A data processing method, system, device and medium for detecting stored data
By deploying security chips and edge nodes at the inspection and storage equipment end for data encryption, decryption, and real-time analysis, the problems of non-real-time and inefficient data transmission in existing technologies are solved, enabling reliable processing and rapid response of inspection and storage data, and improving data purification efficiency and business response efficiency.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- STATE GRID ZHEJIANG ELECTRIC POWER CO LTD
- Filing Date
- 2026-05-07
- Publication Date
- 2026-06-02
AI Technical Summary
The data transmission of existing inspection and storage equipment relies on cloud processing, which lacks reliable source assurance, resulting in data transmission that is not real-time and inefficient, making it difficult to support the real-time accurate perception and agile response of smart warehousing.
By deploying security chips at the inspection and storage equipment end for hardware encryption and digital signatures, and performing trustworthiness verification and decryption through edge nodes, combined with lightweight AI models for real-time analysis, edge-cloud collaborative optimization of data transmission enables trusted data processing and real-time response.
It improves data purification efficiency and business response efficiency, ensures that critical events are quickly identified and transformed into information that can be directly used for business decisions, avoids transmission delays and bandwidth pressure, and enhances the system's adaptability and security.
Smart Images

Figure CN122137691A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data transmission in inspection and storage equipment, and in particular to a data processing method, system, device, and medium for inspection and storage data. Background Technology
[0002] In the power supply chain, data transmission of inspection and storage equipment is the key to connecting physical operations with digital decision-making and realizing real-time control and intelligent scheduling of warehousing and logistics. Its transmission efficiency directly determines the visibility of inventory, the agility of operations, and the reliability of end-to-end collaboration.
[0003] Currently, the mainstream technology in the field of data transmission for inspection and storage equipment is the "centralized cloud platform processing architecture." This architecture relies on software encryption and the return of all raw data. Its data processing and security mechanisms originate in the cloud rather than at the edge, resulting in a lack of reliable guarantees at the data source and during transmission. Although some solutions attempt to enhance analytical capabilities in the cloud, they fail to deeply integrate hardware-level security chips, real-time intelligent edge processing, and "cloud-edge" collaborative optimization mechanisms. Consequently, they cannot achieve reliable, real-time, and efficient data transmission throughout the entire chain, from collection and processing to transmission, making it difficult to support the real-time, accurate perception, agile response, and reliable collaboration required for smart warehousing. Summary of the Invention
[0004] This invention provides a data processing method, system, device, and medium for inspection and storage data. By implementing this invention, the data purification efficiency and business response efficiency of inspection and storage data can be improved.
[0005] This invention provides a data processing method for stored data, comprising: The system receives a trusted data packet sent by the inspection and storage device and transmits it to a preset trusted execution environment. The trusted execution environment is used to verify and decrypt the trusted data packet to obtain the first inspection and storage data. The first inspection and storage data is analyzed in real time using a preset business event identification model, and the inspection and storage event information of the first inspection and storage data is extracted. Based on the inspection and storage event information, the first inspection and storage data is converted and structured to obtain the second inspection and storage data, and the corresponding business response action is executed based on the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
[0006] This invention receives trusted data packets from the inspection and storage equipment and transmits them to a preset trusted execution environment for credibility verification and decryption. This avoids invalid processing and business misjudgments caused by source forgery or data tampering, providing a trusted foundation for subsequent data processing. A preset business event identification model is used to analyze the decrypted first inspection and storage data in real time and extract inspection and storage event information, enabling value mining of massive amounts of raw data. This allows key business events to be quickly identified in the early stages of processing. Combined with protocol conversion and structured processing, the identified inspection and storage event information is transformed into second inspection and storage data containing event type, material code, occurrence time, and processing suggestions. This completes the value purification from raw data to structured information that can be directly used for business decisions. Compared to existing technologies that rely on centralized cloud processing, have difficulty tracing the data source, and suffer from large response delays, this invention avoids the transmission delays and bandwidth pressure caused by directly transmitting all data back to the cloud through multiple processes including trusted verification of the data entry point, real-time event identification, and structured purification. This allows key business events to be quickly identified and transformed into directly usable business information, thereby improving the data purification efficiency and business response efficiency of inspection and storage data.
[0007] Furthermore, the process of executing the corresponding business response action based on the second inspection and storage data also includes: Receive transmission control policies and data processing rules from the cloud; the transmission control policies and data processing rules are generated based on the power material inspection and storage business rules and real-time business load; According to the transmission control strategy and the data processing rules, the second inspection and storage data is dynamically adjusted to obtain the third inspection and storage data, and the corresponding business response action is executed according to the third inspection and storage data; the dynamic adjustment includes adjusting the data compression rate, reporting frequency and event priority.
[0008] By dynamically adjusting the second inspection and storage data, fine-grained control over data output behavior and elastic resource adaptation can be achieved. This ensures that real-time reporting of critical events is prioritized during peak business periods or network congestion scenarios. At the same time, by compressing non-critical data and reducing the reporting frequency, transmission pressure can be alleviated, avoiding network congestion and processing delays caused by massive data concurrency.
[0009] Furthermore, after obtaining the third inspection and storage data, the process also includes dynamically adjusting the transmission control strategy and the data processing rules via the cloud, specifically: The system receives the real-time operating status of the second inspection and storage data via the cloud; the real-time operating status is obtained by monitoring and recording the transmission and processing of the second inspection and storage data. The real-time operating status is evaluated via the cloud to obtain evaluation results; Based on the evaluation results, the transmission control strategy and the data processing rules are dynamically adjusted, and the adjusted transmission control strategy and data processing rules are sent.
[0010] By acquiring the real-time operating status of the second inspection and storage data, changes in business load or resource bottlenecks can be detected in a timely manner, and strategies can be dynamically adjusted based on the evaluation results. This avoids resource mismatch and delays in response to critical events caused by rigid strategies, ensuring that data transmission and processing strategies are always accurately matched with real-time business needs. This further improves the adaptability and business response efficiency of the inspection and storage data in complex scenarios.
[0011] Furthermore, before receiving transmission control policies and data processing rules from the cloud, a secure encrypted channel is established with the cloud, specifically: Send initial verification information to the cloud and receive cloud verification information from the cloud; both the initial verification information and the cloud verification information contain hardware identifier, firmware version and hash value of running software; The verification results are obtained by comparing the cloud verification information with a preset trusted benchmark, and the verification results are sent to the cloud for cloud verification. If the cloud verification is successful, a session key is generated, and a secure encrypted channel for transmitting data is established based on the session key.
[0012] By establishing a secure encrypted channel with the cloud, and verifying the hardware identifier, firmware version, and hash value of the running software in the verification information, combined with a trust benchmark ratio, hardware-level trusted verification and two-way trust establishment of the communication environment are achieved, enhancing the security and anti-cracking capabilities of the transmission process.
[0013] Furthermore, the trusted data packet is obtained by the inspection and storage device through a deployed security chip, which performs hardware encryption and digital signature on the collected raw inspection and storage data, specifically as follows: The inspection and storage device encrypts the original inspection and storage data in real time using the national cryptographic SM4 algorithm in the security chip, and digitally signs it according to the device private key of the inspection and storage device to obtain a trusted data packet; the trusted data packet contains the ID, timestamp, ciphertext and signature of the inspection and storage device.
[0014] In this way, the inspection and storage device encrypts the collected raw inspection and storage data in real time using the national cryptographic SM4 algorithm in the deployed security chip, and performs digital signature based on the device's private key to obtain a trusted data packet containing the device ID, timestamp, ciphertext, and signature. This achieves hardware-level trust assurance from the source of data collection, providing a trusted data foundation for subsequent data processing.
[0015] Furthermore, the trusted data packet is verified and decrypted through the trusted execution environment to obtain the first stored data, specifically as follows: The trustworthiness of the signature of the trusted data packet is verified by using a preset security chip public key library; If the verification fails, the ID and timestamp of the trusted data packet are recorded, and the communication permissions of the corresponding storage device are locked. If the verification is successful, the trusted data packet is decrypted to obtain the first stored data.
[0016] In this way, the signature of the trusted data packet is verified by a preset security chip public key library. If the verification fails, the communication permission of the corresponding inspection and storage device is automatically recorded and locked. If the verification is successful, the trusted data packet is decrypted to obtain the first inspection and storage data, thus realizing proactive security defense and anomaly blocking of the data entry point.
[0017] Furthermore, the first inspection and storage data is analyzed in real time using a preset business event identification model, and the inspection and storage event information of the first inspection and storage data is extracted, specifically as follows: By using a preset business event recognition model, the first inspection and storage data is identified to obtain the first inspection and storage event type of the first inspection and storage data, and the first inspection and storage data is analyzed and processed according to the first inspection and storage event type to obtain the analysis results. Based on the analysis results, extract the storage event information corresponding to the analysis results from the first storage data.
[0018] In this way, the first inspection and storage data is identified and analyzed by a preset business event identification model to obtain analysis results. Based on the analysis results, the inspection and storage event information corresponding to the analysis results is extracted from the first inspection and storage data. This enables intelligent business processing of massive amounts of raw data, improves the accuracy and business relevance of business event identification, shortens the perception chain from data collection to business response, and significantly improves the real-time response efficiency and decision support capability of inspection and storage data in complex business scenarios.
[0019] Another embodiment of the present invention provides a data processing system for stored data, including: an encrypted transmission module, an event information extraction module, and a data processing module; The encrypted transmission module is used to receive trusted data packets sent by the inspection and storage device and transmit them to a preset trusted execution environment. The trusted execution environment verifies and decrypts the trusted data packets to obtain the first inspection and storage data. The event information extraction module is used to perform real-time analysis on the first inspection and storage data through a preset business event identification model, and extract the inspection and storage event information of the first inspection and storage data. The data processing module is used to perform protocol conversion and structured processing on the first inspection and storage data according to the inspection and storage event information to obtain the second inspection and storage data, and to execute the corresponding business response action according to the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
[0020] This invention receives trusted data packets from the inspection and storage equipment and transmits them to a preset trusted execution environment for credibility verification and decryption. This avoids invalid processing and business misjudgments caused by source forgery or data tampering, providing a trusted foundation for subsequent data processing. A preset business event identification model is used to analyze the decrypted first inspection and storage data in real time and extract inspection and storage event information, enabling value mining of massive amounts of raw data. This allows key business events to be quickly identified in the early stages of processing. Combined with protocol conversion and structured processing, the identified inspection and storage event information is transformed into second inspection and storage data containing event type, material code, occurrence time, and processing suggestions. This completes the value purification from raw data to structured information that can be directly used for business decisions. Compared to existing technologies that rely on centralized cloud processing, have difficulty tracing the data source, and suffer from large response delays, this invention avoids the transmission delays and bandwidth pressure caused by directly transmitting all data back to the cloud through multiple processes including trusted verification of the data entry point, real-time event identification, and structured purification. This allows key business events to be quickly identified and transformed into directly usable business information, thereby improving the data purification efficiency and business response efficiency of inspection and storage data.
[0021] Another embodiment of the present invention provides a terminal device, including: a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, it implements the steps of the data processing method for storing data as described in the present invention.
[0022] Another embodiment of the present invention provides a computer-readable storage medium item, including: a stored computer program, which, when the computer program is running, controls the device where the computer-readable storage medium is located to perform the steps of the data processing method for storing data as described in the present invention. Attached Figure Description
[0023] To more clearly illustrate the technical solution of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.
[0024] Figure 1 This is a flowchart illustrating an embodiment of the data processing method for stored data provided by the present invention; Figure 2 This is a schematic diagram of a module of another embodiment of the data processing system for stored data provided by the present invention. Detailed Implementation
[0025] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0026] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the application; the terms “comprising” and “having”, and any variations thereof, in the specification, claims, and foregoing description of the drawings are intended to cover non-exclusive inclusion.
[0027] In the description of the embodiments of this application, technical terms such as "first" and "second" are used only to distinguish different objects and should not be construed as indicating or implying relative importance or implicitly specifying the number, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly defined.
[0028] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.
[0029] In the description of this invention, the term "for example" is used to mean "used as an example, illustration, or description." Any embodiment described as "for example" in this invention is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is provided to enable any person skilled in the art to make and use the invention. Details are set forth in the following description for purposes of explanation. It should be understood that those skilled in the art will recognize that the invention can be made without using these specific details. In other instances, well-known structures and processes will not be described in detail to avoid obscuring the description of the invention with unnecessary detail. Therefore, the invention is not intended to be limited to the embodiments shown, but is consistent with the broadest scope of the principles and features disclosed herein.
[0030] In the description of the embodiments of this application, the term "multiple" refers to two or more (including two), similarly, "multiple sets" refers to two or more (including two sets), and "multiple pieces" refers to two or more (including two pieces).
[0031] See Figure 1 To address the data processing problem of stored data in the prior art, an embodiment of the present invention provides a data processing method for stored data, comprising steps S1 to S3, the specific steps of which are as follows: S1. Receive the trusted data packet sent by the inspection and storage device and transmit it to the preset trusted execution environment. Verify and decrypt the trusted data packet through the trusted execution environment to obtain the first inspection and storage data. The inspection and storage equipment comprises various IoT terminals deployed in the power material storage environment, including intelligent shelf temperature and humidity sensors, transformer quality inspection terminals, and loading and unloading equipment controllers. The trusted data packet is generated by the inspection and storage equipment through an internally integrated TF security chip. The TF security chip is connected to the device's main control unit via an SPI interface and has an independent hardware encryption engine. The Trusted Execution Environment (TEE) is built based on Intel SGX or ARM TrustZone architecture. The first inspection and storage data is obtained by completing signature verification and decryption operations within the secure isolation zone of the TEE.
[0032] S2. Using a preset business event identification model, perform real-time analysis on the first inspection and storage data, and extract the inspection and storage event information from the first inspection and storage data; The business event identification model is a lightweight artificial intelligence model trained on historical inspection and storage business data. The business event identification model identifies the event types of the first inspection and storage data, such as excessive temperature and humidity on the shelves, abnormal transformer insulation values, and loading and unloading equipment failures. For different event types, the business event identification model extracts features from the first inspection and storage data to obtain structured inspection and storage event information, including abnormal values, occurrence phases, and durations.
[0033] S3. Based on the inspection and storage event information, perform protocol conversion and structured processing on the first inspection and storage data to obtain the second inspection and storage data, and execute the corresponding business response action based on the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
[0034] As an example of an embodiment of the present invention, by integrating a TF security chip into the power material inspection and storage equipment (shelf sensors, quality inspection terminals, loading and unloading equipment, etc.) and deploying edge servers with computing capabilities at the edge of the warehousing network, a trusted hardware environment and edge computing nodes are built to adapt to the needs of inspection and storage business scenarios. The raw data (equipment status, material quality inspection, operation records, etc.) collected by the inspection and storage equipment is encrypted and signed in real time to generate trusted data packets and send them to the edge nodes. After the edge nodes perform security verification on the data packets, a lightweight AI model is used to analyze and extract inspection and storage event information in real time to complete protocol conversion and data purification. The transmission control strategy and data processing rules adapted to the inspection and storage business are transmitted through a secure encrypted channel in the cloud, and the edge nodes execute the strategy and provide feedback on the real-time operating status to achieve closed-loop optimization and dynamic management of the data transmission process of the inspection and storage equipment.
[0035] In one embodiment, the trusted data packet is obtained by the inspection and storage device through hardware encryption and digital signature of the collected raw inspection and storage data using a deployed security chip, including step S201, as follows: S201. The inspection and storage device encrypts the original inspection and storage data in real time using the national cryptographic SM4 algorithm in the security chip, and performs digital signature based on the device private key of the inspection and storage device to obtain a trusted data packet; the trusted data packet contains the ID, timestamp, ciphertext and signature of the inspection and storage device.
[0036] The storage device encrypts the original storage data in real time using the national cryptographic SM4 algorithm in the hardware encryption engine of the TF security chip, and digitally signs it using the device's private key to generate a trusted data packet containing the device ID, timestamp, ciphertext, and signature, which is then sent via the MQTT protocol.
[0037] In this embodiment of the invention, the inspection and storage device encrypts the collected raw inspection and storage data in real time according to the national cryptographic SM4 algorithm in the deployed security chip, and performs digital signature according to the device private key of the inspection and storage device to obtain a trusted data packet containing device ID, timestamp, ciphertext and signature, thereby realizing hardware-level trust protection from the source of data collection and providing a trusted data foundation for subsequent data processing.
[0038] In one embodiment, the trusted data packet is verified and decrypted through the trusted execution environment to obtain the first stored data, including steps S301 to S303, each step of which is as follows: S301. Verify the credibility of the signature of the trusted data packet using a preset security chip public key library; S302. If the verification fails, record the ID and timestamp of the trusted data packet, and lock the communication permissions of the corresponding storage device. S303. If the verification is successful, the trusted data packet is decrypted to obtain the first stored data.
[0039] The security chip public key library stores the public keys of all legitimate storage devices. When a trusted data packet is received, the public key of the corresponding storage device is retrieved from the security chip public key library to verify the signature, and the signature is compared with the hash value of the plaintext in the trusted data packet. If the signature verification fails, the device ID and timestamp are recorded to the blacklist, and the communication connection is cut off. If the signature verification succeeds, the ciphertext is decrypted using a symmetric key to obtain the first storage data.
[0040] In this embodiment of the invention, the signature of a trusted data packet is verified by a preset security chip public key library. If the verification fails, the communication permission of the corresponding inspection and storage device is automatically recorded and locked. If the verification is successful, the trusted data packet is decrypted to obtain the first inspection and storage data, thereby realizing proactive security defense and anomaly blocking of the data entry point.
[0041] In one embodiment, the first inspection and storage data is analyzed in real time using a preset business event identification model, and inspection and storage event information of the first inspection and storage data is extracted, including steps S401 to S402, each step of which is as follows: S401. Using a preset business event identification model, perform event identification on the first inspection and storage data to obtain the first inspection and storage event type of the first inspection and storage data, and analyze and process the first inspection and storage data according to the first inspection and storage event type to obtain the analysis result. S402. Based on the analysis results, extract the inspection and storage event information corresponding to the analysis results from the first inspection and storage data.
[0042] Specifically, the first inspection and maintenance data is classified and identified using the business event identification model to obtain the event type of the first inspection and maintenance data, such as insulation resistance decrease and overload warning; the corresponding analysis logic is called according to the event type to obtain the analysis result; based on the analysis result, relevant fields are extracted from the first inspection and maintenance data to obtain the corresponding inspection and maintenance event information, such as abnormal phase, specific value and suggested maintenance time.
[0043] This invention embodiment uses a preset business event recognition model to perform event recognition and analysis on the first inspection and storage data, obtain analysis results, and extract inspection and storage event information corresponding to the analysis results from the first inspection and storage data. This enables intelligent business processing of massive amounts of raw data, improves the accuracy and business relevance of business event recognition, shortens the perception chain from data collection to business response, and significantly improves the real-time response efficiency and decision support capability of inspection and storage data in complex business scenarios.
[0044] In one embodiment, the process of executing the corresponding business response action based on the second inspection and storage data further includes steps S501 to S502, each of which is as follows: S501, Receive transmission control strategy and data processing rules from the cloud; the transmission control strategy and the data processing rules are generated based on the power material inspection and storage business rules and real-time business load; S502. According to the transmission control strategy and the data processing rules, the second inspection and storage data is dynamically adjusted to obtain the third inspection and storage data, and the corresponding service response action is executed according to the third inspection and storage data; the dynamic adjustment includes adjusting the data compression rate, reporting frequency and event priority.
[0045] Specifically, the cloud-based policy management module generates differentiated transmission control policies and data processing rules based on business rules (such as "priority transmission of emergency supply material data" and "inventory early warning threshold") and real-time load (such as network bandwidth utilization and cloud processing queue length), and transmits them through a secure encrypted channel. By parsing the corresponding policies within the TEE, the second inspection and storage data is dynamically adjusted. For example, during peak business periods, the compression rate of non-critical events (such as routine inventory inspection data) is increased and the reporting frequency is reduced, while emergency material events are marked as high priority and reported in real time. Based on the third inspection and storage data, corresponding business response actions are executed, such as prioritizing the transmission of emergency events to the cloud.
[0046] This invention achieves refined control and elastic resource adaptation of data output behavior by dynamically adjusting the second inspection and storage data. This enables priority to ensure the real-time reporting of critical events during peak business periods or network congestion scenarios. At the same time, it alleviates transmission pressure by compressing non-critical data and reducing the reporting frequency, thus avoiding network congestion and processing delays caused by massive data concurrency.
[0047] In one embodiment, before receiving the transmission control policy and data processing rules from the cloud, a secure encrypted channel is established with the cloud, including steps S601 to S603, each of which is as follows: S601. Send initial verification information to the cloud and receive cloud verification information from the cloud; both the initial verification information and the cloud verification information contain hardware identifier, firmware version and hash value of running software; S602. Compare the cloud verification information with the preset trusted benchmark to obtain the verification result, and send the verification result to the cloud for cloud verification; S603. If the cloud verification is successful, a session key is generated, and a secure encrypted channel for transmitting data is established based on the session key.
[0048] Specifically, a two-way trust is established through a remote verification mechanism. The hardware identifier, firmware version, and hash value of the running software of the TEE environment are packaged into initial verification information and sent to the cloud. The cloud verification information is then received. The integrity of the execution environment is confirmed by comparing the cloud verification information with a locally pre-stored trusted benchmark value. If the cloud verification is successful, a session key is generated, and a secure encrypted channel for data transmission is established based on the session key to ensure the confidentiality and integrity of the communication.
[0049] This invention establishes a secure encrypted channel with the cloud and performs verification based on the hardware identifier, firmware version, and hash value of the running software in the verification information, combined with a trust benchmark ratio. This enables hardware-level trusted verification and two-way trust establishment in the communication environment, enhancing the security and anti-cracking capabilities of the transmission process.
[0050] In one embodiment, after obtaining the third inspection data, the method further includes dynamically adjusting the transmission control strategy and the data processing rules through the cloud, including steps S701 to S703, each step of which is as follows: S701. Receive the real-time operating status of the second inspection and storage data through the cloud; the real-time operating status is obtained by monitoring and recording the transmission and processing process of the second inspection and storage data. S702. Evaluate the real-time operating status through the cloud and obtain the evaluation result; S703. Based on the evaluation results, dynamically adjust the transmission control strategy and the data processing rules, and send the adjusted transmission control strategy and data processing rules.
[0051] The real-time operating status includes operating status data such as the current number of events processed, bandwidth utilization, and policy execution success rate. The real-time operating status is fed back to the cloud through a secure encrypted channel. The cloud feedback control module evaluates the data. If it finds that the bandwidth utilization is too high or the event processing delay is increased, it dynamically adjusts the relevant policies, such as further compressing non-critical data or increasing the batch reporting window. The adjusted transmission control policy and data processing rules are then transmitted to complete the closed-loop optimization.
[0052] By acquiring the real-time operating status of the second inspection and storage data, this embodiment of the invention can promptly detect changes in business load or resource bottlenecks, and dynamically adjust strategies based on the evaluation results. This avoids resource mismatch and critical event response delays caused by rigid strategies, ensuring that data transmission and processing strategies are always precisely matched with real-time business needs. This further enhances the adaptability and business response efficiency of the inspection and storage data in complex scenarios.
[0053] like Figure 2 As shown in the data processing of the stored data, based on the above method embodiments, a corresponding system embodiment is provided; This invention provides a data processing system for stored data, comprising: an encrypted transmission module 801, an event information extraction module 802, and a data processing module 803; The encrypted transmission module 801 is used to receive trusted data packets sent by the inspection and storage device and transmit them to a preset trusted execution environment. The trusted execution environment verifies and decrypts the trusted data packets to obtain the first inspection and storage data. The event information extraction module 802 is used to perform real-time analysis on the first inspection and storage data through a preset business event identification model, and extract the inspection and storage event information of the first inspection and storage data. The data processing module 803 is used to perform protocol conversion and structured processing on the first inspection and storage data according to the inspection and storage event information to obtain the second inspection and storage data, and to execute the corresponding business response action according to the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
[0054] This invention receives trusted data packets from the inspection and storage equipment and transmits them to a preset trusted execution environment for credibility verification and decryption. This avoids invalid processing and business misjudgments caused by source forgery or data tampering, providing a trusted foundation for subsequent data processing. A preset business event identification model is used to analyze the decrypted first inspection and storage data in real time and extract inspection and storage event information, enabling value mining of massive amounts of raw data. This allows key business events to be quickly identified in the early stages of processing. Combined with protocol conversion and structured processing, the identified inspection and storage event information is transformed into second inspection and storage data containing event type, material code, occurrence time, and processing suggestions. This completes the value purification from raw data to structured information that can be directly used for business decisions. Compared to existing technologies that rely on centralized cloud processing, have difficulty tracing the data source, and suffer from large response delays, this invention avoids the transmission delays and bandwidth pressure caused by directly transmitting all data back to the cloud through multiple processes including trusted verification of the data entry point, real-time event identification, and structured purification. This allows key business events to be quickly identified and transformed into directly usable business information, thereby improving the data purification efficiency and business response efficiency of inspection and storage data.
[0055] It is understood that the above system embodiments correspond to the method embodiments of the present invention, and can implement the data processing method for stored data provided by any of the above method embodiments of the present invention.
[0056] It should be noted that the system embodiments described above are merely illustrative, and some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Furthermore, in the accompanying drawings of the system embodiments provided by this invention, the connection relationships between modules indicate that they have communication connections, which can be specifically implemented as one or more communication buses or signal lines. Those skilled in the art can understand and implement this without any creative effort.
[0057] For ease of description and brevity, the system embodiments of the present invention include all the implementation methods described in the above-described data processing method embodiments based on stored data, and will not be repeated here.
[0058] Based on the above-described embodiments of the data processing method for stored data, another embodiment of the present invention provides a terminal device, which includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, it implements the data processing method for stored data of any embodiment of the present invention.
[0059] For example, in this embodiment, the computer program can be divided into one or more modules, which are stored in the memory and executed by the processor to complete the present invention. The one or more modules may be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of the computer program in the terminal device.
[0060] The terminal device may be a desktop computer, laptop, handheld computer, or cloud server, etc. The terminal device may include, but is not limited to, a processor and a memory.
[0061] The processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor can be a microprocessor or any conventional processor. The processor is the control center of the terminal device, connecting all parts of the terminal device via various interfaces and lines.
[0062] Based on the above-described method embodiments, another embodiment of the present invention provides a computer-readable storage medium including a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to perform the data processing method for storing data as described in any of the above-described method embodiments of the present invention.
[0063] The modules / units integrated in the device / terminal equipment, if implemented as software functional units and sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the above embodiments of the present invention can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying the computer program code, a recording medium, a USB flash drive, a portable hard drive, a magnetic disk, an optical disk, a computer memory, a read-only memory (ROM), a random access memory (RAM), an electrical carrier signal, a telecommunication signal, and a software distribution medium, etc.
[0064] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications are also considered to be within the scope of protection of the present invention.
Claims
1. A data processing method for stored data, characterized in that, include: The system receives a trusted data packet sent by the inspection and storage device and transmits it to a preset trusted execution environment. The trusted execution environment is used to verify and decrypt the trusted data packet to obtain the first inspection and storage data. The first inspection and storage data is analyzed in real time using a preset business event identification model, and the inspection and storage event information of the first inspection and storage data is extracted. Based on the inspection and storage event information, the first inspection and storage data is converted and structured to obtain the second inspection and storage data, and the corresponding business response action is executed based on the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
2. The data processing method for stored data as described in claim 1, characterized in that, The process of executing the corresponding business response action based on the second inspection and storage data also includes: Receive transmission control policies and data processing rules from the cloud; the transmission control policies and data processing rules are generated based on the power material inspection and storage business rules and real-time business load; According to the transmission control strategy and the data processing rules, the second inspection and storage data is dynamically adjusted to obtain the third inspection and storage data, and the corresponding business response action is executed according to the third inspection and storage data; the dynamic adjustment includes adjusting the data compression rate, reporting frequency and event priority.
3. The data processing method for stored data as described in claim 2, characterized in that, After obtaining the third inspection and storage data, the method further includes dynamically adjusting the transmission control strategy and the data processing rules through the cloud, specifically: The system receives the real-time operating status of the second inspection and storage data via the cloud; the real-time operating status is obtained by monitoring and recording the transmission and processing of the second inspection and storage data. The real-time operating status is evaluated via the cloud to obtain evaluation results; Based on the evaluation results, the transmission control strategy and the data processing rules are dynamically adjusted, and the adjusted transmission control strategy and data processing rules are sent.
4. The data processing method for stored data as described in claim 2, characterized in that, Before receiving the transmission control policy and data processing rules from the cloud, the process also includes establishing a secure encrypted channel with the cloud, specifically: Send initial verification information to the cloud and receive cloud verification information from the cloud; both the initial verification information and the cloud verification information contain hardware identifier, firmware version and hash value of running software; The verification results are obtained by comparing the cloud verification information with a preset trusted benchmark, and the verification results are sent to the cloud for cloud verification. If the cloud verification is successful, a session key is generated, and a secure encrypted channel for transmitting data is established based on the session key.
5. The data processing method for stored data as described in claim 1, characterized in that, The trusted data packet is obtained by the inspection and storage device through a deployed security chip, which performs hardware encryption and digital signature on the collected raw inspection and storage data. Specifically: The inspection and storage device encrypts the original inspection and storage data in real time using the national cryptographic SM4 algorithm in the security chip, and digitally signs it according to the device private key of the inspection and storage device to obtain a trusted data packet; the trusted data packet contains the ID, timestamp, ciphertext and signature of the inspection and storage device.
6. The data processing method for stored data as described in claim 5, characterized in that, The process of verifying and decrypting the trusted data packet through the trusted execution environment to obtain the first stored data specifically involves: The trustworthiness of the signature of the trusted data packet is verified by using a preset security chip public key library; If the verification fails, the ID and timestamp of the trusted data packet are recorded, and the communication permissions of the corresponding storage device are locked. If the verification is successful, the trusted data packet is decrypted to obtain the first stored data.
7. The data processing method for stored data as described in claim 1, characterized in that, The step of analyzing the first inspection and storage data in real time using a preset business event identification model and extracting inspection and storage event information from the first inspection and storage data specifically involves: By using a preset business event recognition model, the first inspection and storage data is identified to obtain the first inspection and storage event type of the first inspection and storage data, and the first inspection and storage data is analyzed and processed according to the first inspection and storage event type to obtain the analysis results. Based on the analysis results, extract the storage event information corresponding to the analysis results from the first storage data.
8. A data processing system for stored data, characterized in that, include: Encrypted transmission module, event information extraction module, and data processing module; The encrypted transmission module is used to receive trusted data packets sent by the inspection and storage device and transmit them to a preset trusted execution environment. The trusted execution environment verifies and decrypts the trusted data packets to obtain the first inspection and storage data. The event information extraction module is used to perform real-time analysis on the first inspection and storage data through a preset business event identification model, and extract the inspection and storage event information of the first inspection and storage data. The data processing module is used to perform protocol conversion and structured processing on the first inspection and storage data according to the inspection and storage event information to obtain the second inspection and storage data, and to execute the corresponding business response action according to the second inspection and storage data; the second inspection and storage data includes the event type, material code, occurrence time and processing suggestions of the power material inspection and storage business.
9. A terminal device, characterized in that, The system includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, it implements the data processing method for storing data as described in any one of claims 1-7.
10. A computer-readable storage medium, characterized in that, include: A stored computer program, wherein, when the computer program is executed, it controls the device containing the computer-readable storage medium to perform the data processing method for storing data as described in any one of claims 1-7.