A control management system for a modular remote-linked gas meter

Abstract

The application discloses a control management system of a modular remote linkage gas meter, relates to the technical field of gas meter control, and comprises a gas meter measurement base table, which only comprises a flow measurement unit, an electric control valve and a Bluetooth beacon module. The Bluetooth beacon module is used for broadcasting a base table equipment ID, a real-time flow cumulative value and a valve state. The control management system of the modular remote linkage gas meter is characterized in that the gas meter measurement base table and the intelligent control panel are physically independently arranged, communication, interaction and safety control functions are completely decoupled from the measurement body, a double-mode communication cooperation unit is arranged in the control panel, and a Bluetooth link and a wireless network link are simultaneously managed, so that the basic functions of gas safety control can continuously operate under any network condition, and a remote monitoring blind area caused by a single communication link fault is avoided.

Description

Technical Field

[0001] The present invention relates to the technical field of gas meter control, and particularly to a control and management system for a modular remote linkage gas meter. Background Art

[0002] In the field of existing intelligent gas meter technology, especially for gas metering and control devices widely deployed in scenarios such as residential communities and commercial complexes, there are still significant deficiencies in their internal structure design and remote management capabilities. Traditional gas meters generally adopt an integrated architecture, encapsulating the metering unit, communication module, valve drive circuit, and human-computer interaction interface within the same meter housing, and this meter housing is often fixed to the gas pipeline by means of lead sealing or the like. This highly coupled design brings prominent technical contradictions throughout the entire service life cycle after the gas meter leaves the factory: on the one hand, after the gas meter is installed, it is usually located in positions with poor lighting and limited operation space, such as high positions, outdoor meter boxes, or kitchen corners. If users or gas company maintenance personnel need to perform on-site recharge card insertion, manual valve opening and closing, fault status query, or parameter setting, they must use tools such as ladders and flashlights to climb and operate, which is not only cumbersome and inefficient but also poses potential safety hazards to personnel; on the other hand, once a fault occurs in the communication module built into the gas meter or the communication protocol needs to be upgraded, according to the existing technical solutions, only the entire intelligent gas meter can be replaced or the main control board inside the meter can be disassembled, which involves a series of complex processes such as shutting off the gas, disassembling the meter, re-lead sealing, and re-registering the system. The repair cycle is as long as several hours or even several days, and the single replacement cost is extremely high. Even more intractable is that most existing gas meters with remote control functions rely on a single communication channel. For example, only narrowband Internet of Things or only rely on the user's home wireless network is used. When this channel is interrupted due to base station signal fluctuations, home router power outages, or frequency band interference, not only the remote meter reading and valve control functions are completely lost, but the gas management platform also cannot timely obtain the real-time status of the meter, resulting in the failure of the linkage cut-off response in emergency situations. In addition, the communication protocols and data formats adopted by gas meters produced by different manufacturers are incompatible with each other, making it difficult for gas companies to establish a standardized regional multi-meter linkage control system, further restricting the intelligent level of gas safety management and control.

[0003] Therefore, how to provide a control and management system that can be deployed independently of the gas meter body, supports redundant switching of multiple communication links, has a convenient on-site interaction ability, and can achieve remote linkage control without replacing the entire meter and without interrupting normal gas supply is a technical problem亟待解决的技术问题 for the present invention. Summary of the Invention

[0004] The purpose of the present invention is to provide a control and management system for a modular remote linkage gas meter to solve the problems raised in the above background art.

[0005] To solve the above technical problems, the present invention provides the following technical solution: a modular remote linkage gas meter control and management system, comprising: A gas meter base meter contains only a flow metering unit, an electronically controlled valve, and a Bluetooth beacon module. The Bluetooth beacon module is used to broadcast the base meter device ID, real-time cumulative flow value, and valve status. An intelligent control panel independent of the gas meter metering base setting includes a Bluetooth module, a wireless network card, a display screen, a local linkage strategy execution engine, and a state reverse constraint module. The Bluetooth module is used to establish a two-way communication link with the Bluetooth beacon module, and the wireless network card is used to communicate with the gas management cloud platform. The state inverse constraint module is configured to generate a random check code during the initial binding phase and send it to the electrically controlled valve. After receiving the check code, the electrically controlled valve forces the panel to return the inverse operation result of the check code within a specified time limit. Only after the verification is passed can the valve be allowed to open.

[0006] By physically separating the gas meter base meter from the smart control panel, the base meter retains only metering, valve, and Bluetooth broadcasting functions, while all communication, interaction, and control functions are centralized in a panel that can be independently installed in a convenient location for the user. When the panel components fail, only the panel needs to be replaced, without shutting down the gas supply or removing the meter.

[0007] Preferably, the binding process further includes: The Bluetooth module of the smart control panel scans the Bluetooth beacon broadcasts of the surrounding gas meter base meters to obtain a list of device IDs. After the user selects the target device, the panel establishes an initial Bluetooth connection with the base meter. The state reverse constraint module generates a 16-bit random check code and sends it to the non-volatile memory of the electronically controlled valve via Bluetooth; After receiving the verification code, the electronically controlled valve locks itself in the closed state and requires the panel to send the preset reversible calculation result of the verification code within 10 seconds for verification. If the verification is successful, the binding is successful and the valve is unlocked. If the verification fails, the valve remains locked and the base meter enters the anti-tamper state.

[0008] Preferably, the intelligent control panel also includes a dual-mode communication coordination unit, which manages both the Bluetooth module and the wireless network card simultaneously, and executes the following link arbitration logic: When the wireless network card communicates normally with the gas management cloud platform, the panel will upload the base meter data received by the Bluetooth module to the cloud platform through the wireless network card, and forward the remote instructions issued by the cloud platform to the electric control valve after being verified by the state reverse constraint module. When communication between the wireless network card and the cloud platform is interrupted, the local linkage strategy execution engine takes over the control. It autonomously generates valve control commands based on the locally stored emergency threshold, sends them to the electric control valve after verification by the state reverse constraint module, and resumes the transmission of the operation logs during the interruption to the cloud platform after communication is restored.

[0009] Preferably, the state reverse constraint module has a pre-set valve safety operation boundary table, which includes at least the maximum number of valve opening and closing operations per day, the minimum time interval between two adjacent valve opening and closing operations, and the upper limit of instantaneous flow rate allowed to perform valve closing operations; Before being sent to the electrically controlled valve, remote or local autonomous commands must be compared with the parameters in the boundary table, and can only be executed after all boundary conditions are met.

[0010] Preferably, the display screen of the intelligent control panel is a backlit LCD touch screen. This display screen is used to display the remaining amount, cumulative usage and current unit price information reported by the gas meter metering base in real time, and supports users to initiate remote recharge requests, valve opening and closing commands and query historical gas usage records through touch operation.

[0011] Preferably, the power module of the intelligent control panel supports dual power supply modes of alkaline dry batteries and mains power. When the mains power fails, it automatically switches to alkaline dry battery power supply, and sends a low battery alarm message to the gas management cloud platform through a wireless network card when the battery power is lower than a preset threshold.

[0012] Preferably, the local linkage strategy execution engine is also equipped with a useful gas behavior feature library and a dynamic boundary correction unit, wherein: The gas usage behavior feature database is used to record each flow data, valve action time, and user key operation record reported by the gas meter metering base, forming historical data of household gas usage behavior; Based on this historical data, the dynamic boundary correction unit analyzes the user's average hourly gas consumption and gas consumption duration at different times, automatically adjusts the nighttime low flow duration threshold in the valve safety operation boundary table, and uses the adjusted threshold to replace the preset default value as the basis for verifying subsequent control commands.

[0013] Preferably, the dynamic boundary correction unit is also used to monitor the Bluetooth beacon signal strength indication value received by the Bluetooth module and cross-compare the strength indication value with the action time of the electrically controlled valve; When the intensity indicator value continues to decrease and the valve action time increases synchronously, a diagnostic conclusion of valve mechanical component jamming is generated, and a maintenance work order request carrying the diagnostic conclusion is sent to the cloud platform via wireless network card. At the same time, the user is prompted to perform valve self-cleaning operation on the display screen.

[0014] Preferably, the housing of the intelligent control panel is equipped with an anti-tamper detection switch, which is electrically connected to the state reverse constraint module; When the casing is detected to be open, the state reverse constraint module records the event and reports it to the gas management cloud platform via the wireless network card. At the same time, it triggers the local linkage strategy execution engine to execute a full-area linkage valve shut-off command.

[0015] Preferably, the gas management cloud platform is a cloud platform based on a consortium blockchain architecture. The cloud platform includes a data storage unit for receiving gas data reported by the intelligent control panel, a strategy management unit for configuring and issuing linkage strategies, and a work order management unit for receiving and dispatching maintenance work orders.

[0016] This invention provides a modular remote-controlled gas meter control and management system. It offers the following advantages: By physically separating the gas meter's metering substrate from the smart control panel, communication, interaction, and safety control functions are completely decoupled from the metering unit. The metering substrate retains only flow measurement, valve actuation, and Bluetooth beacon broadcasting, while all components requiring upgrades or maintenance are centralized within the control panel, which can be independently installed in a convenient location for user operation. When the communication module, display screen, or power module malfunctions, there is no need to shut down the gas supply, remove the meter, or reseal it; simply replacing the control panel restores all functionality, reducing maintenance costs. Simultaneously, the control panel's built-in state reverse constraint module and valve safety operation boundary table enable remote valve control at the single meter, unit, building, and community levels, and support user-defined linkage strategies, overcoming the limitations of traditional solutions that only allow single-meter operation and cannot achieve area-wide linkage shutdown. Furthermore, the control panel's standardized Bluetooth interface is compatible with metering substrates from different manufacturers, eliminating the limitations imposed by communication protocol incompatibility on system expansion and providing a plug-and-play hardware foundation for adding new functional modules such as gas leak detection and pressure monitoring.

[0017] By setting up a dual-mode communication coordination unit within the control panel, both Bluetooth and wireless network links are managed simultaneously. When the home network is functioning normally, the panel acts as a data gateway, uploading base metering data to the cloud platform in real time and executing remote commands. When the network is interrupted, the panel automatically switches to local autonomous mode, independently executing valve shut-off operations based on pre-stored emergency thresholds, and caching all data during the interruption in local non-volatile memory, automatically resuming transmission once communication is restored. This mechanism ensures that the basic functions of gas safety management continue to operate under any network conditions, avoiding blind spots in remote monitoring caused by a single communication link failure. Simultaneously, the cloud platform adopts a consortium blockchain architecture, writing the entire lifecycle of every gas metering data point, every valve operation record, every policy configuration change, and every maintenance work order into the blockchain ledger. Gas companies, market regulators, and user representatives jointly maintain the same immutable audit record. In the event of metering disputes or safety incidents, the on-chain evidence data can be directly retrieved for liability determination, technically eliminating the possibility of malicious modification of data in centralized databases and enhancing the credibility and compliance of gas management. Attached Figure Description

[0018] Figure 1 This is a module data flow diagram of the control and management system for the modular remote linkage gas meter of the present invention; Figure 2 This is a diagram showing the physical deployment of the system according to the present invention. Detailed Implementation

[0019] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0020] Example: Please refer to Figure 1 and Figure 2 This invention provides a technical solution: a modular remote linkage gas meter control and management system, the specific structure and working process of which are as follows: The system includes a gas meter base unit and a smart control panel independently mounted externally to the base unit. The gas meter base unit uses a mechanical or electronic flow metering unit, the output of which is connected to a microprocessor. The microprocessor is used solely to accumulate flow data and control the opening and closing of electrically controlled valves. No remote communication modules, human-machine interfaces, or user data storage units are installed inside the base unit.

[0021] By completely separating the communication control and human-machine interaction functions of the gas meter from the metering body, an independent intelligent control panel is constructed, achieving a low-coupling separation between the gas meter's functional modules and the metering body. When the communication module, display screen, or power module malfunctions, there is no need to shut down the gas supply or disassemble the meter; simply replacing the independent control panel restores all functions, reducing maintenance time from several hours to less than ten minutes and lowering maintenance costs. Simultaneously, the removal of the remote communication module and complex interface from the gas metering body reduces hardware costs, and the simplified structure facilitates standardized production, allowing compatibility with control panels from different manufacturers and resolving the incompatibility issues of communication protocols between different vendors.

[0022] The base meter integrates a Bluetooth beacon module, which broadcasts data packets at a fixed frequency. These packets contain the base meter's unique device identifier, the instantaneous flow rate over the last three seconds, the cumulative total flow rate, and the current open / closed status of the electrically controlled valve. The Bluetooth beacon module's broadcast power is set to ensure a communication distance of no more than ten meters, thereby reducing power consumption and avoiding cross-household interference.

[0023] The intelligent control panel is a standalone box-shaped housing with wall-mounting holes or a desktop bracket on the back, allowing users to easily install it in a convenient location, such as low on a kitchen wall or near the entrance. Inside the panel is a control motherboard integrating a Bluetooth module, a wireless network card, an LCD display, a local linkage strategy execution engine, and a state inverse constraint module. The Bluetooth module uses a low-power Bluetooth protocol stack to scan and receive broadcast data packets from the gas meter's base station. The wireless network card supports the IEEE 802.11 protocol for connecting to a home wireless router, thereby establishing a transmission control protocol connection with a gas management cloud platform deployed on the public network. The LCD display shows flow information received from the base station, valve status, and the user interface. The local linkage strategy execution engine is an embedded microcontroller whose internal non-volatile memory stores pre-configured local control policies, such as automatically closing the valve when the instantaneous flow exceeds a preset threshold for thirty consecutive seconds. The state inverse constraint module is either a software logic unit integrated within the same microcontroller or a separate safety coprocessor.

[0024] The initial binding and security anchor establishment process of this system is as follows: The user triggers the "Scan Devices" operation via the touch button on the LCD screen of the smart control panel. The panel's Bluetooth module enters active scanning mode, collecting device identifiers broadcast by all surrounding gas meter base meters and listing them on the display. After the user selects the identifier corresponding to their own base meter, the panel initiates a Bluetooth connection request to that base meter. After the base meter accepts the connection, both parties establish an encrypted Bluetooth data channel.

[0025] At this point, the state reverse constraint module performs the following operations: The random number generator within the module generates a 16-bit random checksum. The panel sends this random checksum in plaintext to the drive controller of the electronically controlled valve on the gas meter's base station via Bluetooth. The drive controller writes the random checksum into its internal non-volatile random access memory and immediately places the electronically controlled valve in a physically locked closed state; that is, the valve will not operate regardless of any subsequent opening command. Simultaneously, the drive controller starts a timer for ten seconds. The drive controller then sends a "Waiting for Verification" response to the panel via Bluetooth.

[0026] Upon receiving the response, the state inverse constraint module performs a preset reversible operation on the previously generated 16-bit random checksum. In this embodiment, the reversible operation employs a bitwise XOR operation based on a fixed key: the module pre-sets an 8-bit binary key K, splits the 16-bit random checksum into high 8 bits and low 8 bits, performs a bitwise XOR operation with the key K for each, and then concatenates the two 8-bit results into a 16-bit result, which serves as the data to be verified. It should be noted that the reversible operation used here is not limited to XOR; it can be replaced with other symmetric encryption algorithms or custom reversible transformation functions depending on actual security requirements, as long as the operation can uniquely reconstruct the original checksum given the result and the key. The panel sends the operation result to the base table's driver controller via Bluetooth.

[0027] After receiving the inverse operation result, the drive controller compares it with the locally stored random checksum. Using the same fixed eight-bit key, the drive controller performs an XOR operation on the received inverse operation result again. If the result matches the locally stored random checksum, the verification is successful. Upon successful verification, the drive controller releases the physical lock of the electrically controlled valve, allowing subsequent normal reception of valve opening or closing commands, and writes the successful binding status to memory.

[0028] A state inverse constraint module was built into the control panel, establishing a two-way causal closed-loop control relationship between the panel and the gas meter substrate. Through a random checksum generated during initial binding and an inverse operation verification mechanism, both physical and logical layers ensure that only authorized panels can control the substrate valves, eliminating the security risks of unauthorized device binding and malicious command injection. Simultaneously, the panel's built-in valve safety operation boundary table performs triple verification on each valve opening / closing command, considering the daily number of operations, operation intervals, and instantaneous flow limits. This effectively prevents pipeline impact accidents caused by abnormally frequent valve opening / closing or valve closure under load due to program errors, network attacks, or user misoperation.

[0029] If the correct inverse operation result is not received within ten seconds, or if the received result does not match the stored check code after calculation, the drive controller maintains the valve locked and records an illegal binding attempt. After three consecutive failed attempts, the drive controller permanently locks the valve and requires physical reset using a special maintenance tool.

[0030] After successful binding, communication between the smart control panel and the gas meter base meter enters normal operating mode. The panel's Bluetooth module continuously receives flow data broadcast by the base meter and updates the display on the LCD screen. The panel's wireless network card packages the received data and uploads it to the gas management cloud platform. When the cloud platform issues a remote valve closing command, the command first reaches the panel, and the state reverse constraint module intervenes again: the module compares the target valve status in the command with the current valve status. If they are the same, it is ignored; if they are different, the module queries the locally stored "valve safety operation boundary table," for example, checking whether the valve has been opened and closed more than three times in the past hour. If not, the module adds a new 16-bit dynamic checksum to the command. This dynamic checksum is obtained by hashing the current timestamp and the most recently reported instantaneous flow value from the base meter and sending it to the base meter's drive controller via Bluetooth. The drive controller verifies the dynamic checksum according to the same verification logic as in the binding phase. After successful verification, the valve action is executed.

[0031] In the above embodiments, the Bluetooth beacon module's broadcast frequency is set to once every thirty seconds to balance power consumption and data real-time performance. Communication between the wireless network card and the cloud platform uses an encrypted socket layer protocol. The electrically controlled valve is a ball valve driven by a DC motor, and its drive controller integrates a watchdog timer that automatically resets after the valve's action is completed. The local control policy stored in the intelligent control panel's local linkage policy execution engine includes: when two consecutive base table broadcast data are not received and the time interval exceeds ninety seconds, the panel determines a communication anomaly, displays a "communication interruption" message on the screen, and simultaneously reports the anomaly to the cloud platform via the wireless network card.

[0032] The initial binding and security authentication process between the smart control panel and the gas meter base meter is as follows: When a user installs the system for the first time, a one-to-one binding relationship needs to be established between the smart control panel and the corresponding gas meter base meter. The user first triggers the binding process using the "Device Pairing" virtual button on the LCD touchscreen display of the smart control panel. The Bluetooth module inside the panel then enters active scanning mode. This module uses a low-power Bluetooth protocol stack, and its scanning channels cover the thirty-seven data channels broadcast by Bluetooth. The scanning window duration is set to two seconds, and the scanning interval is set to five seconds. The Bluetooth module receives data packets broadcast by the Bluetooth beacon modules of all surrounding gas meter base meters. Each data packet contains a device identifier field, a signal strength indicator field, and a type field to identify the device type. The panel arranges the collected device identifiers and their corresponding signal strength indicator values ​​in descending order of signal strength, generates a device list, and displays it on the LCD screen.

[0033] Based on the relative positions of the user's gas meter and the panel, the user selects the device identifier with the strongest signal from the list as the target device. After the user clicks on the device identifier, the panel's Bluetooth module initiates a Bluetooth connection request to the base meter. Upon receiving the connection request, the base meter's Bluetooth beacon module checks if it is already paired with another panel: the base meter's internal non-volatile memory contains a pairing flag, initially set to zero. If the pairing flag is zero, the base meter accepts the connection request and establishes an encrypted Bluetooth data channel with the panel. This encrypted channel uses the pairing mechanism defined by the Bluetooth specification, employing a digital comparison method for key negotiation. If the pairing flag is one, the base meter rejects the connection request and returns a "already paired" rejection code to the panel.

[0034] After establishing a Bluetooth data channel, the state inverse constraint module inside the panel performs the following operations. This module embeds a true random number generator, which uses voltage noise collected by the analog-to-digital converter as an entropy source to generate a 16-bit binary random number, denoted as Rc. The panel sends this random number Rc in plaintext to the drive controller of the electrically controlled valve in the gas meter metering base via the Bluetooth data channel. The drive controller integrates a microprocessor with on-chip non-volatile random access memory. Upon receiving Rc, the drive controller writes it to a specific address in the non-volatile random access memory and immediately outputs a lock signal to the motor drive circuit of the electrically controlled valve. This lock signal puts the motor drive circuit in a high-impedance state, meaning that no subsequent control commands from any interface can cause the motor to move, thus forcing the electrically controlled valve to remain closed. Simultaneously, the drive controller starts a countdown implemented by a hardware timer, with a countdown duration of ten seconds. The drive controller returns an acknowledgment frame to the panel via the Bluetooth data channel, containing a "waiting for verification" instruction code and the current remaining countdown time.

[0035] After receiving the "Waiting for Verification" confirmation frame, the state inverse constraint module begins calculating the inverse operation result. This embodiment employs a pre-shared key XOR inverse operation method: at the time of panel manufacturing, both the state inverse constraint module and the base table's driver controller are pre-configured with the same eight-bit binary key K. For the aforementioned sixteen-bit random number Rc, the state inverse constraint module splits it into the high eight bits Rc_H and the low eight bits Rc_L. Rc_H and Rc_L are then XORed with the key K bitwise, yielding two eight-bit results X_H and X_L. These X_H and X_L are then concatenated into a sixteen-bit inverse operation result Rc_inv. The panel sends this Rc_inv to the base table's driver controller via the Bluetooth data channel.

[0036] Upon receiving Rc_inv, the driver controller performs a verification operation. First, it splits Rc_inv into the high eight bits X_H and the low eight bits X_L. Then, it performs a bitwise XOR operation on X_H and X_L with the locally stored key K, obtaining two eight-bit results Y_H and Y_L. These Y_H and Y_L are then concatenated into a sixteen-bit verification value Rc_calc. Next, the driver controller reads the previously stored random number Rc from non-volatile random access memory and compares Rc_calc with Rc bit by bit. If each bit is equal, the verification passes. After successful verification, the drive controller performs the following actions: First, it clears the random number Rc in the non-volatile random access memory; second, it cancels the high-impedance lock signal on the motor drive circuit, restoring the electrically controlled valve to its normal controlled state; third, it changes the binding flag from zero to one; fourth, it sends a "binding successful" confirmation frame to the panel via the Bluetooth data channel, which includes the current cumulative total flow value of the base table as additional information; fifth, the drive controller records the system timestamp of the binding operation as part of the subsequent audit log.

[0037] After receiving the "binding successful" confirmation frame, the panel displays the "binding complete" message on the LCD screen and stores the device identifier and binding time of the base table in local non-volatile memory as the basis for subsequent automatic reconnection.

[0038] If the drive controller does not receive any inverse operation result from the panel before the countdown ends, or if the received inverse operation result, after XOR operation, yields Rc_calc which is not equal to the locally stored Rc, the verification fails. Upon verification failure, the drive controller performs the following actions: First, it clears the random number Rc in the non-volatile random access memory, but increments the failure attempt counter; second, it maintains the locked state of the electrically controlled valve; third, it sends a "verification failed" confirmation frame to the panel via the Bluetooth data channel, including the current number of failure attempts. If three consecutive verification failures occur, the drive controller sets the binding flag to a special value, such as two, indicating that the base unit has entered the tamper-proof locked state. In the tamper-proof locked state, the base unit no longer accepts any new binding requests or responds to any valve control commands, only maintaining a Bluetooth beacon broadcast of an error code. At this time, only a dedicated maintenance tool connected to the base unit's debugging interface can clear the tamper-proof locked state and reset the binding flag.

[0039] In the above implementation, the Bluetooth beacon module broadcasts for 30 seconds, but during the pairing process, the base meter temporarily adjusts the broadcast interval to two seconds to speed up the scanning response. The non-volatile random access memory inside the drive controller has power-off retention capability; even if the base meter is disconnected from mains power or backup battery power, the stored random numbers, pairing flags, and failed attempts will not be lost. The Bluetooth communication channel between the panel and the base meter does not maintain a constant connection after successful pairing. Instead, a connection parameter update strategy is adopted, setting the connection interval to once every five seconds to reduce power consumption. The panel only temporarily wakes up the connection or re-establishes the connection when it is necessary to transmit valve control commands or obtain real-time flow data.

[0040] The specific working process and link arbitration logic of the dual-mode communication coordination unit set up inside the intelligent control panel are as follows: A dual-mode communication coordination unit is integrated on the control motherboard of the intelligent control panel. This unit is implemented through firmware using an embedded microcontroller. This unit manages two physical communication interfaces simultaneously: a Bluetooth module and a wireless network card. The Bluetooth module is configured as a slave, continuously receiving data packets broadcast from the gas meter's base meter. The data packets include instantaneous flow rate, cumulative flow rate, valve status, and base meter battery voltage. The wireless network card is configured as a site, establishing a transmission control protocol connection with the gas management cloud platform deployed on the public network through the home wireless router. The connection maintenance mechanism uses a heartbeat method, sending a heartbeat request every sixty seconds. If there is no response after three consecutive heartbeats, the connection is considered interrupted.

[0041] This unit maintains a communication state machine, which includes two main states: cloud online and cloud offline. Every two seconds, the state machine periodically checks the link layer status and transmission control protocol connection status of the wireless network card. Specifically, the wireless network card sends a four-byte query message to the cloud platform. If an acknowledgment is received from the cloud platform within five seconds, communication is considered normal; if no acknowledgment is received within the timeout period, a retry is performed. After two consecutive failed retries, communication is considered interrupted.

[0042] When the communication state machine is in the cloud online state, the dual-mode communication coordination unit executes the first link arbitration logic. The unit temporarily stores each data packet received from the Bluetooth module in a circular buffer with a depth of sixty data packets. For each newly received data packet, the unit extracts the instantaneous flow rate, cumulative flow rate, and valve status value, encapsulates this data into a reporting message according to a predefined message format, and sends it to the cloud platform via the wireless network card's transmission control protocol. The transmission operation adopts a non-blocking mode; if transmission fails, the error is recorded but the data packet is not discarded. Simultaneously, the cloud platform may issue remote control commands, such as valve opening commands, valve closing commands, or parameter configuration commands. After receiving these commands, the dual-mode communication coordination unit does not directly forward them to the Bluetooth module but instead passes the command content to the state reverse constraint module for verification. The state reverse constraint module verifies the command according to a preset valve safety operation boundary table. After successful verification, the unit then sends the command via the Bluetooth module to the electric valve drive controller of the gas meter metering base meter and waits for the drive controller to return the execution result. After receiving the execution result, the unit transmits the result back to the cloud platform via the wireless network card.

[0043] When the communication state machine enters the cloud offline state, i.e., after the connection between the wireless network card and the cloud platform is interrupted, the dual-mode communication coordination unit executes the second link arbitration logic. The unit immediately sends a trigger signal to the local linkage strategy execution engine, notifying the engine to take over control. The local linkage strategy execution engine internally stores an emergency control rule table, which contains several independent rules. Each rule includes a trigger condition, a comparison operator, a threshold parameter, and an execution action. For example, the first rule: the trigger condition is "the base table has not reported data twice consecutively", the comparison operator is "greater than", the threshold parameter is "sixty seconds", and the execution action is "close the valve". The second rule: the trigger condition is "instantaneous flow rate value", the comparison operator is "greater than", the threshold parameter is "six cubic meters per hour", and the execution action is "close the valve". The third rule: the trigger condition is "daily increase in cumulative flow rate value", the comparison operator is "exceeds", the threshold parameter is "twice the average value of the previous seven days", and the execution action is "close the valve and report a suspected leak".

[0044] The local linkage strategy execution engine scans these rules every fifteen seconds, comparing the real-time data received from the base table via the Bluetooth module with the trigger conditions in the rules. When the trigger condition of any rule is met, the engine generates a valve control command, such as a valve closing command. This command is transmitted to the state inverse constraint module for verification. In cloud offline mode, the state inverse constraint module still operates, but the verification basis only includes the locally stored valve safety operation boundary table, and does not rely on the dynamic policies issued by the cloud platform. After successful verification, the dual-mode communication coordination unit sends the command to the electronically controlled valve drive controller of the base table via the Bluetooth module. The engine simultaneously records the command type, trigger time, trigger rule number, and execution result in a power-off retention memory inside the panel, forming an operation log entry. Each log entry includes a timestamp, command type, trigger rule identifier, instantaneous flow rate value reported by the base table at that time, and valve status.

[0045] The dual-mode communication coordination unit continuously monitors the connection recovery status of the wireless network card in the cloud offline state. The monitoring method is as follows: every thirty seconds, the unit attempts to send an Address Resolution Protocol (ARP) request or a simple Hypertext Transfer Protocol (HTTP) request to a known Internet Protocol (IPP) address on the cloud platform via the wireless network card. Upon receiving a valid response, the unit determines that communication has been restored and immediately triggers the breakpoint resume transmission process. The breakpoint resume transmission process is as follows: the unit reads all unuploaded operation log entries from the power-off retention memory since entering the cloud offline state, arranged in chronological order. The unit encapsulates these log entries into batch upload messages, each containing a maximum of ten log entries. The unit sends these messages to the cloud platform via the wireless network card, using a stop-and-wait protocol: after sending a message, it waits for an acknowledgment from the cloud platform before sending the next message. If a message fails to be sent, the unit retains that message and its subsequent messages, waiting for the next retry cycle, which is sixty seconds. After all log entries have been uploaded, the unit clears the corresponding log records in the local storage, switches the communication state machine back to the cloud online state, and notifies the local linkage strategy execution engine to return to the standby state, no longer actively generating control commands.

[0046] A dual-mode communication coordination unit enables redundant link management between Bluetooth and wireless networks. When the home network is functioning normally, the panel acts as a data gateway, uploading base data to the cloud platform in real time. In the event of a network outage, the panel automatically switches to local autonomous mode, independently executing valve control based on locally stored emergency thresholds, and caching data from the outage period locally for automatic resume transmission once communication is restored. This mechanism addresses the technical shortcomings of relying on a single communication channel and the failure of remote control during network fluctuations, ensuring the continuous availability of gas safety management functions under any network conditions.

[0047] In the above embodiments, the dual-mode communication coordination unit timestamps the data packets received by the Bluetooth module, with each data packet accompanied by a system clock count at the time of reception, accurate to one second. In cloud online mode, the unit proactively packages and uploads the currently accumulated data every ten data packets received or every 300 seconds to reduce network traffic. In cloud offline mode, the unit continues to receive Bluetooth data packets but no longer uploads them in real time; instead, it stores the data packets as is in a circular buffer. When the buffer is full, the oldest data packet is overwritten using a first-in, first-out (FIFO) principle. After executing an emergency valve closure action, the local linkage strategy execution engine records an additional log entry, including the valve status before and after execution. In cloud offline mode, the panel's LCD screen displays a "communication interrupted" icon while still displaying the latest traffic data reported by the base table. This icon automatically disappears when communication is restored and the interrupted transmission is resumed.

[0048] The specific data structure, parameter configuration, and instruction verification process of the valve safety operation boundary table preset within the state reverse constraint module include: The state inverse constraint module is implemented within the embedded microcontroller of the intelligent control panel using a combination of read-only and writable memory areas. This module maintains a valve safety operation boundary table, which is stored as an array in the microcontroller's non-volatile memory. The table contains four fields: parameter identifier, parameter value, parameter data type, and last modification timestamp. The table defaults to three sets of boundary parameters.

[0049] The first set of boundary parameters is the maximum number of valve openings and closings per day. This parameter is identified as "MAX_DAILY_SWITCH", stored as an unsigned integer, and has a default value of ten. This counter resets at midnight local time. The state reverse constraint module increments this counter and records the date after each valve opening / closing operation. When the module receives a new valve opening / closing command, it first reads the cumulative number of openings and closings for the day. If the cumulative number has reached ten and the day has not yet been reset, the module refuses to execute the command and returns an "over-limit" error code to the command sender. The error code includes the current count and the threshold limit. Simultaneously, the module writes this rejection event to its local log.

[0050] The second set of boundary parameters is the minimum time interval between two adjacent valve switching operations. This parameter is identified as "MIN_INTERVAL," with a default value of two seconds. This interval is defined as the time difference between the completion time of the previous valve action and the start time of the next valve action. The state reversal constraint module records the current system clock value, accurate to one second, after each successful valve command execution. When the module receives the next valve command, it calculates the difference between the current clock and the clock of the previous execution completion. If this difference is less than two seconds, the module postpones the current command execution and starts a delay timer with a duration equal to two seconds minus the elapsed time. The command is executed only after the timer expires. If another valve command in the same direction is received during the delay period, the module merges them and executes only the last command. Each time the module performs a delay, it returns a "waiting" status code to the command sender, indicating the actual number of seconds the execution will be delayed.

[0051] The third set of boundary parameters represents the upper limit of instantaneous flow rate allowed for valve closure. This parameter is identified as "MAX_FLOW_FOR_VALVE_OFF," with a default value of eight cubic meters per hour. This parameter means that when the panel receives a remote valve closure command or a locally generated valve closure command, if the instantaneous flow rate reported by the gas meter's base meter exceeds eight cubic meters per hour, the valve closure operation will be refused. Upon receiving a valve closure command, the state reverse constraint module first extracts the instantaneous flow rate value from the most recently received base meter data packet from the Bluetooth module. The module maintains an internal instantaneous flow rate buffer, storing the three most recently received instantaneous flow rate values, and taking the median as the current estimated instantaneous flow rate. This estimated value is compared to eight cubic meters per hour. If the estimated value is less than or equal to this threshold, the valve closure command is allowed; if the estimated value exceeds this threshold, the module refuses to execute and returns an error code "Flow rate too high, valve closure prohibited" to the command sender. This error code simultaneously triggers the panel's LCD screen to display the message "Current gas consumption is high, please turn off the gas appliance and try again."

[0052] In addition to the three sets of parameters mentioned above, the valve safety operation boundary table also includes a time-related flow duration parameter: the nighttime low flow duration threshold. This threshold is used to determine whether, during nighttime periods, such as from 10 PM to 6 AM the next day, if the gas meter remains in a low but non-zero flow state for a duration exceeding this threshold, a safety protection mechanism will be triggered, such as issuing a warning or automatically shutting off the valve. The default value for this threshold can be set to three hours, but its specific value is not fixed and can be adaptively adjusted by the dynamic boundary correction unit based on the user's actual gas usage behavior.

[0053] All three sets of boundary parameters mentioned above support remote modification. The gas management cloud platform can send parameter configuration commands to the intelligent control panel via wireless network card, with the commands carrying parameter identifiers and new values. After receiving the configuration command, the state reverse constraint module first verifies the digital signature of the command. Once the signature verification is successful, it writes the new value to the corresponding field in the non-volatile memory and updates the last modification timestamp. The parameter modification operation is also recorded in the log, including the value before modification, the value after modification, and the source identifier of the cloud platform command.

[0054] The comparison process of the valve safety operation boundary table is implemented as a unified entry function in the state reverse constraint module. The input parameter of this function is a control instruction structure to be executed, including the instruction type, instruction source, and instruction timestamp. The function execution steps are as follows: First, parse the instruction type. If it is a valve opening or closing instruction, continue; otherwise, allow it directly. Second, query the current count value of the maximum number of valve openings and closings per day. If the threshold has been reached, return a rejection. Third, query the minimum time interval between two consecutive valve openings and closings. If the current time is less than the time since the last execution completion, enter a delay waiting state. Fourth, if the instruction type is a valve closing instruction, query the instantaneous flow limit value and obtain the current instantaneous flow estimate from the base table. If the threshold is exceeded, return a rejection. Fifth, after all boundary conditions are met, the function returns "Execution Allowed" and passes the instruction to the Bluetooth module sending module. Sixth, after the instruction is successfully sent and the execution completion confirmation returned by the base table is received, update the last execution completion timestamp and increment the daily valve opening and closing counter.

[0055] In the above implementation, the daily on / off valve counter is automatically reset at midnight each day, triggered by a real-time clock interruption. The real-time clock uses an independently operating clock chip inside the panel, equipped with a backup battery to ensure no time loss during power outages. The instantaneous flow rate limit is factory set to eight cubic meters per hour. Gas company maintenance personnel can remotely adjust this value to ten cubic meters per hour or six cubic meters per hour via a cloud platform to suit different gas meter models or gas usage scenarios. Every rejection operation by the state reverse constraint module records detailed reasons in the panel's local log and simultaneously reports to the cloud platform via wireless network card for the gas company to conduct safety audits.

[0056] The specific structure, interface layout, and user interaction process of the backlit LCD touch screen configured in the intelligent control panel include: The display is a transmissive thin-film transistor liquid crystal panel with a diagonal size of four inches and a resolution of 480 x 320 pixels. The display surface is covered with a capacitive touch-sensing layer that supports five-point simultaneous touch and has a waterproof and oil-resistant coating. The backlight module uses six white light-emitting diodes (LEDs) as the light source, connected in series for power supply. The backlight brightness is adjusted via a pulse-width modulation (PWM) signal with ten levels, ranging from a minimum of 20 candela per square meter to a maximum of 250 candela per square meter. An ambient light sensor is located on the panel housing. This sensor outputs the ambient illuminance value to the panel's microcontroller, which automatically adjusts the backlight brightness based on this value: when the ambient illuminance is above 100 lux, the backlight is set to maximum brightness; when the ambient illuminance is below 10 lux, the backlight is set to minimum brightness.

[0057] The graphical user interface of the display screen adopts a layered menu structure. After the system is powered on, the display screen first shows the standby main interface. The main interface is divided into three areas. The top status bar area is 40 pixels wide and displays the wireless network card signal strength icon, Bluetooth connection status icon, current time, and backup battery level icon from left to right. The wireless network card signal strength icon is divided into five segments based on the received signal strength indication value. Five segments are displayed when the received signal strength indication value is greater than -60 milliwatt decibels, and one segment is displayed when it is less than -90 milliwatt decibels. The Bluetooth connection status icon is a connection symbol. When the Bluetooth link between the panel and the gas meter base meter is normal and a broadcast data packet has been received from the base meter within three seconds, the icon is solid; when no broadcast data packet has been received for six consecutive seconds, the icon is hollow and has a red cross. The middle main display area occupies 320 pixels in height and is used to display gas data. The bottom area occupies 40 pixels in height and has three virtual buttons: "Recharge", "Valve Control", and "History".

[0058] The central main display area shows three core pieces of information using a combination of numbers and graphics: remaining amount, cumulative usage, and current unit price. The remaining amount is displayed with two decimal places in yuan, for example, "Remaining amount 126.50 yuan". The cumulative usage is displayed with one decimal place in cubic meters, for example, "Cumulative usage 328.4 cubic meters". The current unit price is displayed with three decimal places in yuan per cubic meter, for example, "Unit price 2.950 yuan / cubic meter". These three values ​​are refreshed every five seconds, with the refresh data derived from the most recent base station broadcast packet received by the Bluetooth module or user account information sent by the cloud platform. If the Bluetooth module does not receive a new broadcast packet for fifteen consecutive seconds, the main display area shows an animated "Communication in Progress" icon after the corresponding value until communication is restored.

[0059] After the user touches the virtual "Valve Control" button at the bottom of the main interface, the display switches to the valve control sub-interface. This sub-interface displays the current valve status, either "Open" or "Closed," distinguished by a green or red background. A physical button mapping area is provided on the interface, labeled "One-Click Valve Switch." When the user touches this area, a confirmation dialog box pops up on the display, asking "Confirm valve switch operation?" Below are "Confirm" and "Cancel" buttons. After the user clicks "Confirm," the panel sends a valve control command to the gas meter's base station via Bluetooth, while a "Command Sending" progress bar appears on the display. The progress bar is 160 pixels wide and 16 pixels high, filling from left to right over three seconds. Once the panel receives a successful confirmation frame from the base station, the progress bar disappears, the valve status display area updates to the new status, and a half-second notification sound plays. If no confirmation frame is received within three seconds, or a failure frame is received, the display shows a "Operation failed, please check your network or contact the gas company" message, which closes automatically after three seconds.

[0060] After the user touches the "Recharge" virtual button at the bottom of the main interface, the display switches to the recharge sub-interface. This interface displays the current remaining amount and a numeric keypad. The numeric keypad includes numbers 0 to 9, a decimal point, a delete key, and an confirm key. The user enters the recharge amount via the keypad, ranging from ten yuan to five hundred yuan, in ten-yuan increments. After entering the amount, the user clicks the confirm key, and the panel sends the recharge request to the gas management cloud platform via the wireless network card. During the transmission process, the display shows a "Recharge request submitted, please wait" message. After the cloud platform processes the request, it returns the recharge result. Upon receiving the result, if successful, the panel displays "Recharge successful, remaining amount updated" and refreshes the remaining amount value on the main interface; if unsuccessful, it displays the reason for the failure, such as "Network busy, please try again" or "Account abnormal, please contact customer service." After a successful or unsuccessful recharge, the interface pauses for two seconds before automatically returning to the main interface.

[0061] After the user touches the "History" virtual button at the bottom of the main interface, the display switches to the history query sub-interface. This interface features a date selector at the top, allowing users to select the year or month using the left and right arrows. Below the date selector, a list displays the daily gas consumption for that month, in cubic meters, rounded to one decimal place. The gas cost for that day is displayed to the right of each entry, in yuan, rounded to two decimal places. The list is 300 pixels high and supports vertical scrolling. Clicking on any day entry takes the user to the day's details sub-interface, displaying a bar chart of hourly gas consumption for that day. The horizontal axis represents 24 hours, and the vertical axis represents gas consumption; the bar height is proportional to the actual gas consumption. At the bottom of the details interface is an "Export" button. Clicking this button allows the user to send the currently displayed historical gas consumption records, in comma-separated value format, to a pre-bound email address via Wi-Fi. A "Export Successful" message is displayed on the screen upon successful transmission.

[0062] In the above embodiments, the touch sampling rate of the display screen is 100 times per second, and each touch event is processed by anti-shake filtering with a 50-millisecond anti-shake delay. The display screen automatically enters a screen-off standby state after 60 seconds of inactivity, during which the backlight is turned off but the pixel content of the LCD panel remains unchanged to reduce power consumption. A single touch of the screen in the screen-off state will wake up the backlight and resume operation. The backlight will also automatically illuminate when the accelerometer inside the panel detects an angle change of more than 30 degrees in the housing. The touch button area of ​​the display screen continues to respond to touch input even in the screen-off state; the microcontroller periodically wakes up to detect touch interruptions, with a detection cycle of two seconds.

[0063] The specific composition of the power module in the intelligent control panel, the dual power supply switching mechanism, and the low battery alarm process include: The power module is integrated into the control board of the intelligent control panel and mainly consists of three parts: an AC power input unit, an alkaline battery input unit, and a power switching and management circuit. The AC power input unit uses an AC-to-DC step-down module with an input voltage range of 100V to 240V AC, an output DC voltage of 3.3V, and a maximum output current of 2 amps. The input of this step-down module is connected to an external AC adapter via a pluggable terminal block. The adapter is a separate accessory; after the user plugs it into a household power outlet, DC power is introduced into the panel housing via two wires. The output of the step-down module is connected to the panel's main power bus.

[0064] The alkaline battery access unit includes a battery compartment located on the back of the panel housing. This compartment is connected in series with four AA alkaline batteries via spring contacts, providing a total nominal voltage of 6 volts DC. The spring contacts of the battery compartment are connected to a low-dropout linear regulator (LDL-LED), which converts the 6 volts to 3.3 volts and has an output current capability of 1 ampere. The output of the LDL-LED is also connected to the main power bus, but its output path includes a series-connected ideal diode circuit, simulated using a field-effect transistor (FET), with a forward voltage drop of 20 millivolts.

[0065] The core of the power switching and management circuit is a power path controller chip, specifically the Texas Instruments TPS2121 or a similar chip. This chip has two input ports connected to the outputs of the buck converter and the low-dropout linear regulator, respectively, with the output port connected to the main power bus. The path controller chip integrates priority logic, defaulting to selecting the input with the higher voltage as the output source. When the mains power is normal, both the buck converter and the low-dropout linear regulator output 3.3 volts, and since their voltages are equal, the path controller chip selects the first input channel (the buck converter channel) for power supply according to its internal priority. When the mains power fails, the buck converter output drops to zero volts, while the low-dropout linear regulator still outputs 3.3 volts. Within twenty microseconds of detecting that the voltage of the first input channel is below 2.8 volts, the path controller chip automatically switches to the second input channel, where the alkaline battery continues to supply power through the low-dropout linear regulator. During the switching process, the main power bus voltage fluctuation range is controlled within 3.3 volts ± 5%, ensuring that the loads such as the microcontroller, Bluetooth module, wireless network card and display screen in the panel work uninterruptedly.

[0066] The power module also includes a battery voltage monitoring circuit. This circuit consists of a resistor divider network and a microcontroller-built-in analog-to-digital converter (ADC). The resistor divider network is connected across the input of the low-dropout linear regulator, i.e., between the positive and negative terminals of the alkaline dry cell battery, with a voltage division ratio of 2:1, attenuating the battery voltage to the full-scale range of the ADC. The microcontroller initiates the ADC every 60 seconds, sampling four times consecutively and averaging the results as the current battery voltage value. The microcontroller internally stores a preset low-power threshold of 4.8 volts, corresponding to 1.2 volts for a single alkaline dry cell battery. When the measured battery voltage drops below 4.8 volts, the microcontroller determines that the battery is low on power.

[0067] When the battery level drops below a preset threshold, the power module triggers a low-battery alarm generation and transmission process. The microcontroller first records an alarm event log in its local non-volatile memory, including the event type code "BAT_LOW", the timestamp of the event, and the current battery voltage. The microcontroller then checks the communication status of the wireless network card: if the wireless network card's transmission control protocol with the gas management cloud platform is working correctly, the microcontroller encapsulates the alarm information into a data message in JavaScript object notation, containing four fields: device identifier, event type, voltage value, and timestamp. The microcontroller then sends the message to the designated receiving port of the cloud platform via the wireless network card. The transmission operation employs an acknowledgment and retransmission mechanism: after sending the message, it waits for an acknowledgment from the cloud platform. If no acknowledgment is received within three seconds, the message is retransmitted. If three consecutive retransmissions fail, the transmission is abandoned, and the alarm information is stored in the local transmission queue, awaiting retransmission upon next communication resumption. If the wireless network card is currently offline, the microcontroller also stores the alarm information in the local transmission queue, prioritizing the transmission of alarm information in the queue once communication is restored.

[0068] When the battery voltage drops below 4.8 volts, the panel's LCD screen will display a battery icon in the top status bar area, filled with diagonal lines, prompting the user to replace the battery. Simultaneously, the panel checks the battery voltage every 24 hours. If the voltage remains below 4.8 volts for more than three days, the microcontroller will increase the alarm frequency from once every 60 seconds to once every 10 seconds, and add a local buzzer warning: each time a low voltage is detected, the buzzer emits two short beeps, each lasting 100 milliseconds, with a 200-millisecond interval between the two beeps. The buzzer's sounding time is limited to between 8:00 AM and 8:00 PM to avoid disturbing users at night.

[0069] In the above embodiment, the mains power input unit and the alkaline dry battery input unit of the power module are electrically isolated through a path controller chip to prevent the battery from backflowing current into the buck module. When the mains power is restored, the path controller chip automatically switches back to powering the buck module. Simultaneously, the input voltage of the low-dropout linear regulator remains, but the path controller chip no longer selects that channel, and the battery no longer outputs current. After detecting the restoration of mains power, the microcontroller re-evaluates the battery voltage. If the battery voltage is still below 4.8 volts, the low-battery alarm state remains in effect. If the battery voltage rises above 4.9 volts due to the brief float charging effect during mains power supply, the alarm state is cleared, and it is retried when the voltage drops again. The spring contacts in the battery compartment are gold-plated, with a contact resistance of less than 50 milliohms to ensure the accuracy of voltage measurement.

[0070] The specific data recording, analysis, and threshold adjustment processes of the gas consumption behavior feature library and dynamic boundary correction unit configured in the local linkage strategy execution engine include: The gas usage behavior database is stored in a circular queue in the non-volatile memory of the smart control panel. This queue stores gas usage records for the most recent ninety days, with each record corresponding to one hour, totaling twenty-four records per day and two thousand one hundred and sixty records. Each record contains the following fields: date, hour, cumulative gas consumption within that hour, number of valve opening / closing operations within that hour, number of user operations via panel touch buttons within that hour, number of data packets reported by the base meter within that hour, and a flag indicating whether the hour is a working day.

[0071] The data recording process is driven by a timer in the local linkage strategy execution engine. Each time the engine receives a base table broadcast data packet from the Bluetooth module, it extracts the cumulative flow value and subtracts it from the previously received cumulative flow value to obtain the gas consumption within the time interval. The engine then adds this gas consumption to the cumulative gas consumption field corresponding to the current hour. Simultaneously, the engine monitors the execution results of valve control commands. Each time a valve successfully performs an opening or closing action, the engine increments the valve operation count for the current hour. The engine also monitors user key press events on the panel touchscreen, including operations such as recharge, valve control, and history query. Each time a user touches a valid key area, the engine increments the user operation count for the current hour. At the end of each hour, the engine writes the hour's records to a circular queue in the feature database, overwriting the older records from ninety days prior.

[0072] The dynamic boundary correction unit runs the analysis process every seven days, with the run time set to 2:00 AM on Sunday, at which time at least fourteen days of complete data have been accumulated in the gas consumption behavior feature database. The analysis process includes the following steps: The first step is for the unit to read all records from the feature library for the past seven days.

[0073] The second step is to divide the day into three time periods: the daytime period is from 6:00 to 18:00, the nighttime period is from 18:00 to 22:00, and the late night period is from 22:00 to 6:00 the next day.

[0074] The third step is to calculate the average hourly gas consumption for each day during the late night period, and take the value at the same point for seven days. For example, the gas consumption in the first hour of the late night period, from 10 pm to 11 pm, is calculated as the average for seven days.

[0075] The fourth step is to extract the duration of continuous gas consumption during the late-night period. The engine defines "continuous gas consumption" as gas consumption exceeding 0.05 cubic meters in consecutive hours. The engine iterates through the ten hours of the late-night period each day, identifies hourly segments of continuous gas consumption, and records the length of the longest continuous segment. From the data of the past seven days, the engine calculates the median of the longest continuous segment, denoted as L_med, in hours.

[0076] Fifth, the engine reads the default value of the preset "nighttime low flow duration threshold" from the valve safety operation boundary table. The default value is three hours. The engine compares L_med with the default value: if L_med is greater than the default value, the new threshold is set to L_med plus one hour; if L_med is less than or equal to the default value, the default value is maintained and no upward adjustment is made.

[0077] When the dynamic boundary correction unit performs a threshold update, it does not directly overwrite the original threshold. Instead, it adds a dynamic threshold entry to the valve safety operation boundary table. This entry is specifically used to record the adjusted "nighttime low flow duration threshold." This entry contains three fields: dynamic threshold value, effective time period, and validity period. The dynamic threshold value is L_med calculated above plus one hour. The effective time period is limited to 10 PM to 6 AM the following day; that is, the dynamic threshold is only enabled within this time interval. The validity period is set to thirty days, starting from the day the calculation is completed. Within the validity period, the state reverse constraint module prioritizes using the dynamic threshold when comparing the nighttime low flow duration; if the current time is outside the effective time period or the dynamic threshold has expired, it reverts to using the preset default value.

[0078] After each analysis, the dynamic boundary correction unit writes the adjustment operation to its local log. The log includes the adjustment date, the default threshold before adjustment, the calculated L_med value, the final set dynamic threshold, and the expiration date. Simultaneously, the engine reports this log to the gas management cloud platform via wireless network card, allowing the gas company to remotely view trends in user gas consumption behavior.

[0079] In the above implementation, the dynamic boundary correction unit filters outliers when calculating the hourly average gas consumption: if the gas consumption of a certain hour exceeds twice the sum of the gas consumption of the two adjacent hours, then that hour is determined to be an outlier, is removed when calculating the average, and is replaced by the average of the adjacent hours. In the calculation of continuous gas consumption duration, gaps where the engine allows a single hourly gas consumption of less than 0.05 cubic meters but not exceeding two consecutive hours are still considered continuous. That is, if the gas consumption of a certain hour is less than 0.05 cubic meters, but the gas consumption of the two hours before and after it is greater than 0.05 cubic meters, then that gap hour is still counted as a continuous gas consumption segment. The minimum adjustment unit for the dynamic threshold is half an hour, rounded up. The adjusted dynamic threshold value range is limited to between one hour and six hours. If the calculated L_med plus one hour exceeds six hours, then six hours is still used.

[0080] It should be understood that the specific statistical method described above for determining the dynamic threshold based on the median of continuous gas usage hours during the late night period over the past seven days is merely an exemplary implementation of this invention. Depending on the actual application scenario and the complexity of user gas usage behavior, other conventional mathematical analysis methods can be used instead, such as weighted moving averages, exponential smoothing, comparison with historical data from the same period, or simple percentile statistics. These methods all belong to digital signal processing or time series analysis techniques well-known in the field. As long as typical values ​​or trends reflecting the duration of continuous nighttime gas usage can be extracted from historical gas usage data, and the corresponding thresholds in the valve safety operation boundary table are dynamically adjusted accordingly, the adaptive adjustment purpose of this solution can be achieved.

[0081] The dynamic boundary correction unit uses a cross-comparison between the Bluetooth beacon signal strength indication value and the actuation time of the electrically controlled valve to diagnose valve mechanical component jamming and trigger a maintenance work order and self-cleaning operation. The dynamic boundary correction unit continuously monitors the Bluetooth beacon signal strength indication value received by the Bluetooth module from the gas meter's base station. Each time the Bluetooth module receives a broadcast data packet, it extracts the received signal strength indication value from the packet, measured in milliwatt-decibels (mWdB), with a value ranging from -100 to -20 mWdB. The unit stores these strength indication values ​​along with the system timestamp of the reception time in a circular buffer, which stores the most recent 100 reception records.

[0082] The unit simultaneously monitors the actuation time of the electrically controlled valves. Each time the panel sends a valve control command to the base unit and receives confirmation of completion, the unit records the time difference between the command sending time and the confirmation frame receiving time, denoted as the valve actuation time in seconds with an accuracy of one-tenth of a second. The unit stores the valve actuation time and the timestamp of each actuation moment together in another circular buffer, which stores the most recent fifty valve actuation records.

[0083] The dynamic boundary correction unit performs a cross-comparison analysis every 24 hours, with the analysis time set to 3:00 AM. The analysis process is as follows: First, the unit extracts all signal strength records from the signal strength buffer over the past 24 hours and calculates the difference between each record and its predecessor. If the difference is negative more than six times consecutively, and the absolute value of each negative value is greater than one milliwatt decibel, the signal strength value is determined to be in a continuous decline. Second, the unit extracts all action time records from the valve action time buffer over the past 24 hours and calculates the deviation of each record from the average action time of similar valve operations over the past seven days. Specifically, the unit pre-stores average time reference values ​​for various types of valve actions measured under normal valve conditions (the first seven days after installation), such as an average valve opening action time of 0.4 seconds and an average valve closing action time of 0.35 seconds. If the current valve action time exceeds 50% of the corresponding reference value, i.e., the valve opening action time is greater than 0.6 seconds or the valve closing action time is greater than 0.525 seconds, the action time is determined to be prolonged. If more than three events of extended action time occur within 24 hours, the valve action time is determined to be in a state of synchronous extension.

[0084] Third, the unit cross-compares the two judgment results mentioned above. If both conditions are met—a continuous decrease in signal strength and a simultaneous increase in valve actuation time—the unit generates a diagnostic conclusion of valve mechanical component jamming. This diagnostic conclusion includes three levels: mild jamming, moderate jamming, and severe jamming. The level classification is based on the following criteria: if the cumulative decrease in signal strength exceeds six milliwatt-decibels during the continuous decrease and the valve actuation time increase is between 50% and 100%, it is judged as mild jamming; if the cumulative decrease exceeds twelve milliwatt-decibels and the actuation time increase is between 100% and 200%, it is judged as moderate jamming; if the cumulative decrease exceeds twenty milliwatt-decibels and the actuation time increase exceeds 200%, it is judged as severe jamming.

[0085] After generating the diagnostic conclusion, the dynamic boundary correction unit performs the following operations. First, the unit sends a maintenance work order request to the gas management cloud platform via its wireless network card. The request data message includes the following fields: panel device identifier, base meter device identifier, diagnostic conclusion type, diagnostic level, start and end values ​​of signal strength decline, specific values ​​of valve action time extension, and diagnostic timestamp. Upon receiving the request, the cloud platform automatically generates a maintenance work order and dispatches it to the gas company's maintenance personnel responsible for the area according to preset rules. Simultaneously, the unit displays a pop-up notification on the panel's LCD screen. The pop-up content varies depending on the diagnostic level: for mild jamming, it displays "Valve needs cleaning, self-cleaning operation recommended," along with two virtual buttons: "Self-clean Now" and "Remind Later"; for moderate jamming, it displays "Valve action slows down, please perform self-cleaning," along with an "Self-clean Now" button and a prompt "Contact the gas company for inspection recommended"; for severe jamming, it displays "High risk of valve failure, please perform self-cleaning immediately and contact the gas company," in which case the "Self-clean Now" button is highlighted, and the "Remind Later" option is not provided.

[0086] When the user clicks the "Self-Cleaning Now" button, the dynamic boundary correction unit initiates the valve self-cleaning process. This process first sends a fully open valve command to the base unit via Bluetooth, waits for the action to complete, and records the action time; then it sends a fully closed valve command, waits for the action to complete, and records the action time again. After self-cleaning, the unit compares these two action times with the most recent normal action time before self-cleaning. If the action time after self-cleaning recovers to within 120% of the base value, self-cleaning is considered successful, and the display shows "Self-cleaning complete, valve has returned to normal" and the diagnostic status is cleared. If the action time after self-cleaning does not improve, and the diagnostic level is mild or moderate, the unit automatically repeats the self-cleaning process once, with a 30-second interval between the two self-cleaning cycles. If two self-cleaning cycles are still ineffective, or the original diagnostic level is severe, the unit will not repeat self-cleaning but will instead send an emergency repair request to the cloud platform via wireless network card. This request is marked with "emergency" priority, and the cloud platform is required to dispatch a service within two hours.

[0087] The system incorporates a gas usage behavior feature database and a dynamic boundary correction unit within the control panel, enabling adaptive adjustment of the threshold for sustained low flow rates at night. By analyzing the user's gas usage patterns during late-night hours over the past seven days, the system automatically identifies the user's non-cooking gas needs and dynamically extends the corresponding threshold in the safety boundary table to values ​​that align with the user's actual behavior. This design avoids the problem of accidental valve closure at night due to excessively short fixed thresholds, improving user experience while ensuring safety. Simultaneously, by cross-comparing the trend of decreasing Bluetooth signal strength with the trend of increasing valve action time, the system can accurately diagnose early signs of valve mechanical component jamming and automatically perform valve self-cleaning operations while generating a maintenance work order, eliminating faults in their early stages and extending the valve's lifespan.

[0088] In the above implementation, the dynamic boundary correction unit filters the duration of signal strength decline during cross-comparison: a valid downward trend is only determined when the continuous decline lasts for more than six hours and the downward trend has not rebounded in the most recent hour, i.e., when two consecutive measurements no longer decline or even rise. The baseline value for valve actuation time is updated every thirty days, taking the average of the actuation times of all valves of the same type within the most recent thirty days as the new baseline value to accommodate the normal aging of valves over time. The maximum number of self-cleaning operations is limited to no more than three times every twenty-four hours to prevent frequent operations from accelerating valve wear. Each self-cleaning operation and its results are recorded in a local log and synchronized to the cloud platform via a wireless network card for subsequent fault analysis.

[0089] The specific structure, electrical connection method, and linkage response process of the tamper detection switch installed on the housing of the intelligent control panel are as follows: The tamper detection switch is a miniature tactile switch, model Omron B3F series or similar. This switch is mounted on the inner wall of the housing base of the intelligent control panel, specifically corresponding to the contact surface when the panel cover and base are engaged. The switch body height is 4.3 mm, the operating stroke is 0.25 mm, and the operating force is 1.27 N. The switch includes one normally open contact and one common contact. These two contacts are connected to two general-purpose input / output pins on the control board where the state inversion constraint module is located via two wires. One pin is configured as an internal pull-up input, connected to a 3.3V power supply via a 10kΩ resistor; the other pin is connected to digital ground. When the panel cover is properly engaged, the protrusion on the inner side of the cover presses down on the switch button, closing the normally open contact and connecting the common contact with the normally open contact. At this time, the level of the general-purpose input / output pin is pulled low to zero volts, and the state inversion constraint module reads a low-level signal. When the cover is opened, the switch button pops up, the normally open contact opens, and the general-purpose input / output pins are restored to a 3.3V high level through the pull-up resistors. The state reverse constraint module reads the high-level signal.

[0090] The state inverse constraint module reads the level value of the general-purpose input / output pin every 100 milliseconds, and repeats this reading ten times. The level value that appears in the ten readings is taken as the current tamper-proof state. If a high level is detected for two consecutive reading cycles, meaning the cover is open for more than 200 milliseconds, the module determines that the casing has been opened.

[0091] Upon detecting that the casing has been opened, the state reverse constraint module immediately performs the following operations. First, the module reads the current time from the real-time clock chip, concatenates the timestamp with the device identifier of this panel, and generates an tamper event record. The record format is a text line containing four fields: event type code "TAMPER", device identifier, event occurrence time, and event duration (initially zero). The module writes this record to an tamper event log file in local non-volatile memory, with the log file split by date, one file per day. Second, the module reports the tamper event to the gas management cloud platform via the wireless network card. The reporting message uses the Hypertext Transfer Protocol (HTTP) client format and is sent to the cloud platform's predefined receiving generic resource locator (GRP). The message body is in JavaScript object abbreviation format, containing the device identifier, event type, timestamp, and the current wireless network card signal strength. Transmission is non-blocking; if the wireless network card is currently offline, the module temporarily stores the message in the transmission queue and sends it in a first-in, first-out order after communication is restored. The module sets the highest priority for tamper event reporting. That is, if there is an tamper event message in the sending queue, other types of messages must wait for the tamper event message to be sent and receive a confirmation response from the cloud platform before they can start sending.

[0092] In the third step, the status reverse constraint module sends a trigger signal to the local linkage policy execution engine. This signal contains a parameter "REGION_CLOSE". After receiving this signal, the engine executes a full-region linkage valve closing instruction. The specific execution method of the full-region linkage valve closing instruction is as follows: First, the engine reads the pre-configured linkage policy table from local storage. The table contains a policy entry named "anti-tamper linkage", and this entry defines the execution action as "sending a valve closing instruction to all gas meter basic meters managed by this panel". Then, the engine traverses the list of bound devices in the local database. The list records the device identifiers and Bluetooth addresses of all basic meters that have been bound to this panel via Bluetooth. For each basic meter in the list, the engine sends a valve closing instruction to this basic meter via the Bluetooth module. The instruction format is the same as that of the single-meter valve closing instruction, but a flag bit is set in the additional field of the instruction to mark that this instruction is from anti-tamper linkage. After sending each valve closing instruction, the engine waits for the execution confirmation from the basic meter for three seconds. If the confirmation is received within three seconds, it records that the valve closing of this basic meter is successful; if it times out or a failure response is received, it records the valve closing failure event of this basic meter in the local log and reports the valve closing failure information to the cloud platform via the wireless network card. The engine sequentially performs the above operations on all bound basic meters to complete the full-region linkage.

[0093] Through the anti-tamper detection switch set on the panel housing and the linkage mechanism with the local linkage policy execution engine, an immediate response to illegal shell opening behavior is achieved. Once the housing is opened, the system automatically executes the full-region linkage valve closing instruction, cuts off the valves of all gas meter bases under the jurisdiction of the panel, and simultaneously reports the anti-tamper event to the cloud platform. This mechanism effectively prevents unauthorized personnel from tampering with or short-circuiting the internal circuits of the panel, ensuring the overall physical security of the system.

[0094] After the execution of the full-region linkage valve closing instruction is completed, the engine summarizes the execution results and generates a linkage execution report. The report content includes the execution time, the total number of basic meters involved, the number of basic meters with successful valve closing, the number of basic meters with failed valve closing, and the device identifier and failure reason of each failed basic meter. The engine records this report in the local log and reports it to the cloud platform via the wireless network card. At the same time, a warning interface pops up on the LCD screen of the panel, showing the red prompt text "The housing has been opened, the full-region valve has been closed, please restore the housing and contact the gas company". This prompt interface continues to be displayed until the user解除警告 by entering the operation and maintenance password or scanning the QR code carried by the operation and maintenance personnel.

[0095] In the above embodiment, the anti-tamper detection switch is installed on the main latch side of the four latch positions on the panel housing. This latch is the first position that must be released when removing the cover. After determining that the housing is open, the state reverse constraint module will continuously monitor the anti-tamper status. If it detects that the cover is re-fastened and the switch returns to the closed state within 30 seconds, the module will not automatically release the full-area valve shut-off state. Instead, gas supply can only be restored through a reset command issued by the cloud platform or on-site authorized operation by maintenance personnel. The log records of anti-tamper events cannot be deleted by the user and can only be read and archived through a dedicated tool connected to the panel debugging interface. The execution results of each full-area linkage valve shut-off command, including success and failure records, are stored as audit evidence in the panel's non-volatile memory for a long period of one year. Records older than one year are automatically overwritten.

[0096] The specific structure of the gas management cloud platform and its data storage, policy management, and work order management processes based on a consortium blockchain architecture are as follows: The gas management cloud platform is deployed on a public cloud server cluster and adopts a microservice architecture. The platform is configured as a consortium blockchain, with nodes including gas company nodes, market regulatory department nodes, and user representative nodes. Each node runs a copy of the blockchain ledger, and nodes communicate with each other via a peer-to-peer network. The consensus algorithm uses an improved algorithm based on a practical Byzantine fault tolerance mechanism, and the block interval is set to two seconds.

[0097] The cloud platform contains three core functional units: data storage unit, policy management unit, and work order management unit.

[0098] The data storage unit employs a hybrid storage strategy. This unit comprises a time-series database module and a consortium blockchain write module. The time-series database module stores real-time gas data reported from various smart control panels, including instantaneous flow rate, cumulative flow rate, valve status, battery voltage, and event logs. Each data record is accompanied by a device identifier and timestamp. The time-series database uses a rotating storage strategy, retaining data from the most recent twelve months; data older than twelve months is automatically archived to cold storage. The consortium blockchain write module is responsible for uploading key data to the blockchain for notarization. This module automatically triggers an uploading operation every ten new gas metering data entries or every valve operation event. The specific process of the uploading operation is as follows: The module encapsulates the data to be notarized according to the data structure defined by the consortium blockchain; the encapsulated data is called a transaction proposal. The data storage unit sends this transaction proposal to the sorting nodes in the consortium blockchain network. The sorting nodes sort the transactions and package them into blocks, broadcasting them to all committing nodes. Each committing node verifies the transactions within the block, including the transaction signature, data format, and version number. After successful verification, each node appends the block to its local ledger. A block contains the hash of the previous block, the timestamp of the current block, the Merkle root hash of the transaction data, and the digital signature of the node that generated the block. Once the data is written to the blockchain ledger, no node can modify a block that has already been written, because modifying a block will break the hash chain of all subsequent blocks.

[0099] The policy management unit provides visualized configuration, verification, and deployment functions for linked policies. This unit includes a policy editor interface, accessible to operations and maintenance personnel via a web browser. The policy editor uses a drag-and-drop interface. The left side displays a list of selectable trigger conditions, including "instantaneous flow exceeds threshold," "valve action timeout," "base meter offline time exceeds set value," "anti-tamper switch triggered," and "gas leak alarm." The right side displays a list of selectable actions, including "close single meter valve," "close all valves in the unit," "close all valves in the building," "send SMS notification," "generate work order," and "report to blockchain." Operations and maintenance personnel drag trigger conditions to the canvas area and then drag the action above the trigger condition; connecting the two creates a complete policy rule. Each rule can be set to have an effective time period, such as 6:00 PM to 6:00 AM the next day, weekdays only, or weekends only. The policy editor backend includes a verification engine that performs a logical consistency check before saving the policy. This check includes: checking for loops (actions that trigger the same condition, leading to an infinite loop); conflicting rules (two contradictory actions under the same trigger condition); and referencing non-existent device groups. After successful verification, the policy management unit compiles the policy rules into binary format and sends them to the corresponding smart control panel via a message queue telemetry transmission protocol. Upon receiving the policy, the control panel sends back an acknowledgment frame, and the cloud platform marks the policy's status as "effective" upon receiving the acknowledgment frame. Simultaneously, the policy management unit writes the hash value of the policy configuration to the consortium blockchain ledger as evidence of the policy's issuance history.

[0100] The work order management unit is responsible for receiving, dispatching, and tracking maintenance work orders. This unit provides an application programming interface based on the Hypertext Transfer Protocol (HTTP) to receive work order requests from the intelligent control panel. The work order request message includes the device identifier, diagnostic conclusion, diagnostic level, diagnostic timestamp, and additional diagnostic data. Upon receiving the request, the work order management unit first parses the message to generate a structured work order record containing seven fields: work order number, creation time, work order type, priority, device address, fault description, and processing status. The work order number format is year, month, day plus a six-digit serial number, for example, "20260529000001". The work order type is categorized according to the diagnostic conclusion, including "valve jamming," "communication failure," "low battery," and "anti-tampering incident," etc. The priority is determined by the diagnostic level: severe jamming corresponds to emergency priority, and mild jamming corresponds to normal priority. The device address is obtained from the device registration information on the cloud platform, which includes the user's community name, building number, unit number, and room number. The work order management unit places the work orders into different dispatch queues based on the combination of priority and processing status. The emergency queue is scanned every five minutes, and the regular queue is scanned every thirty minutes. The dispatch logic is as follows: Unprocessed work orders are retrieved from the queue, the maintenance personnel group to which the device address belongs is queried, and the work order is pushed via mobile application to the mobile terminal of the maintenance personnel currently on duty in that group with the fewest pending work orders. After the maintenance personnel click "Accept Order" on the mobile application, the work order status is updated to "Processing". After the maintenance personnel complete the on-site repair, they upload photos of the repair results and operation records in the mobile application, and the work order status is updated to "Completed". The work order management unit writes all the complete lifecycle data of the work order, including the four time points of creation, dispatch, acceptance, and completion, as well as the operator identifier for each status change, into the consortium blockchain ledger, forming an immutable maintenance audit record.

[0101] The cloud platform employs a consortium blockchain architecture for storing critical data. Gas metering data, valve operation records, strategy configuration changes, and the entire lifecycle of maintenance work orders are all written into the blockchain ledger. Gas companies, market regulators, and user representatives jointly maintain the same immutable audit record. In the event of metering disputes or safety incidents, liability can be determined through on-chain evidence, resolving the problem of easily tampered data in traditional centralized databases that hinders evidence collection and enhancing the credibility of gas management.

[0102] In the above implementation, the initial configuration of the consortium blockchain network includes four gas company nodes, one market regulatory department node, and two user representative nodes. User representative nodes are randomly selected from users with annual gas consumption exceeding 300 cubic meters, with a one-year term. Each node runs on an independent virtual server, equipped with at least four CPU cores and eight gigabytes of memory. The read / write permissions for the consortium blockchain are configured as follows: all nodes have the right to read all ledger data, but only gas company nodes have the right to initiate transaction proposals; market regulatory department nodes have the right to verify transactions and participate in consensus; and user representative nodes have the right to verify transactions but do not participate in consensus block production. When writing work order data, the work order management unit de-identifies user names, phone numbers, and specific address numbers, writing only hashed anonymous identifiers. The original information is stored in the cloud platform's encrypted database, and access permissions are independently controlled.

[0103] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A modular remote-controlled gas meter control and management system, characterized in that, include: A gas meter base meter contains only a flow metering unit, an electronically controlled valve, and a Bluetooth beacon module. The Bluetooth beacon module is used to broadcast the base meter device ID, real-time cumulative flow value, and valve status. An intelligent control panel independent of the gas meter metering base setting includes a Bluetooth module, a wireless network card, a display screen, a local linkage strategy execution engine, and a state reverse constraint module. The Bluetooth module is used to establish a two-way communication link with the Bluetooth beacon module, and the wireless network card is used to communicate with the gas management cloud platform. The state inverse constraint module is configured to generate a random verification code during the initial binding phase and send it to the electrically controlled valve. After receiving the verification code, the electrically controlled valve forces the panel to return the inverse operation result of the verification code within a specified time limit. Only after the verification is passed can the valve be allowed to open.

2. The control and management system for a modular remote-controlled gas meter according to claim 1, characterized in that: The binding process further includes: The Bluetooth module of the smart control panel scans the Bluetooth beacon broadcasts of the surrounding gas meter base meters to obtain a list of device IDs. After the user selects the target device, the panel establishes an initial Bluetooth connection with the base meter. The state reverse constraint module generates a 16-bit random check code and sends it to the non-volatile memory of the electronically controlled valve via Bluetooth; After receiving the verification code, the electronically controlled valve locks itself in the closed state and requires the panel to send the preset reversible calculation result of the verification code within 10 seconds for verification. If the verification is successful, the binding is successful and the valve is unlocked. If the verification fails, the valve remains locked and the base meter enters the anti-tamper state.

3. The control and management system for a modular remote-controlled gas meter according to claim 2, characterized in that: The intelligent control panel also includes a dual-mode communication coordination unit, which is used to simultaneously manage the Bluetooth module and the wireless network card, and execute the following link arbitration logic: When the wireless network card communicates normally with the gas management cloud platform, the panel will upload the base meter data received by the Bluetooth module to the cloud platform through the wireless network card, and forward the remote instructions issued by the cloud platform to the electric control valve after being verified by the state reverse constraint module. When communication between the wireless network card and the cloud platform is interrupted, the local linkage strategy execution engine takes over the control. It autonomously generates valve control commands based on the locally stored emergency threshold, sends them to the electric control valve after verification by the state reverse constraint module, and resumes the transmission of the operation logs during the interruption to the cloud platform after communication is restored.

4. The control and management system for a modular remote-controlled gas meter according to claim 3, characterized in that: The state reverse constraint module has a preset valve safety operation boundary table, which includes at least the maximum number of valve opening and closing operations per day, the minimum time interval between two adjacent valve opening and closing operations, and the upper limit of instantaneous flow rate allowed to perform valve closing operations. Before being sent to the electrically controlled valve, remote or local autonomous commands must be compared with the parameters in the boundary table, and can only be executed after all boundary conditions are met.

5. The control and management system for a modular remote-controlled gas meter according to claim 4, characterized in that: The display screen of the intelligent control panel is a backlit LCD touch screen. The display screen is used to display the remaining amount, cumulative usage and current unit price information reported by the gas meter metering base in real time, and supports users to initiate remote recharge requests, valve opening and closing commands and query historical gas usage records through touch operation.

6. The control and management system for a modular remote-controlled gas meter according to claim 5, characterized in that: The power module of the intelligent control panel supports dual power supply modes of alkaline dry batteries and mains power. When the mains power fails, it automatically switches to alkaline dry battery power supply, and sends a low battery alarm message to the gas management cloud platform through the wireless network card when the battery power is lower than a preset threshold.

7. The control and management system for a modular remote-controlled gas meter according to claim 6, characterized in that: The local linkage strategy execution engine is also equipped with a useful gas behavior feature library and a dynamic boundary correction unit, wherein: The gas usage behavior feature database is used to record each flow data, valve action time, and user key operation record reported by the gas meter metering base, forming historical data of household gas usage behavior; Based on this historical data, the dynamic boundary correction unit analyzes the user's average hourly gas consumption and gas consumption duration at different times, automatically adjusts the nighttime low flow duration threshold in the valve safety operation boundary table, and uses the adjusted threshold to replace the preset default value as the basis for verifying subsequent control commands.

8. The control and management system for a modular remote-controlled gas meter according to claim 7, characterized in that: The dynamic boundary correction unit is also used to monitor the Bluetooth beacon signal strength indication value received by the Bluetooth module and cross-compare the strength indication value with the action time of the electrically controlled valve; When the intensity indicator value continues to decrease and the valve action time increases synchronously, a diagnostic conclusion of valve mechanical component jamming is generated, and a maintenance work order request carrying the diagnostic conclusion is sent to the cloud platform via wireless network card. At the same time, the user is prompted to perform valve self-cleaning operation on the display screen.

9. The control and management system for a modular remote-controlled gas meter according to claim 1, characterized in that: The housing of the intelligent control panel is equipped with an anti-tamper detection switch, which is electrically connected to the state reverse constraint module. When the casing is detected to be open, the state reverse constraint module records the event and reports it to the gas management cloud platform via the wireless network card. At the same time, it triggers the local linkage strategy execution engine to execute a full-area linkage valve shut-off command.

10. The control and management system for a modular remote-controlled gas meter according to claim 1, characterized in that: The gas management cloud platform is a cloud platform based on a consortium blockchain architecture. The cloud platform includes a data storage unit for receiving gas data reported by the intelligent control panel, a strategy management unit for configuring and issuing linkage strategies, and a work order management unit for receiving and dispatching maintenance work orders.

Images