Manufacturer's Office Area IP Management System

Abstract

This invention provides an IP management system for vendor office areas, applicable to network resource management operations within a bank's vendor office areas. The system includes an IP change receiving module, a serial execution module, an idle check module, and a status synchronization module. The IP change receiving module receives IP change request data from the administrative management system and generates change commands. The serial execution module performs corresponding setting actions on the IP / MAC setting system according to the change commands. The idle check module retrieves deregistration file data at preset time intervals and generates batch deregistration commands, which are then executed by the serial execution module. The status synchronization module sends the execution results back to the administrative management system to update the IP allocation status.

Description

Manufacturer's Office Area IP Management System Technical Field

[0001] This invention relates to a network address management system, and more particularly to an IP address management system applicable to the internal office areas of bank vendors. Prior Technology

[0002] As financial institutions become increasingly information-based, various system vendors within banks need to use the bank's internal network resources for system development, testing, and maintenance when they move into the office area. For this purpose, banks typically allocate corresponding Internet Protocol (IP) addresses to these vendors and deregister them when vendors leave or when the IP addresses become idle.

[0003] In conventional technology, the management process of IP addresses in a vendor's office area typically involves the coordination of multiple different systems. For example, vendor personnel must first submit an IP address application in a general affairs management system. After review by relevant personnel and supervisors, the applicant must then go to an IP / MAC (Media Access Control) management system to log in and activate the IP address. Only after the IP / MAC management system has been configured and approved by the supervisor can the IP address be used.

[0004] Furthermore, if an IP address remains unused for an extended period after allocation, the IP / MAC management system will automatically deregister it based on a preset idle period. However, this deregistration process requires the IP / MAC management system to generate a deregistration file monthly, which is then manually imported into the general affairs management system by the administrators to complete the batch deregistration process.

[0005] The aforementioned conventional workflow, due to its involvement of manual operations and data transfer between multiple systems, is prone to human errors such as discontinuous application processes, duplicate applications, duplicate IP address allocations, or failure to promptly deregister IP addresses. Furthermore, its efficiency is limited by the speed of manual processing. Therefore, how to integrate the aforementioned cross-system IP address management workflow to reduce manual intervention is a problem that needs to be solved in the relevant technical field. Summary of the Invention

[0006] Therefore, one aspect of this invention is to provide a vendor office area IP management system, applicable to network resource management operations in a bank's internal vendor office area. This vendor office area IP management system includes a plurality of hardware modules composed of a plurality of hardware circuits. These hardware modules include an anomaly receiving module, a serial execution module, an idle check module, and a status synchronization module. The anomaly receiving module is configured to receive IP anomaly request data from a general affairs management system. The IP anomaly request data includes an anomaly type and an IP address, and generates an anomaly command based on the anomaly type. The serial execution module is connected to the anomaly receiving module and is configured to receive the anomaly command and perform a corresponding setting action on an IP / MAC setting system based on the anomaly command to generate execution result data. The idle check module is configured to obtain deregistration file data from the IP / MAC setting system at a preset time interval and generate a batch of deregistration commands based on the deregistration file data. The batch of deregistration commands is executed via the serial execution module. The status synchronization module is connected to the serial execution module and is configured to receive the execution result data and send the execution result data back to the administrative management system to update the IP allocation status.

[0007] According to one embodiment of the present invention, the anomaly type includes a new action or a deletion action.

[0008] According to one embodiment of the present invention, the IP change request data is generated after one of the operators and one of the supervisors in the administrative management system have completed the review.

[0009] According to one embodiment of the present invention, the serial execution module is configured to connect a host operating in a Windows operating environment and a host operating in a Linux operating environment across platforms.

[0010] According to one embodiment of the present invention, the deregistration file data obtained by the idle check module is generated by the IP / MAC setting system based on a preset idle period of unused IP addresses.

[0011] According to one embodiment of the present invention, the batch deregistration instruction generated by the idle check module includes a plurality of IP address data, and the serial execution module is configured to perform corresponding deregistration settings on the plurality of IP address data according to the batch deregistration instruction.

[0012] With the above configuration, this new type of IP management system for enterprise office areas can integrate the IP address allocation and deregistration operations that were originally scattered between the general affairs management system and the IP / MAC setting system into an automated serial process. This allows the addition, deletion, and deregistration of IP addresses to be performed automatically between the systems, reducing manual intervention and maintaining consistency in the IP allocation status between the two systems.

[0013] The above description is intended to provide a simplified summary of the present invention to enable the reader to have a basic understanding of it. This description is not a complete overview of the present invention, and it is not intended to identify key / critical elements of the embodiments or define the scope of the invention. After referring to the following embodiments, those skilled in the art will readily understand the basic spirit and other novel objectives of the present invention, as well as the technical means and implementation aspects employed. Simple Explanation of the Diagram

[0014] To make the above and other objects, features, advantages and embodiments of the present invention more apparent and understandable, the accompanying drawings are described below.

[0015] Figure 1 is a schematic diagram of the functional architecture of a manufacturer's office area IP management system according to an embodiment of the present invention.

[0016] Figure 2 is a flowchart illustrating a manufacturer's office area IP management method according to one embodiment of the present invention. Implementation

[0017] Based on the above, a vendor office area IP management system is provided. This vendor office area IP management system can integrate the IP address allocation and deregistration process of vendor office areas within a bank into an automated serial operation. In the following description, an exemplary structure and exemplary execution method of the aforementioned vendor office area IP management system will be introduced. For ease of understanding of the embodiments, numerous technical details will be provided below. Of course, not all embodiments require these technical details. Furthermore, some well-known structures or components will only be illustrated schematically in the accompanying drawings to appropriately simplify the content of the drawings.

[0018] To provide a more detailed and complete description of the present invention, the following illustrative description focuses on the implementation aspects and specific embodiments of the present invention; however, this is not the only embodiment of the present invention. The features and module configurations disclosed in the embodiments can be appropriately adjusted or replaced according to actual needs without departing from the spirit and scope of the present invention.

[0019] For ease of description, the system described below is functionally divided into multiple modules or units. It should be understood that each module or unit can be implemented by one or more processing devices, computing devices, server devices, or other electronic devices composed of hardware circuits, or can be implemented by multiple hardware circuits jointly constructed and integrated into the same device, and is not limited to the physical configuration shown in the figures. The configuration and implementation of each module or unit can be appropriately adjusted according to actual application requirements, and the actual combination of its hardware structure is not limited to the configuration shown in the figures of this invention.

[0020] Please refer to Figure 1, which is a functional architecture diagram of a vendor office area IP management system according to an embodiment of the present invention. In Figure 1, the vendor office area IP management system 100 is applicable to the network resource management operation of the vendor office area within a bank, and it is communicatively connected to a general affairs management system 200 and an IP / MAC setting system 300. The vendor office area IP management system 100 includes a plurality of hardware modules composed of a plurality of hardware circuits, including an anomaly receiving module 110, a serial execution module 120, an idle check module 130, and a status synchronization module 140.

[0021] The administrative management system 200 is an existing internal administrative management system of the bank, used to handle administrative tasks such as application, review, and status recording of IP addresses for vendor office areas. In one embodiment, the administrative management system 200 is installed on a host machine with a Linux operating environment. The IP / MAC setting system 300 is an existing internal network address management system of the bank, used to perform operations such as actual activation and deactivation settings of IP addresses. In one embodiment, the IP / MAC setting system 300 is installed on a host machine with a Windows operating environment. Both the administrative management system 200 and the IP / MAC setting system 300 are external systems to the vendor office area IP management system 100 of this novel invention, serving only as data sources or terminal systems for setting execution.

[0022] The change receiving module 110 is configured to receive IP change request data from one of the administrative management systems 200. The IP change request data includes a change type and an IP address. The change type includes an add action or a delete action. In one embodiment, the IP change request data is submitted by a user (e.g., a vendor personnel) in the administrative management system 200 and generated after review by a staff member and a supervisor in the administrative management system 200. After receiving the IP change request data, the change receiving module 110 generates an change instruction based on the change type and outputs the change instruction to the serial execution module 120.

[0023] In one embodiment, the IP change request data may be in a digital format, such as Extensible Markup Language (XML) format, JavaScript Object Tag (JSON) format, or Comma Separated Values ​​(CSV) format, but the present invention is not limited to a specific data format.

[0024] The serial execution module 120 is connected to the change receiving module 110 and is configured to receive the change command and perform a corresponding setting action on the IP / MAC setting system 300 according to the change command to generate execution result data. Specifically, when the change type corresponding to the change command is an add action, the serial execution module 120 performs an IP address activation setting on the IP / MAC setting system 300; when the change type corresponding to the change command is a delete action, the serial execution module 120 performs an IP address deactivation setting on the IP / MAC setting system 300.

[0025] The serial execution module 120 is configured to connect to hosts with different operating environments across platforms. In one embodiment, the serial execution module 120 can connect to a host with a Windows operating environment and a host with a Linux operating environment to achieve automated serial operation across platforms. In one embodiment, data transmission between the serial execution module 120 and the IP / MAC setting system 300 can be performed through communication protocols such as Hypertext Transfer Protocol Secure (HTTPS) or Secure Shell Protocol (SSH), but this invention is not limited to a specific communication protocol.

[0026] After completing the setting operation of the IP / MAC setting system 300, the serial execution module 120 obtains the execution result data and outputs the execution result data to the status synchronization module 140.

[0027] The idle check module 130 is configured to retrieve deregistration data from the IP / MAC setting system 300 at preset time intervals. The deregistration data is generated by the IP / MAC setting system 300 based on IP addresses that have not been used for a preset idle period (e.g., three months). In one embodiment, the IP / MAC setting system 300 generates the deregistration data monthly, and the idle check module 130 retrieves the deregistration data at the preset time interval (e.g., every month).

[0028] After receiving the deregistration file data, the idle check module 130 generates a batch of deregistration instructions based on the deregistration file data. The batch of deregistration instructions includes multiple IP address data entries, and the batch of deregistration instructions is executed by the serial execution module 120. Specifically, after receiving the batch of deregistration instructions, the serial execution module 120 performs corresponding deregistration settings on the multiple IP address data entries based on the batch of deregistration instructions.

[0029] In one embodiment, the deregistration file data may be in comma-separated value (CSV) format or plain text (TXT) format, etc., containing each IP address that has been determined to be idle and its related identification information; however, this invention is not limited to a specific file format.

[0030] The state synchronization module 140 is connected to the serial execution module 120 and is configured to receive the execution result data and send the execution result data back to the administrative management system 200 to update an IP address allocation status. In this way, the IP address allocation status recorded in the administrative management system 200 can be kept consistent with the actual setting status in the IP / MAC setting system 300.

[0031] In one embodiment, the execution result data returned by the status synchronization module 140 may include the change results of each IP address (such as successful addition, successful deletion, or successful deregistration), but this invention is not limited to specific result data content.

[0032] Please refer to Figure 2, which is a flowchart illustrating a vendor office area IP management method according to one embodiment of the present invention. The process includes two paths: an immediate change process and a batch deregistration process, which will be described separately below.

[0033] In the real-time change process, firstly, in step S210, the change receiving module 110 receives the IP change request data from the administrative management system 200. The IP change request data is generated by the user submitting an application in the administrative management system 200 and after review.

[0034] Next, in step S220, the anomaly receiving module 110 generates the anomaly command based on the anomaly type in the IP anomaly request data.

[0035] Next, in step S230, the serial execution module 120 receives the change instruction and performs the corresponding setting action on the IP / MAC setting system 300 according to the change instruction. For example, when the change type is a new action, the serial execution module 120 performs the IP address activation setting on the IP / MAC setting system 300.

[0036] In the batch deregistration process, firstly, in step S260, the idle check module 130 obtains the deregistration file data from the IP / MAC setting system 300 according to the preset time interval.

[0037] Next, in step S270, the idle check module 130 generates the batch cancellation instruction based on the cancellation file data.

[0038] Next, in step S280, the serial execution module 120 receives the batch deregistration instructions and performs corresponding deregistration settings on the plurality of IP address data according to the batch deregistration instructions.

[0039] After the above-mentioned real-time change process and batch cancellation process are completed, they both enter step S240, where the execution result data is generated by the serial execution module 120.

[0040] Finally, in step S250, the status synchronization module 140 receives the execution result data and sends the execution result data back to the administrative management system 200 to update the IP allocation status.

[0041] Regarding the update mechanism, the idle check module 130 can obtain the deregistration file data periodically or when the IP / MAC setting system 300 generates the deregistration file data. For example, the idle check module 130 can automatically obtain the deregistration file data at a preset time interval (such as once a month), but this invention is not limited to a specific update method.

[0042] Regarding the judgment criteria, when the anomaly receiving module 110 generates the anomaly command based on the anomaly type, the anomaly type can be a single type or a combination of multiple types. For example, the anomaly type can include addition actions, deletion actions, etc. In one embodiment, the anomaly receiving module 110 can generate corresponding anomaly commands in different formats according to different anomaly types; however, this invention is not limited to specific anomaly types or command formats.

[0043] Regarding non-triggered processes, if the administrative management system 200 does not generate new IP change request data, the change receiving module 110 will not trigger the subsequent serial execution process, and the vendor office area IP management system 100 will maintain its existing state without intervening in the subsequent processing. Similarly, if the IP / MAC setting system 300 does not generate new deregistration file data within the preset time interval, the idle check module 130 will also not trigger the subsequent batch deregistration process.

[0044] Regarding the data format, the data contained in the change instruction and the batch cancellation instruction may be in a digital format. For example, the data may be in Extensible Markup Language (XML) format, JavaScript Object Tag (JSON) format, Comma Separated Values ​​(CSV) format, or other structured data formats, but this invention is not limited to a specific data format.

[0045] Regarding the administrator settings, in one embodiment, the administrator can set parameters such as the preset time interval, the preset idle period, and the correspondence between the anomaly types through an existing interface. For example, the administrator can set the idle check module 130 to obtain the deregistration file data once a month, or adjust the length of the idle period. However, this invention is not limited to a specific setting method.

[0046] In one embodiment, data transmission between the modules of the vendor's office area IP management system 100 can be performed via Hypertext Transfer Protocol (HTTP), Hypertext Transfer Secure Protocol (HTTPS), Secure Shell Protocol (SSH), or other communication protocols. In another embodiment, the data processed by these modules can be stored in an associated database or a non-associated database; however, this invention is not limited to a specific database type or communication protocol.

[0047] In one embodiment, when the serial execution module 120 performs a setting action on the IP / MAC setting system 300, it can adopt a real-time processing method or a batch processing method. In the real-time processing method, the serial execution module 120 immediately executes the corresponding setting action after receiving the change instruction. In the batch processing method, the serial execution module 120 can accumulate multiple change instructions and execute them all at once. However, this invention is not limited to a specific processing method.

[0048] In one embodiment, each module of the vendor's office area IP management system 100 can be implemented by one or more processors executing corresponding program instructions, which can be stored in a computer-readable storage medium. The computer-readable storage medium may include, but is not limited to, hard disks, solid-state drives, flash memory, or optical discs, but the present invention is not limited to a specific type of storage medium.

[0049] In summary, the new vendor office area IP management system 100 receives IP change request data from the administrative management system 200 through the change receiving module 110 and generates change commands. Then, through the serial execution module 120, it automatically performs the corresponding setting actions on the IP / MAC setting system 300. This allows the addition and deletion of IP addresses to be automatically executed after the administrative management system 200 has reviewed and approved the requests, reducing the need for users to operate on different systems separately. Furthermore, the new system uses the idle check module 130 to retrieve deregistration file data from the IP / MAC setting system 300 at preset time intervals and generate batch deregistration commands, enabling the deregistration of idle IP addresses to be performed automatically, reducing the need for manual input of deregistration files. Moreover, the new system uses the status synchronization module 140 to send the execution result data back to the administrative management system 200 to update the IP allocation status, ensuring consistency in the IP address allocation status between the two systems.

[0050] Although the present invention has been disclosed above with reference to embodiments, it is not intended to limit the present invention. Anyone skilled in the art can make various modifications and alterations without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the present invention shall be determined by the appended claims.

[0051] 100: Vendor Office Area IP Management System

[0052] 110: Anomaly Receiving Module

[0053] 120: Serial execution module

[0054] 130: Idle Check Module

[0055] 140: State Synchronization Module

[0056] 200: General Affairs Management System

[0057] 300: IP / MAC Configuration System

[0058] S210-S280: Steps

Claims

1. A vendor office area IP management system, applicable to network resource management operations in a bank's internal vendor office area, the vendor office area IP management system comprising a plurality of hardware modules consisting of a plurality of hardware circuits, the hardware modules comprising: an anomaly receiving module configured to receive IP anomaly request data from a general affairs management system, the IP anomaly request data including an anomaly type and an IP address data, and generating an anomaly instruction based on the anomaly type; and a serial execution module connected to the anomaly receiving module, configured to receive the anomaly instruction, and Based on the change instruction, a corresponding setting action is performed on an IP / MAC setting system to generate execution result data; an idle check module is configured to obtain a deregistration file from the IP / MAC setting system at a preset time interval, and generate a batch of deregistration instructions based on the deregistration file data, which are executed by the serial execution module; and a status synchronization module is connected to the serial execution module and configured to receive the execution result data and send the execution result data back to the administrative management system to update an IP allocation status.

2. The vendor office area IP management system as described in Request 1, wherein the change type includes an addition action or a deletion action.

3. The vendor office area IP management system as described in Request 1, wherein the IP change request data is generated after being reviewed by one of the handlers and one of the supervisors in the administrative management system.

4. The vendor office area IP management system as described in claim 1, wherein the serial execution module is configured to connect a host with a Windows operating environment and a host with a Linux operating environment across platforms.

5. The vendor office area IP management system as described in claim 1, wherein the deregistration file data obtained by the idle check module is generated by the IP / MAC setting system based on a preset idle period of unused IP address.

6. The vendor office area IP management system as described in claim 1, wherein the batch deregistration instruction generated by the idle check module includes multiple IP address data, and the serial execution module is configured to perform corresponding deregistration settings on the multiple IP address data according to the batch deregistration instruction.

Images