Hydrological and water resource gateway edge module integrating national secret encryption and multi-channel scheduling

Abstract

The utility model belongs to hydrology water resources gateway technical field especially relates to integrated hydrology water resources gateway edge module of national secret encryption and multi -channel scheduling, including main control module, power management module and heat management module, be provided with national secret hardware encryption unit, multi -channel self -adaptation scheduling unit and data adaptation interface unit in the main control module, national secret hardware encryption unit includes SM2SM4 password chip, PUF module, standard interface module, multi -channel self -adaptation scheduling unit includes 4 5G communication module, big dipper short message communication module, GPRS communication module and channel quality monitoring submodule, the utility model realizes hydrology data collection to encrypt to transmission whole link hardware level safety protection, accords with national secret specification, and the risk of data disclosure and tampering is prevented.

Description

Technical Field

[0001] This utility model belongs to the field of hydrological and water resources gateway technology, and in particular relates to a hydrological and water resources gateway edge module that integrates national cryptographic encryption and multi-channel scheduling. Background Technology

[0002] Hydrological monitoring equipment is a general term for instruments and systems used to collect, measure, record, and transmit data on the water cycle in nature. It is used to monitor water bodies such as rivers, lakes, groundwater, and rainfall. Modern hydrological monitoring systems generally include sensors for detection, data acquisition and transmission units, and power supply and protection systems.

[0003] In response to the high data transmission security risks in hydrological monitoring in cold regions, the lack of national cryptographic hardware encryption support, poor communication channel stability in complex environments, and the susceptibility of single-channel interruption, existing gateway edge devices mostly adopt a single encryption method or independent channel design, which makes it difficult to balance data security and transmission reliability and cannot meet the monitoring needs of remote watersheds in cold regions. Summary of the Invention

[0004] This utility model addresses the technical problems mentioned in the background art, such as high data transmission security risks in cold region hydrological monitoring, lack of national cryptographic hardware encryption support, poor communication channel stability in complex environments, and easy interruption of single channels. Existing gateway edge devices mostly adopt a single encryption method or independent channel design, which makes it difficult to balance data security and transmission reliability and cannot meet the monitoring needs of remote watersheds in cold regions. The proposed hydrological and water resources gateway edge module integrates national cryptographic encryption and multi-channel scheduling.

[0005] To achieve the above objectives, the present invention adopts the following technical solution: A hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling includes a main control module, a power management module, and a thermal management module. The main control module is equipped with a national cryptographic hardware encryption unit, a multi-channel adaptive scheduling unit, and a data adaptation interface unit. The national cryptographic hardware encryption unit includes an SM2 / SM4 cryptographic chip, a PUF module, and a standard interface module; The multi-channel adaptive scheduling unit includes a 4 / 5G communication module, a BeiDou short message communication module, a GPRS communication module, and a channel quality monitoring sub-module. The data adaptation interface unit includes an interface chip and a data preprocessing module.

[0006] Preferably, in the national cryptographic hardware encryption unit, data enters from the standard interface module, the SM2 / SM4 cryptographic chip performs secure processing using a key protected by the PUF module, and then sends it out through the standard interface module.

[0007] Preferably, the multi-channel adaptive scheduling unit is further provided with a circuit switch module, and the channel quality monitoring submodule controls the 4 / 5G communication module, the Beidou short message communication module and the GPRS communication module through the circuit switch module.

[0008] Preferably, the interface chip is used to connect to the hydrological sensor, receive the raw electrical signal data stream from the hydrological sensor, and convert it into a digital byte stream. The interface chip is also used to transmit the digital byte stream to the data preprocessing module, which is used to upload the processed data to the main control module.

[0009] Preferably, the power management module provides a stable power supply for all modules, supports wide voltage input and power monitoring, and includes a power input interface, a DC-DC converter, a backup battery and a power monitoring circuit.

[0010] Preferably, the thermal management module is used to ensure that the module works stably in an environment of -40℃ to 60℃. The thermal management module includes a temperature sensor, a heating circuit, a heat dissipation module and a thermally conductive silicone pad, wherein all modules are encased in a low-temperature resistant shell.

[0011] Compared with the prior art, the beneficial effects of this utility model are: 1. Achieve end-to-end hardware-level security protection for hydrological data from acquisition to encryption to transmission, comply with national cryptographic standards, and eliminate the risk of data leakage and tampering.

[0012] 2. The automatic switching response time for multiple channels is less than or equal to 100ms, solving the problem of single-channel interruption in cold and remote areas, and improving the data transmission success rate to over 99.5%.

[0013] 3. Modular hardware design reduces maintenance costs, adapts to different types of hydrological sensors, and improves equipment access compatibility by 60%. Attached Figure Description

[0014] Figure 1 This is a schematic diagram of the hydrological and water resources gateway edge module that integrates national cryptographic encryption and multi-channel scheduling proposed in this utility model. Detailed Implementation

[0015] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present utility model. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments.

[0016] In the description of this utility model, it should be understood that the terms "upper", "lower", "front", "rear", "left", "right", "top", "bottom", "inner", "outer", etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on this utility model.

[0017] Reference Figure 1 The hydrological and water resources gateway edge module integrates national cryptographic encryption and multi-channel scheduling, including a main control module, a power management module and a thermal management module. The main control module is equipped with a national cryptographic hardware encryption unit, a multi-channel adaptive scheduling unit and a data adaptation interface unit. The national cryptographic hardware encryption unit includes an SM2 / SM4 cryptographic chip, a PUF module, and a standard interface module; the multi-channel adaptive scheduling unit includes a 4 / 5G communication module, a Beidou short message communication module, a GPRS communication module, and a channel quality monitoring sub-module; the data adaptation interface unit includes an interface chip and a data preprocessing module.

[0018] In the national cryptographic hardware encryption unit, data enters through the standard interface module, where the SM2 / SM4 cryptographic chip performs secure processing using a key protected by the PUF module before being sent out through the standard interface module. The national cryptographic hardware encryption unit implements a complete chain from hardware root trust to secure computation and secure communication, ensuring high hardware-level security for the entire device. The PUF module is the foundation of the device and its unique identifier. The SM2 / SM4 cryptographic chip performs specific cryptographic operations, protecting the confidentiality and integrity of the data. Through the built-in high-performance national cryptographic SM2 / SM4 dedicated cryptographic chip, the PUF module integrates a physically unclonable function secure storage area for hardware-level protection of keys and sensitive data. The chip connects to the module motherboard via a standardized slot, facilitating maintenance and replacement.

[0019] The multi-channel adaptive scheduling unit also includes a circuit switch module. The channel quality monitoring submodule controls the 4 / 5G communication module, BeiDou short message communication module, and GPRS communication module through the circuit switch module. The hardware circuit switch module enables rapid switching between multiple channels. The channel quality monitoring submodule can collect signal strength, transmission latency, and packet loss rate in real time. The 4 / 5G communication module features high speed, large bandwidth, and low latency, making it the preferred and primary communication method. In areas with good mobile network coverage, it undertakes the majority of data transmission tasks. The BeiDou short message module covers the entire country and is unaffected by terrestrial networks. When terrestrial networks such as 4 / 5G and GPRS are completely interrupted, it can be used to send critical short data, such as alarm information and key water level data, making it suitable for remote mountainous areas, oceans, disaster areas, and cold regions.

[0020] The interface chip connects to the hydrological sensor, receives the raw electrical signal data stream from the sensor, and converts it into a digital byte stream. The interface chip also transmits the digital byte stream to the data preprocessing module, which then uploads the processed data to the main control module. The interface chip handles hardware-level connectivity and signal conversion, providing diverse standardized physical interfaces. It performs preliminary processing and standardization of the received raw data, ensuring that the data sent to the main control module is readable and standardized. The data preprocessing module handles software / logic-level parsing and organization, parsing the data according to the sensor's agreed-upon communication protocol, performing validity checks and filtering (e.g., determining if the data is within a reasonable range), and finally packaging the parsed and cleaned data into a unified and simple internal data format defined by the main control module.

[0021] The power management module provides stable power to all modules, supports wide-range input voltage, and monitors power consumption. It includes a power input interface, a DC-DC converter, a backup battery, and power monitoring circuitry. The power input interface supports a wide DC input voltage range of 9-36V, compatible with solar or battery power, and can adapt to various complex environments. The DC-DC converter offers multiple outputs and uses a high-efficiency step-down converter to meet the voltage requirements of each module. The backup battery maintains critical operations during power outages, and the power monitoring circuitry monitors voltage, current, and temperature in real time, providing overcurrent and overvoltage protection.

[0022] The thermal management module ensures stable operation of the module in environments ranging from -40℃ to 60℃. It includes a temperature sensor, heating circuit, heat dissipation module, and thermally conductive silicone pads. The entire module is encased in a low-temperature resistant housing. The thermal management module prevents low-temperature startup and high-temperature performance issues in various devices. The thermally conductive silicone pads cover heat-generating components such as the main control unit, encryption chip, and communication module, transferring heat to the housing. The temperature sensor detects the device temperature. The heating circuit automatically starts in low-temperature conditions to ensure normal chip operation. The heat dissipation module dissipates heat in high-temperature environments, preventing overheating.

[0023] The above description is only a preferred embodiment of the present utility model, but the protection scope of the present utility model is not limited thereto. Any equivalent substitutions or changes made by those skilled in the art within the technical scope disclosed in the present utility model, based on the technical solution and the inventive concept of the present utility model, should be included within the protection scope of the present utility model.

Claims

1. A hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling, characterized in that, It includes a main control module, a power management module and a thermal management module. The main control module is equipped with a national cryptographic hardware encryption unit, a multi-channel adaptive scheduling unit and a data adaptation interface unit. The national cryptographic hardware encryption unit includes an SM2 / SM4 cryptographic chip, a PUF module, and a standard interface module; The multi-channel adaptive scheduling unit includes a 4 / 5G communication module, a BeiDou short message communication module, a GPRS communication module, and a channel quality monitoring sub-module. The data adaptation interface unit includes an interface chip and a data preprocessing module.

2. The hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling according to claim 1, characterized in that, In the national cryptographic hardware encryption unit, data enters from the standard interface module, the SM2 / SM4 cryptographic chip performs secure processing using a key protected by the PUF module, and then sends it out through the standard interface module.

3. The hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling according to claim 1, characterized in that, The multi-channel adaptive scheduling unit is also equipped with a circuit switch module. The channel quality monitoring submodule controls the 4 / 5G communication module, the Beidou short message communication module, and the GPRS communication module through the circuit switch module.

4. The hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling according to claim 1, characterized in that, The interface chip is used to connect to the hydrological sensor, receive the raw electrical signal data stream from the hydrological sensor, and convert it into a digital byte stream. The interface chip is also used to transmit the digital byte stream to the data preprocessing module, which is used to upload the processed data to the main control module.

5. The hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling according to claim 1, characterized in that, The power management module provides a stable power supply for all modules, supports wide voltage input and power monitoring. The power management module is equipped with a power input interface, a DC-DC converter, a backup battery and a power monitoring circuit.

6. The hydrological and water resources gateway edge module integrating national cryptographic encryption and multi-channel scheduling according to claim 1, characterized in that, The thermal management module is used to ensure that the module works stably in an environment of -40℃ to 60℃. The thermal management module includes a temperature sensor, a heating circuit, a heat dissipation module and a thermally conductive silicone pad, and all modules are equipped with a low-temperature resistant shell.

Images