrypt the first sensed data to obtain the initial sensed data, and the initial sensed data is obtained by the first device through the water conservancy project sensing system.

[0111] Among them, the first encryption key and the first decryption key are a pair of key pairs.

[0112] In some embodiments, the perception data aggregation module of the second device obtains the first decryption key corresponding to the first encryption key from the security management module, and uses the first decryption key corresponding to the first encryption key to decrypt the first perception data to obtain the initial perception data. The perception data aggregation module of the second device transmits the initial perception data to the server verification management module, and uses the server verification management module to verify the initial perception data.

[0113] S132. When the initial perception data meets the data verification rule, the second device generates a target scheduling instruction for the initial perception data.

[0114] In some embodiments, when the initial perception data does not meet the data verification rule, the initial perception data is displayed for the server administrator to view, and it is determined by the administrator whether to adopt it.

[0115] In the embodiment of the present application, the first device encrypts the perception data and sends it to the second device, avoiding the leakage of the perception data and improving the security of the data.

[0116] Based on this, in some embodiments, before the above S112, the method may further include:

[0117] The first device receives the first encryption key sent by the mobile storage device; [[ID=2(]]

[0118] The first device deletes the first encryption key in the mobile storage device.

[0119] Among them, the mobile storage device is a mobile medium.

[0120] As an example, the mobile storage device is a USB key.

[0121] In some embodiments, using the mobile storage device, the first encryption key is written into the industrial control verification module, and at the same time, the first encryption key in the mobile storage device is automatically deleted to ensure that the first encryption key is not leaked. The written first encryption key cannot be modified. If modification is required, it is necessary to re-authorize in the digital twin and make a new first encryption key.

[0122] In the embodiment of the present application, by using the mobile storage device to send data to the first device, that is, adopting offline handover of the first encryption key, avoiding being stolen during online transmission, improving the security of the first encryption key, and further improving the security of the perception data.

[0123] Based on this, in some embodiments, the above S132 may specifically include:

[0124] The second device obtains second sensing data of the basin where the first device is located, and the second sensing data is forecast sensing data;

[0125] The second device determines the deviation degree between the initial sensing data and the second sensing data;

[0126] When the deviation degree is less than the deviation threshold, the second device generates a target scheduling instruction for the initial sensing data.

[0127] Wherein, the deviation threshold is set in advance.

[0128] In some embodiments, the second sensing data may include, but is not limited to, forecast precipitation and soil moisture. The second device uses the server verification management module to obtain the forecast meteorological data of the basin where the first device is located from the external basin meteorological sensing system, compares the forecast precipitation and soil moisture in the forecast meteorological data with the actual precipitation and soil moisture in the first sensing data, and determines whether the received first sensing data is abnormal.

[0129] Specifically, according to the deviation degree between the forecast rainfall around the water conservancy project and the actual rainfall transmitted by the actual water conservancy project and the deviation degree between the forecast soil moisture (evaporation) around the water conservancy project and the actual soil moisture (evaporation) of the actual water conservancy project for verification, when the deviation degree is less than the deviation threshold, a target scheduling instruction for the initial sensing data is generated.

[0130] In some embodiments, each first device has a unique corresponding deviation threshold. The second device obtains the location information of the first device and determines the deviation threshold corresponding to the first device based on the location information of the first device. If the deviation threshold is exceeded, it indicates that there is a possibility that the sensing data transmitted by the water conservancy project has been modified externally, and the verification cannot pass.

[0131] In the embodiment of the present application, by setting the deviation threshold of the sensing data, it is determined whether the transmitted sensing data has been modified, that is, whether it is abnormal. If there is no abnormality, a scheduling instruction is generated, which improves the security.

[0132] Based on this, in some embodiments, the target scheduling instruction is an encrypted instruction; as Figure 3 shown, the above S130 may specifically include S133 and S134.

[0133] S133. When the first sensing data meets the data verification rule, the second device generates an initial scheduling instruction for the first sensing data.

[0134] It can be understood that if there is no problem with the first sensing data, the initial scheduling instruction of the first sensing data can be obtained.

[0135] S134. The second device encrypts the initial scheduling instruction using the second encryption key to obtain the target scheduling instruction.

[0136] Among them, the second encryption key is set in advance.

[0137] In some embodiments, the industrial control scheduling module of the second device obtains the second encryption key from the security management module, encrypts the initial scheduling instruction using the second encryption key to obtain the target scheduling instruction, and sends the target scheduling instruction to the industrial control verification module of the first device using the industrial control scheduling module.

[0138] The above S150 may specifically include S151 to S152.

[0139] S151. The first device decrypts the target scheduling instruction using the second decryption key corresponding to the second encryption key to obtain the initial scheduling instruction.

[0140] Among them, the second encryption key and the second decryption key are a pair of key pairs.

[0141] In some embodiments, the industrial control verification module of the second device decrypts the target scheduling instruction using the second decryption key corresponding to the second encryption key to obtain the initial scheduling instruction.

[0142] S152. When the initial scheduling instruction meets the instruction verification rule, the first device uses the industrial control system of the water conservancy project to execute the target scheduling instruction.

[0143] In some embodiments, when the target scheduling instruction does not meet the instruction verification rule, the target scheduling instruction is displayed for the server administrator or relevant personnel of the water conservancy project to view and determine whether to adopt it.

[0144] In the embodiment of the present application, the second device encrypts the scheduling instruction and sends it to the first device, avoiding the leakage or tampering of the scheduling instruction and improving the security of the data.

[0145] Based on this, in some embodiments, before the above S150, the method may further include:

[0146] The first device receives the second decryption key and the instruction verification rule sent by the mobile storage device;

[0147] The first device deletes the second decryption key and the instruction verification rule in the mobile storage device.

[0148] Among them, the mobile storage device is a mobile medium.

[0149] As an example, the mobile storage device is a USB key.

[0150] In some embodiments, a mobile storage device is used to write the second decryption key and the instruction verification rule into the industrial control verification module, and at the same time, the second decryption key and the instruction verification rule in the mobile storage device are automatically deleted to ensure that the second decryption key and the instruction verification rule are not leaked. The written second decryption key and instruction verification rule cannot be modified. If modification is required, it is necessary to re-authorize in the digital twin and create a new second decryption key and instruction verification rule.

[0151] In the embodiments of the present application, data is sent to the first device by using a mobile storage device, that is, the second decryption key and the instruction verification rule are transferred offline, avoiding being stolen during online transmission, improving the security of the second decryption key and the instruction verification rule, and further improving the security of the industrial control system of the water conservancy project.

[0152] Based on this, in some embodiments, as Figure 4 shown, the above S140 may specifically include S141 and S142.

[0153] S141. The second device uses the second encryption key to encrypt the second sensed data to obtain the third sensed data.

[0154] In some embodiments, the industrial control scheduling module of the second device obtains the second encryption key from the security management module and uses the second encryption key to encrypt the second sensed data to obtain the third sensed data.

[0155] S142. The second device sends the target scheduling instruction and the third sensed data to the first device.

[0156] In some embodiments, the industrial control scheduling module is used to send the target scheduling instruction and the third sensed data to the industrial control verification module of the first device at the same time.

[0157] Before the above S150, the method may further include:

[0158] S210. The first device uses the second decryption key corresponding to the second encryption key to decrypt the third sensed data to obtain the second sensed data.

[0159] Wherein, the second encryption key and the second decryption key are a pair of key pairs.

[0160] S220. The first device simulates the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensed data and the water level.

[0161] In some embodiments, the water level is in the first sensed data. The industrial control verification module of the first device obtains the water level from the sensed data receiving module. Wherein, the water level indicates the current water level.

[0162] In some embodiments, the first device simulates a scenario corresponding to the second sensing data and the water level. The target scheduling instruction is executed in the simulated scenario, and the target water level after executing the target scheduling instruction is obtained.

[0163] In some embodiments, the industrial control verification module of the first device obtains the first sensing data from the sensing data receiving module, and the first device simulates a scenario corresponding to the first sensing data and the second sensing data. The target scheduling instruction is executed in the simulated scenario, and the target water level after executing the target scheduling instruction is obtained.

[0164] S230. When the target water level is not greater than the water level threshold, the first device determines that the target scheduling instruction meets the instruction verification rule.

[0165] Wherein, the water level threshold can be represented by any one of the designed storage capacity, maximum water level, and warning water level of the water conservancy project.

[0166] In some embodiments, the first device simulates the target soil moisture after executing the target scheduling instruction in a scenario corresponding to the second sensing data and the water level. When the target soil moisture is not greater than the soil moisture warning threshold, it is determined that the target scheduling instruction meets the instruction verification rule, and the first device uses the industrial control system of the water conservancy project to execute the target scheduling instruction.

[0167] In the embodiments of the present application, by simulating the scenario after executing the target scheduling instruction, obtaining the target water level in the simulated scenario, and determining whether to execute the target scheduling instruction, if the target water level does not exceed the water level threshold, the target scheduling instruction will be executed, which improves the safety.

[0168] Based on this, in some embodiments, before the above S120, the method may further include:

[0169] The second device obtains the location information of the first device;

[0170] The second device generates a first key pair and a second key pair corresponding to the location information by using a preset key generation rule. The first key pair includes a first encryption key and a first decryption key, and the second key pair includes a second encryption key and a second decryption key;

[0171] The second device sends the first encryption key and the second decryption key to the mobile storage device, so that after the mobile storage device sends the first encryption key and the second decryption key to the first device, the first device deletes the first encryption key and the second decryption key.

[0172] Wherein, the location information may include, but is not limited to, the longitude and latitude and encoding of the first device.

[0173] In some embodiments, each water conservancy project needs to be configured with an independent digital certificate. Each water conservancy project needs to be configured with two sets of digital certificates. Each set of digital certificates includes a private key and a public key. One set is used for encryption and decryption of sensing data. The public key is stored in the first device for encrypting sensing data, and the private key is stored in the second device for decrypting sensing data. One set is used for encryption and decryption of scheduling instructions. The public key is stored in the second device for encrypting scheduling instructions, and the private key is stored in the first device for decrypting scheduling instructions. The key of the second device is stored in the security management module, and the key of the first device is stored in a removable storage device. After production, it is taken to the water conservancy project site offline by the administrator and written into the industrial control verification module of the first device. Among them, the first encryption key and the second encryption key are public keys, and the first decryption key and the second decryption key are private keys.

[0174] In some embodiments, the preset key generation rule includes the RAS algorithm.

[0175] In some embodiments, the security management module of the second device uses the preset key generation rule to generate the first key pair and the second key pair corresponding to the location information.

[0176] In some embodiments, when generating the first key pair and the second key pair, it is necessary to verify the identity of the certificate producer and confirm whether the producer's login information is consistent with the preset login information. If it is consistent, the verification is passed to ensure the legal production of digital certificates. The login information can include administrator personnel information, etc.

[0177] The embodiments of the present application independently configure a key pair for each first device, further improving the security of the key.

[0178] The embodiments provided in the present application enable new small water conservancy projects to access digital twin projects at low cost without the need to build a dedicated network, which is suitable for the characteristics of small water conservancy projects with many types, large quantities, and scattered construction areas; enable existing small water conservancy projects to access digital twin projects at low cost. Existing small water conservancy projects do not need to be modified to access the digital twin network, and the existing network can be reused or access the operator network nearby, reducing the cost of accessing the dedicated network; enable new and existing small water conservancy projects to safely access digital twin projects. Combining the characteristics of water conservancy projects, a server-side verification management module and an industrial control verification module are added, and the verification rule and scheduling instruction separation technology are adopted to minimize the potential risks caused by information security issues.

[0179] In the prior art, the construction of water conservancy projects generally involves building the main project first, and digital twin projects are generally built after reaching a certain scale. Therefore, when existing water conservancy projects are connected to digital twin projects, they need to be renovated, such as reconstructing the project control dedicated network, which requires earthwork excavation, line erection, etc., with great difficulty. The embodiments of the present application solve this problem.

[0180] The embodiments provided in this application do not require the construction of a new industrial control private network. Instead, they reuse the network resources of existing water conservancy projects, add relevant systems on the water conservancy project side and the digital twin server side, improve the security of the industrial control system of water conservancy projects, and at the same time can avoid a large-scale increase in the operating costs of water conservancy projects, reducing the economic burden on the construction and operation units of water conservancy projects.

[0181] The embodiments provided in this application do not require the manual reception of instructions for scheduling by the operators of water conservancy projects, realizing automatic scheduling and reducing the labor management cost.

[0182] The embodiments provided in this application also have the following beneficial effects:

[0183] (1) Between the digital twin server side and the industrial control system of water conservancy projects, multiple transmission channels such as 4G, 5G, Beidou, and dedicated lines can be used for data transmission. The security of data transmission during the transmission process is ensured through encrypted channels and digital certificates.

[0184] (2) A server-side verification management module is added to the digital twin server side to verify whether the sensed data collected by the water conservancy project has been tampered with, ensuring the accuracy of scheduling operations.

[0185] (3) An industrial control verification module is added to the industrial control system of water conservancy projects, adopting the technologies of once-cured verification rule technology and verification rule verification technology to avoid the security risks brought by tampering with scheduling instructions.

[0186] (4) As a whole, the method of separating verification rules from scheduling instructions is adopted to minimize the potential hazards brought by information security problems. Except for the first curing of verification rules or updating of verification rules, managers can adopt remote monitoring and remote scheduling methods to improve the efficiency of automatic scheduling.

[0187] This application also provides a specific implementation manner of the execution system of scheduling instructions. As Figure 5 shown, the execution system 300 of scheduling instructions includes a first subsystem 310 and a second subsystem 320. The first subsystem is deployed on a first device, and the second subsystem is deployed on a second device. The first subsystem 310 includes a sensed data receiving module 311 and an industrial control verification module 312, and the second subsystem 320 includes a security management module 321, a sensed data aggregation module 322, a server-side verification management module 323, and an industrial control scheduling module 324.

[0188] Among them, the sensed data receiving module 311, the industrial control verification module 312, the security management module 321, the sensed data aggregation module 322, the server-side verification management module 323, and the industrial control scheduling module 324 are used to implement the execution method of scheduling instructions provided in the above embodiments. The specific implementation manners have been introduced in the execution method of scheduling instructions provided in the above embodiments and can achieve their corresponding technical effects. For the sake of brief description, they will not be elaborated here.

[0189] It should be noted that for the method for executing a scheduling instruction provided in the embodiments of the present application, the execution entity may be an execution system for the scheduling instruction, or a control module in the execution system for the scheduling instruction that executes the method for executing the scheduling instruction.

[0190] Based on the method for executing a scheduling instruction provided in the above embodiments, correspondingly, the present application also provides a specific implementation manner of an apparatus for executing a scheduling instruction. Please refer to the following embodiments.

[0191] See Figure 6 , the apparatus 400 for executing a scheduling instruction provided in the embodiments of the present application is applied to a first device and includes:

[0192] An acquisition module 410, configured to acquire first perception data;

[0193] A sending module 420, configured to send the first perception data to a second device, so that the second device generates a target scheduling instruction for the first perception data when the first perception data meets a data verification rule;

[0194] A receiving module 430, configured to receive the target scheduling instruction sent by the second device;

[0195] An execution module 440, configured to utilize a water conservancy project industrial control system to execute the target scheduling instruction when the target scheduling instruction meets an instruction verification rule.

[0196] Based on this, in some embodiments, the acquisition module 410 may specifically be configured to:

[0197] Utilize a water conservancy project perception system to acquire initial perception data;

[0198] Encrypt the initial perception data by using a first encryption key to obtain first perception data.

[0199] Based on this, in some embodiments, the apparatus 400 may further include:

[0200] The receiving module 430 is further configured to receive the first encryption key sent by a mobile storage device before encrypting the initial perception data by using the first encryption key to obtain first perception data;

[0201] A deletion module, configured to delete the first encryption key in the mobile storage device.

[0202] Based on this, in some embodiments, the target scheduling instruction is an encrypted instruction; the execution module 440 may specifically be configured to:

[0203] Decrypt the target scheduling instruction by using a second decryption key corresponding to a second encryption key to obtain an initial scheduling instruction;

[0204] When the initial scheduling instruction meets the instruction verification rule, the target scheduling instruction is executed by using the water conservancy project industrial control system.

[0205] Based on this, in some embodiments, the device 400 may further include:

[0206] The receiving module 430 is further configured to receive the second decryption key and the instruction verification rule sent by the mobile storage device before executing the target scheduling instruction by using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule;

[0207] The deletion module is used to delete the second decryption key and the instruction verification rule in the mobile storage device.

[0208] Based on this, in some embodiments, the first sensed data includes the water level; the device 400 may further include:

[0209] The receiving module 430 is further configured to receive the third sensed data sent by the second device before executing the target scheduling instruction by using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule, where the third sensed data is the predicted sensed data of the basin where the first device is located after being encrypted;

[0210] The decryption module is used to decrypt the third sensed data by using the second decryption key corresponding to the second encryption key to obtain the second sensed data;

[0211] The simulation module is used to simulate the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensed data and the water level;

[0212] The determination module is used to determine that the target scheduling instruction meets the instruction verification rule when the target water level is not greater than the water level threshold.

[0213] See Figure 7 , the execution device 500 of the scheduling instruction provided by the embodiment of the present application, which is applied to the second device, includes:

[0214] The receiving module 510 is used to receive the first sensed data sent by the first device;

[0215] The generating module 520 is used to generate the target scheduling instruction of the first sensed data when the first sensed data meets the data verification rule;

[0216] The sending module 530 is used to send the target scheduling instruction to the first device for the first device to execute the target scheduling instruction by using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule.

[0217] Based on this, in some embodiments, the first sensed data is encrypted data; the generating module 520 may specifically be configured to:

[0218] Use the first decryption key corresponding to the first encryption key to decrypt the first sensed data to obtain the initial sensed data, which is obtained by the first device through the water conservancy project sensing system;

[0219] Generate a target scheduling instruction for the initial sensed data when the initial sensed data meets the data verification rule.

[0220] Based on this, in some embodiments, the generating module 520 may specifically be configured to:

[0221] Obtain second sensed data in the basin where the first device is located, and the second sensed data is forecast sensed data;

[0222] Determine the deviation degree between the initial sensed data and the second sensed data;

[0223] Generate a target scheduling instruction for the initial sensed data when the deviation degree is less than the deviation threshold.

[0224] Based on this, in some embodiments, the generating module 520 may specifically be configured to:

[0225] Generate an initial scheduling instruction for the first sensed data when the first sensed data meets the data verification rule;

[0226] Use the second encryption key to encrypt the initial scheduling instruction to obtain the target scheduling instruction.

[0227] Based on this, in some embodiments, the first sensed data includes water level; the sending module 530 may specifically be configured to:

[0228] Use the second encryption key to encrypt the second sensed data to obtain the third sensed data;

[0229] Send the target scheduling instruction and the third sensed data to the first device, so that the first device uses the second decryption key corresponding to the second encryption key to decrypt the third sensed data to obtain the second sensed data, simulate the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensed data and the water level, and determine that the target scheduling instruction meets the instruction verification rule when the target water level is not greater than the water level threshold.

[0230] Based on this, in some embodiments, the apparatus 500 may further include:

[0231] An obtaining module, configured to obtain the location information of the first device before receiving the first sensed data sent by the first device;

[0232] The generating module 520 is further configured to generate a first key pair and a second key pair corresponding to the location information by using a preset key generation rule, where the first key pair includes a first encryption key and a first decryption key, and the second key pair includes a second encryption key and a second decryption key;

[0233] The sending module 530 is further configured to send the first encryption key and the second decryption key to the mobile storage device, so that after the mobile storage device sends the first encryption key and the second decryption key to the first device, the first device deletes the first encryption key and the second decryption key.

[0234] Each module of the execution device of the scheduling instruction provided in the embodiment of the present application can implement the functions of each step of the execution method of the scheduling instruction provided above, and can achieve the corresponding technical effects. For the sake of brevity, details are not described herein again.

[0235] Based on the same inventive concept, the embodiment of the present application further provides an electronic device.

[0236] Figure 8 The figure shows a schematic hardware structure diagram of the electronic device provided in the embodiment of the present application.

[0237] The electronic device may include a processor 601 and a memory 602 storing computer program instructions.

[0238] Specifically, the processor 601 may include a Central Processing Unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement the embodiment of the present application.

[0239] The memory 602 may include a mass storage for data or instructions. By way of example and not limitation, the memory 602 may include a Hard Disk Drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a tape, or a Universal Serial Bus (USB) drive or a combination of two or more of these. In a suitable case, the memory 602 may include a removable or non-removable (or fixed) medium. In a suitable case, the memory 602 may be internal or external to the integrated gateway disaster recovery device. In a specific embodiment, the memory 602 is a non-volatile solid-state memory.

[0240] The memory may include a read only memory (ROM), a random access memory (RAM), a magnetic disk storage media device, an optical storage media device, a flash memory device, an electrical, optical, or other physical / tangible memory storage device. Thus, in general, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of the present disclosure.

[0241] The processor 601 reads and executes the computer program instructions stored in the memory 602 to implement the execution method of any one of the scheduling instructions in the above embodiments.

[0242] In one example, the electronic device may further include a communication interface 603 and a bus 610. Among them, as Figure 8 shown, the processor 601, the memory 602, and the communication interface 603 are connected through the bus 610 and complete the communication with each other.

[0243] The communication interface 603 is mainly used to implement the communication between each module, device, unit, and / or device in the embodiments of the present application.

[0244] The bus 610 includes hardware, software, or both, and couples components of the electronic device to each other. By way of example and not limitation, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a MicroChannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (Peripheral Component Interconnect-X, PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VESA Local Bus, VLB) bus, or other suitable buses or a combination of two or more of these. Where appropriate, the bus 610 may include one or more buses. Although embodiments of the present application describe and illustrate specific buses, the present application contemplates any suitable bus or interconnect. The electronic device can execute the execution method of the scheduling instruction in the embodiments of the present invention, thereby implementing the above-mentioned execution method of the scheduling instruction.

[0245] In addition, in combination with the execution method of the scheduling instruction in the above embodiments, embodiments of the present application can be implemented by providing a computer storage medium. Computer program instructions are stored on the computer storage medium; when the computer program instructions are executed by a processor, any one of the execution methods of the scheduling instruction in the above embodiments is implemented.

[0246] The present application also provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is caused to execute each process of implementing any one of the above embodiments of the execution method of the scheduling instruction.

[0247] It should be clear that the present application is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order between steps after understanding the spirit of the present application.

[0248] The functional blocks shown in the above-described structural block diagrams can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a functional card, and so on. When implemented in software, the elements of the present application are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium or transmitted via a data signal carried in a carrier wave over a transmission medium or a communication link. A "machine-readable medium" can include any medium that can store or transmit information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (ROM), flash memory, erasable read-only memory (EROM), floppy disks, compact disc read-only memory (CD-ROM), optical discs, hard disks, fiber optic media, radio frequency (RF) links, and so on. The code segment can be downloaded via a computer network such as the Internet, an intranet, and so on.

[0249] It should also be noted that in the exemplary embodiments mentioned in the present application, some methods or systems are described based on a series of steps or devices. However, the present application is not limited to the order of the above steps, that is, the steps can be executed in the order mentioned in the embodiments, or different from the order in the embodiments, or several steps can be executed simultaneously.

[0250] Aspects of the present disclosure have been described above with reference to the flowchart and / or block diagram of a method, apparatus (system), and computer program product according to embodiments of the present disclosure. It should be understood that each block in the flowchart and / or block diagram, and the combination of blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine, such that the instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the functions / actions specified in one or more blocks of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It should also be understood that each block in the block diagram and / or flowchart, and the combination of blocks in the block diagram and / or flowchart, can also be implemented by dedicated hardware that performs the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0251] The above is only the specific implementation manner of the present application. Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems, modules, and units described above can refer to the corresponding processes in the foregoing method embodiments, and will not be described herein again. It should be understood that the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of various equivalent modifications or substitutions within the technical scope disclosed in the present application, and these modifications or substitutions should all be covered by the protection scope of the present application.

Claims

1. A method for executing a scheduling instruction, characterized in that: Applied to a first device, comprising: Acquiring first perception data; sending the first perception data to a second device, so that the second device generates a target scheduling instruction for the first perception data if the first perception data satisfies a data verification rule; receiving the target scheduling instruction sent by the second device; When the target scheduling instruction meets the instruction verification rule, the target scheduling instruction is executed using the water conservancy project industrial control system.

2. The method for executing a scheduling instruction according to claim 1, wherein The acquiring of the first perception data includes: Use the water conservancy project perception system to obtain initial perception data; The initial perception data is encrypted using a first encryption key to obtain first perception data.

3. The execution method of the scheduling instruction according to claim 2, wherein Before encrypting the initial perception data using the first encryption key to obtain the first perception data, the method further includes: receiving the first encryption key sent by a mobile storage device; The first encryption key in the mobile storage device is deleted.

4. The method for executing a scheduling instruction according to claim 1, wherein The target scheduling instruction is an encrypted instruction; and when the target scheduling instruction satisfies the instruction verification rule, the target scheduling instruction is executed by using the water conservancy project industrial control system, including: decrypting the target scheduling instruction using a second decryption key corresponding to the second encryption key to obtain an initial scheduling instruction; When the initial scheduling instruction meets the instruction verification rule, the target scheduling instruction is executed using the water conservancy project industrial control system.

5. The method for executing a scheduling instruction according to claim 4, wherein When the target scheduling instruction satisfies the instruction verification rule, before executing the target scheduling instruction using the water conservancy project industrial control system, the method further includes: receiving the second decryption key and the instruction verification rule sent by the mobile storage device; The second decryption key and the instruction verification rule in the mobile storage device are deleted.

6. The method for executing a scheduling instruction according to claim 1, wherein The first sensed data includes a water level; and when the target scheduling instruction satisfies an instruction verification rule, before executing the target scheduling instruction using the water conservancy project industrial control system, the method further includes: receiving third perception data sent by the second device, where the third perception data is encrypted forecast perception data of the watershed where the first device is located; decrypting the third perception data using a second decryption key corresponding to the second encryption key to obtain second perception data; Simulating a target water level after executing the target scheduling instruction in a scenario corresponding to the second sensing data and the water level; When the target water level is not greater than the water level threshold, it is determined that the target scheduling instruction satisfies the instruction verification rule.

7. A method for executing a scheduling instruction, characterized in that, Applied to the second device, comprising: receiving first perception data sent by a first device; generating a target scheduling instruction for the first perception data when the first perception data satisfies a data verification rule; The target scheduling instruction is sent to the first device, so that the first device executes the target scheduling instruction using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule.

8. The method for executing a scheduling instruction according to claim 7, wherein The first perception data is encrypted data; and generating a target scheduling instruction for the first perception data when the first perception data satisfies a data verification rule includes: Decrypt the first sensing data using the first decryption key corresponding to the first encryption key to obtain the initial sensing data, which is obtained by the first device through the water conservancy project sensing system; Generate a target scheduling instruction for the initial sensing data when the initial sensing data meets the data verification rule.

9. The method for executing a scheduling instruction according to claim 8, wherein The generating a target scheduling instruction for the initial sensing data when the initial sensing data meets the data verification rule includes: Obtain second sensing data of the basin where the first device is located, and the second sensing data is forecast sensing data; Determine the deviation degree between the initial sensing data and the second sensing data; Generate a target scheduling instruction for the initial sensing data when the deviation degree is less than the deviation degree threshold.

10. The method for executing a scheduling instruction according to claim 7, wherein The generating a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule includes: Generate an initial scheduling instruction for the first sensing data when the first sensing data meets the data verification rule; Encrypt the initial scheduling instruction using the second encryption key to obtain the target scheduling instruction.

11. The method for executing a scheduling instruction according to claim 9, characterized in that, The first sensing data includes water level; the sending the target scheduling instruction to the first device includes: Encrypt the second sensing data using the second encryption key to obtain the third sensing data; Send the target scheduling instruction and the third sensing data to the first device, so that the first device decrypts the third sensing data using the second decryption key corresponding to the second encryption key to obtain the second sensing data, simulates the target water level after executing the target scheduling instruction in the scenario corresponding to the second sensing data and the water level, and determines that the target scheduling instruction meets the instruction verification rule when the target water level is not greater than the water level threshold.

12. The method for executing a scheduling instruction according to claim 11, wherein Before receiving the first sensing data sent by the first device, the method further includes: Obtain the location information of the first device; Generate a first key pair and a second key pair corresponding to the location information using a preset key generation rule, where the first key pair includes the first encryption key and the first decryption key, and the second key pair includes the second encryption key and the second decryption key; Send the first encryption key and the second decryption key to the mobile storage device, so that after the mobile storage device sends the first encryption key and the second decryption key to the first device, the first device deletes the first encryption key and the second decryption key.

13. A device for executing a scheduling instruction, characterized in that: Applied to the first device, it includes: An acquisition module, configured to acquire first sensing data; A sending module, configured to send the first sensing data to a second device for the second device to generate a target scheduling instruction for the first sensing data when the first sensing data meets the data verification rule; A receiving module, configured to receive the target scheduling instruction sent by the second device; An execution module, configured to execute the target scheduling instruction using the water conservancy project industrial control system when the target scheduling instruction meets the instruction verification rule.

14. An execution device for a scheduling instruction, characterized in that, Applied to a second device, including: A receiving module, configured to receive first sensing data sent by a first device; A generating module, configured to generate a target scheduling instruction for the first sensing data when the first sensing data meets a data verification rule; A sending module, configured to send the target scheduling instruction to the first device, so that the first device executes the target scheduling instruction by using a water conservancy project industrial control system when the target scheduling instruction meets an instruction verification rule.

15. An electronic device, characterized in that: The device includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements the execution method of the scheduling instruction according to any one of claims 1-6, or the execution method of the scheduling instruction according to any one of claims 7-12.

16. A computer-readable storage medium, characterized in that, Computer program instructions are stored on the computer-readable storage medium, and when the computer program instructions are executed by a processor, they implement the execution method of the scheduling instruction according to any one of claims 1-6, or the execution method of the scheduling instruction according to any one of claims 7-12.

17. A computer program product, characterized in that, When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device can execute the execution method of the scheduling instruction according to any one of claims 1-6, or the execution method of the scheduling instruction according to any one of claims 7-12.

Images