Patrol wireless network construction and dynamic scheduling method and device, equipment and medium

Abstract

This invention provides a method, apparatus, device, and medium for the construction and dynamic scheduling of a wireless network for inspection purposes, including: deploying a three-layer network architecture; configuring a primary communication link and a backup communication link for the inspection terminal device, monitoring the link status, and performing a fast roaming switch after preloading the session context to the target access point when roaming is detected; performing two-way authentication based on a unique device identifier generated by the device's built-in hardware security element, negotiating and generating a dynamic session key after successful authentication, and triggering key updates according to preset conditions; identifying the service type of data packets, mapping data to transmission queues of different priorities according to the service type, and selecting the corresponding transmission path and strategy; deploying an AI image analysis model to analyze uplink video data in real time, and determining the data upload method, upload format, and transmission priority based on the analysis results, in order to solve the problems of coverage, security, reliability, and resource optimization faced by the inspection network of new energy power stations.

Description

Technical Field

[0001] This invention relates to the field of wireless communication network technology, and in particular to a method, apparatus, equipment, and medium for inspecting the construction and dynamic scheduling of wireless networks. Background Technology

[0002] With the continuous growth of new energy power generation, wind farms, photovoltaic power stations, and other new energy power plants are characterized by their numerous locations, wide distribution, and remote locations. Taking wind farms as an example, these plants are typically located in sparsely populated plains, mountains, or coastal areas, with a large number of equipment scattered across the landscape. Traditional manual inspection methods face the following technical challenges: 1. Difficulty in achieving network coverage Wind farms cover vast areas, with large spacing between wind turbines and power transmission lines stretching for tens of kilometers. Traditional single-mode wireless networks (such as Wi-Fi) have limited coverage and cannot achieve seamless coverage of the entire site; while relying solely on public networks of operators (such as 4G / 5G) faces problems such as numerous signal blind spots, insufficient bandwidth, and difficulty in guaranteeing reliability.

[0003] 2. High access security risks The inspection terminals (robots, drones, cameras) at renewable energy power plants are numerous and widely distributed. Existing technologies mostly use static passwords or simple certificate authentication methods, which pose security risks such as device spoofing, command tampering, and data leakage. The power industry has strict compliance requirements for cybersecurity, which existing solutions cannot meet.

[0004] 3. Competition for resources across multiple business segments Inspection networks carry multiple service types: control commands (latency-sensitive), high-definition video (bandwidth-sensitive), and sensor data (low reliability requirements). Existing dumb pipe networks cannot identify service types, treating all data the same. This leads to delays or even loss of control commands due to video stream congestion, affecting the safety of inspection operations.

[0005] 4. Poor stability of mobile inspection. Inspection robots need to frequently switch wireless access points during movement. Existing roaming technologies (such as traditional Wi-Fi roaming) have high switching latency (typically >200ms), causing control command interruptions or video stuttering. In addition, a single link failure can lead to service interruption, lacking redundancy protection.

[0006] 5. High bandwidth and storage pressure The high-definition video data collected by inspection robots is enormous, reaching several gigabytes per inspection. If all of it is transmitted back to the central control center, it will consume a large amount of bandwidth and storage resources. Current technology lacks an effective edge filtering mechanism, resulting in data overload.

[0007] Therefore, there is an urgent need for a method for constructing and dynamically scheduling inspection wireless networks to solve the complex technical challenges of coverage, security, reliability, and resource optimization faced by inspection networks for new energy power plants. Summary of the Invention

[0008] To overcome the problems existing in related technologies, this disclosure provides a method, device, equipment and medium for the construction and dynamic scheduling of inspection wireless networks, so as to solve the complex technical problems of coverage, security, reliability and resource optimization faced by inspection networks of new energy power plants in related technologies.

[0009] This specification provides one or more embodiments of a method for constructing and dynamically scheduling a patrol wireless network, including the following steps: The deployment includes a three-layer network architecture comprising a central control center core network, a booster station regional aggregation network, and an end-user access network. The booster station regional aggregation network employs a hybrid network of two different wireless communication technologies, and the end-user access network establishes a wireless link with the booster station regional aggregation network via a directional antenna. The inspection terminal equipment is configured with both a primary communication link and a backup communication link. The link status is monitored. When roaming is required, the session context is preloaded to the target access point and a fast roaming switch is performed. When the primary communication link is interrupted, the system automatically switches to the backup communication link. Two-way authentication is performed based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated. The key is updated according to preset conditions. The dynamic session key is destroyed when the session ends. Identify the service type of the data packet, map the data to transmission queues of different priorities according to the service type, and select the corresponding transmission path and transmission strategy; Deploy AI image analysis models on edge gateways to perform real-time analysis of uplink video data, and determine the data upload method, upload format, and transmission priority based on the analysis results.

[0010] Preferably, the monitoring of link status, when roaming is detected as required, involves preloading the session context to the target access point and then performing a fast roaming handover, specifically including the following steps: Real-time monitoring of the signal strength of the wireless access point currently connected to the inspection terminal device; When the signal strength is lower than the first preset threshold, select an adjacent access point with a signal strength higher than the second preset threshold as the target access point; The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue. Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

[0011] Preferably, the two-way authentication is performed based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated, and a key update is triggered according to preset conditions. Specifically, this includes the following steps: Extract the unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device and pre-set it as the device identifier in the authentication server; When the inspection terminal device is connected to the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint. After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number. Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

[0012] Preferably, the service types are divided into control command streams, real-time video streams, and sensor data streams; For control command streams, transmission is carried out via low-latency transmission paths and integrity checks are enabled. For real-time video streams, transmission is carried out through high-bandwidth transmission paths, and network congestion is monitored. When the congestion exceeds a preset threshold, the video stream is reduced from the first resolution to the second resolution. For sensor data streams, periodic transmission is carried out using idle network bandwidth.

[0013] Preferably, the step of deploying an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data and determine the data upload method, upload format, and transmission priority based on the analysis results specifically includes the following steps: A lightweight AI image analysis model is deployed on the edge gateway to perform real-time frame analysis on the uplink video data; If a normal scene is detected, extract key feature values ​​or upload a thumbnail at a low frame rate; If an abnormal event is detected, high-definition video clips before and after the abnormality are captured and marked as an emergency event stream; The emergency event stream is elevated to the highest transmission priority, taking precedence over the normal video stream, and a real-time alarm is triggered.

[0014] This specification provides one or more embodiments of a device for inspecting the construction and dynamic scheduling of a wireless network, including: The network construction module is used to deploy a three-layer network architecture including a central control center core network, a booster station area aggregation network, and an end access network. The booster station area aggregation network adopts a hybrid networking of two different wireless communication technologies, and the end access network establishes a wireless link with the booster station area aggregation network through a directional antenna. The roaming establishment module is used to configure the primary communication link and the backup communication link for the inspection terminal equipment at the same time, monitor the link status, and when roaming is detected, preload the session context to the target access point and perform a fast roaming switch. When the primary communication link is interrupted, it automatically switches to the backup communication link. The security authentication module is used to perform two-way identity authentication based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated. The key is updated according to preset conditions, and the dynamic session key is destroyed when the session ends. The transmission module is used to identify the service type of data packets, map the data to transmission queues of different priorities according to the service type, and select the corresponding transmission path and transmission strategy. The intelligent collaboration module is used to deploy AI image analysis models on the edge gateway to perform real-time analysis of uplink video data and determine the data upload method, upload format and transmission priority based on the analysis results.

[0015] Preferably, the roaming establishment module includes a roaming establishment unit configured as follows: Real-time monitoring of the signal strength of the wireless access point currently connected to the inspection terminal device; When the signal strength is lower than the first preset threshold, select an adjacent access point with a signal strength higher than the second preset threshold as the target access point; The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue. Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

[0016] Preferably, the security authentication module includes a key generation unit, configured as follows: Extract the unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device and pre-set it as the device identifier in the authentication server; When the inspection terminal device is connected to the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint. After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number. Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

[0017] This specification provides one or more embodiments of a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the above-described method for the construction and dynamic scheduling of a wireless network for inspection.

[0018] This specification provides one or more embodiments of a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the above-described method for the construction and dynamic scheduling of a wireless network for inspection.

[0019] This disclosure provides a method, apparatus, equipment, and medium for constructing and dynamically scheduling a wireless network for inspection. Its advantages lie in its three-layer architecture: a core network at the control center, an aggregation network in the booster station area, and an end-user access network. Two different wireless communication technologies are used in a hybrid network at the aggregation layer, combined with directional antennas at the ends to establish links. This improves network coverage reliability and anti-interference capabilities, ensuring stable wireless link connections in complex environments. Simultaneous primary and backup communication links are configured for the inspection terminals. Through link status monitoring, session context preloading, and a fast roaming switching mechanism, seamless switching is achieved when the device moves. Automatic switching to the backup link is performed when the primary link is interrupted, effectively ensuring service continuity and low-latency transmission. The terminal utilizes built-in hardware security elements to generate… The system uses a unique device identifier for two-way authentication and negotiates to generate a dynamic session key. Combined with a condition-triggered key update and a key destruction mechanism at the end of the session, it enhances access security and prevents unauthorized device access and key leakage risks. By identifying the service type of data packets and mapping them to transmission queues of different priorities, and then matching the corresponding transmission paths and strategies, it achieves differentiated scheduling of critical service data, optimizes network resource allocation, and ensures the transmission quality of high-priority services. The system deploys an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data. Based on the analysis results, it dynamically adjusts the data upload method, format, and transmission priority, reducing the backhaul of invalid data and lowering the bandwidth pressure and storage overhead of the core network and central platform. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in one or more embodiments of this specification or in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 A flowchart illustrating a method for constructing and dynamically scheduling a patrol wireless network, provided for one or more embodiments of this specification; Figure 2 A schematic diagram of a patrol wireless network construction and dynamic scheduling device provided for one or more embodiments of this specification; Figure 3 This is a schematic diagram of the structure of a computer device provided for one or more embodiments of this specification. Detailed Implementation

[0022] To enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this specification, and not all of the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by those skilled in the art without creative effort should fall within the protection scope of this invention.

[0023] The present invention will now be described in detail with reference to specific embodiments and accompanying drawings.

[0024] Method Implementation Examples According to embodiments of the present invention, a method for inspecting the construction and dynamic scheduling of a wireless network is provided, such as... Figure 1 The diagram shown is a flowchart illustrating the inspection wireless network construction and dynamic scheduling method provided in this embodiment. The inspection wireless network construction and dynamic scheduling method according to this embodiment includes the following steps: S110. Deploy a three-layer network architecture comprising a central control center core network, a booster station regional aggregation network, and an end-user access network. The central control center core network includes core servers and core switches, primarily used for data aggregation, service scheduling, and platform management. The booster station regional aggregation network employs a hybrid network of two different wireless communication technologies: 5G communication technology as the backbone backhaul link and wireless mesh network technology for covering local blind spots. The two types of networks are uniformly managed through an edge gateway, forming complementary coverage. The end-user access network is deployed on wind turbine generators and power line towers, establishing point-to-multipoint or mesh wireless links with the booster station regional aggregation network via directional antennas to achieve coverage of the wind turbine generator area.

[0025] S120, the relay protection room of the booster station deploys rail inspection terminal equipment. The inspection terminal equipment is configured with both a primary and backup communication link. The primary communication link is Wi-Fi 6 (IEEE 802.11ax), connected to AP_01 within the booster station. The backup communication link is a 5G public network, connected to the operator's network via a CPE module. The link status is monitored. When roaming is detected, the session context is preloaded to the target access point, and a fast roaming switch is performed. When the primary communication link is interrupted, it automatically switches to the backup communication link. When the Wi-Fi 6 primary link signal is interrupted due to strong winds, AP_01 loses contact with the robot. The network controller detects a heartbeat timeout on the primary link and three consecutive unresponsive heartbeats, automatically switching to the 5G backup communication link, updating the routing table, switching forwarding paths, and restoring service traffic. There is zero packet loss during the switchover process, and control commands are unaffected.

[0026] S130. Perform two-way authentication based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, negotiate and generate a dynamic session key. Trigger key update according to preset conditions. Destroy the dynamic session key when the session ends.

[0027] S140. Identify the service type of the data packet. The service type is the DSCP field marked in the header of the data packet by the inspection terminal device. Based on the service type, map the data to transmission queues of different priorities, select the corresponding transmission path and transmission strategy, and classify the service types into control command streams, real-time video streams, and sensor data streams. For control command streams, the highest transmission priority is given, including emergency alarms and real-time control commands. They are transmitted through low-latency transmission paths with integrity verification enabled. Low-latency transmission paths include wired fiber optics or 5G network slices, and the SM3 hash algorithm is used to verify the integrity of the command content. For real-time video streams, the medium transmission priority is given, including high-definition inspection video streams. They are transmitted through high-bandwidth transmission paths, including IEEE 802.11ax standard wireless networks or 5G high-bandwidth networks. The network congestion level is monitored, and when the congestion level exceeds a preset threshold, the video stream is reduced from the first resolution to the second resolution. For sensor data streams, the low transmission priority is given, including regular status data and historical records. They are transmitted periodically using idle network bandwidth.

[0028] S150: Deploy an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data, and determine the data upload method, upload format and transmission priority based on the analysis results.

[0029] The method provided in this embodiment deploys a three-layer architecture consisting of a central control center core network, a booster station area aggregation network, and a terminal access network. At the aggregation layer, two different wireless communication technologies are used in a hybrid network, combined with directional antennas at the terminals to establish links. This improves the reliability and anti-interference capability of network coverage, ensuring stable wireless link connections in complex environments. The method also configures primary and backup communication links for the inspection terminals, achieving seamless switching during device movement through link status monitoring, session context preloading, and a fast roaming handover mechanism. Furthermore, it automatically switches to the backup link when the primary link is interrupted, effectively guaranteeing service continuity and low-latency transmission. Finally, it utilizes a unique device identifier generated by the terminal's built-in hardware security element for two-way authentication. The system authenticates and negotiates dynamic session keys, combining conditionally triggered key updates and key destruction mechanisms at the end of the session to enhance access security and prevent unauthorized device access and key leakage risks. By identifying the service type of data packets and mapping them to transmission queues of different priorities, and then matching the corresponding transmission paths and strategies, differentiated scheduling of critical service data is achieved, optimizing network resource allocation and ensuring the transmission quality of high-priority services. An AI image analysis model is deployed on the edge gateway to perform real-time analysis of uplink video data. Based on the analysis results, the data upload method, format, and transmission priority are dynamically adjusted, reducing the back transmission of invalid data and lowering the bandwidth pressure and storage overhead of the core network and central platform.

[0030] In one embodiment, the inspection robot moves along the guide rail from the relay protection room to the 35kV switch room, passing through two access points, AP_01 and AP_02, to monitor the link status. When roaming is detected, the session context is preloaded to the target access point and a fast roaming handover is performed, specifically including the following steps: The signal strength of the wireless access point currently connected to the inspection terminal device is monitored in real time.

[0031] When the signal strength is lower than the first preset threshold (-65dBm), the adjacent access point with a signal strength higher than the second preset threshold (-60dBm) is selected as the target access point.

[0032] The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue.

[0033] Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

[0034] Roaming process sequence: t=0s: The robot connects to AP_01, RSSI=-45dBm, and normally transmits control commands and video streams.

[0035] t=30s: The robot moves to the edge of AP_01 coverage, RSSI=-68dBm triggers roaming preparation.

[0036] t=30.005s: The network controller scans adjacent access points, identifies AP_02 signal strength as -55dBm, and selects AP_02 as the target access point.

[0037] t=30.015s: The network controller sends the robot session context to AP_02. The context includes: device ID, SM4 session key status, and data queue to be sent.

[0038] t=30.025s: AP_02 completes context loading and is ready to receive roaming.

[0039] t=30.035s: The robot executes the IEEE 802.11r fast roaming handover process in 42ms.

[0040] t=30.077s: The robot completes the switch, connects to AP_02, resumes data transmission, and the video stream is interrupted for 3 frames (about 50ms). Control commands are uninterrupted.

[0041] The method provided in this embodiment monitors signal strength in real time and intelligently filters target access points with high signal quality. Combined with a session context preloading mechanism, it completes the synchronization of device identification, encryption key status, and cached data queue before rapid roaming switching. This achieves seamless switching with uninterrupted control commands and controllable video stuttering time, effectively ensuring the continuity and real-time performance of services during mobile inspections.

[0042] In one embodiment, two-way authentication is performed based on a unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated, and a key update is triggered according to preset conditions. Specifically, the process includes the following steps: The unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device is extracted and pre-set as the device identifier in the authentication server.

[0043] When the inspection terminal device joins the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint.

[0044] After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number.

[0045] Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

[0046] Specifically, when the inspection terminal equipment leaves the factory, the unique hardware fingerprint (64-bit, generated by physical process differences) of its built-in PUF chip is extracted, and the hardware fingerprint is bound to the device ID (RBT_001) and pre-set in the central control center authentication server.

[0047] The inspection terminal device initiates an access request to the edge gateway. The edge gateway forwards the authentication request, the unique device identifier of the inspection terminal device, and the random number generated by the inspection terminal device for preventing replay attacks to the authentication server. The authentication server generates a random number for challenging the robot and returns it to the inspection terminal device through the edge gateway. The inspection terminal device performs SM2 signature on the random number for preventing replay attacks based on the PUF hardware fingerprint, and sends the signed random number again to the authentication server through the edge gateway for signature authentication. After successful verification, the authentication is returned as successful.

[0048] After successful authentication, both parties negotiate an SM4 session key based on a timestamp and a random number. The key is 128 bits long and used for subsequent data transmission encryption. Simultaneously, a key update strategy is set: time-period update: the key lifespan T = 300 seconds, triggering renegotiation upon expiration; command count update: a key update is triggered after 100 control commands are transmitted. This ensures that the key is updated every 5 minutes and every 100 commands are transmitted. Even if the key is intercepted, its validity period is only 5 minutes or 100 commands. Upon receiving the session termination signal, the edge gateway calls a secure destruction function to zero out the memory area containing the SM4 session key, performing a memory overwrite (3 random data overwrites + 1 all-zero overwrite), deleting the session record from the key storage table, eliminating the risk of key remnant. The gateway then releases the resources allocated for this session, cancels bandwidth reservations, releases logical channels, and updates the device's online status.

[0049] The method provided in this embodiment extracts the unique hardware fingerprint of the device's built-in physically unclonable functional chip and pre-places it on the authentication server, realizing two-way identity authentication based on hardware-level unique identifiers, effectively preventing device forgery and unauthorized access. After successful authentication, a dynamic session key is generated by negotiating with the SM4 block cipher algorithm in combination with timestamps and random numbers, enhancing the real-time performance and unpredictability of session encryption. By setting the key lifecycle and instruction count threshold to trigger automatic renegotiation, the regular updating and secure use of the key are ensured, improving the overall communication link's resistance to attacks and long-term operational security.

[0050] In one embodiment, an AI image analysis model is deployed on the edge gateway to perform real-time analysis of uplink video data. Based on the analysis results, the data upload method, upload format, and transmission priority are determined. This includes the following steps: A lightweight AI image analysis model is deployed on the edge gateway. The model adopts the MobileNetV3 architecture and has been trained with 5,000 wind turbine tower images. It can identify cracks, corrosion, blade damage, bird nests and foreign objects on the tower surface.

[0051] The edge gateway performs real-time frame analysis on the uplink video data.

[0052] If a normal scene is detected, extract key feature values ​​such as tower outline and color histogram, or upload a thumbnail at a low frame rate (1fps), and discard the original video data without triggering an alarm.

[0053] If an abnormal event is detected, such as a suspected crack in the middle section of the tower, extract 30-second high-definition video clips before and after the abnormality and mark them as an emergency event stream in the header of the data packet.

[0054] The emergency event stream is prioritized for transmission over regular video streams, triggering real-time alarms. The highest priority stream is placed in a high-priority queue, prioritizing wired fiber optic connections (primary communication link). If the fiber optic connection fails, it switches to a 5G network slice (backup communication link), ensuring end-to-end latency <20ms. An SM3 hash algorithm is used to calculate the instruction digest, which is transmitted along with the instruction. The receiver verifies the digest to prevent tampering. Medium priority streams are placed in a guaranteed forwarding queue, prioritizing Wi-Fi 6 (IEEE 802.11ax). The backup link is a high-bandwidth 5G network. The gateway monitors network congestion in real-time. Low priority streams are placed in a best-effort queue, periodically uploaded during network downtime, aggregating multiple sensor data streams into a single message to reduce transmission overhead.

[0055] The method provided in this embodiment enables real-time analysis of video data by deploying a lightweight AI image analysis model on the edge gateway, effectively reducing uplink transmission bandwidth and central processing pressure; it extracts key features or low frame rate transmission thumbnails for normal scenes, significantly reducing redundant data backhaul; when an anomaly is detected, it automatically captures high-definition video clips and marks them as emergency event streams, and combines the highest priority transmission with a real-time alarm mechanism to ensure low-latency and highly reliable delivery of critical event data, thereby improving emergency response efficiency and system resource utilization.

[0056] Device Examples According to embodiments of the present invention, a device for inspecting the construction and dynamic scheduling of wireless networks is provided, such as... Figure 2 The diagram shown is a structural schematic of the inspection wireless network construction and dynamic scheduling device provided in this embodiment. The inspection wireless network construction and dynamic scheduling device according to this embodiment includes: Network construction module 21 is used to deploy a three-layer network architecture including a central control center core network, a booster station area aggregation network, and an end access network. The booster station area aggregation network adopts a hybrid networking of two different wireless communication technologies, and the end access network establishes a wireless link with the booster station area aggregation network through a directional antenna.

[0057] Roaming establishment module 22 is used to simultaneously configure the primary and backup communication links for the inspection terminal equipment, monitor the link status, and when roaming is detected, preload the session context to the target access point and perform a fast roaming switch. When the primary communication link is interrupted, it automatically switches to the backup communication link. It includes a roaming establishment unit, configured as follows: The signal strength of the wireless access point currently connected to the inspection terminal device is monitored in real time.

[0058] When the signal strength is lower than the first preset threshold, the adjacent access point with a signal strength higher than the second preset threshold is selected as the target access point.

[0059] The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue.

[0060] Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

[0061] Security authentication module 23 is used for two-way identity authentication based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated. Key updates are triggered according to preset conditions, and the dynamic session key is destroyed when the session ends. It includes a key generation unit and is configured as follows: The unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device is extracted and pre-set as the device identifier in the authentication server.

[0062] When the inspection terminal device joins the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint.

[0063] After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number.

[0064] Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

[0065] The transmission module 24 is used to identify the service type of the data packet, map the data to transmission queues of different priorities according to the service type, and select the corresponding transmission path and transmission strategy.

[0066] The intelligent collaboration module 25 is used to deploy an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data and determine the data upload method, upload format and transmission priority based on the analysis results.

[0067] The device provided in this embodiment deploys a three-layer architecture—the core network of the central control center, the aggregation network of the booster station area, and the terminal access network—through the network construction module 21. It employs a hybrid network of two different wireless communication technologies at the aggregation layer, combined with directional antennas at the terminals to establish links, thereby improving the reliability and anti-interference capability of network coverage and ensuring stable wireless link connections in complex environments. The roaming establishment module 22 simultaneously configures primary and backup communication links for the inspection terminal. Through link status monitoring, session context preloading, and a fast roaming switching mechanism, it achieves seamless switching when the device moves and automatically switches to the backup link when the primary link is interrupted, effectively ensuring service continuity and low-latency transmission. The security authentication module 23 utilizes a unique device identifier generated by the terminal's built-in hardware security element for authentication. Two-way authentication and negotiation to generate dynamic session keys, combined with a key update mechanism triggered by conditions and a key destruction mechanism at the end of the session, enhance access security and prevent the risk of unauthorized device access and key leakage. The transmission module 24 identifies the service type of data packets and maps them to transmission queues of different priorities, and then matches the corresponding transmission paths and strategies to achieve differentiated scheduling of critical service data, optimize network resource allocation, and ensure the transmission quality of high-priority services. The intelligent collaboration module 25 deploys an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data. Based on the analysis results, it dynamically adjusts the data upload method, format, and transmission priority, reducing the back transmission of invalid data and lowering the bandwidth pressure and storage overhead of the core network and central platform.

[0068] The embodiments of the present invention are device embodiments corresponding to the above method embodiments. The specific operations of each module processing step can be understood with reference to the description of the method embodiments, and will not be repeated here.

[0069] like Figure 3 As shown, the present invention also provides a computer-readable storage medium storing a computer program thereon. When the computer program is executed by a processor, it implements the inspection wireless network construction and dynamic scheduling method in the above embodiments, or when the computer program is executed by a processor, it implements the inspection wireless network construction and dynamic scheduling method in the above embodiments.

[0070] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and RAMbus dynamic RAM (RDRAM), etc.

[0071] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, for apparatus or system embodiments, since they are basically similar to method embodiments, the description is relatively simple; relevant parts can be referred to the descriptions in the method embodiments. The apparatus and system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without creative effort.

[0072] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features. These modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention, and the contents not described in detail in the specification of the present invention are known to those skilled in the art.

Claims

1. A method for inspecting wireless network construction and dynamic scheduling, characterized in that, Includes the following steps: The deployment includes a three-layer network architecture comprising a central control center core network, a booster station regional aggregation network, and an end-user access network. The booster station regional aggregation network employs a hybrid network of two different wireless communication technologies, and the end-user access network establishes a wireless link with the booster station regional aggregation network via a directional antenna. The inspection terminal equipment is configured with both a primary communication link and a backup communication link. The link status is monitored. When roaming is required, the session context is preloaded to the target access point and a fast roaming switch is performed. When the primary communication link is interrupted, the system automatically switches to the backup communication link. Two-way authentication is performed based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated. The key is updated according to preset conditions. The dynamic session key is destroyed when the session ends. Identify the service type of the data packet, map the data to transmission queues of different priorities according to the service type, and select the corresponding transmission path and transmission strategy; Deploy AI image analysis models on edge gateways to perform real-time analysis of uplink video data, and determine the data upload method, upload format, and transmission priority based on the analysis results.

2. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 1, characterized in that, The monitoring of link status, when roaming is detected as necessary, preloads the session context to the target access point and then performs a fast roaming handover, specifically including the following steps: Real-time monitoring of the signal strength of the wireless access point currently connected to the inspection terminal device; When the signal strength is lower than the first preset threshold, select an adjacent access point with a signal strength higher than the second preset threshold as the target access point; The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue. Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

3. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 1, characterized in that, The unique device identifier generated based on the hardware security element built into the inspection terminal device is used for two-way authentication. After successful authentication, a dynamic session key is negotiated and generated, and a key update is triggered according to preset conditions. The specific steps include: Extract the unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device and pre-set it as the device identifier in the authentication server; When the inspection terminal device is connected to the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint. After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number. Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

4. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 1, characterized in that, The service types are divided into control command streams, real-time video streams, and sensor data streams. For control command streams, transmission is carried out via low-latency transmission paths and integrity checks are enabled. For real-time video streams, transmission is carried out through high-bandwidth transmission paths, and network congestion is monitored. When the congestion exceeds a preset threshold, the video stream is reduced from the first resolution to the second resolution. For sensor data streams, periodic transmission is carried out using idle network bandwidth.

5. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 1, characterized in that, The deployment of an AI image analysis model on the edge gateway to perform real-time analysis of uplink video data, and to determine the data upload method, upload format, and transmission priority based on the analysis results, specifically includes the following steps: A lightweight AI image analysis model is deployed on the edge gateway to perform real-time frame analysis on the uplink video data; If a normal scene is detected, extract key feature values ​​or upload a thumbnail at a low frame rate; If an abnormal event is detected, high-definition video clips before and after the abnormality are captured and marked as an emergency event stream; The emergency event stream is elevated to the highest transmission priority, taking precedence over the normal video stream, and a real-time alarm is triggered.

6. A device for inspecting the construction and dynamic scheduling of a wireless network, characterized in that, include: The network construction module is used to deploy a three-layer network architecture including a central control center core network, a booster station area aggregation network, and an end access network. The booster station area aggregation network adopts a hybrid networking of two different wireless communication technologies, and the end access network establishes a wireless link with the booster station area aggregation network through a directional antenna. The roaming establishment module is used to configure the primary communication link and the backup communication link for the inspection terminal equipment at the same time, monitor the link status, and when roaming is detected, preload the session context to the target access point and perform a fast roaming switch. When the primary communication link is interrupted, it automatically switches to the backup communication link. The security authentication module is used to perform two-way identity authentication based on the unique device identifier generated by the hardware security element built into the inspection terminal device. After successful authentication, a dynamic session key is negotiated and generated. The key is updated according to preset conditions, and the dynamic session key is destroyed when the session ends. The transmission module is used to identify the service type of data packets, map the data to transmission queues of different priorities according to the service type, and select the corresponding transmission path and transmission strategy. The intelligent collaboration module is used to deploy AI image analysis models on the edge gateway to perform real-time analysis of uplink video data and determine the data upload method, upload format and transmission priority based on the analysis results.

7. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 6, characterized in that, The roaming establishment module includes a roaming establishment unit, configured as follows: Real-time monitoring of the signal strength of the wireless access point currently connected to the inspection terminal device; When the signal strength is lower than the first preset threshold, select an adjacent access point with a signal strength higher than the second preset threshold as the target access point; The session context of the inspection terminal device is sent to the target access point for preloading. The session context includes at least the device identifier, encryption key status, and cached data queue. Perform fast roaming switching to ensure that control commands are not interrupted during the switching process and that the video stream stuttering time is less than a preset threshold.

8. The method for constructing and dynamically scheduling a wireless network for inspection as described in claim 6, characterized in that, The security authentication module includes a key generation unit, configured as follows: Extract the unique hardware fingerprint of the physically unclonable chip built into the inspection terminal device and pre-set it as the device identifier in the authentication server; When the inspection terminal device is connected to the network, it performs two-way identity authentication with the authentication server based on the unique hardware fingerprint. After successful authentication, a dynamic session key is negotiated and generated using the SM4 block cipher algorithm based on the current timestamp and a random number. Set the lifespan and command count threshold of the dynamic session key, and trigger key renegotiation according to the preset lifespan or command count.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the inspection wireless network construction and dynamic scheduling method as described in any one of claims 1 to 5.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the inspection wireless network construction and dynamic scheduling method as described in any one of claims 1 to 5.

Images