On-demand compression method, device and equipment for zero-trust network access technology

Abstract

The invention relates to a compression method of a zero-trust network access technology. The method comprises the following steps: when data in a system is updated, judging the type of data to be updated to obtain a judgment result, when the updated data in the system is a file and when the updated file meets a page view preset condition, triggering a compression mechanism to compress the updated file, and when the updated data in the system is a strategy or a user, triggering the compression mechanism to compress the updated file. And calculating the correlation degree between the updated strategy or the user and the file, and judging whether to trigger a compression mechanism to compress the file corresponding to the updated strategy or the user according to the correlation degree. According to the method and the device, the updated data can be subjected to type identification, the corresponding judgment standard is applied, a reasonable judgment result is obtained for the updated data, the data meeting the standard is intelligently compressed and cached, and network bandwidth resources are saved as many as possible by using as little computing power as possible.

Description

Technical Field

[0001] The present application relates to the field of computer software technology, and in particular to an on-demand compression method, device and equipment for zero-trust network access technology. Background Art

[0002] Zero Trust Network Access (ZTNA) is a new generation of secure access method. Its main feature is to bind user identity with user devices and network service resources. That is, which network resources each user can access on each device is pre-planned, and the granularity can be accurate to specific files under specific domain names.

[0003] Frequently accessed network resources with fixed content, especially files, will occupy a large amount of network bandwidth resources. A common method is to compress the fixed-content files (usually image files or media files) on the resource server (including standard lossless compression and lossy compression for specific media formats), and then decompress them on the access server, saving network bandwidth resources without causing any impact on the end user experience.

[0004] In the ZTNA field, all access is strictly protected in tunnels, which will occupy the network bandwidth resources of the cloud platform, especially when used to transfer files.

[0005] Compressing files, especially those using high-compression algorithms, will take up a lot of computing resources. If all files are compressed across the board, although network bandwidth resources are saved, unnecessary compression operations on files that do not need to be compressed will waste computing resources. On public cloud platforms, unnecessary fees will also be incurred, which may even exceed the fees saved from saving network bandwidth resources. Summary of the invention

[0006] The present application provides a compression method for a zero-trust network access technology, characterized by comprising: When there is data update in the system, determine the type of data to be updated and obtain the determination result; When files are updated in the system, when the updated files meet the preset access volume conditions, the compression mechanism is triggered to compress the updated files; When the policy or user is updated in the system, the correlation between the updated policy or user and the file is calculated, and according to the correlation, it is determined whether to trigger the compression mechanism to compress the corresponding file of the updated policy or user.

[0007] Optionally, when a file is updated in the system, when the updated file meets a preset access volume condition, a compression mechanism is triggered to compress the updated file, including: When a file is updated in the system, statistics are collected on the historical access records of the file; According to the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume threshold is not reached, the compression is abandoned.

[0008] Optionally, the compression method of the zero-trust network access technology is characterized by further comprising: When a file is updated in the system, it is searched whether there is a previous compressed file of the updated file; When a previous compressed file exists for the updated file, the previous compressed file is deleted.

[0009] Optionally, when the updated policy or user is a policy or user, calculating the correlation between the updated policy or user and the file, and judging whether to trigger a compression mechanism to compress the file corresponding to the updated policy or user according to the correlation, includes: When the updated content in the system is a user or policy, the correlation between the updated content and each file needs to be calculated; According to the calculation result, it is determined whether the file meets the preset condition of a substantial increase in the probability of being accessed after being updated. If the preset condition of a substantial increase in the probability of being accessed is met, the historical access records of the file are counted; According to the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume threshold is not reached, the file is added to the list to be compressed and an initial count value is obtained.

[0010] Optionally, the compression method of the zero-trust network access technology is characterized by: In zero-trust network access, there are three types of data: users, policies, and files. The relationship between users and policies is many-to-many, and the relationship between policies and files is also many-to-many.

[0011] Optionally, judging whether the file meets a preset condition of a substantial increase in the probability of being accessed after being updated based on the calculation result, and collecting statistics on the historical access records of the file if the preset condition of a substantial increase in the probability of being accessed is met, includes: The preset condition for a substantial increase in the probability of being visited is a user-defined threshold, which is a percentage of increase, or an absolute amount of increase, or a combination of the above two.

[0012] Optionally, judging whether the file reaches a threshold of access volume based on the statistical result, compressing the updated file if the access volume reaches the threshold, and adding the updated file to a to-be-compressed list if the access volume does not reach the threshold, and obtaining an initial count value, includes: After the list to be compressed is completed, a timing trigger is set to traverse the list content to determine whether it meets the high-frequency file threshold; If the high-frequency file threshold is met, the file is taken out of the to-be-compressed list and compressed immediately. If the high-frequency file threshold is not met, the file is considered to have failed to meet the standard within this timing period, and the file count value is reduced by 1. After the file count value is reduced by 1, if the count value has not returned to zero, the file will remain in the list to be compressed; if the count value returns to zero, the file will be removed from the list to be compressed and compression will be abandoned.

[0013] The present application also provides a device for a compression method of a zero-trust network access technology, characterized in that the device comprises: A memory, a processor, and a computer program stored in the memory and running on the processor, wherein the computer program is configured to implement the steps of the on-demand compression method of any one of the zero-trust network access technologies.

[0014] Optionally, the device for the compression method of the zero-trust network access technology is characterized by: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the on-demand compression method of any one of the zero-trust network access technologies are implemented.

[0015] The present application also provides an electronic device, characterized in that it includes: A memory and a processor, wherein a computer program is stored in the memory, wherein when the processor executes the computer program, the steps of the on-demand compression method of any zero-trust network access technology are implemented.

[0016] The beneficial effects of the present application are as follows: the system identifies the types of updated data, applies corresponding judgment criteria, obtains reasonable judgment results for the updated data, intelligently compresses and caches data that meets the criteria, and saves as much network bandwidth resources as possible with as little computing power as possible. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required in the embodiments or the description of the prior art. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0018] Figure 1 A flowchart showing an on-demand compression method based on zero-trust network access technology disclosed in the present application is shown; Figure 2A diagram showing the internal structure of a ZTNA disclosed in the present application; Figure 3 A flowchart showing a method of compressing files during file update disclosed in the present application is shown; Figure 4 A flowchart showing a strategy disclosed in the present application or compressing files when users update; Figure 5 A flowchart of a to-be-compressed list operation disclosed in the present application is shown. DETAILED DESCRIPTION

[0019] Various exemplary embodiments, features and aspects of the present application will be described in detail below with reference to the accompanying drawings. The same reference numerals in the accompanying drawings represent elements with the same or similar functions. Although various aspects of the embodiments are shown in the accompanying drawings, the drawings are not necessarily drawn to scale unless otherwise specified.

[0020] The terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, "plurality" means two or more, unless otherwise clearly and specifically defined.

[0021] The word “exemplary” is used exclusively herein to mean “serving as an example, example, or illustration.” Any embodiment described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

[0022] In addition, in order to better illustrate the present application, numerous specific details are provided in the following specific embodiments. It should be understood by those skilled in the art that the present application can also be implemented without certain specific details. In some examples, methods, means, components and circuits well known to those skilled in the art are not described in detail in order to highlight the subject matter of the present application.

[0023] This application is an on-demand compression method for zero-trust network access technology. In this method, the system uses the characteristics of zero-trust network access that each user can only access specific policies and files to obtain the corresponding relationship between all users, policies and files in the system. When any part of it is updated, the system can determine whether the updated part is a high-frequency file by statistically querying historical access records and calculating file associations, and immediately compress the high-frequency file, so as to save as much network bandwidth resources as possible with as little computing power as possible.

[0024] like Figure 1 As shown, it is a flowchart of an on-demand compression method of a zero-trust network access technology according to an embodiment of the present application, which specifically includes the following contents: S100, when there is data update in the system, the type of data to be updated is determined and a determination result is obtained.

[0025] Specifically, the zero-trust network access system includes users, policies, and files. When the updated content is a file type, its compression trigger mechanism is to determine whether the updated part is a high-frequency file based on historical access records, and immediately compress the updated high-frequency files. When the updated content is a user type or a policy type, its compression trigger mechanism is to determine whether the updated part is a high-frequency file based on file association and historical access records, and immediately compress the updated high-frequency files.

[0026] S200, when a file is updated in the system, when the updated file meets a preset access condition, a compression mechanism is triggered to compress the updated file.

[0027] Specifically, when a file is updated, the system will delete the compression cache of the file, and then count its historical access records to determine whether the number of visits meets the threshold. If the number of visits to the file exceeds the threshold, it is a high-frequency file and is immediately compressed to create a new version cache. Otherwise, compression is directly abandoned.

[0028] S300, when the updated policy or user is in the system, the correlation between the updated policy or user and the file is calculated, and according to the correlation, it is determined whether to trigger a compression mechanism to compress the file corresponding to the updated policy or user.

[0029] Specifically, when a policy or user is updated, the system will first calculate the correlation between the updated item and the accessible file, and confirm whether the probability of the accessible file being accessed has increased by a certain magnitude or amount. When the correlation reaches the growth threshold, the historical access records are counted to determine whether there is a visit volume that meets the threshold. If the file's visit volume exceeds the threshold, it is a high-frequency file and is immediately compressed to create a new version cache. All files that do not meet the threshold are added to the list to be compressed and an initial count value is set.

[0030] Among them, a timing trigger is set to traverse the above-mentioned list of files to be compressed. If a file in the list meets the condition of a high-frequency file, it is taken out of the list and compressed immediately. During the traversal, the count value of the file that does not meet the condition of a high-frequency file is reduced by 1. If the count value is reduced to 0, the corresponding file will be abandoned and removed from the list.

[0031] In summary, by analyzing the updated files, we can understand whether they are frequently accessed high-frequency files before the update, and immediately compress these high-frequency files with high access rates to create new version caches, so as to achieve the purpose of predicting the access trend of large files, pre-compressing high-frequency access files, and saving as much network bandwidth resources as possible with as little computing power as possible.

[0032] Specifically, in a zero-trust network access system, each user can be defined with multiple policies, and the relationship between users and policies is many-to-many. At the same time, each policy defines a large number of accessible resources. Here, the resources are simplified to files, and the relationship between policies and files is also many-to-many.

[0033] like Figure 2 As shown, the relationship diagram of the internal structure of the ZTNA of an embodiment of the present application includes the following contents: Specifically, the three users correspond to two policies, and each policy is associated with two or three files. Finally, Zhang San can access a.iso and b.iso through R&D; Li Si can access a.iso and b.iso through R&D, and access b.iso, c.mp4, and d.mp4 through O&M; Wang Wu can access b.iso, c.mp4, and d.mp4 through O&M.

[0034] It can be found that b.iso is accessible to all three users, with a correlation of 3, and a high probability of being accessed. Taking this as an example, in other application scenarios, with hundreds of users, dozens of policies, and thousands of files, the zero-trust network access system can quickly calculate how many people each file corresponds to (i.e., the correlation), and filter out some files with a high probability of being accessed.

[0035] As mentioned above, it is not enough to predict the access probability of a file based on permissions alone. After all, a highly correlated file only means that it has a high chance of being accessed, not that it will actually be accessed a lot. In addition, users, policies, and files in a zero-trust network access system change at any time. It is not appropriate to compress at any time or immediately after users, policies, and files are updated. A relatively "sluggish" trigger mechanism is needed.

[0036] Specifically, when a file is updated in the system, the historical access records of the file are counted, and based on the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed, and if the access volume threshold is not reached, compression is abandoned.

[0037] Among them, Figure 3 As shown in the figure, the flowchart of compressing files when files are updated includes the following contents: when a file is updated in the zero-trust network access system, the existing compressed cache of the file in the system should be deleted immediately to reduce the waste of computing resources. Then, all historical access records of the file in the recent period are retrieved, and the records are used to determine whether the file meets the threshold access volume of high-frequency files in the recent period.

[0038] If the conditions are met, the file is a high-frequency file, and the system immediately compresses the file and creates a new version of the compressed cache; if the conditions are not met, the file is not a high-frequency file, and the system stores the updated content and directly abandons compression until there is access to the file.

[0039] Specifically, when the system updates a user or a policy, it is necessary to calculate the correlation between the updated file and each file. Based on the calculation result, it is determined whether the file meets the preset condition of a substantial increase in the probability of being accessed after the update. If the preset condition of a substantial increase in the probability of being accessed is met, the historical access records of the file are counted. Based on the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume threshold is not reached, the file is added to the list to be compressed and an initial count value is obtained.

[0040] Among them, Figure 4 As shown, the flowchart of compressing files when policies or users are updated includes the following: When a policy or user is updated in the zero-trust network access system, the system will first calculate the correlation between the update item and each file to confirm whether the update has significantly increased the access probability of some files. The "significant" mentioned here is a threshold that can be defined, such as a file with a 20% increased access probability in this update, or a file with an absolute number of 100 associations in this update, or a combination of the above two. If the updated correlation meets the set threshold, the next judgment will be executed. If the updated correlation does not meet the set threshold, the subsequent steps will be stopped and no compression will be performed.

[0041] Then, the historical access records of the update items that meet the threshold are queried, and this record is used to determine whether the update item has recently met the threshold access volume of high-frequency files. If so, the update item is a high-frequency file, and the system immediately compresses the update item and creates a new version of the compressed cache; if not, the update item is not a high-frequency file, and the system adds the update item to a list to be compressed and sets an initial count value for the update item, for example, setting the count value to 3.

[0042] Specifically, after the list to be compressed is completed, a timing trigger is set to traverse the list content to determine whether the high-frequency file threshold is met. If the high-frequency file threshold is met, the file is taken out of the list to be compressed and compressed immediately. If the high-frequency file threshold is not met, it is considered that the file does not meet the standard within this timing period, and the file count value is reduced by 1. After the file count value is reduced by 1, if the count value does not return to zero, it will remain in the list to be compressed. If the count value returns to zero, it will be removed from the list to be compressed and compression will be abandoned.

[0043] Among them, Figure 5As shown, the flowchart of the work of the list to be compressed includes the following contents. First, the system will set a timing trigger, which is a mechanism that can automatically trigger the execution of a specific task at a predetermined time. In this method, the role of the constant trigger is to periodically execute the system to traverse the compression list.

[0044] The system will then traverse the compression list to determine whether each item in the list meets the threshold for high-frequency files. If an item meets the threshold, it will be taken out of the compression list and compressed immediately.

[0045] The list items that do not meet the high-frequency file threshold will be considered by the system as not meeting the standards within this timing period, and the count values ​​of these items will be reduced by 1. The count value will then be checked. If the count value has not returned to zero, it will remain in the list to be compressed and wait for the next cycle of detection. If the count value returns to zero, it will be removed from the list to be compressed and compression will be abandoned.

[0046] The above steps use an on-demand compression method for zero-trust network access technology, characterized in that the device includes a memory, a processor, and a computer program stored on the memory and running on the processor, and the computer program is configured to implement the steps of the on-demand compression method for zero-trust network access technology described in any one of the above contents.

[0047] An electronic device used in the above steps is characterized in that it includes a memory and a processor, and a computer program is stored in the memory, wherein the processor implements the steps of the on-demand compression method of the zero-trust network access technology described in any of the above contents when executing the computer program.

[0048] The embodiments of the present application have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A compression method for zero-trust network access technology, characterized in that: include: When there is data update in the system, determine the type of data to be updated and obtain the determination result; When files are updated in the system, when the updated files meet the preset access volume conditions, the compression mechanism is triggered to compress the updated files; When the policy or user is updated in the system, the correlation between the updated policy or user and the file is calculated, and according to the correlation, it is determined whether to trigger the compression mechanism to compress the corresponding file of the updated policy or user.

2. The compression method of zero-trust network access technology according to claim 1, characterized in that: When a file is updated in the system, when the updated file meets the preset access volume condition, a compression mechanism is triggered to compress the updated file, including: When a file is updated in the system, statistics are collected on the historical access records of the file; According to the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume threshold is not reached, the compression is abandoned.

3. The compression method of zero-trust network access technology according to claim 2, characterized in that: Also includes: When a file is updated in the system, it is searched whether there is a previous compressed file of the updated file; When a previous compressed file exists for the updated file, the previous compressed file is deleted.

4. The compression method of zero-trust network access technology according to claim 1, characterized in that: When the updated policy or user is a policy or user in the system, the correlation between the updated policy or user and the file is calculated, and according to the correlation, it is determined whether to trigger the compression mechanism to compress the file corresponding to the updated policy or user, including: When the updated content in the system is a user or policy, the correlation between the updated content and each file needs to be calculated; According to the calculation result, it is determined whether the file meets the preset condition of a substantial increase in the probability of being accessed after being updated. If the preset condition of a substantial increase in the probability of being accessed is met, the historical access records of the file are counted; According to the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume threshold is not reached, the file is added to the list to be compressed and an initial count value is obtained.

5. The compression method of zero-trust network access technology according to claim 1, characterized in that: In zero-trust network access, there are three types of data: users, policies, and files. The relationship between users and policies is many-to-many, and the relationship between policies and files is also many-to-many.

6. The compression method of zero-trust network access technology according to claim 4, characterized in that: The method of determining whether the file meets the preset condition of a substantial increase in the probability of being accessed after being updated based on the calculation result, and collecting statistics on the historical access records of the file if the preset condition of a substantial increase in the probability of being accessed is met, includes: The preset condition for a substantial increase in the probability of being visited is a user-defined threshold, which is a percentage of increase, or an absolute amount of increase, or a combination of the above two.

7. The compression method of zero-trust network access technology according to claim 4, characterized in that: According to the statistical results, it is determined whether the file reaches the access volume threshold. If the access volume threshold is reached, the updated file is compressed. If the access volume does not reach the threshold, the file is added to the to-be-compressed list, and an initial count value is obtained, including: After the list to be compressed is completed, a timing trigger is set to traverse the list content to determine whether it meets the high-frequency file threshold; If the high-frequency file threshold is met, the file is taken out of the to-be-compressed list and compressed immediately. If the high-frequency file threshold is not met, the file is considered to have failed to meet the standard within this timing period, and the file count value is reduced by 1. After the file count value is reduced by 1, if the count value has not returned to zero, the file will remain in the list to be compressed; if the count value returns to zero, the file will be removed from the list to be compressed and compression will be abandoned.

8. A device for a compression method of a zero-trust network access technology, characterized in that: The device comprises: A memory, a processor, and a computer program stored in the memory and running on the processor, wherein the computer program is configured to implement the steps of the compression method of the zero-trust network access technology according to any one of claims 1 to 7.

9. The device of the compression method of zero-trust network access technology according to claim 8 is characterized in that: The memory is a computer-readable storage medium, and a computer program is stored in the memory. When the computer program is executed by the processor, the steps of the compression method of the zero-trust network access technology according to any one of claims 1 to 7 are implemented.

10. An electronic device, characterized in that: include: A memory and a processor, wherein a computer program is stored in the memory, wherein the processor implements the steps of the compression method of the zero-trust network access technology described in any one of claims 1 to 7 when executing the computer program.

Images