A radar station equipment state data acquisition system and control method

Abstract

The application belongs to the technical field of radar data collection, and particularly relates to a radar station equipment state data collection system and a control method, the method comprising: when an effective identity identifier exists in a data collection terminal, checking whether an identity certificate exists in the terminal, when the identity certificate exists, the data collection terminal carries its own identity information to send a connection request to a radar data terminal; an identity authentication processing component of the radar data terminal carries out legality verification on the identity information, and returns a request response information to complete establishment of a communication link between the radar data terminal and the data collection terminal after verification; the data collection terminal executes a collection task based on the established communication link through a collection thread pool, and returns a failure prompt information after verification fails; the collection task requests required module data from the radar data terminal. The safety and integrity of radar data are ensured.

Description

Technical Field

[0001] This invention belongs to the field of radar data acquisition technology, specifically relating to a radar station equipment status data acquisition system and control method. Background Technology

[0002] Meteorological observation and equipment support capabilities are the two cornerstones of meteorological work, providing crucial data support and technical assurance for weather forecasting and disaster early warning. However, current weather radar station data acquisition systems face numerous challenges. Many radar stations still employ a simple point-to-point communication mode. While this mode may be sufficient when the number of devices is small and their distribution is relatively concentrated, its problems—low communication efficiency, poor data security, and complex device access management—become glaringly apparent in large radar networks. Especially with the increasing variety and wider distribution of meteorological observation equipment, the limitations of this point-to-point communication mode are becoming increasingly prominent.

[0003] Furthermore, traditional data acquisition systems often employ a single acquisition thread to handle data collection tasks. While this might be manageable with small data volumes and low acquisition frequencies, its efficiency becomes inadequate when faced with the need for large-scale concurrent data acquisition. This inefficient data acquisition method not only affects the real-time performance and accuracy of meteorological data but also increases system resource consumption and maintenance costs.

[0004] Traditional data acquisition methods lack robust authentication mechanisms, making it easy for unauthorized devices or malicious users to access radar data terminals, stealing or tampering with meteorological data. This poses a serious threat to the normal operation of radar stations and the security of meteorological data. Therefore, improving and optimizing current data acquisition systems to enhance data acquisition efficiency and security has become an urgent problem to be solved in meteorological work. Summary of the Invention

[0005] To address the aforementioned problems with traditional radar station data acquisition systems, this invention provides a radar station equipment status data acquisition system and control method.

[0006] In a first aspect, the technical solution of the present invention provides a radar station equipment status data acquisition system, including a radar data terminal and several data acquisition terminals; Both the data acquisition terminal and the radar data terminal are equipped with identity authentication processing components; When a data acquisition terminal needs to acquire data from a radar data terminal, the data acquisition terminal's identity authentication processing component checks whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request carrying its own identity information; wherein, the identity information includes an identity identifier and an identity credential. The radar data terminal's identity authentication processing component verifies the legitimacy of the identity information. If the verification fails, a failure message is returned. If the verification is successful, a request response message is returned to complete the establishment of a communication link between the radar data terminal and the data acquisition terminal. Based on the established communication link, the data acquisition terminal executes acquisition tasks through an acquisition thread pool. The acquisition tasks request the required data from the radar data terminal.

[0007] By incorporating authentication processing components in both the data acquisition terminal and the radar data terminal, the authenticity and legitimacy of the identities of both parties exchanging data are ensured. This mechanism effectively prevents unauthorized access and data theft, significantly enhancing the overall security of the system.

[0008] Before initiating a data request, the data acquisition terminal first checks whether it possesses valid identification and credentials. This process design makes data requests more standardized and regulated. Only when all verification conditions are met will the next connection request be initiated, avoiding resource waste caused by invalid requests.

[0009] As a preferred embodiment of the technical solution of the present invention, the radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the length of the data packet exceeds the maximum length specified by the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length and then stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

[0010] As a preferred embodiment of the present invention, the system further includes an identity authentication server. When an identity identifier needs to be applied for, the identity authentication processing component initiates identity authentication with the identity authentication server based on the identity identifier. After successful authentication, the identity authentication server generates the identity credential of the terminal and returns it to the identity authentication processing component for storage.

[0011] As a preferred embodiment of the present invention, when an identity credential is required, the identity authentication processing component sends a request to the identity authentication server to request an identity identifier. The identity authentication server generates an identity identifier based on the received request and sends it to the identity authentication processing component of the terminal for storage.

[0012] Centralized management of the generation and distribution of identity identifiers and credentials through an identity authentication server simplifies the identity management process. Terminals no longer need to generate or manage this sensitive information themselves, reducing security risks caused by mismanagement. The identity authentication processing component can initiate identity authentication or identity identifier requests to the identity authentication server as needed, improving the flexibility of identity authentication. Different terminals can flexibly choose the identity authentication method according to their actual needs and security requirements.

[0013] As a preferred embodiment of the technical solution of the present invention, the system further includes a key management server, which calculates a private key based on the master key and the identifier, and issues it to the applicant. The applicant includes a data acquisition terminal, a radar data terminal, and an identity authentication server. By introducing a key management server, the system can securely generate and distribute private keys based on the master key and the identifier, ensuring the communication security between the various applicants (including the data acquisition terminal, the radar data terminal, and the identity authentication server).

[0014] As a preferred embodiment of the present invention, the identity authentication server uses its own address information as the signature public key to apply to the key management server for a signature private key and an encryption / decryption key pair, wherein the address information includes an IP address and port information; and the encryption / decryption key pair includes an encryption public key and a decryption private key. The identity authentication processing component obtains the terminal's device information as identity information, encrypts it using a public key to generate an encryption request, and sends it to the identity authentication server; the terminal includes a data acquisition terminal and a radar data processing terminal. After receiving the encryption request, the identity authentication server decrypts it using the decryption private key, calculates a digest of the decrypted identity field, generates an identity identifier, signs the generated identity identifier, and returns the identity identifier and signature result to the identity authentication processing component. The identity authentication processing component receives the identity identifier and signature result, verifies the signature result, and saves the identity identifier after successful verification.

[0015] As a preferred embodiment of the technical solution of the present invention, after the identity authentication processing component of the radar data terminal obtains the identity identifier, it uses the identity identifier as a public key to apply for a signature private key from the key management server. The identity authentication processing component of the radar data terminal uses a signature private key to verify the legitimacy of the identity information.

[0016] As a preferred embodiment of the present invention, the identity authentication processing component sends an initial request to the identity authentication server to obtain identity credentials. After receiving the initial request, the identity authentication server generates a random number and returns it to the identity authentication processing component. The identity authentication processing component signs the identity identifier and the received random number using its own private key, and generates an acquisition request based on the signature result and sends it to the identity authentication server. After receiving the retrieval request, the identity authentication server verifies that the random number, signature, and identity are all valid, and then generates an identity credential and sends it back to the identity authentication processing component.

[0017] In a second aspect, the present invention provides a method for acquiring and controlling radar station equipment status data, applied to the system described in the first aspect, the method comprising: When a data acquisition terminal needs to acquire data from a radar data terminal, the data acquisition terminal's identity authentication processing component checks whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request to the radar data terminal carrying its own identity information. The identity information includes an identity identifier and an identity credential. The identity authentication processing component of the radar data terminal verifies the legitimacy of the identity information. If the verification fails, a failure message is returned; if the verification is successful, a request response message is returned to complete the establishment of the communication link between the radar data terminal and the data acquisition terminal. The data acquisition terminal executes acquisition tasks through an acquisition thread pool based on the established communication link. The acquisition task requests the required module data from the radar data terminal according to its own number, module number, task type, and task rule information.

[0018] As a preferred embodiment of the technical solution of the present invention, the method further includes: The radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the data packet length exceeds the maximum length specified by the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length before being stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

[0019] As a preferred embodiment of the present invention, when the data acquisition terminal does not have a valid identity identifier, the identity authentication processing component initiates identity authentication to the identity authentication server based on the identity identifier. After successful authentication, the identity authentication server generates the identity credential of the terminal and returns it to the identity authentication processing component for storage.

[0020] As a preferred embodiment of the present invention, when the data acquisition terminal does not have an identity credential, the identity authentication processing component sends a request to the identity authentication server to apply for an identity identifier. The identity authentication server generates an identity identifier based on the received request and sends it to the identity authentication processing component of the terminal for storage.

[0021] As a preferred embodiment of the technical solution of the present invention, the system further includes a key management server, which calculates a private key based on the master key and the identifier, and issues it to the applicant, wherein the applicant includes a data acquisition terminal, a radar data terminal, and an identity authentication server; As a preferred embodiment of the technical solution of the present invention, the method further includes: The identity authentication server uses its own address information as the signature public key to request a signature private key and an encryption / decryption key pair from the key management server. The address information includes the IP address and port information; the encryption / decryption key pair includes the encryption public key and the decryption private key. The identity authentication processing component obtains the terminal's device information as identity information, encrypts it using a public key to generate an encryption request, and sends it to the identity authentication server; the terminal includes a data acquisition terminal and a radar data processing terminal. After receiving the encryption request, the identity authentication server decrypts it using the decryption private key, calculates a digest of the decrypted identity field, generates an identity identifier, signs the generated identity identifier, and returns the identity identifier and signature result to the identity authentication processing component. The identity authentication processing component receives the identity identifier and signature result, verifies the signature result, and saves the identity identifier after successful verification.

[0022] As a preferred embodiment of the technical solution of the present invention, the method further includes: After obtaining the identity identifier, the identity authentication processing component of the radar data terminal uses the identity identifier as a public key to apply for a signature private key from the key management server; The identity authentication processing component of the radar data terminal uses a signature private key to verify the legitimacy of the identity information.

[0023] As a preferred embodiment of the technical solution of the present invention, the method further includes: The identity authentication processing component sends an initial request to the identity authentication server to obtain identity credentials. After receiving the initial request, the identity authentication server generates a random number and returns it to the identity authentication processing component. The identity authentication processing component signs the identity identifier and the received random number using its own private key, and generates an acquisition request based on the signature result and sends it to the identity authentication server. After receiving the retrieval request, the identity authentication server verifies that the random number, signature, and identity are all valid, and then generates an identity credential and sends it back to the identity authentication processing component.

[0024] As can be seen from the above technical solutions, the present invention has the following advantages: the system adopts a data acquisition thread pool technology, which can dynamically allocate acquisition threads according to task requirements, realizing large-scale concurrent data acquisition. This not only improves the speed and efficiency of data acquisition, but also reduces the consumption of system resources.

[0025] The system verifies the legitimacy of the data acquisition terminal's identity information through an identity authentication processing component, effectively preventing access by unauthorized devices or malicious users and ensuring the security and integrity of radar data. Simultaneously, the dual verification mechanism of identity identifiers and credentials further enhances the system's security capabilities. The unified management of the data acquisition terminal's identity information through an identity authentication server simplifies the complexity of device access and management. Furthermore, the system supports task allocation and scheduling based on information such as the data acquisition terminal's serial number and module number, enabling comprehensive and accurate monitoring of the radar station's equipment status. Attached Figure Description

[0026] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0027] Figure 1 This is a schematic block diagram of a system according to an embodiment of the present invention.

[0028] Figure 2 This is a schematic flowchart of a method according to an embodiment of the present invention. Detailed Implementation

[0029] To enable those skilled in the art to better understand the technical solutions of this invention, the technical solutions of the embodiments of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this invention, and not all embodiments. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this invention.

[0030] like Figure 1 As shown, this embodiment of the invention provides a radar station equipment status data acquisition system, including a radar data terminal, an identity authentication server, and several data acquisition terminals; Both the data acquisition terminal and the radar data terminal are equipped with identity authentication processing components; When a data acquisition terminal needs to acquire data from a radar data terminal, the data acquisition terminal's identity authentication processing component checks whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request carrying its own identity information; wherein, the identity information includes an identity identifier and an identity credential. The radar data terminal's identity authentication processing component verifies the legitimacy of the identity information. If the verification fails, a failure message is returned. If the verification is successful, a request response message is returned to complete the establishment of a communication link between the radar data terminal and the data acquisition terminal. Based on the established communication link, the data acquisition terminal executes acquisition tasks through the acquisition thread pool. The acquisition task requests the required data from the radar data terminal according to its own number, module number, task type, and task rule information.

[0031] Conventional radar systems generally consist of a directional antenna, transmitter, receiver, antenna controller, display and photographic equipment, computer, and image transmission components. The front-end unit (i.e., the radar data terminal of this application) at meteorological radar stations is a dedicated radar front-end unit deployed in meteorological radar stations nationwide. This front-end unit primarily connects the mainframes and key equipment of each radar station, performing preprocessing and forwarding of various radar data.

[0032] By incorporating authentication processing components in both the data acquisition terminal and the radar data terminal, the authenticity and legitimacy of the identities of both parties exchanging data are ensured. This mechanism effectively prevents unauthorized access and data theft, significantly enhancing the overall security of the system.

[0033] Before initiating a data request, the data acquisition terminal first checks whether it possesses a valid identity identifier and credentials. This process design makes data requests more standardized and regulated. Only when all verification conditions are met will the next connection request be initiated, avoiding resource waste caused by invalid requests.

[0034] After successful authentication, the radar data terminal quickly returns a request-response message, establishing a communication link between the data acquisition terminal and the radar data terminal. This rapid response mechanism reduces communication latency and improves the efficiency of data exchange.

[0035] The data acquisition terminal executes acquisition tasks through an acquisition thread pool. Each task has its own unique ID, module ID, task type, and task rule information. This task management approach makes data acquisition more flexible and efficient, allowing for rapid adjustments to acquisition strategies based on different needs. When authentication fails, the radar data terminal returns a failure message. This clear error feedback mechanism helps users quickly locate the problem and take appropriate corrective measures, improving system availability and user experience.

[0036] This identity authentication and data collection mechanism provides reliable technical support for data integration and sharing between different systems. By ensuring the legality and security of data, it promotes data flow and collaboration across systems and platforms.

[0037] In some embodiments, the radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the length of the data packet exceeds the maximum length specified by the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length and then stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

[0038] In some embodiments, the radar data terminal is equipped with attribute operation rules; these mainly refer to setting a series of rules for the attribute value fields that need to be processed in the protocol. The currently supported rule processors include arithmetic operators, such as addition and subtraction operators; comparison operators, such as greater than, less than, and equal to operators; and set operators. A binary tree rule can be configured using a sequence number to perform related complex data calculations.

[0039] The radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task performs concatenation verification on the data packets, parses them according to the protocol rules, loads and applies the corresponding attribute operation rules based on the attribute identifier of the acquired data, standardizes the processed data, and stores it in the data acquisition terminal.

[0040] In some embodiments, the radar data terminal sends the corresponding data packet to the designated acquisition task according to the request of the data acquisition terminal. After receiving the data packet, each acquisition task first performs a concatenation check to ensure that the data packet has not been concatenated or lost during transmission. These data packets may become stuck together due to network transmission issues, forming a large packet. The received packets are segmented to attempt to reconstruct the original packets. This segmentation is typically based on delimiters or a fixed length. Each segmented packet undergoes an integrity check. This can be done by calculating a checksum (such as an IP checksum) or hash value and comparing it with a checksum provided by the sender (radar data terminal). If packets need to be reassembled due to sticking together, the receiver sorts and reassembles them based on information such as sequence numbers or timestamps. During reassembly, the integrity of the packets is checked again to ensure the reassembled packets are correct. After completing the sticking checksum and data reassembly, the receiver performs a final data verification. This includes checking whether the packet content conforms to business logic and the expected format, and whether it contains valid data. Once the packet passes verification, it can be applied to the corresponding business scenario, such as data processing, storage, or analysis.

[0041] For data packets that meet the integrity requirements, the acquisition task parses them according to predefined protocol rules to extract valid data. Based on the attribute identifiers of the acquired data, the acquisition task loads the corresponding attribute operation rules. These operation rules are applied to process the extracted valid data, such as converting data formats and calculating derived data. The processed data is then formatted according to a unified standard to ensure accuracy and consistency. The standardized data is stored in a designated location on the data acquisition terminal for subsequent use and analysis. Data packet verification and protocol parsing ensure data integrity and correctness, reducing errors caused by data errors or loss. The application of attribute operation rules allows the acquisition task to flexibly process data according to different attributes, improving data processing efficiency and accuracy. Data standardization unifies data from different sources and in different formats under the same standard, facilitating subsequent data analysis and mining. Storing the processed data on the data acquisition terminal optimizes storage management and improves data accessibility and usage efficiency.

[0042] In some embodiments, when an identity identifier is required, the identity authentication processing component initiates identity authentication with the identity authentication server based on the identity identifier. After successful authentication, the identity authentication server generates the terminal's identity credential and returns it to the identity authentication processing component for storage.

[0043] When an identity credential is required, the identity authentication processing component sends a request to the identity authentication server to request an identity identifier. The identity authentication server generates an identity identifier based on the received request and sends it to the identity authentication processing component of the terminal for storage.

[0044] The identity authentication processing component sends an authentication request to the identity authentication server, ensuring that only verified terminals can obtain valid identity identifiers and credentials. This mechanism effectively prevents unauthorized terminals from accessing the system, enhancing system security and reliability.

[0045] Centralized management of the generation and distribution of identity identifiers and credentials through an identity authentication server simplifies the identity management process. Terminals no longer need to generate or manage this sensitive information themselves, reducing security risks caused by mismanagement. The identity authentication processing component can initiate identity authentication or identity identifier requests to the identity authentication server as needed, improving the flexibility of identity authentication. Different terminals can flexibly choose the identity authentication method according to their actual needs and security requirements.

[0046] This technical solution allows the identity authentication server to dynamically generate identity identifiers and credentials based on terminal requests, enhancing system scalability. As the system scales or the number of terminals increases, the identity authentication server can easily adapt to these changes and meet system requirements. Unified generation and management of identity identifiers and credentials through the identity authentication server promotes system standardization and normalization. This helps ensure interoperability and compatibility between different terminals, improving the overall system performance and reliability.

[0047] In some embodiments, the system further includes a key management server that calculates a private key based on the master key and the identifier, and issues it to the applicant, which includes a data acquisition terminal, a radar data terminal, and an identity authentication server. The identity authentication server uses its own address information as the signature public key to request a signature private key and an encryption / decryption key pair from the key management server. The address information includes the IP address and port information; the encryption / decryption key pair includes the encryption public key and the decryption private key. The identity authentication processing component obtains the terminal's device information as identity information, encrypts it using a public key to generate an encryption request, and sends it to the identity authentication server; the terminal includes a data acquisition terminal and a radar data processing terminal. After receiving the encryption request, the identity authentication server decrypts it using the decryption private key, calculates a digest of the decrypted identity field, generates an identity identifier, signs the generated identity identifier, and returns the identity identifier and signature result to the identity authentication processing component. The identity authentication processing component receives the identity identifier and signature result, verifies the signature result, and saves the identity identifier after successful verification.

[0048] By introducing a key management server, the system can securely generate and distribute private keys based on the master key and identifier, ensuring secure communication between various applicant entities (including data acquisition terminals, radar data terminals, and identity authentication servers). The identity authentication server uses its own address information as the signature public key to apply for the key pair, increasing the uniqueness and traceability of key applications and further enhancing the system's security.

[0049] The key management server centrally manages the generation, distribution, and updating of keys, simplifying the key management process and reducing costs. Applicants do not need to generate or manage keys themselves, reducing security risks caused by improper key management. The identity authentication processing component uses a public key to encrypt identity information, ensuring its confidentiality during transmission. The identity authentication server calculates a digest of the decrypted identity fields and generates an identity identifier, while simultaneously signing the identifier to ensure its authenticity and integrity. The identity authentication processing component verifies the signature result, further enhancing the reliability of identity authentication. By using a public key and a private key for encryption and decryption, the system can efficiently handle the transmission of large amounts of data packets and identity authentication requests, optimizing system performance. The collaborative work of the key management server and the identity authentication server enables the system to quickly respond to and process various security requirements.

[0050] In some embodiments, after the identity authentication processing component of the radar data terminal obtains the identity identifier, it uses the identity identifier as a public key to apply for a signature private key from the key management server. The identity authentication processing component of the radar data terminal uses a signature private key to verify the legitimacy of the identity information.

[0051] In some embodiments, the identity authentication processing component sends an initial request to the identity authentication server to obtain identity credentials. After receiving the initial request, the identity authentication server generates a random number and returns it to the identity authentication processing component. The identity authentication processing component signs the identity identifier and the received random number using its own private key, and generates an acquisition request based on the signature result and sends it to the identity authentication server. After receiving the retrieval request, the identity authentication server verifies that the random number, signature, and identity are all valid, and then generates an identity credential and sends it back to the identity authentication processing component.

[0052] like Figure 2 As shown, this embodiment of the invention provides a method for acquiring and controlling radar station equipment status data, applied to the system described in the above embodiment. The method includes: Step 1: When the data acquisition terminal needs to acquire data from the radar data terminal, the data acquisition terminal's identity authentication processing component starts to check whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request to the radar data terminal carrying its own identity information; wherein, the identity information includes an identity identifier and an identity credential. Step 2: The identity authentication processing component of the radar data terminal verifies the legitimacy of the identity information. If the verification fails, a failure message is returned; if the verification passes, a request response message is returned to complete the establishment of the communication link between the radar data terminal and the data acquisition terminal. Step 3: The data acquisition terminal executes acquisition tasks through the acquisition thread pool based on the established communication link. The acquisition task requests the required data from the radar data terminal according to its own number, module number, task type, and task rule information.

[0053] Step 4: The radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the data packet length exceeds the maximum length specified in the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length and then stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

[0054] In some embodiments, when the data acquisition terminal does not have a valid identity identifier, the identity authentication processing component initiates identity authentication with the identity authentication server based on the identity identifier. After successful authentication, the identity authentication server generates the terminal's identity credential and returns it to the identity authentication processing component for storage.

[0055] When the data acquisition terminal does not have an identity credential, the identity authentication processing component sends a request to the identity authentication server to apply for an identity identifier. The identity authentication server generates an identity identifier based on the received request and sends it to the identity authentication processing component of the terminal for storage.

[0056] In some embodiments, the system further includes a key management server that calculates a private key based on the master key and the identifier, and issues it to the applicant, which includes a data acquisition terminal, a radar data terminal, and an identity authentication server. Accordingly, the method also includes: The identity authentication server uses its own address information as the signature public key to request a signature private key and an encryption / decryption key pair from the key management server. The address information includes the IP address and port information; the encryption / decryption key pair includes the encryption public key and the decryption private key. The identity authentication processing component obtains the terminal's device information as identity information, encrypts it using a public key to generate an encryption request, and sends it to the identity authentication server; the terminal includes a data acquisition terminal and a radar data processing terminal. After receiving the encryption request, the identity authentication server decrypts it using the decryption private key, calculates a digest of the decrypted identity field, generates an identity identifier, signs the generated identity identifier, and returns the identity identifier and signature result to the identity authentication processing component. The identity authentication processing component receives the identity identifier and signature result, verifies the signature result, and saves the identity identifier after successful verification.

[0057] In some embodiments, the method further includes: After obtaining the identity identifier, the identity authentication processing component of the radar data terminal uses the identity identifier as a public key to apply for a signature private key from the key management server; The identity authentication processing component of the radar data terminal uses a signature private key to verify the legitimacy of the identity information.

[0058] In some embodiments, the method further includes: The identity authentication processing component sends an initial request to the identity authentication server to obtain identity credentials. After receiving the initial request, the identity authentication server generates a random number and returns it to the identity authentication processing component. The identity authentication processing component signs the identity identifier and the received random number using its own private key, and generates an acquisition request based on the signature result and sends it to the identity authentication server. After receiving the retrieval request, the identity authentication server verifies that the random number, signature, and identity are all valid, and then generates an identity credential and sends it back to the identity authentication processing component.

[0059] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0060] The embodiments of the radar station equipment status data acquisition and control method provided in this invention belong to the same inventive concept as the radar station equipment status data acquisition system in the above embodiments. For details not described in detail in the embodiments of the radar station equipment status data acquisition and control method, please refer to the embodiments of the radar station equipment status data acquisition system described above.

[0061] Although the present invention has been described in detail with reference to the accompanying drawings and preferred embodiments, the present invention is not limited thereto. Various equivalent modifications or substitutions can be made to the embodiments of the present invention by those skilled in the art without departing from the spirit and essence of the invention, and such modifications or substitutions should all be within the scope of the present invention. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should also be covered within the protection scope of the present invention.

Claims

1. A radar station equipment status data acquisition system, characterized in that, Includes radar data terminals and several data acquisition terminals; Both the data acquisition terminal and the radar data terminal are equipped with identity authentication processing components; When a data acquisition terminal needs to acquire data from a radar data terminal, the data acquisition terminal's identity authentication processing component checks whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request carrying its own identity information; wherein, the identity information includes an identity identifier and an identity credential. The radar data terminal's identity authentication processing component verifies the legitimacy of the identity information. If the verification fails, a failure message is returned. If the verification is successful, a request response message is returned to complete the establishment of a communication link between the radar data terminal and the data acquisition terminal. Based on the established communication link, the data acquisition terminal executes acquisition tasks through an acquisition thread pool. The acquisition tasks request the required data from the radar data terminal.

2. The radar station equipment status data acquisition system according to claim 1, characterized in that, The radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the data packet length exceeds the maximum length specified by the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length before being stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

3. The radar station equipment status data acquisition system according to claim 2, characterized in that, When an identity token is required, the identity authentication processing component initiates identity authentication with the identity authentication server based on the identity token. After successful authentication, the identity authentication server generates the terminal's identity credential and returns it to the identity authentication processing component for storage.

4. The radar station equipment status data acquisition system according to claim 3, characterized in that, When an identity credential is required, the identity authentication processing component sends a request to the identity authentication server to request an identity identifier. The identity authentication server generates an identity identifier based on the received request and sends it to the identity authentication processing component of the terminal for storage.

5. The radar station equipment status data acquisition system according to claim 4, characterized in that, The system also includes a key management server, which calculates a private key based on the master key and the identifier, and issues it to the applicant, which includes a data acquisition terminal, a radar data terminal, and an identity authentication server.

6. The radar station equipment status data acquisition system according to claim 5, characterized in that, The identity authentication server uses its own address information as the signature public key to request a signature private key and an encryption / decryption key pair from the key management server. The address information includes the IP address and port information; the encryption / decryption key pair includes the encryption public key and the decryption private key. The identity authentication processing component obtains the terminal's device information as identity information, encrypts it using a public key to generate an encryption request, and sends it to the identity authentication server; the terminal includes a data acquisition terminal and a radar data processing terminal. After receiving the encryption request, the identity authentication server decrypts it using the decryption private key, calculates a digest of the decrypted identity field, generates an identity identifier, signs the generated identity identifier, and returns the identity identifier and signature result to the identity authentication processing component. The identity authentication processing component receives the identity identifier and signature result, verifies the signature result, and saves the identity identifier after successful verification.

7. The radar station equipment status data acquisition system according to claim 6, characterized in that, After obtaining the identity identifier, the identity authentication processing component of the radar data terminal uses the identity identifier as a public key to apply for a signature private key from the key management server; The identity authentication processing component of the radar data terminal uses a signature private key to verify the legitimacy of the identity information.

8. The radar station equipment status data acquisition system according to claim 7, characterized in that, The identity authentication processing component sends an initial request to the identity authentication server to obtain identity credentials. After receiving the initial request, the identity authentication server generates a random number and returns it to the identity authentication processing component. The identity authentication processing component signs the identity identifier and the received random number using its own private key, and generates an acquisition request based on the signature result and sends it to the identity authentication server. After receiving the retrieval request, the identity authentication server verifies that the random number, signature, and identity are all valid, and then generates an identity credential and sends it back to the identity authentication processing component.

9. A method for acquiring and controlling radar station equipment status data, characterized in that, Applied to the system according to any one of claims 1-8, the method comprises: When a data acquisition terminal needs to acquire data from a radar data terminal, the data acquisition terminal's identity authentication processing component checks whether the terminal has a valid identity identifier. If the data acquisition terminal has a valid identity identifier, it checks whether the terminal has an identity credential. If an identity credential exists, the data acquisition terminal sends a connection request to the radar data terminal carrying its own identity information. The identity information includes an identity identifier and an identity credential. The identity authentication processing component of the radar data terminal verifies the legitimacy of the identity information. If the verification fails, a failure message is returned; if the verification is successful, a request response message is returned to complete the establishment of the communication link between the radar data terminal and the data acquisition terminal. The data acquisition terminal executes acquisition tasks through an acquisition thread pool based on the established communication link. The acquisition task requests the required module data from the radar data terminal according to its own number, module number, task type, and task rule information.

10. The method for acquiring and controlling radar station equipment status data according to claim 9, characterized in that, The method also includes: The radar data terminal sends the corresponding data to the acquisition task. After obtaining the data, each acquisition task determines whether the data packet length exceeds the maximum length specified by the protocol. If so, it is considered that the data packets have been stuck together. The length field of the data packet is read, and the data packet is segmented according to the read length before being stored in the data acquisition terminal. If not, the acquired data is directly stored in the data acquisition terminal.

Images