CN114448659A - Yellow river dam bank monitoring Internet of things access control optimization method based on attribute exploration - Google Patents

Abstract

The invention relates to the field of access control, in particular to an attribute exploration-based access control optimization method for a yellow river dam bank monitoring Internet of things. The method comprises the following steps: obtaining access control logs of each management module of the yellow river flood condition warning system to obtain flood condition warning information example data and all flood condition warning information sets; analyzing the flood situation alarm information example data and the flood situation alarm information set, and establishing a first redundancy-free set of the access control example to obtain a first flood situation alarm information inclusion relation set and a first flood situation alarm information connotation set; if the management module finds that the establishment is wrong in the process of establishing the access control strategy, the management module modifies the access control strategy; and after the management modules establish respective dam bank monitoring access strategy authority models, the final establishment of the yellow river dam bank monitoring access strategy is completed through fusion. The invention improves the establishing efficiency and the establishing precision of the access control strategy of the Internet of things for monitoring the yellow river bank.

Description

Optimization method of Internet of Things access control for Yellow River dam bank monitoring based on attribute exploration

technical field

The invention relates to the technical field of access control, in particular to a method for optimizing access control of the Internet of Things for dam bank monitoring of the Yellow River based on attribute exploration.

Background technique

Flood control is one of the most important tasks in managing the Yellow River. At present, a complete set of highly visual management interface system for collecting and reporting flood control project data has been formed. The current Yellow River flood warning system involves a variety of technologies in the field of Internet of Things, including communications, sensors and other technologies. As the flood control project involves a large number of personnel and equipment, each personnel and equipment can access the flood alarm information through the alarm system to the confidential data of the Yellow River flood conditions. In order to effectively and safely prevent the occurrence of dangerous dam banks, the development of an Internet of Things access control method based on flood alarm information exploration has become one of the necessary means for the Yellow River governance information system.

As a new architecture, the Internet of Things integrates the real world and the network, and realizes the exchange and distribution of information between objects and objects, as well as between objects and people. In such an environment, a large amount of data is generated, and this data contains a large amount of user privacy. The security of this privacy is the top priority in the Internet of Things environment. As one of the basic principles of information security, access control can effectively ensure the security of data, and is an important research content in the era of the Internet of Things.

Early access control is further divided into mandatory access control and autonomous access control. With the development of the information age, access control technology is developing towards more levels, and a variety of access control models have appeared successively. Among them, role-based access control is a good choice. It has been widely researched and applied in the field of access control.

However, the traditional role-based access control, in the face of today's IoT environment, has large granularity and is prone to problems such as role explosion, which cannot be well adapted to the IoT environment. Access control takes the flood alarm information of the subject and the object as the basic decision-making element, does not require manual allocation, is relatively simple in management, and can be better adapted to the Internet of Things environment. Therefore, nowadays, in the IoT environment, more models use access control based on flood alarm information. Among them, access policy is a very important part of access control. Establishing an effective access strategy can effectively protect the security of information and save time and space. How to establish an effective access policy is an important beginning of establishing an access control mechanism.

Manual establishment of a dam bank monitoring access strategy not only has the problem of high redundancy, but also has the shortcomings of incompleteness.

SUMMARY OF THE INVENTION

In order to solve the above-mentioned technical problems, the purpose of the present invention is to provide a kind of Internet of Things access control optimization method based on attribute exploration, and the technical scheme adopted is as follows:

An optimization method for Internet of Things access control for Yellow River dam bank monitoring based on attribute exploration, the method includes:

Obtain the access control logs of each management module of the Yellow River flood warning system, process the access log control records, and obtain the instance data of the flood warning information without redundancy and the collection of all the flood warning information;

By analyzing the flood alarm information instance data and all the flood alarm information sets, the first non-redundant set of access control instances is established, and the first flood alarm information connotation relationship set and the first flood alarm information connotation set are obtained; if the management module is in If errors are found during the establishment of the dam bank monitoring access control model, an execution point is established to make a modification request and make the modification;

After multiple management modules establish their own dam bank monitoring access control models, the final dam bank monitoring access strategy is established through integration.

Further, the modification includes:

Obtain the role to be modified and the flood alarm information to be modified corresponding to the role to be modified; modify the flood alarm information of the role to be modified in the first non-redundant set to the input flood alarm information to obtain a second non-redundant set of access control instances , and initialize the second flood alarm information implication relationship set and the second flood alarm information connotation set;

Calculate the first flood warning information implication relationship set and the antecedents in the first flood warning information connotation set. The consequent in the second non-redundant set is compared to the consequent in the first non-redundant set. whether to increase or decrease;

According to the calculation result of whether to increase or decrease, the second flood warning information implication relationship set and the second flood warning information connotation set are updated.

Further, according to the judgment result of whether to increase or decrease, updating the second flood warning information implication relationship set and the second flood warning information connotation set includes:

If the subsequent event of the previous flood alarm information set in the second non-redundant set does not increase or decrease, then if the previous flood alarm information set belongs to the first flood alarm information implication relationship set, it also belongs to the second flood alarm information set. The set of information implication relationships, if the preceding flood alarm information set belongs to the first flood alarm connotation set, it also belongs to the second flood alarm information connotation relationship set;

If the antecedent flood alarm information set is added in the second non-redundant set, the former flood alarm information set and the subsequent event are put into the second flood alarm information implication relationship set;

If the consequent of the preceding flood warning information set in the second non-redundant set is reduced and the consequent is empty, then the preceding flood warning information set is added to the second flood warning information connotation set;

If the consequent of the preceding flood alarm information set in the second non-redundant set decreases and the consequent is not empty, the preceding flood alarm information set is recorded as the first flood alarm information set, and the first flood alarm information The set is put into the second flood alarm information implication relationship set; then a new set is obtained, and the new set includes the implication that all the antecedents on the second non-redundant set are a single flood alarm information, and further obtained from the new set. The second flood alarm information set constitutes a second flood alarm information set, and the flood alarm information set in the second flood alarm information set satisfies: the antecedents of the first flood alarm information set in the first non-redundant set are included, and the first flood alarm information set does not include the first flood alarm information. The consequent of the information set in the first non-redundant set includes the consequent of the first flood alarm information set in the second non-redundant set; the flood alarm information set in the second flood alarm set is combined and put into To be added to the set; to perform correlation judgment on the flood alarm information set to be added to the set, for the flood alarm information set that meets the correlation conditions, if the consequent in the second non-redundant set is empty, put it into the second flood alarm information The information connotation set, if the consequent is not empty, it is put into the second flood warning information connotation relation set.

Further, the flood alarm information includes the flood alarm information of the Yellow River section and the flood alarm information of the flood monitoring equipment.

Further, after putting the former flood alarm information set and the newly added post-item into the second flood alarm information implication relationship set, it also includes: in the first flood alarm information implication relationship set and the first flood alarm information connotation set. Find out the previous flood alarm information set that does not contain the newly added consequent items and record it as the alarm information set to be deleted, and delete the alarm information set to be deleted from the first flood alarm information connotation relationship set and the first flood alarm information connotation relationship set.

Further, the roles include management modules and IoT devices.

Further, the method further includes: determining a management module through the Yellow River flood situation management team, and assigning management authority to the management module by the root user of the Yellow River flood situation alarm system.

Further, the management module obtains the basic knowledge of accessing the flood warning information by communicating and consulting with experts.

Beneficial effects:

The invention can well solve the problem of high redundancy and incompleteness in manually establishing the monitoring access strategy of the dam bank, and the proposed modification mechanism can quickly modify the wrong decision-making model and improve the accuracy of the access control model when the role authority is modified. .

Description of drawings

FIG. 1 is a schematic diagram of an Internet of Things access control method for dam bank monitoring of the Yellow River based on attribute exploration provided by the present invention.

Detailed ways

In order to further illustrate the technical means and effects adopted by the present invention to achieve the predetermined purpose of the invention, the following describes a method for optimizing the access control of the Internet of Things for dam bank monitoring of the Yellow River based on attribute exploration proposed by the present invention in conjunction with the preferred embodiments. The specific embodiments, structures, features and effects thereof are described in detail as follows. In the following description, different "one embodiment" or "another embodiment" are not necessarily referring to the same embodiment. Furthermore, the particular features, structures, or characteristics in one or more embodiments may be combined in any suitable form.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

The invention explores and constructs an access control model of the Yellow River dam bank danger alarm system based on the flood situation alarm information, can quickly and accurately construct an access control model for the entire Yellow River flood situation Internet of Things system, and can dynamically adjust the access control mechanism according to the flood situation changes. To a certain extent, the cost of manually maintaining system access control rights is reduced. The management module applies for establishing a dam bank monitoring access policy. After the system receives this request, it assigns an access authority to the management module to establish an execution point. According to the flood alarm information exploration method, first establish an empty dam bank monitoring access background, and add flood alarm information to it according to the object flood alarm information, environmental flood alarm information and operations that the user needs to access. Then, find the implication relationship of the next flood alarm information that needs to ask the management module through the algorithm, and repeatedly interact with the management module to obtain the main flood alarm information, and under what kind of environment flood alarm information, the subject flood alarm information can be made to the object flood alarm information. operation. If the management module finds an early establishment error during the establishment process, it can submit a modification request to the access authority establishment execution point at any time. The modification mechanism proposed by the invention can quickly modify the wrong decision model. Finally, after multiple management modules have established their own dam bank monitoring access policy authority models, various decisions can be integrated to complete the establishment of the final dam bank monitoring access policy. As shown in FIG. 1, the schematic diagram of the alarm system of the present invention is described below in conjunction with the embodiment to specifically describe a method for optimizing the access control of the Yellow River dam and bank monitoring Internet of Things based on attribute exploration provided by the present invention. The basic knowledge of accessing flood alarm information and access control logs are obtained by means of the method, and the modification mechanism is invoked to modify the access control model according to the modification request. Finally, the final access policy for dam bank detection is obtained through fusion.

This embodiment provides a method for optimizing the access control of the Internet of Things for monitoring the Yellow River dam bank based on attribute exploration, which includes the following steps:

Step 1: Obtain access control logs of each management module of the Yellow River flood warning system, process the access log control records, and obtain flood warning information instance data and a collection of all flood warning information.

The management module is determined by the Yellow River flood situation management team, and the root user of the alarm system assigns management authority to the management module.

Obtain access control logs for analysis. Management Module A successfully operates the flood data of Section A of the Yellow River on August 10, then System Management Module A has the authority to operate the flood data of Section A of the Yellow River, and this authority is recorded as 1; Management Module A operates Section B of the Yellow River on August 11. If the flood situation data fails, the record management module A does not have the authority to operate the flood situation data of the Yellow River section B, and this authority is recorded as 0; The data collected by the device 2 is successful, then the system records that the flood monitoring device 1 of the section A of the Yellow River has the permission to access the flood monitoring device 2 of the section A of the Yellow River, and this permission is recorded as 1; If the access to the data collected by the flood monitoring equipment 2 in Section A of the Yellow River fails on January 10, the system records that the flood monitoring equipment 1 in Section A of the Yellow River does not have the authority to access the flood monitoring equipment 2 in Section A of the Yellow River, and this authority is recorded as 0.

According to the above analysis method, all the obtained access control log records are processed to obtain the flood alarm information instance data Data ₀ , and all the flood alarm information sets M are obtained at the same time; the flood alarm information instance data Data ₀ can be presented in the form of a table, Table 1 shows an example of flood alarm information instance data. All flood alarm information M=(a, b, c, d, e, f, g, h, i), where a, b, ..., i represent different flood alarm information, including flood alarm in Section A of the Yellow River Information, flood alarm information of section B of the Yellow River, flood alarm information of section A flood monitoring equipment of the Yellow River, and flood alarm information of flood monitoring equipment of section A of the Yellow River.

Table 1

Step 2, analyze the flood alarm information instance data without redundancy and the flood alarm information set, establish the first non-redundant set of access control instances, and obtain the first flood alarm information implication relationship set and the first flood alarm information connotation set. .

Based on the flood alarm information exploration method, analyze the non-redundant flood alarm information instance data Data ₀ and all the flood alarm information sets M, establish the first non-redundant set K _S1 of the access control instance, and obtain the first flood alarm information implication The relationship set J ₁ contains the set C ₁ with the first flood warning information, and assigns the flood warning information in the access control background to users according to roles. Specifically, a first non-redundant set of access control instances is first established. The first non-redundant set can be implemented through the dam bank monitoring and access background, and there is no redundant access control information in the dam bank monitoring and access background. Then, the first flood warning information relation set and the first flood warning information connotation set are established according to the implication relationship and connotation between the sets.

The concepts used in building the access control model are as follows:

或者

表示访问主体u不能访问汛情报警信息m。在告警系统中，U对应告警系统中包含的物联网设备的访问方，M对应告警系统中包含的物联网设备的受访问方，I对应告警系统中访问方和受访问方的关系。(1) A dam bank monitoring access background K=(U, M, I) is composed of two sets U and M and the relationship I between U and M. The element of U is called the access subject, and the element of M is called the flood situation Alarm information. (u, m)∈I or (uIm) means that the access subject u can access the flood warning information m. we use

or

Indicates that the access subject u cannot access the flood alarm information m. In the alarm system, U corresponds to the access party of the IoT device included in the alarm system, M corresponds to the accessed party of the IoT device included in the alarm system, and I corresponds to the relationship between the access party and the accessed party in the alarm system.

令Let K=(U, M, I) be the background of a dam bank monitoring visit, if

make

(2) If A, B satisfy f(A)=B, g(B)=A, then we call the binary group (A, B) a concept. A is the extension of the concept (A, B), and B is the connotation of the concept (A, B).

若

则称在K中Y₂值依赖于Y₁，记作Y₁->Y₂，也称蕴涵式Y₁->Y₂在K中成立。(3) Let K=(U, M, I) be a background of dam bank monitoring visit, Y ₁ ,

like

Then the value of Y ₂ in K is said to depend on Y ₁ , denoted as Y ₁ ->Y ₂ , and it is also said that the implication Y ₁ -> Y ₂ holds in K.

当且仅当

或

时，则称T与C->D相关。若T与J(K)中所有的蕴涵式都相关，则称T与J(K)相关。(4) Given the background K=(U, M, I) for monitoring and visiting the bank, the implication set J(K), the implication C->D∈J(K). If the flood alarm information collection

if and only if

or

, then T is said to be related to C->D. T is said to be related to J(K) if T is related to all the implication in J(K).

当且仅当存在m_i∈Y₂-Y₁且Y₁∩{m₁，···，m_i-1}＝Y2∩{m₁，···，m_i-1}时，称汛情报警信息集合Y₁的字典序小于汛情报警信息集合Y₂的字典序，记作Y₁<Y₂。(5) Let K=(U, M, I) be a background of dam bank monitoring visit, M={m ₁ , m ₂ ··· m _n }, the flood warning information in M satisfies the basic linear sequence relationship (m ₁ <m ₂ <··<m _n ), then for any Y ₁ ,

If and only if there is m _i ∈ Y ₂ -Y ₁ and Y ₁ ∩{m ₁ ,...,m _i-1 }=Y2∩{m ₁ ,...,m _i-1 }, it is called flood situation The lexicographic order of the alarm information set Y ₁ is smaller than the lexicographic order of the flood alarm information set Y ₂ , denoted as Y ₁ <Y ₂ .

有P≠f(g(P)),且对每一个伪内涵

且Q≠P，都有

那么我们称P是一个伪内涵。(6) Background of dam bank monitoring visit

There is P≠f(g(P)), and for each pseudo-intension

and Q≠P, both

Then we call P a pseudo-intension.

为一个坝岸监测访问背景，蕴涵集合{P→f(g(P))-P|P是K的伪内涵}，称之为K的主基。(7) If

It is a background of dam bank monitoring and visit, the implication set {P→f(g(P))-P|P is the pseudo-intension of K}, which is called the main basis of K.

是一个坝岸监测访问背景，

为

上的蕴涵式集合，

蕴涵式

若

或

则称T与A→B相关。若T与

中所有的蕴涵式都相关，则称T与

相关。(8) set

It is a background of dam bank monitoring visit,

for

The implication set on ,

implication

like

or

Then T is said to be related to A→B. If T and

All the implications in are related, then T is said to be related to

related.

If the management module finds an establishment error in the process of establishing the access control policy, the establishment execution point puts forward a modification request and makes the modification. The establishment errors referred to in the present invention include: an error occurs in the authority of the role, and it is necessary to modify the flood alarm information that the role can access. For example, a role in the current access control model can access the first flood alarm information, but an error is found after inspection, and the accessible first flood alarm information needs to be modified to the second flood alarm information.

For the role r to be modified and the flood alarm information A ₁ corresponding to the role r, according to the determined first non-redundant set K _S1 of the access control instance, the first flood alarm information implication relationship set J ₁ and the first flood alarm information In the connotation set C ₁ , the flood alarm information A ₁ in the role r in the non-redundant set K _S1 of the access control instance is modified to the input flood alarm information A ₂ to obtain the second non-redundant set K _S2 of the access control instance. Then calculate the first flood warning information implication relationship set J ₁ and the consequent of the antecedent flood warning information set in the first flood warning information connotation set C ₁ in the second non-redundant set K _S2 of the access control instance (compared to Whether there is an increase or decrease in the consequent in K _S1 ); if there is a consequent of a certain flood alarm information set b ₁ that neither increases nor decreases, then if the flood alarm information set b ₁ belongs to the first flood alarm information implication The relation set J ₁ also belongs to the second flood warning information implication relation set J ₂ . If the flood warning information set b ₁ belongs to the first flood warning information connotation set C ₁ , it also belongs to the second flood warning information connotation set C ₂ . . Preferably, the initialized second flood warning information implication relationship set and the second flood warning information connotation set are empty. If the consequent of b ₁ does not increase or decrease, then, according to the inclusion relationship between b ₁ and the first flood warning information connotation set and the first flood warning information connotation set, put b ₁ and its consequent into the first flood condition. The alarm information implication relationship set or the first flood alarm information connotation collection.

If there is an increase in the consequent of a certain flood alarm information set b ₂ , then this flood alarm information set b ₂ and its consequent on the second non-redundant set constitute an implication, and put it into a new flood alarm information implication relationship Collection J ₂ . Further, in the flood warning information implication relationship set J ₁ and the flood warning information connotation set C ₁ , find out all the flood warning information sets whose antecedents do not contain the newly added subsequent event, and then find the first flood warning information implication relationship. These sets of flood warning information are deleted from the set J ₁ and the first flood warning information connotation set C ₁ .

If there is a decrease in the consequent _of a flood alarm information set b3, then if the consequent of the flood alarm information set is empty, the flood alarm information set is put into a new flood alarm information connotation set _C2 .

且前件与后件的并集中不含

的所有汛情报警信息集合。并将找出的这些汛情报警信息集合进行排列组合(按照组合方法随机取至少一个集合构成新的集合，如此可得2ⁿ-1个集合)，去掉重复放入的汛情报警信息后放入待加入集合。对待加入集合中的汛情报警信息集合进行相关性判断，对符合相关性条件的汛情报警信息集合，若在第二无冗余集合后件为空则放入新的汛情报警信息内涵集合C₂中，若在K_S2后件不为空则放入新的汛情报警信息蕴涵关系集合J₂；最终得到修改后的访问控制实例的无冗余集合K_S2、新的汛情报警信息蕴涵关系集合J₂以及新的汛情报警信息内涵集合C₂；其中角色r包括：告警系统中的管理模块或者物联网设备。对于物联网设备，采样与步骤2同样的访问控制模型建立方法和修改机制集合得到物联网设备的访问控制模型。If the _consequent of b3 is reduced and the consequent is not empty in K _S2 , put this flood warning information set _b3 into a new flood warning information implication set J2, according to the modified access control instance's non- _existence . Redundant set K _S2 , calculates the implication that all antecedents are a single flood alarm information, and put it into the new set IMPs. Find out all the antecedents that contain the flood warning information set _b3 in K _S1 from the newly created set, the consequences that do not contain the flood warning information set _b3 in K _S1 and contain the flood warning information set _b3 in K S1 The flood alarm information set of the consequent items in _S2 , the specific method is as follows: find out that the antecedents in the newly created set IMPs do not contain

And the union of the antecedent and the consequent does not contain

A collection of all flood alarm information. Arrange and combine the found sets of flood alarm information (at least one set is randomly selected to form a new set according to the combination method, so that 2 ⁿ -1 sets can be obtained), remove the repeated flood alarm information and put it into the waiting list. Join the collection. Perform correlation judgment on the flood alarm information set to be added to the set, and put the flood alarm information set that meets the correlation conditions, if the second non-redundant set consequent is empty, put it into a new flood alarm information connotation set C ₂ , if the latter is not empty in K _S2 , then a new flood warning information implication relation set J ₂ is put into it; finally, a non-redundant set K _S2 of the modified access control instance and a new flood warning information implication relation set J ₂ are obtained. and a new connotation set C ₂ of flood alarm information; the role r includes: a management module in an alarm system or an Internet of Things device. For IoT devices, sample the same access control model establishment method and modification mechanism set as in step 2 to obtain the access control model of IoT devices.

By modifying the above-mentioned modification mechanism of the flood alarm information proposed in this patent, a new flood alarm information implication relationship set and a new flood alarm information connotation set can finally be obtained, so that the access control relationship of the entire alarm system can be obtained.

Step 3, after multiple management modules establish their own dam bank monitoring access control models, the establishment of the final dam bank monitoring access strategy is completed through fusion. That is, a complete access control model is obtained by fusing multiple access control models according to the implication relationship. The dam bank monitoring access control model of each management module includes its corresponding non-redundant set of access control instances, a set of flood alarm information implication relationships, and a flood alarm information connotation set. The final dam bank monitoring access strategy can be obtained by integrating the access control models of multiple management modules. The integration is to integrate the latest access control model of the management module.

It should be noted that: the above-mentioned order of the embodiments of the present invention is only for description, and does not represent the advantages and disadvantages of the embodiments. And the foregoing describes specific embodiments of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that in the embodiments and still achieve desirable results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection of the present invention. within the range.

Claims (8)

1. An attribute exploration-based access control optimization method for monitoring Internet of things on a yellow river bank is characterized by comprising the following steps:

acquiring access control logs of each management module of the yellow river flood condition warning system, and processing access log control records to obtain non-redundant flood condition warning information example data and all flood condition warning information sets;

analyzing the flood situation alarm information example data and all flood situation alarm information sets, establishing a first redundancy-free set of the access control example, and obtaining a first flood situation alarm information inclusion relation set and a first flood situation alarm information connotation set; if the management module finds that the building is wrong in the process of building the dam bank monitoring access control model, an execution point is built to provide a modification request and modify the modification request;

and after the management modules establish respective dam bank monitoring access control models, the final establishment of a dam bank monitoring access strategy is completed through fusion.

2. The method for optimizing access control of the monitoring internet of things on the yellow river bank based on attribute exploration according to claim 1, wherein the modifying comprises:

acquiring a role to be modified and flood condition alarm information to be modified corresponding to the role to be modified; modifying the flood condition alarm information of the role to be modified in the first redundancy-free set into input flood condition alarm information to obtain a second redundancy-free set of the access control example, and initializing a second flood condition alarm information implication relation set and a second flood condition alarm information implication set;

calculating whether the number of the back pieces of the front piece flood condition alarm information sets in the first flood condition alarm information implication relation set and the first flood condition alarm information implication set in the second redundancy-free set is increased or decreased compared with the number of the back pieces in the first redundancy-free set;

and updating the second flood situation alarm information implication relation set and the second flood situation alarm information implication set according to the calculation result of whether the number of the second flood situation alarm information is increased or decreased.

3. The method for optimizing the access control of the internet of things for monitoring the yellow river bank based on the attribute exploration, according to the judgment result of whether the content is increased or decreased, as claimed in claim 1, wherein the updating of the inclusion relation set of the second flood situation alarm information and the inclusion set of the second flood situation alarm information comprises:

if the front piece flood situation alarm information set is not increased or reduced in the rear piece in the second non-redundant set, if the front piece flood situation alarm information set belongs to the first flood situation alarm information implication relation set, the front piece flood situation alarm information set also belongs to the second flood situation alarm information implication relation set, and if the front piece flood situation alarm information set belongs to the first flood situation alarm implication set, the front piece flood situation alarm information set also belongs to the second flood situation alarm information implication relation set;

if the front piece flood situation alarm information set is added to the rear piece in the second redundancy-free set, placing the front piece flood situation alarm information set and the rear piece into a second flood situation alarm information implication relation set;

if the number of the front piece flood situation alarm information sets in the second redundancy-free set is reduced and the rear pieces are empty, adding the front piece flood situation alarm information sets into a second flood situation alarm information connotation set;

if the number of the front piece flood situation alarm information sets in the second redundancy-free set is reduced and the rear pieces are not empty, recording the front piece flood situation alarm information sets as first flood situation alarm information sets, and putting the first flood situation alarm information sets into a second flood situation alarm information implication relation set; then, a new set is obtained, wherein the new set comprises an implication formula that all front pieces on a second non-redundant set are single flood situation alarm information, the front pieces are further obtained from the new set to form a second flood situation alarm information set, and the flood situation alarm information set in the second flood situation alarm information set meets the following requirements: the first flood condition alarm information set comprises a front piece of the first flood condition alarm information set in the first redundancy-free set, a back piece of the first flood condition alarm information set in the first redundancy-free set is not included, and a back piece of the first flood condition alarm information set in the second redundancy-free set is included; combining the flood condition alarm information sets in the second flood condition alarm set and then putting the combined flood condition alarm information sets into a set to be added; and performing relevance judgment on the flood situation alarm information sets to be added into the sets, and for the flood situation alarm information sets meeting the relevance conditions, putting a second flood situation alarm information inclusion set if the back pieces in the second redundancy-free set are empty, and putting a second flood situation alarm information inclusion relation set if the back pieces are not empty.

4. The method for optimizing the access control of the internet of things for monitoring the yellow river bank based on the attribute exploration, according to claim 1, wherein the step of placing the front piece of flood condition alarm information set and the back piece of flood condition alarm information into the second flood condition alarm information implication relationship set further comprises the steps of: finding out a front piece flood situation alarm information set which does not contain the newly added back piece from the first flood situation alarm information implication relation set and the first flood situation alarm information implication set, recording the front piece flood situation alarm information set as an alarm information set to be deleted, and deleting the alarm information set to be deleted from the first flood situation alarm information implication relation set and the first flood situation alarm information implication relation set.

5. The property exploration-based access control optimization method for the Internet of things for monitoring the yellow river banks as claimed in claim 1, wherein the flood situation alarm information comprises flood situation alarm information of yellow river reach and flood situation alarm information of flood situation monitoring equipment.

6. The method for optimizing access control of the internet of things for monitoring the yellow river bank based on the attribute exploration as claimed in claim 3, wherein the roles comprise a management module and internet of things equipment.

7. The method for optimizing access control of the internet of things for monitoring the yellow river bank based on attribute exploration according to claim 1, wherein the method further comprises the following steps: and determining a management module by a yellow river flood management group, and distributing management rights for the management module by root users of the yellow river flood warning system.

8. The property exploration-based access control optimization method for the Internet of things for monitoring the yellow river bank is characterized in that the management module obtains basic knowledge of the access flood situation alarm information in a mode of exchanging and consulting with experts.

Images