Anomaly detection apparatus and acquisition apparatus
By converting analog signals into digital signals and performing preprocessing through acquisition and processing devices, and combining this with analysis by a programmable logic controller, the problem of low accuracy and slow speed of traditional anomaly detection devices in industrial control systems is solved, achieving efficient and reliable anomaly detection.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- 新奥新智科技有限公司
- Filing Date
- 2024-11-11
- Publication Date
- 2026-05-29
AI Technical Summary
Traditional anomaly detection devices in industrial control systems suffer from low accuracy, slow detection speed, and high resource consumption, failing to meet real-time and reliability requirements.
By employing acquisition and processing devices, data is converted from analog signals to digital signals through sensors and analog-to-digital converters. The data is then preprocessed using a digital signal processor and analyzed in conjunction with a programmable logic controller (PLC) to achieve real-time data processing and complex decision-making logic, thereby improving detection accuracy and speed.
Reduce deployment costs, improve device portability, enhance the accuracy and speed of anomaly detection, optimize resource consumption, and improve reliability and ease of use.
Smart Images
Figure CN224304040U_ABST
Abstract
Description
Technical Field
[0001] This utility model relates to the field of detection, and in particular to an anomaly detection device and a data acquisition device. Background Technology
[0002] Industrial control systems (ICS) are the core of critical infrastructure, and their stability and security have a crucial impact on production and services. However, with the continuous development of the Industrial Internet, ICS face increasing security threats, making anomaly detection a key element in ensuring system security.
[0003] Traditional anomaly detection devices require numerous sensors to perform anomaly detection, necessitating extensive cable transmission for data collection. Furthermore, traditional anomaly detection methods suffer from low accuracy and slow detection speed, which is unacceptable in industrial environments with extremely high real-time and reliability requirements. Utility Model Content
[0004] This utility model provides an anomaly detection device and a data acquisition device to improve the accuracy and speed of anomaly detection.
[0005] In a first aspect, this utility model provides an anomaly detection device, including a data acquisition device and a processing device, wherein the data acquisition device and the processing device are connected.
[0006] The acquisition device includes at least one sensor and / or at least one receiver. The sensor is used to measure data of the device under test, and the receiver is used to receive data measured by the sensor on the device under test. The processing device is used to perform analog-to-digital conversion on the data and to preprocess the data.
[0007] By adopting the above technical solution, the data acquisition device can collect data from the device under test, and then the processing device performs digital-to-analog conversion and preprocessing on the data, reducing deployment costs and improving the portability of the device.
[0008] One possible design is that the processing device includes an analog-to-digital converter (ADC) and a digital signal processor (DSP), wherein the ADC is used to convert the data from an analog signal to a digital signal, and the DSP is used to preprocess the data.
[0009] One possible design also includes an analysis device connected to the processing device, the analysis device including a programmable logic controller, the analysis device being used to analyze the data to obtain analysis results, the analysis results being used to indicate whether the device under test has any abnormalities.
[0010] By adopting the above technical solution, the analysis device can process and analyze data in real time and execute complex decision-making logic, ensuring the stable operation of data analysis.
[0011] One possible design also includes an interactive device connected to the analysis apparatus, the interactive device being used to display the status of the device being tested.
[0012] One possible design also includes an alarm device connected to the analysis device, the alarm device including at least one alarm indication mode, the alarm device being used to issue an alarm in the at least one alarm indication mode.
[0013] One possible design also includes a storage device connected to the analysis device for storing the measured data.
[0014] One possible design also includes a power supply device connected to the analysis device, the power supply device being used to provide power to the analysis device.
[0015] One possible design also includes a communication device for communication between the acquisition device and the processing device.
[0016] One possible design includes an Ethernet switch and a router that support communication using at least one industrial communication protocol.
[0017] Secondly, this utility model provides a data acquisition device, including at least one sensor and / or at least one receiver, wherein the sensor is used to measure data of the device under test, and the receiver is used to receive data measured by the sensor located on the device under test. Attached Figure Description
[0018] To more clearly illustrate the technical solutions in the embodiments of this utility model, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this utility model. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0019] Figure 1 A schematic diagram of a system architecture provided for an embodiment of this utility model;
[0020] Figure 2 This is a schematic diagram of the structure of an anomaly detection device provided in an embodiment of the present utility model;
[0021] Figure 3 This is a schematic diagram of the structure of a data acquisition device provided in an embodiment of the present utility model;
[0022] Figure 4 This is a schematic diagram of another anomaly detection device provided in an embodiment of the present utility model. Detailed Implementation
[0023] To make the objectives, technical solutions, and advantages of this utility model clearer, the present utility model will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this utility model, and not all embodiments. Based on the embodiments of this utility model, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of this utility model.
[0024] Industrial control systems (ICS), as the core of modern automated industry, bear the heavy responsibility of monitoring and controlling industrial production processes to ensure production efficiency and stability. With the rapid development of Industry 4.0 and smart manufacturing, the application of ICS has expanded to multiple critical infrastructure fields such as municipal, transportation, and energy sectors, and its security and stability are crucial to the operation of the entire society.
[0025] As ICS applications become more widespread and complex, the security challenges they face are also becoming increasingly severe. The complexity of ICS systems necessitates the upgrading of traditional security measures to adapt to new security requirements. Simultaneously, the development of network technology has brought new threats, such as malicious attacks and data tampering, all of which pose serious threats to the secure operation of ICS.
[0026] With the continuous development of the Industrial Internet, ICS (Industrial Systems) faces increasing security threats, making anomaly detection a crucial link in ensuring system security. Traditional anomaly detection methods suffer from low accuracy, slow detection speed, and high resource consumption, which are unacceptable for industrial environments with extremely high real-time and reliability requirements.
[0027] Figure 1 This utility model provides an application scenario diagram, which includes an industrial main control system 110, a safety protection device 120, and an execution terminal 130.
[0028] The industrial main control system 110 is responsible for coordinating and managing the operation of all subsystems and execution terminals 130. Through advanced control algorithms and decision support systems, it achieves precise control and optimization of industrial processes and makes decisions when the safety protection equipment 120 detects anomalies.
[0029] Safety protection device 120 is used to acquire data collected by the execution terminal in real time, such as temperature, pressure, and flow rate. It performs in-depth data mining and analysis to identify whether any abnormalities have occurred in the industrial equipment corresponding to the execution terminal. When an abnormality occurs, it triggers an alarm and reports the abnormal information to the industrial main control system 110. It can also collect and analyze the log data of the industrial main control system 110, and through real-time monitoring and analysis, it can promptly detect and warn of potential abnormal behaviors or security threats.
[0030] The execution terminal 130 is used to collect data from industrial equipment and upload it to the safety protection device 120. It also receives decisions from the industrial main control system 110, such as starting or stopping machines, adjusting parameters, and making adjustments to the industrial equipment. The response speed and accuracy of the execution terminal 130 are crucial for the stable operation of the entire system. Typically, multiple execution terminals 130 are used, each responsible for monitoring and controlling different industrial equipment or processes, and they work closely with the industrial main control system 110 and the safety protection device 120 to ensure that any anomalies are detected and responded to quickly.
[0031] Figure 2 This is a schematic diagram of the structure of an anomaly detection device provided by the present invention. The anomaly detection device includes the following components: acquisition device 210, processing device 220, analysis device 230, interactive device 240, alarm device 250, storage device 260, power supply device 270, and communication device 280.
[0032] The following is a description of each component:
[0033] The data acquisition device 210 includes at least one sensor and / or at least one receiver. The sensor can be a high-precision, high-stability sensor, without specific limitations, and is used to measure data such as temperature, pressure, vibration, and flow rate of the device under test. The sensor has self-diagnostic capabilities to ensure the accuracy and reliability of data acquisition. The receiver can correspondingly receive data measured by the sensor located on the device under test. One possible design is described below. Figure 3 , Figure 3 This is a schematic diagram of a data acquisition device provided by this utility model. The data acquisition device 210 includes sensors. The sensors in the data acquisition device 210 are arranged in an array, such as a circular array or a rectangular array. A rectangular array is used as an example in the figure. It can be understood that the receivers in the data acquisition device 210 are also arranged in an array. The sensor array is a group of closely connected small sensors that can collect a large amount of data at the same time. The array can provide higher sensitivity and accuracy.
[0034] The processing unit 220 is connected to the acquisition unit 210 and includes an analog-to-digital converter (ADC) and a digital signal processor (DSP). The ADC converts data from analog signals to digital signals through sampling and quantization. The DSP performs signal filtering, amplification, and other processing using digital signal processing techniques to provide high-quality digital signals for subsequent analysis.
[0035] The analysis unit 230 is connected to the processing unit 220, which includes a programmable logic controller (PLC) and an industrial computer. The PLC realizes automated control of the equipment through logic control, while the industrial computer realizes efficient processing of complex tasks through a multi-core processor and a real-time operating system.
[0036] Interactive device 240 is connected to analysis device 230. Interactive device 240 displays the status of the device under test, provides multi-dimensional system status display and alarm information for abnormal events, and also provides a graphical user interface. It integrates touch and voice recognition technologies to achieve intuitive interaction with the operator. This achieves improved user experience through a graphical interface and touch technology, and voice control through voice recognition technology.
[0037] Alarm device 250 is connected to analysis device 230. The alarm device includes at least one alarm indication method, such as visual, auditory, and tactile feedback. The alarm device is capable of issuing an alarm using at least one alarm indication method, ensuring that it quickly attracts the attention of operators in emergency situations. By stimulating different senses, the response speed and effectiveness of the alarm are improved.
[0038] Storage device 160 is connected to analysis device 230. Storage device 260 may include solid-state drive (SSD) and employs data redundancy technology to ensure data integrity and traceability, supporting long-term storage and fast retrieval.
[0039] Power supply unit 270 is connected to analysis unit 230 to supply power to analysis unit 230 and other devices connected to analysis unit 230, such as data acquisition unit 210, processing unit 220, interactive device 240, alarm device 250, storage device 260, and communication device 280. Power supply unit 270 may include uninterruptible power supply (UPS) and power monitoring system to ensure stable system operation during power fluctuations or interruptions. Stable power supply is achieved by utilizing the energy storage function of the UPS and the power monitoring system.
[0040] Communication device 280 is used for communication between acquisition device 210 and processing device 220. In one possible design, communication device 280 is also used for communication between analysis device 230 and interactive device 240, and between analysis device 230 and alarm device 250. Communication device 280 may include Ethernet switches and routers to enable secure data exchange between devices and has self-healing capabilities to cope with network failures. It can utilize the high-speed data transmission capabilities of Ethernet and combine it with communication protocols to achieve effective communication between devices. The Ethernet switches and routers in communication device 280 support various industrial communication protocols, such as Modbus and PROFIBUS, to achieve seamless interoperability between devices.
[0041] The advantages of this invention are low deployment cost and improved device portability. Data from the device under test is measured by the acquisition device 210, then processed by the processing device 220 through analog-to-digital conversion and preprocessing. The analysis device 230 then analyzes the preprocessed data to determine if any abnormalities have occurred in the device under test. If an abnormality is detected, the alarm device 250 is triggered to issue an alarm. Furthermore, communication between devices is achieved using the communication device 280, thereby improving the security, efficiency, and accuracy of anomaly detection, optimizing resource consumption, enhancing usability and versatility, and increasing reliability.
[0042] In this invention, the data acquisition device 210 measures data from industrial equipment (such as temperature, pressure, vibration, flow rate, etc.) and transmits the data to the processing device 220 via the communication device 280. The processing device 220 converts the industrial equipment data from analog signals to digital signals, then filters and amplifies the converted data to obtain preprocessed data. The analysis device 230 obtains the preprocessed data from the processing device 220 and inputs it into an anomaly detection model for detection, obtaining the detection result. After obtaining the detection result, if an anomaly is detected, the analysis device 230 triggers an alarm device 250 via the communication device 280 and sends the detection result and data to the interactive device 240 via the communication device 280, allowing the interactive device 240 to display the detection result and data.
[0043] Figure 4 This is a schematic diagram of another anomaly detection device provided in an embodiment of the present invention. In the diagram, the acquisition device 410 belongs to the input layer; the communication device 420 belongs to the communication layer; the processing device 430, analysis device 440, storage device 450, and power supply device 460 belong to the processing layer; and the interactive device 470 and alarm device 480 belong to the interactive layer. Specifically, the function of each device is as follows... Figure 2 The description is the same as in the previous text, so I will not repeat it here.
[0044] Those skilled in the art will understand that various modifications and variations can be made to this application without departing from its spirit and scope. Therefore, if such modifications and variations fall within the scope of the claims and their equivalents, this application is also intended to include such modifications and variations.
Claims
1. An anomaly detection device, characterized in that, It includes a data acquisition device, a processing device, and a communication device, wherein the data acquisition device and the processing device are connected through the communication device; The acquisition device includes at least one miniaturized sensor array and / or at least one receiver. The miniaturized sensor array is integrated in a compact arrangement and is used to measure data from the device under test. The receiver is used to receive data measured by sensors located on the device under test. The communication device is used for communication between the acquisition device and the processing device, including an Ethernet switch and a router, and supports at least one industrial communication protocol. The processing device is used to perform analog-to-digital conversion on the data and to preprocess the data.
2. The anomaly detection device as described in claim 1, characterized in that, The processing device includes an analog-to-digital converter and a digital signal processor. The analog-to-digital converter is used to convert the data from analog signals to digital signals, and the digital signal processor is used to preprocess the data.
3. The anomaly detection device as described in claim 1, characterized in that, It also includes an analysis device connected to the processing device, the analysis device including a programmable logic controller, the analysis device being used to analyze the data and obtain analysis results, the analysis results being used to indicate whether the device under test has any abnormalities.
4. The anomaly detection device as described in claim 3, characterized in that, It also includes an interactive device connected to the analysis device, the interactive device being used to display the status of the device being tested.
5. The anomaly detection device as described in claim 3, characterized in that, It also includes an alarm device connected to the analysis device, the alarm device including at least one alarm indication mode, the alarm device being used to issue an alarm in the at least one alarm indication mode.
6. The anomaly detection device as described in claim 3, characterized in that, It also includes a storage device connected to the analysis device, the storage device being used to store the measured data.
7. The anomaly detection device as described in claim 3, characterized in that, It also includes a power supply device connected to the analysis device, the power supply device being used to provide power to the analysis device.
8. A data acquisition device, characterized in that, It includes at least one miniaturized sensor array and / or at least one receiver, the miniaturized sensor array being integrated in a compact arrangement for measuring data of the device under test, and the receiver being used to correspondingly receive data measured by sensors located on the device under test.