Communication service method based on intelligent management

Abstract

The invention discloses a communication service system based on intelligent management. An operation method of the system comprises the following steps: carrying out structure division control management on a wireless Mesh network; node control analysis of the wireless Mesh network is carried out; the operation control of the wireless Mesh network is further optimized and managed; and carrying out backup calling management on the wireless Mesh network data information. The step of carrying out structure division control management on the wireless Mesh network comprises the step of carrying out MKD (Mesh Key Distribution) domain structure division processing on the wireless Mesh network, so that each MKD domain contains one MKD and a corresponding set number of MAs (Mesh Authorization). The node control analysis of the wireless Mesh network comprises the following steps: after an MP node is started in the wireless Mesh network, performing analysis control according to whether wired connection exists or not, and enabling the MP node to interact with a DHCP server through the established Mesh network connection to obtain an IP address so as to complete the configuration of the network. The system has the characteristics of high safety and intelligent management and control optimization.

Description

Technical Field

[0001] The present invention relates to the technical field of communication services, and in particular to a communication service method based on intelligent management. Background Art

[0002] Wireless Mesh Network is a new wireless network technology that is completely different from traditional wireless networks. It does not require base stations in WiFi networks, but is composed of relay Mesh nodes that can communicate directly with each other. Traditional wireless network access needs to be connected through an access point (AP), and two nodes cannot communicate directly with each other. However, each node in a wireless Mesh network can communicate directly with one or more peer nodes. Nodes in a wireless Mesh network can serve as entities for peer-to-peer data forwarding and as bridges to other external networks. The multi-hop mechanism of a wireless Mesh network determines that user communication must be forwarded through multiple nodes. The more nodes the data passes through, the greater the corresponding security risk. Although many mature wired communication technologies and WiFi technologies are applied to wireless Mesh networks, there are still security risks of information leakage. Therefore, it is necessary to design a communication service method based on intelligent management with high security and intelligent control optimization. Summary of the invention

[0003] The purpose of the present invention is to provide a communication service method based on intelligent management to solve the problems raised in the above background technology.

[0004] In order to solve the above technical problems, the present invention provides the following technical solutions: a communication service method based on intelligent management, comprising: Structural division, control and management of wireless Mesh networks; Conduct node control analysis of wireless mesh networks; Further optimize the operation and control of wireless mesh networks; Perform backup and retrieval management of wireless Mesh network data information.

[0005] According to the above technical solution, the structure division control and management of the wireless Mesh network includes: The wireless mesh network is divided into MKD (Mesh Key Distributor) domain structures so that each MKD domain contains an MKD and a corresponding set number of MAs (Mesh Authentication).

[0006] According to the above technical solution, the node control analysis of the wireless mesh network includes: After starting the MP node in the wireless Mesh network, it will analyze and control whether there is a wired connection, and make the node MP interact with the DHCP server through the established Mesh network connection to obtain an IP address, thus completing the configuration of the network; After the control MP node collects neighbor information by actively sending Probe request detection frames or listening to Beacon frames, during the wireless mesh network neighbor node discovery process, the node passively listens to Beacon frames or actively sends Probe request frames to perform node control management.

[0007] According to the above technical solution, the further optimization management of the operation control of the wireless mesh network includes: After the MP node selects the candidate peer node, it controls the connection establishment of the wireless Mesh network. The two parties of the control peer connection complete the connection establishment between Mesh nodes by exchanging two Peer Link Open / Confirm frame information. Perform SAE state machine authentication management on wireless mesh networks, generate a master key pair by interacting with SAE commit and confirm messages, and define each event of the SAE protocol by a multi-element array consisting of the local MAC address and the peer MAC address; The four-way handshake mechanism is used to optimize the management of wireless mesh networks, a key redial counter is used to count the authentication process, and attack messages whose counter numbers do not meet the set rules are deleted.

[0008] According to the above technical solution, the backup and retrieval management of wireless Mesh network data information includes: Back up the transmission data information of the wireless Mesh network and store it in the blockchain node to effectively ensure the storage security of data information; After the set verification management, the management personnel can retrieve and review the backup stored data information, which is conducive to subsequent optimization processing.

[0009] According to the above technical solution, a communication service system based on intelligent management includes: Analysis and management module, used for analysis and management of wireless mesh networks; Control processing module, used for optimizing control processing of wireless Mesh network; The backup retrieval module is used to backup and retrieve data information of the wireless Mesh network.

[0010] According to the above technical solution, the analysis management module includes: The structure division module is used to manage the structure domain division of the wireless mesh network; Analysis and control module, used for node analysis and control of wireless Mesh network; The node management module is used to manage the node operation of the wireless mesh network.

[0011] According to the above technical solution, the control processing module includes: A connection control module is used to control the establishment of a connection in a wireless Mesh network; Authentication management module, used for authentication management of wireless mesh network; The handshake processing module is used to perform handshake control processing of the wireless mesh network.

[0012] According to the above technical solution, the backup retrieval module includes: A backup storage module is used for backup storage of data information; The retrieval management module is used to manage and control the retrieval and review of data information.

[0013] Compared with the prior art, the beneficial effects achieved by the present invention are as follows: the present invention, by providing an analysis management module, a control processing module and a backup retrieval module, makes the MKD domains of the wireless Mesh network both independent and connected to each other, and also connected to the outside of the network, effectively improving the security and stability of the wireless Mesh network. Effectively improve the node operation control efficiency of the wireless Mesh network, avoid the generation of operation processing errors, and improve the accuracy and efficiency of wireless Mesh network connection establishment, reducing additional time and resource consumption. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 is a flow chart of a communication service method based on intelligent management provided in Embodiment 1 of the present invention; Figure 2 It is a module structure diagram of the communication service system based on intelligent management provided in the second embodiment of the present invention. DETAILED DESCRIPTION

[0015] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0016] Embodiment 1: Figure 1 This is a flow chart of a communication service method based on intelligent management provided in Embodiment 1 of the present invention. This embodiment can be applied to a network communication system. The method can be executed by a communication service system based on intelligent management provided in an embodiment of the present invention. The system is composed of multiple software and hardware modules, such as Figure 1 As shown, the method specifically comprises the following steps: S101, performing structure division, control and management on the wireless Mesh network; Exemplarily, in an embodiment of the present invention, the wireless mesh network is processed by dividing the MKD (Mesh Key Distributor) domain structure so that each MKD domain contains an MKD and a corresponding set number of MAs (Mesh Authentication); in this step, the wireless mesh network is divided into multiple MKD domains, so that each MKD domain contains an MKD and multiple MAs, wherein the AS (authentication server) can be located inside or outside the MKD domain, and is connected to the MKD through a secure link, and the STA (wireless terminal) directly authenticates with the MA through the IEEE802.11s standard and accesses the MKD domain. When an MP joins the WLAN Mesh network, it first performs initialization authentication with the MA in the network. A set of complete corresponding key systems will be used between the MKD and the applicant MP in the initialization authentication, and then authentication and secure encryption communication will be performed by using the key suite of this security system. Through this processing, the MKD domains of the wireless mesh network can be both independent and connected to each other, and also connected to the outside of the network, effectively improving the security and stability of the wireless mesh network.

[0017] S102, performing node control analysis of the wireless mesh network; Exemplarily, in an embodiment of the present invention, after starting an MP node in a wireless Mesh network, analysis and control are performed based on whether there is a wired connection, and the node MP interacts with the DHCP server through the established Mesh network connection to obtain an IP address, thereby completing the configuration of the network; in this step, if a valid wired connection is detected, it can be determined to be an MPP (Mesh network entry node), and the AC node is discovered and managed directly by using the wired connection to obtain and complete the configuration of the Mesh network characteristics. If there is no wired connection, it can be considered to be an ordinary MP, wherein the node MP that is not an MPP scans neighboring node MPs, selects one from the neighboring node MPs that have successfully associated with the node AC as a peer node, and establishes a Mesh network connection with it, and the node MP discovers the node AC on the established Mesh network connection and associates with it, obtains the relevant configuration of the Mesh network, and the node MP uses the latest configuration information to re-establish a secure CAPWAP channel with the node AC, effectively improving the connection transmission security and stability of the wireless Mesh network.

[0018] After the control MP node collects neighbor information by actively sending Probe request detection frames or listening to Beacon frames, in the process of wireless Mesh network neighbor node discovery, the node passively listens to Beacon frames or actively sends Probe request frames to perform node control management; in this step, the Beacon frame and Probe frame contain relevant information such as Mesh ID, Mesh configuration and security capabilities. The MP node parses the Mesh profile information of the sending MP from the received Beacon frame or Probe reply frame and matches it with the Mesh profile information of the local end. Only when the information of both parties is successfully matched can the neighbor relationship be established, otherwise it fails. Through this processing, the node operation control efficiency of the wireless Mesh network is effectively improved and the operation processing errors are avoided.

[0019] S103, further optimizing and managing the operation control of the wireless mesh network; Exemplarily, in an embodiment of the present invention, after the MP node selects a candidate peer node, the connection establishment of the wireless Mesh network is controlled, and the two parties of the peer connection are controlled to complete the connection establishment between the Mesh nodes by exchanging Peer Link Open / Confirm frame information twice; in this step, after the MP node selects the candidate peer node, it establishes a Mesh network connection with the peer node, and the two MP nodes of the established Mesh network connection are in a peer connection relationship, and the two parties of the peer connection complete the connection establishment between the Mesh nodes by exchanging Peer Link Open / Confirm frame information twice, wherein the two nodes controlling the Mesh peer connection use the same Mesh profile information, each MP node can establish a single or multiple Mesh network connections according to the setting information, each Mesh network connection is uniquely identified by a group containing four cells, and the Peer Link ID and the local link ID are respectively generated and maintained by the MP nodes of the two parties of the peer connection according to the principle of global uniqueness, and are carried in the peer connection management cell and transmitted to the peer MP node, thereby effectively improving the accuracy and efficiency of the wireless Mesh network connection establishment and reducing additional time and resource consumption.

[0020] The SAE state machine authentication management is performed on the wireless mesh network. The master key pair is generated by interacting with the SAE commit and confirm messages, and each event of the SAE protocol is defined by a multi-element array consisting of the local MAC address and the peer MAC address. In this step, SAE is used for mutual authentication between the communicating parties based on the existing key to generate PWE (password element), and SAE is managed and authenticated by the set parent process through SME, where SME is mainly used to receive information and assign appropriate protocol event status. The parent process manages a protocol event index database defined by the peer. The protocol event includes the status of both ends of the link, the event received from the parent process, the event sent by itself, and the output data, which effectively improves the authentication accuracy and processing efficiency of the wireless mesh network.

[0021] The four-way handshake mechanism is used to optimize the management of the wireless mesh network, and the key redial counter is used to count the authentication process, and the attack message whose counter number does not meet the rules is deleted; in this step, the applicant and the authenticator set up a key redial counter on each established security connection, and set the initial value of the key redial counter to 0. Then the authenticator adds 1 to the key redial counter of a legal authentication frame. When the applicant receives a message from the authenticator, the applicant will compare the key redial counter value received last time with the key redial counter value just received to verify its legitimacy. If the key redial counter value just received is less than or equal to the previous value, the applicant will regard this message as an illegal message and discard it. Through this processing, the security of the wireless mesh network is effectively improved and the risk of information leakage is greatly reduced.

[0022] S104, performing backup and retrieval management of wireless Mesh network data information; Exemplarily, in an embodiment of the present invention, the transmission data information of the wireless mesh network is backed up and stored in the blockchain node, effectively ensuring the storage security of the data information; After the set verification management, the management personnel can retrieve and review the backup stored data information, which is conducive to subsequent optimization processing.

[0023] Embodiment 2: Embodiment 2 of the present invention provides a communication service system based on intelligent management. Figure 2 The module structure diagram of the communication service system based on intelligent management provided in the second embodiment is as follows: Figure 2 As shown, the system includes: Analysis and management module, used for analysis and management of wireless mesh networks; Control processing module, used for optimizing control processing of wireless Mesh network; The backup retrieval module is used to backup and retrieve data information of the wireless Mesh network.

[0024] In some embodiments of the present invention, the analysis management module includes: The structure division module is used to manage the structure domain division of the wireless mesh network; Analysis and control module, used for node analysis and control of wireless Mesh network; The node management module is used to manage the node operation of the wireless mesh network.

[0025] In some embodiments of the present invention, the control processing module includes: A connection control module is used to control the establishment of a connection in a wireless Mesh network; Authentication management module, used for authentication management of wireless mesh network; The handshake processing module is used to perform handshake control processing of the wireless mesh network.

[0026] In some embodiments of the present invention, the backup retrieval module includes: A backup storage module is used for backup storage of data information; The retrieval management module is used to manage and control the retrieval and review of data information.

[0027] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0028] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A communication service method based on intelligent management, characterized in that: include: Structural division, control and management of wireless Mesh networks; Conduct node control analysis of wireless mesh networks; Further optimize the operation and control of wireless mesh networks; Perform backup and retrieval management of wireless Mesh network data information.

2. The communication service method based on intelligent management according to claim 1, characterized in that: The structure division control and management of the wireless mesh network includes: The wireless mesh network is divided into MKD (Mesh Key Distributor) domain structures so that each MKD domain contains an MKD and a corresponding set number of MAs (Mesh Authentication).

3. The communication service method based on intelligent management according to claim 1, characterized in that: The node control analysis of the wireless mesh network includes: After starting the MP node in the wireless Mesh network, it will analyze and control whether there is a wired connection, and make the node MP interact with the DHCP server through the established Mesh network connection to obtain an IP address, thus completing the configuration of the network; After the control MP node collects neighbor information by actively sending Probe request detection frames or listening to Beacon frames, during the wireless mesh network neighbor node discovery process, the node passively listens to Beacon frames or actively sends Probe request frames to perform node control management.

4. The communication service method based on intelligent management according to claim 1, characterized in that: The further optimizing management of the operation control of the wireless mesh network includes: After the MP node selects the candidate peer node, it controls the connection establishment of the wireless Mesh network. The two parties of the control peer connection complete the connection establishment between Mesh nodes by exchanging two Peer Link Open / Confirm frame information. Perform SAE state machine authentication management on wireless mesh networks, generate a master key pair by interacting with SAE commit and confirm messages, and define each event of the SAE protocol by a multi-element array consisting of the local MAC address and the peer MAC address; The four-way handshake mechanism is used to optimize the management of wireless mesh networks, a key redial counter is used to count the authentication process, and attack messages whose counter numbers do not meet the set rules are deleted.

5. The communication service method based on intelligent management according to claim 1, characterized in that: The backup and retrieval management of wireless Mesh network data information includes: Back up the transmission data information of the wireless Mesh network and store it in the blockchain node to effectively ensure the storage security of data information; After the set verification management, the management personnel can retrieve and review the backup stored data information, which is conducive to subsequent optimization processing.

6. A communication service system based on intelligent management, characterized in that: include: Analysis and management module, used for analysis and management of wireless mesh networks; Control processing module, used for optimizing control processing of wireless Mesh network; The backup retrieval module is used to backup and retrieve data information of the wireless Mesh network.

7. The communication service system based on intelligent management according to claim 6, characterized in that: The analysis management module includes: The structure division module is used to manage the structure domain division of the wireless mesh network; Analysis and control module, used for node analysis and control of wireless Mesh network; The node management module is used to manage the node operation of the wireless mesh network.

8. The communication service system based on intelligent management according to claim 6, characterized in that: The control processing module comprises: A connection control module is used to control the establishment of a connection in a wireless Mesh network; Authentication management module, used for authentication management of wireless mesh network; The handshake processing module is used to perform handshake control processing of the wireless mesh network.

9. The communication service system based on intelligent management according to claim 6, characterized in that: The backup retrieval module includes: A backup storage module is used for backup storage of data information; The retrieval management module is used to manage and control the retrieval and review of data information.

Images