Service execution method and device, computer equipment and storage medium

Abstract

The invention relates to the field of network technologies and security technologies, in particular to a service execution method and device, computer equipment and a storage medium. The method comprises the following steps: under the condition of establishing netconf connection with a target device, if a service execution instruction of a to-be-processed service is received, judging whether the target device can execute the to-be-processed service according to a device configuration rule; under the condition that the target device can execute the to-be-processed service, the service execution instruction is forwarded to the target device, so that the target device performs service execution, it is ensured that on the premise that the target device does not need to perform operations such as restarting and operating system changing, it is ensured that quick rule configuration can be performed on each target device according to actual requirements, and the service execution efficiency is improved. The purpose of multi-dimensional real-time management of the target equipment is achieved.

Description

Technical Field

[0001] The present application relates to the fields of network technology and security technology, and in particular to a service execution method, apparatus, computer equipment, and storage medium. Background Art

[0002] During the system operation phase, to facilitate operational needs and enable rapid response and resolution of problems, management intervention is required for each illegal device or device with abnormal functions. For example, this can include prohibiting it from establishing a NETCONF session, prohibiting it from executing commands, prohibiting it from reporting and forwarding specific message types, and even prohibiting certain specific alarms in the alarm.

[0003] However, if the system manages a large number of devices, the method of managing each device one by one cannot meet the timeliness requirements of operational calls, affecting the smooth execution of subsequent equipment business. Summary of the Invention

[0004] Based on this, it is necessary to provide a business execution method, device, computer equipment and storage medium that can meet the timeliness requirements of operation calls in response to the above technical problems.

[0005] In a first aspect, the present application provides a service execution method, which is applied to a management and control end, and the method includes:

[0006] When a NETCONF connection is established with a target device, if a service execution instruction of a service to be processed is received, determining whether the target device is capable of executing the service to be processed according to the device configuration rules;

[0007] If it is determined that the target device is capable of executing the service to be processed, forwarding the service execution instruction to the target device so that the target device executes the service;

[0008] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

[0009] In one embodiment, determining whether the target device is capable of executing the to-be-processed service according to a device configuration rule includes:

[0010] Obtaining the status level of the target device, the region corresponding to the target device, and the manufacturer of the target device;

[0011] Based on the status level of the target device, the region corresponding to the target device and the manufacturer of the target device, it is determined according to device configuration rules whether the target device can execute the to-be-processed service.

[0012] In one embodiment, the method includes:

[0013] If it is detected that the target device triggers an uplink message sending event, determining whether the uplink message sent by the target device can be received according to the current state level of the target device and the single control configuration rule;

[0014] If so, then according to the area configuration rule and / or the uplink data shielding configuration rule, the uplink message sent by the target device is received or the target information in the uplink message is received. In one embodiment, according to the area configuration rule and the uplink data shielding configuration rule, the uplink message sent by the target device is received or the target information in the uplink message is received, including:

[0015] If it is determined according to the area configuration rule that the target device belongs to the whitelist device, and it is determined according to the uplink data shielding configuration rule that there is no information to be shielded in the uplink message sent by the target device, then the uplink message is received;

[0016] If the target device is determined to be a whitelist device according to the area configuration rule, and if the uplink message sent by the target device contains information to be shielded according to the uplink data shielding configuration rule, the target information other than the information to be shielded in the uplink message is received.

[0017] In one embodiment, determining that the target device belongs to a whitelist device according to the zone configuration rule includes:

[0018] When it is determined according to the area configuration rule that the area to which the target device belongs belongs to a whitelist area and the device manufacturer to which the target device belongs belongs to a whitelist manufacturer, it is determined that the target device belongs to a whitelist device.

[0019] In one embodiment, the method further comprises:

[0020] In response to a connection request for a target device, determining whether the target device is capable of a NETCONF connection according to a device configuration rule;

[0021] When it is determined that the target device can perform a NETCONF connection, a NETCONF connection is established with the target device.

[0022] In one embodiment, the area configuration rule is represented by a mapping relationship between a first identifier and first associated data;

[0023] The first identifier is used to represent the region to which the device belongs and the manufacturer of the device; the first associated data is used to represent the list attributes of the service; wherein the list attributes include a blacklist and a whitelist.

[0024] In one embodiment, the uplink data shielding configuration rule is represented by a mapping relationship between the second identifier and the second associated data;

[0025] The second identifier is used to represent the region to which the device belongs and / or the device registration identifier; the second associated data is used to represent the information to be shielded.

[0026] In a second aspect, the present application further provides a service execution device, which is configured on a management and control end, and the device includes:

[0027] a judgment module configured to, when a NETCONF connection is established with a target device and a service execution instruction of a service to be processed is received, determine whether the target device is capable of executing the service to be processed according to a device configuration rule;

[0028] a forwarding module, configured to forward the service execution instruction to the target device when determining that the target device is capable of executing the service to be processed, so that the target device executes the service;

[0029] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

[0030] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are performed:

[0031] When a NETCONF connection is established with a target device, if a service execution instruction of a service to be processed is received, determining whether the target device is capable of executing the service to be processed according to the device configuration rules;

[0032] If it is determined that the target device is capable of executing the service to be processed, forwarding the service execution instruction to the target device so that the target device executes the service;

[0033] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

[0034] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the following steps:

[0035] When a NETCONF connection is established with a target device, if a service execution instruction of a service to be processed is received, determining whether the target device is capable of executing the service to be processed according to the device configuration rules;

[0036] If it is determined that the target device is capable of executing the service to be processed, forwarding the service execution instruction to the target device so that the target device executes the service;

[0037] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

[0038] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the following steps:

[0039] When a NETCONF connection is established with a target device, if a service execution instruction of a service to be processed is received, determining whether the target device is capable of executing the service to be processed according to the device configuration rules;

[0040] If it is determined that the target device is capable of executing the service to be processed, forwarding the service execution instruction to the target device so that the target device executes the service;

[0041] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

[0042] The above-mentioned business execution method, device, computer equipment and storage medium, if receiving a business execution instruction of a pending business, will judge whether the target device can execute the pending business according to the device configuration rules, and then, when it is determined that the target device can execute the pending business, forward the business execution instruction to the target device so that the target device can execute the business. According to the above content, when the present application establishes a netconf connection with the target device, it will judge whether the target device can successfully execute the pending business according to the device configuration rules, wherein the device configuration rules include single control configuration rules, regional configuration rules and uplink data shielding configuration rules; therefore, the present application realizes unified management of all target devices by setting device configuration rules, so that each target device will judge whether it can execute the pending business in combination with the device configuration rules when it needs to execute the pending business, ensuring that each target device can be quickly configured with rules according to actual needs without the need for the target device to restart, change the operating system, etc., thereby achieving the purpose of multi-dimensional real-time management of the target device. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 An application environment diagram of a service execution method provided in an embodiment of the present application;

[0044] Figure 2 A flowchart of the first service execution method provided in an embodiment of the present application;

[0045] Figure 3 A flowchart of the second service execution method provided in an embodiment of the present application;

[0046] Figure 4 A flowchart of the third service execution method provided in an embodiment of the present application;

[0047] Figure 5 A flowchart of the fourth service execution method provided in an embodiment of the present application;

[0048] Figure 6 A flowchart of the fifth service execution method provided in an embodiment of the present application;

[0049] Figure 7 A flowchart of the sixth service execution method provided in an embodiment of the present application;

[0050] Figure 8 A structural block diagram of a service execution device provided in an embodiment of the present application;

[0051] Figure 9 FIG. 1 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0052] In order to make the purpose, technical solutions and advantages of this application more clear, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0053] The service execution method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the target device 102 communicates with the control terminal 104 through the network. The data storage system can store the data that the control terminal 104 needs to process. The data storage system can be integrated on the control terminal 104, or it can be placed on the cloud or other network servers. If a business execution instruction of a pending business is received, it is determined whether the target device is capable of executing the pending business according to the device configuration rules, and then, when it is determined that the target device is capable of executing the pending business, the business execution instruction is forwarded to the target device so that the target device performs the business. Among them, the target device 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablets, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc.

[0054] In one embodiment, Figure 2 As shown, a business execution method is provided, which is applied to Figure 1 Taking the control terminal 104 in FIG. 1 as an example, the following steps are included:

[0055] S201 : When a netconf connection is established with a target device, if a service execution instruction of a service to be processed is received, it is determined whether the target device can execute the service to be processed according to a device configuration rule.

[0056] The target device refers to the device that establishes a connection with the management terminal.

[0057] In one embodiment of the present application, the specific content of the device configuration rules can be pre-set based on the operation and maintenance experience and actual conditions of the operation and maintenance personnel, and the set device configuration rules can be stored in the configuration center module of the management and control end, so that when it is necessary to judge whether the target device can execute the pending business based on the device configuration rules, the latest device configuration rules can be obtained from the configuration center module in a timely manner.

[0058] In another embodiment of the present application, the device configuration rules can be sent to the target device for establishing a netconf connection after being pre-set successfully, so that the target device can determine whether it can execute the pending business after receiving the business execution instruction of the pending business through the device configuration rules stored in itself; if the pending business cannot be executed, the reason for the failure to execute will be fed back to the management and control end.

[0059] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; single-control configuration rules include business control rules corresponding to different status levels of the device; regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; uplink data shielding configuration rules include the information to be shielded in uplink messages sent from different regions.

[0060] It should be noted that when it is necessary to determine whether the target device is capable of executing the pending business based on the device configuration rules, the following contents may be included: obtaining the status level of the target device, the area corresponding to the target device, and the target device manufacturer; based on the status level of the target device, the area corresponding to the target device, and the target device manufacturer, determining whether the target device is capable of executing the pending business based on the device configuration rules.

[0061] Specifically, according to the device configuration rules, it can be determined whether the status level of the target device, the area corresponding to the target device, and the target device manufacturer belong to the white list that can execute the pending business; if all of them do, it is determined that the target device can execute the pending business; if there is one item that does not belong, it is determined that the target device cannot execute the pending business.

[0062] In one embodiment of the present application, if the status level of a device includes three levels, namely the first level, the second level and the third level; the single-control configuration rules may include the following: if the status level of a device is the first level, it means that the device is a normal device, and at this time the device can perform netconf connection and execute business execution and other operations, and the management and control end can receive the uplink message of the device; if the status level of a device is the second level, it means that the management and control end needs to prohibit receiving any uplink data sent by the device, and the device can only perform netconf connection and execute business execution and other operations; if the status level of a device is the third level, it means that the device is an abnormal device, and at this time the management and control end needs to prohibit all activities of the device.

[0063] Furthermore, the single-control configuration rule has the highest priority. When establishing a NETCONF connection with a device, receiving a service execution instruction for a pending service, or receiving an uplink message, the priority is to determine whether the device complies with the single-control configuration rule.

[0064] The configuration method of the single-control configuration rule includes: updating and storing the status level of each device by calling the management interface of the management system; the status level of each device is stored in the memory of each device, and can also be stored in a preset storage medium. The storage method of the status level and the specific type of storage medium are not limited here.

[0065] In one embodiment of the present application, the regional configuration rules are represented by a mapping relationship between a first identifier and first associated data; wherein, the first identifier is used to characterize the region to which the device belongs and the device manufacturer; the first associated data is used to characterize the list attributes of the service; wherein, the list attributes include a blacklist and a whitelist.

[0066] The region may include but is not limited to: provincial region, prefecture-level city region, etc.

[0067] Furthermore, the provinces, regions, prefecture-level cities, and device manufacturers corresponding to the first identifier are arranged in a fixed order according to a preset sequence, and are separated by commas; different provinces, regions, prefecture-level cities, and device manufacturers are separated by hash characters. The first associated data can use WHITE to indicate that the list attribute is a whitelist; and BLACK to indicate that the list attribute is a blacklist.

[0068] In one embodiment of the present application, the regional configuration rules may include but are not limited to: shielding all devices in the entire specified provincial area, shielding all devices in the specified municipal area of ​​the provincial area, shielding all devices other than the specified municipal area of ​​the provincial area, and shielding the manufacturers of specified equipment in all municipal areas of the provincial area.

[0069] Among them, blocking all devices in an entire province region can be represented by the mapping relationship between the first identifier and the first associated data as follows: KEY: province region, ALL, ALL; VALUE: BLACK. (Here, KEY represents the first identifier in the regional configuration rule, VALUE represents the first associated data in the regional configuration rule, the province region in KEY represents each specified province region, the first ALL refers to all prefecture-level cities, and the second ALL refers to all device manufacturers).

[0070] Shielding all devices in the specified city areas (city area 1, city area 2 and city area 3) of the provincial area can be expressed through the mapping relationship between the first identifier and the first associated data as: KEY: province area, city area 1#city area 2#city area 3, ALL; VALUE: BLACK (where ALL refers to all device manufacturers).

[0071] All devices other than the designated city areas (city area 1, city area 2 and city area 3) in the shielded provincial area can be represented by the mapping relationship between the first identifier and the first associated data as: KEY: province area, city area 1#city area 2#city area 3, ALL; VALUE: WHITE (where ALL refers to all device manufacturers).

[0072] The designated equipment manufacturers (equipment manufacturer 1, equipment manufacturer 2 and equipment manufacturer 3) in all prefecture-level cities in the shielded provincial area can be represented by the mapping relationship between the first identifier and the first associated data as follows: KEY: province area, ALL, equipment manufacturer 1#equipment manufacturer 2#equipment manufacturer 3; VALUE: BLACK.

[0073] In one embodiment of the present application, the uplink data shielding configuration rule is represented by a mapping relationship between a second identifier and second associated data; the second identifier is used to represent the area to which the device belongs, and / or the device registration identifier; the second associated data is used to represent the information to be shielded.

[0074] The information to be shielded may include but is not limited to: specific alarms, all alarms, all TCAs, specific TCAs, all notifications, and specific notifications.

[0075] Specifically, when it is necessary to block the information to be blocked corresponding to the province area, it is necessary to add the PROVINCE prefix in the second identifier; when it is necessary to block the information to be blocked corresponding to the city area, it is necessary to add the CITY prefix in the second identifier; when only a small number of devices are blocked, the device registration identifier of the device to be blocked can be directly used as the second identifier; when all alarms need to be blocked, the keyword ALL_ALARM can be used as the second associated data; when all TCA alarms need to be blocked, the keyword ALL_ALARM can be used as the second associated data; when all notification messages need to be blocked, the keyword ALL_NORMAL can be used as the second associated data; when a specified alarm / notification needs to be blocked, the code of the alarm or notification can be used as the keyword as the second associated data.

[0076] As an example, if the uplink data shielding configuration rule is: shield all alarms and TCA alarms in the specified province area, and do not shield notifications, then the uplink data shielding configuration rule is expressed through the mapping relationship between the second identifier and the second associated data: KEY: PROVINCE+province area; VALUE: ALL_ALARM, ALL_TCA (wherein, the KEY of the uplink data shielding configuration rule represents the second identifier, and the VALUE of the uplink data shielding configuration rule identifies the second associated data).

[0077] If the uplink data shielding configuration rule is: shield the LOS alarm and all notification messages of the specified city area, and do not shield TCA; then the uplink data shielding configuration rule is expressed by the mapping relationship between the second identifier and the second associated data as: KEY: CITY+city area; VALUE: ALL_NORMAL, LOS.

[0078] If the uplink data shielding configuration rule is: shield the LOS, LDL_EOL alarm, peer notification and common notification of the device, and do not shield others; then the uplink data shielding configuration rule is expressed through the mapping relationship between the second identifier and the second associated data as: KEY: device registration identifier; VALUE: LOS, LDL_EOL, peerChangeNotification, commonNOtification.

[0079] S202: When it is determined that the target device is capable of executing the service to be processed, forward the service execution instruction to the target device so that the target device executes the service.

[0080] It should be noted that if it is determined that the target device is capable of executing the pending business, it can be determined that the target device is not an illegal device or an abnormal device with abnormal functions. Therefore, forwarding the business execution instruction to the target device can ensure that the target device can smoothly execute the pending business.

[0081] The above-mentioned service execution method, if receiving a service execution instruction of a pending service, determines whether the target device can execute the pending service according to the device configuration rules, and then, when it is determined that the target device can execute the pending service, forwards the service execution instruction to the target device so that the target device can execute the service. According to the above content, when establishing a netconf connection with the target device, the present application will determine whether the target device can successfully execute the pending service according to the device configuration rules, wherein the device configuration rules include single control configuration rules, regional configuration rules and uplink data shielding configuration rules; therefore, the present application realizes unified management of all target devices by setting device configuration rules, so that each target device will determine whether it can execute the pending service in combination with the device configuration rules when it needs to execute the pending service, ensuring that each target device can be quickly configured with rules according to actual needs without the need for the target device to be restarted, the operating system to be changed, etc., thereby achieving the purpose of multi-dimensional real-time management of the target device.

[0082] In one embodiment, if Figure 3 As shown, if it is detected that the target device triggers an uplink message sending event, the application may also include the following contents:

[0083] S301: If it is detected that the target device triggers an uplink message sending event, it is determined whether the uplink message sent by the target device can be received according to the current state level of the target device and the single control configuration rule.

[0084] It should be noted that if the status level of the device recorded in the single-control configuration rule includes three levels, namely the first level, the second level and the third level; and the uplink message sent by the target device can only be received when the status level of the device is the first level; therefore, when it is necessary to determine whether the uplink message sent by the target device can be received based on the current status level of the target device and the single-control configuration rule, it can be determined whether the current status level of the target device is the first level; if so, it means that the uplink message sent by the target device can be received; if not, it means that the uplink message sent by the target device cannot be received.

[0085] S302: If yes, then according to the area configuration rule and / or the uplink data shielding configuration rule, receive the uplink message sent by the target device or receive the target information in the uplink message.

[0086] It should be noted that if only the regional configuration rule or only the uplink data shielding configuration rule is included, the uplink message sent by the target device or the target information in the uplink message is received through the regional configuration rule or the uplink data shielding configuration rule respectively.

[0087] Furthermore, if it includes both the area, the configuration rule and the uplink data shielding configuration rule, the uplink message sent by the target device is received or the target information in the uplink message is received according to the area configuration rule and the uplink data shielding configuration rule.

[0088] Specifically, when it is necessary to receive the uplink message sent by the target device or the target information in the uplink message according to the regional configuration rules and the uplink data shielding configuration rules, the following contents may be included: if it is determined according to the regional configuration rules that the target device belongs to the whitelist device, and it is determined according to the uplink data shielding configuration rules that there is no information to be shielded in the uplink message sent by the target device, then the uplink message is received; if it is determined according to the regional configuration rules that the target device belongs to the whitelist device, and it is determined according to the uplink data shielding configuration rules that there is information to be shielded in the uplink message sent by the target device, then the target information other than the information to be shielded in the uplink message is received.

[0089] Further, when it is necessary to determine that the target device belongs to a whitelist device according to the regional configuration rules, the following content may be included: when it is determined according to the regional configuration rules that the area to which the target device belongs belongs to the whitelist area, and the device manufacturer to which the target device belongs belongs to the whitelist manufacturer, it is determined that the target device belongs to the whitelist device.

[0090] The above-mentioned business execution method, after detecting that the target device triggers an uplink message sending event, determines whether the uplink message sent by the target device can be received according to the current status level of the target device and the single control configuration rules and regional configuration rules and / or uplink data shielding configuration rules, thereby ensuring the smooth sending of the uplink message.

[0091] In one embodiment, if Figure 4 As shown, when a NETCONF connection is required to the target terminal, the following contents may be included:

[0092] S401 : In response to a connection request for a target device, determining whether the target device is capable of performing a NETCONF connection according to a device configuration rule.

[0093] It should be noted that when it is necessary to determine whether the target device can make a NETCONF connection based on the device configuration rules, the single-controller configuration rules can be used in advance to determine whether the target device can make a NETCONF connection; after determining that the target device can make a NETCONF connection through the single-controller configuration rules, the regional configuration rules and the row data masking configuration rules can be used to determine whether the target device can make a NETCONF connection.

[0094] Furthermore, if it is determined through the single-controller configuration rule that the target device cannot perform a NETCONF connection, there is no need to determine whether the target device can perform a NETCONF connection through the regional configuration rule and the row data shielding configuration rule.

[0095] S402: When it is determined that the target device can perform a NETCONF connection, establish a NETCONF connection with the target device.

[0096] The above service execution method controls the NETCONF connection of the target terminal according to the device configuration rules, thereby ensuring the orderly access of the target terminal.

[0097] In one embodiment, the device side may include a Netconf connection control module, a Netconf instruction execution module and a message uplink module; wherein the Netconf connection control module is used to passively wait for the management and control to establish a connection; the Netconf instruction execution module is used to passively wait for the instructions sent by the management and control after establishing the Netconf connection; the message uplink module establishes a Netconf connection channel, and all alarms and events in the device are sent uplink to the management and control side. The management and control end can include a business instruction receiving module, a NETCONF instruction execution module, a configuration center module, a device single control module, a device-level management and control module, and an uplink message receiving and processing module; among them, the business instruction receiving module is responsible for receiving business-level instructions executed by user operations, the NETCONF connection control module actively initiates the establishment of a NETCONF connection, and uses the single control module to determine whether the connection to this device is allowed, and the NETCONF instruction execution module uses the single control module to determine whether execution and sending are allowed; the configuration center module uses the device configuration rules stored externally to perform message shielding; the device single control control module obtains the single control configuration rules through the configuration center module, and implements device management through the single control configuration rules; the device-level management and control module obtains the regional configuration rules through the configuration center module for device management; the uplink message receiving and processing module obtains the uplink data shielding configuration rules through the configuration center module for device management.

[0098] Specifically, such as Figure 5 As shown, when the device netconf is connected, the following contents may be included:

[0099] S501: The service instruction receiving module sends a connection request to the service instruction receiving module.

[0100] S502, the service instruction receiving module obtains the latest single control configuration rules through the device single control control module, and determines whether the target device can be connected to NETCONF according to the device configuration rules;

[0101] S503 : When determining that the target device is capable of performing a NETCONF connection, the service instruction receiving module establishes a NETCONF connection with the target device.

[0102] Specifically, such as Figure 6 As shown, when the device service is executed, it may include the following contents:

[0103] S601: The netconf instruction execution module receives a service execution instruction for a service to be processed.

[0104] S602, the netconf instruction execution module obtains the latest device configuration rules through the device single control module, and determines whether the target device can execute the to-be-processed service according to the device configuration rules.

[0105] S603 , when determining that the target device is capable of executing the service to be processed, the netconf instruction execution module forwards the service execution instruction to the target device, so that the target device executes the service.

[0106] Specifically, such as Figure 7 As shown, when it is detected that the target device triggers an uplink message sending event, the following may be specifically included:

[0107] S701: After receiving the uplink message, the uplink message receiving and processing module obtains the latest single control configuration rule through the device single control control module, and determines whether the uplink message sent by the target device can be received according to the single control configuration rule.

[0108] S702, if yes, the uplink message receiving and processing module obtains the latest regional configuration rules and / or uplink data shielding configuration rules through the device single control module, and receives the uplink message sent by the target device or the target information in the uplink message according to the regional configuration rules and / or uplink data shielding configuration rules.

[0109] The above-mentioned service execution method, if receiving a service execution instruction of a pending service, determines whether the target device can execute the pending service according to the device configuration rules, and then, when it is determined that the target device can execute the pending service, forwards the service execution instruction to the target device so that the target device can execute the service. According to the above content, when establishing a netconf connection with the target device, the present application will determine whether the target device can successfully execute the pending service according to the device configuration rules, wherein the device configuration rules include single control configuration rules, regional configuration rules and uplink data shielding configuration rules; therefore, the present application realizes unified management of all target devices by setting device configuration rules, so that each target device will determine whether it can execute the pending service in combination with the device configuration rules when it needs to execute the pending service, ensuring that each target device can be quickly configured with rules according to actual needs without the need for the target device to be restarted, the operating system to be changed, etc., thereby achieving the purpose of multi-dimensional real-time management of the target device.

[0110] It should be understood that, although the steps in the flowcharts of the above embodiments are shown in sequence as indicated by the arrows, these steps are not necessarily performed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be performed in other orders. Moreover, at least a portion of the steps in the flowcharts of the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily performed at the same time, but can be performed at different times. The execution order of these steps or stages is not necessarily to be performed in sequence, but can be performed in turn or alternately with other steps or at least a portion of steps or stages in other steps.

[0111] Based on the same inventive concept, embodiments of the present application also provide a service execution device for implementing the aforementioned service execution method. The solution provided by this device is similar to the solution described in the aforementioned method. Therefore, the specific limitations in one or more service execution device embodiments provided below can be found in the aforementioned limitations on the service execution method and will not be further elaborated here.

[0112] In one embodiment, Figure 8 As shown, a service execution device is provided, including: a judgment module 10 and a forwarding module 20, wherein:

[0113] The judgment module 10 is used to determine whether the target device can execute the service to be processed according to the device configuration rules when a service execution instruction of the service to be processed is received when a NETCONF connection is established with the target device.

[0114] The forwarding module 20 is configured to forward the service execution instruction to the target device when it is determined that the target device is capable of executing the service to be processed, so that the target device executes the service.

[0115] Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; single-control configuration rules include business control rules corresponding to different status levels of the device; regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; uplink data shielding configuration rules include the information to be shielded in uplink messages sent from different regions.

[0116] In one embodiment, obtaining a status level of a target device, a region corresponding to the target device, and a manufacturer of the target device;

[0117] Based on the status level of the target device, the region corresponding to the target device and the target device manufacturer, it is determined according to the device configuration rules whether the target device can execute the pending business.

[0118] In one embodiment, if it is detected that the target device triggers an uplink message sending event, it is determined whether the uplink message sent by the target device can be received based on the current state level of the target device and the single control configuration rule;

[0119] If so, the uplink message sent by the target device is received or the target information in the uplink message is received according to the area configuration rule and / or the uplink data shielding configuration rule.

[0120] In one embodiment, if it is determined according to the regional configuration rule that the target device belongs to the whitelist device, and it is determined according to the uplink data shielding configuration rule that there is no information to be shielded in the uplink message sent by the target device, then the uplink message is received;

[0121] If the target device is determined to be a whitelist device according to the regional configuration rule, and if the uplink message sent by the target device contains information to be shielded according to the uplink data shielding configuration rule, the target information other than the information to be shielded in the uplink message is received.

[0122] In one embodiment, when it is determined according to the area configuration rule that the area to which the target device belongs belongs to a whitelist area and the device manufacturer to which the target device belongs belongs to a whitelist manufacturer, it is determined that the target device belongs to a whitelist device.

[0123] In one embodiment, in response to a connection request for a target device, determining whether the target device is capable of a netconf connection based on a device configuration rule;

[0124] If it is determined that the target device can establish a NETCONF connection, a NETCONF connection is established with the target device.

[0125] In one embodiment, the area configuration rule is represented by a mapping relationship between the first identifier and the first association data;

[0126] The first identifier is used to represent the region to which the device belongs and the manufacturer of the device; the first associated data is used to represent the list attribute of the service; wherein the list attribute includes a blacklist and a whitelist.

[0127] In one embodiment, the uplink data masking configuration rule is represented by a mapping relationship between the second identifier and the second associated data;

[0128] The second identifier is used to represent the region to which the device belongs and / or the device registration identifier; the second associated data is used to represent the information to be shielded.

[0129] If the above-mentioned business execution device receives a business execution instruction for a pending business, it will determine whether the target device can execute the pending business based on the device configuration rules, and then, when it is determined that the target device can execute the pending business, it will forward the business execution instruction to the target device so that the target device can execute the business. According to the above content, when the present application establishes a netconf connection with the target device, it will determine whether the target device can successfully execute the pending business based on the device configuration rules, wherein the device configuration rules include single control configuration rules, regional configuration rules and uplink data shielding configuration rules; therefore, the present application realizes unified management of all target devices by setting device configuration rules, so that each target device will determine whether it can execute the pending business based on the device configuration rules when it needs to execute the pending business, ensuring that each target device can be quickly configured with rules according to actual needs without the need for the target device to be restarted or the operating system to be changed, thereby achieving the purpose of multi-dimensional real-time management of the target device.

[0130] Each module in the aforementioned service execution device may be implemented in whole or in part through software, hardware, or a combination thereof. Each module may be embedded in or independent of a processor in a computer device in the form of hardware, or may be stored in a memory in the computer device in the form of software, so that the processor can call and execute the corresponding operations of each module.

[0131] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 9As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface, the display unit and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a service execution method is implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device casing, or an external keyboard, touchpad or mouse.

[0132] Those skilled in the art will understand that Figure 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different component arrangement.

[0133] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions.

[0134] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, database or other media used in the embodiments provided in this application may include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory may include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in the various embodiments provided herein may include at least one of a relational database and a non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchains. The processor involved in the various embodiments provided herein may be, but are not limited to, a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, and the like.

[0135] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0136] The above embodiments merely illustrate several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that a person skilled in the art may make various modifications and improvements without departing from the spirit of the present invention, all of which fall within the scope of protection of the present application. Therefore, the scope of protection of the present application shall be determined by the appended claims.

Claims

1. A service execution method, characterized in that: Applied to the management and control end, the method includes: In the case of establishing a network management protocol NETCONF connection with a target device, if a service execution instruction of a service to be processed is received, determining whether the target device is capable of executing the service to be processed according to a device configuration rule; If it is determined that the target device is capable of executing the service to be processed, forwarding the service execution instruction to the target device so that the target device executes the service; Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

2. The method according to claim 1, characterized in that Determining whether the target device is capable of executing the service to be processed according to the device configuration rule includes: Obtaining the status level of the target device, the region corresponding to the target device, and the manufacturer of the target device; Based on the status level of the target device, the region corresponding to the target device and the manufacturer of the target device, it is determined according to device configuration rules whether the target device can execute the to-be-processed service.

3. The method according to claim 1, characterized in that The method comprises: If it is detected that the target device triggers an uplink message sending event, determining whether the uplink message sent by the target device can be received according to the current state level of the target device and the single control configuration rule; If so, the uplink message sent by the target device is received or the target information in the uplink message is received according to the area configuration rule and / or the uplink data shielding configuration rule.

4. The method according to claim 3, characterized in that Receiving the uplink message sent by the target device or receiving the target information in the uplink message according to the area configuration rule and the uplink data shielding configuration rule includes: If it is determined according to the area configuration rule that the target device belongs to the whitelist device, and it is determined according to the uplink data shielding configuration rule that there is no information to be shielded in the uplink message sent by the target device, then the uplink message is received; If the target device is determined to be a whitelist device according to the area configuration rule, and if the uplink message sent by the target device contains information to be shielded according to the uplink data shielding configuration rule, the target information other than the information to be shielded in the uplink message is received.

5. The method according to claim 4, characterized in that The determining, according to the area configuration rule, that the target device belongs to a whitelist device includes: When it is determined according to the area configuration rule that the area to which the target device belongs belongs to a whitelist area and the device manufacturer to which the target device belongs belongs to a whitelist manufacturer, it is determined that the target device belongs to a whitelist device.

6. The method according to claim 1, characterized in that The method further comprises: In response to a connection request for a target device, determining whether the target device is capable of a NETCONF connection according to a device configuration rule; When it is determined that the target device can perform a NETCONF connection, a NETCONF connection is established with the target device.

7. The method according to any one of claims 1 to 6, characterized in that The area configuration rule is represented by a mapping relationship between the first identifier and the first associated data; The first identifier is used to represent the region to which the device belongs and the manufacturer of the device; The first associated data is used to characterize a list attribute of a service; wherein the list attribute includes a blacklist and a whitelist.

8. The method according to any one of claims 1 to 6, characterized in that The uplink data shielding configuration rule is represented by a mapping relationship between the second identifier and the second associated data; The second identifier is used to represent the region to which the device belongs and / or the device registration identifier; The second associated data is used to represent the information to be shielded.

9. A service execution device, characterized in that: Configured at the control end, the device includes: a judgment module configured to, when a NETCONF connection is established with a target device and a service execution instruction of a service to be processed is received, determine whether the target device is capable of executing the service to be processed according to a device configuration rule; a forwarding module, configured to forward the service execution instruction to the target device when determining that the target device is capable of executing the service to be processed, so that the target device executes the service; Among them, the device configuration rules include single-control configuration rules, regional configuration rules and uplink data shielding configuration rules; the single-control configuration rules include business control rules corresponding to different status levels of the device; the regional configuration rules include business control rules corresponding to different regions and / or different equipment manufacturers; the uplink data shielding configuration rules include the information to be shielded in the uplink messages sent by different regions.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 8 are implemented.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

12. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images