Dam safety monitoring data encryption transmission system

Abstract

The utility model provides a dam safety monitoring data encryption transmission system, and relates to the field of data transmission. The system comprises a safety monitoring data acquisition device, a safety monitoring data sending device and a safety monitoring data receiving device which are connected in sequence and realize data communication in a wired or wireless manner, wherein the safety monitoring data acquisition device is used for accessing various safety monitoring instruments on site and carrying out dynamic measurement on the monitoring instruments so as to upload the acquired safety monitoring data to the safety monitoring data sending device; the security monitoring data sending device is used for encrypting security monitoring data and then sending the security monitoring data to the security monitoring data receiving device, and the security monitoring data receiving device is used for decrypting the received security monitoring data and then storing the security monitoring data in a database. According to the scheme, the safety of the dam safety monitoring data in the transmission process can be improved.

Description

Technical Field

[0001] The present application relates to the field of data transmission, and in particular to a dam safety monitoring data encryption transmission system. Background Art

[0002] At present, water conservancy and hydropower projects have improved the efficiency of dam safety monitoring data collection by building automated collection systems to meet the needs of online monitoring and early warning. For project slopes, reservoir bank landslides or scattered monitoring points, it is difficult to lay wired network lines, and the automated collection data is usually transmitted through the 4G / 5G public wireless communication network. However, this data transmission method will directly expose the data sender and receiver to the public network, which poses potential network security risks, makes it difficult to ensure data security, and cannot meet the relevant confidentiality requirements of dam safety monitoring data. Utility Model Content

[0003] In order to solve the above problems, the present application provides a dam safety monitoring data encryption transmission system, which can improve the security of dam safety monitoring data during transmission.

[0004] This application is implemented as follows:

[0005] In the first aspect, the present application provides a dam safety monitoring data encryption transmission system, which includes a safety monitoring data acquisition device, a safety monitoring data sending device and a safety monitoring data receiving device, which are connected in sequence and realize data communication by wired or wireless means. Among them, the safety monitoring data acquisition device is used to access various types of safety monitoring instruments on site and perform dynamic measurements on the monitoring instruments, thereby uploading the collected safety monitoring data to the safety monitoring data sending device. The safety monitoring data sending device includes a VPDN client module and a 4G / 5G network router. The VPDN client module is used to encrypt the data uploaded by the safety monitoring data acquisition device using the IPsec protocol, and use the L2TP protocol to establish a network communication tunnel with the safety monitoring data receiving device, thereby sending the encrypted safety monitoring data to the safety monitoring data receiving device through the 4G / 5G network router. The security monitoring data receiving device includes a VPDN server module and an operator fixed IP routing. The operator fixed IP routing accesses the operator's public network through a wired broadband network to provide a fixed IP address. The VPDN server module is used to connect to the VPDN client module in the operator's public network through a fixed IP address and L2TP protocol to receive encrypted security monitoring data, thereby decrypting the data using the IPsec protocol and storing the decrypted data in a security monitoring database.

[0006] Further, based on the above scheme, the safety monitoring data acquisition device includes a first power supply module, a first data transmission module, an acquisition control module and a safety monitoring sensor, wherein the first power supply module is used to power the data transmission module and the acquisition control module, and the acquisition control module is used to control the safety monitoring sensor to collect safety monitoring data, and send the safety monitoring data to the safety monitoring data sending device through the first data transmission module.

[0007] Further, based on the above scheme, the security monitoring data sending device also includes a second power module, which is used to power the VPDN client module and the 4G / 5G network routing. The VPDN client module includes a data transmission unit and a data encryption unit, the data transmission unit is used to receive the security monitoring data and send the encrypted security monitoring data to the security monitoring data receiving device, and the data encryption unit is used to encrypt the security monitoring data received by the data transmission unit.

[0008] Further, based on the above solution, the security monitoring data receiving device also includes a third power module, and the third power module is used to power the VPDN server module and the operator's fixed IP routing. The VPDN server module includes a second data transmission unit and a data decryption unit, the second data transmission unit is used to receive the encrypted security monitoring data sent by the data transmission unit, and the decryption unit is used to decrypt the encrypted security monitoring data received by the second data transmission unit.

[0009] Furthermore, based on the above scheme, the security monitoring data receiving device is further used to receive the decrypted security monitoring data and store it in a security monitoring database for use in security monitoring business analysis and processing.

[0010] Furthermore, based on the above solution, multiple safety monitoring data acquisition devices are simultaneously connected to the same safety monitoring data sending device.

[0011] Furthermore, based on the above solution, a plurality of safety monitoring data sending devices are simultaneously connected to the same safety monitoring data receiving device.

[0012] Compared with the prior art, the present invention has at least the following advantages or beneficial effects:

[0013] Through the safety monitoring data acquisition device, safety monitoring data sending device and safety monitoring data receiving device connected in sequence, the reliable collection, encrypted transmission and secure storage of dam safety monitoring data are realized, which improves the efficiency of dam safety monitoring collection and the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0015] Figure 1 This is a hardware module structure diagram of an embodiment of a dam safety monitoring data encryption transmission system of the present application;

[0016] Figure 2 This is a data transmission flow diagram of an embodiment of a dam safety monitoring data encryption transmission system of the present application. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0018] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0019] Example:

[0020] In conjunction with the accompanying drawings, some embodiments of the present application are described in detail below. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0021] Please refer to Figure 1 The dam safety monitoring data encryption transmission system includes a safety monitoring data acquisition device, a safety monitoring data sending device and a safety monitoring data receiving device which are connected in sequence and realize data communication through wired or wireless means.

[0022] Among them, the security monitoring data acquisition device is used to access various types of security monitoring instruments on site and perform dynamic measurements on the monitoring instruments, so as to upload the collected security monitoring data to the security monitoring data sending device through wired communication. The security monitoring data sending device includes a VPDN client module and a 4G / 5G network router. The VPDN client module is used to encrypt the data uploaded by the security monitoring data acquisition device using the IPsec protocol, and use the L2TP protocol to establish a network communication tunnel with the security monitoring data receiving device, so as to send the encrypted security monitoring data to the security monitoring data receiving device through the 4G / 5G network router. The security monitoring data receiving device includes a VPDN server module and an operator fixed IP router. The operator fixed IP router accesses the operator public network through a wired broadband network to provide a fixed IP address. The VPDN server module is used to connect to the VPDN client module through a fixed IP address and the L2TP protocol in the operator public network to receive the encrypted security monitoring data, thereby decrypting the data using the IPsec protocol and storing the decrypted data in the security monitoring database.

[0023] It should be noted that IPSec (Internet Protocol Security) is a network layer security protocol, which is mainly used to protect the confidentiality, integrity and authentication of IP communications. It contains multiple protocols and algorithms, which can be applied to various network environments to ensure the security of data during transmission. VPDN (Virtual Private Dial-up Network) protects the security of data transmission by establishing tunnel connections and using encryption protocols. This encryption is usually achieved through the tunnel protocol itself (such as L2TP, PPTP, etc.) or the underlying transmission protocol (such as SSL / TLS). That is, the VPDN client module is an existing specific configuration that uses the IPSec protocol encryption function in the VPDN environment, in which VPDN focuses more on providing tunnel connections for remote access, while IPSec focuses more on secure communications at the network layer. In other words, by introducing the existing VPDN client module, the dam safety monitoring data can be effectively encrypted and transmitted.

[0024] Specifically, in the above embodiment, the safety monitoring data acquisition device, as the front-end equipment of the entire system, will be arranged in various key parts of the water conservancy and hydropower project, such as dams, plant buildings, slopes, etc., to be responsible for accessing various types of safety monitoring instruments on site. These instruments may include displacement meters, crack meters, osmometers, steel bar meters, strain gauges, etc., which are used to monitor various key operating performance indicators of water conservancy and hydropower projects in real time. The safety monitoring data acquisition device is connected to these monitoring instruments through an interface, obtains their measurement data, and performs dynamic measurement on the monitoring instruments. Dynamic measurement means that the acquisition device can track the changes of the monitoring instruments in real time, and adjust the acquisition frequency and accuracy as needed to ensure the accuracy and timeliness of the data. Next, the safety monitoring data sending device will send the safety monitoring data transmitted by the safety monitoring data acquisition device to the next link by wired or wireless means. That is, the collected safety monitoring data is encrypted and securely transmitted to the safety monitoring data receiving device by the safety monitoring data sending device. Finally, the safety monitoring data receiving device will receive the data from the sending device, decode and process it. The safety monitoring data receiving device will verify and validate the received safety monitoring data to ensure the accuracy and integrity of the safety monitoring data. Once the security monitoring data is verified, the security monitoring data receiving device will store it in the local database or upload it to the cloud server for subsequent data analysis and processing.

[0025] Specifically, in water conservancy and hydropower projects, the safety monitoring data sending device undertakes the important task of sending safety monitoring data from the collection device to the receiving device safely and efficiently. The sending device includes a VPDN client module and a 4G / 5G network router, which work together to ensure reliable data transmission.

[0026] First, for the VPDN client module, when the security monitoring data collection device uploads data, the VPDN client module will immediately intervene and encrypt the data using the IPsec protocol. The IPsec protocol can protect the confidentiality, integrity and authenticity of data during transmission by encrypting and authenticating the data. Even if the encrypted security monitoring data is intercepted during transmission, attackers cannot decrypt and obtain sensitive information, thereby ensuring the security of the security monitoring data.

[0027] Next, the VPDN client module uses the L2TP protocol to establish a network communication tunnel with the security monitoring data receiving device. L2TP (Layer 2 Tunneling Protocol) is a protocol used to establish a virtual private network on a public network. It can establish a secure tunnel connection between different networks to achieve reliable data transmission. By establishing an L2TP tunnel, a virtual private network can be formed between the security monitoring data sending device and the security monitoring data receiving device. The security monitoring data is transmitted in this network, just like in a secure channel, avoiding interference and attacks from external networks.

[0028] Once the communication tunnel is successfully established, the encrypted safety monitoring data can be sent to the safety monitoring data receiving device through the 4G / 5G network routing. As a high-speed and stable wireless communication network, the 4G / 5G network has the advantages of wide coverage, fast transmission speed and low latency, and is very suitable for remote data transmission in water conservancy and hydropower projects. Through the 4G / 5G network routing, data can be quickly and accurately transmitted to the safety monitoring data receiving device, providing timely and reliable data support for subsequent data analysis and processing.

[0029] Throughout the process, the collaborative work of the VPDN client module and 4G / 5G network routing ensures the security, integrity and real-time nature of the data. At the same time, the system can also be flexibly configured and adjusted according to actual conditions to adapt to different communication environments and needs.

[0030] In addition, in the water conservancy and hydropower project safety monitoring system, the VPDN server module in the safety monitoring data receiving device works together with the operator's fixed IP routing to ensure stable data reception and efficient processing.

[0031] First, the operator's fixed IP router accesses the operator's public network through the wired broadband network and provides a fixed IP address. This fixed IP address provides a unique identifier on the public network for the data security monitoring data receiving device, allowing the sending device to accurately find the receiving device and establish a connection with it.

[0032] Next, the VPDN server module connects to the VPDN client module in the operator's public network through a fixed IP address and the L2TP protocol. The L2TP protocol plays a key role here, ensuring that a secure and stable communication tunnel can be established between the sending device and the security monitoring data receiving device. Through this tunnel, the encrypted security monitoring data can be smoothly transmitted to the security monitoring data receiving device.

[0033] Once the data reaches the security monitoring data receiving device, the VPDN server module will use the IPsec protocol to decrypt the data. The decryption process of the IPsec protocol is the reverse operation of the encryption process, which can restore the original security monitoring data. Through decryption, the security monitoring data receiving device can obtain the real-time monitoring data uploaded by the sending device, providing the original material for subsequent data analysis and processing.

[0034] Finally, the decrypted data will be stored in the safety monitoring database. This database is the core component of the safety monitoring system, which is responsible for storing and managing all monitoring data. Through the database, project managers can easily query, analyze and use this data to provide decision support for the safe operation of the project.

[0035] In the whole process, the cooperation between the VPDN server module and the operator's fixed IP routing ensures the smooth reception, decryption and storage of data. At the same time, the system also adopts a variety of security measures and technical means, such as IPsec encryption, L2TP tunnel, etc., to ensure the security and reliability of data during transmission and storage.

[0036] Please refer to Figure 2 In one implementation of the present application, the data transmission process of the dam safety monitoring data encryption transmission system may include: Step 1: The safety monitoring data acquisition device automatically collects the safety monitoring data and transmits it to the safety monitoring data sending device through the local network. Step 2: The safety monitoring data sending device encrypts the safety monitoring data using the IPsec protocol and sends the encrypted data to the safety monitoring data receiving device. Step 3: The safety monitoring data receiving device receives the safety monitoring encrypted data, decrypts it using the IPsec protocol, obtains the decrypted safety monitoring data, and stores the decrypted data in the safety monitoring database, providing a data basis for the dam safety monitoring business application.

[0037] Please refer to Figure 1 In some embodiments of the present application, the safety monitoring data acquisition device includes a first power supply module, a first data transmission module, an acquisition control module and a safety monitoring sensor, wherein the first power supply module is used to power the data transmission module and the acquisition control module, and the acquisition control module is used to control the safety monitoring sensor to collect safety monitoring data, and send the safety monitoring data to the safety monitoring data sending device through the first data transmission module.

[0038] In the above embodiment, the first power supply module is the power source of the entire safety monitoring data acquisition device, and it is responsible for providing a stable and reliable power supply to the first data transmission module and the acquisition control module. The acquisition control module is responsible for controlling the data acquisition process of the safety monitoring sensor. According to the preset acquisition rules and requirements, the acquisition control module will send acquisition instructions to the sensor and receive the original monitoring data returned by the sensor. Through precise control and data processing, the acquisition control module ensures the accuracy and real-time nature of the data. The safety monitoring sensor is responsible for real-time perception of various safety monitoring parameters at the site of the water conservancy and hydropower project. The sensors are arranged according to the engineering needs and monitoring requirements, and can be different types such as displacement meters, crack meters, osmometers, steel bar meters, strain gauges, etc. They can accurately and quickly acquire field data and convert them into electrical signals or digital signals for processing and transmission by the acquisition control module.

[0039] Please refer to Figure 1 , in some embodiments of the present application, the security monitoring data sending device further includes a second power supply module, and the second power supply module is used to supply power to the VPDN client module and the 4G / 5G network routing;

[0040] The VPDN client module includes a data transmission unit and a data encryption unit. The data transmission unit is used to receive security monitoring data and send the encrypted security monitoring data to the security monitoring data receiving device. The data encryption unit is used to encrypt the security monitoring data received by the data transmission unit.

[0041] In the above embodiment, the data transmission unit is responsible for receiving the security monitoring data from the security monitoring data acquisition device. Once the data is received, it will immediately interact with the data encryption unit to ensure that the data is fully encrypted and protected before transmission. Then, the security of the security monitoring data is greatly improved by encrypting it through the data encryption module. Even if it is intercepted during network transmission, attackers cannot easily decrypt and obtain sensitive information therein. This encryption process ensures the confidentiality and integrity of the security monitoring data and provides a solid guarantee for the safe transmission of the security monitoring data. After the encryption is completed, the data transmission unit will send the encrypted security monitoring data to the security monitoring data receiving device via the 4G / 5G network route. The 4G / 5G network, with its high speed and stable characteristics, provides strong support for the remote transmission of data. Through this network, the encrypted security monitoring data can reach the receiving device quickly and accurately, providing a timely and reliable data source for subsequent data analysis and processing.

[0042] Please refer to Figure 1 , in some embodiments of the present application, the security monitoring data receiving device further includes a third power supply module, and the third power supply module is used to supply power to the VPDN server module and the operator's fixed IP routing;

[0043] The VPDN server module includes a second data transmission unit and a data decryption unit, wherein the second data transmission unit is used to receive the encrypted security monitoring data sent by the data transmission unit, and the decryption unit is used to decrypt the encrypted security monitoring data received by the second data transmission unit.

[0044] In the above embodiment, the second data transmission unit is responsible for receiving the encrypted security monitoring data from the security monitoring data sending device. Once the security monitoring data is received, it will immediately interact with the data decryption unit to decrypt the encrypted security monitoring data.

[0045] The data decryption unit uses a decryption algorithm and technology that matches the data encryption unit in the security monitoring data sending device to decrypt the received encrypted security monitoring data. Through the decryption process, the original security monitoring data can be restored, providing a reliable data source for subsequent data analysis and processing. This decryption process ensures the confidentiality and integrity of the data and prevents the data from being illegally accessed or tampered with during transmission.

[0046] The decrypted safety monitoring data will be stored in the safety monitoring database for subsequent data analysis and processing. As the data storage center of the entire safety monitoring system, the database can store a large amount of monitoring data in a long-term and stable manner, providing comprehensive data support for engineering management personnel.

[0047] Please refer to Figure 1 In some embodiments of the present application, the security monitoring data receiving device is further used to receive the decrypted security monitoring data and store it in a security monitoring database for use in security monitoring business analysis and processing. The decrypted data stored in the security monitoring database can provide strong support for the analysis and processing of security monitoring business. Engineering managers and data analysts can obtain real-time and accurate security monitoring data by accessing the database, and then evaluate, predict and warn the operating status of the project. In addition, these data can also be used to build and optimize professional security monitoring models to improve the accuracy and reliability of the monitoring system. It should be noted that the security monitoring data receiving device adopts strict security measures and technical means in the process of data reception, decryption and storage. This includes encrypted transmission of data, control of access rights, data backup and recovery, etc., which can ensure the security and reliability of data.

[0048] Please refer to Figure 2 In some embodiments of the present application, multiple safety monitoring data acquisition devices are simultaneously connected to the same safety monitoring data sending device, thereby improving the efficiency of data acquisition and reducing the complexity and cost of the system.

[0049] Specifically, each safety monitoring data acquisition device is responsible for collecting safety monitoring data for a specific area or specific parameters. They send the collected raw data to the shared safety monitoring data sending device through their respective data transmission channels. This parallel collection and transmission method ensures that the safety monitoring data of the entire project area can be collected in a timely and accurate manner.

[0050] As a data transfer station, the security monitoring data sending device has powerful data processing and transmission capabilities. It can simultaneously receive data sent by multiple collection devices and perform preliminary data integration and verification. Through the built-in VPDN client module, the sending device can encrypt the received data and send the encrypted security monitoring data to the remote security monitoring data receiving device through 4G / 5G network routing.

[0051] During data transmission, the security monitoring data sending device also has data buffering and flow control functions. When the network is congested or the receiving device is temporarily unable to receive data, the sending device can automatically store the data in the local cache and send it again after the network returns to normal or the receiving device is ready. This ensures the integrity and continuity of the data and avoids data loss due to network problems.

[0052] Please refer to Figure 2 In some embodiments of the present application, multiple safety monitoring data sending devices are simultaneously connected to the same safety monitoring data receiving device, and the efficiency and stability of the entire dam safety monitoring data encryption transmission system will be further improved. This setting allows data from different areas or different collection points to be centrally transmitted to a unified receiving device for processing and storage through their respective sending devices.

[0053] Specifically, each safety monitoring data sending device has independent data encryption and transmission functions to ensure the security and integrity of data during transmission. They send the encrypted safety monitoring data to the safety monitoring data receiving device through reliable communication protocols and network connections. The safety monitoring data receiving device can simultaneously receive data sent by multiple sending devices, and decrypt, verify and integrate the data. Through the built-in VPDN server module, the receiving device can establish a secure communication connection with the sending device to ensure the safe transmission of data. During the data reception process, the safety monitoring data receiving device also has intelligent data management and filtering functions. It can screen, classify and store the received data according to preset rules and conditions, so that engineering management personnel can more conveniently obtain the required data and conduct subsequent safety monitoring business analysis and processing.

[0054] It will be apparent to those skilled in the art that the present application is not limited to the details of the exemplary embodiments described above, and that the present application can be implemented in other specific forms without departing from the spirit or essential features of the present application. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the present application is defined by the appended claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims be included in the present application. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A dam safety monitoring data encryption transmission system, characterized in that: It includes a safety monitoring data acquisition device, a safety monitoring data sending device and a safety monitoring data receiving device which are connected in sequence and realize data communication by wired or wireless means; The safety monitoring data acquisition device is used to access various safety monitoring instruments on site and perform dynamic measurements on the monitoring instruments, thereby uploading the collected safety monitoring data to the safety monitoring data sending device; The security monitoring data sending device includes a VPDN client module and a 4G / 5G network router. The VPDN client module is used to encrypt the data uploaded by the security monitoring data collection device using the IPsec protocol, and to establish a network communication tunnel with the security monitoring data receiving device using the L2TP protocol, thereby sending the encrypted security monitoring data to the security monitoring data receiving device through the 4G / 5G network router; The security monitoring data receiving device includes a VPDN server module and an operator fixed IP routing. The operator fixed IP routing accesses the operator's public network through a wired broadband network to provide a fixed IP address. The VPDN server module is used to connect to the VPDN client module in the operator's public network through a fixed IP address and L2TP protocol to receive encrypted security monitoring data, thereby decrypting the data using the IPsec protocol and storing the decrypted data in a security monitoring database.

2. A dam safety monitoring data encryption transmission system according to claim 1, characterized in that: The safety monitoring data acquisition device includes a first power supply module, a first data transmission module, an acquisition control module and a safety monitoring sensor, wherein the first power supply module is used to power the data transmission module and the acquisition control module, and the acquisition control module is used to control the safety monitoring sensor to collect safety monitoring data and send the safety monitoring data to the safety monitoring data sending device through the first data transmission module.

3. A dam safety monitoring data encryption transmission system according to claim 2, characterized in that: The security monitoring data sending device also includes a second power supply module, which is used to supply power to the VPDN client module and the 4G / 5G network routing; The VPDN client module includes a data transmission unit and a data encryption unit. The data transmission unit is used to receive security monitoring data and send the encrypted security monitoring data to the security monitoring data receiving device. The data encryption unit is used to encrypt the security monitoring data received by the data transmission unit.

4. A dam safety monitoring data encryption transmission system according to claim 3, characterized in that: The security monitoring data receiving device also includes a third power supply module, and the third power supply module is used to supply power to the VPDN server module and the operator's fixed IP routing; The VPDN server module includes a second data transmission unit and a data decryption unit, wherein the second data transmission unit is used to receive the encrypted security monitoring data sent by the data transmission unit, and the decryption unit is used to decrypt the encrypted security monitoring data received by the second data transmission unit.

5. A dam safety monitoring data encryption transmission system according to claim 1, characterized in that: The security monitoring data receiving device is further used to receive the decrypted security monitoring data and store it in a security monitoring database for use in security monitoring business analysis and processing.

6. A dam safety monitoring data encryption transmission system according to claim 1, characterized in that: A plurality of safety monitoring data acquisition devices are simultaneously connected to the same safety monitoring data sending device.

7. A dam safety monitoring data encryption transmission system according to claim 1, characterized in that: A plurality of safety monitoring data sending devices are simultaneously connected to the same safety monitoring data receiving device.

Images