Safety monitoring method and system based on decentralized digital twin architecture
The water conservancy monitoring system, based on a decentralized digital twin architecture, solves the problems of data silos and lagging collaborative governance in water conservancy monitoring systems, enables easy sharing and rapid response of monitoring data, and improves data security and reliability.
Patent Information
- Application Number
- CN202511704564.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-11-20
- Publication Date
- 2026-01-09
AI Technical Summary
Existing water conservancy monitoring systems suffer from data silos, lack of security and trust, and lagging collaborative governance, leading to difficulties in data sharing and response delays, and failing to meet the real-time sharing and rapid response requirements of smart water conservancy construction.
By adopting a decentralized digital twin architecture, the system collects raw equipment data from the target facility, performs real-time preprocessing and key feature extraction, constructs a digital twin, and stores and identifies the data for sharing on the water conservancy industry consortium blockchain, thereby achieving a standardized access and data sharing mechanism.
It enables easy sharing and rapid response of monitoring data, improves data security and reliability, solves the problems of data silos and lagging collaborative governance, and meets the real-time sharing and rapid response needs of smart water conservancy construction.
Smart Images
Figure CN121301136A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of water conservancy information technology, and in particular to a security monitoring method and system based on a decentralized digital twin architecture. Background Technology
[0002] In the field of water conservancy engineering, water conservancy safety monitoring systems are of great significance for ensuring the stable operation of target facilities, protecting the lives and property of people downstream, and maintaining ecological balance. Although some progress has been made in the technology for monitoring the safety of target facilities, many problems still need to be solved.
[0003] (1) Data Silo Problem: In the current information age, data has become an important asset for organizations such as enterprises and governments. However, traditional centralized systems often lead to the data silo problem, that is, data between different departments cannot be effectively shared and circulated. According to statistics, 85% of monitoring data cannot be shared across departments due to system limitations, which seriously hinders the efficiency of data utilization and affects the accuracy and timeliness of decision-making. The data silo problem not only increases the difficulty of data management, but may also lead to waste of resources and duplication of work. Therefore, breaking down data silos and achieving data interconnection has become an important task in information technology construction.
[0004] (2) Lack of Security and Trust: In the water conservancy industry, the security and credibility of data are of paramount importance. However, in the past three years, 23 data tampering incidents have occurred in the water conservancy industry. These incidents not only seriously threaten the safe operation of water conservancy facilities but also affect public trust in the industry. Among them, the 12 large dams involved have attracted widespread attention. The occurrence of data tampering incidents has exposed serious problems in the water conservancy industry's data security management, such as insufficient security awareness and outdated technical means. Therefore, strengthening data security management and improving data security and credibility has become an urgent problem to be solved in the water conservancy industry.
[0005] (3) Lagging Collaborative Governance: With the rapid development of information technology, cloud-edge-device systems have become an important infrastructure in the water conservancy industry. However, existing cloud-edge-device systems suffer from serious lag in collaborative governance, with response delays exceeding 15 minutes, far from meeting the 5-minute early warning requirement in the "Smart Water Conservancy Construction Standard". This lag not only affects the operational efficiency of water conservancy facilities but may also lead to serious safety accidents. Therefore, improving the collaborative governance capabilities of cloud-edge-device systems and achieving rapid response and early warning is an important task in the informatization construction of the water conservancy industry.
[0006] From the perspective of data processing and sharing, conventional water conservancy safety monitoring systems also have corresponding problems. Most of the water conservancy monitoring data is scattered across different monitoring systems. Since different monitoring systems rely on static models and lack standardized access and data sharing mechanisms, it is difficult to share monitoring data between monitoring systems. Furthermore, the monitoring data has characteristics such as multiple sources and dynamic changes, making it difficult for traditional sharing methods to adapt to the real-time sharing operation of monitoring data.
[0007] Therefore, we need security monitoring methods and systems based on decentralized digital twin architecture to solve the above problems. Summary of the Invention
[0008] The purpose of this application is to address the problem that existing monitoring systems rely on static models and lack standardized access and data sharing mechanisms, making it difficult for traditional sharing methods to adapt to real-time sharing of monitoring data. To solve the above technical problems, this application provides a secure monitoring method and system based on a decentralized digital twin architecture that has a standardized access and data sharing mechanism and ensures easy sharing of monitoring data.
[0009] To achieve the above objectives, the embodiments of this application adopt the following technical solution: a security monitoring method based on a decentralized digital twin architecture, comprising the following steps: collecting raw equipment data of the target facility, the raw equipment data including at least structural stress data, displacement data, and seepage data of the target facility; performing real-time preprocessing on the raw equipment data and extracting key features to obtain key data information reflecting the current structural safety status of the target facility, wherein the key data information includes at least peak structural stress, valley structural stress, displacement trend change rate, and seepage stability threshold; constructing a digital twin of the target facility, wherein the digital twin includes a three-dimensional geometric model, a material property model, and a mechanical response model of the target facility. Furthermore, the digital twin is mapped to the physical entity of the target facility in real time; key data information is associated with the digital twin, and a unique identifier is assigned to the associated key data information, generating identifier data information containing the key data information index and the location information of the digital twin; a water conservancy industry consortium chain is constructed, which includes at least nodes of the target facility operation and maintenance unit, nodes of water conservancy regulatory agencies, and nodes of third-party testing agencies. The identifier data information is encrypted to generate encrypted identifier data, which is written to the consortium chain nodes of the water conservancy industry consortium chain for decentralized encrypted storage. At the same time, the encrypted identifier data is synchronously stored in the identifier data shared database that is synchronized with the consortium chain nodes in real time.
[0010] Furthermore, according to an embodiment of this application, the method further includes the following steps: integrating the temporary permission configuration signal, the shared key signal, and the validity period information into a shared configuration signal, and storing the shared configuration signal in a shared permission database.
[0011] Furthermore, according to an embodiment of this application, the method further includes the following steps: extracting a shared configuration signal based on a data transmission instruction signal, and sending the encrypted identifier data corresponding to the shared configuration signal to the data requester.
[0012] Furthermore, according to an embodiment of this application, the method further includes the following steps: generating a reception feedback signal based on the reception result of the data requester, continuously monitoring the reception feedback signal, and generating a monitoring result signal.
[0013] Furthermore, according to the embodiments of this application, the method further includes the following steps: if the monitoring result signal is "verification successful", then the monitoring result signal is synchronized to the shared permission database and marked as a normal sharing record; if the monitoring result signal is "verification failed" or no acceptance feedback signal is received after timeout, then an abnormal record signal is generated, and the monitoring result signal is synchronized to the shared permission database and marked as an abnormal sharing record.
[0014] To achieve the above objectives, the embodiments of this application adopt the following technical solution: a safety monitoring system based on a decentralized digital twin architecture, wherein the system includes: a data acquisition module, which is used to acquire raw equipment data of the target facility, the raw equipment data including at least structural stress data, displacement data, and seepage data of the target facility; a key feature extraction module, which is used to extract key features after real-time preprocessing of the raw equipment data, and obtain key data information that reflects the current structural safety status of the target facility, wherein the key data information includes at least structural stress peak value, structural stress valley value, displacement trend change rate, and seepage stability threshold; and a digital twin construction module, which is used to construct a digital twin of the target facility, wherein the digital twin includes a three-dimensional geometric model and a material property model of the target facility. The system includes a mechanical response model, and a real-time mapping between the digital twin and the physical entity of the target facility; a data identification and coding module, which associates key data information with the digital twin of the target facility, performs a unique identification and coding operation on the associated key data information, and generates identification data information containing the index of key data information and the location information of the digital twin; and an encrypted storage module, which constructs a water conservancy industry consortium blockchain, which includes at least nodes of the target facility operation and maintenance unit, water conservancy regulatory agency, and third-party testing agency. This module encrypts the identification data information, generates encrypted identification data, writes the encrypted identification data to the consortium blockchain nodes for decentralized encrypted storage, and simultaneously stores the encrypted identification data in a shared identification data database that is synchronized with the consortium blockchain nodes in real time.
[0015] Furthermore, according to the embodiments of this application, the system further includes: a shared configuration signal integration module, which is used to integrate the temporary permission configuration signal, the shared key signal and the validity period information into a shared configuration signal, and store the shared configuration signal in the shared permission database.
[0016] Furthermore, according to an embodiment of this application, the system further includes: an encrypted identifier data sending module, which is used to extract a shared configuration signal based on a data sending instruction signal, and send the encrypted identifier data corresponding to the shared configuration signal to the data requester.
[0017] To achieve the above objectives, embodiments of this application also disclose an electronic device, which includes a processor and a memory storing computer program instructions. When the computer program instructions are executed by the processor, the processor causes the processor to perform the security monitoring method based on the decentralized digital twin architecture described above.
[0018] To achieve the above objectives, embodiments of this application also disclose a computer-readable storage medium storing computer program instructions thereon, which, when executed by a processor, cause the processor to perform the security monitoring method based on a decentralized digital twin architecture as described above. Beneficial effects
[0019] This application associates key data information with digital twins of target facilities, performs a unique identification code on the associated key data information, and generates identification data information containing the key data information index and the location information of the digital twin. Furthermore, it constructs a water conservancy industry consortium blockchain, encrypts the identification data information to generate encrypted identification data, and writes the encrypted identification data into the consortium blockchain nodes for decentralized encrypted storage. Simultaneously, the encrypted identification data is synchronously stored in an identification data sharing database that is synchronized in real time with the consortium blockchain nodes. This achieves a standardized access and data sharing mechanism, ensuring easy sharing of monitoring data and solving the technical problem of the lack of standardized access and data sharing mechanisms between existing monitoring systems, which leads to difficulties in sharing monitoring data. Attached Figure Description
[0020] The present application will be further described below with reference to the accompanying drawings and embodiments.
[0021] Figure 1 This is one of the structural diagrams of the security monitoring method based on a decentralized digital twin architecture in this application.
[0022] Figure 2 This is the second structural diagram of the security monitoring method based on a decentralized digital twin architecture in this application.
[0023] Figure 3This is a structural diagram of the security monitoring system based on a decentralized digital twin architecture, as described in this application.
[0024] Figure 4 This is a structural diagram of the electronic device of this application. Detailed Implementation
[0025] To make the objectives, technical solutions, and advantages of the present invention clear and complete, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only some, not all, embodiments of the present invention, and are merely illustrative of the embodiments of the present invention. They are not intended to limit the embodiments of the present invention. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0026] In the description of this invention, it should be noted that the terms "center," "middle," "upper," "lower," "left," "right," "inner," "outer," "top," "bottom," "side," "vertical," and "horizontal," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are used only for the convenience of describing the invention and for simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the invention. Furthermore, the terms "a," "first," "second," "third," "fourth," "fifth," and "sixth" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.
[0027] In the description of this invention, it should be noted that, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this invention based on the specific circumstances.
[0028] For purposes of simplicity and illustration, the principles of the embodiments are described primarily by way of example. In the following description, numerous specific details are set forth to provide a thorough understanding of the embodiments. However, it will be apparent to those skilled in the art that these embodiments may not be limited to these specific details in practice. In some instances, well-known methods and structures have not been described in detail to avoid unnecessarily obscuring these embodiments. Furthermore, all embodiments can be used in combination with each other. Example 1
[0029] like Figure 1As shown, this embodiment provides a security monitoring method based on a decentralized digital twin architecture, wherein the method includes the following steps: S10. Collect raw equipment data of the target facility. The raw equipment data shall include at least the structural stress data, displacement data and seepage data of the target facility. For example, the target facility can be an infrastructure used in water conservancy engineering, such as a hydraulic engineering structure or a water-retaining structure. The raw data from the target facility can be collected using acquisition equipment, which may include miniature sensors, fiber optic piezometers, and displacement sensors. The miniature sensors can be miniaturized MEMS (Microelectro Mechanical Systems) sensors, used to collect real-time stress data of the target facility structure. The displacement sensors can be GNSS (Global Navigation Satellite System) displacement sensors, used to collect real-time displacement data. The fiber optic piezometer is used to collect real-time seepage data, and this is not limited to this. Different sensor combinations are used for different dam structures and monitoring priorities. Furthermore, customized sensor combinations are used for different target facility structures and monitoring priorities. For example, high-sensitivity MEMS stress sensors are preferentially deployed at key stress-bearing parts of the target facility, as their sensitivity is significantly improved compared to ordinary sensors, enabling more accurate collection of stress data.
[0030] In addition, after collecting the raw equipment data of the target facility, the following steps are also included: performing real-time preprocessing on the raw equipment data: using sliding window filtering to remove noisy data, and using outlier detection to remove abnormal data caused by the failure of the collecting equipment, so as to obtain standardized raw equipment data.
[0031] S20. After real-time preprocessing of the raw equipment data, key features are extracted to obtain key data information that can reflect the current structural safety status of the target facility. The key data information includes at least the peak value of structural stress, the valley value of structural stress, the rate of change of displacement trend and the seepage stability threshold. Specifically, a deep learning model based on the combination of convolutional neural networks and long short-term memory networks is used to extract key features from the standardized raw equipment data to obtain key data information that reflects the current structural safety status of the target facility. This key data information includes at least the peak value of structural stress, the valley value of structural stress, the rate of change of displacement trend, and the seepage stability threshold. The deep learning model based on the combination of convolutional neural networks and long short-term memory networks can refer to existing deep learning models and is not limited here.
[0032] S30. Construct a digital twin of the target facility, wherein the digital twin includes a three-dimensional geometric model, a material property model, and a mechanical response model of the target facility, and the digital twin is mapped to the physical entity of the target facility in real time. Specifically, the method for constructing a digital twin of the target facility is as follows: Design data (specific data in the 3D geometric model) and construction data (specific data in the material property model) of the target facility are collected, and the monitoring location information of the original equipment data of the target facility (specific data in the mechanical response model) is synchronously associated to form the basic data for model construction. Then, a 3D model is constructed based on this basic data, namely, the 3D geometric model, the material property model, and the mechanical response model. It is important to note that when constructing the digital twin of the target facility, a data interface needs to be deployed. The required time for receiving original data, updating model monitoring points, and updating simulation results should be set according to actual needs to achieve real-time synchronization between the twin and the physical entity.
[0033] S40. Associate the key data information with the digital twin of the target facility, perform a unique identification code assignment operation on the associated key data information, and generate identification data information containing the key data information index and the location information of the digital twin. Specifically, key data information is associated with corresponding monitoring points of the digital twin of the target facility. By associating key data information with the digital twin of the target facility, real-time data synchronization between the physical entity and the virtual model is ensured. A coding strategy of "dam number - monitoring point number - data type - collection timestamp" can be used to uniquely identify the associated key data information and generate identification data information containing the key data information index and the location information of the digital twin. This coding strategy is for reference only and can be adjusted according to actual conditions. By uniquely identifying key data information, the prerequisite for standardized access and data sharing mechanisms is ensured when the data is shared.
[0034] S50. Construct a water conservancy industry alliance chain, which includes at least the target facility operation and maintenance unit node, water conservancy regulatory agency node, and third-party testing agency node. Encrypt the identification data information to generate encrypted identification data. Write the encrypted identification data into the alliance chain node of the water conservancy industry alliance chain to complete decentralized encrypted storage. At the same time, the encrypted identification data is synchronously stored in the identification data sharing database that is synchronized with the alliance chain node in real time. Specifically, a water conservancy industry consortium blockchain is constructed, comprising at least nodes of the target facility operation and maintenance unit, water conservancy regulatory agency, and third-party testing agency. Each consortium blockchain node, after identity authentication, possesses equal data read and write permissions. The obtained identification data information is encrypted using a hash algorithm, which can refer to existing well-known algorithms. This encrypted identification data is written to each consortium blockchain node for decentralized encrypted storage. Simultaneously, the encrypted identification data is synchronously stored in an identification data sharing database that is synchronized in real-time with each consortium blockchain node, ensuring data security and allowing for the traceability of data timeliness and accuracy through the identification data sharing database, thus resolving the issue of data source authenticity. This achieves the technical effect of providing a standardized access and data sharing mechanism, ensuring easy sharing of monitoring data.
[0035] Furthermore, such as Figure 2 As shown, the method further includes the following step S60: integrating the temporary permission configuration signal, the shared key signal, and the validity period information into a shared configuration signal, and storing the shared configuration signal in the shared permission database; The S60 specifically includes the following steps: generating a temporary permission configuration signal containing data access scope and operation permissions based on the permission configuration module; integrating the temporary permission configuration signal, shared key signal, and validity period information into a shared configuration signal containing identity authentication identifier through data fusion operation; storing the shared configuration signal in a shared permission database linked to the water conservancy industry alliance chain, and the shared permission database can automatically delete the corresponding shared configuration signal after the validity period information meets the preset conditions.
[0036] Specifically, the permission configuration module generates a temporary permission configuration signal containing the data access scope and operation permissions based on the identity of the data requester. This temporary permission configuration signal, the shared key signal, and the validity period information are then integrated into a shared configuration signal containing an identity authentication identifier through data fusion. This data fusion operation can be a superposition of data or an integration through a data fusion algorithm, which is not specifically limited here. The shared configuration signal is stored in a shared permission database linked to the water conservancy industry consortium blockchain. This shared permission database can automatically delete the corresponding shared configuration signal after the validity period expires.
[0037] Furthermore, such as Figure 2 As shown, the method further includes the following step S70: based on the data sending instruction signal, extract the shared configuration signal, and send the encrypted identifier data corresponding to the shared configuration signal to the data requester.
[0038] Specifically, the data requester generates a data sending instruction signal by submitting a data query request. The data extraction module then extracts the corresponding shared configuration signal from the shared permission database based on this data sending instruction signal. It should be noted that the extraction process also includes the following steps: verifying whether the validity period information of the shared configuration signal has not expired and whether the identity authentication matches. If the verification is successful, the module extracts the identification data information corresponding to the shared configuration signal from the identification data sharing database and sends the extracted identification data information to the data requester using an encrypted transmission protocol.
[0039] Furthermore, the security monitoring method based on the decentralized digital twin architecture also includes the following steps: generating a reception feedback signal based on the data requester's reception result, continuously monitoring the reception feedback signal and generating a monitoring result signal; if the monitoring result signal is "verification successful", then synchronizing the monitoring result signal to the shared permission database and marking it as a normal sharing record; if the monitoring result signal is "verification failed" or no reception feedback signal is received within the timeout period, then generating an abnormal record signal, and simultaneously synchronizing the monitoring result signal to the shared permission database and marking it as an abnormal sharing record.
[0040] Furthermore, before step S60, the following steps are also included: the data requester submits an application through the consortium blockchain node, triggering a zero-knowledge proof activation signal; after receiving the zero-knowledge proof activation signal, the key generation module sends a key creation signal to the key management module, and the key management module generates a pair of asymmetric keys; the key receiving module deployed on the data requester node receives the shared key signal returned by the key management module, and at the same time, the key generation module generates validity period information bound to the shared key signal based on the data sharing requirement duration.
[0041] It should be noted that, through zero-knowledge proof technology, data providers can prove the authenticity and reliability of data to data requesters without disclosing the data content; by integrating zero-knowledge proof technology during sharing, secure data sharing can be ensured under the premise of privacy protection; the key management module generates a pair of asymmetric keys using an elliptic curve cryptography algorithm, which is an existing algorithm and will not be described here.
[0042] Furthermore, real-time monitoring of the digital twin of the target facility is conducted to detect anomalies and perform assessments and predictions. For example, by training a predictive model on data such as structural stress, displacement, and seepage flow of the target facility using deep learning algorithms, potential safety hazards can be identified in advance. This model can provide intelligent decision support based on the safety status of the target facility and the prediction results. For instance, if a safety hazard occurs, the target facility safety monitoring system can generate an emergency plan and use optimization algorithms to select the best handling solution, thereby improving the efficiency and accuracy of emergency response. For example, when the water level of an upstream reservoir exceeds the warning level, the predictive model can automatically adjust the discharge of the downstream reservoir based on the prediction results of the deep learning model, achieving cross-basin flood control and collaborative management. It should be noted that while the deep learning algorithm and the optimization algorithm are commonly used algorithms, their application to the main body detection of this target facility is relatively limited.
[0043] Furthermore, the target facility safety monitoring system is equipped with a visual interactive interface, which can use 3D modeling and dynamic graphics display technology to intuitively present the real-time operating status and monitoring data of the target facility to the data requester or authorized consortium blockchain node, ensuring that the operation response time of the data requester or authorized consortium blockchain node is reduced, thereby improving the decision-making efficiency of the data requester or authorized consortium blockchain node.
[0044] Furthermore, in response to the potential cyberattacks and data breaches that the target facility's security monitoring system may face, multiple security protection mechanisms can be adopted, including intrusion detection systems, firewalls, and encrypted data transmission, to ensure that the system's security protection capabilities are significantly improved compared to traditional monitoring systems. Example 2
[0045] like Figure 2 As shown, based on the same inventive concept as the security monitoring method based on a decentralized digital twin architecture in the foregoing embodiments, this invention also provides a security monitoring system based on a decentralized digital twin architecture, the system comprising: The data acquisition module is used to collect raw equipment data of the target facility. The raw equipment data includes at least the structural stress data, displacement data and seepage data of the target facility. The key feature extraction module is used to extract key features after real-time preprocessing of the raw equipment data, and obtain key data information that can reflect the current structural safety status of the target facility. The key data information includes at least the peak value of structural stress, the valley value of structural stress, the rate of change of displacement trend and the seepage stability threshold. The digital twin construction module is used to construct a digital twin of the target facility. The digital twin includes a three-dimensional geometric model, a material property model, and a mechanical response model of the target facility, and the digital twin is mapped to the physical entity of the target facility in real time. The data identification and coding module is used to associate key data information with the digital twin of the target facility, perform a unique identification and coding operation on the associated key data information, and generate identification data information containing the key data information index and the location information of the digital twin. The encrypted storage module is used to build a water conservancy industry consortium blockchain. It encrypts the identification data information, generates encrypted identification data, writes the encrypted identification data to the consortium blockchain nodes of the water conservancy industry consortium blockchain to complete decentralized encrypted storage, and simultaneously stores the encrypted identification data to the identification data shared database that is synchronized with the consortium blockchain nodes in real time.
[0046] Furthermore, the system also includes: a shared configuration signal integration module, which integrates the temporary permission configuration signal, the shared key signal, and the validity period information into a shared configuration signal and stores the shared configuration signal in the shared permission database; Furthermore, the system also includes an encrypted identifier data sending module, which is used to extract the shared configuration signal based on the data sending instruction signal, and send the encrypted identifier data corresponding to the shared configuration signal to the data requester.
[0047] Furthermore, the system also includes a feedback signal receiving module, which is used to generate a receiving feedback signal based on the receiving result of the data requester, continuously monitor the receiving feedback signal, and generate a monitoring result signal.
[0048] Furthermore, the system also includes: a normal shared record module, which is used to synchronize the monitoring result signal to the shared permission database and mark it as a normal shared record if the monitoring result signal is "verification successful"; and a normal shared record module, which is used to generate an abnormal record signal if the monitoring result signal is "verification failed" or no acceptance feedback signal is received within a timeout, and simultaneously synchronize the monitoring result signal to the shared permission database and mark it as an abnormal shared record.
[0049] The various variations and specific examples of the security monitoring method based on decentralized digital twin architecture in the aforementioned Embodiment 1 are also applicable to the security monitoring system based on decentralized digital twin architecture in this embodiment. Through the foregoing detailed description of the security monitoring method based on decentralized digital twin architecture, those skilled in the art can clearly understand the implementation method of the security monitoring system based on decentralized digital twin architecture in this embodiment. Therefore, for the sake of brevity, it will not be described in detail here. Example 3
[0050] like Figure 3 As shown, the electronic device includes one or more processors and memory.
[0051] A processor may be a central processing unit (CPU) or other form of processing unit with data processing capabilities and / or instruction execution capabilities, and may control other components in an electronic device to perform desired functions.
[0052] The memory may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and a processor may execute the program instructions to implement the security monitoring system based on a decentralized digital twin architecture and / or other desired functions of the various embodiments of this application described above. Various contents, such as raw device data, may also be stored in the computer-readable storage medium, and the volatile memory is capable of preserving the functions related to this application.
[0053] Secondly, electronic devices also include input and output devices, which are interconnected via bus systems and / or other forms of connection mechanisms (not shown).
[0054] For example, when the electronic device is a standalone device, the input device can be a communication network connector. In addition, the input device may also include, for example, a keyboard, a mouse, etc.
[0055] This output device can output various information to the outside, including key data that has been generated. The output device may include, for example, a display, a speaker, a printer, and a communication network and its connected remote output devices.
[0056] Of course, for simplicity, the figures only show some of the components in the electronic device relevant to this application, omitting components such as buses, input / output interfaces, etc. In addition, the electronic device may include any other suitable components depending on the specific application.
[0057] Furthermore, embodiments of this application may also be computer-readable storage media storing computer program instructions that, when executed by a processor, cause the processor to perform the steps in a security monitoring system based on a decentralized digital twin architecture according to various embodiments of this application as described in the "Exemplary Methods" section of this specification.
[0058] The computer-readable storage medium may be any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may, for example, include, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatuses, or devices, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: electrical connections having one or more wires, portable disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.
[0059] Although the illustrative specific embodiments of this application have been described above to enable those skilled in the art to understand this application, this application is not limited to the scope of the specific embodiments. For those skilled in the art, all applications utilizing the concept of this application are protected as long as various variations are within the spirit and scope of this application as defined and determined by the appended claims.
Claims
1. A security monitoring method based on a decentralized digital twin architecture, wherein, The method includes the following steps: Collect raw equipment data of the target facility, which includes at least the structural stress data, displacement data and seepage data of the target facility; After real-time preprocessing of the raw data of the equipment, key features are extracted to obtain key data information that reflects the current structural safety status of the target facility. The key data information includes at least the peak value of structural stress, the valley value of structural stress, the rate of change of displacement trend and the seepage stability threshold. A digital twin of the target facility is constructed, wherein the digital twin includes a three-dimensional geometric model, a material property model, and a mechanical response model of the target facility, and the digital twin is mapped to the physical entity of the target facility in real time; The key data information is associated with the digital twin, a unique identifier is assigned to the associated key data information, and an identifier data information containing the key data information index and the location information of the digital twin is generated. A water conservancy industry consortium blockchain is constructed, which includes at least nodes of target facility operation and maintenance units, water conservancy regulatory agencies, and third-party testing agencies. The identification data information is encrypted to generate encrypted identification data, which is then written into the consortium blockchain nodes of the water conservancy industry consortium blockchain for decentralized encrypted storage. At the same time, the encrypted identification data is synchronously stored in an identification data sharing database that is synchronized with the consortium blockchain nodes in real time.
2. The security monitoring method based on a decentralized digital twin architecture according to claim 1, characterized in that, The method further includes the following steps: The temporary permission configuration signal, the shared key signal, and the validity period information are integrated into a shared configuration signal, and the shared configuration signal is stored in the shared permission database.
3. The security monitoring method based on a decentralized digital twin architecture according to claim 2, characterized in that, The method further includes the following steps: Based on the data transmission instruction signal, the shared configuration signal is extracted, and the encrypted identifier data corresponding to the shared configuration signal is sent to the data requester.
4. The security monitoring method based on a decentralized digital twin architecture according to claim 3, characterized in that, The method further includes the following steps: Based on the data requester's reception result, a reception feedback signal is generated, and the reception feedback signal is continuously monitored to generate a monitoring result signal.
5. The security monitoring method based on a decentralized digital twin architecture according to claim 4, characterized in that, The method further includes the following steps: If the monitoring result signal is "verification successful", then the monitoring result signal is synchronized to the shared permission database and marked as a normal sharing record; If the monitoring result signal is "verification failed" or the acceptance feedback signal is not received within the timeout period, an abnormal record signal is generated, and the monitoring result signal is synchronized to the shared permission database and marked as an abnormal shared record.
6. A security monitoring system based on a decentralized digital twin architecture, characterized in that, The system includes: A data acquisition module is used to acquire raw equipment data of the target facility. The raw equipment data includes at least the structural stress data, displacement data, and seepage data of the target facility. The key feature extraction module is used to extract key features after real-time preprocessing of the original data of the equipment, and obtain key data information that can reflect the current structural safety status of the target facility. The key data information includes at least the peak value of structural stress, the valley value of structural stress, the rate of change of displacement trend and the seepage stability threshold. A digital twin construction module is used to construct a digital twin of the target facility, wherein the digital twin includes a three-dimensional geometric model, a material property model, and a mechanical response model of the target facility, and the digital twin is mapped to the physical entity of the target facility in real time. The data identification and coding module is used to associate the key data information with the digital twin, perform a unique identification and coding operation on the associated key data information, and generate identification data information containing the key data information index and the location information of the digital twin. An encrypted storage module is used to construct a water conservancy industry consortium blockchain, wherein the water conservancy industry consortium blockchain includes at least target facility operation and maintenance unit nodes, water conservancy regulatory agency nodes, and third-party testing agency nodes. The module encrypts the identification data information to generate encrypted identification data, writes the encrypted identification data into the consortium blockchain nodes of the water conservancy industry consortium blockchain to complete decentralized encrypted storage, and simultaneously stores the encrypted identification data in an identification data sharing database that is synchronized with the consortium blockchain nodes in real time.
7. The security monitoring system based on a decentralized digital twin architecture according to claim 6, characterized in that, The system also includes: A shared configuration signal integration module is used to integrate temporary permission configuration signals, shared key signals, and validity period information into a shared configuration signal, and store the shared configuration signal in a shared permission database.
8. The security monitoring system based on a decentralized digital twin architecture according to claim 7, characterized in that, The system also includes: An encrypted identifier data sending module is used to extract the shared configuration signal based on a data sending instruction signal, and send the encrypted identifier data corresponding to the shared configuration signal to the data requester.
9. An electronic device, comprising: processor; A memory storing computer program instructions that, when executed by the processor, cause the processor to perform the security monitoring method based on a decentralized digital twin architecture as described in any one of claims 1-5.
10. A computer-readable storage medium having stored thereon computer program instructions, which, when executed by a processor, cause the processor to perform the security monitoring method based on a decentralized digital twin architecture as described in any one of claims 1-5.