New energy operation and maintenance video evidence storage and safety management and control system

Abstract

The invention relates to the technical field of new energy operation and maintenance, and discloses a new energy operation and maintenance video evidence storage and safety management and control system, which comprises a system management module for providing authority configuration, interface integration and identity authentication services for a whole process; the video uploading module establishes unique mapping between a wind power operation and maintenance work order and a work video, realizes stable transmission of the video, generates an inter-frame strong dependence chain type Hash structure, and completes credible anchoring of video content; the video auditing module implements hierarchical permission white list management and control, realizes multi-level auditing process compliance circulation, synchronizes auditing operation data to a video hash chain, and cooperates with the video uploading module to form a credible evidence chain; and the index management module calculates a multi-dimensional operation and maintenance management and control index and generates a management and control report based on the full data of the video uploading and auditing module. The system forms a full-process closed loop of evidence storage, auditing, management and control and tracing, and effectively improves the tamper-proofing capability of new energy operation and maintenance video evidence storage and the compliance of the auditing process.

Description

Technical Field

[0001] This invention relates to the field of new energy operation and maintenance technology, and in particular to a new energy operation and maintenance video evidence storage and security management system. Background Technology

[0002] Existing technologies in the field of video evidence storage and security management for new energy operation and maintenance mainly involve simply transplanting common video processing, access control, process review, and data statistics technologies to new energy operation and maintenance scenarios to build a basic video evidence storage and management system. This system includes basic video upload, video review, simple indicator statistics, and system management functions. It can achieve basic video file upload and storage, support simple association between videos and operation and maintenance work orders, use file-level hash encryption for video anti-tampering verification, configure hierarchical basic access control, complete multi-level video review processes from the site to headquarters, and can also connect to a small number of enterprise business systems to achieve basic data synchronization. It can also calculate simple management indicators such as upload rate, meeting the basic functional requirements of video evidence storage and review for new energy operation and maintenance. The overall technical architecture is primarily designed to achieve single functions, with only shallow data interaction between functional modules.

[0003] The aforementioned and existing related technologies often suffer from the following shortcomings: video anti-tampering only achieves file-level verification, lacks a strong inter-frame dependency chain hash structure design, cannot achieve reliable anchoring of video content, and frame-level tampering is difficult to detect; the granularity of review permission control is too coarse, without fine-grained breakdown of review operations, and lacks precise configuration of hierarchical permission whitelists, making it impossible to intercept unauthorized operations from the bottom layer; review data and video content are only simply associated, and review operation data is not synchronized to the video anti-tampering system, failing to form a complete and reliable chain of evidence; there is insufficient coordination between functional modules, the data flow and technical support logic are not closed-loop, and the entire process of evidence storage, review, control, and traceability is not achieved; the statistical analysis of control indicators lacks multi-dimensional and refined design, the interface integration and permission support capabilities of system management are weak, and it cannot adapt to the three-level review architecture of new energy operation and maintenance and the actual operation scenarios of remote sites. Summary of the Invention

[0004] The technical problem this invention aims to solve is that existing technologies for video evidence storage and review in new energy operation and maintenance suffer from insufficient ability to identify video frame-level tampering, insufficient granularity of review authority control, and weak binding between review data and video content. These issues result in low credibility of video evidence storage and poor compliance traceability of the review process. To address this, we propose a new energy operation and maintenance video evidence storage and security management system.

[0005] To achieve the above objectives, this application adopts the following technical solution: a new energy operation and maintenance video storage and security management system, including: a video upload and work order association module, used to establish a mapping relationship between wind power operation and maintenance work orders and operation videos, and to complete the transmission and continuation of operation videos; the wind power operation and maintenance work order is a certificate for inspection, maintenance, and testing operation tasks in the new energy operation and maintenance scenario, the mapping relationship is a unique binding relationship between the operation video and the corresponding work order, and the transmission and continuation of transmission refers to the network transmission of the operation video and the continuous transmission after the transmission interruption is recovered.

[0006] The inter-frame dependency hash chain generation module communicates with the video upload and work order association module, and this communication connection serves as a real-time data interaction channel between the modules. This module decodes the work video frame by frame, using the hash value of the previous frame as a factor for generating the hash value of the next frame. It then generates a full-frame chained hash structure for the work video using a cryptographic hash algorithm, thus achieving reliable anchoring of the video content. The previous frame is the preceding adjacent video frame to the current frame. The cryptographic hash algorithm is a one-way hash algorithm recognized by the national commercial cryptography standard. The chained hash structure is a strongly dependent, unbreakable hash verification chain between frames; modification of a single frame will cause the entire chain of hash verifications to fail. This reliable anchoring ensures the authenticity and immutability of the video content.

[0007] The audit atomic permission control module is used to break down the wind power EHS video audit process into several indivisible audit atomic operations. It configures corresponding audit atomic operation permission whitelists for multi-level audit entities and establishes dynamic binding rules between levels and atomic operations. The audit atomic operation is the smallest indivisible execution action in the entire audit process. The multi-level audit entities are the general, multi-level EHS audit management entities commonly used in the new energy operation and maintenance industry, from low to high. The permission whitelist is the set of audit atomic operation permissions that the corresponding audit entity can execute. The dynamic binding rules are the matching rules between different levels of audit entities and their corresponding executable operations.

[0008] The multi-level review process execution module communicates with the inter-frame dependency hash chain generation module and the review atomic permission control module, respectively. It is used to open matching operation entry points for corresponding review subjects based on the permission whitelist, complete the multi-level review process flow, and simultaneously update the review operation data of each level to the chain hash structure. The multi-level review process flow is a sequential review flow from the lower-level review subject to the higher-level review subject. The synchronous update is to access the review operation data into the chain hash structure, forming an inseparable and trustworthy whole with the video content.

[0009] Preferably, the inter-frame dependency hash chain generation module includes a frame hash calculation unit, which is configured to: for the starting key frame of the work video, generate a starting frame hash value based on the original frame data, the corresponding work order unique identifier, the operator identifier, and the acquisition terminal hardware identifier using a cryptographic hash algorithm; the starting key frame is the first full-frame encoded image in the video encoding sequence, serving as the decoding benchmark for all subsequent frames; the original frame data is the original image data of the video frame; and the unique work order identifier is the unique identification code for the corresponding work order; for subsequent non-key frames of the work video, generate a corresponding frame hash value based on the current frame's original data, the previous frame's hash value, and the previous frame's acquisition timestamp using a cryptographic hash algorithm, thereby forming a strong inter-frame dependency chain hash structure; the subsequent non-key frames are image frames in the video encoding sequence that depend on the preceding frame for decoding, and the strong inter-frame dependency means that the generation of the hash value of the subsequent frame must depend on the hash value of the preceding frame, and modification of a single frame will cause the subsequent full-chain hash value to become invalid.

[0010] Preferably, the audit atomic permission control module includes an atomic permission verification unit, which is configured to: break down the wind power EHS video audit process into several audit atomic operations, including video viewing, adding initial audit information, registering violation information, submitting assessment suggestions, adding review information, confirming final audit information, and approving assessment results; the several audit atomic operations constitute the minimum set of execution actions covering the entire wind power EHS audit process; for different levels of audit subjects, corresponding audit atomic operation permission whitelists are configured, where lower-level audit subjects do not have higher-level audit operation configuration permissions; in response to an audit subject's operation request, the module first verifies whether the operation is within the corresponding subject's permission whitelist, and if the verification fails, the operation request is directly blocked; the response is to trigger the verification action immediately upon receiving an audit subject's operation request.

[0011] Preferably, the video upload and work order association module further includes a metadata embedding unit. The metadata embedding unit is configured to: encrypt the wind power operation and maintenance business metadata using a symmetric encryption algorithm, and then embed it losslessly into the reserved fields of the corresponding video frame, so that the business metadata and the corresponding video frame form an inseparable binding relationship; the symmetric encryption algorithm is recognized by the national commercial cryptography standard, and the same key is used for encryption and decryption; the reserved fields of the video frame are supplementary and enhanced information fields natively defined by the video encoding standard, and the data embedding does not affect the normal playback of the video; the wind power operation and maintenance business metadata includes at least one of the following: work order identifier, work ticket identifier, operator identifier, collection location information, and collection timestamp.

[0012] Furthermore, the system also includes a dual-track safety regulation compression module, which is communicatively connected to the video upload and work order association module and the inter-frame dependency hash chain generation module. The dual-track safety regulation compression module is configured to: divide the operation video frames into core frames and invalid frames based on the wind power safety regulations and the corresponding work order inspection item list; perform lossless compression on the core frames and extreme compression on the invalid frames; and regenerate a strong inter-frame dependency chain hash structure for the compressed video. The wind power safety regulations are general safety production operation specifications for the new energy operation and maintenance industry. The core frames are video frames containing key inspection content, operation screens, and violation risk screens. The invalid frames are redundant screen frames with no inspection and review value. The lossless compression does not change the core details of the screen, and the extreme compression maximizes the reduction of data volume.

[0013] Preferably, the multi-level review process execution module includes a process flow unit, which is configured to: complete the review process flow in order from low level to high level; automatically push the review to the next level review subject after the previous level review is completed; and support each level review subject to independently check the corresponding operation video within the scope of their authority; automatically generate an unalterable audit log after each level review operation is completed, and simultaneously update the audit log to the chain hash structure; the audit log is a record of all review operation behaviors and is an unmodifiable and undeletable traceability credential.

[0014] Preferably, the system also includes a standardized interface module, which is communicatively connected to the video upload and work order association module, the audit atomic permission control module, and the multi-level audit process execution module. The standardized interface module is configured to achieve bidirectional synchronization of operation and maintenance work order data and enterprise personnel and organizational structure data through the standardized interface, while supporting unified user identity authentication and passwordless login. The standardized interface is a program interface that conforms to general data interaction specifications and can realize data interoperability between different business systems. The unified identity authentication is a mechanism that allows users to complete the login identity verification mechanism for multiple systems using a single account credential.

[0015] Preferably, the system also includes an indicator statistics management module, which is communicatively connected to the multi-level review process execution module. The indicator statistics management module is configured to automatically calculate and display several operation and maintenance control indicators, including upload rate, completeness rate, review rate, pass rate, and space occupancy rate. It supports filtering and displaying indicator results by organizational level, time range, and work order type, and also supports exporting indicator statistics reports. The operation and maintenance control indicators are core quantitative indicators used in the new energy operation and maintenance industry to evaluate the completion of video evidence storage and review work. The organizational level corresponds to the management level of the multi-level review entity enterprise.

[0016] Preferably, the system further includes a distributed storage management module, which is communicatively connected to the video upload and work order association module and the inter-frame dependency hash chain generation module, respectively. The distributed storage management module is configured as follows:

[0017] The system automatically completes the structured storage of work videos according to preset hierarchical rules, monitors the storage space occupancy rate in real time, and automatically pushes early warning information when the preset threshold is reached. At the same time, it completes the compliant archiving and destruction of expired videos according to preset rules. The preset hierarchical rules are video storage catalog rules formulated based on the enterprise organizational structure, work order type, and work time. The compliant archiving and destruction are video lifecycle management operations that comply with the power industry data retention standards.

[0018] The technical effects and advantages of this invention are as follows: The video upload and work order association module establishes a unique mapping relationship between wind power operation and maintenance work orders and operation videos, enabling stable transmission and subsequent transmission of operation videos after interruptions. This solves the technical problems of video and operation tasks being unrelated and data redundancy transmission after transmission interruptions, improving the consistency of video and operation task matching and transmission stability. The inter-frame dependency hash chain generation module constructs a strong inter-frame dependency chain hash structure to achieve reliable anchoring of video content throughout its entire lifecycle, solving the technical problems of unidentifiable video frame-level tampering and insufficient content verification granularity, improving the anti-tampering capability of video content and the accuracy of data integrity verification. The atomic permission control module splits the review process into indivisible atomic operations and configures hierarchical permission whitelists for multi-level review entities, achieving refined control of review operations. This solves the technical problems of insufficient granularity of review permission control and inability to intercept unauthorized operations, improving the security and compliance of review process permission control. The multi-level review process execution module synchronously updates review operation data to a chain hash structure, achieving strong binding between the review process and video content, solving the technical problems of separation of review data and video content and broken evidence chains, improving the traceability and evidence chain integrity of the entire review process. The system as a whole optimizes the entire process of video evidence storage and audit control for wind power operation and maintenance through the coordinated operation of its various modules. This improves the system's operational stability, data security, and adaptability to business scenarios, and perfects the technical system for video evidence storage and security control in the field of new energy operation and maintenance. Attached Figure Description

[0019] The disclosure of this invention is illustrated with reference to the accompanying drawings. It should be understood that the drawings are for illustrative purposes only and are not intended to limit the scope of protection of this invention. In the drawings, the same reference numerals are used to refer to the same parts:

[0020] Figure 1 This is a diagram of the overall system architecture of the present invention; Figure 2 This is a data flow diagram of the entire video lifecycle of the present invention; Figure 3 This is a flowchart of the inter-frame dependent hash chain generation process of the present invention. Detailed Implementation

[0021] It is readily understood that, based on the technical solution of this invention, those skilled in the art can propose various interchangeable structural methods and implementations without altering the essential spirit of the invention. Therefore, the following detailed embodiments and accompanying drawings are merely illustrative examples of the technical solution of this invention and should not be considered as the entirety of the invention or as limitations or restrictions on the technical solution of this invention.

[0022] Wind farms are generally located in remote areas across the country, with significant differences in network environments and poor stability. Frontline maintenance personnel use a variety of terminal devices. The cloud-edge collaborative architecture not only ensures centralized compliance management of video data and review processes for the entire enterprise from the Beijing headquarters, but also solves the core pain points of video uploads and online access lag in weak network environments at the farms through edge gateways, making it suitable for the actual use environment of the wind power industry, where farms are scattered and operation scenarios are complex.

[0023] Specifically, this system adopts a cloud-edge collaborative deployment architecture. The core services are deployed on a private cloud server cluster at the company's Beijing headquarters, including application servers, relational database servers, distributed storage servers, and AI inference servers. Lightweight edge gateways are deployed in various regions and sites across the country for local video caching, resume interrupted downloads, and acceleration in weak network conditions.

[0024] The B / S (Browser / Server) architecture eliminates the need for on-site personnel to install and maintain the client. Access can be made directly and without password through the OA system, significantly lowering the barrier to entry for frontline maintenance personnel and adapting to the real-world scenario of high personnel mobility and diverse terminal devices at wind farms. The microservice architecture can dynamically expand service nodes based on concurrency levels, stably supporting the user's required performance index of 1000 concurrent accesses, while also facilitating subsequent functional iterations and upgrades.

[0025] Specifically, the system adopts a B / S architecture with a front-end and back-end separation design. The front-end uses a lightweight Web framework that is compatible with browser access on PCs and industrial handheld terminals, requiring no client installation. The back-end adopts a microservice architecture, which is divided into six major microservices: user authentication service, work order synchronization service, video processing service, review process service, indicator calculation service, and system management service. Each service communicates through standardized interfaces, supporting horizontal scaling of service nodes.

[0026] Furthermore, such as Figure 1 As shown, the core modules of this system are the video upload and work order association module, the multi-level review process execution module, the indicator management module, and the system management module. In addition, based on the four core modules, innovative sub-modules such as inter-frame hash anti-tampering and atomic permission control are incorporated to address the pain points of the original system.

[0027] Specifically, the video upload and work order association module is used for video processing, business association, and data management, such as... Figure 2 As shown, it includes a work order synchronization submodule, a job record management submodule, a video transmission submodule, a video processing submodule, a metadata management submodule, and a structured storage submodule. It fundamentally solves the pain points of the original system, such as the disconnect between video and work orders, cumbersome uploading operations, difficulty in uploading in weak network environments, and easy tampering of videos.

[0028] Furthermore, the work order synchronization submodule is used to solve the core pain point of the original system where there is no corresponding relationship between videos and work orders, and it is difficult for reviewers to find them. Therefore, this module realizes bidirectional data synchronization with the EAM system through a standardized interface to ensure that the work order information is consistent with the video evidence storage system in real time. The work order synchronization submodule includes an interface communication unit, a data verification unit, and a synchronization triggering unit. The work order synchronization submodule establishes bidirectional communication with the enterprise EAM asset management system through the WebService standard interface: For inspection work orders without two tickets: the first full information synchronization is triggered after the task download is completed on the EAM side, and the second status synchronization is triggered after the work order task is closed; For other types of work orders such as inspection work orders with two tickets, defect work orders, fault work orders, and scheduled inspection work orders: the first synchronization is triggered after the work order process is submitted on the EAM side, and the second synchronization is triggered after the work order process is closed; The synchronized work order data includes work order number, work type, work location, site name, work supervisor, work time, two ticket numbers, and inspection item list. Data consistency is ensured through MD5 verification during the data synchronization process; After the video upload is completed and the review is finished, this module will unilaterally send the video upload status, review result, and assessment result back to the EAM system to realize a closed loop of the entire life cycle of the work order.

[0029] Specifically, after the site maintenance personnel create a scheduled maintenance work order for wind turbines in the EAM system and complete the approval process, this module automatically synchronizes the work order to the video evidence storage system. This eliminates the need for manual re-entry of work order information, solving the problems of low efficiency and error-proneness in manually creating work records in the original system, and perfectly matching the work process at the wind power maintenance site.

[0030] Furthermore, the job record management submodule is used to manually create job records and associate videos when there is no work order. It also supports the creation, temporary storage, and completion status management of job records. Therefore, this module is suitable for both work order and no-work-order job scenarios, covering all the needs of routine and emergency repair work at wind power sites. For synchronized EAM work orders, the system automatically generates corresponding job records, with the default status being "new". The job record is automatically completed when the work order is closed. For temporary jobs and emergency repair jobs without corresponding EAM work orders, maintenance personnel can manually create job records, filling in required information such as job name, job type, site name, job time, work supervisor, associated two ticket numbers, and job description. The job records support temporary storage and completion operations. Incomplete jobs can be temporarily stored and then edited and supplemented with videos. After the job is completed, clicking "complete" updates the job record status to "closed", and basic information can no longer be edited; only rectification videos can be added. After the job record is created, a globally unique record number is automatically generated. The encoding rule is: site code + year and month + 4-digit serial number, ensuring that there are no duplicates within the entire system.

[0031] Specifically, in the event of a sudden wind turbine equipment failure and emergency repair at the wind farm, where there is no pre-created EAM work order, maintenance personnel can manually create an emergency repair work record on-site, take videos of the repair process, and upload them. This meets the video evidence requirements for temporary operations and is consistent with the actual scenario of frequent emergency operations at wind power maintenance sites.

[0032] Furthermore, the video transmission submodule supports breakpoint resumption and batch uploading. Since wind farms are often located in remote areas with poor network stability, video uploads are prone to interruption and are time-consuming in weak network environments. Therefore, this module adopts segmented transmission technology to solve the core pain point of video uploads in weak network environments. It includes a segmented transmission unit, a breakpoint resumption unit, a batch upload unit, and a weak network acceleration unit. Specifically, it executes the following steps: Segmented Transmission: Before uploading, the video file is automatically split into fixed-size segments, with a default segment size of 1MB, which can be adaptively adjusted according to network bandwidth. Each segment generates an independent MD5 checksum to ensure data integrity during transmission; Breakpoint Resumption: When the network is interrupted during the upload process, the system automatically records the segment numbers that have been uploaded. After the network is restored, only the incomplete segments need to be uploaded, without re-uploading the entire file; Batch Upload: Supports simultaneous selection of multiple job records and multiple video files for concurrent upload. The number of concurrent uploads is configurable, with a default maximum of 10 videos uploaded simultaneously; Weak Network Acceleration: When network bandwidth is less than 2Mbps... At bps, the compression transmission mode is automatically started, transmitting the low bitrate video stream and keyframes first to ensure the upload success rate, and then the full video file is uploaded in the background; end-to-end verification: after all segments are uploaded, the MD5 checksums of each segment are concatenated to generate the overall MD5 value of the video file to verify the integrity of the file transmission; after the file verification passes, the hash chain generation process of the inter-frame dependent hash chain generation module is triggered, and the overall MD5 value of the file is used as one of the generation factors of the hash value of the video's starting keyframe, realizing the end-to-end integrity closed loop of segment transmission verification, file-level verification, and frame-level anti-tampering verification, ensuring that the video is not tampered with from transmission to storage.

[0033] Furthermore, the video processing submodule is used for smooth online video playback. However, the original system uses a general compression algorithm, which inherently contradicts the principle that high compression ratios result in the loss of crucial review information, while retaining crucial information leads to insufficient compression ratios. Moreover, video files are easily edited and tampered with, resulting in insufficient credibility of review evidence. Therefore, this module designs a dual-track compression unit and a frame hash generation unit to simultaneously achieve high-ratio video compression and frame-level anti-tampering. Figure 3As shown, it includes a dual-track compression unit for safety regulations, a frame hash calculation unit for the inter-frame dependency hash chain generation module, and a metadata embedding unit. Specifically, it performs the following operations: Dual-track compression processing: After the video is uploaded, based on the wind power safety regulations and the inspection item list of the corresponding work order, the video frames are divided into core frames and invalid frames using the inter-frame difference method and target detection algorithm. Core frames contain images of inspection equipment, operations, safety protection, and violations, and are processed using H.265 lossless compression. Invalid frames are empty shots and road scenes with no inspection value, and are processed using H.265 extreme compression. After compression, the overall video size is reduced by 70%-90%, while the core frame image information integrity rate is 100%. Inter-frame hash chain generation: The video is decoded frame by frame, and the national cryptographic SM3 algorithm is used to generate strong inter-frame dependencies. The video employs a chained hash structure, where: the hash value of the starting keyframe is generated based on the original frame data, work order number, operator ID, and terminal hardware serial number; the hash values ​​of subsequent non-keyframes are generated based on the original data of the current frame, the hash value of the previous frame, and the capture timestamp; any modification to a single frame will cause the entire chain hash verification to fail, achieving frame-level anti-tampering of the video; metadata embedding processing: business metadata such as work order number, ticket number, operator ID, shooting time, and location information are encrypted using the national cryptographic standard SM4 and losslessly embedded into the SEI reserved field of the corresponding video frame. The metadata is inseparable from the video frame and does not affect normal video playback.

[0034] Furthermore, the metadata management submodule is used to automatically record metadata such as video format, size, uploader, and upload time. Therefore, this module realizes automatic collection, tamper-proof storage, and full-field retrieval of video metadata. After the video is uploaded, metadata such as video format, encoding, resolution, duration, file size, uploader, upload time, associated work order number, and site name is automatically collected, strongly bound to the corresponding video file, and stored in the metadata database. Once the metadata is recorded, it cannot be modified or deleted, and full-field retrieval is supported.

[0035] Furthermore, the structured storage submodule is used for automatic structured storage of background files, eliminating the need for manual directory creation. It also requires real-time monitoring of disk space usage. Therefore, this module achieves automated and standardized full lifecycle management of video files. Specifically, it performs the following operations:

[0036] Automatic Structured Storage: After video upload, the system automatically creates storage directories according to the hierarchical rules of site name-month-year-work order type-work order number, automatically storing the original video, compressed video, hash check file, and metadata file into the corresponding directories without manual intervention; Space Monitoring and Early Warning: Real-time monitoring of the disk space occupancy rate of the distributed storage cluster, with configurable space warning thresholds. The default threshold is 80%, and warning information is automatically pushed to the system administrator when the threshold is reached; Compliance Lifecycle Management: Supports compliant archiving or irreversible destruction of expired videos according to preset storage periods. The storage period can be customized according to work order type and violation level, complying with power industry data retention standards.

[0037] Preferably, the multi-level review process execution module includes an access control sub-module, a three-level review flow sub-module, an assessment management sub-module, a video playback sub-module, and a data export sub-module. It fundamentally solves the pain points of insufficient granularity of the original system's review access control, inability to intercept unauthorized operations, separation of the review process from video content, and low efficiency of manual review.

[0038] Furthermore, the access control submodule is used for a three-tiered review mechanism of site self-inspection, regional review, and regional review, as well as a multi-level access control system. However, the original system's hierarchical access control only restricts the scope of data viewing and cannot limit specific review operations, posing a compliance risk of site personnel modifying review results or submitting unauthorized assessments. Therefore, this module, based on the principle of least privilege, breaks down the review process into indivisible atomic operations, achieving underlying hard isolation of review operations. It includes an atomic operation splitting unit, an access control binding unit, and an operation verification and interception unit. Specifically, the following operations are performed: Atomic operation breakdown: The entire wind power EHS video audit process is broken down into 7 indivisible minimum execution actions, namely: video viewing, initial review information addition, violation information registration, assessment suggestion submission, review information addition, final review information confirmation, and assessment result approval; Dynamic hierarchical permission binding: For the three levels of audit entities—site-level, regional-level, and headquarters-level—corresponding atomic operation permission whitelists are configured: Site-level entities: only video viewing, initial review information addition, violation information registration, and assessment suggestion submission permissions are enabled; Regional-level entities: only video viewing, review information addition, and assessment suggestion submission permissions are enabled; Headquarters-level entities: video viewing, final review information confirmation, and assessment result approval permissions are enabled; Lower-level entities do not have the configuration permissions for higher-level operations, eliminating the possibility of unauthorized operations from the bottom up. The dynamic binding rules between hierarchical levels and atomic operations are triggered through personnel organization data linkage: When the YuFu system synchronizes personnel positions and changes in their respective sites / regions, the system automatically triggers the permission whitelist update process, deleting the atomic operation permissions corresponding to the original positions and adding atomic operation permissions matching the new positions. The entire permission update operation is recorded in the audit log, and the update takes effect immediately after completion. For example, after a site manager is transferred to the position of regional safety supervision supervisor, the system automatically revokes their "submit assessment suggestion" permission and adds a "add review information" permission, without manual intervention. Operation verification and interception: When an auditing entity initiates any operation request, the system first verifies whether the operation is within the corresponding entity's permission whitelist and verifies the operator's digital signature. If the verification fails, the request is directly intercepted at the gateway layer, and an immutable unauthorized operation audit log is generated.

[0039] Furthermore, the multi-level review process execution module supports multiple reviews of the same video by multiple levels of personnel, specifically performing the following operations: Standardized workflow: After the video is uploaded, it automatically enters the site self-inspection stage. After the site self-inspection is completed, it automatically flows to the corresponding regional review stage. After the regional review is completed, it automatically flows to the final review stage at the Beijing headquarters, forming a three-level review closed loop; Multiple review support: It supports reviewers at all levels (site, region, and headquarters) to review the same video multiple times within their authority. Each review generates an independent review record, automatically recording the reviewer, review time, review comments, and review results. Once recorded, it cannot be modified or deleted; Independent spot check support: It supports regional and headquarters reviewers to independently spot check videos at corresponding sites within their authority, without waiting for the previous level's review to complete; Rectification closed-loop management: If the review result is unqualified, a rectification task is automatically generated and pushed to the corresponding responsible person. After the responsible person uploads the rectification video, the review process is re-entered, completing the rectification closed loop;

[0040] Review data is bound to a hash chain: After each level of review is completed, the system automatically extracts the core data of the review operation, including the reviewer ID, review timestamp, review opinion summary, and violation level. The system generates a hash value of the review data using the national cryptographic SM3 algorithm and appends this hash value to the end node of the corresponding video frame hash chain. At the same time, the review data attribute of the node is marked in the hash chain. After the final review is completed, a full-link root hash value containing the video frame hash and all review data hashes is generated and permanently bound to the job record number. This achieves a strong cryptographic binding between the review data and the video content. Any modification by either party will cause the full-link hash verification to fail.

[0041] Furthermore, the assessment management submodule supports a complete process of submitting assessment suggestions and receiving headquarters confirmation, as well as a four-level (A / B / C / D) violation classification. Therefore, this module achieves closed-loop management of the entire assessment process and is deeply integrated with the three-level review process. Specifically, the following operations are performed: When reviewing substandard videos, reviewers can initiate assessment suggestions, filling in information such as violation category, violation level, violation content, responsible person, and penalty amount; site and regional level personnel can only submit assessment suggestions and do not have final confirmation authority; headquarters level personnel have the final assessment confirmation authority. Once the assessment result is confirmed, it automatically takes effect, synchronizes to the corresponding work records and personnel files, and simultaneously pushes an OA pending notification to the corresponding responsible person; all assessment process data is automatically recorded and cannot be modified or deleted. This achieves standardized management of the assessment process.

[0042] Furthermore, the video playback submodule is designed for smooth online video playback without noticeable stuttering. Therefore, this module employs segmented loading and adaptive bitrate technology to adapt to video playback requirements in weak network environments, while also implementing tamper verification during playback. Specifically, it performs the following operations: It uses segmented loading and adaptive bitrate technology to support video speed adjustment, progress bar dragging, and rapid location of inappropriate segments; in weak network environments, it automatically switches to a low bitrate stream, prioritizing the loading of keyframes, ensuring 1080P video playback starts in less than 2 seconds with no noticeable stuttering; during video playback, the system automatically verifies the inter-frame hash chain generated by the inter-frame dependency hash chain generation module, immediately highlighting any tampering risks in red on the interface to alert reviewers.

[0043] Furthermore, the data export submodule supports the summary export of review and assessment records. Therefore, this module implements multi-dimensional filtering and full data export functions to meet the reporting and statistical needs of EHS management departments. Specifically, it performs the following operations: supports filtering review records, assessment records, and violation statistics by dimensions such as site, region, review status, operation type, violation level, and time range; supports exporting reports in Excel and PDF formats; the exported data is 100% consistent with the data in the system; and the entire export operation is traceable and tamper-proof.

[0044] Preferably, the indicator management module is used for intelligent indicator calculation, including an indicator calculation submodule, a multi-dimensional statistics submodule, a visualization display submodule, and a report export submodule, which solves the pain points of the original system's inability to quantify indicators and the difficulty of statistical analysis.

[0045] Furthermore, the indicator calculation submodule is used to automatically calculate five core indicators: upload rate, integrity rate, review rate, pass rate, and space utilization rate. Specifically, it performs the following operations: Using a T+1 automatic calculation mechanism, it automatically calculates all indicator data from the previous day at midnight each day, while also supporting manual triggering for real-time calculation: Upload rate equals the number of uploaded video work records divided by the total number of work records multiplied by 100%; Integrity rate equals the total duration of uploaded videos divided by the total actual work duration of the work order multiplied by 100%; Review rate equals the number of reviewed video work records divided by the number of uploaded video work records multiplied by 100%; Pass rate equals the number of reviewed and approved video work records divided by the number of reviewed video work records multiplied by 100%; Space utilization rate equals the used disk storage space divided by the total disk storage space multiplied by 100%. After the indicator calculation is completed, it is automatically stored in the indicator database and cannot be modified or deleted.

[0046] Furthermore, the multi-dimensional statistics submodule supports calculations by site, region, and headquarters level, as well as filtering and display by time range and work order type. Therefore, this module enables flexible statistical analysis based on multiple dimensions and conditions. Specifically, it supports multi-dimensional statistical analysis of core indicators by three organizational levels (site, region, and headquarters), by time range (day / week / month / quarter / year), and by work order type (inspection / scheduled inspection / defect elimination / emergency repair). It also supports statistics on self-inspection rate and review rate by personnel.

[0047] Furthermore, the visualization and report export submodule uses visualization components such as bar charts, line charts, and pie charts to display the overall situation, trend changes, station rankings, and violation type statistics of core indicators. Abnormal indicators are automatically highlighted in red for early warning. It supports drilling down from headquarters indicators to detailed data at the regional, station, and individual work record levels. It has built-in standardized regulatory report templates, supports one-click generation of compliant reports that meet the safety supervision requirements of the power industry, and supports custom report templates.

[0048] Preferably, the system management module is used for system management, interface and integration technology, security and access control, and includes an organization and user management submodule, a role and access control submodule, a system configuration submodule, an interface management submodule, an identity authentication submodule, and an audit log submodule. Its core function is to realize the full-dimensional configuration, security control and integration of the system with third-party systems.

[0049] Furthermore, the organization and user management submodule interfaces with the YuFu system, supporting automatic synchronization of personnel and organizational data. Therefore, this module achieves automated synchronization and management of enterprise organizational structure and personnel information, eliminating the need for repetitive manual maintenance. Through a RESTful standard interface, it connects with the YuFu identity management system to achieve real-time incremental synchronization and daily full synchronization of enterprise organizational structure, departments, positions, and personnel information. It supports the binding configuration of personnel and sites; when personnel information is disabled or a person leaves the company, the system automatically freezes the corresponding user account and revoks all operating permissions, ensuring that personnel and organizational data are completely consistent with the enterprise's existing system.

[0050] Furthermore, the role and permission management submodule implements role-based functional authorization control. Deletion permissions for uploaded files can be controlled through roles, thus enabling fine-grained role permission configuration while adhering to the principle of least privilege. It includes seven standardized roles: Site Maintenance Personnel, Site Manager, Regional Safety Supervisor, Regional Manager, Headquarters EHS Specialist, Headquarters EHS Manager, and System Administrator. Each role has pre-defined functional, data, and operational permissions. Custom role creation and permission configuration are also supported. Notably, video file deletion permissions can only be configured for designated senior administrators at headquarters; other roles do not have deletion permissions.

[0051] Furthermore, the identity authentication submodule supports both OA system integrated login and domain-independent login. Therefore, this module implements dual-mode identity authentication, along with a robust security mechanism to ensure account security. Specifically, it performs the following operations: OA Integrated Login: Interacts with the enterprise OA system via the CAS3.0 standard protocol. After logging into the OA system, users can be redirected to this system without a password through a module within the portal, eliminating the need for a second login. Domain-Independent Login: Users access the login page via the system domain, enter their OA account and password to complete identity verification, and then log in to the system. It also supports security mechanisms such as two-factor authentication, password complexity policies, login failure lockout, and automatic session timeout.

[0052] Furthermore, the interface management submodule is used for EAM system interfaces, YuFu system integration, and open standard interfaces. Therefore, this module implements standardized interface management and authentication to ensure the security and stability of data interaction between systems. Specifically, it performs the following operations: EAM system interface: Enables bidirectional synchronization of work order data with the EAM system via a WebService standard interface; YuFu system interface: Enables synchronization of personnel organization data via a RESTful standard interface; Open standard interface: Reserves a RESTful standardized extension interface to support future integration with other business systems such as the safety production management system, training management system, and drone inspection system. The interface uses an AK / SK authentication mechanism for fine-grained control of interface call permissions.

[0053] Furthermore, the audit log submodule is used to automatically record audit results, audit time, and audit personnel information. This information is unmodifiable, thus ensuring full traceability and immutability of all system operations, meeting the audit traceability requirements of the power industry. It automatically records all operations performed by all users within the system, including login, upload, audit, modification, configuration, export, and deletion. The log content includes the operator, operation time, operation IP, operation content, and operation result. The logs are unmodifiable and undeletable, and the retention period is no less than 6 years, complying with the audit traceability requirements of the power industry.

[0054] Specifically, the system adopts a microservice architecture and distributed cluster deployment. Both application services and database services support horizontal scaling. Requests are distributed through load balancing devices, which can stably support 1,000 concurrent accesses and a peak concurrent access of 2,000. The system does not crash or lose data under concurrent scenarios. Through static resource caching, database index optimization, and interface logic optimization, the system achieves a simple page response time of less than 2 seconds, a complex page response time of less than 5 seconds, and an average interface response time of less than 500ms. Through chunked loading, adaptive bitrate, and edge node caching technology, the system achieves smooth video playback without noticeable stuttering. The start time for 1080P video is less than 2 seconds, and the progress bar drag response time is less than 1 second.

[0055] This case study is designed based on a real-world wind power operation and maintenance scenario. It can be fully reproduced, and the data is traceable and verifiable, thus fully demonstrating the practicality and authenticity of this invention.

[0056] At the Jingmen Shengjingshan Wind Farm of a certain wind power group, maintenance personnel Zhang carried out a routine inspection of 3 wind turbines. The corresponding EAM system routine inspection work order number is DJ2024050012. The operation time is from 08:00 to 12:00 on May 20, 2024. Zhang was the person in charge of the operation, and Li was a member of the work team. The entire operation process was recorded by law enforcement recorder. There are 2 video clips with a total duration of 3 hours and 40 minutes.

[0057] Work order synchronization and work record generation: On May 19, 2024, Zhang submitted a scheduled maintenance work order for wind turbine 3 in the EAM system and completed the process approval. The system's work order synchronization sub-module automatically triggered work order synchronization and generated a corresponding work record in the video evidence storage system. The status was "new". The synchronized work order information included work type, work location, site name, work person in charge, work time, scheduled maintenance and inspection item list, and corresponding work ticket number.

[0058] Video Upload and Processing: After completing the work on May 20, 2024, Zhang logged into the OA system via the station's office computer, was redirected to the video evidence storage system without a password, located the corresponding scheduled inspection work order record, clicked the upload button, selected two work videos, and initiated a batch upload. During the upload process, the video transmission submodule automatically split the video into 1MB segments and uploaded them concurrently. When the upload reached 50%, the station's network was temporarily interrupted. After 3 minutes, the network was restored, and the system automatically triggered the resume upload, uploading only the remaining 50% of the segments. The video upload was completed 10 minutes later. After uploading, the video processing submodule automatically performs dual-track compression. Based on the inspection item list of the scheduled inspection work order, core images such as wind turbine equipment inspection, safe operation, and grounding voltage testing are set as core frames and compressed without loss. Invalid images such as travel and rest are compressed, reducing the video size by 82% after compression. At the same time, an inter-frame dependency SM3 hash chain is generated, and metadata such as work order number, operator ID, and shooting time are encrypted and embedded into the video SEI field. The metadata management submodule automatically records metadata such as video format, size, duration, uploader, and upload time. The structured storage submodule automatically creates a storage directory according to Jingmen Shengjingshan Wind Farm-202405-Scheduled Inspection Work Order-DJ2024050012, completing the automatic storage of the file.

[0059] Multi-level review process execution: Site self-inspection: Wang logs into the system, views the operation video, and the system automatically verifies the hash chain while the video is playing online to confirm that the video has not been tampered with. Wang fills in the preliminary review comments, confirms the B-level violation, submits the assessment suggestions, and the review record is automatically generated and synchronized to the video hash chain. The operation record is automatically transferred to the to-do list of Zhao, the safety supervision supervisor of the Central China region; Regional review: Zhao logs into the system, views the video and preliminary review comments, fills in the review comments, confirms the violation and assessment suggestions, and submits them to the final review stage of EHS at the Beijing headquarters. The review record is automatically retained and synchronized to the hash chain; Headquarters final review: Sun, the EHS manager of the Beijing headquarters, logs into the system, views the entire review record and video content, confirms the final review comments, approves the assessment results, and the assessment results officially take effect. The entire review process is closed-loop, and all records cannot be modified or deleted.

[0060] Indicator Calculation and Storage Monitoring: Every morning, the indicator calculation submodule automatically calculates the five core indicators for Jingmen Shengjingshan Wind Farm, Central China Region, and the entire company. On May 20, 2024, the video upload rate of the scheduled maintenance work order of Jingmen Shengjingshan Wind Farm was 100%, the completeness rate was 98%, the review rate was 100%, the pass rate was 75%, and the overall system storage space occupancy rate was 42%, which did not reach the warning threshold.

[0061] Data Export: At the end of the month, the EHS specialist at headquarters can use the data export submodule to filter the audit records and violation statistics of the Central China region in May 2024, and export an Excel report with one click. The report data is completely consistent with the data in the system, and the export operation leaves a complete record.

[0062] Real-world case study full-process execution table

[0063] step Execution content Key Operations Technical support Work order synchronization EAM work orders are automatically synchronized to the system. Trigger full / incremental synchronization Standardized interface module Video Upload Batch upload + resume interrupted upload Segmented upload, acceleration in weak network conditions Video upload and work order association module Video processing Dual-track compression + hash chain generation + metadata embedding Core frame lossless compression, SM3 hashing Safety-compliant dual-track compression module, inter-frame dependency hash chain generation module Level 3 review Station → Area → Headquarters Atomic permission verification and audit data uploading Audit atomic permission control module and multi-level audit process execution module Indicator Calculation Upload rate 100%, pass rate 75% T+1 is automatically calculated. Indicator Statistics Management Module Data export Generate monthly audit reports Multi-dimensional filtering and export Indicator Statistics Management Module

[0064] The technical scope of this invention is not limited to the content described above. Those skilled in the art can make various modifications and variations to the above embodiments without departing from the technical concept of this invention, and all such modifications and variations should fall within the protection scope of this invention.

Claims

1. A new energy operation and maintenance video evidence storage and security management system, characterized in that, include: The video upload and work order association module is used to establish a unique mapping relationship between wind power operation and maintenance work orders and work videos, and to complete the network transmission and interruption recovery of work videos. The inter-frame dependency hash chain generation module communicates and connects with the video upload and work order association module. It is used to decode the work video frame by frame. The hash value of the previous frame is used as the generation factor of the hash value of the next frame. The module generates a strong inter-frame dependency chain hash structure of the entire work video through a cryptographic hash algorithm to complete the reliable anchoring of video content. The audit atomic permission control module is used to break down the wind power EHS video audit process into indivisible audit atomic operations. It configures a whitelist of corresponding audit atomic operation permissions for multi-level audit subjects and establishes dynamic binding rules between levels and atomic operations. The multi-level audit process execution module communicates with the inter-frame dependency hash chain generation module and the audit atomic permission control module. It is used to open matching operation entry points for corresponding audit subjects based on the permission whitelist, complete the multi-level audit process flow, and simultaneously update the audit operation data of each level to the chain hash structure to achieve strong binding between audit data and video content.

2. The new energy operation and maintenance video evidence storage and security management system according to claim 1, characterized in that, The inter-frame dependency hash chain generation module includes a frame hash calculation unit, which is configured to: generate a starting frame hash value for the starting key frame of the work video using a cryptographic hash algorithm based on the original frame data, the corresponding work order unique identifier, the operator identifier, and the acquisition terminal hardware identifier; and generate a corresponding frame hash value for subsequent non-key frames of the work video using a cryptographic hash algorithm based on the current frame's original data, the previous frame's hash value, and the previous frame's acquisition timestamp, thus forming a strong inter-frame dependency chain hash structure.

3. The new energy operation and maintenance video evidence storage and security management system according to claim 1, characterized in that, The audit atomic permission control module includes an atomic permission verification unit, which is configured to break down the wind power EHS video audit process into a set of atomic operations: video viewing, initial review information addition, violation information registration, assessment suggestion submission, review information addition, final review information confirmation, and assessment result approval. Configure corresponding permission whitelists for different levels of review entities. Lower-level review entities do not have the permission to perform higher-level review operations. In response to the operation request of the review entity, first verify the operation permission. If the verification fails, the operation request will be directly blocked.

4. The new energy operation and maintenance video storage and security management system according to claim 1, characterized in that, The video upload and work order association module also includes a metadata embedding unit. The metadata embedding unit is configured to: encrypt the wind power operation and maintenance business metadata using a symmetric encryption algorithm, and then embed it losslessly into the reserved fields of the corresponding video frame, so that the business metadata and the corresponding video frame form an inseparable binding relationship.

5. The new energy operation and maintenance video evidence storage and security management system according to claim 4, characterized in that, It also includes a safety regulation dual-track compression module, which is connected to the video upload and work order association module and the inter-frame dependency hash chain generation module. The module is configured to divide the operation video frames into core frames and invalid frames based on the wind power safety regulations and the corresponding work order inspection item list. It performs lossless compression on the core frames and extreme compression on the invalid frames. At the same time, it regenerates the inter-frame strong dependency chain hash structure for the compressed video.

6. The new energy operation and maintenance video storage and security management system according to claim 1, characterized in that, The multi-level review process execution module includes a process flow unit, which is configured to: complete the review process flow in order from low level to high level; automatically push the review to the next level review subject after the previous level review is completed; and support each level review subject to independently check the operation video within the scope of their authority; automatically generate an immutable audit log after each level review operation is completed, and synchronously update the audit log to the chain hash structure.

7. The new energy operation and maintenance video evidence storage and security management system according to claim 1, characterized in that, It also includes a standardized interface module, which is connected to the video upload and work order association module, the audit atomic permission control module, and the multi-level audit process execution module. It is configured to achieve bidirectional synchronization of operation and maintenance work order data and enterprise personnel and organizational structure data through the standardized interface, while supporting unified user identity authentication and passwordless login.

8. The new energy operation and maintenance video evidence storage and security management system according to claim 1, characterized in that, It also includes an indicator statistics management module, which is connected to the multi-level review process execution module and is configured to automatically calculate and display operation and maintenance control indicators such as upload rate, completeness rate, review rate, pass rate, and space occupancy rate. It supports filtering and displaying indicator results by organizational level, time range, and work order type, and also supports exporting indicator statistics reports.

9. The new energy operation and maintenance video storage and security management system according to claim 1, characterized in that, It also includes a distributed storage management module, which is connected to the video upload and work order association module and the inter-frame dependency hash chain generation module. The module is configured to: automatically complete the structured storage of job videos according to preset hierarchical rules, monitor the storage space occupancy rate in real time, automatically push early warning information when the preset threshold is reached, and complete the compliant archiving and destruction of expired videos according to preset rules.

Images