Time-frequency signal security protection method and system, electronic device and storage medium

Abstract

The application relates to the technical field of space-time security protection, and particularly relates to a time-frequency signal security protection method, system, device and storage medium, which comprises the following steps: collecting a time-frequency signal; adopting a feature extraction and anomaly detection algorithm to process the time-frequency signal, and generating security early warning information according to a processing result; generating a corresponding disposal decision according to the security early warning information and collected terminal operation information; and controlling the terminal to execute a corresponding operation based on the disposal decision. Therefore, the method can adapt to complex and changeable environments with more interference, can capture strong or highly concealed interference, avoids misjudging normal signals as interference signals, and improves interference identification capability and control accuracy.

Description

Technical Field

[0001] This application relates to the field of spatiotemporal security protection technology, and in particular to a time and frequency signal security protection method, system, electronic device and storage medium. Background Technology

[0002] Time and frequency signals serve as core foundational information for the operation of various electronic systems and critical infrastructure. Their security directly determines the stable operation and data reliability of the entire system, making them a crucial component of security protection systems. In key areas such as BeiDou navigation, power timing, and financial transactions, the accuracy and security of time and frequency signals are of paramount importance. Interference, tampering, or interruption of time and frequency signals can lead to severe consequences such as system paralysis and data errors, resulting in significant economic losses and security risks.

[0003] Currently, interference suppression technology for time-frequency signals has become a research hotspot in the industry. The closest existing technology mainly uses hardware filtering equipment, combined with fixed signal parameters, fixed interference suppression strategies, and basic threshold detection mechanisms, to achieve a preliminary response to time-frequency signal interference. Specifically, existing technologies use hardware filtering modules to filter out some external interference signals, and then, based on preset fixed parameters and basic thresholds, detect the filtered time-frequency signal to determine whether there is abnormal interference, and then perform corresponding suppression operations.

[0004] Existing technologies can achieve basic interference suppression in simple interference environments, meeting basic protection needs in ordinary scenarios. However, with the widespread use of various electronic devices and the formation of complex electromagnetic environments, the limitations of existing technologies are becoming increasingly apparent, exhibiting the following problems: They rely on fixed parameters and basic thresholds for detection, and these parameters and thresholds cannot be dynamically adjusted according to changes in the external environment, making it difficult to adapt to complex and ever-changing actual operating environments with diverse interference types and large fluctuations in interference intensity. For strong suppressive interference or highly concealed deceptive interference, existing technologies have limited detection capabilities, often failing to identify them in a timely manner, resulting in interference continuously affecting the normal transmission of time and frequency signals. Summary of the Invention

[0005] This application provides a time and frequency signal security protection method, system, electronic device, and storage medium, which can solve at least one of the technical problems in the background art to a certain extent.

[0006] To achieve the above objectives, this application adopts the following technical solution: Firstly, a method for protecting the security of time-frequency signals is provided, the method comprising: Acquire time-frequency signals; The time-frequency signal is processed using feature extraction and anomaly detection algorithms, and security warning information is generated based on the processing results. Based on the security warning information and the collected terminal operation information, corresponding handling decisions are generated; Based on the aforementioned decision, the control terminal executes the corresponding operation.

[0007] Secondly, a time-frequency signal security protection system is provided, including: The acquisition module is used to acquire time-frequency signals; The processing module is used to process the time-frequency signal using feature extraction and anomaly detection algorithms, and generate security warning information based on the processing results; The generation module is used to generate corresponding handling decisions based on the security warning information and the collected terminal operation information; The control module is used to control the terminal to perform corresponding operations based on the disposal decision.

[0008] Thirdly, embodiments of this application provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the time-frequency signal security protection method as described in any one of the first aspects above.

[0009] Fourthly, embodiments of this application provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the time-frequency signal security protection method as described in any one of the first aspects above.

[0010] Fifthly, embodiments of this application provide a computer program product that, when run on an electronic device, causes the electronic device to execute the time-frequency signal security protection method described in any of the first aspects above.

[0011] It is understood that the beneficial effects of the second to fifth aspects mentioned above can be found in the relevant descriptions in the first aspect mentioned above, and will not be repeated here.

[0012] In this embodiment, time-frequency signals are first acquired, then feature extraction and anomaly detection algorithms are used to process the signals, and security warning information is generated based on the processing results. Subsequently, based on the security warning information and the acquired terminal operation information, corresponding handling decisions are generated, and then the terminal is controlled to perform corresponding operations based on the handling decisions. This allows the system to adapt to complex and variable environments with significant interference, enabling the capture of strong or concealed interference, avoiding misidentification of normal signals as interference signals, and improving interference identification capabilities and control accuracy.

[0013] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description

[0014] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiments below. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 This is a flowchart illustrating the time-frequency signal security protection method provided in an embodiment of this application; Figure 2 The diagram illustrates the security protection and operation management architecture of the terminal and system. Figure 3 This is a schematic diagram of the time-frequency signal security protection system provided in the embodiments of this application; Figure 4 This is a schematic diagram of the structure of the electronic device provided in the embodiments of this application. Detailed Implementation

[0015] The embodiments of the technical solutions of this application will now be described in detail with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solutions of this application, and are therefore merely examples and should not be used to limit the scope of protection of this application. When the following description relates to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. Various changes, modifications, and equivalents of the methods, apparatus, and / or systems described herein will become apparent upon understanding this disclosure. For example, the order of operations described herein is merely illustrative and is not limited to those orders set forth herein, but can be changed as will become apparent upon understanding this disclosure, except for operations that must be performed in a specific order. Furthermore, for clarity and conciseness, descriptions of features known in the art may be omitted.

[0016] The embodiments described in the following examples of this disclosure are not representative of all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.

[0017] It should be noted that existing technologies rely on fixed parameters and basic thresholds for detection. These parameters and thresholds cannot be dynamically adjusted according to changes in the external environment, making it difficult to adapt to complex and ever-changing real-world operating environments with diverse interference types and significant fluctuations in interference intensity. For strong suppressive interference or highly concealed deceptive interference, existing technologies have limited detection capabilities and often fail to identify them in a timely manner, leading to continuous interference affecting the normal transmission of time-frequency signals. Furthermore, the lack of effective logic for distinguishing between interference and normal signals, relying solely on a single signal parameter or threshold without considering other relevant information such as terminal operating status and environmental factors, easily leads to misjudging signal fluctuations caused by normal terminal operation or environmental fluctuations as interference signals. This triggers ineffective interference handling operations, wasting system resources and potentially affecting the normal operation of the terminal. Because only a single signal identification technology is used, a complete operational control mechanism for dealing with complex environments is lacking, failing to achieve full-process linkage between signal analysis, terminal status assessment, decision generation, and execution feedback.

[0018] Furthermore, existing technologies have not formed a complete data encryption transmission and closed-loop management system. Time and frequency signal data are prone to security risks such as leakage and tampering during the acquisition and transmission process. Moreover, there is a lack of effective result feedback and optimization mechanisms after the execution of disposal decisions, which further reduces the overall effectiveness of time and frequency signal security protection and operation control, and cannot meet the high reliability and high security requirements of key areas such as spatiotemporal security protection.

[0019] See Figure 1 This is a flowchart illustrating the time-frequency signal security protection method provided in this application embodiment. The specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0020] like Figure 1 As shown, the time-frequency signal security protection method provided in this embodiment includes the following steps: Step 101: Acquire time-frequency signals.

[0021] Optionally, a preset communication module can be used to collect time and frequency signals, which can then be transmitted to a time and frequency acquisition unit via an acquisition interface. The time and frequency acquisition unit can then encrypt the time and frequency signals and upload them to the system.

[0022] The communication module is a hardware module specifically designed for time and frequency signal terminals. It boasts excellent compatibility and can be flexibly configured in various types of devices, such as time devices, timing devices, and spatiotemporal security terminals. This module integrates core components such as embedded systems, communication protocols, data encryption modules, acquisition interfaces, and drivers. Its core functions are to acquire and encrypt time and frequency signal data, upload the processed data to the core system, receive processing decisions from the core system, instruct the terminal to execute corresponding operations, and provide feedback on the execution results.

[0023] Among them, spatiotemporal security terminals refer to terminal equipment with the ability to acquire spatiotemporal references (time / location), provide security protection, and monitor and handle anomalies, such as Beidou spatiotemporal security isolation devices, time synchronization security protection terminals, high-precision time synchronization terminals, time synchronization servers, high-precision positioning terminals, etc., without being limited here.

[0024] Optionally, the encrypted time-frequency signal can be parsed to obtain parsed data. The parsed data can then be tested to determine whether it conforms to the expected time range. If the parsed data conforms to the expected time range, the frequency information of the parsed data can be determined to conform to the normal operating range. If the frequency information of the parsed data conforms to the normal operating range, the time-frequency signal that has passed the verification can be stored in the database.

[0025] Optionally, a preset communication module can be used to collect time-frequency signals generated by the spatiotemporal security terminal. The communication module can collect data related to the time-frequency signals in real time through its integrated acquisition interface.

[0026] Among them, the data related to time and frequency signals include time information, frequency information, and the operating status data of the spatiotemporal security terminal (such as equipment temperature, voltage, working time, communication status, signal reception strength, etc.).

[0027] Furthermore, the acquired time-frequency signal data is transmitted to the time-frequency acquisition unit inside the communication module via the acquisition interface. The time-frequency acquisition unit uses a preset AES-128 encryption algorithm to encrypt the time-frequency signal data. The encryption process includes steps such as byte substitution, row shifting, and column obfuscation to ensure data transmission security. After encryption, the encrypted data packet is uploaded to the core system via the TLS protocol.

[0028] Optionally, the core system's data receiving and parsing module receives encrypted data uploaded by the communication module, parses the encrypted data, restores it to the original time-frequency signal data and terminal operating status data, and generates a data encryption format that conforms to the system's preset standards for subsequent data storage and retrieval. Subsequently, a comprehensive validity check is performed on the parsed data, including: whether the data conforms to the expected time range of the spatiotemporal security terminal, whether the frequency information conforms to the normal operating range of the equipment, whether the data format is complete, and whether there are any traces of data tampering.

[0029] It should be noted that if the parsed data meets the expected time range, the frequency information is within the normal working range, and the data is complete and unaltered, the data verification is considered successful. The verified time and frequency signal data is stored in the system database to prevent data loss. For data that fails verification, it is marked and error information is recorded in detail (such as missing data items, frequency out of range, hash value mismatch, etc.) to facilitate subsequent investigation and analysis by staff.

[0030] Therefore, accurate acquisition of time and frequency signals is achieved through a dedicated communication module. Combined with AES-128 encryption algorithm and SHA-256 hash verification, the integrity and security of time and frequency signal data are ensured from acquisition to uploading to the system. Furthermore, the communication module can be flexibly configured on various devices such as spatiotemporal security terminals, which helps to improve adaptability and meet the needs of time and frequency signal acquisition in different scenarios.

[0031] Step 102: Use feature extraction and anomaly detection algorithms to process the time-frequency signal and generate safety warning information based on the processing results.

[0032] Optionally, machine learning can be used to extract features from the time-frequency signal to obtain time-domain features, frequency-domain features, and time-frequency-domain features. Anomaly detection algorithms are then used to analyze the time-domain features, frequency-domain features, and time-frequency-domain features to determine whether there are any anomalies in the time-frequency signal. If anomalies are identified in the time-frequency signal, a preset security protection analysis module is used to analyze the cause of the anomaly to generate a security risk assessment. Based on the security risk assessment, corresponding security warning information is generated. The security warning information includes at least one of the following: anomaly signal features, occurrence event, location information, security risk level, and handling measures.

[0033] Optionally, the security protection analysis module calls the verified time-frequency signal data in the database and extracts features from the time-frequency signals using machine learning technology. Specifically, it uses deep learning algorithms (such as convolutional neural networks CNN) combined with time-frequency transformation methods to extract the time-domain features, frequency-domain features, and time-frequency domain features of the time-frequency signals.

[0034] Among them, time-domain features include signal amplitude, period, peak value, pulse width, etc., frequency-domain features include spectral distribution, power spectral density, frequency shift, harmonic content, etc., and time-frequency domain features include short-time Fourier transform features, wavelet transform features, etc., which are not limited here.

[0035] Specifically, anomaly detection algorithms (such as autoencoders AE) can be used to perform anomaly analysis on the extracted time-domain features, frequency-domain features, and time-frequency-domain features. Dynamic thresholds can be set using the trained model parameters to determine whether there are anomalies in the time-frequency signals.

[0036] For example, when the amplitude of a signal exceeds the normal range by ±10%, or the frequency deviation exceeds a preset threshold, or the power spectral density shows abnormal fluctuations, it is determined to be an abnormal signal, without any further limitation.

[0037] Meanwhile, the probability density function of the prediction error can be estimated by kernel density estimation (KDE), thereby optimizing the anomaly judgment threshold and improving the accuracy of anomaly detection.

[0038] Specifically, when an anomaly is detected in the time-frequency signal, the pre-set security protection analysis module can be used to analyze the cause of the anomaly. In combination with terminal operating status data, environmental data, etc., it can be determined whether the abnormal signal is caused by external interference, equipment failure or malicious attack, and then a comprehensive security risk assessment can be generated.

[0039] The assessment includes the impact range of abnormal signals and the level of security risks to the BeiDou spatiotemporal security protection system (such as general risk, major risk, and serious risk). Based on the security risk assessment, corresponding security warning information is generated.

[0040] The security warning information includes at least one of the following: abnormal signal characteristics (such as abnormal amplitude, frequency offset value, etc.), occurrence of events (such as signal interference, equipment failure), location information (deployment location of the spatiotemporal security terminal), security risk level, and preliminary handling measures (such as continuous monitoring, activation of backup equipment, etc.), without limitation.

[0041] In some embodiments, the spatiotemporal security protection system is always in protection mode. When an anomaly is detected in the time-frequency signal, it is necessary to block the abnormal signal and output a safe and stable satellite signal to ensure that the backend timing system is not affected by the anomaly. Specific protection technologies are as follows: First, the system uses a signal isolation module to quickly block and isolate abnormal time and frequency signals, blocking the transmission path of abnormal signals and preventing them from causing further interference or damage to the core processing unit of the back-end timing system and the satellite signal receiving unit. This isolation design can quickly block the spread of abnormalities and improve the system's anti-interference resilience.

[0042] Secondly, the generated safe satellite signal is used. This signal is a regenerated satellite signal that has passed the test and meets the spatiotemporal signal standards. Combined with the type of abnormal signal (such as external interference or equipment failure), a suitable regenerated signal is selected. The parameters of the regenerated satellite signal are calibrated by the signal reconstruction module to ensure that the frequency, amplitude, phase and other parameters of the regenerated signal are consistent with the normal satellite signal, thus ensuring the consistency of the signal output.

[0043] At the same time, the real-time monitoring module is activated to continuously monitor the output safe satellite signal, collect the time domain, frequency domain and time frequency domain characteristics of the signal in real time, and compare them with the characteristics of the standard signal in real time to ensure that the output signal is always within the safe range and avoid secondary anomalies in the regenerated signal.

[0044] In addition, corresponding specific protection strategies are matched for different types of anomalies.

[0045] For example, if the anomaly is caused by external interference, the anti-interference protection response mechanism is activated, and the interference signal is identified and eliminated through an adaptive anti-interference algorithm to enhance the anti-interference capability of the secure satellite signal.

[0046] If the anomaly is due to equipment failure, the equipment redundancy switching mechanism will be activated to switch to the backup processing unit to ensure continuous output of the safe satellite signal and avoid signal interruption due to equipment failure.

[0047] If the anomaly is a malicious attack, the encryption protection module will be activated to encrypt the output secure satellite signal, preventing malicious attacks from tampering with or stealing the signal, and further enhancing the security of signal transmission.

[0048] Step 103: Generate corresponding handling decisions based on the security warning information and the collected terminal operation information.

[0049] Optionally, the terminal's operational health can be obtained based on the collected terminal operation information and the preset operation control and analysis module, and the terminal operation information can be visualized. Based on the security warning information, the terminal's operational health, and the preset rules, a handling decision can be generated.

[0050] Optionally, the operation control and analysis module receives the spatiotemporal security terminal operation status data (such as equipment temperature, voltage, working time, communication status, fault records, etc.) uploaded by the communication module, summarizes the terminal operation status data, organizes it according to the terminal number, deployment area and other classification methods, and builds a terminal operation status database.

[0051] Then, based on the aggregated terminal operation status data, a preset evaluation model is used to quantitatively evaluate the operational health of the spatiotemporal security terminal and give a specific quantitative score (out of 100 points, 85 points and above is excellent, 70-84 points is good, 60-69 points is average, and below 60 points is abnormal) or level classification, which is not limited here.

[0052] Meanwhile, it can support the visualization of terminal operation status, displaying terminal health score and key operating parameters (such as real-time temperature and voltage) through the dashboard, showing the correlation between device working time and failure rate through line graphs, and comparing the operation status of terminals in different deployment areas through bar charts.

[0053] The decision generation module can integrate the security warning information output by the security protection analysis module, the terminal operation health information output by the operation control analysis module, and the historical experience data preset by the system (such as historical interference handling cases, equipment failure handling solutions, etc.) to generate targeted handling decisions based on preset logical conditions or machine learning algorithms.

[0054] For example, when a security warning indicates that the time and frequency signal is severely interfered with (major risk) and the terminal's operational health is assessed as "abnormal" (score < 60 points), a decision to "emerge to shut down, conduct a comprehensive inspection of the spatiotemporal security terminal, and switch to the backup timing equipment" is generated.

[0055] For example, when a safety warning indicates a slight signal fluctuation (general risk) and the terminal's operational health is assessed as "good" (70-84 points), a decision is generated to "continuously monitor changes in time-frequency signals, adjust the equipment's signal reception parameters, and take action without shutting down the system."

[0056] For example, when a safety warning message indicates that a device malfunction is causing signal abnormalities, and the terminal's operational health is assessed as "average" (60-69 points), a decision to "initiate the device malfunction troubleshooting process and arrange for staff to conduct on-site repairs" is generated.

[0057] Step 104: Based on the decision to handle the situation, the control terminal executes the corresponding operation.

[0058] Specifically, the generated disposal decision can be sent to the corresponding communication module via the TLS protocol. After receiving the disposal decision, the communication module parses the decision content and directs the spatiotemporal security terminal to perform the corresponding operation according to the decision instructions.

[0059] For example, when the decision to handle the situation is "adjust the equipment signal receiving parameters", the communication module sends the parameter adjustment command to the spatiotemporal safety terminal through its integrated driver component. The terminal adjusts the signal receiving sensitivity, filtering parameters, etc. according to the command. When the decision to handle the situation is "emergency shutdown and switch to backup equipment", the communication module instructs the spatiotemporal safety terminal to stop working and triggers the backup timing equipment to start, ensuring that the timing work is not interrupted.

[0060] After the spatiotemporal safety terminal performs the corresponding operation for handling decision, it feeds back the execution results (such as the equipment status after parameter adjustment, the equipment status after shutdown, the standby equipment startup status, etc.) to the core system through the communication module. The core system's decision-making module receives the execution results, transmits the execution results to the database for storage, and feeds back the execution results to the decision generation module and the operation control and analysis module for evaluating the handling effect and optimizing subsequent decision-making logic.

[0061] For example, if the execution result shows that the interference has been eliminated and the terminal's health has improved, the current decision logic is retained; if the execution result shows that the interference has not been eliminated and the terminal's operating status has not improved, the feature extraction algorithm parameters, anomaly detection threshold, and decision logic are optimized to improve the subsequent handling effect, without any limitations.

[0062] In this embodiment, through the above four steps, full-process security protection and operational control of the time-frequency signals of the spatiotemporal security terminal are achieved, forming a closed-loop management system. This effectively improves the interference identification rate, reduces the false alarm rate, and enhances the accuracy of control, ensuring the stable operation of the BeiDou spatiotemporal security protection system. In other embodiments of the present invention, the communication module can be configured on other time-frequency signal terminals such as time devices and timing synchronization devices. The core process remains consistent, with only the data acquisition parameters and evaluation indicators adjusted according to the terminal type to adapt to the needs of different application scenarios.

[0063] It should be noted that in the field of spatiotemporal security protection technology, the communication module can be directly configured in the spatiotemporal security terminal to realize the acquisition, encrypted transmission, anomaly detection, security early warning and operation control of the time and frequency signals of the time synchronization system, block external interference and deceptive signals, ensure the stable operation of the spatiotemporal security terminal, and adapt to key fields such as power, transportation, and finance that rely on time synchronization (such as Beidou time synchronization, satellite time synchronization, etc.).

[0064] In this embodiment, time-frequency signals are first acquired, then feature extraction and anomaly detection algorithms are used to process the signals, and security warning information is generated based on the processing results. Subsequently, based on the security warning information and the acquired terminal operation information, corresponding handling decisions are generated, and then the terminal is controlled to perform corresponding operations based on the handling decisions. This allows the system to adapt to complex and variable environments with significant interference, enabling the capture of strong or concealed interference, avoiding misidentification of normal signals as interference signals, and improving interference identification capabilities and control accuracy.

[0065] The embodiments of this application have at least the following beneficial effects: On the one hand, it can improve interference identification capabilities. Existing technologies rely on fixed parameters and basic thresholds, making it difficult to cope with complex and ever-changing interference environments. The security protection analysis module in this system uses feature extraction and anomaly detection algorithms, enabling dynamic analysis and identification based on different interference characteristics. For example, when facing strong or highly concealed interference, this module can accurately capture the interference signal by analyzing changes in the amplitude and frequency characteristics of the time-frequency signal, greatly improving the ability to identify complex interference, adapting to various harsh interference environments, and increasing the interference identification rate.

[0066] On the other hand, it can reduce the false alarm rate. Existing technologies lack effective logic for distinguishing between interference signals and normal signals, which easily leads to false alarms. The system in this case comprehensively utilizes multiple analysis methods, considering not only the abnormal characteristics of time-frequency signals but also information such as the terminal's operating status for comprehensive judgment. For example, when an abnormal signal is detected, it can analyze whether the abnormality is related to the terminal's operation or environmental factors, thereby accurately distinguishing between interference signals and normal signals, effectively reducing the false alarm rate and minimizing ineffective actions.

[0067] On the other hand, it can improve the accuracy of control. The operation control analysis module can summarize and analyze terminal operation status data, and evaluate the terminal's operational health from multiple dimensions. In addition to considering time and frequency signals, it also pays attention to factors such as the terminal's hardware status and software operation. The decision generation module combines the early warning information output by the security protection analysis module, the results of the operation control analysis module, and preset historical experience to generate targeted response measures. This comprehensive decision-making approach can fully consider the interaction between various factors, avoid the limitations of single identification technologies, and improve the accuracy of control decisions.

[0068] On the other hand, the closed-loop management of the communication module and system combination forms a dynamic adjustment cycle, which can improve operating efficiency and enhance the effectiveness of time and frequency signal security protection and operation control.

[0069] Figure 2 The diagram illustrates the security protection and operational control architecture of the terminal and system. The terminal reports time-frequency signals and operational status data via its communication module. The system's data receiving and parsing module receives and processes the data. The security protection analysis module and the operational control analysis module perform security and operational analyses respectively. The decision generation module synthesizes the analysis results and generates control decisions. The decision issuance module sends instructions to the terminal, which executes the instructions and then reports its status again, forming a closed loop.

[0070] Reference Figure 3 The time and frequency signal security protection system 200 includes: Acquisition module 210 is used to acquire time and frequency signals; The processing module 220 is used to process the time-frequency signal using feature extraction and anomaly detection algorithms, and generate security warning information based on the processing results; The generation module 230 is used to generate corresponding handling decisions based on the security warning information and the collected terminal operation information; The control module 240 is used to control the terminal to perform corresponding operations based on the disposal decision.

[0071] Optionally, the acquisition module is specifically used for: The time-frequency signal is acquired through a preset communication module; The time-frequency signal is transmitted to the time-frequency acquisition unit through the acquisition interface; The time-frequency signal is encrypted by the time-frequency acquisition unit and then uploaded to the system.

[0072] Optionally, a verification module may also be included, the verification module being used for: The encrypted time-frequency signal is parsed to obtain the parsed data. The parsed data is then examined to determine whether it conforms to the expected time range. If the parsed data meets the expected time range, determine whether the frequency information of the parsed data meets the normal working range; If the frequency information of the parsed data meets the normal operating range, the time-frequency signal that passes the verification will be stored in the database.

[0073] Optional, processing module, specifically used for: The time-frequency signal is subjected to feature extraction through machine learning to obtain time-domain features, frequency-domain features, and time-frequency-domain features; An anomaly detection algorithm is used to perform anomaly analysis on the time-domain features, frequency-domain features, and time-frequency-domain features to determine whether there are any anomalies in the time-frequency signal. If an anomaly is detected in the time-frequency signal, the cause of the anomaly is analyzed by a preset security protection analysis module to generate a security risk assessment. Based on the security risk assessment, corresponding security warning information is generated, wherein the security warning information includes at least one of the following abnormal signal characteristics, the event that occurred, the location information, the security risk level, and the handling measures.

[0074] Optional, a generation module, specifically used for: Based on the collected terminal operation information and the preset operation control and analysis module, the terminal's operational health is obtained, and the terminal operation information is visualized. Based on the security warning information, the operational health of the terminal, and preset rules, a handling decision is generated.

[0075] In this embodiment, time-frequency signals are first acquired, then feature extraction and anomaly detection algorithms are used to process the signals, and security warning information is generated based on the processing results. Subsequently, based on the security warning information and the acquired terminal operation information, corresponding handling decisions are generated, and then the terminal is controlled to perform corresponding operations based on the handling decisions. This allows the system to adapt to complex and variable environments with significant interference, enabling the capture of strong or concealed interference, avoiding misidentification of normal signals as interference signals, and improving interference identification capabilities and control accuracy.

[0076] in addition, Figure 3 The time and frequency signal security protection system shown can be a software unit, hardware unit, or a combination of software and hardware built into existing electronic devices. It can also be integrated into electronic devices as an independent component, or exist as an independent electronic device.

[0077] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is merely an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. Furthermore, the specific names of the functional units and modules are only for easy differentiation and are not intended to limit the scope of protection of this application. The specific working process of the units and modules in the above system can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0078] Figure 4 This is a schematic diagram of the structure of the electronic device provided in an embodiment of this application. For example... Figure 4 As shown, the electronic device 5 of this embodiment includes: at least one processor 50 ( Figure 4 (Only one is shown in the diagram) a processor, a memory 51, and a computer program 52 stored in the memory 51 and executable on the at least one processor 50, wherein the processor 50 executes the computer program 52 to implement the steps in any of the above-described time-frequency signal security protection method embodiments.

[0079] The electronic device may be a desktop computer, laptop, handheld computer, or cloud server, etc. This electronic device may include, but is not limited to, a processor and memory. Those skilled in the art will understand that... Figure 4This is merely an example of electronic device 5 and does not constitute a limitation on electronic device 5. It may include more or fewer components than shown in the figure, or combine certain components, or different components. For example, it may also include input / output devices, network access devices, etc.

[0080] The processor 50 may be a central processing unit, or it may be other general-purpose processors, digital signal processors, application-specific integrated circuits, off-the-shelf programmable gate arrays or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor.

[0081] In some embodiments, the memory 51 may be an internal storage unit of the electronic device 5, such as a hard disk or memory of the electronic device 5. In other embodiments, the memory 51 may be an external storage device of the electronic device 5, such as a plug-in hard disk, smart memory card, secure digital card, flash memory card, etc., equipped on the electronic device 5. Further, the memory 51 may include both internal storage units and external storage devices of the electronic device 5. The memory 51 is used to store operating systems, applications, boot loaders, data, and other programs, such as the program code of the computer program. The memory 51 can also be used to temporarily store data that has been output or will be output.

[0082] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, can implement the steps in the above-described method embodiments.

[0083] This application provides a computer program product that, when run on an electronic device, enables the electronic device to implement the steps described in the various method embodiments above.

[0084] If the integrated unit is implemented as a software functional unit and used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include at least: any entity or device capable of carrying computer program code to a device / electronic device, a recording medium, a computer memory, a read-only memory, a random access memory, an electrical carrier signal, a telecommunication signal, and a software distribution medium. Examples include USB flash drives, portable hard drives, magnetic disks, or optical disks.

[0085] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail or recorded in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0086] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0087] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the application; the terms “comprising” and “having”, and any variations thereof, in the specification, claims, and foregoing description of the drawings are intended to cover non-exclusive inclusion.

[0088] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0089] The above-described embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included within the protection scope of this application.

Claims

1. A method for protecting the security of time and frequency signals, characterized in that, include: Acquire time-frequency signals; The acquired time-frequency signal includes: The time-frequency signal is acquired through a preset communication module; The time-frequency signal is transmitted to the time-frequency acquisition unit through the acquisition interface; The time-frequency signal is encrypted by the time-frequency acquisition unit and then uploaded to the system. The encrypted time-frequency signal is parsed to obtain the parsed data. The parsed data is then examined to determine whether it conforms to the expected time range. If the parsed data meets the expected time range, determine whether the frequency information of the parsed data meets the normal working range; If the frequency information of the parsed data meets the normal operating range, the time-frequency signal that passes the verification will be stored in the database; The time-frequency signal is processed using feature extraction and anomaly detection algorithms, and security warning information is generated based on the processing results. The process employs feature extraction and anomaly detection algorithms to process the time-frequency signal and generates security warning information based on the processing results, including: The time-frequency signal is subjected to feature extraction through machine learning to obtain time-domain features, frequency-domain features, and time-frequency-domain features; An anomaly detection algorithm is used to perform anomaly analysis on the time-domain features, frequency-domain features, and time-frequency-domain features to determine whether there are any anomalies in the time-frequency signal. If an anomaly is detected in the time-frequency signal, the pre-set security protection analysis module analyzes the cause of the anomaly to generate a security risk assessment; the abnormal time-frequency signal is quickly blocked and isolated by the signal isolation module; and the regenerated security satellite signal is output after parameter calibration by the signal reconstruction module. The parameter calibration includes calibrating the frequency, amplitude, and phase of the regenerated security satellite signal to make it consistent with the normal satellite signal. Based on the security risk assessment, corresponding security warning information is generated, wherein the security warning information includes at least one of the following abnormal signal characteristics, the event that occurred, the location information, the security risk level, and the handling measures; Based on the security warning information and the collected terminal operation information, corresponding handling decisions are generated; For different types of anomalies, specific protection strategies are matched. If the anomaly is external interference, an anti-interference protection response mechanism is activated and an adaptive anti-interference algorithm is used to identify and eliminate interference signals. If the anomaly is equipment failure, an equipment redundancy switching mechanism is activated to switch to a backup processing unit. If the anomaly is a malicious attack, an encryption protection module is activated to encrypt the output security satellite signals. Based on the aforementioned decision, the control terminal executes the corresponding operation and receives the execution result fed back by the terminal. The effect of the action is evaluated based on the execution result, and subsequent decision-making logic is optimized.

2. The method according to claim 1, characterized in that, The step of generating corresponding handling decisions based on the security warning information and the collected terminal operation information includes: Based on the collected terminal operation information and the preset operation control and analysis module, the terminal's operational health is obtained, and the terminal operation information is visualized. Based on the security warning information, the operational health of the terminal, and preset rules, a handling decision is generated.

3. A time-frequency signal security protection system, used to implement the time-frequency signal security protection method as described in claim 1 or 2, characterized in that, include: The acquisition module is used to acquire time-frequency signals; The processing module is used to process the time-frequency signal using feature extraction and anomaly detection algorithms, and generate security warning information based on the processing results. The process includes: extracting features from the time-frequency signal using machine learning to obtain time-domain features, frequency-domain features, and time-frequency-domain features; performing anomaly analysis on the time-domain features, frequency-domain features, and time-frequency-domain features using anomaly detection algorithms to determine if the time-frequency signal is abnormal; if anomalies are identified in the time-frequency signal, analyzing the cause of the anomaly using a preset security protection analysis module to generate a security risk assessment; and generating corresponding security warning information based on the security risk assessment. The security warning information includes at least one of the following: anomaly signal features, an event occurring, location information, security risk level, and handling measures. The generation module is used to generate corresponding handling decisions based on the security warning information and the collected terminal operation information; The control module is used to control the terminal to perform corresponding operations based on the disposal decision; The acquisition module is specifically used for: The time-frequency signal is acquired through a preset communication module; The time-frequency signal is transmitted to the time-frequency acquisition unit through the acquisition interface; The time-frequency signal is encrypted by the time-frequency acquisition unit and then uploaded to the system. The verification module is used to: parse the encrypted time-frequency signal to obtain parsed data; detect the parsed data to determine whether the parsed data conforms to the expected time range; if the parsed data conforms to the expected time range, determine whether the frequency information of the parsed data conforms to the normal working range; if the frequency information of the parsed data conforms to the normal working range, store the time-frequency signal that has passed the verification to the database.

4. An electronic device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the steps of the method as claimed in any one of claims 1 to 2.

5. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program, which is loaded by a processor to perform the steps of the method according to any one of claims 1 to 2.

Images