Specific embodiment
The embodiment of the present application provides a kind of region method for detecting abnormality and edge calculations equipment based on edge calculations.
In order to make those skilled in the art better understand the technical solutions in the application, below in conjunction with the application reality
The attached drawing in example is applied, the technical scheme in the embodiment of the application is clearly and completely described, it is clear that described implementation
Example is merely a part but not all of the embodiments of the present application.Based on the embodiment in the application, this field is common
The application protection all should belong in technical staff's every other embodiment obtained without creative efforts
Range.
Fig. 1 is region abnormality detection schematic diagram of a scenario of the embodiment of the present application based on edge calculations.
As shown in Figure 1, internet of things equipment can acquire a variety of data, by taking smart phone as an example, smart phone can pass through acceleration
Degree meter acquisition speed data counts acquisition gesture data by near field, movement range data is acquired by gyroscope, pass through pressure gauge
Acquisition touch screen pressure data, by illumination meter acquire intensity of illumination data, by thermometer temperature collection data, pass through hygrometer
It acquires humidity data, RPC data, etc. is acquired by barometer.
After internet of things equipment acquires data, the corresponding characteristic of internet of things equipment can be formed, edge calculations is uploaded to and sets
In standby.Edge calculations equipment can provide IOT terminal and calculate service, and the characteristic uploaded to multiple internet of things equipment is processed
Processing, characteristic needed for forming abnormality detection model, is input in IOT termination decision model and carries out decision.In addition, edge
Characteristic can be also stored in edge calculations server-side by calculating equipment to be backed up, using the IOT as edge calculations equipment
The training sample source of termination decision model.
It should be understood that the limitation of storage capacity and computing capability due to edge calculations equipment, the simple edge calculations that rely on are set
The standby decision carried out abnormality detection, it is possible that biggish erroneous judgement, be based particularly on the decision trees of multiple internet of things equipment into
Row is when judging, adjudicates as exception and judgement when being that normal ratio is relatively close to.At this time, it may be necessary to be carried out by cloud/server-side different
The decision often detected.Wherein, cloud/server-side stores more sample datas, has bigger calculating capacity, court verdict is more
It is accurate.In this way, edge calculations equipment and cloud/server-side can respectively share the decision task of part, for example, respective 50%,
Or 4:6,7:3, etc..
In the following, being further described in conjunction with Fig. 1 to the technical solution of the embodiment of the present application.
Fig. 2 is region method for detecting abnormality flow chart of the one embodiment based on edge calculations of the application.The method of Fig. 1
It can be executed by edge calculations equipment.It should be understood that edge calculations (Edge computing) equipment of the embodiment of the present application, refers to and leans on
The network edge side apparatus of nearly data source header, can converged network, calculating, storage, application core ability etc. open platform, nearby
The crucial requirement for servicing and meeting security and privacy protection etc. is provided.In the embodiment of the present application, the method for Fig. 1 can wrap
It includes:
S210 obtains the monitoring characteristic for accessing multiple internet of things equipment acquisition of the edge calculations equipment.
It should be understood that the monitoring characteristic of the embodiment of the present application internet of things equipment acquisition, may include internet of things equipment sheet
At least one of the environmental data of operation characteristic data and the internet of things equipment acquisition of body.
The environmental data of internet of things equipment acquisition, the data acquired when may include internet of things equipment monitoring environment, for example,
The environment temperature of thermometer acquisition, the air humidity of hygrometer acquisition, the geostatic pressure data of geostatic pressure meter acquisition, microphone
The sonic data of acquisition, the image data, etc. of camera acquisition.
The operation characteristic data of internet of things equipment itself may include the operating characteristics that user's operation internet of things equipment generates
Data also may include other operation datas of internet of things equipment timing monitoring collection.What user's operation internet of things equipment generated
Operating characteristics data, such as the speed data acquired in smart phone by accelerometer, the posture number acquired by near field meter
According to, the movement range data that are acquired by gyroscope, the touch screen pressure data acquired by pressure gauge, acquired by illumination meter
Intensity of illumination data, the temperature data acquired by thermometer are acquired by the humidity data of hygrometer acquisition, by barometer
Data of RPC, etc.
In addition, timestamp information can also be carried in monitoring characteristic, for identifying the time of origin of acquisition data.
Optionally, the multiple internet of things equipment belongs to same designated area.It should be understood that in the embodiment of the present application, it is described
Edge calculations equipment can be monitored the internet of things equipment in specified region, to obtain the monitoring feature of internet of things equipment acquisition
Data.The specified region mentioned in the embodiment of the present application, for example, it may be some smart home, some company office space,
Some mansion, etc..Abnormality detection at this time, can be used for detecting whether the specified region is abnormal.
By taking smart home as an example, the characteristic of internet of things equipment acquisition, such as may include the unlatching thing of intelligent door and window
Part and/or close event, the voice data of microphone acquisition, the light intensity data of light intensity inductor acquisition, the opening thing of refrigerator
Part and/or close event, power-on event of TV, etc..
S220, using the monitoring characteristic of the multiple internet of things equipment as the defeated of abnormality detection Random Forest model
Enter, to predict whether the specified region is abnormal.Wherein, the abnormality detection Random Forest model includes based on described more
At least partly decision tree in more random forest decision trees that the monitoring characteristic of a internet of things equipment is respectively trained.
Or by taking smart home as an example, it is assumed that having a stranger, 10:00 enters the smart home on weekdays, at this time intelligence
The data for the acquisitions such as characteristic, such as intelligent door and window, microphone that internet of things equipment acquires in household will obviously extremely in
Usual data, the history feature data based on internet of things equipment carry out the abnormality detection random forest that random forest training obtains
It is abnormality that model, which will be easily identified out this state,.
In the embodiment of the present application, the monitoring feature of multiple internet of things equipment of same edge calculations equipment is accessed by acquisition
Data, and the abnormality detection forest model for being input to the history monitoring characteristic training based on multiple internet of things equipment carries out
Prediction, so that the current acquisition data based on multiple internet of things equipment differentiate whether specified region is abnormal, to realize region
Abnormality detection.
It should be understood, of course, that if being determined as abnormality, it at this time can be based at the corresponding processing strategie of abnormality
Reason, for example, being sounded an alarm by alert device;Send a warning message to designated person, etc..The embodiment of the present application does not make this
Limitation.
Particularly, when multiple internet of things equipment is wearable device, the use that region is wearable device is specified to use
In the preset range of family periphery, edge calculations equipment is the intelligent terminal using user.At this point, abnormality detection random forest mould
Type may also include the random forest decision tree that the monitoring characteristic training based on intelligent terminal acquisition obtains.
Optionally, if exporting the random forest decision tree ratio of court verdict in the abnormality detection Random Forest model
Less than preset threshold, then the monitoring characteristic of the multiple internet of things equipment is reported to the cloud of the edge calculations equipment access
Server is held, is made decisions with the abnormality detection Random Forest model by the movement server, the movement server
Abnormality detection Random Forest model include the monitoring characteristic based on the multiple internet of things equipment be respectively trained it is more
Random forest decision tree;
The court verdict of the cloud server feedback is received, and is exported the court verdict as prediction result.
As shown in Figure 1, when edge calculations service accurately can not carry out decision, can report cloud/server end by cloud/
Server end carries out decision.It should be understood, of course, that also including that the monitoring based on multiple internet of things equipment is special in cloud/server end
The abnormality detection Random Forest model that sign data training obtains.
Furthermore, it is to be understood that the time span of the data of cloud/server end abnormality detection Random Forest model training can
It is longer with the data of the abnormality detection Random Forest model training than edge calculations equipment, for example, cloud/server end exception
The training data that Random Forest model uses 3 months is detected, the abnormality detection Random Forest model of edge calculations equipment uses 1 week
Training data, etc..
Furthermore, it is to be understood that the decision tree that cloud/server end abnormality detection Random Forest model includes can compare edge
The decision tree for calculating the abnormality detection Random Forest model of equipment is more, for example, cloud/server end abnormality detection is gloomy at random
Woods model includes 20 decision trees, and the abnormality detection Random Forest model of edge calculations equipment includes 6 decision trees, etc..
It should be understood, of course, that further, the method also includes:
The monitoring characteristic of the multiple internet of things equipment of acquisition is uploaded into the cloud server, to carry out institute
State the training of the abnormality detection Random Forest model of cloud server.
Furthermore, it is to be understood that edge calculations equipment can be based on scheduled duration range before current time in the embodiment of the present application
The monitoring characteristic that interior internet of things equipment reports, the corresponding random forest decision tree of training internet of things equipment, one random gloomy
Woods decision tree corresponds to an internet of things equipment.In other words, target internet of things equipment is in the more random forest decision trees
In corresponding target random forest decision tree be to be adopted based on the edge calculations equipment within the scope of scheduled duration before current time
The monitoring characteristic of the target internet of things equipment of collection carries out what Random Forest model training obtained.
Optionally, as one embodiment, when duration of the acquisition time apart from current time of the training sample is greater than
When scheduled duration, training sample weight factor in trained random forest decision tree is 0.
In the embodiment of the present application, by the way that the training of the sample data of scheduled duration will be greater than apart from current time duration interval
Weight is set as 0, thereby may be ensured that the abnormality detection Random Forest model being made of random forest decision tree based on nearest
Sample data is predicted.
Optionally, as another embodiment, at predetermined time intervals, based on institute within the scope of scheduled duration before current time
State the monitoring characteristic of multiple internet of things equipment, respectively to the corresponding random forest decision tree of the multiple internet of things equipment into
Row training, thereby may be ensured that the abnormality detection Random Forest model being made of random forest decision tree based on nearest sample number
According to being predicted.
Fig. 3 is the schematic diagram of the embodiment of the present application edge calculations equipment training abnormality detection Random Forest model.Such as Fig. 3 institute
Show, edge calculations equipment can be based on the monitoring characteristic that each internet of things equipment reports, Independent modeling, beta pruning, assessment etc..It is optional
Ground, the method that edge calculations equipment executes may also include that the random forest of abnormality detection Random Forest model described in maintenance management
Decision tree.
Optionally, as one embodiment, abnormality detection Random Forest model described in edge calculations equipment maintenance and management
Random forest decision tree includes:
Based on the practical abnormal conditions in the predicting abnormality result and the historical time section in historical time section to described
The corresponding more random forest decision trees of multiple internet of things equipment are assessed;
Cut operator is carried out to the abnormality detection Random Forest model according to assessment result.
Optionally, as one embodiment, abnormality detection Random Forest model described in edge calculations equipment maintenance and management
Random forest decision tree includes:
When detecting that the target internet of things equipment in multiple internet of things equipment breaks down, by the target internet of things equipment
It is removed in the corresponding target random forest decision tree of the abnormality detection Random Forest model.
Optionally, as one embodiment, abnormality detection Random Forest model described in edge calculations equipment maintenance and management
Random forest decision tree includes:
When the monitoring characteristic for not receiving the target internet of things equipment in multiple internet of things equipment in preset time period,
The target internet of things equipment is removed in the corresponding target random forest decision tree of the abnormality detection Random Forest model.
Optionally, as one embodiment, abnormality detection Random Forest model described in edge calculations equipment maintenance and management
Random forest decision tree includes:
When detecting that newly-increased internet of things equipment accesses the edge calculations equipment, the newly-increased internet of things equipment is acquired
It monitors characteristic and trains the corresponding random forest decision tree of the newly-increased internet of things equipment;
If the number of training of the newly-increased internet of things equipment is greater than the first preset threshold, by the newly-increased Internet of Things
The corresponding random forest decision tree of equipment is added in the abnormality detection Random Forest model.
Optionally, as one embodiment, abnormality detection Random Forest model described in edge calculations equipment maintenance and management
Random forest decision tree includes:
When detecting that newly-increased internet of things equipment accesses the edge calculations equipment, the newly-increased internet of things equipment is acquired
It monitors characteristic and trains the corresponding random forest decision tree of the newly-increased internet of things equipment;
If it is pre- that the acquisition time duration of the monitoring characteristic for training the newly-increased internet of things equipment is greater than second
If threshold value, then the corresponding random forest decision tree of the newly-increased internet of things equipment is added to the abnormality detection random forest mould
In type.
Optionally, as one embodiment, the method also includes:
When predicting that the specified region is abnormal, the payment for accessing the payment devices of the edge calculations equipment is prevented
Operation;And/or
When predicting the specified region no exceptions, allow to access the branch of the payment devices of the edge calculations equipment
Pay operation;
Wherein, the delivery operation that the edge calculations equipment interconnection enters the payment devices carries out abnormality detection.
It is above-mentioned that this specification specific embodiment is described.Other embodiments are in the scope of the appended claims
It is interior.In some cases, the movement recorded in detail in the claims or step can be come according to the sequence being different from embodiment
It executes and desired result still may be implemented.In addition, process depicted in the drawing not necessarily require show it is specific suitable
Sequence or consecutive order are just able to achieve desired result.In some embodiments, multitasking and parallel processing be also can
With or may be advantageous.
Fig. 4 is the structural schematic diagram of one embodiment electronic equipment of the application.Referring to FIG. 4, in hardware view, the electricity
Sub- equipment includes processor, optionally further comprising internal bus, network interface, memory.Wherein, memory may be comprising interior
It deposits, such as high-speed random access memory (Random-Access Memory, RAM), it is also possible to further include non-volatile memories
Device (non-volatile memory), for example, at least 1 magnetic disk storage etc..Certainly, which is also possible that other
Hardware required for business.
Processor, network interface and memory can be connected with each other by internal bus, which can be ISA
(Industry Standard Architecture, industry standard architecture) bus, PCI (Peripheral
Component Interconnect, Peripheral Component Interconnect standard) bus or EISA (Extended Industry Standard
Architecture, expanding the industrial standard structure) bus etc..The bus can be divided into address bus, data/address bus, control always
Line etc..Only to be indicated with a four-headed arrow in Fig. 4, it is not intended that an only bus or a type of convenient for indicating
Bus.
Memory, for storing program.Specifically, program may include program code, and said program code includes calculating
Machine operational order.Memory may include memory and nonvolatile memory, and provide instruction and data to processor.
Processor is from the then operation into memory of corresponding computer program is read in nonvolatile memory, in logical layer
The region abnormal detector based on edge calculations is formed on face.Processor executes the program that memory is stored, and specifically uses
The operation below executing:
The monitoring characteristic for accessing multiple internet of things equipment acquisition of the edge calculations equipment is obtained, wherein described more
A internet of things equipment belongs to same designated area;
Using the monitoring characteristic of the multiple internet of things equipment as the input of abnormality detection Random Forest model, with pre-
Survey whether the specified region is abnormal, wherein the abnormality detection Random Forest model includes being based on the multiple Internet of Things
At least partly decision tree in more random forest decision trees that the monitoring characteristic of net equipment is respectively trained.
The side that the region abnormal detector based on edge calculations disclosed in the above-mentioned embodiment illustrated in fig. 2 such as the application executes
Method can be applied in processor, or be realized by processor.Processor may be a kind of IC chip, with signal
Processing capacity.During realization, each step of the above method can by the integrated logic circuit of the hardware in processor or
The instruction of person's software form is completed.Above-mentioned processor can be general processor, including central processing unit (Central
Processing Unit, CPU), network processing unit (Network Processor, NP) etc.;It can also be Digital Signal Processing
Device (Digital Signal Processor, DSP), specific integrated circuit (Application Specific Integrated
Circuit, ASIC), field programmable gate array (Field-Programmable Gate Array, FPGA) or other can
Programmed logic device, discrete gate or transistor logic, discrete hardware components.It may be implemented or execute the application implementation
Disclosed each method, step and logic diagram in example.General processor can be microprocessor or the processor can also be with
It is any conventional processor etc..The step of method in conjunction with disclosed in the embodiment of the present application, can be embodied directly in hardware decoding
Processor executes completion, or in decoding processor hardware and software module combination execute completion.Software module can position
In random access memory, flash memory, read-only memory, programmable read only memory or electrically erasable programmable memory, register
In the storage medium of equal this fields maturation.The storage medium is located at memory, and processor reads the information in memory, in conjunction with it
Hardware completes the step of above method.
The method that the electronic equipment can also carry out Fig. 2, and realize the region abnormal detector based on edge calculations or side
Edge calculates equipment in Fig. 1, the function of embodiment illustrated in fig. 2, and details are not described herein for the embodiment of the present application.
Certainly, other than software realization mode, other implementations are not precluded in the electronic equipment of the application, for example patrol
Collect device or the mode of software and hardware combining etc., that is to say, that the executing subject of following process flow is not limited to each patrol
Unit is collected, hardware or logical device are also possible to.
The embodiment of the present application also proposed a kind of computer readable storage medium, the computer-readable recording medium storage one
A or multiple programs, the one or more program include instruction, and the instruction is when by the portable electronic including multiple application programs
When equipment executes, the method that the portable electronic device can be made to execute embodiment illustrated in fig. 2, and be specifically used for executing following behaviour
Make:
The monitoring characteristic for accessing multiple internet of things equipment acquisition of the edge calculations equipment is obtained, wherein described more
A internet of things equipment belongs to same designated area;
Using the monitoring characteristic of the multiple internet of things equipment as the input of abnormality detection Random Forest model, with pre-
Survey whether the specified region is abnormal, wherein the abnormality detection Random Forest model includes being based on the multiple Internet of Things
At least partly decision tree in more random forest decision trees that the monitoring characteristic of net equipment is respectively trained.
Fig. 5 is the structural schematic diagram of one embodiment edge calculations equipment of the application.Referring to FIG. 5, in a kind of software
In embodiment, edge calculations equipment can include:
Module 510 is obtained, the monitoring characteristic for accessing multiple internet of things equipment acquisition of the edge calculations equipment is obtained
According to wherein the multiple internet of things equipment belongs to same designated area;
Prediction module 520, using the monitoring characteristic of the multiple internet of things equipment as abnormality detection random forest mould
The input of type, to predict whether the specified region is abnormal, wherein the abnormality detection Random Forest model includes being based on
In the more random forest decision trees that the monitoring characteristic of the multiple internet of things equipment is respectively trained at least partly
Decision tree.
The method that the edge calculations equipment can also carry out Fig. 2, and realize the region abnormal detector based on edge calculations
Or edge calculations equipment, in Fig. 1, the function of embodiment illustrated in fig. 2, details are not described herein for the embodiment of the present application.
In short, being not intended to limit the protection scope of the application the foregoing is merely the preferred embodiment of the application.
Within the spirit and principles of this application, any modification, equivalent replacement, improvement and so on should be included in the application's
Within protection scope.
System, device, module or the unit that above-described embodiment illustrates can specifically realize by computer chip or entity,
Or it is realized by the product with certain function.It is a kind of typically to realize that equipment is computer.Specifically, computer for example may be used
Think personal computer, laptop computer, cellular phone, camera phone, smart phone, personal digital assistant, media play
It is any in device, navigation equipment, electronic mail equipment, game console, tablet computer, wearable device or these equipment
The combination of equipment.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method
Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data.
The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves
State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable
Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM),
Digital versatile disc (DVD) or other optical storage, magnetic cassettes, tape magnetic disk storage or other magnetic storage devices
Or any other non-transmission medium, can be used for storage can be accessed by a computing device information.As defined in this article, it calculates
Machine readable medium does not include temporary computer readable media (transitory media), such as the data-signal and carrier wave of modulation.
It should also be noted that, the terms "include", "comprise" or its any other variant are intended to nonexcludability
It include so that the process, method, commodity or the equipment that include a series of elements not only include those elements, but also to wrap
Include other elements that are not explicitly listed, or further include for this process, method, commodity or equipment intrinsic want
Element.In the absence of more restrictions, the element limited by sentence " including one ... ", it is not excluded that including described
There is also other identical elements in the process, method of element, commodity or equipment.
All the embodiments in this specification are described in a progressive manner, same and similar portion between each embodiment
Dividing may refer to each other, and each embodiment focuses on the differences from other embodiments.Especially for system reality
For applying example, since it is substantially similar to the method embodiment, so being described relatively simple, related place is referring to embodiment of the method
Part explanation.