Safety management method, device and equipment for intelligent inspection system of power transmission line
By implementing identity authentication, least privilege access control, and security auditing in the intelligent inspection system for power transmission lines, the security management issues of the system have been resolved, achieving stable system operation and data security assurance.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHINA SOUTHERN POWER GRID BIG DATA SERVICE CO LTD
- Filing Date
- 2026-01-08
- Publication Date
- 2026-04-21
AI Technical Summary
How to conduct precise security management of intelligent inspection systems for power transmission lines to prevent unauthorized access, data leakage, and malicious attacks, and to ensure the stable operation of the power grid and data security.
By authenticating user terminals, assigning unique user identifiers and complex login passwords, monitoring user behavior, resource usage, and command execution in real time, providing access control based on the principle of least privilege, and conducting security audits, a closed-loop security management system is formed.
This system enhances the security of identity authentication, refines access control, improves the comprehensiveness of security auditing, and promotes synergy in system security management within the intelligent inspection system for power transmission lines. It effectively prevents unauthorized access and data leakage, ensuring stable system operation and data security.
Smart Images

Figure CN121906799A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of power system technology, and in particular to a safety management method, apparatus and equipment for an intelligent inspection system for transmission lines. Background Technology
[0002] With the increasing intelligence level of power systems, intelligent transmission line inspection systems have become a core infrastructure for ensuring the safe and stable operation of the power grid. These systems store massive amounts of sensitive information, including inspection data, equipment parameters, and user operation records. Therefore, if these systems are subjected to unauthorized access, data leaks, or malicious attacks, it could lead to serious consequences such as interrupted inspection tasks, equipment malfunctions, and power grid failures, even threatening the security of public power supply.
[0003] Therefore, how to accurately manage the safety of intelligent inspection systems for power transmission lines is a technical problem that urgently needs to be solved in the field of power system technology. Summary of the Invention
[0004] Therefore, it is necessary to provide a safety management method, device, and equipment for an intelligent inspection system for power transmission lines, which can accurately manage the safety of the intelligent inspection system for power transmission lines, in order to address the aforementioned technical problems.
[0005] Firstly, this application provides a safety management method for an intelligent inspection system for power transmission lines, including:
[0006] In response to the login information from the user terminal for the intelligent inspection system of transmission lines, the user terminal is authenticated; the login information includes a user identifier and a login password.
[0007] If the identity verification is successful, the user terminal is granted access to the intelligent inspection system for the power transmission line.
[0008] During the use of the intelligent inspection system for power transmission lines by the user terminal, the system monitors safety-related events of the user terminal and performs safety management based on these events; the safety-related events include at least one of user terminal behavior, resource usage, and command execution.
[0009] In one embodiment, the security-related events include the user terminal behavior, and the security management based on the security-related events includes:
[0010] Determine whether the current behavior of the user terminal is reasonable based on the user terminal behavior;
[0011] If it is determined that the current behavior of the user terminal is unreasonable, the system retrieves the whitelist of legitimate users from the database subsystem of the intelligent inspection system for power transmission lines and deletes the relevant information of the user terminal from the whitelist of legitimate users.
[0012] Alternatively, if it is determined that the current behavior of the user terminal is unreasonable, a warning message may be sent to the user terminal to warn it to correct the current behavior.
[0013] In one embodiment, the security-related events include the resource usage, and the security management based on the security-related events includes:
[0014] The current resource utilization rate of the intelligent inspection system for power transmission lines is determined based on the resource usage information.
[0015] If the current resource utilization rate is greater than the preset resource utilization rate threshold, then the memory space in the operation subsystem of the intelligent inspection system for power transmission lines is released.
[0016] In one embodiment, the security-related events include the command execution status, and the security management based on the security-related events includes:
[0017] Based on the command execution status, determine the unexecuted instructions and detect whether the relevant execution modules of the unexecuted instructions are faulty;
[0018] If the relevant execution module malfunctions, the unexecuted instruction will be re-executed after the malfunction is resolved.
[0019] If the relevant execution module is not faulty, the unexecuted instruction will be re-executed.
[0020] In one embodiment, if the relevant execution module malfunctions, the method further includes:
[0021] The fault location is determined by the relevant execution module of the unexecuted instruction, and the fault location is output to notify the troubleshooter to resolve the fault.
[0022] In one embodiment, the method further includes:
[0023] A security audit is performed on the aforementioned security-related events to obtain an audit report on the safe use of the intelligent inspection system for power transmission lines by the user terminal.
[0024] Secondly, this application also provides a safety management device for an intelligent inspection system for transmission lines, comprising:
[0025] The identity authentication module is used to authenticate the user terminal in response to the login information of the user terminal for the intelligent inspection system of transmission lines; the login information includes a user identifier and a login password.
[0026] The permission provision module is used to grant the user terminal access to the intelligent inspection system for power transmission lines after successful identity authentication.
[0027] The safety management module is used to monitor safety-related events of the user terminal during the use of the intelligent inspection system for power transmission lines, and to perform safety management based on the safety-related events; the safety-related events include at least one of user terminal behavior, resource usage, and command execution.
[0028] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the safety management method of the intelligent inspection system for transmission lines described in the first aspect.
[0029] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the safety management method of the intelligent inspection system for transmission lines described in the first aspect.
[0030] Fifthly, this application also provides a computer program product, which includes a computer program that is processed by a processor to perform the steps of the safety management method of the intelligent inspection system for transmission lines described in the first aspect.
[0031] The aforementioned security management method, apparatus, and equipment for the intelligent transmission line inspection system respond to user terminal login information for the system, performing identity authentication on the user terminal; the login information includes a user identifier and a login password; upon successful identity authentication, the user terminal is granted access to the intelligent transmission line inspection system; during the user terminal's use of the system, security-related events are monitored, and security management is performed based on these events; security-related events include at least one of user terminal behavior, resource usage, and command execution. This application embodiment, by authenticating the user terminal, granting corresponding access permissions, and performing security management based on security-related events, achieves identity authentication, access control, and security management for the intelligent transmission line inspection system. Therefore, it enables precise security management of the intelligent transmission line inspection system, ensuring its stable operation and data security. Attached Figure Description
[0032] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.
[0033] Figure 1 This is a flowchart illustrating the safety management method of an intelligent inspection system for power transmission lines in one embodiment.
[0034] Figure 2 This is a flowchart illustrating the security management steps in one embodiment;
[0035] Figure 3 This is a flowchart illustrating the security management steps in another embodiment;
[0036] Figure 4 This is a flowchart illustrating the safety management method of an intelligent inspection system for power transmission lines in another embodiment;
[0037] Figure 5 This is a structural block diagram of the safety management device of an intelligent inspection system for power transmission lines in one embodiment.
[0038] Figure 6 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation
[0039] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.
[0040] It should be noted that the terms "first," "second," etc., used in this application can be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from the second element. The terms "comprising" and "having," and any variations thereof, used in this application, are intended to cover non-exclusive inclusion. The term "multiple" used in this application refers to two or more. The term "and / or" used in this application refers to one of the embodiments, or any combination of multiple embodiments.
[0041] With the increasing intelligence of power systems, intelligent transmission line inspection systems have become a core infrastructure for ensuring the safe and stable operation of the power grid. These systems integrate technologies such as sensors, drones, and big data analytics, achieving automation and precision in transmission line defect detection and condition monitoring. This significantly reduces the cost of manual inspections and improves inspection efficiency and coverage. The operational subsystem of the intelligent transmission line inspection system involves core functions such as inspection task scheduling, real-time data processing, and remote equipment control. The legal entity database subsystem stores massive amounts of sensitive information, including inspection data, equipment parameters, and user operation records. This data directly relates to the safety of power grid operation and the trade secrets of power companies. Therefore, if the intelligent transmission line inspection system suffers unauthorized access, data leakage, or malicious attacks, it could lead to serious consequences such as inspection task interruption, equipment malfunction, and power grid failures, even threatening the security of public power supply.
[0042] Therefore, a comprehensive, efficient, and collaborative safety management solution is urgently needed to address the safety hazards existing in current technologies and ensure the stable operation and data security of intelligent transmission line inspection systems. In other words, how to accurately manage the safety of intelligent transmission line inspection systems is a pressing technical problem that needs to be solved in the field of power system technology.
[0043] Having described the background technology of the safety management method for the intelligent transmission line inspection system provided in this application embodiment, the implementation environment involved in the safety management method for the intelligent transmission line inspection system provided in this application embodiment will be briefly described below. The safety management method for the intelligent transmission line inspection system provided in this application embodiment can be applied to an intelligent transmission line inspection system. The intelligent transmission line inspection system includes an operation subsystem and a database subsystem, and computer equipment can be installed in the intelligent transmission line inspection system.
[0044] In one embodiment, such as Figure 1 As shown, a safety management method for an intelligent inspection system for power transmission lines is provided. Taking the application of this method to an intelligent inspection system for power transmission lines as an example, the method includes the following steps:
[0045] S201, in response to the user terminal's login information for the intelligent inspection system of transmission lines, performs identity authentication on the user terminal.
[0046] The intelligent transmission line inspection system comprises an operation subsystem and a database subsystem, both of which require security management (i.e., execution of S201-S203). It should be noted that the security management principles of the database subsystem are similar to those of the operation subsystem. Optionally, the security management of the database subsystem and the operation subsystem can be integrated, or they can be managed independently. Login information includes a user identifier and a login password; the user identifier corresponds to a user account or user username.
[0047] In this embodiment, for each user account, a unique user identifier can be assigned to the user account under the operation subsystem and / or database subsystem of the intelligent transmission line inspection system. A login password with sufficient complexity is required; for example, the login password must be at least 8 characters long and consist of a combination of letters and numbers. Users can also be required to change their login passwords periodically, for example, monthly. In practical applications, a pop-up reminder can be sent to the user terminal 3 days before the expiration date when the user logs into the operation subsystem and / or database subsystem of the intelligent transmission line inspection system: "Your password will expire in 3 days, please change it in time." If the password is not changed by the deadline, it will be automatically locked, requiring the user to contact the administrator to unlock it. Alternatively, reminders can be sent via other means, such as email or SMS. The user identifier and / or login password for the same user account can be the same or different under the operation subsystem and database subsystem.
[0048] When a user logs into the operation subsystem via a user terminal, the user terminal can send login information to the operation subsystem and / or database subsystem of the intelligent transmission line inspection system. Specifically, the user can enter their user identifier and login password on the user terminal. At this time, the user terminal can automatically encrypt the login information, for example, using VPN (Virtual Private Network) or encryption technology, to prevent eavesdropping during network transmission. Thus, the user terminal can transmit the encrypted login information to the computer equipment of the operation subsystem and / or database subsystem within the intelligent transmission line inspection system.
[0049] Furthermore, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can receive login information from the user terminal, decrypt the login information, and extract the user identifier and login password from the decrypted login information. Then, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can compare the login password with the user password corresponding to the user identifier pre-stored in the intelligent transmission line inspection system. If the login password matches the user password, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can determine that the user terminal authentication has passed. If the login password does not match the user password, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can determine that the user terminal authentication has failed (i.e., authentication failed).
[0050] Furthermore, if the number of failed identity verification attempts exceeds a preset limit, the intelligent transmission line inspection system can lock the user account for a preset duration. During the lockout period, the user cannot initiate login requests and can contact the administrator to unlock the account. For example, the preset number of attempts can be set to 6, and the preset duration can be set to 24 hours. Additionally, the system can terminate the verification process and issue a notification if the verification times out.
[0051] S202, upon successful identity verification, grants user terminals access to the intelligent inspection system for power transmission lines.
[0052] In this embodiment of the application, based on the principle of least privilege, the intelligent transmission line inspection system can assign user roles under the operation subsystem and / or database subsystem to each user account. Different user roles have different permissions under the operation subsystem or database subsystem. Based on this, when the identity authentication is successful, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can provide the user terminal with the corresponding usage permissions.
[0053] Furthermore, an automatic logout mechanism can be set when users access the operation subsystem. For example, if a user does not perform any operation in the operation subsystem and / or database subsystem within a preset time period, the intelligent transmission line inspection system can automatically log out of the corresponding user account and prompt the user to log in again. In addition, the intelligent transmission line inspection system can also manage default user accounts, such as periodically resetting default user accounts, including resetting the user ID and default password, and / or periodically cleaning up redundant or expired user accounts.
[0054] Furthermore, restrictions can be set on terminal access methods and network address ranges. That is, when a user accesses the operating subsystem, only user accounts that meet preset conditions are allowed to access it. For example, preset conditions may include user accounts that meet specific terminal access methods or specific network address ranges. Moreover, the restrictions can differ for different user roles.
[0055] S203 monitors safety-related events at user terminals during the use of the intelligent transmission line inspection system and performs safety management based on these events.
[0056] Among them, security-related events include at least one of user terminal behavior, resource usage, and command execution. Resource usage may include, but is not limited to, the usage of resources such as CPU (Central Processing Unit), hard disk, memory, and network of the servers corresponding to the operating subsystem and / or database subsystem.
[0057] In this embodiment of the application, during the process of a user terminal using the intelligent inspection system for power transmission lines, the operation subsystem and / or database subsystem of the intelligent inspection system for power transmission lines can monitor the user terminal behavior, resource usage, and command execution status in real time or periodically. Therefore, the operation subsystem and / or database subsystem of the intelligent inspection system for power transmission lines can perform security management based on the user terminal behavior, resource usage, and command execution status.
[0058] In the aforementioned security management method for the intelligent transmission line inspection system, in response to the user terminal's login information for the system, the user terminal is authenticated. The login information includes a user identifier and a login password. Upon successful authentication, the user terminal is granted access to the intelligent transmission line inspection system. During the user terminal's use of the system, security-related events are monitored, and security management is performed based on these events. Security-related events include at least one of user terminal behavior, resource usage, and command execution. This embodiment of the application, by authenticating the user terminal, granting corresponding access permissions, and performing security management based on security-related events, achieves identity authentication, access control, and security management for the intelligent transmission line inspection system. Therefore, it enables precise security management of the intelligent transmission line inspection system, ensuring its stable operation and data security.
[0059] In one embodiment, the aforementioned security-related events include user terminal behavior. Based on this, a security management implementation method is provided, namely, "performing security management based on security-related events" in S203 above, including:
[0060] Determine whether the user's current behavior is reasonable based on the user's terminal behavior.
[0061] If it is determined that the current behavior of the user terminal is unreasonable, the system retrieves the whitelist of legitimate users from the database subsystem of the intelligent inspection system for transmission lines and deletes the relevant information of the user terminal from the whitelist of legitimate users.
[0062] Alternatively, if it is determined that the user terminal's current behavior is unreasonable, a warning message can be sent to the user terminal to warn it to correct its current behavior.
[0063] In this embodiment, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can monitor user terminal behavior in real time or periodically, thus understanding the operations performed by at least one user terminal on the intelligent transmission line inspection system. Therefore, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can determine whether the current behavior of the user terminal is reasonable based on the user terminal behavior. If the current behavior of the user terminal is determined to be reasonable, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can continue to monitor the user terminal behavior.
[0064] If it is determined that the current behavior of a user terminal is unreasonable, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can obtain a whitelist of legitimate users from the database subsystem of the intelligent transmission line inspection system and delete the relevant information of the user terminal with unreasonable behavior from the whitelist. Alternatively, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can also send a warning message to the user terminal with unreasonable behavior to warn it to correct its current behavior. Afterwards, it can determine in real time whether the corrected behavior of the user terminal is reasonable. If the corrected behavior is unreasonable, the relevant information of the user terminal with unreasonable behavior is deleted from the whitelist of legitimate users, and further operations by the user terminal are promptly prevented.
[0065] In this embodiment, the user terminal's current behavior can be determined based on the user terminal's behavior. If the user terminal's current behavior is determined to be unreasonable, the user terminal's permissions can be modified or deleted to ensure the stable operation and data security of the intelligent inspection system for power transmission lines.
[0066] In one embodiment, the aforementioned security-related events include resource usage. Based on this, a security management implementation method is provided, namely, "security management based on security-related events" in S203 above, including:
[0067] The current resource utilization rate of the intelligent inspection system for transmission lines is determined based on resource usage.
[0068] If the current resource utilization rate is greater than the preset resource utilization rate threshold, then the memory space in the operation subsystem of the intelligent inspection system for transmission lines will be released.
[0069] In this embodiment, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can monitor resource usage in real time or periodically, i.e., understand the usage of CPU, hard disk, memory, network, and other resources of the server corresponding to the operation subsystem and / or database subsystem. Therefore, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can determine the current resource utilization rate of the intelligent transmission line inspection system based on the resource usage data. If the current resource utilization rate is not greater than a preset resource utilization rate threshold, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can continue to monitor resource usage. If the current resource utilization rate is greater than the preset resource utilization rate threshold, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can release memory space in the operation subsystem to ensure that the resource consumption of the intelligent transmission line inspection system is not excessive. Of course, this embodiment does not limit the specific value of the preset resource utilization rate threshold.
[0070] In this embodiment, the current resource utilization rate of the intelligent transmission line inspection system can be determined based on the resource usage. If the current resource utilization rate is greater than the preset resource utilization rate threshold, the memory space in the operation subsystem of the intelligent transmission line inspection system can be released, thus ensuring that the resource consumption of the intelligent transmission line inspection system will not be too high. Therefore, it can ensure that the intelligent transmission line inspection system can operate stably with high performance.
[0071] In one embodiment, such as Figure 2 As shown, the aforementioned security-related events include command execution status. Based on this, a security management implementation method is provided, namely, "security management based on security-related events" in S203 above, including:
[0072] S301: Determine the unexecuted instructions based on the command execution status and check whether the relevant execution modules of the unexecuted instructions are faulty. If the relevant execution modules are faulty, proceed to S302; if the relevant execution modules are not faulty, proceed to S303.
[0073] S302, after troubleshooting, re-execute the unexecuted instructions.
[0074] S303, re-execute the unexecuted instruction.
[0075] Among them, unexecuted instructions refer to instructions or commands that were not successfully executed, and related execution modules refer to modules or subsystems that execute unexecuted instructions.
[0076] In this embodiment, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can monitor command execution in real time or periodically. This allows them to determine whether commands in the operation subsystem and / or database subsystem have been successfully executed. Based on the command execution status, they can identify unexecuted instructions and detect whether the relevant execution modules of the unexecuted instructions are faulty. If a fault is detected in the relevant execution module of the unexecuted instruction, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can handle or eliminate the fault in that module and re-execute the unexecuted instruction after troubleshooting.
[0077] If the relevant execution module of the unexecuted instruction is found to be fault-free, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can directly re-execute the unexecuted instruction. Alternatively, it can detect whether the intelligent transmission line inspection system is currently processing a fault. If it is, the system will wait for the fault processing to complete before re-executing the unexecuted instruction; if it is not, the system can directly re-execute the unexecuted instruction.
[0078] In this embodiment, unexecuted instructions can be identified based on command execution status, and the relevant execution modules for these unexecuted instructions can be detected for faults. Based on the detection results, fault handling and recovery can be performed on the relevant execution modules, or the unexecuted instructions can be re-executed. This ensures the stable operation and data security of the intelligent transmission line inspection system.
[0079] In one embodiment, such as Figure 3 As shown, if a fault occurs in the relevant execution module, a fault-solving method is provided. That is, the safety management method of the aforementioned intelligent transmission line inspection system also includes:
[0080] S304 determines the fault location based on the relevant execution module of the unexecuted instruction and outputs the fault location to notify the troubleshooter.
[0081] In this embodiment, if a fault exists in a relevant execution module, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can first obtain the location of the relevant execution module of the unexecuted instruction, and determine the fault location based on the location of the relevant execution module of the unexecuted instruction. Thus, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can output the fault location on the interactive interface of the operation subsystem and / or database subsystem, or it can send the fault location to the user terminal so that the user knows the fault location in the relevant execution module, thereby notifying the user to troubleshoot the fault.
[0082] In this embodiment, the fault location can be determined based on the relevant execution module of the unexecuted instruction, and the fault location can be output. In this way, the fault can be accurately eliminated based on the fault location.
[0083] In one embodiment, such as Figure 4 As shown, a method for implementing security auditing is provided, namely, the security management method of the above-mentioned intelligent inspection system for transmission lines also includes:
[0084] S204, conduct security audits on security-related events and obtain audit reports on the safe use of the intelligent inspection system for power transmission lines by user terminals.
[0085] In this embodiment, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can monitor user terminal behavior, resource usage, and command execution in real time or periodically. Therefore, the operation subsystem and / or database subsystem of the intelligent transmission line inspection system can audit user terminal behavior, resource usage, and important command execution, and compile an audit report on the user terminal's safe use of the intelligent transmission line inspection system. Furthermore, the audit report can be encrypted or locked to prevent unauthorized users from deleting or modifying it. Additionally, the audit report can be backed up and / or updated periodically to ensure its traceability.
[0086] In this embodiment, security audits can be performed on security-related events to obtain audit reports on the safe use of the intelligent transmission line inspection system by user terminals, thereby further managing the security of the intelligent transmission line inspection system.
[0087] Based on the above embodiments, it can be seen that the safety management method of the intelligent inspection system for transmission lines in this application can achieve at least the following effects:
[0088] First, identity authentication security is significantly improved. A unique identifier is assigned to each user in the operating and database subsystems, with explicit requirements for password complexity (at least 8 alphanumeric characters) and a regular password change cycle (monthly). Combined with a lockout for failed authentication attempts (preset to 6) and a timeout warning mechanism, the system effectively prevents brute-force attacks and password leaks. Simultaneously, encryption technologies such as VPNs and encryption machines ensure the secure transmission of authentication information, blocking unauthorized access paths at the source of identity verification and addressing the shortcomings of existing solutions in terms of rudimentary authentication mechanisms and insufficient protection.
[0089] Secondly, access control strikes a balance between granularity and flexibility. Based on the principle of least privilege, users are assigned specific roles and permissions, enabling precise control over their operational scope. An automatic timeout mechanism is also implemented to prevent permission abuse in unattended situations, and periodic resets of default accounts and cleanup of expired accounts reduce account security risks. Differential restrictions on terminal access methods and network address ranges (configured according to user roles) further narrow the attack surface for unauthorized access. In this way, the needs of power companies for multi-role, multi-level permission management are met, while flexible restriction policies adapt to access control requirements in different scenarios, significantly reducing the risk of unauthorized access.
[0090] Third, the comprehensiveness and traceability of security audits are enhanced. Audit content covers key security events such as user behavior, system resource usage (CPU, hard drive, memory, network, etc.), and execution of important commands, forming a three-in-one audit system of "operation-resource-command." This ensures that after a security incident occurs, the source of the incident can be quickly traced and the operational process reconstructed.
[0091] Fourth, the system's security management collaboration and adaptability are improved. The operation subsystem and database subsystem adopt a "unified principle, optional management" design pattern, which supports both integrated management (simplifies operation and maintenance processes and improves collaborative protection effects) and independent management (adapts to different security level requirements), fully meeting the deployment scenarios of power companies of different sizes.
[0092] Fifth, the entire security management solution forms a closed-loop protection system from identity authentication and access control to security auditing, comprehensively covering the key security nodes of the system operation, effectively resisting various security threats such as brute-force attacks, unauthorized access, abuse of privileges, and data leakage, ensuring the stable operation of the intelligent inspection system for power transmission lines and the security of sensitive data, while also complying with relevant security compliance requirements of the power industry, and has significant practicality and promotional value.
[0093] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps. It is understood that the steps in different embodiments can be freely combined as needed, and all non-contradictory solutions formed by such combinations are within the scope of protection of this application.
[0094] Based on the same inventive concept, this application also provides a safety management device for an intelligent transmission line inspection system, which implements the safety management method of the intelligent transmission line inspection system described above. The solution provided by this device is similar to the solution described in the above method. Therefore, the specific limitations of one or more embodiments of the safety management device for an intelligent transmission line inspection system provided below can be found in the limitations of the safety management method for the intelligent transmission line inspection system described above, and will not be repeated here.
[0095] In one exemplary embodiment, such as Figure 5 As shown, a safety management device for an intelligent transmission line inspection system is provided, comprising: an identity authentication module 31, an access control module 32, and a safety management module 33, wherein:
[0096] The identity authentication module 31 is used to authenticate the user terminal in response to the login information of the user terminal to the intelligent inspection system for transmission lines; the login information includes the user identifier and the login password.
[0097] The permission provision module 32 is used to provide user terminals with access to the intelligent inspection system for power transmission lines after successful identity authentication.
[0098] The safety management module 33 is used to monitor safety-related events of the user terminal during the use of the intelligent inspection system for power transmission lines, and to perform safety management based on the safety-related events; the safety-related events include at least one of the following: user terminal behavior, resource usage, and command execution.
[0099] In one embodiment, security-related events include user terminal behavior, and the security management module 33 includes:
[0100] The first determining unit is used to determine whether the current behavior of the user terminal is reasonable based on the user terminal behavior.
[0101] The deletion unit is used to retrieve the list of legitimate users from the database subsystem of the intelligent transmission line inspection system when it is determined that the current behavior of the user terminal is unreasonable, and delete the relevant information of the user terminal from the list of legitimate users; or,
[0102] The sending unit is used to send a warning message to the user terminal when it is determined that the current behavior of the user terminal is unreasonable, so as to warn the user terminal to correct the current behavior.
[0103] In one embodiment, security-related events include resource usage, and the security management module 33 includes:
[0104] The second determining unit is used to determine the current resource utilization rate of the intelligent inspection system for transmission lines based on resource usage.
[0105] The release unit is used to release the memory space in the operation subsystem of the intelligent inspection system for transmission lines if the current resource utilization rate is greater than the preset resource utilization rate threshold.
[0106] In one embodiment, security-related events include command execution status, and the security management module 33 includes:
[0107] The detection unit is used to determine the unexecuted instructions based on the command execution status and to detect whether there is a fault in the relevant execution module of the unexecuted instructions;
[0108] The first execution unit is used to re-execute the unexecuted instructions after troubleshooting if the relevant execution module has a fault.
[0109] The second execution unit is used to re-execute the unexecuted instructions if there is no fault in the relevant execution module.
[0110] In one embodiment, if the relevant execution module malfunctions, the above-mentioned apparatus further includes:
[0111] The output module is used to determine the fault location based on the relevant execution module of the unexecuted instruction, and output the fault location to notify the troubleshooter.
[0112] In one embodiment, the above-described apparatus further includes:
[0113] The security audit module is used to audit security-related events and obtain audit reports on the safe use of the intelligent inspection system for power transmission lines by user terminals.
[0114] The various modules in the safety management device of the aforementioned intelligent transmission line inspection system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each module.
[0115] As described in the above embodiments, a computer device can be installed in the intelligent inspection system for power transmission lines. In one exemplary embodiment, a computer device is provided, which can be a terminal, and its internal structure diagram can be as follows. Figure 6 As shown, the computer device includes a processor, memory, input / output interface, communication interface, display unit, and input device. The processor, memory, and input / output interface are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. When the computer program is executed by the processor, it implements a safety management method for an intelligent inspection system for power transmission lines. The display unit is used to form a visually visible image and can be a display screen, projection device, or virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.
[0116] Those skilled in the art will understand that Figure 6 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0117] In one exemplary embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:
[0118] In response to the login information from the user terminal to the intelligent inspection system for transmission lines, the system authenticates the user terminal; the login information includes the user identifier and login password.
[0119] Once identity verification is successful, user terminals are granted access to the intelligent inspection system for power transmission lines.
[0120] During the use of the intelligent inspection system for power transmission lines by user terminals, security-related events of the user terminals are monitored, and security management is carried out based on these events. Security-related events include at least one of the following: user terminal behavior, resource usage, and command execution.
[0121] In one embodiment, security-related events include user terminal behavior. Based on these security-related events, security management is performed, and the processor, when executing a computer program, further implements the following steps:
[0122] Determine whether the current behavior of the user terminal is reasonable based on the user terminal behavior;
[0123] If it is determined that the current behavior of the user terminal is unreasonable, the legitimate user whitelist is obtained from the database subsystem of the intelligent inspection system for transmission lines, and the relevant information of the user terminal is deleted from the legitimate user whitelist.
[0124] Alternatively, if it is determined that the user terminal's current behavior is unreasonable, a warning message can be sent to the user terminal to warn it to correct its current behavior.
[0125] In one embodiment, security-related events include resource usage. Security management is performed based on these security-related events. When the processor executes a computer program, the following steps are also implemented:
[0126] Determine the current resource utilization rate of the intelligent inspection system for transmission lines based on resource usage;
[0127] If the current resource utilization rate is greater than the preset resource utilization rate threshold, then the memory space in the operation subsystem of the intelligent inspection system for transmission lines will be released.
[0128] In one embodiment, security-related events include command execution status. Security management is performed based on these security-related events. When the processor executes a computer program, the following steps are also implemented:
[0129] Based on the command execution status, identify any unexecuted instructions and check whether the relevant execution modules of the unexecuted instructions are faulty;
[0130] If the relevant execution module is faulty, the unexecuted instructions will be re-executed after the fault is resolved.
[0131] If the relevant execution module is not faulty, the unexecuted instructions will be re-executed.
[0132] In one embodiment, if the relevant execution module malfunctions, the processor also performs the following steps when executing the computer program:
[0133] The fault location is determined based on the relevant execution module of the unexecuted instruction, and the fault location is output to notify the troubleshooter.
[0134] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0135] Conduct security audits on security-related incidents to obtain audit reports on the safe use of the intelligent inspection system for power transmission lines by user terminals.
[0136] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the safety management method of the intelligent inspection system for transmission lines in any of the above embodiments.
[0137] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the safety management method of the intelligent inspection system for transmission lines in any of the above embodiments.
[0138] It should be noted that the user information (including but not limited to user terminal information, user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.
[0139] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.
[0140] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.
[0141] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A safety management method for an intelligent inspection system for power transmission lines, characterized in that, The method includes: In response to the login information from the user terminal for the intelligent inspection system of transmission lines, the user terminal is authenticated; the login information includes a user identifier and a login password. If the identity verification is successful, the user terminal is granted access to the intelligent inspection system for the power transmission line. During the use of the intelligent inspection system for power transmission lines by the user terminal, the system monitors safety-related events of the user terminal and performs safety management based on these events; the safety-related events include at least one of user terminal behavior, resource usage, and command execution.
2. The method according to claim 1, characterized in that, The security-related events include the user terminal behavior, and the security management based on the security-related events includes: Determine whether the current behavior of the user terminal is reasonable based on the user terminal behavior; If it is determined that the current behavior of the user terminal is unreasonable, the system retrieves the whitelist of legitimate users from the database subsystem of the intelligent inspection system for power transmission lines and deletes the relevant information of the user terminal from the whitelist of legitimate users. Alternatively, if it is determined that the current behavior of the user terminal is unreasonable, a warning message may be sent to the user terminal to warn it to correct the current behavior.
3. The method according to claim 1, characterized in that, The security-related events include the resource usage, and the security management based on the security-related events includes: The current resource utilization rate of the intelligent inspection system for power transmission lines is determined based on the resource usage information. If the current resource utilization rate is greater than the preset resource utilization rate threshold, then the memory space in the operation subsystem of the intelligent inspection system for power transmission lines is released.
4. The method according to claim 1, characterized in that, The security-related events include the command execution status, and the security management based on the security-related events includes: Based on the command execution status, determine the unexecuted instructions and detect whether the relevant execution modules of the unexecuted instructions are faulty; If the relevant execution module malfunctions, the unexecuted instruction will be re-executed after the malfunction is resolved. If the relevant execution module is not faulty, the unexecuted instruction will be re-executed.
5. The method according to claim 4, characterized in that, If the relevant execution module malfunctions, the method further includes: The fault location is determined by the relevant execution module of the unexecuted instruction, and the fault location is output to notify the troubleshooter to resolve the fault.
6. The method according to any one of claims 1-5, characterized in that, The method further includes: A security audit is performed on the aforementioned security-related events to obtain an audit report on the safe use of the intelligent inspection system for power transmission lines by the user terminal.
7. A safety management device for an intelligent inspection system of transmission lines, characterized in that, The device includes: The identity authentication module is used to authenticate the user terminal in response to the login information of the user terminal for the intelligent inspection system of transmission lines; the login information includes a user identifier and a login password. The permission provision module is used to grant the user terminal access to the intelligent inspection system for power transmission lines after successful identity authentication. The safety management module is used to monitor safety-related events of the user terminal during the use of the intelligent inspection system for power transmission lines, and to perform safety management based on the safety-related events; the safety-related events include at least one of user terminal behavior, resource usage, and command execution.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.
10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.