Certificate asset relation topology dynamic visualization system and method

Abstract

The invention discloses a dynamic visualization system and method for a certificate asset relation topology. The system comprises a data input layer, a relation discovery module, a topology calculation engine, a visual rendering module, an interaction control module and a real-time monitoring module. The data input layer collects certificates, IT assets and configuration data; the relationship discovery module adopts a depth-first search algorithm to identify relationships of deployment, dependency, protection and the like of certificates and IT assets, and stores the relationships after triple verification of domain name matching, configuration analysis and network detection; the topology calculation engine realizes layout optimization based on an improved force-oriented layout algorithm; the visual rendering module adopts WebGLGPU acceleration and LOD technology to distinguish asset types and relationships through visual coding; the interaction control module provides interaction such as dragging and zooming. According to the method, dynamic visualization of the certificate and IT asset relationship is realized, the management efficiency is improved, the certificate change risk is reduced, the large-scale data visualization performance is improved, and the method is suitable for certificate asset relationship management of a complex IT environment of an enterprise.

Description

Technical Field

[0001] This invention relates to the field of digital certificate management and IT asset visualization technology, specifically to a dynamic visualization system and method for certificate asset relationship topology. Background Technology

[0002] As enterprise IT architectures become increasingly complex, digital certificates have become deeply integrated into the IT asset system, requiring collaboration with assets such as domain names, CDNs, load balancers, and cloud services. Currently, when managing the relationship between certificates and IT assets, enterprises commonly use tables or simple lists to display basic certificate information, with some systems only providing static charts (such as bar charts and pie charts) for supplementary display. These technical solutions have significant shortcomings: 1. The relationship display is not intuitive: The existing method mainly presents linear data, which cannot intuitively reflect the complex dependency network between certificates and various IT assets (such as the deployment relationship between CDN and certificates, and the protection relationship between domain names and certificates). Administrators need to manually associate multiple sets of data to sort out the relationships, which is inefficient. 2. Lack of impact analysis capabilities: When certificates change (such as renewal, replacement) or expire, the existing system cannot quickly assess the scope of their impact on related IT assets and business systems, which can easily lead to business interruption risks due to delayed decision-making. 3. Low information density and poor user experience: Static tables can only display information in a single dimension and cannot distinguish asset types, relationship levels and importance through visual encoding (such as color, size and style), and it takes time to locate key information; 4. Insufficient real-time performance: In a cloud environment, the relationship between IT assets (such as temporary cloud service nodes) and certificates changes frequently. The existing static display method cannot update the relationship data synchronously, resulting in a disconnect between the view and the actual business status. 5. Large-scale data performance bottleneck: When the number of certificates and IT asset nodes reaches tens of thousands, existing visualization tools are prone to lag and crashes due to the lack of high-performance rendering technology, and cannot meet the needs of large-scale enterprise management. Summary of the Invention

[0003] The purpose of this invention is to provide a dynamic visualization system and method for certificate asset relationship topology, aiming to solve the following technical problems: 1. How to intuitively display the complex relationship between certificates and IT assets, clearly presenting various relationships such as deployment, dependency, and protection; 2. How to quickly calculate the impact of certificate changes on related assets, provide quantitative risk indicators, and support decision-making; 3. How to improve the information density and interactive experience of visual displays to achieve rapid location of key information; 4. How to achieve real-time updates of the relationship between certificates and assets to ensure that the view is synchronized with the business status; 5. How to overcome the visualization performance bottleneck of large-scale data (tens of thousands of nodes) and ensure smooth rendering and computational efficiency.

[0004] To address the aforementioned technical problems, this invention provides a dynamic visualization system and method for certificate asset relationship topology. The system includes a data input layer, a relationship discovery module, a topology calculation engine, a visualization rendering module, an interactive control module, and a real-time monitoring module. The functions and connections of each module are as follows: Data Input Layer: Used to collect certificate data, IT asset data, and configuration data. Certificate data includes certificate number, validity period, and encryption algorithm; IT asset data includes domain name, CDN node, load balancer, cloud service name, IP address, and business line; configuration data includes preset association rules between assets. Data collection supports two methods: API interface calls (connecting to the enterprise's existing certificate management platform and IT asset ledger system) and log parsing (reading asset configuration logs), ensuring data coverage and integrity.

[0005] Relationship Discovery Module: Based on data collected from the data input layer, it automatically discovers the association between certificates and IT assets, specifically including: A depth-first search algorithm is used to traverse the IT asset network and identify the deployment relationship (DEPLOYED_ON), ​​dependency relationship (DEPENDS_ON), ​​protection relationship (PROTECTS), and other related relationships (RELATES_TO) between certificates and assets. The accuracy of the relationship is ensured through triple verification: domain name matching check (verifying the consistency between the certificate domain name and the asset domain name), configuration file parsing (reading the certificate reference record in the asset configuration file), and network probe verification (sending probe packets to confirm the actual communication relationship between the certificate and the asset). The validated relational data is stored in a relational database to form a structured relational graph.

[0006] Topology Calculation Engine: Responsible for calculating the topology layout of certificate and asset nodes. It uses an improved force-oriented layout algorithm to achieve dynamic optimization, specifically including: node repulsion force and edge attraction force, to achieve a balanced distribution among nodes; Layout optimization function: Through boundary constraints (limiting nodes within the view range), overlap avoidance (detecting node overlap and adjusting spacing), and clustering grouping (clustering nodes by asset type or business line), it ensures that the layout is aesthetically pleasing and the information is clear; Dynamic adjustment mechanism: When nodes are added or deleted, incremental calculation is performed based on the existing layout to avoid full recalculation and achieve a smooth layout transition.

[0007] Visualization rendering module: Employs high-performance rendering technology to display the topology map, specifically including: GPU-accelerated rendering is achieved based on WebGL technology, supporting real-time rendering of tens of thousands of nodes, ensuring a rendering frame rate of ≥30fps (tens of thousands of nodes) and memory usage of <500MB (tens of thousands of nodes). Apply multi-level LOD (Level of Detail) technology: When the view is zoomed, the simplified form of the node is displayed at a distance (such as only displaying the node icon), and the detailed information of the node (such as certificate validity period, asset IP) is displayed at a close distance. Visual coding rules: Distinguish asset types by node color (e.g., certificate nodes are blue, CDN nodes are green, and load balancer nodes are orange), distinguish relationship types by connection style (e.g., solid lines represent deployment relationships, dashed lines represent dependency relationships, and double lines represent protection relationships), and represent importance by node size (the higher the importance, the larger the node radius; importance is based on the core nature of the asset business).

[0008] Interactive Control Module: Provides rich interactive operations and intelligent analysis functions, including: Basic Interaction: Supports node dragging (manually adjusting node position), zooming and roaming (scroll wheel zoom, mouse drag pan), and relationship highlighting (when a node is clicked, all its associated nodes and connections are highlighted); Impact Analysis: Employs a breadth-first search algorithm to calculate the impact range of certificate changes based on the relationship graph, and quantifies the risk through an impact formula; Risk Assessment: Generates a risk assessment report with one click, sorting high-risk assets in descending order of impact_score and marking the risk level.

[0009] Real-time monitoring module: Enables dynamic updates and anomaly alerts for relational data, specifically including: Real-time updates: The system periodically (update cycle is configurable, default is 5 minutes) scans the data source of the data input layer to detect changes in certificate status (such as expired or renewed) and asset relationships (such as new dependencies or relationship termination), and automatically synchronizes them to the relationship graph and topology view. Change history: Stores the history of relationship changes (including change time, change type, and operator), and supports historical version backtracking; Anomaly Alarms: When an abnormal relationship change is detected (such as the interruption of the deployment relationship between core certificates and assets), an alarm notification is sent via system pop-up, email, or SMS. The alarm threshold can be customized.

[0010] 2. Alternative technical means In the above technical solution, some core technologies can be replaced according to the application scenario, and the replacement must meet the performance and functional requirements: The depth-first search algorithm in the relationship discovery module can be replaced with a breadth-first search algorithm. After the replacement, the integrity of relationship discovery (coverage ≥ 99%) must be ensured. The improved force-oriented layout algorithm in the topology computing engine can be replaced with a circular layout (suitable for scenarios with a single asset type) or a hierarchical layout (suitable for scenarios with clear hierarchical relationships). After the replacement, the layout calculation time is less than 5 seconds (for thousands of nodes). The WebGL technology in the visualization rendering module can be replaced with Canvas2D rendering technology, which is suitable for scenarios with fewer than a thousand nodes. After the replacement, the rendering frame rate must be ≥25fps (for thousands of nodes). The breadth-first search algorithm for impact analysis in the interactive control module can be replaced with an intelligent impact prediction algorithm based on graph neural networks. After the replacement, the accuracy of impact analysis must be ≥95%.

[0011] The method of the present invention includes the following steps, wherein steps 1-3 are necessary steps, and steps 4-5 are optimization steps: Step 1: Relationship Discovery and Data Collection (Essential Step) 1.1 Collect certificate data, IT asset data, and configuration data. The collection methods include API interface calls and log parsing. 1.2 A depth-first search algorithm is used to traverse the asset network and identify the relationships between certificates and assets, such as deployment, dependency, and protection. 1.3 The accuracy of the relationships is confirmed through three methods: domain name matching check, configuration file parsing, and network detection verification. The verified relationship data is then stored in the relational database.

[0012] Step 2: Topology calculation and layout optimization (necessary step) 2.1 Based on the improved force-directed layout algorithm, the node and relation data in the relational database are input, the force on the node is calculated, and the initial layout is determined; 2.2 Perform layout optimization: Apply boundary constraints to limit the node range, detect and adjust node overlap, and cluster and group according to asset type; 2.3 If subsequent nodes are added or deleted, a dynamic adjustment mechanism is triggered, incrementally calculating the layout to achieve a smooth transition. Step 3: High-performance visualization rendering (necessary step) 3.1 Load topology layout data based on WebGL technology and start GPU-accelerated rendering; 3.2 Apply LOD technology to adjust node display details according to the view scaling ratio; 3.3 Set node color, connection style and node size according to visual coding rules to generate a topology visualization view.

[0013] Step 4: Interactive Control and Intelligent Analysis (Optimization Step) 4.1 Provides basic interactive operations such as node dragging, zooming and roaming, and relationship highlighting, responding to user input; 4.2 Receive user impact analysis requests and traverse the relationship graph using a breadth-first search algorithm; 4.3 Generate a risk assessment report and sort high-risk assets by impact.

[0014] Step 5: Real-time updates and monitoring (optimized steps) 5.1 Regularly scan data sources to detect changes in the relationship between certificates and assets, and automatically update the relational database and topology view; 5.2 Record relationship change history and support historical version query; 5.3 When abnormal relationship changes are detected, trigger the alarm mechanism and send alarm notification.

[0015] In summary, due to the adoption of the above-mentioned technologies, the beneficial effects of this invention are: 1. Visualized Relationships: Through dynamic topology visualization and visual coding, the complex dependencies between certificates and IT assets are clearly presented, allowing administrators to quickly understand the associated network and improve information acquisition efficiency by 80%.

[0016] 2. Improved efficiency in impact analysis: Based on breadth-first search and a quantitative impact formula, the scope of impact of certificate changes can be generated with one click. The risk assessment time has been reduced from 2 hours / time for traditional manual analysis to 10 seconds / time, and the risk of certificate changes has been reduced by 60%.

[0017] 3. Optimized interactive experience: Supports drag, zoom, highlight and other interactive operations, and improves information density by combining LOD technology, reducing the time for locating key information by 70%.

[0018] 4. Improved real-time performance: Scheduled scanning and automatic update mechanisms ensure that the topology view is synchronized with the business status, adapting to the rapid change requirements in the cloud environment.

[0019] 5. Large-scale data adaptation: WebGL GPU acceleration and optimized layout algorithm, supporting real-time rendering of tens of thousands of nodes (frame rate ≥30fps), layout calculation time <5 seconds (thousands of nodes), performance is more than 10 times better than existing technologies. Attached Figure Description

[0020] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention, making other features, objects, and advantages of the invention more apparent. The illustrative embodiments of the invention illustrated in the drawings and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1 For the present invention Figure 1 This is a diagram of the overall system architecture. Figure 2 Flowchart for relationship discovery; Figure 3 This is a schematic diagram illustrating the application of the force-guided layout algorithm. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to represent selected embodiments of the invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0022] In the description of this invention, it should be understood that the terms indicating orientation or positional relationship are based on the orientation or positional relationship shown in the drawings and are only for the convenience of describing the invention and simplifying the description, and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of the invention.

[0023] In this invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," "linking," and "fixing," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. Those skilled in the art can understand the specific meaning of the above terms in this invention based on the specific context of the specification.

[0024] This invention provides a dynamic visualization system and method for certificate asset relationship topology. The following describes the invention in detail using an application scenario from a large e-commerce company (whose business covers online transactions, logistics scheduling, user management, and manages 12,000+ IT asset nodes, including 3,000+ digital certificates).

[0025] 1) System Deployment Hardware environment: The server uses an Intel Xeon Gold 6430 CPU, 128GB of memory, and a 2TB SSD. The client uses mainstream PCs (Windows 10 / 11, macOS 13+), and the graphics card supports WebGL 2.0. Software environment: The server side uses Python 3.10 (relationship discovery and topology calculation) and Node.js 18 (backend service), the client side uses Vue 3.0 + Three.js (visual rendering), and the database uses MySQL 8.0 (to store relational data and configuration data). Data integration: Connect to the enterprise's existing Venafi certificate management platform (to obtain certificate data), Zabbix IT asset monitoring system (to obtain asset data), and Nginx configuration logs (to obtain asset configuration data) via API interface, with the data collection cycle set to 5 minutes.

[0026] (II) Implementation of Relationship Discovery and Data Collection Data collection: Collect data on 3000+ certificates (e.g., certificate C001: number C001, domain name pay.xxx.com, validity period 2024.3.1-2025.3.1), 12000+ IT assets (e.g., CDN node CDN001: name Alibaba Cloud CDN, IP 10.0.0.1; load balancer SLB001: name Transaction SLB, IP 10.0.1.1), and Nginx configuration logs (including certificate C001 reference records). Relationship identification: Starting from the CDN001 node, a depth-first search algorithm is used to traverse the associated certificate C001 and domain name pay.xxx.com to identify the deployment relationship (DEPLOYED_ON) between C001 and CDN001 and the protection relationship (PROTECTS) between C001 and pay.xxx.com. Relationship verification: Domain name matching: The domain name pay.xxx.com (C001) matches the domain name bound to CDN001; verification passed. Configuration analysis: The Nginx configuration log contains a reference path to C001, and the verification is successful; Network detection: A probe packet was sent to CDN001, and the certificate fingerprint of C001 was detected and verified. Data storage: Store the relationship data between C001, CDN001, and pay.xxx.com in MySQL, with the relationship types marked as DEPLOYED_ON and PROTECTS, respectively.

[0027] (III) Parameter Configuration for Topology Calculation and Layout Optimization: Set the repulsion coefficient (k=100, spring coefficient (k_{spring}=0.3), damping coefficient (damping=0.9), and maximum number of iterations (max_iter=500); Layout Calculation: Input data for 3000+ certificate nodes and 12000+ asset nodes, calculate the node forces using (F_{rep}=frac{100^2}{d}) and (F_{att}=frac{d^2}{100}), and complete the initial calculation after 500 iterations. Initial layout; Layout optimization: Boundary constraints: Restrict nodes to the 1920×1080 view range to avoid node overflow; Overlap avoidance: If 20 groups of overlapping nodes are detected, adjust the node spacing from 10px to 20px to eliminate the overlap; Clustering and grouping: Cluster according to "Transaction Business Line", "Logistics Business Line" and "User Business Line", and distinguish each group of nodes with different colored borders; Dynamic adjustment: When adding a new certificate C002 (deployed on SLB002), only calculate the force between C002 and SLB002 and the surrounding nodes, and complete the layout adjustment within 1 second to achieve a smooth transition.

[0028] (iv) Visualization rendering implementation GPU-accelerated rendering: Based on Three.js and calling WebGL, the frame rate of rendering tens of thousands of nodes is stable at 32fps, with a memory usage of 480MB, which meets the requirements for smooth interaction. LOD applications: View zoom ratio < 20% (long distance): Only node icons are displayed (certificates are blue circles, CDNs are green squares); View zoom level 20%-80% (medium distance): Displays node names and core attributes (such as C001, pay.xxx.com); View zoom ratio > 80% (close range): Displays complete node information (C001 validity period, CDN001 IP); Visual encoding: Certificate nodes are blue, CDN nodes are green, and load balancers are orange; deployment relationships are solid lines, dependency relationships are dashed lines, and protection relationships are double lines; core transaction assets (such as SLB001) nodes have a radius of 15px, and non-core asset nodes have a radius of 8px.

[0029] (v) Implementation of Interactive Control and Impact Analysis Basic interaction: Drag the C001 node to the left side of the view, and the CDN001 and pay.xxx.com associated with the node will follow in real time; use the scroll wheel to zoom the view, and the node display details will switch according to the LOD rules; click C001 to highlight CDN001 (solid line), pay.xxx.com (double line) and the connection. Impact Analysis: The user triggered the C001 renewal impact analysis. The system used a breadth-first search to traverse the relationship graph and found that C001 is associated with CDN001, pay.xxx.com, and the transaction business system (which depends on pay.xxx.com); the impact degree was calculated.

[0030] CDN001: (importance=9), (path_length=1), (impact_score=9 / 1=9) (High risk); pay.xxx.com: (importance=10), (path_length=1), (impact_score=10) (High risk); Trading system: (importance=10), (path_length=2), (impact_score=5) (medium risk); Risk Report: Outputs an impact analysis report, sorting high-risk assets (pay.xxx.com, CDN001) in descending order by (impact_score), and marking the risk level and impact path.

[0031] (vi) Real-time monitoring implementation Real-time updates: The system scans the Venafi platform every 5 minutes. If the C003 certificate status changes to "expiring soon", the system automatically updates the status field of C003 in the relational database and synchronizes it to the topology view (the C003 node is marked with an orange warning border). Change Log: Records the time of C003 status change (2024.5.10 14:30), change type (status update), operator (automatic), and supports retrospective query; Anomaly Alarm: An interruption in the deployment relationship between C001 and CDN001 was detected (CDN001 configuration was accidentally deleted). The system triggered a pop-up alarm and sent an email to the operations and maintenance personnel. The alarm content included the names of C001 and CDN001 and the scope of impact. The operations and maintenance personnel restored the configuration within 10 minutes, and no business interruption occurred.

[0032] (vii) Implementation Results After the invention was applied to the e-commerce company, the following effects were achieved: Management efficiency: The time for clarifying the relationship between certificates and assets has been reduced from 2 people / day to automatic generation by the system (10 seconds / time), improving efficiency by 80%; Risk Management: The accuracy rate of the certificate change impact analysis reached 96%, and there were no further business interruptions due to certificate changes, reducing the risk by 60%. Performance: 32fps for rendering at tens of thousands of nodes, 4 seconds for layout calculation (thousands of nodes), and 480MB of memory usage, meeting the needs of large-scale data management; User experience: The time to locate key information has been reduced from 5 minutes to 30 seconds, and the operation and maintenance personnel's satisfaction has increased by 90%.

Claims

1. A dynamic visualization system for certificate asset relationship topology, characterized in that: It includes a data input layer, a relationship discovery module, a topology computing engine, a visualization rendering module, an interactive control module, and a real-time monitoring module; The data input layer is used to collect certificate data, IT asset data, and configuration data. The certificate data includes the certificate number, validity period, and encryption algorithm. The IT asset data includes the domain name, CDN node, load balancer, cloud service name, IP address, and business line. The relationship discovery module uses a depth-first search algorithm to traverse the IT asset network, identify the deployment relationship, dependency relationship, protection relationship and other related relationships between certificates and IT assets, and verify the accuracy of the relationship through three methods: domain name matching check, configuration file parsing and network detection verification. The verified relationship data is stored in the relationship database. The topology calculation engine calculates node positions based on an improved force-directed layout algorithm. The core algorithm formula is the node repulsive force F_rep=k. 2 / d、Edge attraction F_att=d 2 / k, where k is the repulsion coefficient and d is the Euclidean distance between the two nodes. At the same time, the layout optimization of boundary constraints, overlap avoidance and clustering grouping is performed, and the layout transition is achieved when nodes are added or deleted. The visualization rendering module uses WebGL technology for GPU-accelerated rendering and applies multi-level LOD technology to adjust node display details based on view distance. It generates a topology view by distinguishing asset types through node color, relationship types through connection style, and importance through node size. The interactive control module provides node dragging, zooming and roaming, and relationship highlighting operations. It uses a breadth-first search algorithm to calculate the impact range of certificate changes and quantifies risk using impact_score = importance / path_length, where importance is the asset importance score and path_length is the shortest path distance. It generates a risk assessment report sorted by impact_score with one click. The real-time monitoring module periodically scans the data source to detect relationship changes, automatically updates the relationship database and topology view, stores the change history, and triggers alarm notifications when an anomaly occurs.

2. The certificate asset relationship topology dynamic visualization system according to claim 1, characterized in that, The data input layer connects to the enterprise certificate management platform and IT asset ledger system via API interface, and collects data by parsing and reading asset configuration logs.

3. The certificate asset relationship topology dynamic visualization system according to claim 1, characterized in that, The topology calculation engine has a repulsion coefficient k ranging from 50 to 200, and also includes a spring coefficient k_spring: 0.1-0.5, a damping coefficient damping=0.8-0.95, and a maximum number of iterations max_iter:

500.

4. The certificate asset relationship topology dynamic visualization system according to claim 1, characterized in that, The visualization rendering module supports real-time rendering of ≥10,000 nodes, with a rendering frame rate of ≥30fps, memory usage of <500MB, and a calculation time of <5 seconds for the layout of thousands of nodes.

5. The certificate asset relationship topology dynamic visualization system according to claim 1, characterized in that, The risk levels in the interactive control module are divided as follows: impact_score > 0.8 is high risk, 0.5 ≤ impact_score ≤ 0.8 is medium risk, and impact_score < 0.55 is low risk.

6. The certificate asset relationship topology dynamic visualization system according to claim 1, characterized in that, The depth-first search algorithm of the relationship discovery module can be replaced with the breadth-first search algorithm (relationship coverage ≥ 99% after replacement); the force-directed layout algorithm of the topology calculation engine can be replaced with a circular layout or hierarchical layout algorithm (computation time < 5 seconds after replacement); the WebGL technology of the visualization rendering module can be replaced with Canvas2D rendering technology (frame rate ≥ 25fps after replacement).

7. A method for dynamically visualizing the topology of certificate asset relationships, characterized in that, Includes the following steps: S1: Relationship discovery and data collection. Collect certificate data, IT asset data and configuration data. Use a depth-first search algorithm to identify the relationship between certificates and IT assets. Verify the relationship through domain name matching, configuration resolution and network detection. Store the verified relationship data. S2: Topology calculation and layout optimization, based on an improved force-directed layout algorithm, through... F_rep=k 2 / d、F_att=d 2 / k calculates node positions, performs boundary constraints, overlap avoidance, and clustering optimization, and ensures a smooth layout transition when nodes are added or deleted; S3: High-performance visualization rendering, using WebGL technology for GPU-accelerated rendering, applying LOD technology to adjust node display details, and generating topology views according to rules of node color, connection style, and node size; S4: Interactive control and intelligent analysis, providing node drag-and-drop, zoom and roam, and relationship highlighting operations. It uses breadth-first search to calculate the impact range of certificate changes. Impact_score = path_length / importance quantifies risk and generates a risk assessment report; S5: Real-time updates and monitoring, periodically scans data sources to detect relationship changes, updates relationship data and topology views, stores change history, and triggers alarms when anomalies occur.

8. The method according to claim 7, characterized in that, The data collection cycle in step 1 is the same as the timed scan cycle in step 5, with a default cycle of 5 minutes. The collection methods include API interface calls and log parsing.

9. A certificate asset relationship topology dynamic visualization system according to claim 7, characterized in that, In step 2, during layout optimization, the node overlap spacing is adjusted to 20px. Clustering is performed based on the business line to which the asset belongs. The force-directed layout algorithm parameters are k=50-200. K_spring=0.1-0.5, damping=0.8-0.95, maxiter=500.

10. The method according to claim 7, characterized in that, In step 3, the LOD technology adjustment rules are as follows: when the view zoom ratio is <20%, node icons are displayed; when it is 20%-80%, node names and core attributes are displayed; and when it is >80%, complete node information is displayed. The visual encoding rules are: certificate nodes in blue, CDN nodes in green, load balancer nodes in orange, deployment relationships in solid lines, dependency relationships in dashed lines, and protection relationships in double lines.

Images