40 results about "Firewall (construction)" patented technology

The invention discloses a BIM-based hydropower station full life cycle design, construction, operation and maintenance integrated control system, and the system comprises an intelligent sensing layer which integrates 5G + Beidou positioning, a LoRa gateway and a sensor, collects multi-source heterogeneous data in real time, and transmits the multi-source heterogeneous data to a digital twinborn layer after the multi-source heterogeneous data is filtered by an edge node; a digital twinborn layer: constructing a parameterized model library through laser point cloud and BIM automatic registration, integrating a geological parameter dynamic correction algorithm, mapping a construction period stress field in real time, and updating model parameters based on sensing data self-evolution; the intelligent decision-making layer performs equipment fault prediction by using an LSTM neural network, optimizes multi-machine load distribution in combination with an improved PSO algorithm, and automatically adjusts a start-stop strategy when the load fluctuates; and the security execution layer is used for triggering equipment operation after virtual twinborn deduction verification through a block chain evidence storage instruction, realizing virtual-real dual verification in combination with an industrial firewall, and finally feeding back a running state to the sensing layer to calibrate and update a model, and supporting intelligent decision.

The invention relates to a firewall access control strategy dynamic optimization method and system based on cooperation of flow analysis and a large language model, and aims to solve the problems of rule expansion, low matching efficiency and operation and maintenance lag of a traditional static ACL strategy. The method comprises the following steps: collecting and analyzing network traffic and generating a rule hit log; standardizing the multi-manufacturer ACL strategy into structured data; performing semantic analysis by using a large language model, and constructing a strategy semantic knowledge graph; fusing the traffic behavior characteristics and semantic information, and generating an optimization strategy through a dual-drive model; the optimization feasibility is simulated, verified and evaluated; and deploying an optimization strategy and monitoring feedback to form closed-loop dynamic optimization. According to the method, rule combination, redundancy elimination and high-frequency rule preposition are realized through traffic behavior and large model semantics dual driving, the average matching frequency is reduced by more than 40%, and the forwarding delay is reduced by 30%-50%; and strategy dynamic reconstruction is supported to adapt to network changes, so that the operation and maintenance efficiency and the strategy effectiveness are remarkably improved.

The invention discloses an industrial firewall device based on time sequence atlas detection, which relates to the technical field of industrial control network security and comprises the steps of protocol identification, feature extraction, time sequence atlas construction, baseline modeling, online detection and response protection. Extracting time sequence characteristics such as a request-response relationship, a time interval and an event sequence, and converting the time sequence characteristics into a time sequence graph on which nodes correspond to communication events and edges correspond to time sequences; and generating a baseline map based on normal data, comparing the deviation between the current map and the baseline map in real-time communication, and executing a protection action after judging abnormality. The device for realizing the method comprises a data acquisition module, a feature extraction module, an atlas modeling module, a detection analysis module, a protection response module, a man-machine interaction module and a wide-voltage power supply module which are electrically connected in sequence. According to the method and the device, hidden time sequence attacks can be accurately identified, multiple industrial protocols are supported, and the adaptive resource-limited industrial equipment is designed in a lightweight manner.

The invention relates to a satellite-borne router software security reconstruction method, aims to solve the problems of transmission monitoring lag, high-delay verification and insufficient isolation, provides an integrity chain verification and firewall double-layer verification cooperation scheme, and is combined with a modular physical isolation design. When the routing module receives the data packet, a hardware write protection lock is activated, unauthorized modification is forbidden, and strategy lock-free update is supported; the platform management module downloads an accumulated verification value in real time, and pays attention to a reconstruction instruction after ground verification; and the program programming module adopts double Bank storage, supports atomization programming and credible verification, and automatically returns a safe version when an exception occurs. Attacks are defended through satellite-ground cooperative double-closed-loop verification (firewall filtering, token bucket current limiting and ground CRC verification), hardware isolation guarantees updating without interrupting routing operation, and intelligent backspacing improves the fault-tolerant capability. The method is suitable for a high-delay and strong-interference satellite-borne routing scene, ensures zero interruption of a reconstruction service during in-orbit maintenance of a transit / overseas satellite, and meets the security requirement of a modern satellite network.

The invention discloses a web application firewall attack real-time traceability system based on real-time monitoring, and relates to the technical field of monitoring analysis, and the system comprises the steps: carrying out the attack behavior fingerprint clustering analysis according to the attack technique difference data, obtaining the attack behavior fingerprint clustering data, carrying out the cross-session attack association evaluation based on the attack behavior fingerprint clustering data, and carrying out the cross-session attack association evaluation based on the cross-session attack association evaluation. Cross-session attack association data is obtained, and attacker group portrait estimation is carried out according to the cross-session attack association data to obtain attacker group portrait data; performing context influence factor identification on the attacker group portrait data to obtain a context influence factor, and performing portrait correction on the attacker group portrait data based on the context influence factor to obtain corrected attacker group portrait data; and carrying out attacker traceability model construction on the corrected attacker group portrait data to obtain an attacker traceability model so as to execute attack real-time traceability and alarm response. The method has the effect of improving the attack tracing efficiency.

The invention discloses a firewall dynamic policy adaptation method and system based on big data, and the method comprises the steps: collecting multi-source heterogeneous data in a network, and constructing a dynamic network entity map in real time; processing the time sequence of the atlas by using a preset time sequence diagram attention network model to obtain a behavior fingerprint vector representing the behavior state of the entity, and calculating the risk score of the entity; when the risk score exceeds a risk threshold value, automatically generating a temporary security policy for managing and controlling the access behavior of the entity; and managing the life cycle of the temporary security policy, and automatically updating, renewing or cancelling according to the entity risk state change. According to the method, the network entity behavior baseline is constructed and the risk prediction is carried out, so that the conversion from passive defense to active defense is realized, the security policy can be automatically and accurately generated and managed, advanced persistent threats and zero-day attacks can be effectively coped with, and the self-adaptability and the intelligent level of network defense are improved.

This invention discloses a highly integrated edge computing security gateway with end-to-end encryption suitable for industrial environments. It comprises a routing module with firewall functionality, a switching module, a storage module, an edge computing module, a high-performance security encryption / decryption module, a low-performance security encryption / decryption module, and an industrial field interface module. All modules are connected via an internal high-speed data bus. The routing module coordinates the operation of all modules within the security gateway. This invention can be applied to numerous fields with network security connectivity requirements, such as factories, construction sites, and transportation networks, significantly expanding the application scenarios of related equipment.

The disclosure provides a low-code informatization system and method and an ARM server, relates to the field of cloud services, and particularly relates to the field of ARM chips. A specific implementation scheme is as follows: the ARM server comprises at least one ARM board card, each ARM board card is deployed with a cloud platform, a technical component, a business middle station and an application front desk; a firewall is connected with the ARM server and is deployed with at least one security service product; and a user equipment accesses the ARM server through the firewall and is deployed with a low-code development tool. The implementation manner not only meets the demand of informatization construction for server computing power, but also greatly reduces the use cost and saves storage space compared with a server based on an X86 architecture under the condition of the same effect, and one-stop delivery of a traditional industry informatization system is realized.

The application relates to the technical field of house renting management, and discloses a long-term house renting monitoring management system and method, which comprises the following steps: dividing monitoring units in the same physical space into equipment groups, recording state jump time stamps, automatically depositing behavior logic templates based on historical time stamp sequences, and generating risk early warnings through logical self-consistency comparison between real-time sequences and templates. The application enables the system to understand the cooperative behavior logic of the equipment, realizes cognitive transition from physical quantity monitoring to behavior logic verification by constructing behavior templates through reuse of basic switch signals, and simultaneously utilizes state credibility evaluation and a distributed priority arbitration mechanism to naturally form an anti-interference data quality firewall and system-level resource coordination capability under a centerless architecture, thereby significantly improving the economy and reliability of intelligent reconstruction of old houses.

The application discloses a kind of firewall log security detection method and system, it is related to the technical field of network firewall, comprising: the original log record data obtained by collecting to the firewall to be detected;Original log record data is preprocessed to obtain triad structured data;Triad structured data is converted into numerical value and is spliced to obtain log feature vector;Once detection is carried out through deep support vector data description to obtain once detection result, generate preliminary abnormal log subset;Based on preliminary abnormal log subset, event trace construction obtains XES preliminary screening event log, and the workflow network to be detected is generated by inductive mining algorithm;Consistency check is calculated by edit distance algorithm to obtain secondary detection score, and secondary judgment obtains security detection result.The application can accurately identify hidden security threats, can capture complex abnormal behaviors of combination and serialization, balance high efficiency, high accuracy and interpretability, effectively reduce false alarm rate.

The invention relates to a fabricated energy storage battery compartment firewall integrated foundation and a construction process thereof. The fabricated energy storage battery compartment firewall integrated foundation comprises a prefabricated independent foundation and a prefabricated beam, and a prefabricated connecting piece is arranged at the top of the prefabricated independent foundation; a plurality of first sleeves which are horizontally distributed are arranged in the prefabricated connecting piece, first sleeve openings corresponding to the first sleeves in position are formed in the peripheral side of the prefabricated connecting piece, and overhanging steel bars of the prefabricated beam penetrate through the first sleeve openings to be connected with the first sleeves; a plurality of prefabricated independent foundations are connected with the prefabricated beams through prefabricated connecting pieces to form a battery compartment foundation, and a prefabricated firewall is arranged on the top of the battery compartment foundation. Functional integration of the firewall and the battery compartment foundation is achieved, the assembly type foundation system with the self-adaptive leveling and vibration isolation capacity is constructed, flexible deployment of a construction site is supported, and the core development requirements of the current power industry for elastic capacity expansion and low-carbon construction of an energy storage power station are met.

The invention relates to the technical field of firewalls, and discloses a two-stage unknown attack real-time detection method based on online learning, which comprises the following steps: firstly, filtering network traffic through a firewall in combination with a determined black list and white list; then, abnormal data filtered out from the firewall are trained through an A encoder, an abnormal data error is reconstructed through an A decoder, and a threshold value is set to screen an abnormal value similar to a known anomaly; judging whether the reconstruction error is smaller than a threshold value or not, and if yes, checking through an expert; the method comprises the following steps: judging whether a reconstruction error is smaller than a threshold value or not, if not, training by using normal data through a B encoder, checking whether the traffic is possible unknown attack traffic after classification through an expert, if so, judging the traffic as normal traffic, and if so, judging the traffic as unknown attack, and generating a dynamic update firewall. The method is directly applied to a network security application scene. The double-stage lightweight model is high in training speed and high in precision.

The invention relates to a signature authentication method for a firewall and an anti-network topology discovery system based on a firewall, which belong to the field of computer network security technology. The invention aims to solve the problems of network layer data loss and disorder and high signature authentication overhead in the existing signature authentication method for firewalls. The method of the invention explains the implementation process of the firewall signature authentication scheme based on the message hash chain from two perspectives: the basic process of signature authentication and the hash chain construction and verification scheme. In this process, the three major problems faced by the firewall will be discussed respectively: the network layer data packet loss and disorder problem, the two-way authentication problem and the firewall hash chain signature authentication information organization problem. Based on the signature authentication method of the firewall, an anti-network topology discovery system is designed, which uses a trusted detection filtering module to design three trusted detection filtering schemes based on source IP address, token and hash chain signature authentication to improve the protection capability of the firewall in the anti-network topology discovery process.

The present application relates to a kind of on-orbit router software security reconstruction method, for transmission monitoring lag, high delay verification and insufficient isolation problem, propose integrity chain check and firewall double-layer verification collaborative scheme, combined with modular physical isolation design.Routing module activates hardware write protection lock when receiving data packet, prohibits unauthorized modification and supports policy lock-free update;Platform management module real-time download cumulative check value, ground verification after upper reconstruction instruction;Program burn module uses double Bank storage, supports atomization burn and trusted verification, abnormal automatic rollback safety version.Through space-earth collaborative double-loop verification (firewall filtering, token bucket flow limiting, ground CRC check) to resist attack, hardware isolation ensures that updating does not interrupt routing operation, intelligent rollback improves fault tolerance.Ceiling for high delay, strong interference on-orbit routing scene, guarantee transit / overseas satellite on-orbit maintenance when reconstructing business zero interruption, meet modern satellite network security needs.

This invention relates to a stepped layout structure for a megawatt-class energy storage power station in mountainous terrain. Belonging to the field of energy storage power station engineering layout, it aims to solve the technical problems of traditional mountain energy storage power stations, such as the need for large-scale site leveling, large earthwork volume, high cost, severe ecological damage, and inconvenient operation and maintenance. The invention features a multi-level stepped platform along the mountainside, with adjacent platforms connected by slope transitions. Energy storage units are arranged on the platforms, and maintenance roads are provided on the slope surfaces. The platform consists of a three-level energy storage area and an independent booster area platform. The energy storage units are arranged in an array, with battery energy storage compartments and PCS booster units arranged centrally or staggered. The battery energy storage compartments are located on a foundation, which is fixedly connected to a firewall. The station area is equipped with a ring-shaped fire access road, cable trenches, ancillary facilities, and slope inspection steps. This invention significantly reduces earthwork excavation and filling, improves land utilization, offers structural stability, convenient operation and maintenance, and high safety and reliability, significantly reducing construction costs and making it suitable for the construction of megawatt-class large-capacity energy storage power stations in mountainous terrain.

The invention relates to the technical field of firewalls, and discloses an intelligent firewall construction method based on online learning, comprising a firewall for filtering network traffic through a firewall rule; an intelligent monitoring module for hidden attack detection and unknown attack detection is connected with the firewall; and the self-evolution module is used for learning and improving the abnormal traffic detected by the intelligent detection module, and updating firewall rules after self-learning and improving. The intelligent monitoring module and the self-evolution module specifically comprise network flow data collection, network flow data analysis, rule generation, rule verification and rule updating; wherein the firewall rule is used for checking and filtering network flow messages based on an access control list (ACL). The method can adapt to large-scale network data flow, the problem of insufficient memory caused by large-scale data is relieved, and unknown attacks are detected in real time.

The invention relates to the technical field of power construction equipment, and particularly discloses a transformer substation main transformer firewall high-altitude maintenance platform which comprises a cross beam located on one side of a main transformer firewall, the two ends of the cross beam are fixed to the main transformer firewall through vertical frames, the cross beam can slide up and down along the vertical frames, and an operation basket capable of transversely moving is arranged on the cross beam. A hanging mechanism used for fixing a safety belt is arranged in the operation basket, the upper end and the lower end of the vertical frame are connected and fixed through a pull rod, and the cross beam and the pull rod are of a splicing structure. Through integrated innovation of'dynamic anti-falling, self-adaptive structure and space compression ', anti-falling safety guarantee (solving safety hard damage), site penetrability (breaking through space limitation), clearance reservation compatibility (eliminating secondary disassembly and assembly), industrial breakthroughs of low risk, efficiency multiplication and cost halving are realized in a main transformer firewall scene for the first time; and the technical blank in the field of electric power high-altitude operation equipment is filled.

The utility model discloses an assembly type decorative firewall, which belongs to the technical field of firewalls and comprises a firewall frame body, firewall bodies are symmetrically arranged on the surface of the firewall frame body, a side keel is arranged on one side of the firewall frame body, and a bottom keel is arranged at the upper end of the firewall frame body. A middle keel is arranged between the side edge keel and the bottom edge keel, an anti-skid assembly is arranged in the middle of the interior of the middle keel, and limiting mounting assemblies are arranged at the four ends of the middle keel; according to the fireproof wall, the limiting installation assemblies are arranged, the side edge keels and the bottom edge keels can be conveniently limited and fixed after the fireproof wall and the keels are matched, the convenience of fireproof wall assembly is improved, manpower resources are saved, the working efficiency is improved, and the construction period is effectively shortened; and the situation of slippage is prevented, the stability and accuracy of subsequent splicing are guaranteed, and the use quality of equipment is improved.

The invention discloses a firewall log security detection method and system, and relates to the technical field of network firewalls, and the method comprises the steps: collecting a to-be-detected firewall to obtain original log record data; preprocessing the original log record data to obtain triple structured data; performing numerical conversion and vector splicing on the triple structured data to obtain a log feature vector; performing one-time detection through depth support vector data description to obtain a one-time detection result, and generating a preliminary abnormal log subset; performing event trace construction based on the preliminary abnormal log subset to obtain an XES preliminary screening event log, and generating a to-be-detected workflow net through an inductive mining algorithm; and performing consistency check calculation through an editing distance algorithm to obtain a secondary detection score, and performing secondary judgment to obtain a safety detection result. According to the method, hidden security threats can be accurately identified, combined and serialized complex abnormal behaviors can be captured, high efficiency, high accuracy and interpretability are considered, and the false alarm rate is effectively reduced.

The invention provides a firewall, belongs to the technical field of firewall equipment, and particularly relates to an emergency firewall and a building method thereof.The emergency firewall comprises a firewall body, the firewall body comprises a foldable frame structure arranged outside the firewall body in a sleeving mode, and the foldable frame structure is connected with a multi-layer fireproof combination above the foldable frame structure through a mounting base; an integrated cooling system arranged in the firewall body is arranged between the multiple layers of fireproof combinations, the firewall body is provided with an intelligent control unit electrically connected with the firewall body and the integrated cooling system, and the problems that an existing firewall structure is not high in installation efficiency and low in applicability are solved.

The invention discloses a virtual environment construction method and device for a target range and a nonvolatile storage medium. The method comprises the steps that a network topology structure of a target range is constructed, and the network topology structure comprises a firewall, an intrusion detection system and a router; deploying network security software of the target range based on the network topology structure; constructing a feature matching engine of the target range, the feature matching engine being used for identifying abnormal network traffic; and constructing a virtual network environment of the target range based on a network topology structure, network security software and a feature matching engine. The technical problem that a traditional virtual environment simulation method has limitations in the aspects of cost, flexibility and complex scene simulation is solved.

The application relates to a traffic monitoring method, system and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: for each target cloud native network application firewall (WAF) node, respectively acquiring traffic characteristic data of the target cloud native WAF node; gathering and storing the traffic characteristic data of each target cloud native WAF node; according to a preset time dimension, counting the traffic characteristic data of each target cloud native WAF node in each traffic characteristic data type dimension, and storing the counting result into a target database; according to the data stored in the target database, a pre-determined traffic monitoring dimension and a preset traffic monitoring view construction rule, constructing a traffic monitoring view; and the traffic monitoring view is used for monitoring a cloud native WAF system. The method can be used for monitoring the traffic of the cloud native WAF system.

The invention provides a fire-fighting linkage device passing through a firewall based on a hospital project rail logistics system and a working method of the fire-fighting linkage device. The linkage device comprises a casement window controlled by an electric push-pull device and a travel switch in a matched mode and further comprises an electric rail turning device used in combination with a magnetic switch and a proximity switch. The linkage control box receives a fire-fighting linkage signal and controls the casement window and the electric rail turnover device to act. According to the fire-fighting linkage device, fire-fighting linkage is achieved when the rail logistics system transmission trolley passes through the firewall through the fireproof casement window, the electric push-pull device, the electric rail turnover device, the magnetic attraction switch, the travel switch, the fire-fighting linkage control box and the like, the fire-fighting linkage device can be repeatedly used, and technical guarantee is provided for smoothly passing fire-fighting acceptance inspection; the problem that a fixed fireproof window is disassembled after being installed and accepted in an original project is solved, the construction efficiency is greatly improved, the construction cost is saved, and potential safety hazards are reduced.

The utility model discloses a transformer station fire prevention system, comprising a plurality of fire prevention units, each fire prevention unit comprises firewalls arranged at two ends of electrical equipment, a portal frame is arranged above the firewalls, adjacent fire prevention units share one firewall, and the adjacent fire prevention units and the portal frame above form an M-shaped structure; according to the fireproof system of the transformer station, the firewall is arranged to isolate a fire source and prevent fire disasters for electrical equipment, the portal frame used for supporting the flexible bus is arranged above the firewall to form the fireproof units, and the plurality of fireproof units are arranged adjacently and parallelly, so that the spatial layout is more reasonable, the structure is more compact, and the fireproof effect is better. The occupied space is smaller, the assembly is faster, and the construction cost is low.

This invention relates to the field of mining operations, specifically a real-time simulation and optimization system for mine construction progress based on digital twins. The system includes an edge-side multimodal perception module, an edge-side preprocessing and micro-control module, a cloud-based digital base and model reconstruction module, a macro-level progress prediction and optimization module, and a twin sandbox and safety execution module. The system edge synchronously collects physical environment and equipment operating parameters. The data is then processed by an edge computing gateway through factor graph fusion, noise reduction, and dimensionality reduction before being transmitted to the cloud. The cloud center dynamically corrects the three-dimensional geological attribute layer using a Bayesian inference algorithm based on the underlying mechanical feedback data from the equipment, and simultaneously generates a real-time excavation comparison model using a semantic segmentation network. A multi-agent simulator predicts construction probabilities and generates a global scheduling strategy. The generated control strategy must completely penetrate a three-level locked firewall, including virtual collision avoidance verification, before being converted and distributed to the underlying electromechanical actuators. This achieves low-latency interaction even under extremely weak network conditions.

The utility model discloses a prefabricated main transformer firewall, and aims to solve the problems that the construction period is long, the field operation amount is large, and the existing prefabricated construction is large in wallboard size, single in stand column structure form, high in field requirement and poor in adaptability. The prefabricated main transformer firewall comprises a foundation assembly, a stand column assembly, a wallboard assembly, a bottom beam and a top beam, the foundation assembly, the stand column assembly, the bottom beam and the top beam form a main body frame of the firewall, the wallboard assembly is arranged between a first stand column and a second stand column, the wallboard assembly is limited through a first limiting groove and a second limiting groove, and then the firewall is formed. The overall structure size of the firewall can be adjusted through the second stand column, and the overall style of the wallboard assembly is adjusted according to the field arrangement requirement, so that the firewall is more flexible during field installation, and the adaptability is higher.

This utility model relates to the field of building construction structure technology, specifically disclosing a prefabricated concrete bay window structure, including a horizontal panel, a front panel, and side panels. Two side panels are symmetrically installed on the main platform. A firewall is fixedly connected inside the side panels, and a front panel is connected to the outside of the side panels. A horizontal panel is installed on top of the front and side panels. The horizontal panel, firewall, front panel, and side panels constitute the bay window sill structure. The horizontal panel, front panel, and side panels are all formed with expansion plug holes and / or bolt through holes through precast slab molds. The precast concrete slab structure assembly of this utility model is conducive to improving construction efficiency, saving costs, improving safety performance, and is convenient, safe, and reliable in construction. It effectively solves the problems of complex construction process and many subsequent quality defects in bay windows. The joints of the panels are sealed with mortar, ensuring both sealing and strength are safe and reliable.

The embodiment of the invention provides train-ground safety transmission equipment and method, and relates to the field of train network Ethernet firewalls and the like. The vehicle-ground safety transmission device comprises a wireless module, a reduced instruction set microprocessor ARM and a backboard network module. The wireless module is used for receiving external data sent by ground equipment and sending the external data to the ARM; the ARM is used for receiving external data; judging whether the external data conforms to a data filtering rule or not; and when the external data accords with the data filtering rule, sending the external data to the backboard network module. The wireless module is used for receiving the external data sent by the ground equipment, the ARM is used for judging the data filtering rule of the external data, and the external data is sent to the backboard network module when the external data meets the data filtering rule, so that the safety protection that the ground equipment sends the external data to the train system is realized; and additional firewall equipment is avoided, and the construction cost of a train system is reduced.

The utility model provides an assembly type firewall, and belongs to the technical field of firewalls. The assembly type firewall comprises a stand column and an assembly alignment mechanism, a bottom beam is installed at the bottom of the inner side of the stand column, a wall plate is installed at the top of the bottom beam, a top beam is installed at the top of the wall plate, alignment seats are arranged at the tops of the two sides of the stand column, alignment grooves are formed in the inner sides of the tops of the alignment seats, and alignment plates are movably connected into the alignment grooves. By arranging the assembly alignment mechanism, a reference medium for aligning the bottom beam, the wall plate and the stand column in the assembly process can be provided for workers, and it is convenient for the workers to ensure that the bottom beam and the wall plate are aligned in a relatively stable state during assembly; and the situation that assembly construction is inconvenient due to the fact that alignment and stabilization are difficult to conduct when the bottom beam and the wall plate are assembled is avoided, and therefore construction convenience and construction efficiency of assembly and alignment of the bottom beam, the wall plate and the stand column are improved.

This utility model belongs to the field of building fire protection technology, specifically disclosing a firewall structure that penetrates a metal roof. The lower firewall of the structure has a portal steel frame fixed to its top, and the surface of the portal steel frame is coated with a non-expanding fireproof coating. A support plate forms on the upper part of the portal steel frame, and the upper firewall is fixed to the support plate above the central axis of the portal steel frame. Purlins are fixed to both sides of the upper firewall on the support plate, and purlins are arranged between the upper firewalls and fixed to the purlins. Metal roof panels are arranged between the upper firewalls and their bottom ends are fixed to the purlins. The lower part of the flashing is fixed to the metal roof panel, and the upper part is fixed to the upper firewall. Outward-protruding water-retaining strips are fixed to both sides of the upper firewall. This utility model places the upper firewall on the support plate above the central axis of the portal steel frame, extending beyond the roof. Purlins are provided on both sides of the upper firewall on the support plate to connect the purlins, thus allowing for a continuous upper firewall. It features a simple structure, convenient construction, good fire resistance, and high economic efficiency.