Method and system for full life cycle management of stand-alone machines without network connection

Abstract

The present application provides a method and system for the full life cycle management of a stand-alone device that is not connected to the Internet. It can separate part of the management information from the protected system and provide it to the Internet through protection measures, thereby realizing periodic self-inspection of the protected system and improving work efficiency. The method includes: the second server obtains the management information of the first terminal device through the import and export management program and the import and push program, and stores the management information in the second interactive storage medium; the first server obtains the management information from the second interactive storage medium, determines the inspection standard of the first terminal device according to the management information, and roughly disposes the inspection standard to the first interactive storage medium; the first terminal device obtains the inspection standard through the first interactive storage medium, obtains the real status information of the first terminal device through the automation program, and judges whether the status of the first terminal device is abnormal according to the inspection standard and the real status information.

Description

Technical Field

[0001] The present application relates to the field of information, and more specifically, to a method and system for full life cycle management of a stand-alone machine that is not connected to the Internet. Background Art

[0002] For the full life cycle management of a large number of machine fleets, first of all, there must be clear standard requirements and operational guidelines. This type of system management can be divided into two parts. One is the machine group (all single machines) to which management requirements and strategies are applied. This part can be referred to as "machine"; the other is the ledgers and files that record the basic conditions of all machines and the conditions required to record each change. This part can be referred to as "files". At present, the system management of "machines" is mainly achieved through manual operation and inspection. The system management of "files" mainly relies on manual recording of machine-related information, and then manually summarizing the system information. In addition, changes in system information are mainly managed and recorded through paper application approval forms.

[0003] Because a large number of clusters work in an environment with strictly restricted networks, a large amount of work in the above method needs to be done manually, which may cause system chaos and low work efficiency. Summary of the invention

[0004] The present application provides a method and system for the full life cycle management of a stand-alone machine that is not connected to the Internet. It can separate part of the management information from the protected system and provide it to the Internet through protection measures. It also uses automation to replace manual operations, thereby realizing periodic self-inspection and synchronous management of the protected system, which is conducive to avoiding system confusion and improving work efficiency.

[0005] In a first aspect, a method for full life cycle management of a stand-alone machine not connected to the Internet is provided, which is applied to a system for full life cycle management of a stand-alone machine not connected to the Internet. The system includes a first terminal device, a first server, and a second server. The first terminal device is a non-networked device. The first terminal device interacts with the first server via a first interactive storage medium, and the first server interacts with the second server via a second interactive storage medium.

[0006] The method includes: the second server obtains management information of the first terminal device by importing and exporting a management program and an importing and pushing program, and stores the management information in a second interactive storage medium; the first server obtains the management information from the second interactive storage medium, determines the inspection standard of the first terminal device according to the management information, and stores the inspection standard in the first interactive storage medium; the first terminal device obtains the inspection standard through the first interactive storage medium, obtains the real status information of the first terminal device through an automated program, and determines whether there is an abnormality in the status of the first terminal device according to the inspection standard and the real status information.

[0007] In an embodiment of the present application, the management information of the separated first terminal device can be used to implement periodic self-inspection and self-examination of the system for full life cycle management of a stand-alone machine that is not connected to the Internet, and an automated method can be used to operate the state changes, maintenance checks, exception handling, etc. of the first terminal device. In this way, synchronous management can be achieved within the maintenance cycle, and the state changes within a maintenance cycle can be recorded and traced back, which is conducive to avoiding system confusion.

[0008] In combination with the first aspect, in certain implementations of the first aspect, the first terminal device obtains the real status information of the first terminal device through an automated program, and stores the real status information in the first interactive storage medium; the first server obtains the real status information from the first interactive storage medium through an aggregation program, and stores the real status information in the second interactive storage medium; the second server obtains the real status information from the second interactive storage medium, and analyzes whether there is any abnormality in the status of the first terminal device according to an analysis program.

[0009] In combination with the first aspect, in certain implementations of the first aspect, when there is an abnormality in the state of the first terminal device, the second server displays a message indicating that there is an abnormality in the state of the first terminal device, so that the computer administrator can start an exception handling program.

[0010] In combination with the first aspect, in certain implementations of the first aspect, the system for full life cycle management of a stand-alone machine that is not connected to the network also includes a second terminal device, which is a networked device, and the second terminal device is connected to the second server via a network. The second terminal device displays a first interface, which is used for a user to log in to the work order management program of the second server. In response to a first instruction, the second terminal device submits a state change application of the first terminal device, and the state change application is used to request that the first configuration of the first terminal device be modified to a second configuration; the second server receives the state change application and displays a second interface, which is used for an approval person to log in to the work order management program of the second server. In response to a second instruction, the second server sends an application approval information to the second terminal device; in response to a third instruction, the first terminal device modifies the first configuration of the first terminal device to a second configuration through an automated program based on the state change application.

[0011] In combination with the first aspect, in certain implementations of the first aspect, in response to the fourth instruction, the first terminal device confirms the state change and updates the first file information through the work order management program; the first terminal device obtains the state information of the first terminal device after the state change through the automation program, and stores it in the first interactive storage medium; the first server summarizes the state information of the first terminal device after the state change in the first interactive storage medium through the summary program, determines the second file information based on the summarized state information, and transmits the second file information to the second server through the second interactive storage medium; the second server receives the second file information in the second interactive storage medium through the export acceptance program, and checks the first file information and the second file information through the analysis program to determine whether the state change of the first terminal device is incorrect.

[0012] In combination with the first aspect, in certain implementations of the first aspect, when the state change of the first terminal device is incorrect, the second server repairs the state change of the first terminal device until it is correct; after the state change of the first terminal device is correct, the second server automatically updates the state of the work order management program through an analysis program.

[0013] In combination with the first aspect, in certain implementations of the first aspect, before the second terminal device displays the first interface, the second terminal device sends an authentication request to the second server, where the authentication request is used to request access to the Internet Protocol IP address of the second server; the second server verifies the authentication request through an access control program, and sends an accessible IP address to the second terminal device after the authentication is passed; the second terminal device receives the accessible IP address and accesses the second server based on the accessible IP address.

[0014] In the second aspect, a method for full life cycle management of a stand-alone machine not connected to the Internet is provided, which is applied to a system for full life cycle management of a stand-alone machine not connected to the Internet. The system includes a first terminal device, a first server, and a second server. The first terminal device is a non-networked device. The first terminal device interacts with the first server via a first interactive storage medium, and the first server interacts with the second server via a second interactive storage medium.

[0015] The method includes: the first terminal device obtains the inspection standard through the first interactive storage medium, and obtains the real status information of the first terminal device through the automation program; the first terminal device determines whether there is an abnormality in the status of the first terminal device based on the inspection standard and the real status information, and the inspection standard is determined by the first server according to management information, and the management information is obtained by the second server through the import and export management program and the import and push program.

[0016] In combination with the second aspect, in some implementations of the second aspect, the first terminal device obtains the real state information of the first terminal device through an automated program, and stores the real state information in the first interactive storage medium.

[0017] In conjunction with the second aspect, in certain implementations of the second aspect, the system for full lifecycle management of a stand-alone machine not connected to a network further includes a second terminal device, the second terminal device is a networked device, and the second terminal device is connected to the second server via a network. In response to the third instruction, the first terminal device modifies the first configuration of the first terminal device to the second configuration through an automated program based on the state change application.

[0018] In combination with the second aspect, in certain implementations of the second aspect, in response to the fourth instruction, the first terminal device confirms the status change and updates the first file information through the work order management program; the first terminal device obtains the status information of the first terminal device after the status change through the automation program, and stores it in the first interactive storage medium.

[0019] In a third aspect, a system for full life cycle management of a stand-alone machine not connected to the Internet is provided, the system comprising a first terminal device, a second terminal device, a first server and a second server, the first terminal device being a non-networked device, the second terminal device being a networked device, the first terminal device interacting with the first server via a first interactive storage medium, the first server interacting with the second server via a second interactive storage medium, the second terminal device being connected to the second server via a network, the first terminal device, the second terminal device, the first server and the second server being used to implement the method in any possible implementation manner of the first aspect.

[0020] In a fourth aspect, a device for full lifecycle management of a stand-alone machine without network connection is provided, including: a module for executing the method in any possible implementation of the second aspect. Specifically, the device includes a module for executing the method in any possible implementation of the second aspect.

[0021] In a fifth aspect, a device for full life cycle management of a stand-alone machine not connected to the Internet is provided, comprising a processor, the processor is coupled to a memory, and can be used to execute instructions in the memory to implement the method in any possible implementation of the second aspect above. Optionally, the device also includes a memory. Optionally, the device also includes a communication interface, and the processor is coupled to the communication interface.

[0022] In a sixth aspect, a processor is provided, comprising: an input circuit, an output circuit and a processing circuit. The processing circuit is used to receive a signal through the input circuit and transmit a signal through the output circuit, so that the processor executes the method in any possible implementation of the second aspect.

[0023] In the specific implementation process, the processor can be a chip, the input circuit can be an input pin, the output circuit can be an output pin, and the processing circuit can be a transistor, a gate circuit, a trigger, and various logic circuits. The input signal received by the input circuit can be, for example, but not limited to, received and input by a receiver, and the signal output by the output circuit can be, for example, but not limited to, output to a transmitter and transmitted by the transmitter, and the input circuit and the output circuit can be the same circuit, which is used as an input circuit and an output circuit at different times. The embodiments of the present application do not limit the specific implementation methods of the processor and various circuits.

[0024] In a seventh aspect, a processing device is provided, comprising a processor and a memory. The processor is used to read instructions stored in the memory, and can receive signals through a receiver and transmit signals through a transmitter to execute the method in any possible implementation of the second aspect.

[0025] Optionally, there are one or more processors and one or more memories.

[0026] Optionally, the memory may be integrated with the processor, or the memory may be provided separately from the processor.

[0027] In the specific implementation process, the memory can be a non-transitory memory, such as a read-only memory (ROM), which can be integrated with the processor on the same chip or can be set on different chips respectively. The embodiments of the present application do not limit the type of memory and the setting method of the memory and the processor.

[0028] It should be understood that the relevant data interaction process, such as sending indication information, can be a process of outputting indication information from a processor, and receiving capability information can be a process of receiving input capability information from a processor. Specifically, the processed output data can be output to a transmitter, and the input data received by the processor can come from a receiver. Among them, the transmitter and the receiver can be collectively referred to as a transceiver.

[0029] The processing device in the seventh aspect mentioned above can be a chip. The processor can be implemented by hardware or by software. When implemented by hardware, the processor can be a logic circuit, an integrated circuit, etc.; when implemented by software, the processor can be a general-purpose processor, which is implemented by reading the software code stored in the memory. The memory can be integrated in the processor or can be located outside the processor and exist independently.

[0030] In an eighth aspect, a computer program product is provided, the computer program product comprising: a computer program (also referred to as code, or instruction), which, when executed, enables a computer to execute a method in any possible implementation of the second aspect.

[0031] In the ninth aspect, a computer-readable storage medium is provided, which stores a computer program (also referred to as code, or instruction) which, when executed on a computer, enables the computer to execute a method in any possible implementation of the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a schematic diagram of a system architecture for full life cycle management of a stand-alone machine without networking provided in an embodiment of the present application;

[0033] Figure 2 It is a schematic diagram of another system architecture for full life cycle management of a stand-alone machine without network connection provided in an embodiment of the present application;

[0034] Figure 3 It is a schematic flow chart of another method for full life cycle management of a stand-alone machine not connected to the Internet provided in an embodiment of the present application;

[0035] Figure 4 is a schematic flow chart of a state change of a machine provided in an embodiment of the present application;

[0036] Figure 5 is a schematic flow chart of daily maintenance of a machine provided in an embodiment of the present application;

[0037] Figure 6 It is a schematic block diagram of a device for full life cycle management of a stand-alone machine not connected to the Internet provided in an embodiment of the present application;

[0038] Figure 7 It is a schematic block diagram of another device for full life cycle management of a stand-alone machine not connected to the Internet provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0040] To facilitate understanding, the terms involved in the embodiments of the present application are first introduced below.

[0041] 1. Full life cycle management: refers to the activation, maintenance, repair, change, data import and export, deactivation, scrapping, destruction and other changes in the status of each machine, which require a change strategy and corresponding process control.

[0042] 2. Access control: refers to the methods, strategies and tools for data exchange between stand-alone machines. The access strategy in the embodiment of the present application is that the stand-alone machine cannot connect to any network, and the universal serial bus (USB) storage device and the optical disk connect to the stand-alone machine according to the granted access rights.

[0043] 3. Security tools: refers to access control, monitoring and auditing, antivirus and malicious code detection tools running on a single machine.

[0044] 4. Abnormal events: refers to violations of the full life cycle management of a single machine, or related events detected by security tools.

[0045] 5. Archives: refers to the records of all process controls in the whole life cycle management, including at least one of the following:

[0046] (1) The entire application approval process for each status change of each single machine.

[0047] (2) Records of abnormal event handling for each single machine.

[0048] (3) Daily maintenance records for each machine.

[0049] 6. Ledger: Contains all necessary basic information of offline stand-alone machines, which can be regarded as a simple information summary of the archive, including at least one of the following:

[0050] (1) Includes the unique serial number of each single machine, and all serial numbers increase monotonically over time.

[0051] (2) The unique identification mark of each single machine, which may include the device serial number and media access control address (MAC) address.

[0052] (3) Information about one or more responsible persons for each single machine.

[0053] (4) Record the physical serial number and device serial number of each storage device on a single machine.

[0054] (5) Status information of each single machine may include at least one of the operating system version, activation time, or location.

[0055] The full life cycle management of a large fleet of machines requires clear standard requirements and operational guidance. This type of system management can be divided into the following two parts:

[0056] 1. Machine groups (all single machines) to which management requirements and policies are applied. The objects of this part are all machines. The management requirements and policies include physical environment, operating system policy, security tool policy (including access control policy), etc. It can be referred to as "machine" for short.

[0057] 2. The ledgers and files that record the basic conditions of all machines and the conditions required to record each change can be referred to as "files" for short.

[0058] Therefore, the management of the system is also divided into two parts: "machine" and "file". For "machine", all machines are required to meet the management requirements, and abnormal events need to be discovered and handled properly in a timely manner; for "file", the archives and ledgers are required to truly and accurately reflect the basic information and changes of all machines.

[0059] Usually, various machines in this type of system can be connected to each other through a network (which can be the Internet or a strictly protected private network), and the "machine" and "file" parts can be collected, organized and analyzed in real time through system tools installed on single machines and designated servers within the network.

[0060] For a stand-alone system that cannot connect to the Internet, the full life cycle management can be viewed as a single node that is independent (i.e. not connected to the Internet and has a strict access control policy) and an overall closed system.

[0061] At present, for the above-mentioned non-networked full life cycle management system, the "machine" part is mainly implemented through manual operation and inspection. Some security tools can work with certain automation functions to realize their own automatic configuration and information collection, organization and analysis. This automation function may cover some operating system strategies. For the "file" part, system information is mainly recorded by manual operation. The relevant information of the machine is summarized manually. Some security tools can provide the function of automatically summarizing some information, and some management tools can provide the function of summary management. Changes in system information are mainly managed and recorded through paper application approval forms. Synchronization is required between "machine" and "file", especially the synchronization function of the archive part of "machine" and "file" is completely dependent on manual inspection and verification.

[0062] For a large number of manual operations in the offline full life cycle management system, the following problems may occur:

[0063] (1) Error-prone: Even if strict operating procedures can improve the accuracy of operations to a certain extent, they still cannot guarantee 100% accuracy. If the accuracy of each operation is 99.99%, each machine will be operated at least 100 times in its entire life cycle. If each person in charge is responsible for 100 machines, then the probability of no problems in all operations is only 37%. This accuracy is low for a system with extremely high safety requirements.

[0064] (2) Weak functions: Although the existing system tries its best to avoid abnormal situations by closing itself, there are still open spaces due to usage requirements. These open spaces are strictly displayed according to management requirements. In actual use, abnormal situations are inevitable and need to be handled. At present, due to the lack of analysis capabilities of user open space behavior (such analysis requires a large amount of data from a single machine and data from other machines associated with the single machine), it is difficult to discover potential problems. For systems with higher security requirements, it is more important to avoid problems or to discover problems at the beginning.

[0065] (3) Low efficiency: Due to safety requirements, each manual operation is not difficult, but the steps are numerous and complicated, and some involve multiple roles, resulting in a long work chain. Due to the problem of easy errors, the number of machines that each person is responsible for cannot increase infinitely; due to the fact that the physical locations where the machines are distributed are very scattered, manual labor needs to spend a lot of time on the road, which brings a lot of difficulties and extra time to management work. There is often even a contradiction that the management process has not been completely completed but the equipment needs to be used. Therefore, the growth of the number of machines is basically linearly related to the growth of the number of personnel, and the coefficient of the linear relationship is large, and the work efficiency is low. If in-depth analysis is to be conducted to improve the system's ability to discover problems, the growth of the number of machines is basically exponentially related to the growth of the number of personnel, which is theoretically impossible for a large number of machine systems.

[0066] Some security tools can provide automation functions to a certain extent, but they can only solve some of the error-prone problems of sequential operation of a single machine. The synchronization problem of "machine" and "file" cannot be solved, and there is still no essential improvement in function and efficiency.

[0067] In view of this, the embodiment itself provides a method and system for the full life cycle management of a stand-alone computer that is not connected to the Internet. Part of the management information can be separated from the protected system and provided to the Internet through protection measures, thereby realizing periodic self-inspection of the protected system, and improving the connectivity of the system on the basis of meeting various security requirements of the system (the main working computer cannot be connected to various networks). In addition, the embodiment of the present application can use an automated program to work, which is conducive to improving the automation level of the overall system, thereby reducing the probability of errors and improving work efficiency.

[0068] Before introducing the method and system for full life cycle management of a stand-alone machine not connected to the Internet provided in the embodiments of the present application, the following points are explained.

[0069] First, in the embodiments shown below, various terms and English abbreviations, such as protected terminal device, protected server, internal server, etc., are illustrative examples given for the convenience of description and should not constitute any limitation to this application. This application does not exclude the possibility of defining other terms that can achieve the same or similar functions in existing or future protocols.

[0070] Second, in the embodiments shown below, the first, second and various digital numbers are only used for the convenience of description and are not used to limit the scope of the embodiments of the present application. For example, to distinguish different servers.

[0071] Third, "at least one" means one or more, and "more than one" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b and c can mean: a, or b, or c, or a and b, or a and c, or b and c, or a, b and c, where a, b, c can be single or multiple.

[0072] Figure 1 1 is a schematic diagram of a system architecture 100 for full life cycle management of a stand-alone machine without network connection provided by an embodiment of the present application. The system architecture 100 includes a protected system 110, a core system 120, and an Internet system 130. The protected system 110 includes at least one protected terminal device 101 and a protected server 102, the core system 120 includes an internal server 103, and the Internet system 130 includes an authentication server 104 and at least one Internet terminal device 105.

[0073] Among them, the protected system 110 mainly completes the automation of the above-mentioned "machine" part and has a high level of security protection. The protected terminal device 101 is a stand-alone device that is not connected to the Internet and is subject to all relevant management requirements in the full life cycle management system. It can undertake functions such as information aggregation in the automation tools of some security products. Usually, the protected terminal devices 101 can work in groups according to the division of labor of maintenance personnel. The system architecture 100 allows all models, configurations and systems of protected terminal devices that meet the management requirements, and the embodiments of the present application do not limit this.

[0074] The protected terminal device 101 includes an automation program, which can be used to obtain information and automatically configure parameters of the protected terminal device 101. The automation program is one or more programs, which have the following functions:

[0075] 1. Automatically read the basic information of the computer, such as machine name, operating system version and installation time.

[0076] 2. Automatically read the settings of the computer's basic input / output system (BIOS).

[0077] 3. Automatically read operating system logs and registry information.

[0078] 4. Automatically read the configuration standards and set various policy configurations of the operating system according to the configuration standards.

[0079] 5. Automatically read the logs and configuration policies of security products, and automatically set security product policies.

[0080] 6. Automatically check whether the machine meets the requirements of the standard. For content that cannot be checked automatically, prompt information for manual inspection is required.

[0081] 7. Provide configuration prompt information and automatic checking function for projects that cannot be automatically configured.

[0082] The protected server 102 mainly runs the following three programs: a summary program, an extraction program, and a standard program. The summary program is used to summarize the information collected from the protected terminal device 101. The extraction program is used to extract relevant information from the summarized information to form a ledger, archives, and a minimum information set for in-depth analysis. The standard program is used to generate a comparison standard for the single-machine inspection program according to the management requirements of the system.

[0083] The protected terminal device 101 and the protected server 102 can interact with each other through the protected interaction tool, mainly realizing the following two-way functions:

[0084] 1. Extract information from the protected terminal device 101 and aggregate it into the protected server 101.

[0085] 2. Obtain the standards of the protected terminal device 101 from the protected server 102 , and perform a comparison check or standardized configuration in the protected terminal device 101 .

[0086] The information to be extracted and the standards to be obtained include basic information of the operating system, usage of the operating system, or at least one of various security products.

[0087] Exemplarily, the basic information of the operating system may include at least one of the basic situation of the machine, BIOS settings, and various system configuration policies.

[0088] Illustratively, the operating system usage may include required operating system logs and / or required operating system registry information.

[0089] Illustratively, various types of security products include configuration policies and / or usage logs.

[0090] The interactive mode follows the principles of protection and automation. The information is transmitted through a special USB flash drive (abbreviated as U disk), U disk whitelist access control or CD. The acquisition and automatic configuration of information can be automatically completed through an automated program.

[0091] Through a protected interactive system, information that is no longer protected by a closed system can be protected. In this way, the scope of core information does not change from closed to selectively open.

[0092] Due to some physical conditions such as the storage environment and the inability of some security products to provide program interfaces, manual summary or inspection is required.

[0093] The core system 120 mainly completes the automation of the "file" part and provides advanced analysis functions, playing a connecting role in the system architecture 100. Since the core system 120 and the protected system 110 have direct interactions, a higher security protection level and prevention method are also required. The prevention strategy is mainly reflected in the following two aspects:

[0094] 1. Internal interaction: that is, interaction with the Internet system 130 , only local users or legitimate users with limited Internet protocol (IP) addresses (with verified usernames and passwords) are allowed to access the contents of the internal server 103 .

[0095] 2. Restricted import and export: that is, the interaction with the protected server 102, exporting information from the protected server 102 and importing information to the protected server 102 requires strict control policies. The control policies may include:

[0096] (1) The imported and exported content needs to be recorded and preserved permanently.

[0097] (2) Import and export can be performed through automated programs without manual work. Import and export can use the overall import and export strategy or the incremental import and export strategy. When import and export are frequent and the amount of change each time is not large, the incremental import and export strategy can be used, which is more efficient. When import and export are infrequent and the amount of change each time is large, the overall import and export strategy is more efficient.

[0098] (3) Import and export need to be approved. The approval method can be to approve whether the import and export exceed the program setting logic, or to approve the import and export content separately each time.

[0099] (4) For import, you can use one-way import devices and software, or use a whitelist-authorized USB flash drive (referred to as a USB flash drive), and for export, you can use a CD.

[0100] The extraction program in the protected server 102 can control the export of content to the internal server 103 according to the minimization principle, and the standard program in the protected server 102 can receive the imported content and form inspection and configuration standards.

[0101] The internal server 103 includes the following programs to implement the above-mentioned import and export control strategy requirements:

[0102] 1. Import and export management program: used to record and manage import and export content.

[0103] 2. Export acceptance program: used to convert the content exported from the protected server 102 into content for its own use.

[0104] 3. Import push program: used to convert configuration change information into content to be imported into the protected server 102.

[0105] In addition, the internal server 103 also has the following functions, which can be implemented through programs or web pages:

[0106] 1. Ledger and archive management procedures: used to manage the overall ledger and archive information. Changes in the ledger and archive must be corresponding. After the archive is complete, the corresponding ledger content can be changed. Changes in the ledger require finding corresponding records in the archive.

[0107] 2. Access control program: used to verify IP address, user password and dynamic password.

[0108] 3. Work order management program: It includes two parts: machine configuration changes and daily maintenance. It can record the entire process of application, approval and operation and perform process control. The work order management program can obtain the information required for the work order from the ledger file management program, and update the content of the file after the work order is completed.

[0109] 4. Analysis procedure: You can compare with management requirements, analyze the content that does not meet management requirements, and analyze potential risks. You can continuously increase potential risk analysis based on actual work experience.

[0110] Optionally, the internal server 103 further includes an exception handling program.

[0111] The Internet system 130 can provide a quick and convenient working environment for users of the protected system 110 on the basis of ensuring secure access to the internal server 103. Therefore, the Internet system 130 mainly implements the functions of access control and convenient process.

[0112] It should be understood that the above-mentioned program may also be referred to as a system, such as a work order management system or an access control system, and the embodiments of the present application are not limited to this.

[0113] 1. Access control: mainly based on at least one of a virtual private network (VPN), a user password and a dynamic password for verification. The authentication server 104 can allocate an internal IP address accepted by the internal server 103 to the Internet terminal device 105 through the VPN function, so that the information transmitted on the authorization and authentication link is encrypted.

[0114] At the same time, the security of the VPN connection can be guaranteed by the user password and the dynamic password. For example, the dynamic password can be implemented by hardware or software, and the embodiment of the present application does not limit this.

[0115] 2. Convenient process: The Internet terminal device 105 is a terminal device that can support all browsers. The Internet terminal device 105 can use the ledger file management program and the work order management program on the internal server 103 through the web page, without the need to use a paper application approval form as in the traditional form, or to use independent maintenance files and work orders.

[0116] Figure 21 is a schematic diagram of another system architecture 200 for full life cycle management of a stand-alone machine without network connection provided by an embodiment of the present application. The difference from the system architecture 100 is that the authentication server 104 can be built into the internal server 103, and it can also be understood that the internal server 103 has an authentication function. When the authentication server 104 and the internal server 103 are the same server, the internal interaction prevention strategy of the internal server 103 is also the local access of the internal server 103.

[0117] The above-mentioned Figure 1 and Figure 2 The system architecture of the full life cycle management of a stand-alone machine without network connection provided in the embodiment of the present application is described in detail. Figure 3 , Figure 4 and Figure 5 The method for full life cycle management of a stand-alone machine not connected to the Internet provided in an embodiment of the present application is described.

[0118] Figure 3 The present invention is a schematic flow chart of a method 300 for full life cycle management of a stand-alone machine without network connection provided in an embodiment of the present application. The method 300 is applied to a system for full life cycle management of a stand-alone machine without network connection, the system comprising a first terminal device, a first server and a second server, the first terminal device is a stand-alone machine without network connection, the first terminal device interacts with the first server via a first interactive storage medium, and the first server interacts with the second server via a second interactive storage medium.

[0119] The method 300 comprises the following steps:

[0120] S301, the second server obtains the management information of the first terminal device by importing and exporting the management program and importing and pushing the program, and stores the management information in the second interactive storage medium.

[0121] S302: The first server obtains the management information from the second interactive storage medium, determines the inspection standard of the first terminal device according to the management information, and stores the inspection standard in the first interactive storage medium.

[0122] S303, the first terminal device obtains the inspection standard through the first interactive storage medium, obtains the real state information of the first terminal device through the automated program, and determines whether there is an abnormality in the state of the first terminal device according to the inspection standard and the real state information.

[0123] It should be understood that the above-mentioned first terminal device can be regarded as a protected terminal device 101, the above-mentioned first server can be regarded as a protected server 102, when the authentication server 104 is built into the internal server 103, the above-mentioned second server can be regarded as the internal server 103 including the authentication function, and the above-mentioned second terminal device can be regarded as an Internet terminal device 105.

[0124] Exemplarily, in the embodiment of the present application, the storage medium used for information transmission between the first terminal device and the first server is referred to as the first interactive storage medium, and the storage medium used for information transmission between the first server and the second server is referred to as the second interactive storage medium.

[0125] As an optional embodiment, method 300 also includes: the first terminal device obtains the real status information of the first terminal device through an automated program, and stores the real status information in the first interactive storage medium; the first server obtains the real status information from the first interactive storage medium through an aggregation program, and stores the real status information in the second interactive storage medium; the second server obtains the real status information from the second interactive storage medium, and analyzes whether there is any abnormality in the status of the first terminal device according to an analysis program.

[0126] As an optional embodiment, the method 300 further includes: when there is an abnormality in the state of the first terminal device, the second server displays a message indicating that there is an abnormality in the state of the first terminal device, so that the computer administrator can start an exception handling program.

[0127] As an optional embodiment, method 300 also includes: the system for full life cycle management of a stand-alone machine not connected to the network also includes a second terminal device, the second terminal device is a networked device, and the second terminal device is connected to the second server via a network.

[0128] The second terminal device displays a first interface, which is used by a user to log in to the work order management program of the second server. In response to the first instruction, the second terminal device submits a state change application of the first terminal device, and the state change application is used to request that the first configuration of the first terminal device be modified to the second configuration; the second server receives the state change application and displays a second interface, which is used by an approval personnel to log in to the work order management program of the second server. In response to the second instruction, the second server sends an application approval information to the second terminal device; in response to the third instruction, the first terminal device modifies the first configuration of the first terminal device to the second configuration through an automated program based on the state change application.

[0129] As an optional embodiment, method 300 also includes: in response to the fourth instruction, the first terminal device confirms the state change and updates the first file information through the work order management program; the first terminal device obtains the state information of the first terminal device after the state change through the automation program, and stores it in the first interactive storage medium; the first server summarizes the state information of the first terminal device after the state change in the first interactive storage medium through the summary program, determines the second file information according to the summarized state information, and transmits the second file information to the second server through the second interactive storage medium; the second server receives the second file information in the second interactive storage medium through the export acceptance program, and checks the first file information and the second file information through the analysis program to determine whether the state change of the first terminal device is incorrect.

[0130] As an optional embodiment, method 300 also includes: when the state change of the first terminal device is incorrect, the second server repairs the state change of the first terminal device until it is correct; after the state change of the first terminal device is correct, the second server automatically updates the state of the work order management program through an analysis program.

[0131] As an optional embodiment, method 300 also includes: before the second terminal device displays the first interface, the second terminal device sends an authentication request to the second server, and the authentication request is used to request access to the Internet Protocol IP address of the second server; the second server verifies the authentication request through an access control program, and sends an accessible IP address to the second terminal device after the authentication is passed; the second terminal device receives the accessible IP address and accesses the second server based on the accessible IP address.

[0132] Usually, there are two main events that trigger the operation of system architecture 100 or system architecture 200, one involves the state change of the machine, and the other involves the daily maintenance of the machine. After being triggered, system architecture 100 or system architecture 200 will automatically run to a stable state and wait for the next trigger. Other changes are abnormal events and can be discovered during the daily maintenance of the machine.

[0133] Two trigger events correspond to two system response processes, in which the state changes of the machine are discrete and random, and the system can respond in real time. The daily maintenance of the machine requires a lot of manual participation (including manual work, multi-party coordination, and manual data transmission from the system), so it is impossible to maintain any machine at any time. Therefore, the daily maintenance of the machine adopts a periodic method, which can cover all machines in each cycle and check all abnormal events that may exist in all machines in the previous cycle.

[0134] Figure 4It is a schematic flowchart of a state change 400 of a machine provided in an embodiment of the present application.

[0135] like Figure 4 As shown, the state change 400 of the machine includes the following steps:

[0136] S401, access the Internet using an Internet terminal device.

[0137] In this step, the user can use any Internet terminal device 105 to execute the corresponding steps of the machine state change 400 through a web page or other web pages.

[0138] S402, identity authentication is performed through the authentication server and the internal server.

[0139] In this step, the user's identity authentication is divided into two parts. First, the authentication server 104 in the above-mentioned Internet system 130 obtains an IP address within the authorized range through VPN, user password and dynamic password authentication, and then authenticates through the access control program of the internal server 103.

[0140] S403, submitting a machine status change application through the work order management program.

[0141] S404, approve or reject the machine status change application.

[0142] In this step, multiple reviewers may be required to conduct multi-level review. Reviewers at each level, like users, need to undergo identity authentication before reviewing. After passing the authentication, they can log in to the work order management program in the internal server 103 and review or reject the application accordingly according to their own authority. After rejection, the application is terminated and the user needs to modify the application and resubmit it.

[0143] S405, completing the application content through an automated procedure according to the content of the approval operation.

[0144] In this step, the computer administrator can operate the automated program in the protected terminal device 101 to complete the status change application submitted by the user.

[0145] S406: If the operation is correct, confirm that the operation is completed through the work order management program.

[0146] In this step, after the operation is completed, the user needs to confirm whether the operation is correct. If the operation is incorrect, the computer administrator needs to return to S405 and perform the operation again.

[0147] S407, update archives and ledgers.

[0148] In this step, after the user confirms that the operation is complete, the user can update the archive and ledger through the work order management program.

[0149] S408, extracting all information of the protected terminal device 101 through an automated program and storing it in a protected interactive tool.

[0150] In this step, the stored information of the protected terminal device 101 is used to check whether the current operation is accurate.

[0151] S409, update the machine status.

[0152] In this step, the computer administrator aggregates the information extracted in S408 to the protected server 102 through the aggregate program of the protected server 102 and the protected interactive tool. Afterwards, the computer administrator extracts relevant information from the aggregated information through the extraction program of the protected server 102 to form a ledger and archive, and stores the ledger and archive to the internal server 103 through the restricted import and export control policy.

[0153] S410, checking the state change of the machine.

[0154] In this step, the computer administrator checks the ledger and files in S407 with the ledger and files in S409 through the analysis program of the internal server 103 to analyze whether the operation is correct.

[0155] In this step, the analysis of whether the operation is correct includes at least one of over-operation, under-operation or wrong operation. If the operation is inaccurate, the analysis program will change the status of the work order in the work order management program, and the computer administrator will return to S405 to re-operate, fix the problem, and then repeat the corresponding steps until it is correct.

[0156] S411, automatically repair the work order management program status, and the operation ends.

[0157] In this step, the work order system status can be automatically repaired through the analysis program of the internal server 103.

[0158] Figure 5 5 is a schematic flow chart of a routine maintenance 500 of a machine provided in an embodiment of the present application. The routine maintenance of the machine is performed according to a cycle, and the cycle can be carried out weekly, monthly or quarterly. The routine maintenance 500 of the machine includes the following steps:

[0159] S501, obtaining the management information of each machine in this cycle at the origin of the cycle.

[0160] In this step, the import and export management program of the internal server 103 can be used to store the management information of all machines in the current period to the protected server 102 through the import and export control policy.

[0161] Exemplarily, the import may use a one-way import device and software, or a whitelist-authorized USB flash drive, and the export may use a USB flash drive.

[0162] S502, determining the inspection standard for each machine according to the management information of the machine.

[0163] In this step, the computer administrator can use the standard program of the protected server 102 to convert the management information of each machine in this cycle into the inspection standard of each machine.

[0164] S503, grouping the inspection standards of each machine according to the division of work.

[0165] In this step, computer managers group all computers to ensure the principle of minimizing the spread of information.

[0166] S504, performing maintenance operations on each machine one by one.

[0167] In this step, the computer administrator can obtain the inspection standards of the machine group for which he is responsible. Each computer administrator has his own machine group and then starts the maintenance operation. The maintenance operation is divided into the following two steps and can be completed through the automation program of the protected terminal device:

[0168] a. Compare the inspection standard of the current machine in the current cycle with the actual status to check whether there is any inconsistency. If there is any inconsistency, start the exception handling program.

[0169] b. Extract the required current machine management information into the protected interactive tool.

[0170] S505, aggregate the extracted information into the protected server.

[0171] In the step, each computer administrator returns the information of the machine group extracted in S504 to the protected server 102 through the aggregation program of the protected server 102. After all computer administrators return all the information, the information extracted from all machines is returned to the internal server 103 through the restricted import and export (including corresponding programs) of the internal server 103.

[0172] S506, start the analysis program to analyze the status of the machine in this cycle.

[0173] In this step, if the analysis is OK, the cycle ends. If there is a problem, the exception handling procedure is started.

[0174] The above exception handling program may be processed according to a prescribed exception handling rule, which is an externally formulated management rule. According to the management rule, it may be necessary to initiate the state change 400 of the above machine to support the corresponding exception handling rule.

[0175] For example, for a serious abnormal problem, the corresponding machine may need to be destroyed, and an application for destroying the machine may be submitted by executing the state change 400 of the machine to support the abnormal handling rule.

[0176] Exemplarily, for a minor exception problem, such as a port number error, an application for modifying the port number may be submitted by executing the machine state change 400 to support the exception handling rule.

[0177] Exemplarily, the abnormal problem can be corrected within a given 1-2 cycles.

[0178] Furthermore, the embodiments of the present application can also conduct in-depth analysis to discover potential risks and hidden dangers as well as content that was previously required by standards but could not be checked. At the same time, for any abnormal situations that occur, the causes can also be clearly analyzed and responsibilities defined.

[0179] The original non-networked full life cycle management system relies heavily on manual operations. The machine status changes, maintenance inspections, application approvals, ledger archives or exception handling are basically in an asynchronous management state. Status disagreements and account discrepancies often occur in asynchronous management. The embodiment of the present application can perform synchronous management within the maintenance cycle, and can clearly record and trace back one step within the cycle, which is conducive to avoiding system chaos.

[0180] It should be understood that the machine or computer mentioned above refers to a protected terminal device.

[0181] This application can use automated programs to replace manual operations. Some parts that cannot be automated due to lack of networking can also be manually connected to the cluster, but they can also be completed manually under the guidance of the automated program. Some management information (usually not core information with high security) is separated from the protected system and provided to the Internet through protective measures, thereby further realizing periodic self-inspection of the protected system and convenient practicality.

[0182] It should be understood that the sequence numbers of the above processes do not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0183] Combined with the above Figures 1 to 5 , describes in detail the method and system for full life cycle management of a stand-alone machine without network connection according to an embodiment of the present application, and will be combined with Figure 6 and Figure 7 A device for full life cycle management of a stand-alone machine not connected to the Internet according to an embodiment of the present application is described in detail.

[0184] Figure 6 A schematic block diagram of a device 600 for full lifecycle management of a stand-alone machine not connected to the Internet provided in an embodiment of the present application is shown, including an acquisition module 610 and a processing module 620.

[0185] Among them, the acquisition module 610 is used to: obtain the inspection standard through the first interactive storage medium, and obtain the real status information of the device through an automated program; the processing module 620 is used to determine whether there is an abnormality in the status of the device based on the inspection standard and the real status information. The inspection standard is determined by the first server based on management information, and the management information is obtained by the second server through importing and exporting management programs and importing and pushing programs.

[0186] Optionally, the acquisition module 610 is used to: acquire the real state information of the device through an automated program, and store the real state information in the first interactive storage medium.

[0187] Optionally, the processing module 620 is configured to: in response to a third instruction, based on the state change application, modify the first configuration of the device to a second configuration through an automated program.

[0188] Optionally, the processing module 620 is used to: respond to the fourth instruction, confirm the status change, and update the first file information through the work order management program; the acquisition module 610 is used to: obtain the status information of the device after the status change through the automation program, and store it in the first interactive storage medium.

[0189] In an optional example, those skilled in the art can understand that the device 600 can be specifically the first terminal device in the above embodiment, or the function of the first terminal device in the above embodiment can be integrated in the device 600. The above functions can be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above functions.

[0190] It should be understood that the apparatus 600 herein is embodied in the form of functional modules. The term "module" herein may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (e.g., a shared processor, a dedicated processor, or a group processor, etc.) and a memory for executing one or more software or firmware programs, a combined logic circuit, and / or other suitable components that support the described functions.

[0191] In the embodiment of the present application, the device 600 may also be a chip or a chip system, such as a system on chip (SoC).

[0192] Figure 7 A schematic block diagram of a device 700 for full life cycle management of a stand-alone machine not connected to a network provided by an embodiment of the present application is shown, and the device 700 includes a processor 710, a transceiver 720, and a memory 730. The processor 710, the transceiver 720, and the memory 730 communicate with each other through an internal connection path, the memory 730 is used to store instructions, and the processor 710 is used to execute the instructions stored in the memory 730 to control the transceiver 720 to send and / or receive signals.

[0193] It should be understood that the device 700 can be specifically the first terminal device in the above embodiment, or the function of the first terminal device in the above embodiment can be integrated in the device 700, and the device 700 can be used to execute the various steps and / or processes corresponding to the first terminal device in the above method embodiment. Optionally, the memory 730 may include a read-only memory and a random access memory, and provide instructions and data to the processor. A part of the memory may also include a non-volatile random access memory. For example, the memory may also store information about the device type. The processor 710 may be used to execute the instructions stored in the memory, and when the processor executes the instructions, the processor may execute the various steps and / or processes corresponding to the first terminal device in the above method embodiment.

[0194] It should be understood that in the embodiment of the present application, the processor 710 may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0195] In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in a processor or an instruction in the form of software. The steps of the method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software modules in a processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor executes the instructions in the memory, and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

[0196] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0197] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0198] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0199] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0200] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0201] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0202] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for full life cycle management of a stand-alone machine without network connection, characterized in that: A system for full life cycle management of a stand-alone device not connected to the Internet, the system comprising a first terminal device, a first server, and a second server, the first terminal device being a stand-alone device not connected to the Internet, the first terminal device interacting with the first server via a first interactive storage medium, the first server interacting with the second server via a second interactive storage medium, the first terminal device comprising an automation program, the automation program being used to acquire information and configure parameters of the first terminal device, the second server comprising an import and export management program and an import push program, the method comprising: The second server obtains the management information of the first terminal device by importing and exporting the management program and importing and pushing the program, and stores the management information in a second interactive storage medium; The first server obtains the management information from the second interactive storage medium, determines the inspection standard of the first terminal device according to the management information, and stores the inspection standard in the first interactive storage medium; The first terminal device obtains the inspection standard through the first interactive storage medium, and obtains the real status information of the first terminal device through an automated program, so that the first terminal device determines whether there is an abnormality in the status of the first terminal device according to the inspection standard and the real status information.

2. The method for full life cycle management of a stand-alone machine not connected to the Internet according to claim 1, characterized in that: The method further comprises: The first terminal device obtains the real state information of the first terminal device through the automation program, and stores the real state information in the first interactive storage medium; The first server obtains the real state information from the first interactive storage medium through a summary program, and stores the real state information in the second interactive storage medium; The second server obtains the real status information from the second interactive storage medium, and analyzes whether there is any abnormality in the status of the first terminal device according to an analysis program.

3. The method for full life cycle management of a stand-alone machine not connected to the Internet according to claim 2, characterized in that: The method further comprises: When there is an abnormality in the state of the first terminal device, the second server displays a message indicating that there is an abnormality in the state of the first terminal device, so that the computer administrator can start an abnormality handling program.

4. The method for full life cycle management of a stand-alone machine not connected to the Internet according to claim 3, characterized in that: The system for full life cycle management of a stand-alone machine not connected to the network further includes a second terminal device, the second terminal device is a networked device, and the second terminal device is connected to the second server via a network; the method further includes: The second terminal device displays a first interface, the first interface is used for a user to log in to a work order management program of the second server, and in response to the first instruction, the second terminal device submits a state change application of the first terminal device, the state change application is used to request to modify the first configuration of the first terminal device to the second configuration; The second server receives the status change application and displays a second interface, where the second interface is used for the approval personnel to log in to the work order management program of the second server. In response to the second instruction, the second server sends application approval information to the second terminal device; In response to the third instruction, the first terminal device modifies the first configuration of the first terminal device to a second configuration through the automation program based on the state change application.

5. The method for full life cycle management of a stand-alone machine not connected to the Internet according to claim 4, characterized in that: The method further comprises: In response to the fourth instruction, the first terminal device confirms the state change and updates the first profile information through the work order management program; The first terminal device obtains state information after the state of the first terminal device changes through the automation program, and stores the information in the first interactive storage medium; The first server aggregates the state information of the first terminal device after the state change in the first interactive storage medium through an aggregation program, determines second archive information according to the aggregated state information, and transmits the second archive information to the second server through the second interactive storage medium; The second server receives the second file information in the second interactive storage medium through the export receiving program, and checks the first file information and the second file information through the analysis program to determine whether the state change of the first terminal device is incorrect.

6. The method for full life cycle management of a stand-alone machine not connected to the Internet according to claim 5, characterized in that: The method further comprises: In the case that the state change of the first terminal device is incorrect, the second server repairs the state change of the first terminal device until it is correct; After the state change of the first terminal device is correct, the second server automatically updates the state of the work order management program through the analysis program.

7. The method for full life cycle management of a stand-alone machine not connected to a network according to any one of claims 4 to 6, characterized in that: The method further comprises: Before the second terminal device displays the first interface, the second terminal device sends an authentication request to the second server, where the authentication request is used to request access to an Internet Protocol IP address of the second server; The second server verifies the authentication request through an access control program, and sends an accessible IP address to the second terminal device after the authentication is passed; The second terminal device receives the accessible IP address and accesses the second server based on the accessible IP address.

8. A method for full life cycle management of a stand-alone machine that is not connected to the Internet, characterized in that: A system for full life cycle management of a stand-alone device not connected to the Internet, the system comprising a first terminal device, a first server, and a second server, the first terminal device being a stand-alone device not connected to the Internet, the first terminal device interacting with the first server via a first interactive storage medium, the first server interacting with the second server via a second interactive storage medium, the first terminal device comprising an automation program, the automation program being used to acquire information and configure parameters of the first terminal device, the second server comprising an import and export management program and an import push program, the method comprising: The first terminal device obtains the inspection standard of the first terminal device through the first interactive storage medium, and obtains the real status information of the first terminal device through the automated program; The first terminal device determines whether there is any abnormality in the state of the first terminal device based on the inspection standard and the real state information. The inspection standard is determined by the first server based on the management information of the first terminal device. The management information is acquired by the second server through the import and export management program and the import and push program and stored in the second interactive storage medium.

9. A system for full life cycle management of a stand-alone machine without network connection, characterized in that: The system includes a first terminal device, a second terminal device, a first server and a second server. The first terminal device is a stand-alone device not connected to the network, and the second terminal device is a connected device. The first terminal device interacts with the first server via a first interactive storage medium, and the first server interacts with the second server via a second interactive storage medium. The second terminal device and the second server are connected via a network. The first terminal device includes an automation program, and the automation program is used to acquire information and configure parameters of the first terminal device. The second server includes an import and export management program and an import push program. The first terminal device, the second terminal device, the first server and the second server are used to execute the method described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: Used to store a computer program, the computer program comprising instructions for implementing the method according to claim 8.

Images