5G intelligent terminal device management method and system
By constructing a two-dimensional delay matrix and time chain data, the problem of IoT worms forging log tracks in 5G smart terminal devices was solved, achieving high-precision anomaly detection and reverse tracing, ensuring data integrity and security.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-10-22
- Publication Date
- 2026-04-14
AI Technical Summary
The existing fault tolerance and recovery system of 5G smart terminal devices cannot effectively identify forged or tampered log traces when facing IoT worm attacks. This leads to the fault tolerance logic being exploited, causing large-scale false triggering of rollbacks and forming a tool for worm spread.
By constructing a two-dimensional delay matrix and time chain, and combining the delay matrix, time chain data and residual record table, a consistency judgment mechanism is established across time intervals and across terminals to perform data integrity verification and generate playback sequences and frozen state data with perturbation correction.
It effectively identifies forged or tampered log tracks, prevents fault-tolerance logic from being exploited by IoT worms, improves the accuracy of anomaly detection, ensures that the propagation path of anomalies can be traced back after a security incident, and solidifies the results after data integrity verification, providing a reliable basis for evidence collection and handling.
Smart Images

Figure CN121397643B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of terminal device management and Internet of Things (IoT) worm protection technology, and more specifically, to a 5G smart terminal device management method and system. Background Technology
[0002] In the fault tolerance and recovery system of 5G smart terminal devices, existing technologies generally rely on log timestamps and error records as the basis for judgment. That is, by comparing the historical state of each terminal within a fixed time window, it is determined whether to trigger cluster rollback or automatic repair. This mode is designed with the assumption that historical logs are inherently reliable. Therefore, as long as there is a continuous and consistent error trajectory in time, the system will immediately perform a rollback operation. However, in a high-density terminal cluster environment, IoT worms can take advantage of this defect by forging or tampering with historical logs, making multiple terminals simultaneously exhibit false past abnormal states.
[0003] Because the system lacks cross-verification of log authenticity and causal chain of time, such forged traces will be misjudged as real group failures, thereby triggering large-scale synchronous rollback. As a result, the worm does not need to directly destroy the real-time operation, but can guide the cluster to a controlled infected version by manipulating the historical records, forming an attack mode that uses history as a weapon.
[0004] Therefore, the existing fault-tolerant system relies too heavily on historical consistency that has not been physically verified or verified from multiple sources. This leads to a loss of identification ability when faced with cross-temporal log forgery, causing the fault-tolerant mechanism to become a tool for the efficient spread and amplification of worms, which is a problem that urgently needs to be solved. Summary of the Invention
[0005] To overcome the aforementioned deficiencies in the prior art, embodiments of the present invention provide a 5G smart terminal device management method and system. This method establishes a consistency judgment mechanism across intervals and across terminals through a delay matrix and a time chain, and ensures data integrity during playback and verification, thereby solving the problem of log forgery leading to the exploitation of fault tolerance logic as pointed out in the background art.
[0006] To achieve the above objectives, the present invention provides the following technical solution: a 5G smart terminal device management method, comprising:
[0007] S1. By collecting the message transmission delay between the terminal and adjacent terminals during continuous communication, record and arrange the packets in chronological order, fill the arrangement result into a two-dimensional delay matrix, where the rows of the two-dimensional delay matrix correspond to continuous time periods and the columns correspond to adjacent terminals, and output the two-dimensional delay matrix.
[0008] S2. Bind each row of the two-dimensional delay matrix to the corresponding timestamp, and add a cross-terminal index number to the binding result. Based on the binding result, concatenate them in row order to form a time chain, and output the time chain data.
[0009] S3. Perform interval expansion operation on the time chain data, calculate the offset of the terminal index number between adjacent intervals, perform cumulative weighting processing on the offset, generate difference curves and output them;
[0010] S4. Reverse the time chain corresponding to the difference curve data and insert the perturbation value obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and output the playback sequence data.
[0011] S5. Write the playback sequence data to the isolated storage area, and attach a unique identifier during the writing process to generate frozen state data and output it.
[0012] In a preferred embodiment, S1 further includes extracting the sending time and arrival time of consecutive messages between the terminal and adjacent terminals, performing differential operations to obtain the transmission delay of each message, and forming a time difference sequence.
[0013] For each message, a validity check is performed on the transmission delay. If the transmission delay exceeds the preset range or the corresponding message is missing, the message data is determined to be invalid and is discarded. If the transmission delay is within the preset range, the message data is retained.
[0014] The time difference sequence is divided into multiple segments according to continuous time periods, and a terminal index number is established for the corresponding adjacent terminals in each segment to obtain a segment mapping set;
[0015] The segmented mapping set is spliced together segment by segment in chronological order, so that the continuous segments form a temporal extension in the row dimension and a terminal distribution in the column dimension, thus constructing a two-dimensional delay matrix.
[0016] Add a start time marker to each row of the two-dimensional delay matrix and add a terminal index number to each column to output a two-dimensional delay matrix with timing and terminal calibration.
[0017] In a preferred embodiment, S2 further includes performing composite binding between the delay value of each row in the two-dimensional delay matrix and the corresponding timestamp, and embedding the index number of the adjacent terminal in the binding result to form a composite binding record;
[0018] The composite binding records are arranged in chronological order, and an index topology is built based on the continuity of adjacent terminal index numbers to form an index topology sequence;
[0019] Perform stepwise iterative operations in the index topology sequence, calculate the residual between the terminal index numbers of adjacent time points, and append the residual as a residual correction value to the iteration result to generate chain segments;
[0020] The chain segments are spliced together sequentially. During the splicing process, the residual value of the previous segment is added to the index relationship of the next segment, and the cumulative residual is recorded in the splicing result. This maintains the cumulative effect of residual correction in the time chain structure, forming a time chain structure and outputting time chain data.
[0021] In a preferred embodiment, S3 further includes dividing the time chain data into multiple time intervals according to the continuous time range, and extracting the terminal index number and corresponding time point in each time interval to generate an interval index table.
[0022] Two adjacent interval index tables are mapped according to the same terminal index number. The time difference between corresponding records is used as the offset. Each pair of corresponding records is appended with the sequential number of the time interval to form an offset relationship table.
[0023] By performing a threshold judgment on each offset in the offset relationship table, when the offset exceeds the preset threshold, the offset is marked as abnormal and an abnormal correction value is added; when the offset is within the threshold range, it is accumulated and calculated in the normal way.
[0024] For each offset in the offset relationship table, the interval duration and the fluctuation range of the terminal index number within the interval are calculated respectively. First, the offset is multiplied by the duration ratio of its time interval, and then the result is multiplied by the fluctuation range of the terminal index number within the interval. The final result is used as the weighted residual, and is accumulated sequentially by number to form a residual record table.
[0025] The residual record table is arranged in sequence by number and mapped to a continuous time axis in chronological order. During the mapping process, the interval order and the continuity of the cumulative residual are maintained, and the difference curve is generated and output.
[0026] In a preferred embodiment, S4 further includes reversing the time chain corresponding to the difference curve according to the timestamp order, and retaining the terminal index number and the corresponding timestamp as a binding record during the reversal process to form a reverse chain table.
[0027] Based on the two-dimensional delay matrix, differential operation is performed on the delay data of each terminal in the same time period, and the differential results are normalized to a uniform scale and arranged in time order to form a perturbation value sequence.
[0028] The perturbation value sequence is mapped to the corresponding position in the reverse chain table according to the correspondence between timestamp and terminal index number. During the mapping process, the original value of the reverse chain table is added to the perturbation value to generate a perturbation correction record.
[0029] The perturbation correction records are sequentially spliced together, and during the splicing process, the perturbation correction result of the previous position is superimposed on the current perturbation value to the next position to maintain the cumulative effect of perturbation superposition, forming a playback sequence and outputting the playback sequence data.
[0030] In a preferred embodiment, S5 further includes dividing the playback sequence data into multiple write blocks according to a preset time window, adding a time sequence number to the write blocks, and writing the write blocks sequentially to the isolated storage area to form a numbered write record.
[0031] For each write block of the write record, perform content digest calculation, and combine the digest result with the time sequence number and terminal index number to generate a unique identifier, forming an identifier table;
[0032] Each unique identifier in the identifier table is concatenated with the previous unique identifier, and a verification calculation is performed on the concatenation result to generate a verification chain.
[0033] Perform consistency judgment on the verification chain. If any unique identifier in the verification chain is still inconsistent with the previous unique identifier after multiple recalculations, the written record is determined to be unusable and the freezing is stopped. When the verification chain remains consistent, the written record is fixed to the frozen state.
[0034] The written records, identification table, and verification chain are solidified together, and frozen state data is generated and output during the solidification process.
[0035] In a preferred embodiment, a 5G smart terminal device management system includes a matrix filling module, an index appending module, an offset calculation module, a correction overlay module, and a verification chain module.
[0036] The matrix filling module collects the message transmission delay between the terminal and adjacent terminals during continuous communication, records and arranges them packet by packet in chronological order, fills the arrangement result into a two-dimensional delay matrix, with rows of the two-dimensional delay matrix corresponding to continuous time periods and columns corresponding to adjacent terminals, and outputs the two-dimensional delay matrix.
[0037] The indexing module binds each row of the two-dimensional delay matrix to the corresponding timestamp, appends a cross-terminal index number to the binding result, concatenates the binding results row by row to form a time chain, and outputs the time chain data.
[0038] The offset calculation module performs interval expansion operations on the time chain data, calculates the offset of the terminal index number between adjacent intervals, performs cumulative weighting processing on the offset, generates a difference curve and outputs it.
[0039] The correction and overlay module reverses the time chain corresponding to the difference curve data and inserts perturbation values obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and outputs the playback sequence data.
[0040] The verification chain module generates and outputs frozen state data by writing the replay sequence data into the isolated storage area and attaching a unique identifier during the writing process.
[0041] The technical effects and advantages of this invention are as follows:
[0042] This solution constructs a two-dimensional delay matrix, time chain data, and residual record table to establish a consistency judgment mechanism for delay patterns across time intervals and terminals, thereby effectively identifying forged or tampered log traces and preventing fault tolerance logic from being exploited by IoT worms to trigger error rollbacks.
[0043] This solution introduces interval division, offset calculation, and threshold judgment on the basis of time chain, and combines the duration ratio and fluctuation amplitude ratio for weighting, so that anomaly detection does not rely on a single indicator, but filters extreme jumps and noise through multi-dimensional data collaboration, thereby improving the accuracy of anomaly detection.
[0044] This scheme also uses residual correction and sequential accumulation to gradually superimpose the offset results of adjacent intervals and maintain the continuity of the residuals in the chain, so that the abnormal patterns can gradually emerge in the long-term series and avoid being ignored due to fluctuations at a single point in time.
[0045] This scheme generates a replayable corrected sequence by performing reverse rearrangement on the difference curve data and inserting perturbation values derived from the two-dimensional delay matrix, thereby enabling reverse tracing of the abnormal propagation path and ensuring that the abnormal evolution process can be restored after a security incident occurs.
[0046] This solution also establishes a verification mechanism with sequential dependencies by writing the replay sequence data into isolated storage areas in blocks and generating unique identifiers and verification chains. This mechanism stops freezing when inconsistencies are found and solidifies the results when they are consistent, thereby ensuring the integrity of the data and providing a reliable basis for evidence collection and subsequent processing. Attached Figure Description
[0047] Figure 1 This is a diagram illustrating the method steps of the present invention.
[0048] Figure 2 This is a system module diagram of the present invention.
[0049] Figure 3 This is a flowchart of the delay matrix construction process of the present invention.
[0050] Figure 4 This is a flowchart illustrating the time chain construction process of the present invention.
[0051] Figure 5 This is a flowchart of the difference curve generation process of the present invention.
[0052] Figure 6 This is a flowchart of the playback sequence generation process of the present invention.
[0053] Figure 7 This is a flowchart illustrating the process of generating the frozen state according to the present invention. Detailed Implementation
[0054] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0055] Refer to the instruction manual appendix Figure 1-7 An embodiment of the present invention provides a 5G smart terminal device management method, comprising:
[0056] S1. By collecting the message transmission delay between the terminal and adjacent terminals during continuous communication, record and arrange the packets in chronological order, fill the arrangement result into a two-dimensional delay matrix, where the rows of the two-dimensional delay matrix correspond to continuous time periods and the columns correspond to adjacent terminals, and output the two-dimensional delay matrix.
[0057] S2. Bind each row of the two-dimensional delay matrix to the corresponding timestamp, and add a cross-terminal index number to the binding result. Based on the binding result, concatenate them in row order to form a time chain, and output the time chain data.
[0058] S3. Perform interval expansion operation on the time chain data, calculate the offset of the terminal index number between adjacent intervals, perform cumulative weighting processing on the offset, generate difference curves and output them;
[0059] S4. Reverse the time chain corresponding to the difference curve data and insert the perturbation value obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and output the playback sequence data.
[0060] S5. Write the playback sequence data to the isolated storage area, and attach a unique identifier during the writing process to generate frozen state data and output it.
[0061] In S1, the sending time and arrival time of consecutive messages between the terminal and adjacent terminals are extracted, and differential operation is performed to obtain the transmission delay of each message, forming a time difference sequence.
[0062] For each message, the transmission delay is evaluated for validity. If the transmission delay exceeds the preset range or the corresponding message is missing, the message data is deemed invalid and discarded. If the transmission delay is within the preset range, the message data is retained to fill the two-dimensional delay matrix.
[0063] The time difference sequence is divided into multiple segments according to continuous time periods, and a terminal index number is established for the corresponding adjacent terminals in each segment to obtain a segment mapping set;
[0064] The segmented mapping set is spliced together segment by segment in chronological order, so that the continuous segments form a temporal extension in the row dimension and a terminal distribution in the column dimension, thus constructing a two-dimensional delay matrix.
[0065] Add a start time marker to each row of the two-dimensional delay matrix and add a terminal index number to each column to output a two-dimensional delay matrix with timing and terminal calibration.
[0066] In S2, the delay value of each row in the two-dimensional delay matrix is combined with the corresponding timestamp, and the index number of the adjacent terminal is embedded in the binding result to form a combined binding record.
[0067] The composite binding records are arranged in chronological order, and an index topology is built based on the continuity of adjacent terminal index numbers to form an index topology sequence;
[0068] Perform stepwise iterative operations in the index topology sequence, calculate the residual between the terminal index numbers of adjacent time points, and append the residual as a residual correction value to the iteration result to generate chain segments;
[0069] The chain segments are spliced together sequentially. During the splicing process, the residual value of the previous segment is added to the index relationship of the next segment, and the cumulative residual is recorded in the splicing result. This maintains the cumulative effect of residual correction in the time chain structure, forming a time chain structure and outputting time chain data.
[0070] In S3, the time chain data is divided into multiple time intervals according to the continuous time range, and the terminal index number and corresponding time point are extracted in each time interval to generate an interval index table.
[0071] Two adjacent interval index tables are mapped according to the same terminal index number. The time difference between corresponding records is used as the offset. Each pair of corresponding records is appended with the sequential number of the time interval to form an offset relationship table.
[0072] By performing a threshold judgment on each offset in the offset relationship table, when the offset exceeds the preset threshold, the offset is marked as abnormal and an abnormal correction value is added; when the offset is within the threshold range, it is accumulated and calculated in the normal way.
[0073] For each offset in the offset relationship table, the interval duration and the fluctuation range of the terminal index number within the interval are calculated respectively. First, the offset is multiplied by the duration ratio of its time interval, and then the result is multiplied by the fluctuation range of the terminal index number within the interval. The final result is used as the weighted residual, and is accumulated sequentially by number to form a residual record table.
[0074] The residual record table is arranged in sequence by number and mapped to a continuous time axis in chronological order. During the mapping process, the interval order and the continuity of the cumulative residual are maintained, and the difference curve is generated and output.
[0075] It should be noted that in the formula structure involved in this scheme, dimensionless terms can be used as proportional or structural adjustment factors. When combined with quantities with units, they only play a role in numerical scaling and do not introduce new physical dimensions. Therefore, they will not change or confuse the overall unit system. This combination of "dimensionless terms and terms with units" can be understood as a composite structural expression commonly used in mathematical physics modeling. It conforms to the principle of dimensional consistency and has a clear physical interpretation basis.
[0076] Secondly, in the formula structure of this scheme, if multiple variables with different physical units are involved, including but not limited to time, mass or energy variables, their joint appearance is to express the collaborative modeling relationship of multiple physical mechanisms. Each variable can form a unified structure through function mapping, ratio combination or normalization adjustment, with clear units and clear meaning. The overall expression conforms to the principle of dimensional consistency and the conventional formula of engineering modeling.
[0077] In this solution, constants, weights, adjustment factors, threshold parameters, proportional coefficients, etc., are all adjustable control parameters for different application environments. Their values depend on the target equipment configuration, data input characteristics, and performance optimization goals. During the implementation phase, they are set to converge within a reasonable range through model verification, performance constraints, or engineering calibration. Although these parameters do not have a unique preset value, they have clear adjustment logic and calculation paths. They belong to the deterministic setting process in engineering implementation. The purpose of this setting is to ensure that the solution is both universally adaptable and reproducible and operable, without affecting its technical clarity and feasibility.
[0078] definition This is the offset after threshold correction;
[0079]
[0080]
[0081]
[0082]
[0083]
[0084] in The sequential numbering of discrete time intervals; Indicates the terminal index; Indicates the time interval Internal terminal The corresponding representative time point; Indicates adjacent time intervals and For the same terminal The difference between time points; Indicates time interval robustness threshold All offsets in this interval Determining robustness criteria; Represents a symbolic function. Used to preserve the direction of the offset; This represents the offset after threshold correction. When the offset is within the threshold range, it retains its original value. When it exceeds the threshold, it is truncated to the threshold value while retaining the sign.
[0085] in Indicates time interval Duration; This indicates the percentage of the total duration of this time interval out of all time intervals; Indicates the time interval The terminal obtained by calculating the two-dimensional delay matrix The magnitude of the delay fluctuation; Indicates that within the same time interval, the terminal The percentage of fluctuation range; This represents the weighted residual, which is obtained by multiplying the duration percentage, the volatility percentage, and the corrected offset.
[0086] in Indicates the time interval The cumulative residual up to date, initial value ; Indicates time interval The representative point in time; Time interval All terminals The sum of cumulative residuals; This represents a piecewise linear interpolation operator. The input is the node pairs of each interval. The output is a difference curve function on a continuous time axis; The independent variable is on a continuous time axis; Indicates continuous time Difference curve data on;
[0087] Furthermore, this scheme uses the difference in terminal time points between adjacent intervals. Introducing a threshold Robust correction yields the corrected offset. The aim is to filter out extreme jumps that exceed the normal range while preserving directionality; this is then combined with the duration of the time interval. The latency fluctuation of the terminal within this range The construction uses a dual weighting of duration proportion and fluctuation amplitude proportion to... We perform weighted summation to obtain the weighted residuals. This ensures that the residuals depend not only on the offset itself, but also on the importance of the interval and the intensity of the terminal fluctuations; finally, the residuals of each interval are... Accumulated sequentially And represent time points by time intervals. Interpolation is performed on a continuous time axis to obtain the difference curve. Its purpose is to reveal the overall trend of delay patterns across multiple intervals and terminals in a smooth and continuous manner. Therefore, this solution uses... , , , and Together, we transform the original, fragmented latency data into a continuous curve that visually shows the overall trend of change, while avoiding noise and outlier interference.
[0088] S4 also includes reversing the time chain corresponding to the difference curve according to the timestamp order. During the reversal process, the terminal index number and the corresponding timestamp are retained as binding records to form a reverse chain table.
[0089] Based on the two-dimensional delay matrix, differential operation is performed on the delay data of each terminal in the same time period, and the differential results are normalized to a uniform scale and arranged in time order to form a perturbation value sequence.
[0090] The perturbation value sequence is mapped to the corresponding position in the reverse chain table according to the correspondence between timestamp and terminal index number. During the mapping process, the original value of the reverse chain table is added to the perturbation value to generate a perturbation correction record.
[0091] The perturbation correction records are sequentially spliced together, and during the splicing process, the perturbation correction result of the previous position is superimposed on the current perturbation value to the next position to maintain the cumulative effect of perturbation superposition, forming a playback sequence and outputting the playback sequence data.
[0092] In S5, the playback sequence data is divided into multiple write blocks according to a preset time window, and a time sequence number is added to the write block. The write blocks are written to the isolated storage area in sequence to form a numbered write record.
[0093] For each write block of the write record, perform content digest calculation, and combine the digest result with the time sequence number and terminal index number to generate a unique identifier, forming an identifier table;
[0094] Each unique identifier in the identifier table is concatenated with the previous unique identifier, and a verification calculation is performed on the concatenation result to generate a verification chain with a dependency relationship between the previous and subsequent identifiers.
[0095] Perform consistency judgment on the verification chain. If any unique identifier in the verification chain is still inconsistent with the previous unique identifier after multiple recalculations, the written record is determined to be unusable and the freezing is stopped. When the verification chain remains consistent, the written record is fixed to the frozen state.
[0096] The written records, identification table, and verification chain are solidified together, and frozen state data is generated and output during the solidification process.
[0097] A 5G smart terminal device management system includes a matrix filling module, an index appending module, an offset calculation module, a correction overlay module, and a verification chain module;
[0098] The matrix filling module collects the message transmission delay between the terminal and adjacent terminals during continuous communication, records and arranges them packet by packet in chronological order, fills the arrangement result into a two-dimensional delay matrix, with rows of the two-dimensional delay matrix corresponding to continuous time periods and columns corresponding to adjacent terminals, and outputs the two-dimensional delay matrix.
[0099] The indexing module binds each row of the two-dimensional delay matrix to the corresponding timestamp, appends a cross-terminal index number to the binding result, concatenates the binding results row by row to form a time chain, and outputs the time chain data.
[0100] The offset calculation module performs interval expansion operations on the time chain data, calculates the offset of the terminal index number between adjacent intervals, performs cumulative weighting processing on the offset, generates a difference curve and outputs it.
[0101] The correction and overlay module reverses the time chain corresponding to the difference curve data and inserts perturbation values obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and outputs the playback sequence data.
[0102] The verification chain module generates and outputs frozen state data by writing the replay sequence data into the isolated storage area and attaching a unique identifier during the writing process.
[0103] In its implementation, this scheme records and arranges the packet transmission delays between the terminal and its neighboring terminals in continuous communication packet by packet in step S1, organizing these original discrete delay data into a two-dimensional delay matrix. The rows of the matrix represent consecutive time periods, and the columns represent different neighboring terminals, thus aligning the data in both time and terminal dimensions within the same structure. In step S2, each row of delay data is bound to a timestamp and embedded with a cross-terminal index number, then concatenated row by row to form a time chain. This process transforms the delay matrix from a static table into a dynamic chain structure with time order and cross-terminal relationships. In step S3, the time chain is further divided into multiple time intervals, and the time difference between adjacent intervals is extracted as an offset. A threshold is used to distinguish between normal and abnormal offsets, and then the interval time is combined with the offset. The long-term proportion and the terminal fluctuation amplitude proportion are weighted and accumulated to generate a residual record table, which is finally mapped to the difference curve data. The key to this process is to transform the single-point offset into an overall trend that can be accumulated and compared. Step S4 rearranges the time chain corresponding to the difference curve in reverse order and inserts the perturbation value derived from the two-dimensional delay matrix during the rearrangement process to generate playback sequence data with perturbation correction, realizing the playback and correction of the historical process. Finally, in step S5, the playback sequence data is written into the isolated storage area in blocks, and a unique identifier code is generated for each block, which is a combination of time sequence number and terminal index number. These identifier codes are concatenated in sequence to form a verification chain. When the verification chain is consistent, it is frozen. If the verification chain fails to verify multiple times, the freezing is stopped to ensure the security and immutability of the data, so that the result can be used for subsequent security control and evidence collection.
[0104] This solution constructs a two-dimensional delay matrix, time chain data, residual record table, and difference curve data. It also introduces perturbation correction and unique identifier verification chain into the replay sequence and frozen state data to ensure that each data point not only relies on a single log, but also verifies consistency through cross-interval and cross-terminal accumulation and comparison. This makes it impossible forged historical trajectories to be easily disguised as real anomalies. The system can effectively distinguish cross-temporal log attacks forged by IoT worms, thereby avoiding the abuse of fault tolerance logic and ensuring that the cluster maintains a stable recovery path when facing the spread of IoT worms.
[0105] In conclusion, the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.
Claims
1. A method for managing 5G smart terminal devices, characterized in that, include: S1. By collecting the message transmission delay between the terminal and adjacent terminals during continuous communication, record and arrange the packets in chronological order, fill the arrangement result into a two-dimensional delay matrix, where the rows of the two-dimensional delay matrix correspond to continuous time periods and the columns correspond to adjacent terminals, and output the two-dimensional delay matrix. S2. Bind each row of the two-dimensional delay matrix to the corresponding timestamp, and append a cross-terminal index number to the binding result. Based on the binding result, concatenate the rows in order to form a time chain, and output the time chain data. S3. Perform interval expansion operation on the time chain data, calculate the offset of the terminal index number between adjacent intervals, perform cumulative weighting processing on the offset, generate difference curves and output them; S4. Reverse the time chain corresponding to the difference curve data and insert the perturbation value obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and output the playback sequence data. S5. Write the playback sequence data to the isolated storage area, and attach a unique identifier during the writing process to generate frozen state data and output it.
2. The 5G smart terminal device management method according to claim 1, characterized in that: In S1, the sending time and arrival time of consecutive messages between the terminal and adjacent terminals are extracted, and differential operation is performed to obtain the transmission delay of each message, forming a time difference sequence. For each message, a validity check is performed on the transmission delay. If the transmission delay exceeds the preset range or the corresponding message is missing, the message data is determined to be invalid and is discarded. If the transmission delay is within the preset range, the message data is retained. The time difference sequence is divided into multiple segments according to continuous time periods, and a terminal index number is established for the corresponding adjacent terminals in each segment to obtain a segment mapping set; The segmented mapping set is spliced together segment by segment in chronological order, so that the continuous segments form a temporal extension in the row dimension and a terminal distribution in the column dimension, thus constructing a two-dimensional delay matrix. Add a start time marker to each row of the two-dimensional delay matrix and add a terminal index number to each column to output a two-dimensional delay matrix with timing and terminal calibration.
3. The 5G smart terminal device management method according to claim 2, characterized in that: In S2, the delay value of each row in the two-dimensional delay matrix is combined with the corresponding timestamp, and the index number of the adjacent terminal is embedded in the binding result to form a combined binding record. The composite binding records are arranged in chronological order, and an index topology is built based on the continuity of adjacent terminal index numbers to form an index topology sequence; Perform stepwise iterative operations in the index topology sequence, calculate the residual between the terminal index numbers of adjacent time points, and append the residual as a residual correction value to the iteration result to generate chain segments; The chain segments are spliced together sequentially. During the splicing process, the residual value of the previous segment is added to the index relationship of the next segment, and the cumulative residual is recorded in the splicing result. This maintains the cumulative effect of residual correction in the time chain structure, forming a time chain structure and outputting time chain data.
4. The 5G smart terminal device management method according to claim 3, characterized in that: In S3, the time chain data is divided into multiple time intervals according to the continuous time range, and the terminal index number and corresponding time point are extracted in each time interval to generate an interval index table. Two adjacent interval index tables are mapped according to the same terminal index number. The time difference between corresponding records is used as the offset. Each pair of corresponding records is appended with the sequential number of the time interval to form an offset relationship table. By performing a threshold judgment on each offset in the offset relationship table, when the offset exceeds the preset threshold, the offset is marked as abnormal and an abnormal correction value is added; when the offset is within the threshold range, it is accumulated and calculated in the normal way. For each offset in the offset relationship table, the interval duration and the fluctuation range of the terminal index number within the interval are calculated respectively. First, the offset is multiplied by the duration ratio of its time interval, and then the result is multiplied by the fluctuation range of the terminal index number within the interval. The final result is used as the weighted residual, and is accumulated sequentially by number to form a residual record table. The residual record table is arranged in sequence by number and mapped to a continuous time axis in chronological order. During the mapping process, the interval order and the continuity of the cumulative residual are maintained, and the difference curve is generated and output.
5. A 5G smart terminal device management method according to claim 4, characterized in that: S4 also includes reversing the time chain corresponding to the difference curve according to the timestamp order. During the reversal process, the terminal index number and the corresponding timestamp are retained as binding records to form a reverse chain table. Based on the two-dimensional delay matrix, differential operation is performed on the delay data of each terminal in the same time period, and the differential results are normalized to a uniform scale and arranged in time order to form a perturbation value sequence. The perturbation value sequence is mapped to the corresponding position in the reverse chain table according to the correspondence between timestamp and terminal index number. During the mapping process, the original value of the reverse chain table is added to the perturbation value to generate a perturbation correction record. The perturbation correction records are spliced together sequentially, and during the splicing process, the perturbation correction result of the previous position is superimposed on the current perturbation value to the next position to maintain the cumulative effect of perturbation superposition, forming a playback sequence and outputting the playback sequence data.
6. A 5G smart terminal device management method according to claim 5, characterized in that: In S5, the playback sequence data is divided into multiple write blocks according to a preset time window, and a time sequence number is added to the write block. The write blocks are written to the isolated storage area in sequence to form a numbered write record. For each write block of the write record, perform content digest calculation, and combine the digest result with the time sequence number and terminal index number to generate a unique identifier, forming an identifier table; Each unique identifier in the identifier table is concatenated with the previous unique identifier, and a verification calculation is performed on the concatenation result to generate a verification chain. Perform consistency judgment on the verification chain. If any unique identifier in the verification chain is still inconsistent with the previous unique identifier after multiple recalculations, the written record is determined to be unusable and the freezing is stopped. When the verification chain remains consistent, the written record is fixed to the frozen state. The written records, identification table, and verification chain are solidified together, and frozen state data is generated and output during the solidification process.
7. A 5G smart terminal device management system, characterized in that, It includes a matrix filling module, an index appending module, an offset calculation module, a correction and overlay module, and a verification chain module; The matrix filling module collects the message transmission delay between the terminal and adjacent terminals during continuous communication, records and arranges them packet by packet in chronological order, fills the arrangement result into a two-dimensional delay matrix, with rows of the two-dimensional delay matrix corresponding to continuous time periods and columns corresponding to adjacent terminals, and outputs the two-dimensional delay matrix. The indexing module binds each row of the two-dimensional delay matrix to the corresponding timestamp, appends a cross-terminal index number to the binding result, concatenates the binding results row by row to form a time chain, and outputs the time chain data. The offset calculation module performs interval expansion operations on the time chain data, calculates the offset of the terminal index number between adjacent intervals, performs cumulative weighting processing on the offset, generates a difference curve and outputs it. The correction and overlay module reverses the time chain corresponding to the difference curve data and inserts perturbation values obtained based on the two-dimensional delay matrix during the reordering process to generate a playback sequence with perturbation correction and outputs the playback sequence data. The verification chain module generates and outputs frozen state data by writing the replay sequence data into the isolated storage area and attaching a unique identifier during the writing process.
Citation Information
Patent Citations
5G power private network communication evaluation method and system
CN119729548A
Multi-source ammeter data intelligent fusion and abnormity identification method
CN120257220A