An intelligence board intelligent management and control method and system supporting soft off-line and safe closed loop

Abstract

The present application relates to the technical field of intelligent transportation, in particular to an intelligence board intelligent management and control method and system supporting soft offline and safety closed loop, comprising S1: device soft offline control: receiving a soft offline instruction to set the terminal gateway to soft offline; receiving an online instruction and a recovery password, and exiting the soft offline after matching; S2: network interruption intelligent degradation: monitoring the network state of the center management platform, reading the degradation display scheme when the network is interrupted; S3: release after content monitoring safety closed loop: issuing display instructions with a delay of a preset time, and reporting the center management platform when the actual display content is inconsistent with the expected content; S4: multi-protocol adaptation: converting standardized display instructions into target intelligence board private protocol instructions through an embedded protocol library; issuing instructions after S1-S3 are executed, and being transparent to the upper layer application during adaptation. The present application upgrades from passive defense to active management and control and closed loop verification through the deep integration of soft offline control, intelligent degradation, content monitoring and multi-protocol adaptation, and improves the safety of the intelligence board system.

Description

Technical Field

[0001] This invention relates to the field of intelligent transportation technology, specifically to an intelligent management and control method and system for information boards that supports soft offline operation and a safety closed loop. Background Technology

[0002] Current security solutions for information boards mainly focus on passive defense measures such as transmission encryption and identity authentication, which have the following problems: 1. Lack of proactive security locking mechanism: During specific periods (such as major security missions), it is impossible to proactively and remotely set field equipment to "read-only" or "disabled" mode and achieve secure recovery. Physical security relies on on-site personnel operation, which is high-risk and inefficient. 2. Rigid fault handling mechanism: When the network is interrupted, the information board often displays garbled characters, error messages or stops working. There is a lack of preset intelligent degradation display strategies, which affects the continuity of traffic services. 3. Inconsistent release and display results: Due to protocol incompatibility, equipment failure or malicious tampering, the instructions issued by the control center may not match the actual content displayed on the information board. There is a lack of effective verification mechanism and a security vulnerability of "release ends immediately". 4. Disconnect between security and compatibility: The security gateway has poor protocol compatibility with multi-brand information boards, and security policies are difficult to implement uniformly on different protocols, resulting in high system integration complexity and security vulnerabilities. Summary of the Invention

[0003] To address the shortcomings of existing technologies, this invention provides an intelligent management and control method and system for information boards that supports soft offline operation and a secure closed loop. Through deep integration of soft offline control, intelligent degradation, content monitoring, and multi-protocol adaptation, a synergistic and efficient solution is formed, upgrading from passive defense to proactive management and closed-loop verification. This significantly improves the reliability, security, and compatibility of the information board system, meeting the development needs of intelligent transportation systems.

[0004] This invention is achieved through the following technical solution: A method for intelligent management and control of information boards that supports soft offline operation and security closed loop is provided, including the following steps: S1: Soft offline control of the device: Receive the soft offline instruction from the central management platform, which contains an encrypted recovery password hash value; set the terminal gateway to soft offline state according to the instruction, and only allow it to respond to online instructions; receive the online instruction and recovery password, verify the password hash value match, and exit the soft offline state; S2: Intelligent Degradation for Network Outages: By monitoring the network connection status with the central management platform, when the network is interrupted, the system reads the locally preset degradation display scheme and controls the information board to display default information or perform specific actions according to the scheme. S3: Post-release content monitoring security closed loop: After issuing the display command, a preset time is elapsed. The actual content displayed on the information board is then queried from the protocol library, and the actual content is compared with the expected content. If they match, the process ends and a successful release log is recorded; If there is a discrepancy, an alert for abnormal content will be generated and reported to the central management platform; S4: Multi-protocol adaptation: The standardized display commands are converted into private protocol commands for the target intelligence board through an embedded protocol library; the commands are issued after the S1-S3 security process is executed, and the adaptation process is transparent to the upper layer application.

[0005] Furthermore, in step S1, the soft offline command is sent via the HTTPS protocol, the terminal gateway sets a status flag in the non-volatile memory to enter the soft offline state, and the recovery password is generated using the SHA-256 algorithm to generate a hash value.

[0006] Furthermore, in step S2, the degraded display scheme includes: displaying the default program guide, displaying static text, or controlling the black screen; network status monitoring is achieved by sending ICMP Ping packets or TCP handshakes every 5 seconds, and when three consecutive detections fail, it is determined that the network is interrupted.

[0007] Furthermore, in step S3, the delay time is configurable to suit the response speed of different information boards; when comparing the actual content with the expected content, a character-by-character or pixel-by-pixel comparison is performed, and the alarm information generated when there is a discrepancy includes the expected content, the actual content, and the location of the discrepancy.

[0008] Furthermore, in step S4, the protocol library is stored in the form of a database, supports the communication protocols of multiple brand information boards, the standardized display instructions are in JSON format, and the protocol conversion engine queries the configuration and loads the corresponding protocol converter based on the gateway ID.

[0009] A management system for intelligent control of information boards that supports soft offline operation and a secure closed-loop system includes: Central management platform: Based on x86 architecture servers running the Ubuntu operating system, developed in Java, it provides a web management interface for policy distribution, status monitoring, alarm handling and log auditing; Field terminal gateway: adopts ARM architecture industrial-grade embedded device, equipped with at least two network interfaces and serial interfaces, runs Linux system, core control program is developed in C++, and has built-in hardware clock and watchdog circuit; Among them, the terminal gateway has an embedded protocol library and protocol conversion engine, which are used to execute the control process from S1 to S4.

[0010] Furthermore, the terminal gateway's non-volatile memory is eMMC, used to store status flags and password hash values; the central management platform and the terminal gateway communicate securely via the HTTPS protocol.

[0011] The beneficial effects of this invention are: I. Introduction of Proactive Security for Management: The "soft offline" mechanism provides managers with remote "digital lock" capabilities, upgrading from "intrusion prevention" to "proactive control" and solving the mandatory silence requirement in specific scenarios. Traditional solutions rely on physical operation and passive defense, which cannot meet the mandatory silence requirements of major security tasks and lack remote proactive security locking and security recovery mechanisms. This invention, however, implements remote digital lock functionality through "soft offline" commands. After receiving the encrypted recovery password hash value, the terminal gateway enters a read-only state, only responding to online commands. It only exits the soft offline state after verifying the recovery password match. This upgrade from "intrusion prevention" to "proactive control" provides managers with remote digital lock capabilities, solving the mandatory silence requirement in specific scenarios.

[0012] Second, it improves system service reliability: The "intelligent degradation" mechanism transforms network failures from "accidents" into "manageable states," ensuring uninterrupted basic traffic information services. Traditional solutions display garbled characters or stop operating when the network is interrupted; their fault handling mechanisms are rigid, affecting the continuity of traffic services. In contrast, the terminal gateway of this invention monitors the network connection status in real time (ICMP Ping / TCP handshake every 5 seconds); when the network is interrupted, it automatically reads the locally preset degradation scheme (displaying the default program guide / static text / black screen), transforming network failures from "accidents" into "manageable states," ensuring uninterrupted basic traffic information services and improving system reliability.

[0013] Third, it achieves a closed-loop security capability: "Post-release monitoring" breaks the assumption of "trust upon release" and constructs a security closed loop of "instruction-execution-verification," greatly improving the system's reliability and trustworthiness. Traditional solutions have security vulnerabilities such as "release ends immediately," and inconsistencies in display can be caused by protocol incompatibility, equipment failure, or malicious tampering. In contrast, this invention delays the query of the actual content displayed on the information board after the instruction is released, compares the expected and actual content character by character / pixel, and immediately issues an alarm when there is a discrepancy. This breaks the assumption of "trust upon release," constructs a complete security closed loop, greatly improves the system's reliability and trustworthiness, and achieves truly verifiable security.

[0014] IV. Addressing Industry Integration Pain Points: Through deep integration of "multi-protocol adaptation" and security processes, the standardization of security policies and plug-and-play device access are achieved, resolving security and efficiency issues caused by industry fragmentation. Traditional security measures suffer from poor compatibility between security gateways and multi-brand intelligence boards, making unified implementation of security policies difficult and resulting in high system integration complexity. This invention's terminal gateway embeds multi-brand protocol libraries (Nova, Sansi, Dianming, etc.), converting standardized JSON commands into device-specific protocols. Security processes are transparent to applications, enabling standardized implementation of security policies and plug-and-play device access, thus resolving security and efficiency issues caused by industry fragmentation.

[0015] This invention achieves a complete technology chain through system-wide collaborative innovation and the deep integration of four mechanisms, linked in a process: S1 (security lockout) → S2 (fault tolerance) → S3 (result verification) → S4 (protocol adaptation). It combines proactive security with passive fault tolerance, and coordinates hardware architecture with software algorithms. Transparent integration ensures that security capabilities are seamlessly integrated into existing systems through a protocol adaptation layer. The overall system employs advanced security technologies such as SHA-256 encryption and HTTPS transmission, optimizes the hardware platform based on an ARM / x86 heterogeneous architecture, and utilizes the collaborative design of industrial-grade embedded devices and cloud computing platforms. This constructs a complete security management system for intelligent traffic information boards, solving long-standing industry challenges in security, reliability, and compatibility, demonstrating significant technological advancement and practical value. Attached Figure Description

[0016] Figure 1 This is a diagram of the overall system architecture of the present invention.

[0017] Figure 2 This is a flowchart of the device soft offline control process in this invention.

[0018] Figure 3 This is a flowchart of the intelligent degradation process for network interruption in this invention.

[0019] Figure 4 This is a flowchart of the post-publication content monitoring security closed-loop process in this invention.

[0020] As shown in the figure: 1. Central management platform; 2. Terminal gateway. Detailed Implementation

[0021] To clearly illustrate the technical features of this solution, the following detailed implementation method will be used to explain the solution.

[0022] Example 1: A method for intelligent management and control of information boards that supports soft offline operation and a secure closed loop includes the following steps: S1: Device soft offline control: Receive the soft offline instruction from the central management platform 1, which contains an encrypted recovery password hash value; set the terminal gateway to soft offline state according to the instruction, and only allow responses to online instructions; receive the online instruction and recovery password, verify the password hash value match, and exit the soft offline state.

[0023] The soft offline command is issued via the HTTPS protocol. Terminal gateway 2 sets a status flag in non-volatile memory to enter the soft offline state. The recovery password uses the SHA-256 algorithm to generate a hash value.

[0024] When implementing device soft offline, refer to Figure 2 As shown in the flowchart, firstly, the central management platform administrator selects the target terminal gateway through the web interface and clicks the "Enter Soft Offline" button. A dialog box pops up, prompting the administrator to set and confirm a recovery password. This password should not be empty and must be at least 6 characters long.

[0025] To ensure the security of password recovery, the central management platform uses the SHA-256 algorithm to generate a hash value for the password. This algorithm can convert passwords of any length into a 256-bit hash value. Subsequently, the central management platform sends a soft offline command containing this hash value and the target gateway ID to the target terminal gateway via a secure HTTPS protocol.

[0026] After receiving the instruction, the terminal gateway sets a status flag soft_offline_flag = 1 in its non-volatile memory (such as eMMC) and stores the received password hash value.

[0027] After entering soft offline state, the terminal gateway's main control loop program will continuously check this flag. When soft_offline_flag == 1, the gateway will discard all remote control commands from the network (such as information publishing, parameter setting, etc.) and only respond to status queries and online commands.

[0028] When restoration is required, the administrator enters the restoration password for the gateway on the central management platform and issues a go-back command.

[0029] After receiving the online command, the terminal gateway calculates the SHA-256 hash value of the input password and compares it with the hash value stored locally. If they match, the gateway clears the status flag (soft_offline_flag = 0) and the stored hash value, and returns to normal operating mode.

[0030] S2: Intelligent Degradation for Network Outages: By monitoring the network connection status with the central management platform, when the network is interrupted, the system reads the locally preset degradation display scheme and controls the information board to display default information or perform specific actions according to the scheme.

[0031] The degraded display solutions include: displaying the default program guide, displaying static text, or controlling a black screen; network status monitoring is achieved by sending ICMP Ping packets or TCP handshakes every 5 seconds, and when three consecutive detections fail, it is determined that the network is interrupted.

[0032] When implementing intelligent degradation for network outages, refer to Figure 3 The flowchart shown illustrates how administrators, through the central management platform, pre-configure degradation display policies for each terminal gateway. Policy options include: Display the default playlist: Upload a playlist file named "default.mpc" to the gateway's local storage.

[0033] Display static text: Set the text content, such as "Network debugging in progress".

[0034] Control Black Screen: Select to put the information panel into black screen mode.

[0035] An independent network status monitoring thread runs within the terminal gateway, sending an ICMP Ping packet or establishing a TCP handshake to the central management platform every 5 seconds to determine network connectivity.

[0036] If three consecutive detections fail (i.e., no network for 15 seconds), the gateway determines that the network is interrupted.

[0037] The gateway's main program immediately triggers the degradation process and reads the preset policy.

[0038] Perform the corresponding operation according to the strategy: If the policy is "Display default program list", then the protocol conversion module is invoked to convert the "default.mpc" file into a protocol format supported by the current information board and distribute it.

[0039] If the strategy is "display static text", then a display instruction containing that text is generated and issued.

[0040] If the strategy is "black screen", then issue a command to turn off the information board.

[0041] At the same time, the gateway logs a message saying "Network interrupted, downgrade mode has been initiated".

[0042] Once the network monitoring thread reconnects, the gateway automatically stops the downgraded display and resumes receiving real-time instructions from the central management platform.

[0043] S3: Post-release content monitoring security closed loop: After issuing the display command, a preset time is elapsed. The actual content displayed on the information board is then queried from the protocol library, and the actual content is compared with the expected content. If they match, the process ends and a successful release log is recorded; If there is a discrepancy, an alert will be generated indicating an anomaly, and the issue will be reported to the central management platform.

[0044] The delay time is configurable to suit the response speed of different information boards; when comparing the actual content with the expected content, a character-by-character or pixel-by-pixel comparison is performed, and the alarm information generated when there is a discrepancy includes the expected content, the actual content, and the location of the discrepancy.

[0045] Reference Figure 4 As shown in the flowchart, after the terminal gateway successfully executes an information release command, it starts a timer that delays for 10 seconds (this time is configurable to adapt to the response speed of different information boards).

[0046] After the delay ends, the gateway sends a "current display content query command" specific to the brand's devices to the information board through its embedded protocol library.

[0047] The gateway waits for and receives the response data packet returned by the information board.

[0048] The protocol parsing module extracts the actual displayed text or graphic encoding from the data packet.

[0049] The comparison module will compare the extracted actual display content with the previously issued expected display content character by character or pixel by pixel.

[0050] Comparison result processing: Consistency: The process ends, and a successful release log is recorded.

[0051] Inconsistency: An alarm (Alarm Level: ERROR) is generated, containing information such as the expected content, the actual content, and the location of the inconsistency, and is immediately reported to the central management platform via the network. The platform will notify the administrator with a red pop-up window on the web interface.

[0052] S4: Multi-protocol adaptation: The standardized display commands are converted into private protocol commands for the target intelligence board through an embedded protocol library; the commands are issued after the S1-S3 security process is executed, and the adaptation process is transparent to the upper layer application.

[0053] The protocol library is stored in the form of a database, supports communication protocols for multiple brand information boards, and the standardized display commands are in JSON format. The protocol conversion engine queries the configuration based on the gateway ID and loads the corresponding protocol converter.

[0054] When the terminal gateway starts up, it loads a protocol library file named protocol_lib.db from its Flash storage. This file stores the communication protocol specifications of more than ten brands of information boards, such as Nova, Sansi, and Dianming, in the form of a database, including instruction sets, data packet structures, checksum calculation methods, etc.

[0055] The instructions issued by the central management platform are in a unified JSON format, for example: { "cmd": "display_bmp", "gateway_id": "GW_001", "param": { "file_name": "congestion.bmp", "duration": 60 } }; After receiving the JSON instruction, the protocol conversion engine of the terminal gateway first queries its configuration based on the gateway_id and learns that the gateway is connected to the "Nova" brand information board.

[0056] The engine then loads the "Nova" branded protocol converter from protocol_lib.db.

[0057] The converter reads the congestion.bmp file, encapsulates it according to the frame structure of the "Nova" protocol, and generates a binary instruction stream, such as 0xAA 0x12 0x01 ... [BMP data]... 0xCRC.

[0058] Finally, the binary command is sent to the target intelligence board via serial port or network port. The entire conversion process is transparent to the upper-layer application and has passed the aforementioned security checks such as soft offline and content filtering before execution.

[0059] Example 2: A management system for intelligent control of information boards that supports soft offline operation and a secure closed-loop system includes: Central Management Platform: Based on an x86 architecture server running the Ubuntu operating system, the central management platform software is developed using the Java language, provides a web management interface, and is responsible for policy distribution, status monitoring, alarm handling, and log auditing.

[0060] Field terminal gateway: Adopts ARM architecture industrial-grade embedded device, with a main frequency of no less than 2.0GHz and memory of no less than 8GB. Equipped with at least two network interfaces (WAN / LAN) and serial interfaces (RS232 / RS485), running Linux system, core control program developed in C++, built-in hardware clock and watchdog circuit to ensure automatic recovery in abnormal situations.

[0061] Among them, the terminal gateway has an embedded protocol library and protocol conversion engine, which are used to execute the control process from S1 to S4.

[0062] The terminal gateway's non-volatile memory is eMMC, used to store status flags and password hashes; the central management platform and the terminal gateway communicate securely via the HTTPS protocol.

[0063] Of course, the above description is not limited to the examples above. Technical features not described in this invention can be implemented by or using existing technology, and will not be repeated here. The above embodiments and drawings are only used to illustrate the technical solutions of this invention and are not intended to limit this invention. This invention has been described in detail with reference to preferred embodiments. Those skilled in the art should understand that any changes, modifications, additions or substitutions made by those skilled in the art within the scope of this invention do not depart from the spirit of this invention and should also fall within the scope of protection of the claims of this invention.

Claims

1. A method for intelligent management and control of information boards supporting soft offline operation and security closed loop, wherein the method is applied to a terminal gateway, characterized in that, Includes the following steps: S1: Device soft offline control: The terminal gateway receives a soft offline command from the central management platform, which contains an encrypted recovery password hash value. Based on the command, the terminal gateway is set to a soft offline state. The remote digital lock function is realized through the soft offline command. After receiving the encrypted recovery password hash value, the terminal gateway enters a read-only state and only responds to the online command. After receiving the online command and the recovery password, the terminal gateway exits the soft offline state after verifying that the password hash value matches. S2: Intelligent Degradation for Network Outages: By monitoring the network connection status with the central management platform, when the network is interrupted, the system reads the locally preset degradation display scheme and controls the information board to display default information or perform specific actions according to the scheme. S3: Post-release content monitoring security closed loop: After successfully executing an information publishing command, the terminal gateway starts a timer to delay for a preset time. After the delay, the gateway sends a query command for the current display content, unique to the brand of the information board, to the information board through its embedded protocol library. The gateway waits for and receives the response data packet returned by the information board. The protocol parsing module extracts the actual displayed text or graphic encoding from the data packet, and the comparison module compares the extracted actual display content with the previously issued expected display content character by character or pixel. If they match, the process ends and a successful publishing log is recorded; if they do not match, a content anomaly alarm is generated and reported to the central management platform. S4: Multi-protocol adaptation: The standardized display commands are converted into the target intelligence board's private protocol commands through an embedded protocol library; the commands are issued after the S1-S3 security process is executed, and the adaptation process is transparent to the upper-layer applications.

2. The intelligent management and control method for information boards supporting soft offline operation and security closed loop as described in claim 1, characterized in that: In step S1, the soft offline command is sent via the HTTPS protocol. The terminal gateway sets the status flag in the non-volatile memory to enter the soft offline state, and the recovery password is generated using the SHA-256 algorithm to generate a hash value.

3. The intelligent management and control method for information boards supporting soft offline operation and security closed loop as described in claim 1, characterized in that: In step S2, the degraded display options include: displaying the default program guide, displaying static text, or controlling a black screen; network status monitoring is achieved by sending ICMP Ping packets or TCP handshakes every 5 seconds, and when three consecutive detections fail, it is determined that the network is interrupted.

4. The intelligent management and control method for information boards supporting soft offline operation and security closed loop as described in claim 1, characterized in that: In step S3, the delay time is configurable to suit the response speed of different information boards; when comparing the actual content with the expected content, a character-by-character or pixel-by-pixel comparison is performed, and the alarm information generated when there is a discrepancy includes the expected content, the actual content, and the location of the discrepancy.

5. The intelligent management and control method for information boards supporting soft offline operation and security closed loop as described in claim 1, characterized in that: In step S4, the protocol library is stored in the form of a database, supports the communication protocols of multiple brand information boards, the standardized display instructions are in JSON format, and the protocol conversion engine queries the configuration and loads the corresponding protocol converter based on the gateway ID.

6. A control system using the intelligent control method for information boards supporting soft offline operation and security closed loop as described in any one of claims 1 to 5, characterized in that, include: Central management platform: Based on x86 architecture servers running the Ubuntu operating system, developed in Java, and providing a web management interface for policy distribution, status monitoring, alarm handling and log auditing; Terminal gateway: An industrial-grade embedded device based on ARM architecture, equipped with at least two network interfaces and a serial interface, running a Linux system, with the core control program developed in C++, and a built-in hardware clock and watchdog circuit; Among them, the terminal gateway has an embedded protocol library and protocol conversion engine, which are used to execute the control process from S1 to S4.

7. The control system according to claim 6, characterized in that: The terminal gateway's non-volatile memory is eMMC, used to store status flags and password hashes; the central management platform and the terminal gateway communicate securely via the HTTPS protocol.

Images