Node security access method, device and equipment for clinical trial site

Abstract

Embodiments of the present disclosure disclose a node security access method, device and equipment for a clinical trial site. A specific embodiment of the method comprises: obtaining a clinical trial project identifier, an authorized personnel identity credential and an authorized department area term; determining a clinical trial site expected space access boundary; performing separation processing to obtain a site channel state information matrix; performing reconstruction processing to obtain reconstructed intrinsic state fingerprint information and trial environment lag compensation parameters; performing access determination processing on the reconstructed intrinsic state fingerprint information to obtain an access determination result; generating a clinical trial site physical layer access token to access a wireless channel. The embodiment is related to wireless network security access and Internet of Things device access control, and improves the anti-forgery performance of wireless access layer identity authentication in a complex multipath fading environment.

Description

Technical Field

[0001] Embodiments of this disclosure relate to secure access to wireless networks and access control for Internet of Things (IoT) devices, specifically to secure node access methods, apparatus, and devices for use in clinical trial sites. Background Technology

[0002] Wireless LAN access control typically relies on extracting channel physical layer features or issuing digital tokens to verify the legitimacy of the terminal to be accessed. Channel state information includes the amplitude and phase response of a multi-carrier orthogonal frequency division multiplexing system, reflecting the multipath transmission path characteristics of radio frequency signals within a specific physical boundary, thus forming the intrinsic fingerprint of terminal identification. The gateway calculates topological constraints based on the transient wireless channel parameters fed back by the communication peer, and establishes the physical isolation boundary on the access side.

[0003] In uncontrolled spaces with multiple overlapping projects and frequent topology changes, concurrent access by multi-tenant heterogeneous terminals induces complex electromagnetic interference. Routine personnel movement and the frequent relocation of metal equipment frequently disrupt multipath scattering characteristics, causing high-frequency nonlinear jumps and sudden impulse noise to infiltrate the collected channel fingerprints. Traditional access strategies often employ static topology settings or rigid thresholds, which frequently result in false rejections when encountering sudden obstructions, leading to network disconnections and data transmission interruptions. While linear approaches such as expanding antenna arrays or relaxing correlation thresholds attempt to mitigate access jitter, the added hardware exacerbates air interface contention dissipation at the terminal, and blindly relaxing thresholds directly weakens network authentication strength. This allows malicious spoofed nodes to replay compliant guidance waveforms using software-defined radio add-ons, causing inconsistencies in data entry. The contradiction between the random dissipation of environmental noise disturbances and the high-precision requirements for multipath channel fingerprint convergence is prominent.

[0004] However, when using the above method to connect wireless nodes at clinical trial sites, the following technical problems often arise: Firstly, the wireless physical layer fingerprint is distorted nonlinearly by the disturbance of moving people, which causes legitimate nodes to disconnect frequently. Secondly, traditional wireless access authentication and application layer service operations are independent of each other on the timeline, which cannot prevent cross-domain data leakage caused by the cross-regional reuse of digital credentials. Summary of the Invention

[0005] The summary portion of this disclosure is intended to provide a brief overview of the concepts, which will be described in detail in the detailed description portion. This summary portion is not intended to identify key or essential features of the claimed technical solutions, nor is it intended to limit the scope of the claimed technical solutions.

[0006] Some embodiments of this disclosure propose methods, apparatuses, and devices for secure node access in clinical trial sites to address the technical problems mentioned in the background section above.

[0007] In a first aspect, some embodiments of this disclosure provide a method for secure node access at a clinical trial site. The method includes: in response to determining that preset access conditions are met at the current time, obtaining a clinical trial project identifier, authorized personnel identification credentials, and authorized department area names from a management server; retrieving the expected spatial access boundary of the clinical trial site based on the aforementioned clinical trial project identifier, authorized personnel identification credentials, and authorized department area names; in response to receiving a clinical trial site node detection signal sent by a node to be accessed at the clinical trial site, separating and processing the aforementioned clinical trial site node detection signal to obtain a site channel state information matrix; reconstructing the aforementioned site channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters; performing access determination processing on the aforementioned reconstructed intrinsic state fingerprint information based on the aforementioned experimental environment hysteresis compensation parameters and the aforementioned expected spatial access boundary of the clinical trial site to obtain an access determination result; and in response to determining that the aforementioned access determination result meets preset access conditions, generating a clinical trial site physical layer access token and sending the aforementioned clinical trial site physical layer access token to the node to be accessed at the clinical trial site to access the wireless channel.

[0008] Secondly, some embodiments of this disclosure provide a node security access device for clinical trial sites. The device includes: an acquisition unit configured to acquire a clinical trial project identifier, authorized personnel identification credentials, and authorized department area names from a management server in response to determining that preset acquisition conditions are met at the current time; a retrieval unit configured to retrieve the desired spatial access boundary of the clinical trial site based on the aforementioned clinical trial project identifier, authorized personnel identification credentials, and authorized department area names; and a separation unit configured to separate the clinical trial site node detection signals received from a node to be accessed at the clinical trial site. A field channel state information matrix is ​​obtained; a reconstruction unit is configured to reconstruct the field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters; an access determination unit is configured to perform access determination processing on the reconstructed intrinsic state fingerprint information based on the experimental environment hysteresis compensation parameters and the expected spatial access boundary of the clinical trial site to obtain an access determination result; a generation unit is configured to generate a clinical trial site physical layer access token in response to determining that the access determination result meets preset access conditions, and send the clinical trial site physical layer access token to the clinical trial site node to be accessed to access the wireless channel.

[0009] Thirdly, some embodiments of this disclosure provide an electronic device, including: one or more processors; and a storage device having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any implementation of the first aspect above.

[0010] Fourthly, some embodiments of this disclosure provide a computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method described in any of the implementations of the first aspect above.

[0011] The above-described embodiments of this disclosure have the following beneficial effects: First, the channel state information matrix of the node to be accessed in the historical discrete access period can be cached, the transient energy deviation slope of each subcarrier can be calculated to construct a variance gradient sequence, the high-frequency transient fluctuation subcarriers in the top of the sequence can be removed, and only the remaining coherent subcarriers with low variance characteristics and monotonically correlated with the multipath scattering static skeleton index can be retained to reconstruct the intrinsic state fingerprint. This makes the spatial correlation value stably converge to the benchmark access boundary when personnel move around and disturb the clinical trial site, eliminates the high-frequency network oscillation caused by fixed threshold authentication, avoids legitimate nodes from being disconnected without cause, and improves the anti-spoofing performance of wireless access layer identity authentication in complex multipath fading environments. Secondly, by using a secure cross-domain asynchronous transmission protocol to synchronize the task registration log of the current time segment of the management system in real time, the project identifier, identity certificate, and authorized department area name in the active state are combined as feedforward control signals to dynamically retrieve the feature base library and deduce the expected spatial access boundary. This achieves time-series coordination between traditional access authentication and application layer business conditions, forming cross-domain verification at the physical layer of wireless channel association handshake, preventing unauthorized reuse and cross-project impersonation of digital certificates and static key assets outside of specific operation sites. Furthermore, the allocation of local area network channel resources after identity verification is closely coordinated with the status flow of follow-up business processes. When a new subject check-in log is detected on the management system side and assigned to the currently authorized department, the data collection scale label is read and the expected data packet burst throughput is determined. The distributed coordination function contention window parameters of the media access control layer are adjusted in reverse, temporarily configuring the wireless access priority of the node to be accessed to the highest level, providing high-bandwidth air interface guarantee. When the follow-up verification file is uploaded and the task registration log switches to static standby state, the baseline dynamic balance of the local area network channel is automatically restored, avoiding packet loss paralysis caused by concurrent collisions of high-density IoT nodes. Finally, after successful node association, the trust decay clock stepping rule is activated. The signal-to-noise ratio matrix of the neighboring wireless base stations reported by the node to be accessed is received periodically to calculate the dynamic offset parameter of the physical spatial location. When the dynamic offset parameter of the physical spatial location increases, the physical layer access token is cascaded downgraded while maintaining the wireless physical layer connection. The read and write permissions to the root directory of the core original file storage are gradually closed, and only the one-way synchronization permission for non-sensitive public basic data is retained. When the access node completely leaves the expected spatial access boundary, the physical layer access token is completely cleared to zero, thus preventing the implicit cross-domain data leakage caused by the location movement of the terminal in the cross-physical field of multi-tenant and multi-project. Attached Figure Description

[0012] The above and other features, advantages, and aspects of the embodiments of this disclosure will become more apparent from the accompanying drawings and the following detailed description. Throughout the drawings, the same or similar reference numerals denote the same or similar elements. It should be understood that the drawings are schematic, and elements are not necessarily drawn to scale.

[0013] Figure 1 This is a schematic diagram of an application scenario of a node secure access method for clinical trial sites, which is one of the embodiments of this disclosure. Figure 2 This is a flowchart of some embodiments of the node secure access method for clinical trial sites according to the present disclosure; Figure 3 This is a schematic diagram of the structure of some embodiments of a node secure access device for clinical trial sites according to the present disclosure; Figure 4 This is a schematic diagram of the structure of an electronic device suitable for implementing some embodiments of the present disclosure. Detailed Implementation

[0014] Embodiments of this disclosure will now be described in more detail with reference to the accompanying drawings. While some embodiments of this disclosure are shown in the drawings, it should be understood that this disclosure can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of this disclosure. It should be understood that the accompanying drawings and embodiments of this disclosure are for illustrative purposes only and are not intended to limit the scope of protection of this disclosure.

[0015] It should also be noted that, for ease of description, only the parts relevant to the invention are shown in the accompanying drawings. Unless otherwise specified, the embodiments and features described in this disclosure can be combined with each other.

[0016] It should be noted that the concepts of "first" and "second" mentioned in this disclosure are used only to distinguish different devices, modules or units, and are not used to limit the order of functions performed by these devices, modules or units or their interdependencies.

[0017] It should be noted that the terms "a" and "a plurality of" used in this disclosure are illustrative rather than restrictive, and those skilled in the art should understand that, unless otherwise expressly indicated in the context, they should be understood as "one or more".

[0018] The names of messages or information exchanged between multiple devices in the embodiments of this disclosure are for illustrative purposes only and are not intended to limit the scope of such messages or information.

[0019] This disclosure will now be described in detail with reference to the accompanying drawings and embodiments.

[0020] Figure 1 This is a schematic diagram of an application scenario of a node secure access method for clinical trial sites, which is one of the embodiments of this disclosure.

[0021] exist Figure 1In the application scenario, firstly, the computing device 101, in response to determining that the current time meets the preset acquisition conditions, can obtain the clinical trial project identifier, authorized personnel identity certificate, and authorized department area name 104 from the management server 102. Then, the computing device 101 can determine the expected spatial access boundary of the clinical trial site based on the aforementioned clinical trial project identifier, authorized personnel identity certificate, and authorized department area name 104. Next, in response to receiving the clinical trial site node detection signal 105 sent by the clinical trial site node to be accessed 103, the computing device 101 can separate and process the clinical trial site node detection signal 105 to obtain a site channel state information matrix. Then, the computing device 101 can reconstruct the aforementioned site channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters. Finally, based on the aforementioned experimental environment hysteresis compensation parameters and the aforementioned expected spatial access boundary of the clinical trial site, the computing device 101 can perform access determination processing on the reconstructed intrinsic state fingerprint information to obtain an access determination result. Finally, in response to determining that the above access determination result meets the preset access conditions, the computing device 101 can generate a clinical trial site physical layer access token 106 and send the clinical trial site physical layer access token 106 to the clinical trial site node 103 to access the wireless channel.

[0022] It should be noted that the aforementioned computing device 101 can be either hardware or software. When the computing device is hardware, it can be implemented as a distributed cluster composed of multiple servers or terminal devices, or as a single server or a single terminal device. When the computing device is software, it can be installed in the hardware devices listed above. It can be implemented as, for example, multiple software programs or software modules used to provide distributed services, or as a single software program or software module. No specific limitations are made here. It should be understood that... Figure 1 The number of computing devices in the system can be arbitrary, depending on the implementation requirements.

[0023] Continue to refer to Figure 2 The diagram illustrates a flow 200 of some embodiments of a secure node access method for clinical trial sites according to the present disclosure. This secure node access method for clinical trial sites includes the following steps: Step 201: In response to determining that the preset acquisition conditions are met at the current time, retrieve the clinical trial project identifier, authorized personnel identity certificate, and authorized department area name from the management server.

[0024] In some embodiments, the implementer of the node secure access method for clinical trial sites (e.g., Figure 1The computing device 101 (or industrial-grade wireless gateway) shown can, in response to determining that the current time meets preset acquisition conditions, obtain the clinical trial project identifier, authorized personnel identification certificate, and authorized department area name from the management server via a wired or wireless connection. The preset acquisition conditions can be that the difference between the current time and the time when the executing entity last obtained the clinical trial project identifier, authorized personnel identification certificate, and authorized department area name from the management server is within a preset stepping period. The clinical trial project identifier can uniquely identify a clinical trial project. The clinical trial project can represent a clinical trial for which data collection is desired. The authorized personnel identification certificate can identify at least one authorized personnel, who can be a subject of the clinical trial project. The authorized department area name can represent a clinical trial department area, which can be an area used to implement the clinical trial project. The management server can be a server used to store the clinical trial project identifier, authorized personnel identification certificate, and authorized department area name.

[0025] As an example, the preset step cycle duration range mentioned above could be 3 to 5 seconds. The authorized department area name could be "Oncology Laboratory Archives".

[0026] It should be noted that the aforementioned wireless connection methods may include, but are not limited to, 3G / 4G / 5G connections, WiFi connections, Bluetooth connections, WiMAX connections, Zigbee connections, UWB (Ultra Wide Band) connections, and other currently known or future wireless connection methods.

[0027] In some optional implementations of certain embodiments, the process by which the executing entity obtains the clinical trial project identifier, authorized personnel identification credentials, and authorized department / region name from the management server may include the following steps: The first step involves sending a pre-defined status query request to the management server and obtaining the management server's current timestamp from it. This can be done via an asynchronous transmission protocol (e.g., a wireless session protocol or MQTT (Message Queuing Telemetry Transport)). The pre-defined status query request can be a polling request signal pre-generated by the executing entity to obtain information from the management server. The management server's current timestamp can be a timestamp generated by the management server representing the moment the encrypted task registration data packet was generated. The encrypted task registration data packet can be an encrypted data packet generated by the management server. The encrypted task registration data packet can include: a clinical trial project identifier field, an authorized personnel identification credential field, and an authorized department / region name field. Specifically, the clinical trial project identifier field can be a field for storing the clinical trial project identifier. The authorized personnel identification credential field can be a field for storing the authorized personnel identification credential. The authorized department / region name field can be a field for storing the name of the authorized department / region.

[0028] The second step is to receive the encrypted task registration data packet from the management server in response to the determination that the difference between the timestamp of the management server and the current time is less than a preset duration.

[0029] As an example, the preset duration could be 30 milliseconds.

[0030] The third step involves extracting and processing the encrypted task registration data packet to obtain the clinical trial project identifier, authorized personnel identification certificate, and authorized department / region name. This extraction and processing can be performed by first decrypting the encrypted task registration data packet using a preset decryption algorithm to obtain the target task registration data. This target task registration data may include the following fields: clinical trial project identifier field, authorized personnel identification certificate field, and authorized department / region name field. Then, the clinical trial project identifier field, authorized personnel identification certificate field, and authorized department / region name field included in the target task registration data are respectively identified as the clinical trial project identifier, authorized personnel identification certificate, and authorized department / region name.

[0031] As an example, the above-mentioned preset decryption algorithm may be, but is not limited to: AES (Advanced Encryption Standard), SM4 (ShangMi 4), or RSA (Rivest-Shamir-Adleman).

[0032] Step 202: Based on the clinical trial project identifier, authorized personnel identification credentials, and authorized department area names, retrieve the expected spatial access boundaries of the clinical trial site.

[0033] In some embodiments, the executing entity can retrieve the expected spatial access boundary of the clinical trial site based on the clinical trial project identifier, the authorized personnel's identity certificate, and the authorized department area name. Specifically, retrieving the expected spatial access boundary based on the clinical trial project identifier, the authorized personnel's identity certificate, and the authorized department area name can be achieved by first retrieving a static multipath transmission path matrix corresponding to the authorized department area name from a transmission path database. Specifically, the transmission path database can be a database used to store static multipath transmission path matrices. The static multipath transmission path matrix can characterize the propagation characteristics of wireless signals within the authorized department area under interference-free conditions. Then, the clinical trial project identifier and the authorized personnel's identity certificate are added as attribute tags to the static multipath transmission path matrix to obtain the expected spatial access boundary of the clinical trial site.

[0034] Step 203: In response to receiving the clinical trial site node detection signal sent by the node to be accessed at the clinical trial site, the clinical trial site node detection signal is separated and processed to obtain the site channel state information matrix.

[0035] In some embodiments, the execution entity may, in response to receiving a clinical trial site node detection signal sent by a node to be accessed at the clinical trial site, perform separation processing on the clinical trial site node detection signal to obtain a site channel state information matrix. Specifically, in response to receiving the clinical trial site node detection signal sent by the node to be accessed at the clinical trial site, the clinical trial site node detection signal can be separated using a preset separation method to obtain the site channel state information matrix. The clinical trial site node to be accessed may be a wireless node that wants to access a wireless channel. The clinical trial site node detection signal may be a radio frequency signal. The site channel state information matrix may represent the channel state information of at least one independent subcarrier. Each element in the site channel state information matrix may be a complex number, and each element in the site channel state information matrix may represent the amplitude and phase of an independent subcarrier.

[0036] As an example, the aforementioned preset separation method may include, but is not limited to, at least one of the following: Fast Fourier Transform algorithm, Least Squares estimation algorithm, and Least Mean Square Error algorithm.

[0037] In some optional implementations of certain embodiments, the execution entity performs separation processing on the clinical trial site node detection signals to obtain a site channel state information matrix, which may include the following steps: The first step is to preprocess the above-mentioned clinical trial site node detection signals to obtain preprocessed site detection signals. This can be achieved using a preprocessing algorithm.

[0038] As an example, the above preprocessing algorithms may include, but are not limited to, at least one of the following: bandpass filter algorithm, wavelet filter algorithm, and digital predistortion algorithm.

[0039] The second step involves upscaling the preprocessed field detection signals to obtain higher-dimensional detection signals. This upscaling can be achieved by applying a two-dimensional convolution kernel to the preprocessed field detection signals. The specific parameters of this two-dimensional convolution kernel can be set according to the actual application and will not be elaborated here.

[0040] The third step involves performing perturbation recognition processing on the aforementioned high-dimensional probe signal to obtain the perturbation recognition result. This can be achieved using a perturbation recognition model. This perturbation recognition model can be a pre-trained neural network model that takes the high-dimensional probe signal as input and the perturbation recognition result as output. Specifically, the perturbation recognition model may include: a first recognition convolutional kernel, a second recognition convolutional kernel, a perturbation discrimination linear layer, and a perturbation parameter linear layer.

[0041] In practice, firstly, the high-dimensional detection signal can be subjected to a first convolutional process using a first recognition convolutional kernel included in the perturbation recognition model to obtain a first high-dimensional convolutional feature. Secondly, the first high-dimensional convolutional feature can be subjected to a second convolutional process using a second recognition convolutional kernel included in the perturbation recognition model to obtain a second high-dimensional convolutional feature. Then, the second high-dimensional convolutional feature can be subjected to type discrimination processing using a perturbation discriminant linear layer included in the perturbation recognition model to obtain perturbation type feature information. Next, the second high-dimensional convolutional feature can be subjected to parameter discrimination processing using a perturbation parameter linear layer included in the perturbation recognition model to obtain perturbation parameter feature information. Finally, the perturbation type feature information and the perturbation parameter feature information can be combined into the perturbation recognition result. Specifically, the perturbation type feature information can characterize the type of at least one signal perturbation received by the detection signal at the clinical trial site node. The perturbation parameter feature information can characterize the intensity of each signal perturbation received by the detection signal at the clinical trial site node.

[0042] As an example, the types of signal disturbances mentioned above can be, but are not limited to: carrier frequency offset, sampling clock deviation, gain fluctuation, time shift, or linear frequency modulation. The disturbance discrimination linear layer mentioned above can be a liner model. The disturbance parameter linear layer mentioned above can also be a liner model.

[0043] The fourth step involves extracting features from the high-dimensional detection signal based on the perturbation identification results. This extraction process can be achieved by convolving the high-dimensional detection signal with a high-dimensional convolution kernel. The specific parameters of the high-dimensional convolution kernel can be set according to the actual application and will not be elaborated here.

[0044] The fifth step involves classifying the aforementioned high-dimensional detection feature information to obtain the test identity classification results. This classification can be achieved using a pre-trained classifier model. These test identity classification results can characterize the device type of the equipment sending the clinical trial site node detection signals.

[0045] As an example, the pre-trained classifier model mentioned above can be, but is not limited to, a linear classifier model or a multilayer perceptron classifier model. The device type mentioned above can be, but is not limited to, a mobile phone, a tablet computer, or a drone.

[0046] Step 6: In response to the determination that the above-mentioned test identity classification result meets the preset category conditions, the above-mentioned preprocessed field detection signal is separated to obtain the field channel state information matrix. Specifically, frequency division multiplexing and time division multiplexing can be used to separate the channel state information (CSI) of the above-mentioned preprocessed field detection signal from the preprocessed field detection signal to obtain the field channel state information matrix. The above-mentioned preset category conditions can be the existence of a preset authorized device type within a preset authorized device type set that is the same as the above-mentioned test identity classification result. The preset authorized device type in the above-mentioned preset authorized device type set can represent an authorized device type.

[0047] As an example, the authorized device types mentioned above can be, but are not limited to: mobile phones, tablets, or smartwatches.

[0048] In some optional implementations of certain embodiments, the fourth step of the execution entity, based on the above-mentioned disturbance identification result, performing feature extraction processing on the above-mentioned high-dimensional detection signal to obtain high-dimensional detection feature information, may include the following steps: The first step, based on the perturbation identification results described above, is to modulate the predetermined basic convolutional kernel to obtain a modulated convolutional kernel. This modulation of the predetermined basic convolutional kernel based on the perturbation identification results can be achieved through linear interpolation, multiplicative scaling, or cyclic translation. The specific parameters of the basic convolutional kernel can be set according to the actual application and will not be elaborated further here.

[0049] The second step involves performing convolution processing on the high-dimensional detection signal based on the aforementioned modulation convolution kernel to obtain high-dimensional convolution feature information.

[0050] The third step involves performing deep convolution processing on the aforementioned high-dimensional convolutional feature information to obtain high-dimensional detection feature information. This can be achieved using a pre-trained deep convolutional network model.

[0051] As an example, the aforementioned deep convolutional network model can be, but is not limited to, a deep convolutional neural network model, a depthwise separable convolutional neural network model, or a dilated convolutional neural network model.

[0052] Therefore, various types of disturbances that may occur when receiving signals can be identified first. Then, for each type of disturbance identified when receiving the probe signal, the convolution kernel parameters used in feature extraction can be adaptively adjusted. This allows the disturbance features to be removed from the total features of the probe signal. As a result, in the complex environment of clinical trial sites, including various large equipment and frequent personnel movement, the impact of environmental disturbances on the probe signal can be reduced. This improves the accuracy of probe signal identification, reduces the probability of misjudgment, and further enhances the stability of data transmission and improves the security of wireless communication.

[0053] Step 204: Reconstruct the field channel state information matrix to obtain the reconstructed intrinsic state fingerprint information and the test environment hysteresis compensation parameters.

[0054] In some embodiments, the execution entity can reconstruct the aforementioned field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters. In some embodiments, the reconstructing of the aforementioned field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters can be performed as follows: First, the real and imaginary parts of each element in the aforementioned field channel state information matrix are expanded and sequentially combined into one-dimensional data, and the combined one-dimensional data is determined as the field intrinsic state fingerprint information. Second, a preset number of elements are randomly selected from the field intrinsic state fingerprint information, and their real and imaginary parts are set to zero to obtain the reconstructed intrinsic state fingerprint information. Then, the historical field channel state information matrix sequence corresponding to the clinical trial site node to be accessed is obtained from a cache memory. The aforementioned cache memory can be a high-speed cache block used to store the historical field channel state information matrix sequence. The historical field channel state information matrix in the aforementioned historical field channel state information matrix sequence can be a field channel state information matrix generated at a historical time. The historical field channel state information matrix in the aforementioned historical field channel state information matrix sequence can be arranged in chronological order. The historical moment can be the moment when the corresponding historical field channel state information matrix is ​​generated. Next, the element-wise difference between the above-mentioned field channel state information matrix and the average matrix of each historical field channel state information matrix in the above-mentioned historical field channel state information matrix sequence is taken to obtain the difference channel matrix. Finally, the F (Frobenius) norm of the above difference channel matrix is ​​determined as the hysteresis compensation parameter for the experimental environment.

[0055] As an example, the preset quantity can be, but is not limited to, 1, 2, 3, 4, or 5. The preset number of elements can be the product of the number of elements in the above-mentioned field channel state information matrix and a preset ratio value, where the preset ratio value can be 15%.

[0056] In some optional implementations of certain embodiments, the execution entity reconstructs the above-mentioned field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and test environment hysteresis compensation parameters, which may include the following steps: The first step is to perform mapping processing on the above-mentioned field channel state information matrix to obtain the field intrinsic channel state fingerprint information. Specifically, the real and imaginary parts of each element in the field channel state information matrix can be expanded and combined into one-dimensional data, and this combined one-dimensional data can be used to determine the field intrinsic channel state fingerprint information.

[0057] The second step is to obtain the historical site channel state information matrix sequence corresponding to the nodes to be accessed at the aforementioned clinical trial site. This sequence can be obtained from a cache. The specific implementation method for obtaining the historical site channel state information matrix sequence and its resulting technical effects can be found in step 204 of the above embodiments, and will not be repeated here.

[0058] The third step involves constructing a field discrete subcarrier variance gradient sequence corresponding to the aforementioned historical field channel state information matrix, based on the above-mentioned historical field channel state information matrix sequence. Each field discrete subcarrier variance gradient in the above-mentioned field discrete subcarrier variance gradient sequence can correspond to an independent subcarrier.

[0059] The fourth step involves removing elements from the aforementioned local discrete subcarrier variance gradient sequence to obtain reconstructed intrinsic state fingerprint information. This removal process can be performed by first identifying the first target number of local discrete subcarrier variance gradients in the local discrete subcarrier variance gradient sequence as the subcarrier variance removal sequence. Then, the real and imaginary parts of the elements in the local intrinsic channel state fingerprint information corresponding to each removed subcarrier variance in the removed subcarrier variance sequence are set to zero. This zeroed-out local intrinsic channel state fingerprint information is then identified as the reconstructed intrinsic state fingerprint information.

[0060] As an example, the target number mentioned above can be the product of the number of in-situ discrete subcarrier variance gradients in the in-situ discrete subcarrier variance gradient sequence and a preset rejection ratio. The preset rejection ratio could be 15%.

[0061] The fifth step is to determine the experimental environment hysteresis compensation parameters corresponding to the aforementioned on-site channel state information matrix and the aforementioned historical on-site channel state information matrix sequence. This determination can be achieved by first subtracting the average matrix of each historical on-site channel state information matrix in the aforementioned on-site channel state information matrix and the aforementioned historical on-site channel state information matrix sequence element-by-element to obtain the difference channel matrix. Then, the F-norm of the difference channel matrix is ​​determined as the experimental environment hysteresis compensation parameter.

[0062] In some optional implementations of certain embodiments, the execution entity constructs a field discrete subcarrier variance gradient sequence corresponding to the field channel state information matrix based on the historical field channel state information matrix sequence, which may include the following steps: The first step is to perform baseline extraction processing on the above-mentioned historical field channel state information matrix sequence to obtain the field complex domain response baseline value set. Specifically, each element in the mean matrix of each historical field channel state information matrix in the above-mentioned historical field channel state information matrix sequence can be determined as the field complex domain response baseline value, thus obtaining the field complex domain response baseline value set.

[0063] The second step involves amplitude extraction processing of the aforementioned historical field channel state information matrix sequence and the aforementioned field channel state information matrix to obtain a set of field energy fluctuation amplitudes. The field complex domain response baseline values ​​in the aforementioned field complex domain response baseline value set and the field energy fluctuation amplitudes in the aforementioned field energy fluctuation amplitude set correspond one-to-one. Specifically, based on the aforementioned field complex domain response baseline value set, the amplitude extraction processing of the aforementioned historical field channel state information matrix sequence and the aforementioned field channel state information matrix to obtain the set of field energy fluctuation amplitudes can be performed as follows: First, for each element in the field channel state information matrix, the element corresponding to the aforementioned element in each historical field channel state information matrix in the aforementioned historical field channel state information matrix sequence is determined as a historical element, resulting in a set of historical elements. Then, the square of the modulus of each historical element in the aforementioned historical element set is determined as a historical energy value, resulting in a set of historical energy values. Next, the square of the modulus of the aforementioned elements is determined as a field energy value. Subsequently, each historical energy value in the aforementioned historical energy value set and the aforementioned field energy value are respectively determined as continuous energy values, resulting in a set of continuous energy values. Finally, the variance of the aforementioned continuous energy value set is determined as the on-site energy fluctuation amplitude. Second, the determined on-site energy fluctuation amplitudes are defined as the on-site energy fluctuation amplitude set.

[0064] The third step involves determining the energy deviation slope value corresponding to each on-site energy fluctuation amplitude in the on-site energy fluctuation amplitude set, based on the aforementioned on-site complex domain response baseline value set, thus obtaining the energy deviation slope value set. Specifically, determining the energy deviation slope value corresponding to each on-site energy fluctuation amplitude in the aforementioned on-site energy fluctuation amplitude set based on the aforementioned on-site complex domain response baseline value set can be achieved by: first, determining the square of the modulus of the on-site complex domain response baseline value set and the on-site complex domain response baseline value corresponding to the aforementioned on-site energy fluctuation amplitude as the response energy value; then, determining the deviation duration value by the difference between the current time and the historical time of the first historical on-site channel state information matrix in the aforementioned historical on-site channel state information matrix sequence; and finally, determining the energy deviation slope value by the ratio of the difference between the response energy value and the aforementioned on-site energy fluctuation amplitude to the deviation duration value.

[0065] The fourth step involves splitting and sorting the above-mentioned field channel state information matrix based on the energy deviation slope value set to obtain the field discrete subcarrier variance gradient sequence. Specifically, the elements in the field channel state information matrix can be sorted according to the energy deviation slope values ​​in the energy deviation slope value set from largest to smallest to obtain the field discrete subcarrier variance gradient sequence.

[0066] Step 205: Based on the experimental environment lag compensation parameters and the above-mentioned clinical trial site expected space access boundary, the reconstructed intrinsic state fingerprint information is processed for access determination to obtain the access determination result.

[0067] In some embodiments, the executing entity may perform access determination processing on the reconstructed intrinsic state fingerprint information based on the aforementioned experimental environment lag compensation parameters and the aforementioned expected spatial access boundary of the clinical trial site, to obtain an access determination result. Specifically, the process of performing access determination processing on the reconstructed intrinsic state fingerprint information based on the aforementioned experimental environment lag compensation parameters and the aforementioned expected spatial access boundary of the clinical trial site to obtain an access determination result may involve: first, determining the spatial similarity value between the reconstructed intrinsic state fingerprint information and the aforementioned expected spatial access boundary of the clinical trial site; then, determining the sum of a preset compliance relevance threshold and the aforementioned experimental environment lag compensation parameters as a target relevance threshold; finally, in response to determining that the spatial similarity value is greater than the target relevance threshold, determining preset access information as the access determination result; and in response to determining that the spatial similarity value is less than or equal to the target relevance threshold, determining preset rejection information as the access determination result.

[0068] As an example, the reconstructed intrinsic state fingerprint information described above can be represented as a vector: [0.92, 0.88, 0, 0.91, 0.87, 0, 0.89, 0.86, 0, 0.90, 0.850, 0.88, 0.84, 0, 0.87, 0.83, 0, 0.86, 0.82, 0, 0.85, 0.81, 0, 0.84, 0.80, 0, 0.83, 0.79, 0]. The expected spatial access boundary of the above clinical trial site can be represented as a vector: [0.04, 0.9, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93, 0.93, 0.04, 0.93]. The differential vector of the reconstructed intrinsic state fingerprint information is determined to be [0.04, 0.88, 0.91, 0.04, 0.87, 0.89, 0.03, 0.86, 0.90, 0.05, 0.85, 0.88, 0.04, 0.84, 0.87, 0.04, 0.83, 0.86, 0.04, 0.82, 0.85, 0.04, 0.81, 0.84, 0.04, 0.80, 0.83, 0.04, 0.79]. The cosine similarity between the reconstructed intrinsic state fingerprint information and the expected spatial access boundary of the clinical trial site is 0.990. This cosine similarity is used to determine the spatial similarity value between the reconstructed intrinsic state fingerprint information and the expected spatial access boundary of the clinical trial site. The preset compliance relevance threshold can be 0.8. The aforementioned preset access information can represent "access allowed". The aforementioned preset rejection information can represent "access denied".

[0069] In some optional implementations of certain embodiments, the execution entity performs access determination processing on the reconstructed intrinsic state fingerprint information based on the aforementioned experimental environment hysteresis compensation parameters and the aforementioned clinical trial site expected space access boundary, and obtains the access determination result, which may include the following steps: The first step is to transform the reconstructed intrinsic state fingerprint information to obtain the differential envelope vector of the field state. This transformation can be achieved using first-order difference operations.

[0070] The second step is to determine the site spatial benchmark matrix corresponding to the expected spatial access boundary of the aforementioned clinical trial site. This benchmark matrix can be obtained from the management server. The site spatial benchmark matrix can be the basis matrix of the clinical trial department area corresponding to the expected spatial access boundary of the aforementioned clinical trial site.

[0071] The third step is to determine the scalar of the inner product of the above-mentioned field state differential envelope vector and the above-mentioned field spatial reference matrix as the spatial correlation value of the node to be connected.

[0072] The fourth step is to determine the on-site judgment correlation value by summing the above-mentioned test environment lag compensation parameters with the pre-determined compliance correlation value.

[0073] As an example, the predetermined compliance relevance value mentioned above could be 0.8.

[0074] Fifth step: In response to determining that the spatial correlation value of the node to be accessed is greater than or equal to the on-site judgment correlation value, the preset judgment information is determined as the access judgment result.

[0075] As an example, the aforementioned preset determination information could be information representing "access allowed".

[0076] Step 206: In response to determining that the access judgment result meets the preset access conditions, generate a physical layer access token for the clinical trial site, and send the physical layer access token for the clinical trial site to the node to be accessed at the clinical trial site to access the wireless channel.

[0077] In some embodiments, the executing entity may, in response to determining that the access determination result meets preset access conditions, generate a physical layer access token for the clinical trial site and send the physical layer access token for the clinical trial site to the node to be accessed at the clinical trial site to access the wireless channel. Specifically, the executing entity may directly generate a physical layer access token containing a preset expiration countdown as the physical layer access token for the clinical trial site.

[0078] As an example, the preset failure countdown could be 3600 seconds.

[0079] Optionally, the aforementioned implementing entity may also perform the following steps: The first step, in response to determining that the nodes to be accessed at the aforementioned clinical trial site are connected to the wireless channel, is to obtain the current time-segment task registration log from the aforementioned management server. This time-segment task registration log includes: follow-up verification service flow status information and trial data collection scale labels. The time-segment task registration log represents the data to be collected from the nodes to be accessed at the clinical trial site. The follow-up verification service flow status information can be either "activated" or "inactive." The trial data collection scale labels can be "small," "medium," or "large."

[0080] The second step involves determining the expected burst throughput of test data packets based on the experimental data collection scale label, in response to the determination that the aforementioned follow-up verification business flow status information meets the preset transmission conditions. Specifically, determining the expected burst throughput of test data packets based on the aforementioned experimental data collection scale label can be as follows: If the aforementioned experimental data collection scale label is determined to be a label representing "small," the first preset throughput is determined as the expected burst throughput of test data packets. If the aforementioned experimental data collection scale label is determined to be a label representing "medium," the second preset throughput is determined as the expected burst throughput of test data packets. If the aforementioned experimental data collection scale label is determined to be a label representing "large," the third preset throughput is determined as the expected burst throughput of test data packets. The aforementioned preset transmission conditions can be information indicating "activation" included in the aforementioned follow-up verification business flow status information.

[0081] As an example, the first preset throughput could be 10 MBbps (Megabits per second). The second preset throughput could be 100 MBbps. The third preset throughput could be 500 MBbps.

[0082] The third step is to determine the resource contention starting value based on the expected burst throughput of the experimental data packets, and to send the resource contention starting value to the nodes waiting to be accessed at the clinical trial site to receive follow-up verification documents.

[0083] Therefore, the aforementioned execution entities can analyze the time-segmented task registration log reported by the management server in real time to determine whether the follow-up verification business flow status is active. When the follow-up verification business flow status is active, the data collection scale label of the currently uploaded task is read, and the expected data packet burst throughput is determined based on the size of the data collection scale label. The expected data packet burst throughput value can also be converted into a reverse adjustment control quantity to reduce the contention start value in the contention window parameters of the media access control layer's distributed coordination function, allocate high-bandwidth air interface resources to the nodes to be accessed, and temporarily configure the wireless access priority of the nodes to be accessed to the highest level. The data transmission status within the authorized department area is continuously monitored, and when the follow-up verification file is uploaded and the task registration log switches to a static standby state, the baseline dynamic balance of the local area network channel is automatically restored.

[0084] Optionally, after the access node connects to the local area network channel, a trust decay clock stepping rule can be initiated to periodically receive the signal-to-noise ratio (SNR) matrix of neighboring wireless base stations reported by the access node. Based on the changing state of the SNR matrix of neighboring wireless base stations, the dynamic offset parameter of the physical spatial location of the access node in the current period is calculated. As the dynamic offset parameter of the physical spatial location increases, the wireless access control unit, while maintaining uninterrupted wireless physical layer connection, performs cascading demotion on the physical layer access token held by the access node, gradually closing the access node's read and write permissions to the root directory of the core raw file storage, retaining only unidirectional synchronization permissions for non-sensitive public basic data. When the access node completely leaves the desired spatial access boundary, the physical layer access token is completely cleared.

[0085] Further reference Figure 3 As an implementation of the methods shown in the above figures, this disclosure provides some embodiments of a node security access device for clinical trial sites. These device embodiments are similar to... Figure 2 Corresponding to the method embodiments shown, this node security access device for clinical trial sites can be specifically applied to various electronic devices.

[0086] like Figure 3As shown, a node security access device 300 for clinical trial sites in some embodiments includes: an acquisition unit 301, a determination unit 302, a separation unit 303, a reconstruction unit 304, an access determination unit 305, and a generation unit 306. The acquisition unit 301 is configured to acquire the clinical trial project identifier, authorized personnel identity certificate, and authorized department area name from the management server in response to determining that preset acquisition conditions are met at the current time; the determination unit 302 is configured to determine the expected spatial access boundary of the clinical trial site based on the aforementioned clinical trial project identifier, authorized personnel identity certificate, and authorized department area name; the separation unit 303 is configured to separate the clinical trial site node detection signal received from a node to be accessed at the clinical trial site to obtain a site channel state information matrix; the reconstruction unit 304... 4. The access determination unit 305 is configured to reconstruct the above-mentioned field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and test environment hysteresis compensation parameters; the access determination unit 305 is configured to perform access determination processing on the above-mentioned reconstructed intrinsic state fingerprint information based on the above-mentioned test environment hysteresis compensation parameters and the above-mentioned clinical trial site expected space access boundary to obtain access determination result; the generation unit 306 is configured to generate a clinical trial site physical layer access token in response to determining that the above-mentioned access determination result meets the preset access conditions, and send the above-mentioned clinical trial site physical layer access token to the above-mentioned clinical trial site node to access the wireless channel.

[0087] It is understandable that the units described in the node security access device 300 for clinical trial sites are similar to those in the reference device. Figure 2 The steps in the described method correspond accordingly. Therefore, the operations, features, and beneficial effects described above for the method also apply to the node security access device 300 and the units contained therein for use in clinical trial sites, and will not be repeated here.

[0088] The following is for reference. Figure 4 It shows a schematic diagram of the structure of an electronic device (e.g., a computing device) 400 suitable for implementing some embodiments of the present disclosure. Figure 4 The electronic device shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments of this disclosure.

[0089] like Figure 4As shown, the electronic device 400 may include a processing unit (e.g., a central processing unit, a graphics processing unit, etc.) 401, which can perform various appropriate actions and processes according to a program stored in a read-only memory 402 or a program loaded from a storage device 408 into a random access memory 403. The random access memory 403 also stores various programs and data required for the operation of the electronic device 400. The processing unit 401, the read-only memory 402, and the random access memory 403 are interconnected via a bus 404. An input / output interface 405 is also connected to the bus 404.

[0090] Typically, the following devices can be connected to the input / output interface 405: input devices 406 including, for example, a touchscreen, touchpad, keyboard, mouse, camera, microphone, accelerometer, gyroscope, etc.; output devices 407 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage devices 408 including, for example, magnetic tape, hard disk, etc.; and communication devices 409. Communication device 409 allows electronic device 400 to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 4 An electronic device 400 with various devices is shown; however, it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed alternatively. Figure 4 Each box shown can represent a device or multiple devices as needed.

[0091] In particular, according to some embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, some embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device 409, or installed from a storage device 408, or installed from a read-only memory 402. When the computer program is executed by the processing device 401, it performs the functions defined in the methods of some embodiments of this disclosure.

[0092] It should be noted that, in some embodiments of this disclosure, the computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium may be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In some embodiments of this disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In some embodiments of this disclosure, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium can be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wires, optical fibers, RF (radio frequency), etc., or any suitable combination thereof.

[0093] In some implementations, clients and servers can communicate using any currently known or future-developed network protocol such as HTTP (Hypertext Transfer Protocol) and can interconnect with digital data communication (e.g., communication networks) of any form or medium. Examples of communication networks include local area networks (“LANs”), wide area networks (“WANs”), the Internet (e.g., the Internet of Things), and peer-to-peer networks (e.g., ad hoc peer-to-peer networks), as well as any currently known or future-developed networks.

[0094] The aforementioned computer-readable medium may be included in the aforementioned electronic device; or it may exist independently and not assembled into the electronic device. The aforementioned computer-readable medium carries one or more programs. When the electronic device executes the aforementioned one or more programs, the electronic device causes the following actions: In response to determining that the current time meets preset acquisition conditions, it acquires the clinical trial project identifier, authorized personnel identity certificate, and authorized department area name from the management server; Based on the aforementioned clinical trial project identifier, authorized personnel identity certificate, and authorized department area name, it determines the expected spatial access boundary of the clinical trial site; In response to receiving the clinical trial site node detection signal sent by the clinical trial site node to be accessed, it performs separation processing on the aforementioned clinical trial site node detection signal to obtain a site channel state information matrix; It performs reconstruction processing on the aforementioned site channel state information matrix to obtain reconstructed intrinsic state fingerprint information and experimental environment hysteresis compensation parameters; Based on the aforementioned experimental environment hysteresis compensation parameters and the aforementioned expected spatial access boundary of the clinical trial site, it performs access determination processing on the aforementioned reconstructed intrinsic state fingerprint information to obtain an access determination result; In response to determining that the aforementioned access determination result meets preset access conditions, it generates a clinical trial site physical layer access token and sends the aforementioned clinical trial site physical layer access token to the aforementioned clinical trial site node to access the wireless channel.

[0095] Computer program code for performing operations of some embodiments of this disclosure can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and Python, and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0096] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0097] The functions described above in this document can be performed at least in part by one or more hardware logic components. For example, exemplary types of hardware logic components that can be used, without limitation, include: field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), system-on-a-chip (SoCs), complex programmable logic devices (CPLDs), and so on.

[0098] The above description is merely a selection of preferred embodiments of this disclosure and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of the invention involved in the embodiments of this disclosure is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described inventive concept. For example, technical solutions formed by substituting the above-described features with (but not limited to) technical features with similar functions disclosed in the embodiments of this disclosure.

Claims

1. A method for secure node access in clinical trial sites, characterized in that, include: In response to determining that the preset acquisition conditions are met at the current moment, the system retrieves the clinical trial project identifier, authorized personnel identification credentials, and authorized department / region name from the management server. Based on the clinical trial project identifier, the authorized personnel's identity certificate, and the authorized department area name, retrieve the expected spatial access boundary of the clinical trial site; In response to receiving a clinical trial site node detection signal sent by a node to be accessed at the clinical trial site, the clinical trial site node detection signal is separated and processed to obtain a site channel state information matrix; The field channel state information matrix is ​​reconstructed to obtain reconstructed intrinsic state fingerprint information and test environment hysteresis compensation parameters; Based on the hysteresis compensation parameters of the experimental environment and the expected space access boundary of the clinical trial site, the reconstructed intrinsic state fingerprint information is processed for access determination to obtain the access determination result. In response to determining that the access determination result meets the preset access conditions, a clinical trial site physical layer access token is generated, and the clinical trial site physical layer access token is sent to the clinical trial site node to be accessed to access the wireless channel.

2. The method according to claim 1, characterized in that, The method further includes: In response to determining that the node to be accessed at the clinical trial site is connected to the wireless channel, the current time-segment task registration log is obtained from the management server, wherein the time-segment task registration log includes: follow-up verification business flow status information and trial data collection scale label; In response to determining that the follow-up verification business flow status information meets the preset transmission conditions, the expected burst throughput of the test data packets is determined based on the test data collection scale label; Based on the expected burst throughput of the test data packets, a resource contention start value is determined, and the resource contention start value is sent to the clinical trial site node to be accessed in order to receive follow-up verification documents.

3. The node secure access method for clinical trial sites according to claim 1, characterized in that, The response, upon determining that the preset acquisition conditions are met at the current moment, retrieves the clinical trial project identifier, authorized personnel identification credentials, and authorized department / regional terminology from the management server, including: Send a preset status query request to the management server, and obtain the current timestamp of the management server from the management server; In response to determining that the difference between the timestamp of the management server and the current time is less than a preset duration, an encrypted task registration data packet is received from the management server; The encrypted task registration data packet is extracted and processed to obtain the clinical trial project identifier, authorized personnel identity certificate, and authorized department area name.

4. The node secure access method for clinical trial sites according to claim 1, characterized in that, The reconstruction process of the field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and test environment hysteresis compensation parameters includes: The on-site channel state information matrix is ​​mapped to obtain the on-site intrinsic channel state fingerprint information; Obtain the historical on-site channel state information matrix sequence corresponding to the nodes to be accessed at the clinical trial site; Based on the historical on-site channel state information matrix sequence, construct the on-site discrete subcarrier variance gradient sequence corresponding to the on-site channel state information matrix; Based on the on-site discrete subcarrier variance gradient sequence, the on-site intrinsic channel state fingerprint information is processed to remove the in-site intrinsic state fingerprint information to obtain the reconstructed intrinsic state fingerprint information. Determine the test environment hysteresis compensation parameters corresponding to the on-site channel state information matrix and the historical on-site channel state information matrix sequence.

5. The node secure access method for clinical trial sites according to claim 4, characterized in that, The step of constructing the on-site discrete subcarrier variance gradient sequence corresponding to the on-site channel state information matrix based on the historical on-site channel state information matrix sequence includes: Baseline extraction processing is performed on the historical field channel state information matrix sequence to obtain the field complex domain response baseline value set; Amplitude extraction processing is performed on the historical on-site channel state information matrix sequence and the on-site channel state information matrix to obtain the on-site energy fluctuation amplitude set, wherein the on-site complex domain response baseline value in the on-site complex domain response baseline value set and the on-site energy fluctuation amplitude in the on-site energy fluctuation amplitude set correspond one-to-one; Based on the set of baseline values ​​for the complex domain response at the site, the energy deviation slope value corresponding to each energy fluctuation amplitude in the set of energy fluctuation amplitudes at the site is determined, thus obtaining the set of energy deviation slope values. Based on the energy deviation slope value set, the field channel state information matrix is ​​split and sorted to obtain the field discrete subcarrier variance gradient sequence.

6. A node security access device for clinical trial sites, characterized in that, include: The acquisition unit is configured to retrieve the clinical trial project identifier, authorized personnel identity credentials, and authorized department area name from the management server in response to determining that the preset acquisition conditions are met at the current time. The retrieval unit is configured to retrieve the expected spatial access boundaries of the clinical trial site based on the clinical trial project identifier, the authorized personnel's identity certificate, and the authorized department area name; The separation unit is configured to separate the clinical trial site node detection signal in response to receiving a clinical trial site node detection signal sent by a node to be accessed at the clinical trial site, and obtain a site channel state information matrix. The reconstruction unit is configured to reconstruct the field channel state information matrix to obtain reconstructed intrinsic state fingerprint information and test environment hysteresis compensation parameters. The access determination unit is configured to perform access determination processing on the reconstructed intrinsic state fingerprint information based on the test environment hysteresis compensation parameters and the clinical trial site expected space access boundary, and obtain the access determination result. The generation unit is configured to generate a clinical trial site physical layer access token in response to determining that the access determination result meets preset access conditions, and to send the clinical trial site physical layer access token to the clinical trial site node to access the wireless channel.

7. An electronic device, characterized in that, include: One or more processors; A storage device on which one or more programs are stored; When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1 to 5.

8. A computer-readable medium, characterized in that, It stores a computer program thereon, wherein the computer program, when executed by a processor, implements the method as described in any one of claims 1 to 5.

Images