5G dual-domain intelligent access control device for hydropower plant

Abstract

The application relates to the technical field of wireless communication networks, and discloses a 5G dual-domain intelligent access control device for a hydropower plant, which comprises a terminal module and a base station module; a scheduler in the base station initializes a production domain and a management domain scheduling queue according to slice auxiliary information, and allocates a first physical resource block group to the production domain; a system generates a mask matrix through the establishment of mapping logic of auxiliary information and the resource block group, shields the competition of the management domain for the production domain resources, a physical layer processing module acquires a fading parameter of a sounding reference signal, and the scheduler adjusts a scheduling weight according to the fading parameter; the application makes the air interface resource have a service domain sensing physical property, guarantees the exclusive transmission of production domain control signaling, realizes active interference hedging through fading parameter prediction, ensures the continuity of key services in a complex environment, and enhances the access certainty of production services and the inter-domain isolation strength.

Description

Technical Field

[0001] This invention belongs to the field of wireless communication network technology, and in particular relates to a 5G dual-domain intelligent access control device for hydropower plants. Background Technology

[0002] Currently, wireless communication technology is widely used in production inspection and administrative management. The current dual-domain networking scheme usually uses an uplink classifier on the core network side to distribute traffic. By identifying the network protocol address, data is diverted to the local edge computing node or external network, which has good applicability in general mobile communication scenarios. However, the underground powerhouse of a hydropower plant has dense metal shielding and high-voltage electromagnetic interference, and the movement of large components generates complex multipath effects. When production control and management services are concurrent, the air interface link will experience instantaneous and severe fading. The existing traffic splitting mechanism occurs on the core network side, which lacks the ability to intervene in the competition for physical resources in the air interface transmission stage in real time. The high-frequency retransmission actions generated by management domain services when the channel quality deteriorates will directly squeeze physical resource blocks.

[0003] Because the base station's media access control layer cannot perceive the domain attributes of upper-layer services, this underlying resource contention leads to access blocking of production domain commands at the base station side. The industry has attempted to alleviate resource conflicts by increasing bandwidth or base station deployment density, but this linear expansion approach fails to address the underlying contradiction between the scheduling mechanism and service domain attributes. In the critical state where impulse interference causes channel collapse, logical-level security partitioning cannot be translated into physical-level exclusive protection. For example, Chinese invention patent application CN116887261A discloses a 5G network security access method and system for hydropower stations, utilizing FlexE and VPN... While technologies such as VLANs isolate private network and public network data at the network logic level, these solutions still focus on the logical partitioning of the upper-layer protocol stack and network architecture. Essentially, they fail to address the competition for physical resource blocks (PRBs) on the 5G air interface during the real-time scheduling phase. When high-voltage pulse interference from hydropower plants induces sudden channel changes, the security partitioning at the logical layer alone cannot detect fluctuations in the physical attributes of the air interface in real time, nor can it prevent random access interference caused by physical layer congestion in management domain services. As a result, production commands still face queuing collisions and latency jitter at the base station side, making it difficult to build a truly exclusive guarantee barrier at the physical waveform scheduling level.

[0004] Therefore, the technical problem to be solved by this invention is how to construct a 5G dual-domain intelligent access control device for hydropower plants, establish a deep binding mechanism between service domain identifiers and physical layer resources on the base station side, and realize dynamic prediction and forced locking of resources based on the transient fading characteristics of the channel. Summary of the Invention

[0005] This invention provides a 5G dual-domain intelligent access control device for hydropower plants, comprising:

[0006] The terminal module is used to send a radio resource control connection establishment request message to the base station module and report single network slice selection auxiliary information (S-NSSAI) to the base station module.

[0007] The base station module communicates with the terminal module via a wireless air interface link. The base station module includes a Media Access Control (MAC) layer scheduling module and a physical layer processing module. The MAC layer scheduling module parses the S-NSSAI and initializes mutually isolated production domain scheduling queues and management domain scheduling queues within itself. The MAC layer scheduling module performs controlled allocation of physical resources through the following steps: Step S1, based on a preset resource isolation ratio, statically allocates the first physical resource block (PRB) group to the production domain scheduling queue and allocates the second physical resource block (PRB) group to the management domain scheduling queue; Step S2, establishes the address mapping relationship between the S-NSSAI and the first physical resource block (PRB) group, and based on the location... The address mapping relationship generates a physical resource mask matrix. This physical resource mask matrix is ​​used to mask the scheduling index of the management domain scheduling queue for the first physical resource block (PRB) group during the physical resource mapping stage, thereby achieving radio resource isolation. The physical layer processing module is used to monitor the sounding reference signal (SRS) sent by the terminal module in real time and extract transient fading parameters based on the energy distribution characteristics of the SRS. The MAC layer scheduling module is used to receive the transient fading parameters output by the physical layer processing module and adjust the scheduling weight of the corresponding subcarrier in the first physical resource block (PRB) group according to the mapping rules between the transient fading parameters and the preset interference compensation ladder, so as to suppress the impact of hydropower plant pulse electromagnetic interference on the control signaling transmission quality in the production domain scheduling queue.

[0008] Preferably, the physical layer processing module is used to monitor the SRS signal transmitted by the terminal module and obtain the signal-to-noise ratio (SNR) change within a 10ms sampling period; the physical layer processing module is used to determine parameters through the following steps: calculating the ratio of the SNR change to the sampling time interval within the sampling period, and obtaining the channel quality change slope as the transient fading parameter; the MAC layer scheduling module is used to increase the transmit power compensation value of the production domain scheduling queue before the physical layer bit error rate of the terminal module reaches 1% when the channel quality change slope exceeds the stored impulse interference threshold value, based on the linear monotonic relationship between the channel quality change slope and the transmit power.

[0009] Preferably, the base station module is further used to complete identity verification through the following steps: Step S21: The physical layer processing module extracts the physical layer link feature vector of the terminal module, which includes the multipath delay spread parameter and Doppler frequency shift feature value of the 5G air interface link; Step S22: Establish the feature association between the physical layer link feature vector and the identity identifier of the terminal module, and set the access permission verification threshold according to the correlation coefficient generated by the feature association; By binding the physical layer link feature vector with the permission of the terminal module to access the production domain scheduling queue, the physical attribute verification of the S-NSSAI by the 5G access network front end is realized.

[0010] Preferably, the MAC layer scheduling module is further configured to: monitor the Media Access Control Protocol Data Unit (Media Access Control Protocol) packet size and Hybrid Automatic Repeat Request (HARQ) frequency of the management domain scheduling queue; when the resource utilization rate of the second Physical Resource Block (PRB) group reaches 100% due to retransmission requests in the management domain scheduling queue, the MAC layer scheduling module is configured to suspend non-real-time service flows in the management domain scheduling queue to eliminate adjacent-channel resource interference of the management domain scheduling queue to the first Physical Resource Block (PRB) group.

[0011] Preferably, the base station module further includes an edge computing module, which is connected to the MAC layer scheduling module through a local offloading interface. The edge computing module is used to perform tunnel protocol parsing on the messages in the production domain scheduling queue and route the parsed production inspection data to the hydropower plant production local area network, so as to achieve physical isolation between the data flow of the production domain scheduling queue and the management domain data flow on the 5G access network side.

[0012] Preferably, the base station module is used to establish a channel state prediction relationship based on the transient fading parameters; when the predicted channel quality index is lower than the stored reliability boundary value, the base station module instructs the terminal module to start the multi-connection protocol stack through the radio resource control message, and completes redundant transmission of messages to the production domain scheduling queue through multiple base station module nodes distributed in the hydropower plant, using spatial diversity gain to offset the multipath effect caused by the movement of metal structural components.

[0013] Preferably, the base station module is used to monitor the cache occupancy rate of the management domain scheduling queue in real time; when the cache occupancy rate exceeds 90%, the base station module is used to reduce the management domain scheduling queue's occupation of the second physical resource block (PRB) group by reducing the modulation and coding order (MCS) of the management domain scheduling queue.

[0014] Preferably, the physical layer processing module is used to update the physical layer link feature vector library of the terminal module within a 100ms period; when the correlation coefficient drops below the access permission verification threshold, the base station module is used to disconnect the logical connection between the terminal module and the production domain scheduling queue.

[0015] Preferably, the MAC layer scheduling module is used to implement priority arbitration of the production domain scheduling queue; when core control instructions and environmental monitoring data exist simultaneously in the production domain scheduling queue, the MAC layer scheduling module is used to preferentially map the first physical resource block (PRB) group to the logical channel carrying the core control instruction tag according to the service level identifier 5QI.

[0016] Compared with existing technologies, the 5G dual-domain intelligent access control device for hydropower plants of this invention has the following advantages:

[0017] 1. In 5G dual-domain intelligent access control, by establishing a direct mapping relationship between service slice identifiers and physical resource mask matrices at the base station media access control layer, the logic of traditional dual-domain schemes relying solely on core network traffic splitting is changed. This enables the allocation of wireless air interface resources to have service domain-aware physical attributes, effectively eliminating resource conflicts caused by multipath effects in the large metal environment of hydropower plants, and ensuring that production domain control signaling obtains exclusive physical frequency band protection on the air interface side.

[0018] 2. Calculate the transient fading gradient using the detection reference signal fed back from the physical layer, and use this gradient as the trigger condition for dynamic adjustment of the medium access control layer. This enables the system to predict in advance the pulse electromagnetic interference generated by the start-up of high-voltage generator units in hydropower plants or the opening and closing of metal gates. Before the bit error rate rises, proactively complete power compensation for production domain services and flow limiting and avoidance for management domain services. This changes the passive adjustment method that lags behind channel quality feedback, ensuring the transmission continuity of critical services under transient extreme conditions.

[0019] 3. Associate the physical layer link feature vector of the terminal with the identity identifier, and set the access permission verification threshold based on the correlation coefficient. Build a deep binding mechanism between the physical layer and the protocol stack logic at the front end of the wireless access network to prevent unauthorized terminals from obtaining production domain access permissions by impersonating slice identifiers, improve the physical layer isolation strength between the hydropower plant's internal network and external network, and provide hardware-level access security at the wireless air interface link level. Attached Figure Description

[0020] Figure 1 This is the logic diagram of the 5G dual-domain intelligent access control process and dynamic scheduling of physical resources of the present invention;

[0021] Figure 2 This is a schematic diagram of the hardware topology architecture and edge computing data routing interaction of the system of the present invention. Detailed Implementation

[0022] The technical solutions of the embodiments of this application will be clearly described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0023] It should be noted that all directional and positional terms used in this invention, such as: up, down, left, right, front, back, vertical, horizontal, inner, outer, top, bottom, transverse, longitudinal, center, etc., are only used to explain the relative positional relationship and connection between components in a specific state (as shown in the accompanying drawings). They are only for the convenience of describing this invention and do not require that this invention be constructed and operated in a specific orientation. Therefore, they should not be construed as limiting this invention. In addition, the descriptions of "first," "second," etc., in this invention are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated.

[0024] In the description of this invention, unless otherwise explicitly specified and limited, the terms installation, connection, and linking should be interpreted broadly. For example, they can refer to fixed connections, detachable connections, or integral connections; they can refer to mechanical connections; they can refer to direct connections or indirect connections through an intermediate medium; they can refer to the internal connection of two components. For those skilled in the art, the specific meaning of the above terms in this invention can be understood according to the specific circumstances.

[0025] In the description of this specification, references to the terms "an embodiment," "some embodiments," "illustrative embodiments," "examples," "specific examples," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example, and the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0026] A 5G dual-domain intelligent access control device for hydropower plants includes:

[0027] The terminal module is used to send a radio resource control connection establishment request message to the base station module and report single network slice selection auxiliary information (S-NSSAI) to the base station module.

[0028] The base station module communicates with the terminal module via a wireless air interface link. The base station module includes a Media Access Control (MAC) layer scheduling module and a physical layer processing module. The MAC layer scheduling module parses the S-NSSAI and initializes mutually isolated production domain scheduling queues and management domain scheduling queues within itself. The MAC layer scheduling module performs controlled allocation of physical resources through the following steps: Step S1, based on a preset resource isolation ratio, statically allocates the first physical resource block (PRB) group to the production domain scheduling queue and allocates the second physical resource block (PRB) group to the management domain scheduling queue; Step S2, establishes the address mapping relationship between the S-NSSAI and the first physical resource block (PRB) group, and based on the location... The address mapping relationship generates a physical resource mask matrix. This physical resource mask matrix is ​​used to mask the scheduling index of the management domain scheduling queue for the first physical resource block (PRB) group during the physical resource mapping stage, thereby achieving radio resource isolation. The physical layer processing module is used to monitor the sounding reference signal (SRS) sent by the terminal module in real time and extract transient fading parameters based on the energy distribution characteristics of the SRS. The MAC layer scheduling module is used to receive the transient fading parameters output by the physical layer processing module and adjust the scheduling weight of the corresponding subcarrier in the first physical resource block (PRB) group according to the mapping rules between the transient fading parameters and the preset interference compensation ladder, so as to suppress the impact of hydropower plant pulse electromagnetic interference on the control signaling transmission quality in the production domain scheduling queue.

[0029] Preferably, the physical layer processing module is used to monitor the SRS signal transmitted by the terminal module and obtain the signal-to-noise ratio (SNR) change within a 10ms sampling period; the physical layer processing module is used to determine parameters through the following steps: calculating the ratio of the SNR change to the sampling time interval within the sampling period, and obtaining the channel quality change slope as the transient fading parameter; the MAC layer scheduling module is used to increase the transmit power compensation value of the production domain scheduling queue before the physical layer bit error rate of the terminal module reaches 1% when the channel quality change slope exceeds the stored impulse interference threshold value, based on the linear monotonic relationship between the channel quality change slope and the transmit power.

[0030] Preferably, the base station module is further used to complete identity verification through the following steps: Step S21: The physical layer processing module extracts the physical layer link feature vector of the terminal module, which includes the multipath delay spread parameter and Doppler frequency shift feature value of the 5G air interface link; Step S22: Establish the feature association between the physical layer link feature vector and the identity identifier of the terminal module, and set the access permission verification threshold according to the correlation coefficient generated by the feature association; By binding the physical layer link feature vector with the permission of the terminal module to access the production domain scheduling queue, the physical attribute verification of the S-NSSAI by the 5G access network front end is realized.

[0031] Preferably, the MAC layer scheduling module is further configured to: monitor the Media Access Control Protocol Data Unit (Media Access Control Protocol) packet size and Hybrid Automatic Repeat Request (HARQ) frequency of the management domain scheduling queue; when the resource utilization rate of the second Physical Resource Block (PRB) group reaches 100% due to retransmission requests in the management domain scheduling queue, the MAC layer scheduling module is configured to suspend non-real-time service flows in the management domain scheduling queue to eliminate adjacent-channel resource interference of the management domain scheduling queue to the first Physical Resource Block (PRB) group.

[0032] Preferably, the base station module further includes an edge computing module, which is connected to the MAC layer scheduling module through a local offloading interface. The edge computing module is used to perform tunnel protocol parsing on the messages in the production domain scheduling queue and route the parsed production inspection data to the hydropower plant production local area network, so as to achieve physical isolation between the data flow of the production domain scheduling queue and the management domain data flow on the 5G access network side.

[0033] Preferably, the base station module is used to establish a channel state prediction relationship based on the transient fading parameters; when the predicted channel quality index is lower than the stored reliability boundary value, the base station module instructs the terminal module to start the multi-connection protocol stack through the radio resource control message, and completes redundant transmission of messages to the production domain scheduling queue through multiple base station module nodes distributed in the hydropower plant, using spatial diversity gain to offset the multipath effect caused by the movement of metal structural components.

[0034] Preferably, the base station module is used to monitor the cache occupancy rate of the management domain scheduling queue in real time; when the cache occupancy rate exceeds 90%, the base station module is used to reduce the management domain scheduling queue's occupation of the second physical resource block (PRB) group by reducing the modulation and coding order (MCS) of the management domain scheduling queue.

[0035] Preferably, the physical layer processing module is used to update the physical layer link feature vector library of the terminal module within a 100ms period; when the correlation coefficient drops below the access permission verification threshold, the base station module is used to disconnect the logical connection between the terminal module and the production domain scheduling queue.

[0036] Preferably, the MAC layer scheduling module is used to implement priority arbitration of the production domain scheduling queue; when core control instructions and environmental monitoring data exist simultaneously in the production domain scheduling queue, the MAC layer scheduling module is used to preferentially map the first physical resource block (PRB) group to the logical channel carrying the core control instruction tag according to the service level identifier 5QI.

[0037] Example 1: This embodiment of the invention is applied to a 5G wireless communication environment in the underground generator layer area of ​​a hydropower plant. This generator layer area contains rotating generator sets, high-voltage transformers, and operating metal cranes. Terminal modules operating within this area communicate with base station modules via a wireless air interface link. The terminal modules simultaneously carry relay protection monitoring services in the production domain and expert video consultation services in the management domain. The relay protection monitoring service requires an air interface transmission latency of less than 10ms. When a terminal module initiates a radio resource control connection establishment request to the base station module, the media access control layer scheduling module within the base station module parses the radio resource control connection establishment request message, extracts the single network slice selection auxiliary information (S-NSSAI), and determines the slice identifier based on the extracted S-NSSAI. Internally, the media access control layer scheduling module initializes mutually isolated production domain scheduling queues and management domain scheduling queues. Based on a preset resource isolation ratio, the module statically allocates the first physical resource block (PRB) group to the production domain scheduling queue and the second PRB group to the management domain scheduling queue. During this process, the media access control layer scheduling module establishes an address mapping relationship between S-NSSAI and the first PRB group, and generates a physical resource mask matrix based on the address mapping relationship. Through the physical resource mask matrix In the physical resource mapping stage, the scheduling index of the first physical resource block (PRB) group is masked in the management domain scheduling queue. When the metal trolley in the generator layer moves between the terminal module and the base station module, causing obstruction and inducing multipath coherent fading, the physical layer processing module in the base station module monitors the sounding reference signal (SRS) sent by the terminal module in real time, and extracts transient fading parameters based on the energy distribution characteristics of the SRS. The physical layer processing module obtains the change in the reference signal received power (RSRP) within two adjacent 10ms sampling periods, and obtains the channel quality change slope, i.e., the transient fading gradient, as a transient fading parameter by calculating the ratio of the RSRP change to the sampling time interval within the sampling period. The calculation formula is as follows: ,in, For transient fading gradient, The reference signal received power for the current sampling period. The reference signal received power from the previous sampling period. This represents the time interval between two adjacent sampling periods.

[0038] When the media access control layer scheduling module determines the transient fading gradient When the absolute value exceeds the preset 15dB / ms threshold, even if the physical layer bit error rate of the terminal module has not yet reached the 1% trigger retransmission threshold, the media access control layer scheduling module initiates interference compensation. The media access control layer scheduling module suspends scheduling permissions for all downlink shared channels in the management domain scheduling queue and releases the associated second physical resource block (PRB) group, dynamically merging it into the first physical resource block (PRB) group. The media access control layer scheduling module then determines the appropriate response based on the transient fading gradient. Based on the linear monotonic relationship with transmit power, the transmit power compensation value of the production domain scheduling queue is increased, and the current modulation and coding scheme (MCS) order of the production domain scheduling queue is decreased. Based on the nonlinear saturation physical constraint principle of the power amplifier in the RF signal transmission architecture, the media access control layer scheduling module introduces a hardware safety boundary locking procedure when calculating the power compensation command. The hardware status monitoring unit within the base station module periodically reads the total output power of the current RF transceiver link and subtracts it from the factory-calibrated saturation critical power threshold of the RF power amplifier, outputting a real-time instantaneous power margin value representing the current available transmit margin. When the target power compensation amount calculated by the media access control layer scheduling module based on the aforementioned transient fading gradient linear mapping is greater than this instantaneous power margin value, the scheduling module forcibly truncates the linear mapping logic, locking the actual power increase command sent to the physical layer to this instantaneous power margin value. This prevents RF components from exceeding the limit and entering the nonlinear distortion region under deep fading compensation conditions, thus inducing adjacent channel spurious radiation. Due to the physical resource allocation logic and the transient fading gradient... A bidirectional dependency constraint was established, and the system completed the forced concession of physical resources in the management domain at the initial stage of electromagnetic interference. This ensured that the relay protection monitoring service in the production domain scheduling queue obtained exclusive physical frequency band protection during the wireless access phase. Under the condition of generating broadband electromagnetic pulses during generator start-up, the access success rate of the production domain remained at 99.9%. Furthermore, by avoiding retransmission contention of management domain services on the air interface, the air interface transmission delay of production domain control signaling remained stably within 10ms. When the physical layer processing module detected the transient fading gradient... When the absolute value is less than the threshold for three consecutive measurement cycles, the media access control layer scheduling module restores the scheduling permission of the management domain scheduling queue.

[0039] Example 2: This embodiment of the invention constructs a wireless transmission verification environment for an underground powerhouse in a hydropower plant using a physical experimental platform. This platform simulates high-voltage electromagnetic pulse interference at the generator level and multipath obstruction caused by the reciprocating movement of a metal trolley. The interference source is a controlled high-voltage discharge device used to generate broadband pulse electromagnetic waves with an instantaneous peak power of not less than 30 dBm. The obstruction is a moving metal plate array. The experimental data originates from the real-time acquisition system of the physical experimental platform. This system has a signal sampling frequency of not less than 100 MHz and a received power measurement accuracy of ±0.1 dB. The sampling period is... The sampling period is set to 10ms. The decision-making logic lies in the trade-off between the timeliness of channel change capture and the processing load of the base station module. When the terminal module moves at a patrol speed of 2m / s and the carrier frequency is 4.9GHz, the channel coherence time is approximately 20ms. To satisfy the sampling theorem and prevent signal feature aliasing, the sampling period... The value tends to be less than 0.5 times the channel coherence time, resulting in an engineering example value of 10ms. The verification process is divided into four sample groups. In this invention, the slice attribute identification function and physical resource mask matrix of the media access control layer scheduling module are activated. Generation mechanism and transient fading gradient-based generation mechanism The control group adopted a dynamic resource compensation mechanism; the control group adopted a conventional 5G proportional fair scheduling mechanism, without activating service domain identification and resource physical isolation functions; the partially missing control group retained static resource isolation, but disabled transient fading gradient-based functions. Interference hedging mechanism; the out-of-range control group set the response threshold to 10.5dB / ms, deviating from the 1.5dB / ms optimization range determined in this invention. The test signal source actively superimposed Gaussian white noise with a signal-to-noise ratio of 15dB to simulate the electromagnetic environment of real industrial background. When the metal plate array cuts into the direct path between the terminal module and the base station module, the physical layer processing module monitors the power jump of the detection reference signal SRS sent by the terminal module in real time, and monitors the reference signal received power of the previous sampling period. The value is -82.1 dBm, while the reference signal received power for the current sampling period is... The transient fading gradient is -105.3 dBm. The physical layer processing module calculates the transient fading gradient according to the following formula. : ,in, For transient fading gradient, The reference signal received power for the current sampling period. The reference signal received power from the previous sampling period. This represents the time interval between two adjacent sampling periods.

[0040] Due to the calculated transient fading gradient The absolute value is 2.32 dB / ms, exceeding the preset threshold of 1.5 dB / ms. The media access control layer scheduling module then initiates interference compensation, and the physical resource mask matrix... Physical locking of the first Physical Resource Block (PRB) group in the production domain was completed, and the second PRB group in the management domain was forcibly released for power gain combining. Data shows that the success rate of production domain access in the sample group of this invention after fading occurred was 99.92%, and the air interface transmission latency remained at 7.8ms. In contrast, the control group experienced physical layer congestion due to a large number of retransmission requests triggered by management domain services, resulting in a production domain access success rate of 76.5% and a latency increase to 54.2ms. Although the partially missing control group had static isolation, the lack of dynamic compensation led to insufficient signal-to-noise ratio, resulting in an access success rate of only 88.3%. This confirms the supporting role of the synergistic effect of various technical features in access determinism. Gradient verification revealed that as the interference intensity increases, the access latency of the sample group of this invention exhibits obvious linear control characteristics. When the absolute value varies between 1.5 dB / ms and 2.5 dB / ms, the system delay fluctuation is less than 1.2 ms. When the gradient exceeds the performance inflection point of 2.8 dB / ms, the delay growth curve tends to flatten out because the physical layer thermal noise limitation and resource merging gain reach equilibrium. This result indicates that the physical resource mask matrix... With transient fading gradient The coupling of the prediction mechanism limits the impact of physical environment fluctuations on service access to a preset protocol stack tolerance range, enabling exclusive transmission of production domain services in complex wireless environments.

[0041] Example 3: This example combines Figures 1 to 2 A description of a 5G dual-domain intelligent access control device for hydropower plants, such as... Figure 1 As shown, the terminal transmits a radio signal containing a sounding reference signal (SRS) via a wireless air interface link for the physical layer to extract energy characteristics. Simultaneously, it initiates an RRC connection request to the base station and reports Single Network Slice Selection Auxiliary Information (S-NSSAI). The media access control layer scheduling module inside the base station parses the S-NSSAI and initializes the production domain and management domain scheduling queues. Based on a preset isolation ratio, the first PRB group and the second PRB group are statically allocated to the corresponding queues. The system generates a physical resource mask matrix by establishing an address mapping relationship, thereby shielding the management domain from competition for production domain resources. Under controlled allocation, the physical layer processing module extracts transient fading parameters and feeds them back to the MAC layer. The scheduling module dynamically adjusts the subcarrier scheduling weights to suppress the impact of hydropower plant pulse electromagnetic interference on production domain signaling.

[0042] like Figure 2As shown, the terminal node located at the generator layer initiates an RRC connection request and reports S-NSSAI through the terminal module. This signal is transmitted to the 5G base station hardware node via the 5G wireless air interface link. The physical layer processing module in the base station monitors the SRS in real time and extracts transient fading parameters, which are fed back to the media access control layer scheduling module for mask matrix generation and scheduling weight adjustment. At the same time, the base station connects to the edge computing processing node through the local offloading interface. The edge computing module performs tunnel protocol parsing on the production domain packets and finally routes the production inspection data to the hydropower plant's production local area network, realizing physical isolation and secure routing of data flow on the access network side.

[0043] Example 4: In the parameter initialization phase of the 5G communication system in a hydropower plant, the physical layer processing module initiates the benchmark calibration of the pulse interference threshold. During the no-service period when the rotating generator is stopped and the metal crane is stationary, the physical layer processing module opens the base station module's receiving window and samples the environmental background signal within 100 sampling periods. The physical layer processing module extracts the energy fluctuation sequence by calculating the first derivative of the reference signal received power RSRP. The physical layer processing module calculates three times the standard deviation of the energy fluctuation sequence and defines it as the environmental background noise jitter boundary. After the generator reaches its rated speed, the physical layer processing module samples again to obtain the fading gradient sequence containing broadband pulse electromagnetic interference. The physical layer processing module extracts the average amplitude of the top 5% of the most frequent occurrences in the fading gradient sequence and adds 1.2 times the protocol stack safety margin, thereby determining the pulse interference threshold value to be 15dB / ms, where RSRP is the reference signal received power and 15dB / ms is the pulse interference threshold value, which is used to trigger interference compensation.

[0044] The Media Access Control Layer (Media Access Control) scheduling module receives the Single Network Slice Selection Auxiliary Information (S-NSSAI) sent by the terminal module, extracts the Service Class Index (PSI) contained in the information, and determines the total Physical Resource Block (PRB) requirement of the production domain based on the PSI. The media access control layer scheduling module traverses the physical resource block index in ascending frequency order within the available frequency band, and the physical address allocation module allocates the previous... A contiguous set of physical resource block indexes is allocated to the production domain and a physical address set is generated. The media access control layer scheduling module schedules based on the physical address set. The media access control layer scheduling module constructs a bitmap vector and then selects the set of physical addresses from the bitmap vector. The specified position is set to 1, and the other positions are set to 0, thereby generating the physical resource mask matrix. Based on this, the media access control layer scheduling module, during the subframe scheduling phase, combines the physical resource request vector of the management domain scheduling queue with the physical resource mask matrix. The inverse code performs bitwise AND logical operations, which filters the scheduling instructions of the management domain before physical layer mapping, thereby locking the physical resources of the production domain. Here, S-NSSAI is the single network slice selection auxiliary information; PRB is the physical resource block. The total physical resource block requirement for the production domain; For the set of physical addresses of physical resource blocks in the production domain; This is the physical resource mask matrix.

[0045] The terminal module initiates a production domain radio resource control connection establishment request to the base station module. The physical layer processing module extracts the physical layer link feature vector of the terminal module. This physical layer link feature vector includes multipath delay spread parameters and Doppler frequency shift characteristic values. The physical layer processing module obtains the air interface link impulse response function through discrete Fourier transform, determines the multipath delay spread parameters based on the delay span corresponding to a 10dB decrease in impulse response amplitude, and calculates the Doppler frequency shift characteristic values ​​based on the center frequency offset of the sounding reference signal (SRS). Based on the dimensionless alignment principle in multidimensional physical parameter space measurement, after extracting the above physical quantities with different international standard units, the physical layer processing module performs a standardized mapping of the feature vector. The physical layer processing module retrieves pre-recorded data from its local memory. The maximum historical multipath delay spread extreme value of the hydropower plant environment is used to divide the currently calculated multipath delay spread parameter by this historical maximum extreme value, outputting a dimensionless delay feature component. Simultaneously, the theoretical maximum frequency offset derived from the rated operating speed of the generator-level metal trolley is extracted. The current Doppler frequency shift feature value is divided by this theoretical maximum frequency offset, outputting a dimensionless frequency shift feature component. The physical layer processing module sequentially concatenates the dimensionless delay feature component and the dimensionless frequency shift feature component in the digital baseband domain, thereby constructing a standardized physical layer link feature vector that eliminates the influence of dimensional distortion. The identity verification module retrieves the pre-stored feature reference of the terminal module stored in the base station database. The identity verification module calculates the cosine similarity between the physical layer link feature vector and the pre-stored feature reference to obtain the correlation coefficient. The identity verification module uses the correlation coefficient. Control access permissions, when the correlation coefficient A correlation coefficient greater than or equal to 0.85 indicates successful authentication; the base station module establishes a wireless resource control connection and binds production domain access permissions. When the correlation coefficient is between 0.6 and 0.85, the base station module sends a secondary challenge authentication message; when the correlation coefficient is between 0.6 and 0.85, the base station module sends a secondary challenge authentication message. When the value is less than 0.6, the base station module directly rejects the connection establishment request of the terminal module, where SRS is the detection reference signal; This is the correlation coefficient between the physical layer link feature vector and the pre-stored feature benchmark. It is a dimensionless parameter. Under the condition of broadband pulse electromagnetic interference generated by the generator set, the physical layer processing module detects the transient fading gradient. When the impulse interference threshold is exceeded, the media access control layer scheduling module determines the threshold based on the transient fading gradient. The amplitude range is adjusted using a discretized modulation and coding scheme (MCS) to adjust the MCS level, when the transient fading gradient... When the frequency is in the range of 15dB / ms to 20dB / ms, the media access control layer scheduling module reduces the MCS order of the current production domain scheduling queue from 28th to 20th; when the transient fading gradient... When the signal strength exceeds 20 dB / ms, the media access control layer scheduling module switches the modulation mode to QPSK mode to enhance signal transmission redundancy and physical resource mask matrix. The linkage adjustment with the modulation and coding scheme (MCS) ensures that the one-way access delay of production domain control signaling is maintained at 8.2ms in electromagnetic interference environments, realizing service domain isolation and deterministic transmission in the wireless access process.

[0046] Example 5: When deploying a 5G wireless communication network in the underground powerhouse of a hydropower plant, the physical layer processing module generates a wireless environment feature library. The system control unit drives the terminal module to transmit detection reference signals (SRS) at sampling points within the generator layer. The base station module receives the SRS and calculates the corresponding physical layer link feature vector. The identity verification module stores the collected multi-dimensional signal parameters in local memory to generate a pre-stored feature benchmark. The update cycle of the pre-stored feature benchmark is set to 720 hours. It triggers periodic reconstruction based on changes in the metal structural components and environmental multipath distribution within the hydropower plant to maintain the correlation coefficient. The judgment weight is determined when the sampling point density is not less than 1 point / m. 2 At that time, the pre-stored feature benchmarks cover the non-line-of-sight transmission paths of the underground plant.

[0047] When the system faces terminal module updates or access point expansion, the identity verification module initiates on-site calibration of the access permission verification threshold. The system control unit obtains 50 sets of original physical layer link feature vectors of the terminal module under line-of-sight transmission conditions and calculates the covariance matrix of the original physical layer link feature vectors relative to the environmental baseline distribution. The identity verification module determines the distribution range of the eigenvalues ​​of the covariance matrix as the physical feature range of the terminal module. The media access control layer scheduling module synchronously retrieves the interference distribution record and matches the 15dB / ms pulse interference threshold with the production domain air interface resource locking logic based on the mapping relationship between the environmental signal-to-noise ratio (SNR) fluctuation amplitude and the modulation and coding scheme (MCS) order jump. The one-way access delay of the production domain control signaling is maintained at 8.5ms in the multipath interference environment of the underground plant.

[0048] Example 6: In the calibration of 5G intelligent access control equipment in the enclosed underground space of a hydropower plant, the system control unit drives the terminal module to transmit detection reference signals (SRS) at 100 preset test points with multipath interference. The physical layer processing module performs a 2048-point fast Fourier transform on the received SRS and extracts the difference between the maximum and minimum delay paths in the impulse response function as the multipath delay spread parameter. The identity verification module inputs 500 sets of collected link feature vectors into the statistical analysis unit. The statistical analysis unit calculates the mean center of the link feature vectors in Euclidean space and determines the mean center as the pre-stored feature benchmark. The statistical analysis unit calculates the statistical distribution of the feature vectors of authorized devices deviating from the pre-stored feature benchmark and sets the lower limit of the similarity interval containing 99.7% of the sample size as the correlation coefficient. The first judgment threshold is 0.85, and the lower limit of the similarity interval containing 99.9% of the samples is simultaneously set as the second judgment threshold of 0.6; where SRS is the detection reference signal. The correlation coefficient represents the cosine similarity between the physical layer link feature vector and the pre-stored feature benchmark.

[0049] When the system enters the anti-interference logic configuration phase, the media access control layer scheduling module generates an adaptive scheduling mapping table. The physical layer processing module simulates environmental signal-to-noise ratio (SNR) fluctuations within the 0dB to 30dB range in the laboratory using a noise generator, monitoring the physical layer bit error rate (BER) under different modulation and coding scheme (MCS) orders. Based on the constraint that the BER is below 0.001, the media access control layer scheduling module searches for available MCS orders for each SNR level and establishes an interference mitigation control matrix containing 28 quantization levels. When the physical layer processing module detects the transient fading gradient... The resource locking logic is triggered. The media access control layer scheduling module retrieves the interference mitigation control matrix, increases the transmit power compensation value of the production domain scheduling queue by 3dB, and lowers the modulation and coding scheme (MCS) by 4 orders based on the current signal-to-noise ratio (SNR) drop amplitude. This ensures that the residual gain of the wireless link for production domain control services remains positive under the high-voltage pulse environment of the underground plant. Here, SNR is the signal-to-noise ratio, and BER is the bit error rate. The gradient is the transient fading gradient, and MCS is the modulation and coding strategy.

[0050] The embodiments of this application have been described above with reference to the accompanying drawings. Unless otherwise specified, the embodiments and features in the embodiments of this application can be combined with each other. This application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit of this application and the scope of protection of this invention, and all of these forms are within the protection scope of this application.

Claims

1. A 5G dual-domain intelligent access control device for a hydropower plant, characterized in that, include: The terminal module is used to send a radio resource control connection establishment request message to the base station module and report single network slice selection auxiliary information (S-NSSAI) to the base station module. The base station module communicates with the terminal module via a wireless air interface link. The base station module includes a Media Access Control (MAC) layer scheduling module and a physical layer processing module. The MAC layer scheduling module parses the S-NSSAI and initializes mutually isolated production domain scheduling queues and management domain scheduling queues within itself. The MAC layer scheduling module performs controlled allocation of physical resources through the following steps: Step S1, based on a preset resource isolation ratio, statically allocates the first physical resource block (PRB) group to the production domain scheduling queue and allocates the second physical resource block (PRB) group to the management domain scheduling queue; Step S2, establishes a connection between the S-NSSAI and the first physical resource block (PRB). The physical layer processing module establishes the address mapping relationship of the PRB group and generates a physical resource mask matrix based on this address mapping relationship. This physical resource mask matrix is ​​used to mask the scheduling index of the first physical resource block (PRB) group by the management domain scheduling queue during the physical resource mapping stage, thereby achieving radio resource isolation. The physical layer processing module monitors the sounding reference signal (SRS) sent by the terminal module in real time and extracts transient fading parameters based on the energy distribution characteristics of the SRS. The MAC layer scheduling module receives the transient fading parameters output by the physical layer processing module and adjusts the scheduling weight of the corresponding subcarrier in the first physical resource block (PRB) group according to the mapping rules between the transient fading parameters and the preset interference compensation ladder.

2. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The physical layer processing module is used to monitor the SRS signal sent by the terminal module and obtain the signal-to-noise ratio (SNR) change within a 10ms sampling period. The physical layer processing module is used to determine parameters through the following steps: calculating the ratio of the SNR change to the sampling time interval within the sampling period, and obtaining the channel quality change slope as the transient fading parameter. The MAC layer scheduling module is used to increase the transmit power compensation value of the production domain scheduling queue before the physical layer bit error rate of the terminal module reaches 1% when the channel quality change slope exceeds the stored impulse interference threshold value, based on the linear monotonic relationship between the channel quality change slope and the transmit power.

3. The 5G dual-domain intelligent access control device for a hydropower plant of claim 2, wherein, The base station module is also used to complete identity verification through the following steps: Step S21: The physical layer processing module extracts the physical layer link feature vector of the terminal module, which includes the multipath delay spread parameter and Doppler frequency shift feature value of the 5G air interface link; Step S22: Establish the feature association between the physical layer link feature vector and the identity identifier of the terminal module, and set the access permission verification threshold according to the correlation coefficient generated by the feature association; By binding the physical layer link feature vector with the permission of the terminal module to access the production domain scheduling queue, the physical attribute verification of the S-NSSAI by the 5G access network front end is realized.

4. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The MAC layer scheduling module is also used to monitor the Media Access Control Protocol Data Unit (Media Access Control Protocol) packet size and Hybrid Automatic Repeat Request (HARQ) frequency of the management domain scheduling queue; when the resource utilization of the second physical resource block (PRB) group reaches 100% due to retransmission requests in the management domain scheduling queue, the MAC layer scheduling module is used to suspend the non-real-time service flow in the management domain scheduling queue to eliminate the adjacent channel resource interference of the management domain scheduling queue to the first physical resource block (PRB) group.

5. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The base station module also includes an edge computing module, which is connected to the MAC layer scheduling module through a local offloading interface. The edge computing module is used to perform tunnel protocol parsing on the messages in the production domain scheduling queue and route the parsed production inspection data to the hydropower plant production local area network, so as to achieve physical isolation between the data flow of the production domain scheduling queue and the management domain data flow on the 5G access network side.

6. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The base station module is used to establish a channel state prediction relationship based on the transient fading parameters. When the predicted channel quality index is lower than the stored reliability boundary value, the base station module instructs the terminal module to start the multi-connection protocol stack through the radio resource control message. The message of the production domain scheduling queue is redundantly transmitted through multiple base station module nodes distributed in the hydropower plant, and the spatial diversity gain is used to offset the multipath effect caused by the movement of metal structural components.

7. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The base station module is used to monitor the cache occupancy rate of the management domain scheduling queue in real time. When the cache occupancy rate exceeds 90%, the base station module is used to reduce the management domain scheduling queue's occupation of the second physical resource block (PRB) group by reducing the modulation and coding order (MCS) of the management domain scheduling queue.

8. The 5G dual-domain intelligent access control device for a hydropower plant of claim 3, wherein, The physical layer processing module is used to update the physical layer link feature vector library of the terminal module within a 100ms period; when the correlation coefficient drops below the access permission verification threshold, the base station module is used to disconnect the logical connection between the terminal module and the production domain scheduling queue.

9. The 5G dual-domain intelligent access control device for a hydropower plant of claim 1, wherein, The MAC layer scheduling module is used to implement priority arbitration of the production domain scheduling queue. When core control instructions and environmental monitoring data exist simultaneously in the production domain scheduling queue, the MAC layer scheduling module is used to preferentially map the first physical resource block (PRB) group to the logical channel carrying the core control instruction tag according to the service level identifier 5QI.

Images