Operation site investigation auxiliary system and method

Abstract

The invention discloses an operation site investigation auxiliary system and method, and relates to the technical field of electric power operation site management, qualification information and basic information about operators in a power grid data system are synchronized, attribute private keys are managed according to the qualification information and the basic information, and the attribute private keys are automatically updated when qualification changes, so that the management efficiency is improved. The condition that the qualification is expired but the private key is still available is avoided, and then the transmission security of the attribute private key can be effectively improved through dispersed key transmission, so that only district and county power supply institutions can fill requirements, and the intervention of unauthorized subjects is avoided; the third-level approval focuses on basic information, security risk and compliance respectively; and finally, before the demand is checked and processed, data security and qualification dual verification is passed, and the operation can be carried out after the verification is passed, so that the flow consistency, the data compliance and the data security are effectively ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of power operation site management, in particular to an operation site survey auxiliary system and method. BACKGROUND

[0002] The power operation site survey is a key pre-link for ensuring operation safety and compliance. The current industry generally has the following technical pain points: the operation personnel qualification information relies on manual regular update, which is prone to the risk of participating in operation with expired qualification; at the same time, the qualification verification is mostly manual checking of paper certificates, which is low in efficiency and easy to be forged, cannot be linked with data access permission, and leads to the possibility of unqualified personnel accessing sensitive operation data (such as power-off range, equipment parameters). If the existing system uses a single key to manage data access, the key is mostly transmitted as a whole, and once the transmission process is intercepted or the mobile device is lost, the key is prone to be leaked, thereby causing sensitive data leakage. Some systems lack strict role verification, which may lead to the situation that non-district power supply station roles report operation demand; the approval process has problems such as grade skipping and incomplete opinions, which cannot ensure the compliance and safety of operation demand. The survey data, operation information and work tickets need to be manually filled out repeatedly, which is prone to data inconsistency (such as inconsistent work ticket power-off range and survey record); manual verification is low in efficiency, and paper documents are inconvenient to store and difficult to trace.

[0003] Although the existing technology attempts to introduce digital tools, it does not form a full closed-loop management of qualification-key-data-process, especially in the aspects of safe transmission of keys, deep binding of qualification and data access, and intelligent verification of the whole process, which has obvious deficiencies and cannot meet the strict requirements of the power industry on operation safety and compliance. SUMMARY

[0004] The present application aims to provide an operation site survey auxiliary system and method, which solves the problems of qualification lag, key leakage, process non-compliance and data inconsistency, and improves the safety, compliance and efficiency of power operation site survey.

[0005] The present application is implemented by the following technical solutions:

[0006] The first aspect of the present application provides an operation site survey auxiliary system, comprising:

[0007] A qualification synchronous management module is configured to synchronize the qualification information and basic information of operation personnel in the power grid data system every data synchronization period, and generate an attribute private key corresponding to each operation personnel according to the qualification information and basic information, and bind the attribute private key to the mobile device corresponding to the operation personnel through a dispersed key transmission strategy.

[0008] The work information collection module is configured to perform role verification on a filling request of a planned work demand, and if a role corresponding to the filling request is a district power supply station, the filling of the planned work demand is allowed, and a target work demand to be approved is obtained.

[0009] The work demand approval module is configured to sequentially transmit the target work demand to be approved to a district special responsibility role, a center special responsibility role, and a manager role, and allow the district special responsibility role, the center special responsibility role, and the manager role to approve the target work demand to be approved, and obtain an approval result of the planned work demand.

[0010] The access qualification setting module is configured to, if the approval result is an approval pass, encrypt the planned work demand by using an attribute-based encryption algorithm by the center special responsibility role, and obtain the planned work demand with an access strategy.

[0011] The work qualification verification module is configured to transmit the planned work demand with the access strategy to an account corresponding to a target work personnel, and allow the target work personnel to perform bidirectional verification on the planned work demand with the access strategy by using an attribute private key bound in a mobile device, and obtain a bidirectional verification result. The bidirectional verification includes data security verification and work qualification verification.

[0012] The on-site investigation data input module is configured to, if the bidirectional verification result is a pass, allow the target work personnel to upload on-site investigation data by using the mobile device corresponding to the target work personnel, and realize on-site investigation.

[0013] In a possible implementation, the qualification synchronization management module includes a data synchronization submodule, an attribute private key generation submodule, an attribute private key dispersion submodule, and a key binding submodule.

[0014] The data synchronization submodule is configured to synchronize qualification information and basic information of work personnel in a power grid data system every data synchronization period. The basic information of the work personnel includes a unit, a team, and a work area.

[0015] The attribute private key generation submodule is configured to generate an attribute private key when the qualification information and the basic information of the work personnel in the data synchronization submodule change.

[0016] The attribute private key dispersion submodule is configured to perform key parameter interception on the attribute private key, obtain a key parameter and a non-key parameter, and fragmentize the key parameter to obtain a key parameter fragment.

[0017] The key binding submodule is configured to, after the job personnel pass the authentication through the mobile device, dispatch the attribute private key dispersion submodule to respectively encrypt and transmit the non-critical parameter and the critical parameter fragment using the public key of the mobile device of the job personnel, and bind the attribute private key with the mobile device corresponding to the job personnel.

[0018] In a possible implementation, the attribute private key dispersion submodule is configured to:

[0019] perform critical parameter interception on the attribute private key to obtain a critical parameter; wherein the critical parameter refers to a non-attribute related parameter;

[0020] convert the critical parameter into decimal data, and construct a multi-order polynomial with the decimal data as a constant term;

[0021] randomly generate M target random numbers, and obtain output data corresponding to the multi-order polynomial by taking the target random numbers as independent variables of the multi-order polynomial; wherein M is twice the order of the multi-order polynomial;

[0022] take the target random numbers and the output data corresponding thereto as critical parameter fragments.

[0023] In a possible implementation, the key binding submodule is configured to:

[0024] collect target biological feature data collected by the job personnel through the mobile device of the job personnel; wherein the account of each job personnel is associated with corresponding sample biological feature data collected when the account is entered;

[0025] compare the target biological feature data with the sample biological feature data collected in advance to determine whether the target biological feature data is the same as the sample biological feature data; if yes, it is determined that the authentication is passed, otherwise it is determined that the authentication is not passed, and the key binding process is ended;

[0026] if the authentication is passed, the attribute private key dispersion submodule is dispatched to respectively encrypt and transmit the non-critical parameter and the critical parameter fragment using the public key of the mobile device of the job personnel, so that the mobile device decrypts, restores, and binds a unique attribute private key to the non-critical parameter and the critical parameter fragment.

[0027] In a possible implementation, the job information collection module includes a first role verification submodule, an information filling submodule, and a first demand transmission submodule.

[0028] The first role verification submodule is configured to perform role verification on a filling request of a planned job demand to obtain a first role verification result; wherein the first role verification result includes a county power supply station role or a non-county power supply station role.

[0029] The information filling submodule is configured to, in the case that the first role verification result is a district power supply station role, allow the district power supply station role to fill in the work demand related information, and obtain a target work demand to be approved.

[0030] The first demand transmission submodule is configured to transmit the target work demand to be approved to an account corresponding to a district special responsibility role for auditing.

[0031] In a possible implementation, the work demand approval module includes a first approval submodule, a second approval submodule and a third approval submodule.

[0032] The first approval submodule is configured to receive a target work demand to be approved, and allow a district special responsibility role to approve the target work demand to be approved, and obtain a target work demand after first approval.

[0033] The second approval submodule is configured to allow a center special responsibility role to approve the target work demand after first approval, and obtain a target work demand after second approval.

[0034] The third approval submodule is configured to allow a manager role to approve the target work demand after second approval, and obtain an approval result of a planned work demand.

[0035] In the case that the first approval submodule, the second approval submodule and the third approval submodule all pass the approval, the approval result is approval passing, otherwise, the approval result is approval not passing.

[0036] In a possible implementation, the access qualification setting module includes an access policy acquisition submodule and an encryption processing submodule.

[0037] The access policy acquisition submodule is configured to allow a center special responsibility role to input an access policy of an attribute-based encryption algorithm, wherein the access policy at least includes a policy about work personnel qualification.

[0038] The encryption processing submodule is configured to perform encryption processing on the planned work demand by using the attribute-based encryption algorithm, and obtain a planned work demand with an access policy.

[0039] In a possible implementation, the work qualification verification module includes a second demand transmission submodule and a bidirectional verification submodule.

[0040] The second demand transmission submodule is configured to transmit the planned work demand with the access policy to an account corresponding to a target work personnel.

[0041] The bidirectional verification submodule is arranged in the mobile device of the operation personnel, and is used for performing data security verification on the planned operation demand with access strategy by using the attribute private key bound in the mobile device, and verifying the operation qualification of the target operation personnel by the planned operation demand with access strategy, to obtain a bidirectional verification result.

[0042] In a possible implementation, the operation site survey auxiliary system further includes a perfect information module, a work ticket generation module, and an intelligent verification module.

[0043] The perfect information module is configured to allow the target operation personnel to input operation related information, and bind the operation related information with the operation site survey data.

[0044] The work ticket generation module is configured to automatically generate a work ticket based on the operation related information and the operation site survey data.

[0045] The intelligent verification module is configured to perform logical verification on the operation related information and the operation site survey data, and in a case where the logical verification is passed, to store the operation related information and the operation site survey data bound with each other in association.

[0046] The second aspect of the application provides an operation site survey auxiliary method, including:

[0047] Every time a data synchronization period is passed, the qualification information and the basic information about the operation personnel in the power grid data system are synchronized, and an attribute private key corresponding to each operation personnel is generated according to the qualification information and the basic information, and the attribute private key is bound with the mobile device corresponding to the operation personnel through a decentralized key transmission strategy.

[0048] A role verification is performed on a filling request of the planned operation demand, and in a case where a role corresponding to the filling request is a district power supply station, the planned operation demand is allowed to be filled, to obtain a target operation demand to be approved;

[0049] The target operation demand to be approved is sequentially transmitted to a district special responsibility role, a center special responsibility role, and a manager role, and the district special responsibility role, the center special responsibility role, and the manager role are allowed to approve the target operation demand to be approved, to obtain an approval result of the planned operation demand;

[0050] In a case where the approval result is an approval pass, the planned operation demand is encrypted by the center special responsibility role through an attribute-based encryption algorithm, to obtain a planned operation demand with access strategy.

[0051] The plan operation demand with the access strategy is transmitted to the account corresponding to the target operation personnel, so that the target operation personnel performs bidirectional verification with the plan operation demand with the access strategy through the attribute private key bound in the mobile device, and a bidirectional verification result is obtained; the bidirectional verification includes data security verification and operation qualification verification;

[0052] When the bidirectional verification result is passed, the target operation personnel is allowed to upload operation site survey data through the corresponding mobile device, and operation site survey is realized.

[0053] Compared with the prior art, the application has the following advantages and beneficial effects:

[0054] The operation site survey auxiliary system and method provided by the application synchronizes the qualification information and basic information of the operation personnel in the power grid data system, manages the attribute private key according to the qualification information and basic information, automatically updates the attribute private key when the qualification changes, avoids the case that the qualification is expired but the private key is still available, then transmits the private key through a decentralized key, effectively improves the transmission security of the attribute private key, only the district power supply station can report the demand, avoids the intervention of unauthorized subjects, the three-level approval respectively focuses on the basic information, the security risk and the compliance, finally, the data security and qualification double verification are performed before the demand is checked and processed, and only the operation can be performed, effectively ensuring the process consistency, data compliance and data security. BRIEF DESCRIPTION OF DRAWINGS

[0055] In order to more clearly illustrate the technical solutions of the example embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiments. It should be understood that the following drawings only show some embodiments of the application, and therefore should not be regarded as a limitation on the scope, and for those skilled in the art, other related drawings can also be obtained without creative labor. In the drawings:

[0056] Figure 1 The structure schematic diagram of the operation site survey auxiliary system provided by the application;

[0057] Figure 2 The flowchart of the operation site survey auxiliary method provided by the application;

[0058] Markings and corresponding component names in the drawings:

[0059] 101-qualification synchronization management module, 102-operation information acquisition module, 103-operation demand approval module, 104-access qualification setting module, 105-operation qualification verification module, 106-site survey data input module. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solutions and advantages of the present application clearer, further detailed description of the present application is made below in combination with examples and drawings, the illustrative embodiments of the present application and the description thereof are only used to explain the present application, and do not limit the present application.

[0061] As shown in Figure 1 The present application provides a work site investigation auxiliary system, which comprises:

[0062] The qualification synchronous management module 101 is configured to synchronize the qualification information and the basic information about the work personnel in the power grid data system every data synchronization period, and generate the attribute private key corresponding to each work personnel according to the qualification information and the basic information, and bind the attribute private key and the mobile device corresponding to the work personnel through a decentralized key transmission strategy.

[0063] For example, the system synchronizes the power grid data system at 0 o'clock every day, finds that the 10KV operation and maintenance qualification of the work personnel Zhang San is valid, the work personnel Zhang San belongs to the distribution live working team, and generates the attribute private key (the attributes include the 10KV operation and maintenance qualification and the distribution live working team), but it is worth noting that the specific basic information and qualification information are collected according to the actual situation; the private key key parameter is fragmented (for example, 20 fragments), and the private key key parameter is encrypted and transmitted by the public key of the mobile phone of Zhang San, and after the fingerprint authentication of Zhang San, the mobile phone decrypts and restores the complete private key, and the complete private key is bound with the IMEI of the mobile phone.

[0064] The work information collection module 102 is configured to perform role verification on a filling request of a planned work demand, and when the role corresponding to the filling request is a county power supply station, the filling of the planned work demand is allowed, and a target work demand to be approved is obtained.

[0065] For example, the power supply station personnel logs in the system, the role verification is the county power supply station, the filling of the demand is allowed, the mandatory items (such as the reporting unit (such as the power supply service command center), the work category (such as the weekly plan, the pre-arranged repair), the work type (such as the daily operation and maintenance, the industry expansion project), the voltage level such as 10KV, 110KV), the power-off type (such as no power-off), the work site, the device double name, etc.) of the demand can be filled in advance, then the time and the place: the planned start / end time, the work site (the pole number, the K code), the substation / line name are filled in, finally the contact person and the photo: the local contact person and the telephone number are filled in, the close-up photo, the long-range photo, and the position positioning map (the format supports JPG, JPEG, PNG) of the work site are uploaded, and after the filling is completed, the “submit” is clicked, and the demand is automatically transferred to the county special responsibility for auditing.

[0066] The job demand approval module 103 is configured to sequentially transmit the target job demand to be approved to the county special responsibility role, the center special responsibility role and the manager role, and allow the county special responsibility role, the center special responsibility role and the manager role to approve the target job demand to be approved, and obtain the approval result of the planned job demand.

[0067] For example, the county special responsibility approval: log in the system to check the demand to be audited, check the information, and click to approve if the information is correct; if it needs to be rejected, fill in the specific reason (such as K code of supplementary work point) in the audit opinion column, and the demand is returned to the county power supply station for modification, and after modification, it can be submitted again;

[0068] The center special responsibility approval: after the county special responsibility passes, the demand is automatically transferred to the center special responsibility, the center special responsibility checks the safety risk (such as whether the prevention and control measures for high fall and personal electric shock are perfect), and selects the on-site implementation team after passing; if it is rejected, it is also returned for modification;

[0069] The manager approval (i.e., the center leader approval): after the center special responsibility passes, the demand is submitted to the manager for final approval to ensure the compliance and safety of the work.

[0070] The access qualification setting module 104 is configured to, when the approval result is approval, encrypt the planned job demand by the center special responsibility role using the attribute-based encryption algorithm, and obtain the planned job demand with access policy.

[0071] For example, the center special responsibility can set the access policy "post = work team, qualification = 10KV operation and maintenance, and belonging to the area = Shunqing", encrypt the job demand by using the CP-ABE (attribute-based encryption) algorithm, and generate the ciphertext with access policy, so as to obtain the planned job demand with access policy.

[0072] The job qualification verification module 105 is configured to transmit the planned job demand with access policy to the account corresponding to the corresponding target job personnel, so that the target job personnel performs bidirectional verification on the planned job demand with access policy by using the attribute private key bound in the mobile device, and obtains a bidirectional verification result; wherein the bidirectional verification includes data security verification and job qualification verification.

[0073] For example, the planned job demand with access policy can verify the attribute private key bound in the mobile device of the target job personnel-Zhang San, and if the verification fails, Zhang San cannot carry out the work. At the same time, the attribute private key bound can be used to decrypt the planned job demand with access policy, and if the decryption is normal, the work can be carried out, otherwise the data may be damaged or tampered with, and a prompt or warning can be given.

[0074] The field investigation data input module 106 is configured to allow the target operator to upload the field investigation data via the corresponding mobile device when the bidirectional verification result is passed, so as to realize the field investigation.

[0075] For example, after the operation team arrives at the site, the mobile device (such as a tablet or a mobile phone) is used to log in to the system, enter the approved plan operation page, click to fill in the report, and select the field investigation record filling function (including the investigation unit, the investigation person in charge, and the field investigation content). The system automatically associates the key information (such as the double name of the device, the operation site, and the work task) filled in the previous period, and the operator only needs to supplement the personnel information (such as the investigation person in charge and the investigation personnel name).

[0076] The investigation content can include the work site power line / equipment to be stopped (such as the 10kv Xitongyixian line 18# pole switch #1 pole switch rear line), the reserved live part (such as the 10kv Xitongyixian line and Xitonger line live part), the safety risk point and the prevention and control measures (such as the anti-falling from a high place: correct use of a safety belt in a bucket).

[0077] Drawing of the investigation map: click to draw a map function, and the system jumps to the field investigation drawing assistant block (including tower pole legend, conductor legend, and device legend), selects elements (such as a round pole, a double-circuit conductor, and a disconnector) from the built-in standardized legend library, drags them to the drawing area, supports modifying the legend horizontal / vertical direction, adding text annotations (such as "18# pole operation point"), and saves the drawing as an SVG format (supports subsequent modification) or a JPG format (used for system uploading). After uploading, the investigation record filling is completed, and the save button is clicked.

[0078] In one possible implementation, the qualification synchronization management module 101 includes a data synchronization sub-module, an attribute private key generation sub-module, an attribute private key dispersion sub-module, and a key binding sub-module.

[0079] The data synchronization sub-module is configured to synchronize the qualification information and the basic information of the operator in the power grid data system every data synchronization period; wherein the basic information of the operator includes the unit, the team, and the work area.

[0080] The attribute private key generation sub-module is configured to generate an attribute private key when the qualification information and the basic information of the operator in the data synchronization sub-module change.

[0081] The qualification synchronization period (such as 1 day) ensures the real-time information, and the attribute private key is automatically updated when the qualification changes, so as to avoid the situation that the qualification is expired but the private key is still available; for example, after the climbing qualification of the worker Li Si is expired, the system synchronizes and immediately cancels the old private key of Li Si, and the new private key cannot decrypt the work data requiring the climbing qualification, so that Li Si is technically prevented from participating in the climbing work.

[0082] The attribute private key dispersion submodule is configured to perform key parameter interception on the attribute private key to obtain a key parameter and a non-key parameter, and perform fragmentation on the key parameter to obtain key parameter fragments.

[0083] The key binding submodule is configured to, after the worker passes the mobile device authentication, schedule the attribute private key dispersion submodule to respectively encrypt and transmit the non-key parameter and the key parameter fragments by using the public key of the mobile device of the worker, and bind the attribute private key to the mobile device of the worker.

[0084] The data synchronization submodule synchronizes the qualification information of the power grid data system at a fixed period (such as 1 day) to ensure real-time update of the qualification of the worker; the attribute private key generation submodule dynamically adjusts the private key according to the qualification change to avoid the risk that the qualification is expired but the private key is still valid; the attribute private key dispersion submodule fragments the key parameter by using a multi-order polynomial, so that even if part of the fragments is leaked, the complete private key cannot be recovered; and the key binding submodule combines the biological authentication (fingerprint / facial recognition) and the device public key encryption to ensure that the private key is bound to the legal device of the legal person only, thereby preventing the private key from being misused from the source.

[0085] In a possible implementation, the attribute private key dispersion submodule is configured to:

[0086] perform key parameter interception on the attribute private key to obtain a key parameter; wherein the key parameter is a non-attribute related parameter, such as an encryption parameter obtained by using a master key in an attribute-based encryption algorithm.

[0087] convert the key parameter into decimal data, and construct a multi-order polynomial by using the decimal data as a constant term.

[0088] randomly generate M target random numbers, and use the target random numbers as independent variables of the multi-order polynomial to obtain output data corresponding to the multi-order polynomial; wherein M is twice the order of the multi-order polynomial.

[0089] use the target random numbers and the output data corresponding thereto as key parameter fragments.

[0090] For example, a M / 2 order polynomial can be set, and the variable is 1. Then, M values are randomly taken for the variable, and the output data corresponding to the M order polynomials is obtained, so that M key parameter fragments can be obtained. In the decryption process, only M / 2+1 key parameter fragments and the order of the multi-order polynomial (the order can be transmitted at the same time) need to be known, so that the multi-order polynomial can be restored, the constant term in the multi-order polynomial can be obtained, and the key corresponding to the binary number can be converted, so that the key parameter can be obtained. The key parameter is fragmented (such as 16 fragments generated by an 8-order polynomial), and is transmitted by the mobile device public key encryption. Even if the fragments are intercepted during transmission, the complete key parameter cannot be restored. Compared with the whole key transmission, the leakage risk is reduced by more than 80%.

[0091] In a possible implementation, the key binding submodule is configured to:

[0092] Collect target biological feature data collected by the mobile device of the operation personnel; wherein the account of each operation personnel is collected with corresponding sample biological feature data when being inputted;

[0093] Compare whether the target biological feature data is the same as the pre-collected sample biological feature data, if yes, determine that the authentication is passed, otherwise, determine that the authentication is not passed, and end the key binding process;

[0094] In the case where the authentication is passed, the attribute private key dispersion submodule is scheduled to encrypt and transmit the non-key parameter and the key parameter fragments by using the public key of the mobile device of the operation personnel, so that the mobile device decrypts, restores, and binds the unique attribute private key for the non-key parameter and the key parameter fragments.

[0095] Optionally, the attribute private key can also be set as a temporary key, which is destroyed after a certain period of time, so that the key binding needs to pass the biological feature (fingerprint / facial) authentication, and the temporary binding with the device is realized. Even if the mobile phone is lost, others cannot use the private key without biological features. Compared with the traditional account password verification, the identity recognition accuracy is improved to more than 99%, and the risk of illegal operation caused by stolen devices is reduced.

[0096] Optionally, in order to improve the binding security and stability, the application embodiment provides a sample biological feature data recognition algorithm, which comprises: using a trained biological feature recognition model to recognize target biological feature data, and determining an authentication result.

[0097] Obtaining a trained biological feature recognition model comprises:

[0098] A1, when the action personnel register an account, the sample biological feature data corresponding to the action personnel is collected; wherein the sample biological feature data includes fingerprint image features or face image features;

[0099] The classification label includes a unique label corresponding to the action personnel and a label commonly corresponding to unauthorized personnel.

[0100] A2, a deep learning model is used to construct a biological feature recognition model, and the hyperparameters of the biological feature recognition model are initialized and coded to obtain a plurality of different coded individuals.

[0101] For example, a convolutional neural network or an improved model thereof can be used to construct a biological feature recognition model, and then the hyperparameters of the biological feature recognition model are randomly initialized between the upper and lower limits, and the randomly initialized hyperparameters are coded into a vector to obtain a coded individual, and a plurality of different coded individuals are repeatedly obtained.

[0102] For example, the present application provides an initialization coding method for improving the uniformity of the initial solution in the solution space, which can be:

[0103]

[0104] wherein, represents the d-th dimension hyperparameter of the j-th coded individual, and i=1, is the d-th dimension hyperparameter of the randomly generated coded individual (i.e. the coded individual obtained by random initialization coding), represents the d-th dimension hyperparameter of the i+1-th coded individual, represents the remainder function, represents the circular constant, sin represents the sine function, d=1, 2, …, D, and D represents the total dimension of the hyperparameter;

[0105] A3, the sample biological feature data is input, the classification label corresponding to the sample biological feature data is taken as the expected output, the loss function value corresponding to each coded individual is obtained, and the coded individual with the minimum loss function value is determined as the optimal individual;

[0106] A4, according to the optimal individual, an adaptive position calibration strategy is used to calibrate the solution space of the coded individual, and the coded individual after the solution space calibration is obtained.

[0107] For example, the coded individual after the solution space calibration is obtained, including:

[0108] The adaptive position calibration factor is obtained based on the current training number: ; wherein, represents the current training number, and T represents the maximum training number. represents an exponential function with a natural constant e as the base, represents an adjustment parameter that is a constant, which can be set to 2, 3, 4;

[0109] According to the adaptive position calibration factor, the position calibration quantity corresponding to the coded individual is obtained as:

[0110]

[0111] wherein, represents the d-dimensional hyperparameter corresponding to the i-th coded individual in the t-th training process, i = 1, 2, …, M, M represents the total number of coded individuals, represents the d-dimensional hyperparameter of the optimal individual, represents the circular constant, represents the sign function, represents the first random number between (0, 1), represents the d-dimensional hyperparameter of the position calibration quantity corresponding to the coded individual;

[0112] According to the position calibration quantity corresponding to the coded individual, the calibration in the solution space is performed, and the coded individual after the solution space calibration is obtained as: ; wherein, represents the d-dimensional hyperparameter of the i-th coded individual after the solution space calibration.

[0113] Adopting the adaptive position calibration strategy to calibrate the coded individual in the solution space can make each coded individual adaptively select its own search area around the optimal position currently known in the solution space based on its own position information, while realizing adaptive search. Compared with the chaotic search of the prior art, all individuals can be shrunk in a net shape, which can effectively improve the training speed and the search possibility of the global optimal solution. According to this search characteristic, the chaotic mapping initialization method can be used for training to make the net-shaped distribution more uniform and improve the search ability of the algorithm.

[0114] A5、Adopting the adaptive information acquisition strategy to calibrate the coded individual in the solution space, the coded individual after the adaptive information acquisition is obtained;

[0115] Exemplarily, the coded individual after the adaptive information acquisition is obtained, including:

[0116] Based on the current training number, the variable information acquisition factor is obtained as: ; wherein, represents the variable information acquisition factor, represents the maximum value of the variable information acquisition factor, and is set to 0.9, represents the minimum value of the variable information collection factor, and is set to 0.5; represents the preset maximum training number (such as 500, 1000, 2000, etc.);

[0117] According to the variable information collection factor, the coded individual after adaptive information collection is:

[0118]

[0119] wherein, represents the coded individual after the mth solution space calibration in the tth training process, m = 1, 2, …, M, represents the coded individual after the mth solution space calibration in the (t-1)th training process, represents the coded individual after the mth adaptive information collection, represents the second random number between (0, 1), represents the third random number between (0, 1), represents the first random coded individual in the coded individual after the solution space calibration;

[0120] Adopting the adaptive information collection strategy to perform adaptive information collection on the coded individual after the solution space calibration can enable the coded individual to effectively collect and develop its own information, greatly improve the search capability of the algorithm in the local area, and effectively avoid the algorithm from falling into the local optimum.

[0121] A6、Adopting the double search strategy composed of multi-step search and exclusion search to perform adaptive global search on the coded individual after the adaptive information collection, to obtain the coded individual after the adaptive global search;

[0122] Exemplarily, the coded individual after the adaptive global search is:

[0123] Based on the coded individual after the adaptive information collection, the coded individual with the minimum loss function value except the optimal coded individual is obtained as the first elite individual, and the coded individual with the second minimum loss function value is obtained as the second elite individual;

[0124] According to the loss function value of the first elite individual and the loss function value of the second elite individual, the step search factor is obtained as:

[0125]

[0126]

[0127]

[0128]

[0129] wherein, denotes the hth step search factor, h is 1, 2, 3; denotes the hth intermediate parameter, denotes the solution space fitness corresponding to the optimal individual, denotes the solution space fitness corresponding to the first elite individual, denotes the solution space fitness corresponding to the second elite individual; the solution space fitness can be obtained by taking the reciprocal of the loss function value, and in order to avoid a zero denominator, a constant term (such as 0.001) can be added to the denominator;

[0130] According to the step search factor, the encoded individual after adaptive global search is:

[0131]

[0132] wherein, denotes the kth encoded individual after adaptive information collection in the tth training process, denotes the encoded individual after the kth adaptive global search, denotes the fourth random number between (0, 1), denotes the fourth random number between (0, 1), denotes the 1st step search factor, denotes the 2nd step search factor, denotes the 3rd step search factor, denotes the first elite individual, denotes the second elite individual, | | denotes taking the absolute value of an element, denotes the search step (such as a constant term in 0.1-0.4), denotes the worst individual, denotes the solution space fitness corresponding to the worst individual;

[0133] The double search strategy composed of multi-step search and exclusion search is used to perform adaptive global search on the encoded individual after adaptive information collection, which can search in the known better space or perform mutual exclusion search with the worst individual, can form a step-by-step information search, improve the search precision, at the same time, can also perform mutual exclusion search with a certain probability, far away from the known worst position, improve the global search ability and search efficiency, and comprehensively improve the algorithm training effect.

[0134] A7, if yes, reacquire the optimal individual according to the encoding individual after adaptive global search, and take the hyperparameters contained in the reacquired optimal individual as the final hyperparameters of the biometric feature recognition model, obtain the biometric feature recognition model after training, otherwise return to step A3 and enter the next training.

[0135] Optionally, the out-of-limit search can also be performed on the encoding individual after each search on the encoding individual. The simulated annealing algorithm can also be used for search control to further improve the algorithm performance.

[0136] The embodiments of the present application can effectively improve the algorithm performance and the training speed through the mutual cooperation of the multiple search strategies, thereby improving the recognition ability of the biometric feature recognition model after training, ensuring the key binding security, and further ensuring the job compliance.

[0137] In a possible implementation, the job information collection module 102 includes a first role verification submodule, an information filling submodule, and a first demand transmission submodule.

[0138] The first role verification submodule is configured to perform role verification on a filling request of a planned job demand, and obtain a first role verification result. The first role verification result includes a county power supply station role or a non-county power supply station role.

[0139] The information filling submodule is configured to, in a case where the first role verification result is the county power supply station role, allow the county power supply station role to fill in job demand related information, and obtain a target job demand to be approved.

[0140] The first demand transmission submodule is configured to transmit the target job demand to be approved to an account corresponding to a county special responsibility role for auditing.

[0141] The job information collection module 102 locks the filling subject (only the county power supply station) through role verification, to avoid unauthorized filling. The job demand approval module adopts a three-level approval of “county special responsibility → center special responsibility → manager”, each level of approval focuses on different auditing points (the county special responsibility checks the basic information, the center special responsibility checks the safety risk, and the manager checks the overall compliance), to reduce the inflow of illegal job demands to the next link.

[0142] In a possible implementation, the job demand approval module 103 includes a first approval submodule, a second approval submodule, and a third approval submodule.

[0143] The first approval submodule is configured to receive a target job demand to be approved, and allow a county special responsibility role to approve the target job demand to be approved, to obtain a target job demand after one-time approval.

[0144] The second approval submodule is configured to allow a central responsible role to approve the target job demand after the first approval, and obtain the target job demand after the second approval;

[0145] The third approval submodule is configured to allow a manager role to approve the target job demand after the second approval, and obtain an approval result of the planned job demand.

[0146] In a possible implementation, the first approval submodule, the second approval submodule, and the third approval submodule are all approved, and the approval result is approval; otherwise, the approval result is disapproval.

[0147] In a possible implementation, the access qualification setting module 104 includes an access policy acquisition submodule and an encryption processing submodule.

[0148] The access policy acquisition submodule is configured to allow a central responsible role to input an access policy of an attribute-based encryption algorithm; wherein the access policy at least includes a policy about job personnel qualification.

[0149] The encryption processing submodule is configured to perform encryption processing on the planned job demand by using the attribute-based encryption algorithm, and obtain the planned job demand with the access policy.

[0150] Only personnel meeting the access policy can decrypt the data, for example, 10KV job data, only personnel with 10KV qualification can access, avoiding unqualified personnel from accessing sensitive information such as high-voltage equipment parameters, and meeting the requirements of the Data Security Management Method of the electric power industry.

[0151] In a possible implementation, the job qualification verification module 105 includes a second demand transmission submodule and a bidirectional verification submodule.

[0152] The second demand transmission submodule is configured to transmit the planned job demand with the access policy to a corresponding account of a corresponding target job personnel.

[0153] The bidirectional verification submodule is deployed in a mobile device of the job personnel, and is configured to perform data security verification on the planned job demand with the access policy by using an attribute private key bound in the mobile device, and simultaneously verify the job qualification of the target job personnel by using the planned job demand with the access policy, and obtain a bidirectional verification result.

[0154] Before field operation, data security and qualification dual verification are required, and if the verification fails, the job personnel cannot obtain the job data; for example, if the job personnel does not have 110KV operation and maintenance qualification, the private key of the job personnel cannot decrypt the 110KV job demand ciphertext, and the job personnel is directly prevented from participating in 110KV operation, avoiding safety accidents caused by inconsistent qualifications.

[0155] The access qualification setting module 104 binds the data access right with the work personnel qualification through attribute-based encryption (e.g., only 10KV qualification personnel can access 10KV work data); the bidirectional verification module verifies the data integrity (private key decryption) and verifies whether the personnel qualification meets the access strategy before the on-site work, so as to avoid the situation that the private key is valid but the qualification is expired or the qualification is met but the data is tampered, and ensure that only the personnel with qualification compliance + valid private key can carry out the survey.

[0156] In a possible implementation, the work site survey auxiliary system further comprises a perfect information module, a work ticket generation module, and an intelligent verification module.

[0157] The perfect information module is configured to allow the target work personnel to input work-related information and bind the work-related information with the work site survey data.

[0158] For example, the perfect information function can be selected, the work nature (e.g., main industry), work team (e.g., power distribution live-line work team), work responsible person and contact information, work vehicle (e.g., 1 insulated boom truck and 1 medium voltage generator truck) are filled in, and the system automatically associates the survey record

[0159] The work ticket generation module is configured to automatically generate a work ticket based on the work-related information and the work site survey data.

[0160] For example, the work ticket can be automatically generated based on the survey record and the perfect information, and the work ticket can include the work responsible person, work team members, and safety measures. The inspection standard card and the violation inspection list can also be generated, and can include the work name, the inspector, and the date. The pre-shift and post-shift meeting records can also be generated, and can include the personnel division of labor and the qualification requirements. All the key information (e.g., equipment name and work site) is automatically synchronized, and does not need to be repeatedly filled in.

[0161] The intelligent verification module is configured to perform logical verification on the work-related information and the work site survey data, and to store the work-related information and the work site survey data in association with each other when the logical verification is passed.

[0162] For example, the logical consistency is that whether the power-off range in the work ticket is consistent with the power-off line in the survey record; and the information integrity is whether the survey map is uploaded and whether the contact information is complete.

[0163] The improved information module binds job-related information and survey data to avoid repeated entry. The work ticket generation module automatically extracts data to generate standardized tickets, reducing the error rate of manual filling. The intelligent verification module checks data logic in real time through preset rules to ensure the consistency of work tickets, survey records, and qualification information, avoiding safety hazards caused by manual verification omissions.

[0164] The work ticket automatically extracts data to generate, without manual filling, and the filling time is shortened from 30 minutes to 5 minutes. The intelligent verification module checks data in real time through preset rules (such as power outage range consistency), and the logical error rate is reduced from 15% in traditional manual verification to below 1%.

[0165] The time from job demand reporting to approval is shortened from 2-3 days of traditional manual transfer (offline signature) to 1 day online. The time for on-site survey data entry and work ticket generation is shortened from 1 hour to 20 minutes, and the overall job preparation cycle is shortened by more than 40%. This reduces the need for manual qualification checking, manual work ticket filling, and manual data verification. Each job team can reduce manual working hours by more than 20 hours per month, meeting the development needs of the power industry to reduce costs and increase efficiency.

[0166] As shown in Figure 2 based on the same inventive concept, the embodiments of the present application provide a job site survey auxiliary method, comprising:

[0167] S201, every data synchronization period, synchronize the qualification information and basic information of the job personnel in the power grid data system, and generate the attribute private key corresponding to each job personnel according to the qualification information and basic information, and bind the attribute private key to the mobile device corresponding to the job personnel through a decentralized key transmission strategy;

[0168] S202, role verification is performed on the filling request of the planned job demand, and if the role corresponding to the filling request is a district power supply station, the planned job demand is allowed to be filled, and a target job demand to be approved is obtained;

[0169] S203, the target job demand to be approved is sequentially transmitted to the district responsible role, the center responsible role, and the manager role, and the district responsible role, the center responsible role, and the manager role are allowed to approve the target job demand to be approved, and the approval result of the planned job demand is obtained;

[0170] S204, when the approval result is approval, the center responsible role uses an attribute-based encryption algorithm to encrypt the planned job demand, and obtains a planned job demand with an access strategy;

[0171] S205, transmit the plan job demand with the access strategy to the account corresponding to the target job personnel, make the target job personnel pass the attribute private key bound in the mobile device to carry out two-way verification with the plan job demand with the access strategy, obtain a two-way verification result; wherein, the two-way verification includes data security verification and job qualification verification;

[0172] S206, when the two-way verification result is passed, then allow the target job personnel to upload job site survey data through the corresponding mobile device, realize job site survey.

[0173] The job site survey auxiliary method provided by the embodiments of the present application can be applied to the above system, and the principles and beneficial effects are similar, which will not be described here.

[0174] The above specific embodiments further explain the purpose, technical solutions and beneficial effects of the present application. It should be understood that the above description is only a specific embodiment of the present application and is not used to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. A work site surveying assistance system characterized by, The application comprises the following: A qualification synchronization management module is configured to synchronize qualification information and basic information about workers in a power grid data system every data synchronization period, and generate an attribute private key corresponding to each worker according to the qualification information and basic information, and bind the attribute private key to a mobile device corresponding to the worker through a decentralized key transmission strategy; A work information collection module is configured to perform role verification on a request for filling a planned work demand, and allow the filling of the planned work demand if the role corresponding to the request is a district power supply station, to obtain a target work demand to be approved; A work demand approval module is configured to sequentially transmit the target work demand to be approved to a district specialist role, a center specialist role, and a manager role, and allow the district specialist role, the center specialist role, and the manager role to approve the target work demand to be approved, to obtain an approval result of the planned work demand; An access qualification setting module is configured to, if the approval result is approval, encrypt the planned work demand through the center specialist role using an attribute-based encryption algorithm, to obtain a planned work demand with an access strategy; A work qualification verification module is configured to transmit the planned work demand with the access strategy to an account corresponding to a target worker, and allow the target worker to perform bidirectional verification on the planned work demand with the access strategy through an attribute private key bound in a mobile device, to obtain a bidirectional verification result; wherein the bidirectional verification includes data security verification and work qualification verification; A field investigation data entry module is configured to, if the bidirectional verification result is passed, allow the target worker to upload work field investigation data through the mobile device corresponding to the target worker, to realize work field investigation.

2. The work site surveying aid system of claim 1, wherein, The qualification synchronization management module comprises a data synchronization submodule, an attribute private key generation submodule, an attribute private key decentralization submodule, and a key binding submodule; The data synchronization submodule is configured to synchronize qualification information and basic information about workers in a power grid data system every data synchronization period; wherein the basic information of the workers includes a unit to which the worker belongs, a team, and a work area; The attribute private key generation submodule is configured to generate an attribute private key when the qualification information and basic information about the workers in the data synchronization submodule change; The attribute private key decentralization submodule is configured to perform key parameter interception on the attribute private key, to obtain a key parameter and a non-key parameter, and fragmentize the key parameter, to obtain a key parameter fragment; The key binding submodule is configured to, after the worker passes mobile device authentication, schedule the attribute private key decentralization submodule to respectively encrypt and transmit the non-key parameter and the key parameter fragment using a public key of the mobile device of the worker, and bind the attribute private key to the mobile device corresponding to the worker.

3. The work site surveying aid system of claim 2, wherein, The attribute private key decentralization submodule is configured to: perform key parameter interception on the attribute private key, to obtain a key parameter; wherein the key parameter is a non-attribute-related parameter. Convert the key parameters into decimal data, and construct a multi-order polynomial with the decimal data as the constant term; Randomly generate M target random numbers, and use the target random numbers as the independent variables of the multi-order polynomial to obtain the output data corresponding to the multi-order polynomial; wherein M is twice the order of the multi-order polynomial; The target random numbers and their corresponding output data are used as key parameter fragments.

4. The work site surveying aid system of claim 3, wherein, The key binding submodule is configured to: Collect target biological feature data collected by the work personnel through their mobile devices; wherein the account of each work personnel has corresponding sample biological feature data collected when logging in; Compare the target biological feature data with the pre-collected sample biological feature data to determine whether the authentication is passed or not, and end the key binding process if the authentication is not passed; If the authentication is passed, the attribute private key dispersion submodule is dispatched to encrypt and transmit the non-key parameters and key parameter fragments using the public key of the work personnel's mobile device, so that the mobile device decrypts, restores, and binds a unique attribute private key to the non-key parameters and key parameter fragments.

5. The work site surveying aid system of claim 1, wherein, The work information collection module includes a first role verification submodule, an information filling submodule, and a first demand transmission submodule; The first role verification submodule is configured to perform role verification on a filling request of a planned work demand to obtain a first role verification result; wherein the first role verification result includes a county power supply station role or a non-county power supply station role; The information filling submodule is configured to allow the county power supply station role to fill in work demand related information if the first role verification result is a county power supply station role, to obtain a target work demand to be approved; The first demand transmission submodule is configured to transmit the target work demand to be approved to an account corresponding to a county dedicated role for auditing.

6. The work site surveying aid system of claim 1, wherein, The work demand approval module includes a first approval submodule, a second approval submodule, and a third approval submodule; The first approval submodule is configured to receive a target work demand to be approved, and allow a county dedicated role to approve the target work demand to be approved to obtain a target work demand after first approval; The second approval submodule is configured to allow a center dedicated role to approve the target work demand after first approval to obtain a target work demand after second approval; The third approval submodule is configured to allow a manager role to approve the target work demand after second approval to obtain an approval result of a planned work demand; If the first approval submodule, the second approval submodule, and the third approval submodule all approve, the approval result is approval, otherwise it is disapproval.

7. The work site surveying aid system of claim 1, wherein, The access qualification setting module includes an access strategy acquisition submodule and an encryption processing submodule; The access strategy acquisition submodule is configured to allow a center dedicated role to input an access strategy of an attribute-based encryption algorithm; wherein the access strategy includes at least a strategy about the qualifications of work personnel. The encryption processing submodule is configured to encrypt the planned operation demand by using an attribute-based encryption algorithm to obtain the planned operation demand with an access strategy.

8. The work site surveying aid system of claim 1, wherein, The operation qualification verification module comprises a second demand transmission submodule and a bidirectional verification submodule. The second demand transmission submodule is configured to transmit the planned operation demand with the access strategy to an account corresponding to a target operation personnel. The bidirectional verification submodule is deployed in a mobile device of the operation personnel and is configured to perform data security verification on the planned operation demand with the access strategy by using an attribute private key bound in the mobile device, and simultaneously verify the operation qualification of the target operation personnel by using the planned operation demand with the access strategy to obtain a bidirectional verification result.

9. The work site surveying aid system of claim 1, wherein, Further comprising: a perfect information module, a work ticket generation module, and an intelligent verification module; The perfect information module is configured to allow the target operation personnel to input operation-related information and bind the operation-related information with operation site survey data. The work ticket generation module is configured to automatically generate a work ticket based on the operation-related information and the operation site survey data. The intelligent verification module is configured to perform logical verification on the operation-related information and the operation site survey data, and in a case where the logical verification is passed, store the operation-related information and the operation site survey data bound to each other in association.

10. A work site surveying assistance method characterized by, Comprising: Every time a data synchronization period is passed, the qualification information and the basic information about the operation personnel in the power grid data system are synchronized, and an attribute private key corresponding to each operation personnel is generated according to the qualification information and the basic information, and the attribute private key is bound to a mobile device corresponding to the operation personnel by using a decentralized key transmission strategy; a role verification is performed on a filling request of the planned operation demand, in a case where a role corresponding to the filling request is a district power supply station, the planned operation demand is allowed to be filled, and a target operation demand to be approved is obtained; the target operation demand to be approved is sequentially transmitted to a district special responsibility role, a center special responsibility role, and a manager role, and the district special responsibility role, the center special responsibility role, and the manager role are allowed to approve the target operation demand to be approved, and an approval result of the planned operation demand is obtained; in a case where the approval result is an approval pass, the planned operation demand is encrypted by the center special responsibility role by using an attribute-based encryption algorithm to obtain a planned operation demand with an access strategy; the planned operation demand with the access strategy is transmitted to an account corresponding to a target operation personnel, and the target operation personnel performs bidirectional verification on the planned operation demand with the access strategy by using an attribute private key bound in a mobile device to obtain a bidirectional verification result; wherein the bidirectional verification comprises data security verification and operation qualification verification; in a case where the bidirectional verification result is a pass, the target operation personnel is allowed to upload operation site survey data by using the mobile device corresponding to the target operation personnel to implement operation site survey.

Images