Embedded anomaly detection device

Abstract

The utility model discloses an embedded anomaly detection device, which comprises a packaging shell, a first circuit board, a scoring assembly, a power supply input circuit, a second circuit board, an environment monitor, a linkage control assembly and a scoring assembly arranged on the outer wall of the packaging shell, wherein the first circuit board, the scoring assembly, the power supply input circuit, the second circuit board, the environment monitor and the linkage control assembly are fixedly arranged in an inner cavity of the packaging shell; the first circuit board is connected with the scoring assembly, the power input circuit, the second circuit board and the environment monitor. The power input circuit is connected with the second circuit board and the linkage control assembly. Monitoring and control functions which are originally realized by depending on a plurality of independent devices are intensively packaged into a single device, so that the number of system components, the number of wiring and installation links are remarkably reduced, and various interfaces and components required by safety operation and maintenance of the server can be effectively integrated; the method is suitable for local risk prevention and control, environmental state perception and linkage response execution before high-risk commands of the hydraulic power plant are executed, and provides structure optimization and safety guarantee support for key information infrastructures in the energy industry.

Description

Technical Field

[0001] This utility model relates to the field of security operation and maintenance technology, and in particular to an embedded anomaly detection device. Background Technology

[0002] With the rapid development of digital and intelligent energy management systems in my country's water conservancy industry, hydropower plants are facing higher demands for network security and stable system operation in key business processes such as power generation dispatch, equipment control, and remote monitoring. In particular, when maintenance personnel execute high-risk commands on core hosts such as dispatch servers and production control terminals, the lack of real-time status awareness and reliable local protection mechanisms can easily lead to operational risks due to misoperation, interface anomalies, or system failures, thereby affecting power grid dispatch, downstream hydropower coordination, and even causing production interruptions.

[0003] Currently, most mainstream devices used in hydropower plant network security operation and maintenance scenarios are deployed in the form of multiple functional modules. Typically, this includes a general-purpose server as an analysis platform, along with several external sensor nodes, network switching equipment, power controllers, display terminals, etc., forming the complete system. While this architecture offers some functional coverage, inconsistencies in communication protocols and interface standards between components necessitate the configuration of additional adapter modules or cables during actual installation. Numerous dispersed devices require interconnection via lengthy cables, resulting in cumbersome cabling, complex interfaces, and significant space requirements, greatly increasing the difficulty of on-site deployment and subsequent maintenance. Furthermore, the low integration of existing systems hinders efficient collaboration between modules. Functional components are often distributed across different cabinets, racks, or even rooms, lacking unified encapsulation and internal high-speed connection mechanisms. This leads to high response delays and lengthy anomaly feedback paths, hindering rapid local response and precise control in emergency situations.

[0004] Furthermore, existing systems generally lack the ability to dynamically perceive the operating environment. For example, when equipment experiences physical operational risks such as excessively high temperature, excessively high humidity, or abnormal power supply voltage, most systems cannot provide early warning and emergency response in a timely manner. Most systems rely on remote policy distribution mechanisms to handle on-site anomalies, which increases system linkage paths and weakens the equipment's ability to independently handle emergencies, resulting in poor reliability. Particularly noteworthy is the general inadequacy of traditional systems in terms of safety linkage capabilities, lacking integrated hardware-level physical isolation or power-off mechanisms. When equipment encounters serious anomalies or attacks, alarms are often triggered only logically, failing to immediately interrupt power supply or trigger external protective devices such as audible and visual alarms or relays. This type of response is delayed and cannot meet the hydropower industry's requirements for "rapid judgment and rapid isolation" in safety operation and maintenance.

[0005] Therefore, providing an embedded anomaly detection device with high structural integration, simple wiring, and operational environment monitoring capabilities and physical response paths is a technical problem that urgently needs to be solved by those skilled in the art. Utility Model Content

[0006] To address the aforementioned technical problems, the purpose of this utility model is to provide an embedded anomaly detection device. This embedded anomaly detection device encapsulates monitoring and control functions that originally relied on multiple independent devices into a single device, significantly reducing the number of system components, wiring, and installation steps. It can effectively integrate various interfaces and components required for server security operation and maintenance, and is suitable for local risk prevention and control, environmental status perception, and linkage response execution before high-risk command execution in hydropower plants, providing structural optimization and security support for critical information infrastructure in the energy industry.

[0007] The embedded anomaly detection device provided in this application adopts the following technical solution:

[0008] An embedded anomaly detection device includes: a package housing, a first circuit board, a scoring component, a power input circuit, a second circuit board, an environmental monitor, and a linkage control component;

[0009] The first circuit board, the power input circuit, the second circuit board, the environmental monitor, and the linkage control component are all fixedly installed in the inner cavity of the encapsulation housing;

[0010] The scoring component is located on the right side of the packaging housing;

[0011] The first circuit board is connected to the scoring component, the power input circuit, the second circuit board, and the environmental monitor, respectively.

[0012] The power input circuit is connected to the second circuit board and the linkage control component, respectively.

[0013] Preferably, the first circuit board is a central processing circuit board;

[0014] The central processing circuit board is fixed in the middle of the inner cavity of the packaging housing;

[0015] A scoring slot is provided on the outer wall of the package housing on one side of the central processing circuit board for installing the scoring component, and on the other side of the central processing circuit board it is connected to the second circuit board via a ribbon cable interface.

[0016] Preferably, the central processing circuit board specifically includes: an ARM architecture embedded processing chip, a neural network processing chip, and a DDR3 cache chip.

[0017] Preferably, the scoring component specifically includes: a scoring processing chip, a 256Mb cache chip, GPIO control pins, and a heat sink;

[0018] The heat sink is located on top of the scoring processing chip.

[0019] Preferably, the second circuit board is a data access circuit board;

[0020] The data access circuit board is located at the bottom of the inner cavity of the package housing;

[0021] The data access circuit board is connected to the central processing circuit board via a high-density ribbon cable.

[0022] Preferably, the data access circuit board specifically includes: an RJ45 Ethernet interface, an i211 gigabit network card chip, and an FPGA chip.

[0023] Preferably, the environmental monitor specifically includes: a temperature sensor, a humidity sensor, and a voltage detection chip;

[0024] The temperature sensor is fixed above the area of ​​the ARM architecture embedded processing chip.

[0025] The humidity sensor is installed at the bottom of the inner cavity of the encapsulation housing;

[0026] The voltage detection chip is connected in parallel on the power input path.

[0027] Preferably, the linkage control component specifically includes: a relay, a diode, a varistor, and an audible and visual alarm output interface;

[0028] The relay is connected to the diode and the varistor respectively;

[0029] The audible and visual alarm output interface is connected to the diode and the varistor, respectively.

[0030] Preferably, it further includes: an interface connection panel;

[0031] The interface connection panel is fixed to the front of the encapsulation housing.

[0032] Preferably, the interface connection panel specifically includes: a USB interface, an RJ45 interface, an HDMI interface, and a power switch jack;

[0033] The USB interface, the RJ45 interface, the HDMI interface, and the power switch jack are all soldered onto the interface PCB board, which is connected to the central processing circuit board via pin headers.

[0034] This utility model provides an embedded anomaly detection device, comprising: a housing, a first circuit board, a scoring component, a power input circuit, a second circuit board, an environmental monitor, and a linkage control component. The first circuit board, the power input circuit, the second circuit board, the environmental monitor, and the linkage control component are all fixedly installed within the inner cavity of the housing. The scoring component is located on the right side of the housing. The first circuit board is connected to the scoring component, the power input circuit, the second circuit board, and the environmental monitor. The power input circuit is connected to the second circuit board and the linkage control component. This utility model significantly reduces the number of system components, wiring, and installation steps by centralizing monitoring and control functions that originally relied on multiple independent devices into a single device. It effectively integrates various interfaces and components required for server security operation and maintenance, and is suitable for local risk prevention and control, environmental status perception, and linkage response execution before high-risk command execution in hydropower plants, providing structural optimization and security support for critical information infrastructure in the energy industry. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments of this utility model or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this utility model. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This is a schematic diagram of the structure of an embedded anomaly detection device according to an embodiment of the present invention;

[0037] Figure 2 This is a schematic diagram of the scoring component in an embodiment of the present invention;

[0038] Figure 3 This is a schematic diagram of the data access circuit board in an embodiment of the present invention;

[0039] Figure 4 This is a schematic diagram of the structure of the environmental monitor in an embodiment of this utility model;

[0040] Figure 5 This is a schematic diagram of the linkage control component in an embodiment of the present utility model;

[0041] Figure 6 This is a schematic diagram of the interface connection panel in an embodiment of the present utility model. Detailed Implementation

[0042] To enable those skilled in the art to better understand the technical solutions of this utility model, the technical solutions in the embodiments of this utility model will be clearly and completely described below. Obviously, the described embodiments are only a part of the embodiments of this utility model, and not all of them. Based on the embodiments of this utility model, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of this utility model.

[0043] like Figure 1 As shown, this utility model embodiment provides an embedded anomaly detection device, including: a package housing 1, a first circuit board 2, a scoring component 3, a power input circuit 4, a second circuit board 5, an environmental monitor 6, and a linkage control component 7;

[0044] The first circuit board 2, the power input circuit 4, the second circuit board 5, the environmental monitor 6, and the linkage control component 7 are all fixedly installed in the inner cavity of the encapsulation housing 1;

[0045] The scoring component 3 is located on the right side of the encapsulation housing 1;

[0046] The first circuit board 2 is connected to the scoring component 3, the power input circuit 4, the second circuit board 5, and the environmental monitor 6 respectively;

[0047] The power input circuit 4 is connected to the second circuit board 5 and the linkage control component 7, respectively.

[0048] To address the shortcomings of existing technologies in practical applications, an embedded anomaly detection device was designed. This device integrates core components such as a central processing circuit board, scoring components, power input circuit, data access circuit board, environmental monitor, and linkage control components into a multi-layer printed circuit board (PCB) within a packaged housing. Electrical communication between modules is achieved through plug-in card connections. The packaged housing uses a rectangular aluminum alloy structure for support, fixation, and heat dissipation. Heat dissipation holes and airflow channels at the top ensure airflow circulation and chip heat dissipation within the device. The power input circuit, located on the front left side of the housing, connects to an external power supply via a power interface to power the central processing circuit board and data access circuit board. Each component is located in a relatively independent functional area, with clear signal paths, avoiding the problems of cross-wiring and excessive external connections inherent in traditional split-type devices. This significantly improves the overall device's structural compactness and field deployment efficiency. The circuit structure of the embedded anomaly detection device in this embodiment adopts the circuit settings used in conventional anomaly detection equipment.

[0049] Preferably, the first circuit board 2 is a central processing circuit board;

[0050] The central processing circuit board is fixed in the middle of the inner cavity of the packaging housing 1;

[0051] A scoring card slot is provided on the outer wall of the packaging housing 1 on one side of the central processing circuit board for installing the scoring component 3. It is connected to the second circuit board 5 on the other side of the central processing circuit board via a ribbon cable interface.

[0052] In practical applications, the main mounting layer fixed in the middle of the housing is a multi-layer immersion gold PCB structure, serving as the core computing and scheduling unit of the system. An ARM architecture embedded processing chip, a neural network processing chip, and a DDR3 cache chip are soldered onto the board. These are used to run maintenance and detection logic, process multi-channel data, and schedule scoring components and linkage control components. A scoring card slot is located on the outer wall of the housing on the right side of the central processing circuit board for installing scoring components. The central processing circuit board is connected to a second circuit board via a ribbon cable interface on the other side.

[0053] Preferably, such as Figure 2 As shown, the scoring component 3 specifically includes: a scoring processing chip 31, a 256Mb cache chip 32, a GPIO control pin 33, and a heat sink 34;

[0054] The heat sink 34 is disposed on top of the scoring processing chip 31.

[0055] In practical applications, the scoring component is configured as a hot-swappable card structure. A scoring processing chip, a 256Mb cache chip, a set of GPIO control pins, and an aluminum heatsink are integrated onto a single PCB board, serving as the electrical safety scoring and risk assessment unit. It is secured to the housing's latching position using three M3 studs and plugged into a slot on the right side of the housing. Internal wiring connects it to the central processing circuit board. Supporting hot-swapping and modular replacement, the scoring function of this component is implemented by the scoring processing chip, specifically the TI TMS320F28379D (Texas Instruments C2000 DSP series) dual-core C28x DSP with a 200 MHz clock speed. This chip is particularly suitable for power electronics and safety control applications, featuring a built-in high-precision ADC that can be tightly integrated with voltage / current monitoring circuits, and is widely used in power systems and industrial safety control. In this embodiment, a pluggable structure is used to fix it in the slot, and signal and power interfaces are connected via an FPC high-speed connector. This structure allows for independent replacement of the scoring sub-board without affecting the operation of the host computer, enabling model upgrades or hardware maintenance. It has good modular expansion capabilities and is easy to adapt to different levels of operation and maintenance scenarios. The aluminum heat sink is placed on top of the scoring processing chip to facilitate heat dissipation.

[0056] Preferably, the second circuit board 5 is a data access circuit board;

[0057] The data access circuit board is located at the bottom of the inner cavity of the package housing 1;

[0058] The data access circuit board is connected to the central processing circuit board via a high-density ribbon cable.

[0059] In practical applications, the second circuit board is specifically a data access circuit board, which is located at the bottom of the inner cavity of the package housing. It is used to receive log and network traffic data, perform feature conversion, and then transmit the data to the central processing circuit board through high-density cabling.

[0060] Preferably, such as Figure 3 As shown, the data access circuit board specifically includes: an RJ45 Ethernet interface 51, an i211 gigabit network card chip 52, and an FPGA chip 53.

[0061] In practical applications, the data access circuit board is integrated into two RJ45 Ethernet interfaces to correspond to the access logs and network traffic sources. Two i211 Ethernet chips are configured behind the two RJ45 Ethernet interfaces, and an FPGA processing chip is configured next to one of the RJ45 Ethernet interfaces. The board is connected to the central processing board through a high-density ribbon cable 54 to realize the introduction and initial fusion of multi-channel high-speed data.

[0062] Preferably, such as Figure 4 As shown, the environmental monitor 6 specifically includes: a temperature sensor 61, a humidity sensor 62, and a voltage detection chip 63;

[0063] The temperature sensor 61 is fixed above the area of ​​the ARM architecture embedded processing chip 21;

[0064] The humidity sensor 62 is installed at the bottom of the inner cavity of the encapsulation housing 1;

[0065] The voltage detection chip 63 is connected in parallel on the power input path.

[0066] In practical applications, this environmental monitor specifically includes a temperature sensor, a humidity sensor, and a voltage detection chip. The temperature sensor is fixed above the ARM architecture embedded processing chip area, the humidity sensor is installed at the bottom of the inner cavity of the package housing, and the voltage detection chip is connected in parallel to the power input path to achieve local acquisition of key operating parameters. The temperature and humidity sensors are connected to the central processing circuit board via an I²C bus to achieve periodic acquisition and reporting of environmental conditions. The voltage detection chip is connected in parallel to the power input path, with its input terminal bridging the positive power supply terminal and ground, used to sample and monitor the input voltage, and then fed back to the central processing circuit board via the I²C interface.

[0067] When the collected data exceeds the set threshold, the central processing circuit board triggers the linkage control component control loop to perform a power-off operation, and at the same time drives the audible and visual alarm interface in parallel, forming a physical-level linkage protection closed loop, which significantly improves the self-protection capability of the field equipment; specifically, in this embodiment, the power input path refers to the power supply line part of the central processing circuit board (main control board) after the external power supply enters the device through the power socket.

[0068] Preferably, such as Figure 5 As shown, the linkage control component 7 specifically includes: a relay 71, a diode 72, a varistor 73, and an audible and visual alarm output interface 74;

[0069] The relay 71 is connected to the diode 72 and the varistor 73 respectively;

[0070] The audible and visual alarm output interface 74 is connected to the diode 72 and the varistor 73 respectively.

[0071] In practical applications, the linkage control component integrates relays, diodes, varistors, and an audible and visual alarm output interface, connected in series in the power input path to form a unified whole with the power input circuit. This component receives the output signal from the scoring component. When the scoring signal exceeds a set threshold, the relay immediately cuts off the power supply and drives the audible and visual alarm interface through the GPIO port, achieving a physical closed-loop protection between power failure and alarm. The GPIO pins on the central processing circuit board can output level signals (typically high level 3.3V / 5V). When an abnormality is detected, the GPIO switches from low to high, and this high-level signal is led out through the audible and visual alarm port (pin or socket) on the interface connection panel. External maintenance personnel can connect buzzers and warning light modules (these modules are self-powered or powered by the equipment) to this port. When the GPIO port outputs a high level, it acts like a switch control; the buzzer module or LED alarm light connected to the port detects the signal and will activate sound and flash, thus triggering the alarm.

[0072] Preferably, it further includes: an interface connection panel 8;

[0073] The interface connection panel 8 is fixed to the front of the encapsulation housing 1.

[0074] In practical applications, the embedded anomaly detection device is also equipped with an interface connection panel. The panel is fixed to the front of the package housing and integrates common interfaces. All interfaces are arranged on a unified interface board and connected to the internal main control board through pin headers to avoid cable crossing and interference. It supports flexible connection with various external devices such as servers, operation and maintenance management platforms, and security alarm terminals.

[0075] Preferably, such as Figure 6 As shown, the interface connection panel 8 specifically includes: a USB interface 81, an RJ45 interface 82, and an HDMI interface 83;

[0076] The USB interface 81, the RJ45 interface 82, and the HDMI interface 83 are all soldered onto the interface PCB board, which is connected to the central processing circuit board via pin headers.

[0077] In practical applications, the interface connection panel integrates multiple USB ports, one RJ45 port, and one HDMI port. All of these ports are soldered onto the interface PCB board, which is connected to the central processing circuit board via pin headers. The physical locations are uniformly arranged, allowing access to external maintenance systems and monitoring platforms, as well as data export, maintenance upgrades, and risk information display.

[0078] It should be noted that when a component is referred to as being "fixed to" or "set on" another component, it can be directly on or indirectly set on the other component; when a component is referred to as being "connected to" another component, it can be directly connected to or indirectly connected to the other component.

[0079] It should be understood that the terms "length", "width", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", and "outer" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on this utility model.

[0080] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this utility model, "a plurality of" or "several" means two or more, unless otherwise explicitly specified.

[0081] It should be noted that the structures, proportions, sizes, etc., shown in the accompanying drawings of this specification are only for the purpose of assisting those skilled in the art in understanding and reading the content disclosed in the specification, and are not intended to limit the conditions under which this utility model can be implemented. Therefore, they have no substantial technical significance. Any modifications to the structure, changes in the proportions, or adjustments to the size, without affecting the effects and purposes that this utility model can produce, should still fall within the scope of the technical content disclosed in this utility model.

[0082] The above description of the disclosed embodiments enables those skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An embedded anomaly detection device, characterized in that, include: The package includes a housing, a first circuit board, a scoring component, a power input circuit, a second circuit board, an environmental monitor, and a linkage control component. The first circuit board, the power input circuit, the second circuit board, the environmental monitor, and the linkage control component are all fixedly installed in the inner cavity of the encapsulation housing; The scoring component is located on the right side of the packaging housing; The first circuit board is connected to the scoring component, the power input circuit, the second circuit board, and the environmental monitor, respectively. The power input circuit is connected to the second circuit board and the linkage control component, respectively.

2. The embedded anomaly detection device according to claim 1, characterized in that, The first circuit board is a central processing circuit board; The central processing circuit board is fixed in the middle of the inner cavity of the packaging housing; A scoring slot is provided on the outer wall of the package housing on one side of the central processing circuit board for installing the scoring component, and on the other side of the central processing circuit board it is connected to the second circuit board via a ribbon cable interface.

3. The embedded anomaly detection device according to claim 2, characterized in that, The central processing circuit board specifically includes: an ARM architecture embedded processing chip, a neural network processing chip, and a DDR3 cache chip.

4. The embedded anomaly detection device according to claim 1, characterized in that, The scoring component specifically includes: a scoring processing chip, a 256Mb cache chip, GPIO control pins, and a heat sink; The heat sink is located on top of the scoring processing chip.

5. The embedded anomaly detection device according to claim 2, characterized in that, The second circuit board is a data access circuit board; The data access circuit board is located at the bottom of the inner cavity of the package housing; The data access circuit board is connected to the central processing circuit board via a high-density ribbon cable.

6. The embedded anomaly detection device according to claim 5, characterized in that, The data access circuit board specifically includes: an RJ45 Ethernet interface, an i211 gigabit network card chip, and an FPGA chip.

7. The embedded anomaly detection device according to claim 3, characterized in that, The environmental monitor specifically includes: a temperature sensor, a humidity sensor, and a voltage detection chip; The temperature sensor is fixed above the area of ​​the ARM architecture embedded processing chip. The humidity sensor is installed at the bottom of the inner cavity of the encapsulation housing; The voltage detection chip is connected in parallel on the power input path.

8. The embedded anomaly detection device according to claim 1, characterized in that, The linkage control components specifically include: relays, diodes, varistors, and audible and visual alarm output interfaces; The relay is connected to the diode and the varistor respectively; The audible and visual alarm output interface is connected to the diode and the varistor, respectively.

9. The embedded anomaly detection device according to claim 1, characterized in that, Also includes: Interface connection panel; The interface connection panel is fixed to the front of the encapsulation housing.

10. The embedded anomaly detection device according to claim 9, characterized in that, The interface connection panel specifically includes: a USB interface, an RJ45 interface, an HDMI interface, and a power switch jack; The USB interface, the RJ45 interface, the HDMI interface, and the power switch jack are all soldered onto the interface PCB board, which is connected to the central processing circuit board via pin headers.

Images