A security scenario encrypted digital twin system
By combining data acquisition, fusion, encryption, and interaction, the spatial representation and data fusion problems of traditional security systems are solved, achieving high-precision 3D modeling and positioning, ensuring data security and real-time performance, and making it suitable for multi-dimensional security scenarios.
Patent Information
- Application Number
- CN202522650410.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-15
- Publication Date
- 2026-11-06
- Estimated Expiration
- 2035-12-15
AI Technical Summary
Traditional two-dimensional security systems suffer from problems such as lack of spatial representation, insufficient positioning accuracy, serious data silos, high security and compliance risks, and static twins. Existing digital twin security systems suffer from problems such as inconsistent data access protocols, low accuracy of multi-source data fusion, poor data processing efficiency, and insufficient localization adaptation, making it difficult to meet the high requirements of critical infrastructure and important areas for real-time performance, security, and reliability.
By combining data acquisition units, data support units, data connection units, and core engine units, the system can acquire, fuse, encrypt, and interact with 3D model data, multi-source sensor data, and positioning data. Combined with domestically developed technologies such as Huawei Kunpeng servers, blockchain notarization, and zero-trust mechanisms, the system ensures data security and real-time performance.
It achieves high-precision 3D modeling and positioning, with data fusion accuracy ≥99.5%, data integrity ≥99.9%, processing latency ≤500ms, twin update latency ≤2s, AI anomaly detection latency ≤1s, and high data security, making it suitable for multi-dimensional security scenarios.
Smart Images
Figure CN224947576U_ABST
Abstract
Description
Technical Field
[0001] This utility model belongs to the field of security scene encryption technology, and in particular relates to a security scene encryption digital twin system. Background Technology
[0002] Traditional two-dimensional security systems suffer from technical pain points such as lack of spatial representation, insufficient positioning accuracy, serious data silos, high security and compliance risks, and static twins. Although existing digital twin security systems integrate some multi-source data, they generally suffer from problems such as inconsistent data access protocols, low accuracy of multi-source data fusion, poor data processing efficiency, and insufficient localization adaptation, making it difficult to meet the high requirements of critical infrastructure and important areas for real-time performance, security, and reliability.
[0003] Currently, 3D modeling and positioning technologies lack effective integration with multi-source external data, resulting in twins being unable to accurately reflect the dynamic changes of physical scenes; the data processing stage lacks efficient intermediate connecting units, leading to data scheduling lag under the edge cloud collaborative architecture, affecting the real-time performance of anomaly detection; at the same time, the encryption mechanisms of existing systems mostly do not fully comply with national cryptographic standards, and key events lack tamper-proof evidence preservation methods, posing risks of data leakage and forgery. Utility Model Content
[0004] In view of this, the present invention aims to overcome the shortcomings of the above-mentioned problems in the prior art and proposes an encrypted digital twin system for security scenarios.
[0005] To achieve the above objectives, the technical solution of this utility model is implemented as follows:
[0006] A security scenario encrypted digital twin system includes:
[0007] The data acquisition unit is used to acquire 3D model data, multi-source sensor data, and positioning data.
[0008] The data support unit is used to access data, perform spatiotemporal semantic fusion and three-level quality control, and output fused data;
[0009] The data connection unit is used to connect the data support unit and the core engine unit.
[0010] The core engine unit is used to complete the modeling and fusion of digital twins and end-to-end encryption, as well as to perform hashing and tamper-proof evidence storage for key security events.
[0011] The application interaction unit is used to realize multi-terminal visual interaction, intelligent security analysis, and ensure system access security through a zero-trust mechanism with four-fold verification.
[0012] Furthermore, the data acquisition unit includes a 3D scanning and modeling module, an IoT sensing module, and a positioning module. The 3D scanning and modeling module is used to perform centimeter-level 3D modeling of the target security area and complete the acquisition of 3D model data. The IoT sensing module includes infrared sensors, smoke sensors, access control collectors, cameras, vibration sensors, and environmental sensors to complete the acquisition of multi-source sensor data. The positioning module includes an RTK module and UWB anchor points to complete the acquisition of positioning data.
[0013] Furthermore, the data support unit includes a multi-source data access module, a data fusion module, and a data quality control module, which are respectively used for unified access of internal and external data, spatiotemporal semantic fusion, and three-level quality control.
[0014] Furthermore, the data connection unit includes a data preprocessing submodule, a distributed caching submodule, a data scheduling submodule, and an adaptation submodule. The data preprocessing submodule is used for data cleaning, format conversion, and lossless compression. The distributed caching submodule is used for caching high-frequency real-time data on the edge side and historical data on the cloud. The data scheduling submodule is used to dynamically allocate tasks according to the edge cloud load, enabling priority processing of high-real-time data on the edge side and processing of non-real-time data on the cloud, and providing task circuit breaking and retry capabilities. The adaptation submodule is used for chip integration.
[0015] Furthermore, the core engine unit includes an encrypted digital twin engine module and a blockchain evidence storage module; the encrypted digital twin engine module is used to realize twin modeling and end-to-end encryption based on Unity 3D; the blockchain evidence storage module is used to automatically record key events through a smart contract triggering mechanism to achieve event traceability.
[0016] Compared with the prior art, this utility model has the following advantages:
[0017] The security scenario encrypted digital twin system described in this utility model has precise spatial representation, achieving a modeling error of ≤1cm using a 3D scanning modeling module. Combined with BeiDou + UWB fusion positioning, it achieves high-precision positioning across the entire area with an outdoor accuracy of ≤2cm and an indoor accuracy of ≤10cm. It boasts comprehensive data dimensions, integrating internal sensor data with external correlated data through a data support unit, achieving a fusion accuracy of ≥99.5% and data integrity of ≥99.9%. It is highly efficient, with a preprocessing latency of ≤500ms, a cache hit rate of ≥95%, a twin update latency of ≤2s, and an AI anomaly detection latency of ≤1s through a data connection unit. Data security is paramount, employing a core engine unit and SM4 / SM9 national cryptographic algorithms for encryption throughout the entire chain. Key events are stored via a blockchain notarization module, coupled with zero-trust access control, ensuring data is neither leaked nor tampered with. It has broad scenario adaptability, supporting multi-region cascaded deployment and suitable for multi-dimensional security scenarios such as ground, underground, water, and air. Attached Figure Description
[0018] The accompanying drawings, which form part of this utility model, are used to provide a further understanding of the utility model. The illustrative embodiments of the utility model and their descriptions are used to explain the utility model and do not constitute an undue limitation of the utility model. In the drawings:
[0019] Figure 1 This is a structural block diagram of the encrypted digital twin system for security scenarios described in this embodiment of the present invention. Detailed Implementation
[0020] It should be noted that, unless otherwise specified, the embodiments and features described in these embodiments of the present invention can be combined with each other.
[0021] In the description of this utility model, it should be understood that the terms "center," "longitudinal," "lateral," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," and "outer," etc., indicating orientation or positional relationships based on the orientation or positional relationships shown in the accompanying drawings, are only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this utility model. Furthermore, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, features defined with "first," "second," etc., may explicitly or implicitly include one or more of that feature. In the description of this utility model, unless otherwise stated, "a plurality of" means two or more.
[0022] In the description of this utility model, it should be noted that, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "joining" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this utility model based on the specific circumstances.
[0023] The present invention will now be described in detail with reference to the accompanying drawings and embodiments.
[0024] As shown in the figure, a security scenario encrypted digital twin system includes:
[0025] The data acquisition unit is used to acquire 3D model data, multi-source sensor data, and positioning data.
[0026] The data support unit is used to access the data from the data acquisition unit, perform spatiotemporal semantic fusion and three-level quality control, output standardized, high-quality fused data and transmit it to the data connection unit.
[0027] The data connection unit is used to connect the data support unit and the core engine unit. Through data preprocessing, distributed caching, dynamic scheduling and localization adaptation, it comprehensively improves the efficiency of data processing and transmission, and delivers the data to the core engine unit.
[0028] The core engine unit is used to complete the modeling and fusion of the digital twin and the end-to-end encryption, as well as to perform hashing and tamper-proof evidence storage of key security events, and push the encrypted twin data and event evidence storage information to the application interaction unit.
[0029] The application interaction unit is used to realize multi-terminal visual interaction, intelligent security analysis, and ensure system access security through a zero-trust mechanism with four-fold verification.
[0030] The data acquisition unit includes a 3D scanning and modeling module, an IoT sensing module, and a positioning module. The 3D scanning and modeling module is used to perform centimeter-level 3D modeling of the target security area, supporting UAV-mounted, vehicle-mounted, or handheld scanning methods and automatic path planning to complete the acquisition of 3D model data. The IoT sensing module includes infrared sensors, smoke sensors, access control collectors, cameras, RFID radio frequency identification units, vibration sensors, and environmental sensors. It uploads multi-source heterogeneous sensor data through an NBIoT / LoRa / 5G / WiFi 6 self-organizing network to complete the acquisition of multi-source sensor data. The positioning module is a Beidou + UWB fusion positioning module, including the Hexin Xingtong UM980 Beidou-3 RTK module and the Tsinghua Research Institute DW1000 UWB anchor point. It automatically switches the positioning mode when the Beidou signal strength is <-120dBm, achieving positioning accuracy of ≤2cm outdoors and ≤10cm indoors, and completing the acquisition of positioning data.
[0031] The data support unit is a multi-source information processing module equipped with a Huawei Kunpeng 920 server, including a multi-source data access module, a data fusion module, and a data quality control module, which are respectively used for unified access of internal and external data, spatiotemporal semantic fusion, and three-level quality control. The multi-source data access module supports HTTP / HTTPS, MQTT, and CoAP protocols, and reserves interfaces for meteorological and public security early warning data. The data fusion module achieves spatiotemporal alignment based on BeiDou UTC timestamps and 3D model coordinate systems, and completes semantic association with a built-in security ontology library. The data quality control module adopts a three-level mechanism of filtering at the acquisition end, CRC32 verification at the transmission end, and 3σ anomaly removal at the fusion end, ensuring data integrity ≥99.9% and accuracy ≥99.5%.
[0032] The data connection unit includes a data preprocessing submodule, a distributed caching submodule, a data scheduling submodule, and an adaptation submodule. The data preprocessing submodule is used for data cleaning, format conversion, and lossless compression, with a processing latency of ≤500ms. The distributed caching submodule adopts a Redis 6.0 cold and hot data separation caching strategy, with a cache hit rate of ≥95%, and is used for high-frequency real-time data caching on the edge side and historical data caching on the cloud. The data scheduling submodule is used to dynamically allocate tasks according to the edge cloud load, realizing priority processing of high real-time data on the edge side and processing of non-real-time data on the cloud, and providing task circuit breaking and retry capabilities. The adaptation submodule is used to integrate chip and system drivers, is compatible with Kunpeng, Phytium chips and Kylin, Tongxin UOS, and HarmonyOS operating systems, and seamlessly connects with domestic software and hardware platforms.
[0033] The core engine unit includes an encrypted digital twin engine module and a blockchain evidence storage module. The encrypted digital twin engine module is used to realize twin modeling and end-to-end encryption based on Unity 3D. It has built-in SM4 / SM9 national cryptographic encryption components, supports model segment encryption and dynamic key updates, and the model incremental update latency is ≤2s. The blockchain evidence storage module is used to automatically record key events such as intrusion, fire, and equipment offline through a smart contract trigger mechanism to achieve event traceability. Based on the Hyperledger Fabric 2.5 consortium blockchain, it completes the immutable evidence storage and traceability of key security events through SM3 hashing and smart contract components.
[0034] This embodiment achieves a real-time closed loop of data acquisition, processing, fusion, and encryption through an edge cloud collaborative architecture, meeting the needs of second-level anomaly detection and command and dispatch in high-security scenarios.
[0035] Several specific examples are given below to illustrate the use of the encrypted digital twin system for security scenarios described in this invention.
[0036] Example 1
[0037] Used for monitoring illegal border crossings.
[0038] Scenario: Along the 200km border, there are characteristics such as undulating terrain, dense forests, and poor nighttime lighting. It is necessary to combine meteorological data to reduce the false alarm rate.
[0039] Deployment configuration: UAV-borne 64-line lidar, LoRa self-organizing network, Beidou RTK reference station, UWB anchor point, domestic edge box, multi-source information access terminal (meteorological data interface);
[0040] Workflow:
[0041] The vibrating fiber optic cable detected an abnormal signal, triggering the data support unit.
[0042] The data support unit integrates vibration data with real-time meteorological data to eliminate false triggering caused by heavy rain;
[0043] The data connection unit cleans and compresses the effective data, and caches the positioning information on the edge side;
[0044] The camera capture and BeiDou + UWB fusion positioning are activated to obtain the real-time location of the target illegally crossing the border;
[0045] The core engine unit marks the target location on the 3D model and transmits it encrypted using national cryptographic algorithms;
[0046] The blockchain-based evidence storage module records the time, location, and image data hash value of border crossing events;
[0047] The application interaction unit sends alarm and navigation information to patrol personnel via AR helmet;
[0048] Implementation results: average alarm delay of 0.7s, positioning error of 8cm, false alarm rate of <0.5%, and key event evidence is tamper-proof.
[0049] Example 2
[0050] Monitoring abnormal behavior within the prison.
[0051] Scenario: A high-security prison, consisting of 4 cell blocks and 1 factory building, requiring the integration of access control data and behavioral analysis;
[0052] Deployment configuration: SLAM scanner, 1200-channel HD camera, Beidou + UWB positioning wristband, zero-trust controller, multi-source information access terminal (access control system interface);
[0053] Workflow:
[0054] Cameras collect data on the behavior of people around the cells, and the access control system uploads records of people entering and exiting.
[0055] The data support unit integrates behavioral data and access control data to identify the characteristics of "unauthorized stay in areas";
[0056] The data connection unit compresses the video stream and schedules edge AI computing power for real-time analysis.
[0057] The application interaction unit uses the STGCN algorithm to identify abnormal behaviors such as "climbing fences" and "group fighting" and triggers alarms.
[0058] The core engine unit performs segmented SM4 encryption storage on the alarm video stream;
[0059] The blockchain evidence storage module automatically uploads the hash value and processing record of abnormal events to the blockchain;
[0060] Implementation results: Successfully issued warnings for 3 cases of self-harm and 7 cases of fighting; AI detection efficiency improved by 30%; passed the security assessment of the Third Research Institute of the Ministry of Public Security.
[0061] The above description is only a preferred embodiment of the present utility model and is not intended to limit the present utility model. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present utility model should be included within the protection scope of the present utility model.
Claims
1. A security scenario encrypted digital twin system, characterized in that, include: The data acquisition unit is used to acquire 3D model data, multi-source sensor data, and positioning data. The data support unit is used to access the data from the data acquisition unit, perform spatiotemporal semantic fusion and three-level quality control, output fused data and transmit it to the data connection unit; The data connection unit is used to connect the data support unit and the core engine unit, and to transmit data to the core engine unit. The core engine unit is used to complete the modeling and fusion of the digital twin and the end-to-end encryption, as well as to perform hashing and tamper-proof evidence storage of key security events, and push the encrypted twin data and event evidence storage information to the application interaction unit. The application interaction unit is used to realize multi-terminal visual interaction, intelligent security analysis, and ensure system access security through a zero-trust mechanism with four-fold verification.
2. The encrypted digital twin system for security scenarios according to claim 1, characterized in that: The data acquisition unit includes a 3D scanning and modeling module, an IoT sensing module, and a positioning module. The 3D scanning and modeling module is used to perform centimeter-level 3D modeling of the target security area and complete the acquisition of 3D model data. The IoT sensing module includes infrared sensors, smoke sensors, access control collectors, cameras, vibration sensors, and environmental sensors to complete the acquisition of multi-source sensor data. The positioning module includes an RTK module and UWB anchor points to complete the acquisition of positioning data.
3. The encrypted digital twin system for security scenarios according to claim 1, characterized in that: The data support unit includes a multi-source data access module, a data fusion module, and a data quality control module, which are respectively used for unified access of internal and external data, spatiotemporal semantic fusion, and three-level quality control.
4. The encrypted digital twin system for security scenarios according to claim 1, characterized in that: The data connection unit includes a data preprocessing submodule, a distributed caching submodule, a data scheduling submodule, and an adaptation submodule. The data preprocessing submodule is used for data cleaning, format conversion, and lossless compression. The distributed caching submodule is used for caching high-frequency real-time data at the edge and historical data in the cloud. The data scheduling submodule is used to dynamically allocate tasks according to the edge cloud load, enabling priority processing of high-real-time data at the edge and processing of non-real-time data in the cloud, and providing task circuit breaking and retry capabilities. The adaptation submodule is used for chip integration.
5. The encrypted digital twin system for security scenarios according to claim 1, characterized in that: The core engine unit includes an encrypted digital twin engine module and a blockchain evidence storage module; the encrypted digital twin engine module is used to realize twin modeling and end-to-end encryption based on Unity 3D; the blockchain evidence storage module is used to automatically record key events through a smart contract triggering mechanism to achieve event traceability.