[go: up one dir, main page]

CN115361199B - Anomaly detection equipment and systems - Google Patents

Anomaly detection equipment and systems Download PDF

Info

Publication number
CN115361199B
CN115361199B CN202210985110.2A CN202210985110A CN115361199B CN 115361199 B CN115361199 B CN 115361199B CN 202210985110 A CN202210985110 A CN 202210985110A CN 115361199 B CN115361199 B CN 115361199B
Authority
CN
China
Prior art keywords
identified
dimensional code
period
area network
local area
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202210985110.2A
Other languages
Chinese (zh)
Other versions
CN115361199A (en
Inventor
张耀邦
孙展辉
唐璐瑶
秦童
张焕颖
丁齐
杨翔
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xi'an Xiangde Information Technology Co ltd
Original Assignee
Xi'an Xiangde Information Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Xi'an Xiangde Information Technology Co ltd filed Critical Xi'an Xiangde Information Technology Co ltd
Priority to CN202210985110.2A priority Critical patent/CN115361199B/en
Publication of CN115361199A publication Critical patent/CN115361199A/en
Application granted granted Critical
Publication of CN115361199B publication Critical patent/CN115361199B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0805Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
    • H04L43/0817Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking functioning
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/10Active monitoring, e.g. heartbeat, ping or trace-route
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416Event detection, e.g. attack signature detection

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Cardiology (AREA)
  • General Health & Medical Sciences (AREA)
  • Environmental & Geological Engineering (AREA)
  • Alarm Systems (AREA)

Abstract

本申请的实施例提供了一种异常检测设备及系统。该异常检测设备包括:嵌入式装置,用于当接收到局域网内设备上一时段发送的多个运行状态信息时,将该时段内的多个运行状态信息转换为待识别二维码并显示;以及未接收到局域网内设备当前时段发送的运行状态信息时,显示上一时段的待识别二维码;运维装置,用于对所述待识别二维码进行识别,得到识别信息,并向服务器发送所述识别信息以及当判定上一时段的待识别二维码与当前时段的待识别二维码相同时,不向服务器发送信息;服务器,用于接收所述识别信息以及当检测到超过第一预设时长未接收到信息时,向监控终端发送异常提示信息,可以提高安全性。

The embodiment of the present application provides an abnormality detection device and system. The abnormality detection device includes: an embedded device, which is used to convert the multiple operating status information in the time period into a QR code to be identified and display it when receiving multiple operating status information sent by the device in the local area network in the previous time period; and when the operating status information sent by the device in the local area network in the current time period is not received, the QR code to be identified in the previous time period is displayed; an operation and maintenance device, which is used to identify the QR code to be identified, obtain identification information, and send the identification information to the server, and when it is determined that the QR code to be identified in the previous time period is the same as the QR code to be identified in the current time period, no information is sent to the server; the server is used to receive the identification information and send abnormal prompt information to the monitoring terminal when it is detected that no information is received for more than a first preset time period, which can improve security.

Description

Abnormality detection apparatus and system
Technical Field
The application belongs to the technical field of network security, and particularly relates to abnormality detection equipment and system.
Background
Most of the devices in the network security field are devices in the local area network, which are not directly connected with an external network in order to ensure network security, and meanwhile, the devices in the local area network are easy to fail due to the influence of environment and artificial damage.
In order to effectively maintain equipment in a local area network, the current network security field usually adopts a mode of a gateway to isolate an internal network from an external network, however, the mode has lower utilization rate due to higher deployment cost. Therefore, the maintenance of the existing local area network equipment mainly adopts manual periodic inspection and fault detection, but when the equipment fails, the equipment cannot be found out in time in the mode, so that accidents are easily caused, and the safety is reduced.
Disclosure of Invention
The embodiment of the application provides an abnormality detection device and an abnormality detection system, which can overcome the problem of lower safety in the prior art at least to a certain extent and improve the safety.
Other features and advantages of the application will be apparent from the following detailed description, or may be learned by the practice of the application.
According to an aspect of the embodiment of the present application, there is provided an abnormality detection apparatus for detecting whether an apparatus in a local area network has a failure, including:
The embedded device is used for converting the plurality of running state information in the time period into two-dimensional codes to be identified and displaying the two-dimensional codes when the running state information sent by the equipment in the local area network in the previous time period is received, and displaying the two-dimensional codes to be identified in the previous time period when the running state information sent by the equipment in the local area network in the current time period is not received;
The operation and maintenance device is used for identifying the two-dimensional code to be identified to obtain identification information, sending the identification information to the server, and not sending information to the server when the two-dimensional code to be identified in the previous period is judged to be identical to the two-dimensional code to be identified in the current period;
And the server is used for receiving the identification information and sending abnormal prompt information to the monitoring terminal when detecting that the information is not received beyond the first preset time period, wherein the abnormal prompt information is used for indicating that equipment in the local area network fails.
In some embodiments of the present application, the operation and maintenance device is specifically configured to determine that the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period when the embedded device receives the running state information in the previous period and does not receive the running state information in the current period.
In some embodiments of the present application, the operation and maintenance device is further configured to identify the two-dimensional code to be identified in the current period to obtain identification information when it is determined that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period, and send the identification information to a server.
In some embodiments of the present application, the operation and maintenance device is specifically configured to determine that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period when the embedded device receives the operation state information in the previous period and the operation state information in the current period respectively.
In some embodiments of the present application, the embedded device is specifically configured to convert, when receiving operation state information of a previous period, a plurality of operation state information of the previous period into a first two-dimensional code to be identified, and convert, when receiving operation state information of a current period, the plurality of operation state information of the current period into a second two-dimensional code to be identified, where the first two-dimensional code to be identified is different from the second two-dimensional code to be identified.
In some embodiments of the present application, the embedded device includes:
The control module is connected with the local area network equipment and is used for converting the operation state information in the period into the two-dimensional code to be identified when receiving the operation state information sent by the local area network equipment in the period;
And the screen is connected with the control module and is used for displaying the two-dimensional code to be identified in the last period or the two-dimensional code to be identified in the current period.
In some embodiments of the present application, the operation and maintenance device includes a scanner, a judging module and a processing module;
the position of the scanner corresponds to the position of the screen, and the scanner is used for identifying the two-dimensional code to be identified to obtain identification information;
The judging module is respectively connected with the scanner and the processing module and is used for judging whether the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period;
the processing module is connected with the server and is used for not sending information to the server when the two-dimensional code to be identified in the previous period is judged to be the same as the two-dimensional code to be identified in the current period, and sending identification information to the server when the two-dimensional code to be identified in the previous period is judged to be different from the two-dimensional code to be identified in the current period.
In some embodiments of the present application, the abnormality detection apparatus further includes an alarm connected to the control module, and configured to send an alarm signal when it is detected that the embedded device does not receive the running state information within a second preset period of time.
In some embodiments of the present application, the embedded device is specifically configured to receive, when the device in the local area network is in a first operating state, operating state information of the device in the local area network, and not receive, when the device in the local area network is in a second operating state, the operating state information of the device in the local area network.
In some embodiments of the present application, the running state information includes a heartbeat packet.
According to another aspect of the embodiment of the application, an abnormality detection system is provided, which comprises any one of the abnormality detection devices and an in-local-area-network device, wherein the abnormality detection device is used for detecting whether the in-local-area-network device has a fault or not.
In the technical scheme provided by the embodiments of the application, the abnormality detection device and the abnormality detection system can detect whether equipment in a local area network has faults or not, and comprise an embedded device, an operation and maintenance device and a server, wherein the embedded device is used for converting a plurality of operation state information in a period into two-dimension codes to be identified and displaying the two-dimension codes when receiving the plurality of operation state information sent by the equipment in the local area network in the previous period, and displaying the two-dimension codes to be identified in the previous period when not receiving the operation state information sent by the equipment in the local area network in the current period, the operation and maintenance device is used for identifying the two-dimension codes to be identified to obtain identification information, sending the identification information to the server, and not sending information to the server when judging that the two-dimension codes to be identified in the previous period are identical with the two-dimension codes to be identified in the current period, and the server is used for receiving the identification information and sending abnormality prompt information to a monitoring terminal when detecting that the information is not received in the current period exceeding a first preset period, and the abnormality prompt information is used for indicating that the equipment in the local area network has faults. When the two-dimensional code to be identified in the previous time period is the same as the two-dimensional code to be identified in the current time period, no information is sent to the server, so that the server determines that equipment in the local area network fails through the fact that the information is not received, abnormal prompt information is timely sent, a user is conveniently notified in time, the failure is timely found, the user can conveniently process the failure, and safety is improved.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application as claimed.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and together with the description, serve to explain the principles of the application. It is evident that the drawings in the following description are only some embodiments of the present application and that other drawings may be obtained from these drawings without inventive effort for a person of ordinary skill in the art. In the drawings:
Fig. 1 shows a schematic configuration of an abnormality detection system suitable for implementing an embodiment of the present application.
Fig. 2 shows a schematic structural diagram of an embedded device suitable for implementing an embodiment of the application.
Fig. 3 shows a schematic diagram of an operation and maintenance device suitable for implementing an embodiment of the present application.
Detailed Description
Example embodiments will now be described more fully with reference to the accompanying drawings. However, the exemplary embodiments can be embodied in many different forms and should not be construed as limited to the examples set forth herein, but rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art.
Furthermore, the described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of embodiments of the application. One skilled in the relevant art will recognize, however, that the application may be practiced without one or more of the specific details, or with other methods, components, devices, steps, etc. In other instances, well-known methods, devices, implementations, or operations are not shown or described in detail to avoid obscuring aspects of the application.
The block diagrams depicted in the figures are merely functional entities and do not necessarily correspond to physically separate entities. That is, the functional entities may be implemented in software, or in one or more hardware modules or integrated circuits, or in different networks and/or processor devices and/or microcontroller devices.
The flow diagrams depicted in the figures are exemplary only, and do not necessarily include all of the elements and operations/steps, nor must they be performed in the order described. For example, some operations/steps may be decomposed, and some operations/steps may be combined or partially combined, so that the order of actual execution may be changed according to actual situations.
It should be noted that the term "plurality" as used herein means two or more. "and/or" describes the association relationship of the association object, and indicates that there may be three relationships, for example, a and/or B may indicate that there are three cases of a alone, a and B together, and B alone. The character "/" generally indicates that the context-dependent object is an "or" relationship.
As shown in fig. 1, the abnormality detection apparatus 100 of the present application is used for detecting whether the device 10 in the lan has a fault, and the abnormality detection apparatus 100 includes an embedded device 20, an operation and maintenance device 30, a server 40, and a monitoring terminal 50.
The embedded device 20 is configured to convert, when receiving a plurality of operation status information sent by the device 10 in the local area network in a previous period, the plurality of operation status information in the period into a two-dimensional code to be identified and display the two-dimensional code, and when not receiving the operation status information sent by the device 10 in the local area network in a current period, display the two-dimensional code to be identified in the previous period, where in an embodiment, the operation status information may include a heartbeat packet. The duration of the previous period is equal to the duration of the current period, and can be specifically set according to requirements.
The operation and maintenance device 30 is configured to identify the two-dimensional code to be identified, obtain identification information, send the identification information to the server 40, and not send information to the server 40 when it is determined that the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period;
And the server 40 is configured to receive the identification information and send, when it is detected that no information is received beyond a first preset duration, an abnormality prompting message to the monitor terminal 50, where the abnormality prompting message is used to instruct the device 10 in the local area network to malfunction, so as to prompt the user.
In an embodiment, the operation and maintenance device 30 is specifically configured to determine that the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period when the embedded device 20 receives the operation state information in the previous period and does not receive the operation state information in the current period.
In an embodiment, the operation and maintenance device 30 is further configured to identify the two-dimensional code to be identified in the current period to obtain identification information when it is determined that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period, and send the identification information to the server 40.
In an embodiment, the operation and maintenance device 30 is specifically configured to determine that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period when the embedded device 20 receives the operation state information in the previous period and the operation state information in the current period respectively.
In an embodiment, the embedded device 20 is specifically configured to convert, when receiving the running state information of a previous period, the running state information of the previous period into a first two-dimensional code to be identified, and convert, when receiving the running state information of a current period, the running state information of the current period into a second two-dimensional code to be identified, where the first two-dimensional code to be identified is different from the second two-dimensional code to be identified.
In one embodiment, as shown in fig. 2, the embedded appliance 20 includes a control module 21 and a screen 22.
The control module 21 is respectively connected with the local area network equipment 10 and the screen 22, and the control module 21 is used for converting the plurality of operation state information in the period into a two-dimensional code to be identified when receiving the plurality of operation state information sent by the local area network equipment 10 in the last period;
And the screen 22 is used for displaying the two-dimensional code to be identified in the previous period or the current period. That is, the screen 22 may display the first two-dimensional code to be identified or the second two-dimensional code to be identified.
In an embodiment, as shown in fig. 3, the operation and maintenance device 30 includes a scanner 31, a judging module 32 and a processing module 33, where the position of the scanner 31 corresponds to the position of the screen 22, the judging module 32 is connected to the scanner 31 and the processing module 33, and the processing module 33 is connected to the server 40;
the scanner 31 is configured to identify the two-dimensional code to be identified, so as to obtain identification information;
The judging module 32 is configured to judge whether the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period;
The processing module 33 is configured to not send information to the server 40 when it is determined that the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period, and send identification information to the server 40 when it is determined that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period.
In an embodiment, returning to fig. 1, the abnormality detection apparatus 100 further includes an alarm 60, where the alarm 60 is connected to the control module 21, and the alarm 60 is configured to send an alarm signal when it is detected that the embedded device 20 does not receive the running state information within a second preset time period. The first preset time length and the second preset time length can be set according to requirements.
The embedded device 20 is specifically configured to receive the operation state information of the local area network device 10 when the local area network device 10 is in the first operation state, and not receive the operation state information of the local area network device 10 when the local area network device 10 is in the second operation state. The first operating state is a normal operating state, i.e. a state without failure, and the second operating state is an abnormal operating state, i.e. a failure state. In one approach, the running state information is sent to the embedded device 20 at intervals when the in-lan device 10 is in the first running state, and the sending of the running state information to the embedded device is suspended when the in-lan device 10 is in the second running state.
In one embodiment, the apparatus operates as follows:
When the local area network equipment 10 does not have a fault, the local area network equipment 10 and the embedded device 20 (local area network single chip microcomputer) perform information intercommunication through the local area network, the local area network equipment 10 sends a heartbeat packet for normal operation of the equipment to the embedded device 20 at intervals (such as 2 s), and the embedded device 20 gathers all received information to generate two-dimensional code information after receiving the heartbeat packet for a period of time;
After the two-dimensional code is normally generated, the operation and maintenance device 30 receives the normal state information of the equipment 10 in the local area network by scanning the two-dimensional code, and the operation and maintenance device 30 analyzes and converts the received two-dimensional code data into binary data and sends the binary data to the server 40;
If the equipment 10 in the local area network fails, the heartbeat packet is not sent to the embedded device 20, the two-dimension code displayed by the embedded device 20 is kept unchanged all the time, the operation and maintenance device 30 does not send the same data to the server 40 when receiving the same two-dimension code, the server 40 judges that the equipment 10 in the local area network is out of connection because of not receiving new data for a long time, and fault information is sent to the mobile client for alarming.
In addition, when the in-lan device 10 does not transmit the heartbeat packet information to the embedded apparatus 20 for a preset period of time (for example, 3 minutes), the alarm 60 considers that the in-lan device 10 has a connection failure (i.e., the in-lan device 10 is abnormal), and the alarm alarms.
The operation and maintenance device 30 typically employs a wide area network to transmit signals, such as a 4G network. I.e., the operation and maintenance device 30 establishes a connection with the server 40 through the wide area network.
In connection with fig. 1, the present application also provides an abnormality detection system 200, including any one of the abnormality detection apparatuses 100 described above and an in-lan apparatus 10 for detecting whether or not the in-lan apparatus has failed.
In one embodiment, the running state information is sent to the embedded device 20 at intervals when the in-lan device 10 is in the first running state, and the sending of the running state information to the embedded device 20 is suspended when the in-lan device 10 is in the second running state.
The device and the system for detecting the abnormality can detect whether the equipment in the local area network has faults or not, and comprise an embedded device, an operation and maintenance device and a server, wherein the embedded device is used for converting a plurality of operation state information in a period of time into two-dimension codes to be identified and displaying the two-dimension codes when receiving the plurality of operation state information sent by the equipment in the local area network in the last period of time, and displaying the two-dimension codes to be identified in the last period of time when not receiving the operation state information sent by the equipment in the local area network in the current period of time, the operation and maintenance device is used for identifying the two-dimension codes to be identified to obtain identification information, sending the identification information to the server and not sending information to the server when judging that the two-dimension codes to be identified in the last period of time are identical to the two-dimension codes to be identified in the current period of time, and the server is used for receiving the identification information and sending abnormality prompt information to the monitoring terminal when detecting that the information is not received in the first preset period of time is exceeded, and the abnormality prompt information is used for indicating that the equipment in the local area network has faults. When the two-dimensional code to be identified in the previous time period is the same as the two-dimensional code to be identified in the current time period, no information is sent to the server, so that the server determines that equipment in the local area network fails through the fact that the information is not received, abnormal prompt information is timely sent, a user is conveniently notified in time, the failure is timely found, the user can conveniently process the failure, and safety is improved.
Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the embodiments disclosed herein. This application is intended to cover any variations, uses, or adaptations of the application following, in general, the principles of the application and including such departures from the present disclosure as come within known or customary practice within the art to which the application pertains.
It is to be understood that the application is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the application is limited only by the appended claims.

Claims (8)

1. An anomaly detection device for detecting whether a device in a local area network has a fault, wherein the anomaly detection device and the device in the local area network perform information intercommunication through the local area network, and the anomaly detection device comprises:
The embedded device is used for converting the operation state information in the period into two-dimensional codes to be identified and displaying the two-dimensional codes when receiving the operation state information sent by the equipment in the local area network in the previous period, and displaying the two-dimensional codes to be identified in the previous period when not receiving the operation state information sent by the equipment in the local area network in the current period, wherein the operation state information comprises a heartbeat packet;
The operation and maintenance device is used for identifying the two-dimensional code to be identified to obtain identification information, and sending the identification information to the server when the two-dimensional code to be identified in the previous period is judged to be different from the two-dimensional code to be identified in the current period;
the server is used for receiving the identification information and sending abnormal prompt information to the monitoring terminal when detecting that the information is not received beyond a first preset time period, wherein the abnormal prompt information is used for indicating that equipment in the local area network fails;
wherein the embedded device comprises:
The control module is connected with the local area network equipment and is used for converting the operation state information in the period into the two-dimensional code to be identified when receiving the operation state information sent by the local area network equipment in the period;
the screen is connected with the control module and is used for displaying the two-dimensional code to be identified in the previous time period or the two-dimensional code to be identified in the current time period;
the operation and maintenance device comprises a scanner, a judging module and a processing module;
the position of the scanner corresponds to the position of the screen, and the scanner is used for identifying the two-dimensional code to be identified to obtain identification information;
The judging module is respectively connected with the scanner and the processing module and is used for judging whether the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period;
the processing module is connected with the server and is used for not sending information to the server when the two-dimensional code to be identified in the previous period is judged to be the same as the two-dimensional code to be identified in the current period, and sending identification information to the server when the two-dimensional code to be identified in the previous period is judged to be different from the two-dimensional code to be identified in the current period.
2. The anomaly detection apparatus according to claim 1, wherein the operation and maintenance device is specifically configured to determine that the two-dimensional code to be identified in the previous period is the same as the two-dimensional code to be identified in the current period when the embedded device receives the operation state information in the previous period and does not receive the operation state information in the current period.
3. The abnormality detection apparatus according to claim 1, wherein the operation and maintenance device is further configured to identify the two-dimensional code to be identified in the current period to obtain identification information when it is determined that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period, and send the identification information to the server.
4. The anomaly detection apparatus according to claim 3, wherein the operation and maintenance device is specifically configured to determine that the two-dimensional code to be identified in the previous period is different from the two-dimensional code to be identified in the current period when the embedded device receives the operation state information in the previous period and the operation state information in the current period, respectively.
5. The anomaly detection apparatus of claim 3, wherein the embedded device is specifically configured to, when receiving operation state information of a previous period, convert a plurality of operation state information of the previous period into a first two-dimensional code to be identified, and when receiving operation state information of a current period, convert a plurality of operation state information of the current period into a second two-dimensional code to be identified, wherein the first two-dimensional code to be identified is different from the second two-dimensional code to be identified.
6. The anomaly detection apparatus of claim 1, further comprising an alarm coupled to the control module, the alarm configured to emit an alarm signal when it is detected that the embedded device has not received operational status information within a second predetermined period of time.
7. The anomaly detection device of claim 1, wherein the embedded apparatus is configured to receive operational status information of the device within the local area network when the device within the local area network is in a first operational state, and not receive operational status information of the device within the local area network when the device within the local area network is in a second operational state.
8. An abnormality detection system comprising the abnormality detection apparatus according to any one of claims 1 to 7 and an in-local area network device for detecting whether or not the in-local area network device has failed.
CN202210985110.2A 2022-08-17 2022-08-17 Anomaly detection equipment and systems Active CN115361199B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210985110.2A CN115361199B (en) 2022-08-17 2022-08-17 Anomaly detection equipment and systems

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210985110.2A CN115361199B (en) 2022-08-17 2022-08-17 Anomaly detection equipment and systems

Publications (2)

Publication Number Publication Date
CN115361199A CN115361199A (en) 2022-11-18
CN115361199B true CN115361199B (en) 2024-12-20

Family

ID=84003274

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210985110.2A Active CN115361199B (en) 2022-08-17 2022-08-17 Anomaly detection equipment and systems

Country Status (1)

Country Link
CN (1) CN115361199B (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2009301481A (en) * 2008-06-17 2009-12-24 Toshiba Corp Maintenance service support system
CN108920337A (en) * 2018-06-27 2018-11-30 北京信安世纪科技股份有限公司 A kind of device exception information methods of exhibiting and computer equipment

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7365644B2 (en) * 2005-10-11 2008-04-29 Inventec Corporation Method and device for wireless monitoring of system status
US20070294380A1 (en) * 2006-06-14 2007-12-20 Kabushiki Kaisha Toshiba System and method for periodic server-to-client data delivery
JP2009019951A (en) * 2007-07-11 2009-01-29 Ricoh Elemex Corp Fault information display method, fault information output device, facility apparatus with the device, home electric appliances, information processor, and fault information display system
JP7006396B2 (en) * 2018-03-12 2022-01-24 株式会社リコー Maintenance system, maintenance server, maintenance method
CN111161445A (en) * 2020-01-09 2020-05-15 安徽乾坤电力工程有限公司 Electric power inspection system
CN112905373B (en) * 2021-02-04 2024-09-24 苏州源控电子科技有限公司 Startup abnormity detection method, device and system of OPS equipment and interactive flat plate

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2009301481A (en) * 2008-06-17 2009-12-24 Toshiba Corp Maintenance service support system
CN108920337A (en) * 2018-06-27 2018-11-30 北京信安世纪科技股份有限公司 A kind of device exception information methods of exhibiting and computer equipment

Also Published As

Publication number Publication date
CN115361199A (en) 2022-11-18

Similar Documents

Publication Publication Date Title
KR100898339B1 (en) Autonomous error handling system and method for home network environment
US20220230521A1 (en) System and process for distributed network of redundant central stations
US9257032B2 (en) System and method for emergency communication in a TCP/IP based redundant fire panel network
EP2456127A1 (en) Method, system and apparatus for diagnosing physical downlink failure
US20160360555A1 (en) Bidirectional redundant mesh networks
JP2003281639A (en) Fire and abnormality discrimination method for sensor line and fire reporting system
CN115361199B (en) Anomaly detection equipment and systems
CN113381884B (en) Full link monitoring method and device for monitoring alarm system
JP2008020969A (en) Process and method for abnormality/trouble report for monitoring control system
CN117389845B (en) Server monitoring system with abnormal alarm function
CN115801550B (en) A method and device for isolating a web application service node
JP2005322122A (en) Controller of security system
CN110572292B (en) High availability system and method based on unidirectional transmission link
EP4312166A1 (en) System and method for identifying performance issues with service providers that provide a service to support a security system of a facility
KR101779117B1 (en) Interface device for remote monitering and control
JPH06177902A (en) Fault monitor for communication network system
CN116088480B (en) A device linkage control method and device control system
US9594355B2 (en) Wireless monitoring method and device thereof
JP3615513B2 (en) Network monitoring system, interface device and monitoring device
JP2003150407A (en) Automatic obstacle restoration system and device thereof
JP4282463B2 (en) Remote monitoring system
CN116319247A (en) Intelligent computer network information safety controller
JPH0581202A (en) Instantaneous fault detection system for communication network equipment
CN118567327A (en) Fault detection system and security inspection machine to security inspection machine
JP2007005947A (en) Transmission test system, network apparatus, and suspicious fault location isolating method employed for them

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant