Cross-domain data interaction method and system based on base station intelligent heat network
Patent Information
- Application Number
- CN202611060084.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-07-16
- Publication Date
- 2026-10-30
AI Technical Summary
缺点1:缺乏事务一致性,单向摆渡过程无法确认外网计费引擎是否准确处理了内网发送的流量数据
[0008]本发明的有益效果在于:内网采集处理单元生成唯一序列号以及与热网参数中的载荷对应的HMAC-Auth(基于哈希的消息认证码)摘要,基于唯一序列号和HMAC-Auth摘要对热网参数进行封装,将封装后的数据帧加入内网缓冲区的待发送队列,物理隔离中转单元使用基于状态感知的异步数据摆渡机制将待发送队列中的封装后的数据帧摆渡至外网缓冲区,外网业务逻辑单元基于外网缓冲区中的封装后的数据帧处理计费事务,在事务处理完成后,生成包含唯一序列号和新的HMAC-Auth摘要的确认元数据,并将确认元数据写入外网缓冲区,物理隔离中转单元将包含确认元数据的回显包反向摆渡至内网缓冲区,内网采集处理单元将回显包中的唯一序列号与待发送队列中的唯一序列号进行比对,并对回显包中新的HMAC-Auth摘要进行校验,若比对一致且校验通过,则删除待发送队列中的封装后的数据帧,以此实现了逻辑双向、物理单向的闭环验证架构,通过唯一序列号实现全局事务追踪,通过HMAC-Auth摘要确保数据跨域摆渡过程中无比特位翻转,同时作为身份令牌,内网侧仅处理带有合法HMAC签名的回显包,彻底阻断伪造指令的跨域注入,并且通过逻辑回显机制实现了工业级的事务原子性,确保了热网物理计量数据与网银金融结算数据在跨域传输中的全链路闭环,从而保证跨域数据交互过程中的完整性、一致性与抗攻击性,进而有效规避了能源结算中的财务审计风险。
Smart Images

Figure CN123020068A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of cross-domain data interaction technology, and in particular to a cross-domain data interaction method and system for smart heating networks based on base stations. Background Technology
[0002] In the construction of smart heating networks, there is strict physical isolation between the production-side smart heating network intranet system (typically including DCS (Distributed Control System), intranet servers, and monitoring dashboards) and the consumer-side business extranet system (involving billing inquiries, online banking payments, and mini-program applications). Existing technologies often use simple timed file synchronization (such as FTP (File Transfer Protocol)) to achieve cross-domain data sharing. This approach has the following drawbacks: Disadvantage 1: Lack of transaction consistency. The one-way transfer process cannot confirm whether the external billing engine has accurately processed the traffic data sent from the internal network.
[0003] Disadvantage 2: Lack of protocol depth. General file transfer protocols cannot identify traffic pulse anomalies specific to heating networks and are vulnerable to cross-domain injection attacks.
[0004] Disadvantage 3: Financial risk. The lack of feedback due to physical isolation may cause time misalignment or loss of cost statistics and real-time traffic data. Summary of the Invention
[0005] The technical problem to be solved by the present invention is to provide a cross-domain data interaction method and system for smart heating networks based on base stations, which can ensure the integrity, consistency and anti-attack capabilities of the cross-domain data interaction process.
[0006] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is as follows: A method for cross-domain data interaction in a smart heating network based on base stations, comprising: The intranet acquisition and processing unit acquires the heat network parameters and generates a unique serial number and a hash-based message authentication code digest corresponding to the load in the heat network parameters; The intranet acquisition and processing unit encapsulates the hot network parameters based on the unique serial number and the hash-based message authentication code digest to obtain an encapsulated data frame, and adds the encapsulated data frame to the waiting queue of the intranet buffer. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frames in the queue to be sent to the external network buffer. The external network business logic unit processes billing transactions based on the encapsulated data frames in the external network buffer; After the transaction is completed, the external network business logic unit generates confirmation metadata containing the unique sequence number and a new hash-based message authentication code digest, and writes the confirmation metadata into the external network buffer. The physical isolation relay unit will reverse-transfer the echo packet containing the confirmation metadata to the internal network buffer; The intranet acquisition and processing unit compares the unique sequence number in the echo packet with the unique sequence number in the queue to be sent, and verifies the new hash-based message authentication code digest in the echo packet. If the comparison matches and the verification passes, the encapsulated data frame in the queue to be sent is deleted.
[0007] To solve the above-mentioned technical problems, another technical solution adopted by the present invention is as follows: A cross-domain data interaction system for a base station-based smart heating network includes an intranet acquisition and processing unit, a physical isolation relay unit, and an extranet service logic unit. The intranet acquisition and processing unit includes a first memory, a first processor, and a first computer program stored in the first memory and executable on the first processor. The physical isolation relay unit includes a second memory, a second processor, and a second computer program stored in the second memory and executable on the second processor. The extranet service logic unit includes a third memory, a third processor, and a third computer program stored in the third memory and executable on the third processor. When the processors of the intranet acquisition and processing unit, the physical isolation relay unit, and the extranet service logic unit execute the computer programs, they implement the corresponding steps of the intranet acquisition and processing unit, the physical isolation relay unit, and the extranet service logic unit in the aforementioned cross-domain data interaction method for a base station-based smart heating network.
[0008] The beneficial effects of this invention are as follows: The intranet acquisition and processing unit generates a unique sequence number and an HMAC-Auth (Hash-based Message Authentication Code) digest corresponding to the payload in the hot network parameters. Based on the unique sequence number and HMAC-Auth digest, the hot network parameters are encapsulated, and the encapsulated data frame is added to the pending-send queue in the intranet buffer. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frame in the pending-send queue to the external network buffer. The external network business logic unit processes billing transactions based on the encapsulated data frame in the external network buffer. After the transaction is completed, confirmation metadata containing a unique sequence number and a new HMAC-Auth digest is generated and written to the external network buffer. The physical isolation relay unit transfers the echo packet containing the confirmation metadata back to the intranet buffer. The intranet acquisition and processing unit then transfers the echo packet containing the confirmation metadata to the internal network buffer. The unique sequence number is compared with the unique sequence number in the queue to be sent, and the new HMAC-Auth digest in the echo packet is verified. If the comparison is consistent and the verification passes, the encapsulated data frame in the queue to be sent is deleted. This realizes a closed-loop verification architecture with logical bidirectional and physical unidirectional characteristics. The unique sequence number enables global transaction tracking, and the HMAC-Auth digest ensures that there are no bit flips during the cross-domain data transfer. At the same time, as an identity token, the internal network side only processes echo packets with valid HMAC signatures, completely blocking cross-domain injection of forged instructions. Furthermore, the logical echo mechanism achieves industrial-grade transaction atomicity, ensuring a closed-loop connection between the heating network physical metering data and online banking financial settlement data in cross-domain transmission. This guarantees the integrity, consistency, and resistance to attacks during cross-domain data interaction, thereby effectively avoiding financial audit risks in energy settlement. Attached Figure Description
[0009] Figure 1 A flowchart illustrating a cross-domain data interaction method for a smart heating network of a base station according to an embodiment of the present invention; Figure 2 This is a diagram illustrating the structure of a smart heating network in a cross-domain data interaction method for a smart heating network of a base station, according to an embodiment of the present invention. Figure 3 This is a diagram of the smart heating network architecture in a cross-domain data interaction method for a smart heating network of a base station according to an embodiment of the present invention. Figure 4 This is a schematic diagram of a cross-domain data interaction system for a smart heating network of a base station, according to an embodiment of the present invention. Detailed Implementation
[0010] Definitions:
[0011] To explain in detail the technical content, objectives, and effects of the present invention, the following description is provided in conjunction with the embodiments and accompanying drawings.
[0012] In existing technologies, cross-domain data sharing is often achieved through simple timed file synchronization. This method lacks transaction consistency, and the one-way transfer process cannot confirm whether the external billing engine has accurately processed the traffic data sent from the internal network. Furthermore, it lacks protocol depth, and the general file transfer protocol cannot identify traffic pulse anomalies specific to the hot network, making it vulnerable to cross-domain injection attacks. In addition, the lack of feedback due to physical isolation may cause time misalignment or loss between cost statistics and real-time traffic data.
[0013] To at least address the aforementioned issues, the intranet acquisition and processing unit generates a unique sequence number and an HMAC-Auth digest corresponding to the payload in the hot network parameters. Based on the unique sequence number and HMAC-Auth digest, the hot network parameters are encapsulated, and the encapsulated data frame is added to the pending-send queue in the intranet buffer. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frame in the pending-send queue to the external network buffer. The external network business logic unit processes billing transactions based on the encapsulated data frame in the external network buffer. After transaction processing is complete, confirmation metadata containing a unique sequence number and a new HMAC-Auth digest is generated and written to the external network buffer. The physical isolation relay unit transfers the echo packet containing the confirmation metadata back to the intranet buffer. The intranet acquisition and processing unit compares the unique sequence number in the echo packet with the unique sequence number in the pending-send queue and verifies the new HMAC-Auth digest in the echo packet. If the comparison matches and the verification passes, the encapsulated data frame in the pending-send queue is deleted. In this way, a closed-loop verification architecture with logical bidirectional and physical unidirectional verification is achieved. Global transaction tracking is realized through a unique serial number, and HMAC-Auth digests ensure that there are no bit flips during data cross-domain transfer. At the same time, as an identity token, the internal network only processes echo packets with valid HMAC signatures, completely blocking cross-domain injection of forged instructions. Furthermore, industrial-grade transaction atomicity is achieved through a logical echo mechanism, ensuring a closed-loop connection between heating network physical metering data and online banking financial settlement data in cross-domain transmission. This guarantees the integrity, consistency, and resistance to attacks during cross-domain data interaction, thereby effectively avoiding financial audit risks in energy settlement.
[0014] The following details a cross-domain data interaction method for a smart heating network based on a base station, as described in this invention. Please refer to [link / reference]. Figure 1 The method 100 includes steps 101 to 107: Step 101: The intranet acquisition and processing unit acquires the heat network parameters and generates a unique serial number and a hash-based message authentication code digest corresponding to the load in the heat network parameters.
[0015] Step 102: The intranet acquisition and processing unit encapsulates the hot network parameters based on the unique sequence number and the hash-based message authentication code digest to obtain an encapsulated data frame, and adds the encapsulated data frame to the pending transmission queue of the intranet buffer.
[0016] Step 103: The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frame in the queue to be sent to the external network buffer.
[0017] Step 104: The external network business logic unit processes billing transactions based on the encapsulated data frames in the external network buffer.
[0018] Step 105: After the transaction is completed, the external network business logic unit generates confirmation metadata containing the unique sequence number and a new hash-based message authentication code digest, and writes the confirmation metadata into the external network buffer.
[0019] Step 106: The physical isolation relay unit reverses the echo packet containing the confirmation metadata to the intranet buffer.
[0020] Step 107: The intranet acquisition and processing unit compares the unique sequence number in the echo packet with the unique sequence number in the queue to be sent, and verifies the new hash-based message authentication code digest in the echo packet. If the comparison is consistent and the verification passes, the encapsulated data frame in the queue to be sent is deleted.
[0021] In one embodiment of the present invention, step 101 includes steps 1011 to 1014: Step 1011: The intranet acquisition and processing unit receives and aggregates the heat network parameters from the intelligent acquisition front end through the distributed control system based on the LTE network.
[0022] In one alternative implementation, the heating network parameters include heat, temperature, and pressure.
[0023] Step 1012: The intranet acquisition and processing unit serializes the heating network parameters to obtain serialized data frames.
[0024] Step 1013: The intranet acquisition and processing unit inserts the original acquisition timestamp into the payload of the serialized data frame to obtain the data frame after insertion.
[0025] Step 1014: The intranet acquisition and processing unit generates a unique serial number and a hash-based message authentication code digest corresponding to the payload in the implanted data frame.
[0026] The unique serial number is used for global transaction tracking; the hash-based message authentication code digest serves two purposes: first, as a data integrity check to ensure no bit flips during cross-domain transfers; and second, as an identity token, the intranet system only processes packets with valid HMAC signature echoes, thereby completely blocking cross-domain injection of forged instructions.
[0027] In step 102, the intranet acquisition and processing unit encapsulates the heat network parameters based on the unique sequence number and the hash-based message authentication code digest, resulting in an encapsulated data frame including: The intranet acquisition and processing unit encapsulates the implanted data frame based on the unique serial number and the hash-based message authentication code digest to obtain the encapsulated data frame.
[0028] As described above, by embedding an unalterable original collection timestamp, subsequent external network business logic units can get rid of their dependence on unreliable arrival times, completely offsetting the random delays caused by LTE network jitter or physical isolation transfers, ensuring "zero time error" in settlement. At the same time, the unique serial number and HMAC-Auth digest construct a double anti-counterfeiting barrier, realizing full-link security, reliability, and accurate traceability of hot network data from collection and transfer to billing.
[0029] In one embodiment of the present invention, step 1012 includes steps 10121 to 10122: Step 10121: If the internal network acquisition and processing unit detects that the flow mutation rate of the heat network parameters exceeds a preset threshold, it determines the heat network parameters with the flow mutation rate exceeding the preset threshold as sampling noise, and performs smoothing correction on the sampling noise to obtain the cleaned heat network parameters.
[0030] Step 10122: The intranet acquisition and processing unit serializes the cleaned heating network parameters to obtain serialized data frames.
[0031] As described above, by detecting whether the flow mutation rate of the heating network parameters exceeds a preset threshold, the heating network parameters with a flow mutation rate exceeding the preset threshold are identified as sampling noise and smoothly corrected. This achieves data cleaning based on business characteristics, and can automatically identify and remove sampling noise in the DCS system before data transfer, ensuring data quality.
[0032] In one embodiment of the present invention, in step 1014, the intranet acquisition and processing unit generates a hash-based message authentication code digest corresponding to the payload in the implanted data frame, including: The intranet acquisition and processing unit uses a preset key to perform a hash operation on the payload in the implanted data frame to obtain a hash-based message authentication code digest.
[0033] As described above, the HMAC-Auth digest generated by hashing using a pre-set key is equivalent to attaching an unforgeable "digital fingerprint" to each data frame. This allows the external network to accurately identify whether the payload has been tampered with or damaged during transmission through the HMAC-Auth digest, effectively ensuring the authenticity of the heat network parameters. Furthermore, since the pre-set key is only held by legitimate internal network acquisition and processing units and external network business logic units, the HMAC mechanism naturally possesses the ability to authenticate the data source, effectively preventing illegal devices in the LTE public network environment from forging or injecting false data. At the same time, the hash-based digest calculation method is more efficient and can better adapt to the dual requirements of real-time performance and resource consumption in industrial settings.
[0034] In one embodiment of the present invention, step 103 includes steps 1031 to 1032: Step 1031: The physical isolation relay unit monitors the status of the external network buffer.
[0035] Step 1032: If the physical isolation relay unit detects that the external network buffer has a ready flag or is in a completely idle state, then time division multiplexing technology is used to transfer the encapsulated data frame in the queue to be sent to the external network buffer.
[0036] As described above, flow control is achieved through precise monitoring of the external network buffer status (ready or completely idle), ensuring dynamic alignment between the internal network push frequency and the external network processing rate. This effectively avoids buffer overflow within the network gateway and ensures that each ferry operation occurs when the external network has sufficient processing capacity. This effectively prevents data frames from being lost or overwritten during the handover process. At the same time, relying on time-division multiplexing technology to maintain the absolute disconnect between the internal and external networks in logic, a security isolation barrier is successfully constructed. Even if the external network buffer is attacked in the LTE public network environment, attackers cannot reach the internal network. Furthermore, the state-aware asynchronous data ferry mechanism greatly improves transmission efficiency, prioritizing the use of idle periods for non-blocking handover, ensuring that hot network billing data can ultimately reach the billing engine in a complete, orderly, and uninterrupted manner.
[0037] In one embodiment of the present invention, step 104 includes steps 1041 to 1045: Step 1041: The external network service logic unit reads the encapsulated data frame from the external network buffer.
[0038] Step 1042: The external network service logic unit recalculates the hash-based message authentication code digest using a preset key based on the encapsulated data frame it reads.
[0039] Step 1043: The external network business logic unit determines whether the recalculated hash-based message authentication code digest is consistent with the hash-based message authentication code digest in the encapsulated data frame. If they are inconsistent, the encapsulated data frame is discarded. If they are consistent, the unique sequence number in the encapsulated data frame is extracted.
[0040] If there is a discrepancy, it indicates that the data was illegally injected or corrupted during transmission, and the encapsulated data frame should be discarded directly.
[0041] Step 1044: The external network service logic unit uses the billing engine to parse the original collection timestamp and hot network parameters in the encapsulated data frame, and uses the time axis mapping algorithm to perform billing based on the original collection timestamp and the hot network parameters to obtain the billing result.
[0042] Specifically, the external network business logic unit uses the billing engine to parse the original collection timestamp in the encapsulated data frame and uses it as the base time for billing archiving. Through the time axis mapping algorithm, it automatically offsets the random asynchronous delay caused by physical isolation transfer, ensuring that the billing logic and physical collection logic are accurately aligned in the time dimension. Based on the parsed heat network parameters, it calculates the enterprise bill and obtains the billing result.
[0043] Step 1045: The external network service logic unit associates and stores the billing result with the unique sequence number.
[0044] As described above, by recalculating the HMAC-Auth digest and comparing it with the intra-frame digest, any data frames that have been tampered with or damaged during the physical transfer process can be identified and discarded in real time, effectively preventing invalid data from polluting the billing database. Furthermore, by utilizing a dual anchoring mechanism of unique serial numbers and original collection timestamps, the billing engine can get rid of the interference of network latency and accurately place the data back to the physical collection time through a timeline mapping algorithm, eliminating the latency error caused by cross-network gateway transmission and ensuring zero error in the time dimension of hot network billing. In addition, storing the billing results in association with unique serial numbers provides a traceable and non-repudiable credential for each settlement and also supports rapid auditing and investigation of duplicate or abnormal frames, greatly enhancing the transparency and compliance of the system.
[0045] In one embodiment of the present invention, step 105, while writing the confirmation metadata into the external network buffer, also includes: The external network business logic unit updates the state of the external network buffer.
[0046] Specifically, the external network business logic unit marks the confirmation metadata in the external network buffer as ready.
[0047] As described above, while confirming the metadata is written to the external network buffer, the external network business logic unit updates the status of the external network buffer, which can provide real-time feedback on the current load status of the buffer to the physical isolation relay unit. This avoids blind writing of the data source and effectively prevents frame loss caused by buffer overflow. At the same time, as a key part of the handshake protocol, this status bit can ensure that each data frame has a clear processing result feedback, realizing reliable end-to-end transfer.
[0048] In one embodiment of the present invention, it further includes: If the intranet acquisition and processing unit does not detect an echo packet corresponding to the encapsulated data frame within a preset step size, the encapsulated data frame in the queue to be sent is marked as to be retransmitted. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to retransfer the encapsulated data frames marked as to be retransmitted in the queue to the external network buffer.
[0049] As described above, if the intranet acquisition and processing unit does not detect an echo packet corresponding to the encapsulated data frame within a preset step size, the encapsulated data frame in the queue to be sent will be marked as to be retransmitted, and the ferrying will be re-executed, which can effectively prevent data loss caused by physical link jitter.
[0050] The method described above implements a set of proprietary specifications called HT-P (Heat Transaction Protocol).
[0051] Please refer to Figure 2 and Figure 3 The document showcases the structure and architecture of a smart heating network. The smart heating network comprises users, external network servers, firewalls / gatekeepers, core network internal network servers, power plant DCS systems, control room operator stations, chimney base stations, user base stations, switches, intelligent data acquisition front-ends, video surveillance, flow meter boxes, temperature instruments, pressure instruments, and pipeline leakage instruments. The smart heating network has a three-layer architecture: the access layer, the core network layer, and the application layer.
[0052] The access layer is equipped with 1.8G LTE outdoor integrated base stations. One base station is installed on the top platform of the 180-meter-high chimney inside the power plant, covering monitoring points within a 5-kilometer radius. LTE CPE terminal equipment, as the access terminal of the LTE system, is installed on the user side. It collects data from various user-side devices via Ethernet ports, wirelessly communicates with the LTE base station, and transmits the collected data back to the power plant's data server. The LTE base station and CPE terminal have a proprietary authentication protocol to prevent unauthorized device access, and the transmitted data is hardware encrypted to ensure information security. Zero-configuration installation means that even if the equipment is stolen, criminals cannot obtain any useful information from it. User-side access devices include flow meters, electric valves, and other equipment.
[0053] The core network layer is the core data hub, mainly comprising core switches, LTE core network elements, internal network data servers, and security gateways. The internal network servers aggregate real-time production data from the access layer via the Modbus TCP protocol and communicate with the power plant's DCS system in real time. Operators use the DCS operator station to monitor the physical parameters (pressure, flow, temperature) of the heating network in real time. Security gateways are deployed as a physical barrier separating the internal and external networks, ensuring that production commands cannot be illegally infiltrated by the external network.
[0054] The application layer primarily targets end-users and financial management personnel in the heating network. Through in-depth processing of cross-domain transferred data, it enables commercial applications, financial-grade settlement, and mobile interaction. An application server cluster, billing server, and high-resolution visualization dashboard are deployed, running a customized smart heating network data management platform. This platform integrates a visualization system (monitoring dashboard), a data analysis system, and a monitoring and management system. By aggregating historical flow data, it provides decision support for management. The platform reads anonymized data transferred through physically isolated gateways and utilizes the HT-P protocol's echo mechanism to ensure the integrity of each data entry. The billing engine periodically generates auditable billing reports and steam consumption audit data, ensuring absolute alignment between "physical metering" and "financial settlement" and effectively mitigating audit risks. Controlled connections between dedicated lines and the internet are achieved through multi-service boundary firewalls, ensuring that external access cannot access core business logic. Users can view current steam flow, temperature, and pressure parameters in real time via a WeChat mini-program. Deep integration with online banking payment interfaces allows users to directly complete bill verification and payment on their mobile apps. When gas consumption is abnormal or the account balance is insufficient, a notification push will be sent via the mini program at the millisecond level.
[0055] Please refer to Figure 4The present invention also provides a cross-domain data interaction system 200 for a base station-based smart heating network, comprising an intranet acquisition and processing unit 201, a physical isolation relay unit 202, and an extranet service logic unit 203. The intranet acquisition and processing unit 201 includes a first memory, a first processor, and a first computer program stored in the first memory and executable on the first processor. The physical isolation relay unit 202 includes a second memory, a second processor, and a second computer program stored in the second memory and executable on the second processor. The extranet service logic unit 203 includes a third memory, a third processor, and a third computer program stored in the third memory and executable on the third processor. When the processors of the intranet acquisition and processing unit 201, the physical isolation relay unit 202, and the extranet service logic unit 203 execute the computer programs, they implement the corresponding steps of the intranet acquisition and processing unit 201, the physical isolation relay unit 202, and the extranet service logic unit 203 in the cross-domain data interaction method for a base station-based smart heating network described above.
[0056] In summary, the cross-domain data interaction method and system for a base station-based smart heating network described above in this invention involves the following steps: The intranet data acquisition and processing unit generates a unique sequence number and an HMAC-Auth digest corresponding to the payload in the heating network parameters. Based on the unique sequence number and HMAC-Auth digest, the heating network parameters are encapsulated, and the encapsulated data frame is added to the pending-send queue in the intranet buffer. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frame in the pending-send queue to the external network buffer. The external network business logic unit processes billing transactions based on the encapsulated data frame in the external network buffer. After the transaction is completed, confirmation metadata containing a unique sequence number and a new HMAC-Auth digest is generated and written to the external network buffer. The physical isolation relay unit then forwards the echo packet containing the confirmation metadata to the internal network buffer. The internal network acquisition and processing unit compares the unique sequence number in the echo packet with the unique sequence number in the queue to be sent and verifies the new HMAC-Auth digest in the echo packet. If the comparison matches and the verification passes, the encapsulated data frame in the queue to be sent is deleted. This achieves a closed-loop verification architecture that is logically bidirectional and physically unidirectional, and realizes global transactions through a unique sequence number. The tracking mechanism uses HMAC-Auth digests to ensure no bit flipping occurs during cross-domain data transfer. Simultaneously, as an identity token, the internal network only processes echo packets with valid HMAC signatures, completely blocking cross-domain injection of forged instructions. Furthermore, an industrial-grade transaction atomicity is achieved through a logical echo mechanism, ensuring a closed-loop transmission of both heating network physical metering data and online banking financial settlement data across domains. This guarantees the integrity, consistency, and attack resistance of cross-domain data interaction, effectively mitigating financial audit risks in energy settlement. Additionally, by embedding an immutable original data collection timestamp, subsequent external network business logic... The processing unit is freed from dependence on unreliable arrival times, completely offsetting random delays caused by LTE network jitter or physical isolation during transfers, ensuring "zero time error" in settlement. At the same time, the unique serial number and HMAC-Auth digest construct a dual anti-counterfeiting barrier, realizing end-to-end security, reliability, and accurate traceability of hot network data from collection and transfer to billing. Furthermore, if the internal network collection and processing unit does not detect an echo packet corresponding to the encapsulated data frame within a preset step size, the encapsulated data frame in the queue to be sent is marked as to be retransmitted, and the transfer is re-executed, which can effectively prevent data loss caused by physical link jitter.
[0057] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent modifications made based on the content of the present invention specification and drawings, or direct or indirect applications in related technical fields, are similarly included within the patent protection scope of the present invention.
Claims
1. A cross-domain data interaction method for a smart heating network based on base stations, characterized in that, include: The intranet acquisition and processing unit acquires the heat network parameters and generates a unique serial number and a hash-based message authentication code digest corresponding to the load in the heat network parameters; The intranet acquisition and processing unit encapsulates the hot network parameters based on the unique serial number and the hash-based message authentication code digest to obtain an encapsulated data frame, and adds the encapsulated data frame to the waiting queue of the intranet buffer. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frames in the queue to be sent to the external network buffer. The external network business logic unit processes billing transactions based on the encapsulated data frames in the external network buffer; After the transaction is completed, the external network business logic unit generates confirmation metadata containing the unique sequence number and a new hash-based message authentication code digest, and writes the confirmation metadata into the external network buffer. The physical isolation relay unit will reverse-transfer the echo packet containing the confirmation metadata to the internal network buffer; The intranet acquisition and processing unit compares the unique sequence number in the echo packet with the unique sequence number in the queue to be sent, and verifies the new hash-based message authentication code digest in the echo packet. If the comparison matches and the verification passes, the encapsulated data frame in the queue to be sent is deleted.
2. The method according to claim 1, characterized in that, Generating a unique sequence number and a hash-based message authentication code digest corresponding to the load in the heating network parameters includes: The intranet acquisition and processing unit serializes the heating network parameters to obtain serialized data frames; The intranet acquisition and processing unit inserts the original acquisition timestamp into the payload of the serialized data frame to obtain the data frame after insertion. The intranet acquisition and processing unit generates a unique serial number and a hash-based message authentication code digest corresponding to the payload in the implanted data frame. The intranet data acquisition and processing unit encapsulates the heat network parameters based on the unique serial number and the hash-based message authentication code digest, resulting in an encapsulated data frame including: The intranet acquisition and processing unit encapsulates the implanted data frame based on the unique serial number and the hash-based message authentication code digest to obtain the encapsulated data frame.
3. The method according to claim 2, characterized in that, The hash-based message authentication code digest generated by the intranet acquisition and processing unit corresponding to the payload in the implanted data frame includes: The intranet acquisition and processing unit uses a preset key to perform a hash operation on the payload in the implanted data frame to obtain a hash-based message authentication code digest.
4. The method according to claim 1, characterized in that, The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to transfer the encapsulated data frames in the queue to the external network buffer, including: The physical isolation relay unit monitors the status of the external network buffer. If the physical isolation relay unit detects that the external network buffer has a ready flag or is in a completely idle state, it uses time-division multiplexing technology to transfer the encapsulated data frame in the queue to be sent to the external network buffer.
5. The method according to claim 2, characterized in that, The external network service logic unit processes billing transactions based on the encapsulated data frames in the external network buffer, including: The external network service logic unit reads the encapsulated data frame from the external network buffer; The external network business logic unit recalculates the hash-based message authentication code digest using a preset key based on the encapsulated data frame it reads; The external network business logic unit determines whether the recalculated hash-based message authentication code digest is consistent with the hash-based message authentication code digest in the encapsulated data frame. If they are inconsistent, the encapsulated data frame is discarded. If they are consistent, the unique sequence number in the encapsulated data frame is extracted. The external network business logic unit uses the billing engine to parse the original collection timestamp and heat network parameters in the encapsulated data frame, and uses the time axis mapping algorithm to perform billing based on the original collection timestamp and heat network parameters to obtain the billing result; The external network business logic unit associates and stores the billing result with the unique serial number.
6. The method according to claim 1, characterized in that, Also includes: If the intranet acquisition and processing unit does not detect an echo packet corresponding to the encapsulated data frame within a preset step size, the encapsulated data frame in the queue to be sent is marked as to be retransmitted. The physical isolation relay unit uses a state-aware asynchronous data transfer mechanism to retransfer the encapsulated data frames marked as to be retransmitted in the queue to the external network buffer.
7. The method according to claim 2, characterized in that, The intranet acquisition and processing unit serializes the heating network parameters to obtain a serialized data frame, which includes: If the internal network acquisition and processing unit detects that the flow mutation rate of the heat network parameters exceeds a preset threshold, it determines the heat network parameters with a flow mutation rate exceeding the preset threshold as sampling noise, and performs smoothing correction on the sampling noise to obtain the cleaned heat network parameters. The internal network acquisition and processing unit serializes the cleaned heating network parameters to obtain serialized data frames.
8. The method according to claim 1, characterized in that, The internal network data acquisition and processing unit collects the following parameters of the heating network: The intranet data acquisition and processing unit receives and aggregates the heating network parameters from the intelligent acquisition front end through a distributed control system based on the LTE network.
9. The method according to claim 3, characterized in that, Writing the confirmation metadata to the external network buffer also includes: The external network business logic unit updates the state of the external network buffer.
10. A cross-domain data interaction system for a smart heating network based on base stations, comprising an intranet acquisition and processing unit, a physical isolation relay unit, and an extranet service logic unit, wherein the intranet acquisition and processing unit includes a first memory, a first processor, and a first computer program stored in the first memory and executable on the first processor; the physical isolation relay unit includes a second memory, a second processor, and a second computer program stored in the second memory and executable on the second processor; and the extranet service logic unit includes a third memory, a third processor, and a third computer program stored in the third memory and executable on the third processor, characterized in that... When the processors of the intranet acquisition and processing unit, the physical isolation relay unit, and the extranet service logic unit execute computer programs, they implement the respective steps executed by the intranet acquisition and processing unit, the physical isolation relay unit, and the extranet service logic unit in the cross-domain data interaction method for a smart heating network based on a base station as described in any one of claims 1 to 9.
