A container image sharing platform and construction method thereof

By introducing security modules on the container image sharing platform, the existing platform's long steps and unjudgmentable security are solved, and higher utilization and data security are achieved.

CN114139036BActive Publication Date: 2025-04-29BEIJING YINDUN TAIAN NETWORK TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202111313280.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-11-08
Publication Date
2025-04-29
Estimated Expiration
2041-11-08

AI Technical Summary

Technical Problem

The existing container image sharing platform has problems such as lengthy steps, inability to judge security, and high probability of errors, and cannot effectively ensure the security of user data.

Method used

A container image sharing platform and its construction method are designed, including device platform and sharing platform. The sharing platform is protected through security modules to prevent malicious images from being downloaded and improve the security of the platform.

Benefits of technology

It effectively promotes the utilization rate of the sharing platform, makes the application platform richer, and protects the security of the device platform through the protection of security modules, and ensures the safety of users' data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114139036B_ABST
    Figure CN114139036B_ABST
Patent Text Reader

Abstract

The present invention relates to the technical field of platform website deployment, specifically a container image sharing platform and a construction method thereof, including a device platform and a sharing platform, the device platform including a server and a hardware workstation, the sharing platform including a management module, a retrieval module, a classification module, a communication module, a security module and a container management module, the security module is used to manage the shared information on the sharing platform, effectively supervise all personal operation information of the user, and ensure the privacy and security of the user's operation query information. The user of the present invention can select the image on the sharing platform as needed, and can also exchange and update it. The way of sharing and distributing the image effectively promotes the utilization rate of the sharing platform, making the application platform richer, and the security module can effectively protect the sharing platform, prevent malicious images from being downloaded to the user's platform to cause device platform poisoning, and ensure the user's data security.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to a sharing platform and a construction method thereof, in particular to a container image sharing platform and a construction method thereof, and belongs to the technical field of platform website deployment. Background Art

[0002] With the continuous innovation of Internet technology, a large number of new economic forms represented by the sharing economy have emerged. Excellent sharing economy has continued to emerge and grow in all walks of life, showing great development potential.

[0003] Sharing container images has gradually become a trend. Modern people frequently contact friends through the Internet. If they see an interesting or noteworthy web page or video, they often immediately send the web page link to their contacts via email or instant messaging software to share it.

[0004] However, in existing web browsers or WeChat, the use of APP is quite popular, but in the process of image sharing, it is necessary to follow the steps step by step, and it is only when there is virus detection software that it can be known whether it is safe. Therefore, the traditional sharing platform has the problems of quite lengthy steps, inability to judge safety, and high probability of error.

[0005] China's invention patent publication number CN 110990491 A discloses "a blockchain-based endangered animal list sharing platform". The invention discloses that it includes a guarding module, a search module, a message management module, a business management module, a contract management module, and a secret key management module. The terminal user scans the QR code to log in to the endangered animal list sharing platform, and performs animal guarding operations through the public and private keys provided by the blockchain application platform. Then the blockchain bottom layer will use the public key to verify the operation. After the verification, the guardian information, species information, guarding record information, adopted species information, feeding information, and intimacy value information will be recorded in the blockchain. Blockchain technology provides technical support for the endangered animal list sharing platform, realizing that the guardian information, species information, guarding record information, adopted species information, feeding information, and intimacy value information are all saved in the blockchain, which is the only one that cannot be tampered with, and can be retrieved and uploaded on the platform, but the security of the data and the mirror image cannot be ensured, so there is a virus threat.

[0006] Therefore, there is an urgent need to improve the sharing platform to solve the above-mentioned problems. Summary of the invention

[0007] The purpose of the present invention is to provide a container image sharing platform and a construction method thereof, wherein users can select images on the sharing platform as needed, and can also exchange and update them. The way of sharing and distributing images effectively promotes the utilization rate of the sharing platform, making the application platform richer. The security module can effectively protect the sharing platform, prevent malicious images from being downloaded to the user's platform to cause device platform poisoning, and ensure the user's data security.

[0008] In order to achieve the above object, the main technical solutions adopted by the present invention include:

[0009] A container image sharing platform and a construction method thereof, comprising a device platform and a sharing platform, wherein the device platform and the sharing platform establish a communication connection;

[0010] Through the above technical solutions, users can freely share their own image resources on the sharing platform. Users with needs can select images on the sharing platform as needed, and can also exchange and update them. The way of sharing and distributing images effectively promotes the utilization rate of the sharing platform and makes the application platform richer.

[0011] The equipment platform includes a server and a hardware workstation. The server establishes a communication connection with the hardware workstation. The hardware workstation is provided with a storage array, a storage library, a switch and a database group. The storage library is used to store data information of the sharing platform. The server includes an application server, a Web server, an information transmission server and a communication server.

[0012] The server is connected to the workstation, and the workstation may be provided with a storage array, a storage library, a switch and a database group in sequence. The server may include an application server, a Web server, an information transmission server and a communication server. The server and the workstation are connected to improve the rapid operation of the device platform, thereby improving the efficiency of the device platform in processing data;

[0013] The sharing platform includes management module, search module, classification module, communication module, security module and container management module. The sharing platform sets the mainstream language images of ARM architecture and MIPS as the basic environment images;

[0014] The management module is used to manage the container images on the sharing platform;

[0015] The search module is used to search for shared information on the sharing platform through keywords;

[0016] The classification module is used to classify and manage the shared information on the sharing platform, and the classification module establishes a communication connection with the retrieval module;

[0017] The security module is used to manage the shared information on the sharing platform. Users can effectively supervise all operation information to ensure the privacy and security of user operation and query information.

[0018] The security module establishes communication connections with the management module, the retrieval module, the classification module and the communication module respectively;

[0019] Through the above technical solutions, the sharing platform includes management module, search module, classification module, communication module, security module, and container management module. In addition, the sharing platform sets the mainstream language images of ARM architecture and MIPS as the basic environment images. Therefore, when users share the platform on the sharing platform, they first search through the search module to search for what they need without searching step by step. Therefore, a lot of time can be saved and the update efficiency can be greatly improved.

[0020] The communication module includes:

[0021] A registration unit is used for users to register on the sharing platform, and the registration unit includes a user's name registration subunit, a mobile phone number registration subunit, and an email registration subunit;

[0022] A question unit, used for users to ask questions and retrieve shared information, and the question unit includes a question topic subunit, a question content subunit and a question type subunit;

[0023] A reply unit, used for obtaining shared information from the sharing platform and feeding the shared information back to the questioning unit;

[0024] The registration unit establishes communication connections with the questioning unit and the replying unit respectively;

[0025] The question unit is linked to the reply unit;

[0026] Through the above technical solution, the classification module classifies the images on the sharing platform, so users can select the corresponding images through the classification module, thereby improving the flexibility and scope of use of the sharing platform. At the same time, users can communicate with each other and even realize image sharing based on the sharing platform, thereby facilitating communication and timely updating of images on the sharing platform, so as to make the sharing platform more sticky;

[0027] When users use the sharing platform, there may be malicious images because the images are different. The security module can effectively protect the sharing platform to prevent malicious images on the sharing platform from being downloaded to the user's platform and causing device platform poisoning, thereby improving the security of the device platform and sharing platform and ensuring user data security;

[0028] Sharing platforms include:

[0029] Contract management module: The contract management module is used for users to establish contracts with sharing platforms, and to make reasonable calls and contract processing for platform information:

[0030] The memory module is used to temporarily store the web pages and download information selected by the user and form an acquisition list;

[0031] A computing module is used to calculate and capture information from web pages;

[0032] Through the above technical solution, when the user updates and replaces the image on the sharing platform, the sharing platform can calculate and update the user's original image, and at the same time memorize and store the image required by the user, so as to facilitate direct update later, and also facilitate the sharing platform to classify and count the images later.

[0033] Preferably, the container management module includes a gateway image, a registration image, a platform UI image, and a platform service image, and the platform service image establishes a communication connection with the sharing platform;

[0034] The gateway image is used to receive service requests from the sharing platform and transmit them to other images;

[0035] The platform service image establishes communication connections with the gateway image, registration image, and platform UI image.

[0036] In this embodiment, as shown in the figure, the platform service image includes:

[0037] Authentication service image, used to authenticate user information;

[0038] Management service image, used to manage and store user information;

[0039] Monitoring service image, used to verify and monitor user information.

[0040] The gateway image, registration image, platform UI image, and platform service image all run in Docker containers;

[0041] Through the above technical solution, the download process of the target container image can be converted into a method of transmission between containers to improve the download process of the target container image. At the same time, the container platforms are interconnected to make the transmission method faster. The authentication service image authenticates the user's information, the management service image manages and stores the user's information, and the monitoring service image verifies and monitors the user's information to ensure the security of the sharing platform.

[0042] Preferably, the security module further comprises: a shared information monitoring unit;

[0043] The shared information monitoring unit performs the following operations:

[0044] Establish a problem user information pool, which is used to store the first user information of users whose uploaded shared information has problems. The problem user information pool is initially empty, and the first user information in the problem user information pool is all set with a counting mark;

[0045] When there is shared information uploaded to the sharing platform, the first user information of the user who uploaded the shared information is obtained, and whether the user is a problematic user is determined based on the problematic user information pool; the first user information includes user registration information and user device information;

[0046] User registration information includes user registration name, mobile phone number and email address;

[0047] User device information includes the MAC address and IP address of the device used by the user to share shared information;

[0048] If the first user information exists in the problem user information pool, the user is determined to be a problem user, a count mark is added to the first user information in the problem user information pool, and the problem level of the first user information after the count mark is obtained;

[0049] Marking the shared information accordingly according to the problem level of the first user information, and placing the marked shared information into the sharing platform;

[0050] Among them, the problem levels include yellow minor level, red severe level and black blacklist level;

[0051] The method for determining the problem level is to determine it according to the counting mark of the first user information, specifically including:

[0052] If the number of count marks of any first user information is greater than or equal to the preset yellow minor number and less than the preset red severe number, the problem level of the user's first user information is marked as yellow minor level;

[0053] If the number of count marks of any first user information is greater than or equal to the preset red serious number and less than the preset black blacklist number, the problem level of the user's first user information is marked as red serious level;

[0054] If the number of count marks of any first user information is greater than or equal to the preset blacklisting number, the problem level of the first user information of the user is marked as the blacklisting level;

[0055] If the first user information does not exist in the problem user information pool, it is determined that the user is not a problem user, and whether the shared information is a malicious image;

[0056] If the shared information is a malicious image, it is determined that there is a problem with the shared information, the user's first user information is stored in the problematic user information pool, and the shared information is marked with a yellow minor level and placed on the sharing platform;

[0057] If the shared information is not a malicious image, it is determined that there is no problem with the shared information and the shared information is allowed to enter the sharing platform;

[0058] If the user device information of the user who uploaded the shared information cannot be obtained, the user registration information of the user is directly stored in the problem user information pool. If the user registration information exists in the problem user information pool, the user registration information is counted and marked with one, and the problem level of the user registration information after the count mark is obtained. The shared information is marked accordingly according to the problem level of the user registration information, and the marked shared information is placed on the sharing platform.

[0059] Preferably, the reply unit performs the following operations:

[0060] Obtain the question topics collected by the question topic subunit, screen out the second user information that asks the same question topic on the sharing platform, obtain the first shared information finally selected by the second user information for the question topic, and sort the first shared information in descending order according to the number of times the first shared information is selected, to obtain an ordered linked list of the first shared information;

[0061] Obtain the question content collected by the question content subunit, extract keywords from the question content based on a preset keyword set, and obtain question keywords; filter out third user information that asks the same question for the question keywords on the sharing platform, and obtain a number of second shared information finally selected by the third user information for the question keywords, and sort the number of second shared information in descending order according to the number of times the number of second shared information is selected, to obtain an ordered linked list of second shared information;

[0062] Obtain the question types collected by the question type subunit, filter out the fourth user information that asks the same question type in the sharing platform, obtain the third shared information finally selected by the fourth user information for the question type, and sort the third shared information in descending order according to the number of times the third shared information is selected, to obtain an ordered linked list of the third shared information;

[0063] The shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list are respectively marked with a score of 1 from high to low, wherein the score of the first shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list is 1;

[0064] Obtain any first shared information in the first shared information ordered linked list, respectively select the second shared information and the third shared information in the second shared information ordered linked list and the third shared information ordered linked list that are the same as the first shared information, obtain the scores of the first shared information, the second shared information and the third shared information, and add them up to obtain the ranking score of the first shared information;

[0065] Sort the first shared information in order from low to high according to the sorting scores of the first shared information to obtain a final shared information ordered linked list;

[0066] The shared information in the final shared information ordered linked list is fed back to the questioning unit in sequence.

[0067] A method for building a container image sharing platform includes the following steps:

[0068] Step 1: The user registers and logs in through the registration unit on the communication module;

[0069] Step 2: After registration, search through the search module as needed, and obtain the initial container image from the classification module;

[0070] Step 3: The user performs communication analysis through the communication module, writes the required container image to the sharing platform, and protects the sharing platform through the security module;

[0071] Step 4: The memory module and the calculation module on the sharing platform calculate and count the user's search content and downloaded content, and submit them to the device platform to complete the sharing of the platform.

[0072] Preferably, the step 2 is specifically as follows:

[0073] The user obtains the corresponding image from the Docker container, and the platform service image authenticates, manages, verifies and monitors the user's information to ensure the security of the sharing platform.

[0074] The present invention has at least the following beneficial effects:

[0075] Users can select images on the sharing platform as needed, and can also exchange and update them. The shared distribution of images effectively promotes the utilization rate of the sharing platform and makes the application platform richer. The security module can effectively protect the sharing platform to prevent malicious images from being downloaded to the user's platform and causing device platform poisoning, thereby ensuring user data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0077] Figure 1 It is a structural schematic diagram of the present invention;

[0078] Figure 2 is a flow chart of the method of the present invention;

[0079] Figure 3 This is a structural diagram of the container management module of the present invention.

[0080] In the figure, 1-device platform, 2-sharing platform, 3-server, 301-application server, 302-Web server, 303-information transmission server, 304-communication server, 4-hardware workstation, 401-storage array, 402-storage library, 403-switch, 404-database group, 5-management module, 6-retrieval module, 7-classification module, 701-authentication service image, 702-management service image, 703-monitoring service image, 8-communication module, 801-registration unit, 802-questioning unit, 803-reply unit, 9-security module, 10-container management module, 11-contract management module, 12-memory module, 13-computing module, 14-gateway image, 15-registration image, 16-platform UI image, 17-platform service image. DETAILED DESCRIPTION

[0081] The following will describe the implementation methods of the present application in detail with the help of accompanying drawings and examples, so that the implementation process of how the present application uses technical means to solve technical problems and achieve technical effects can be fully understood and implemented accordingly.

[0082] like Figure 1 As shown, the container image sharing platform and construction method thereof provided in this embodiment include a device platform 1 and a sharing platform 2, and the device platform 1 and the sharing platform 2 establish a communication connection;

[0083] Users can freely share their own image resources on the sharing platform 2. Users with needs can select images on the sharing platform 2 as needed, and can also exchange and update them. The way of sharing and distributing images effectively promotes the utilization rate of the sharing platform 2 and makes the application platform richer.

[0084] The device platform 1 includes a server 3 and a hardware workstation 4. The server 3 establishes a communication connection with the hardware workstation 4. The hardware workstation 4 is provided with a storage array 401, a storage library 402, a switch 403 and a database group 404. The storage library 402 is used to store data information of the sharing platform 2. The server 3 includes an application server 301, a Web server 302, an information transmission server 303 and a communication server 304.

[0085] The server 3 is connected to the workstation 4. The workstation 4 may be provided with a storage array 401, a storage library 402, a switch 403 and a database group 404 in sequence. The server 3 may include an application server 301, a web server 302, an information transmission server 303 and a communication server 304. The server 3 and the workstation 4 are connected to improve the rapid operation of the device platform 1, thereby improving the efficiency of the device platform 1 in processing data.

[0086] The sharing platform 2 includes a management module 5, a search module 6, a classification module 7, a communication module 8, a security module 9 and a container management module 10. The sharing platform 2 sets the mainstream language images of the ARM architecture and MIPS as the basic environment images;

[0087] The management module 5 is used to manage the container images on the sharing platform 2;

[0088] The search module 6 is used to search for shared information on the sharing platform through keywords;

[0089] The classification module 7 is used to classify and manage the shared information on the sharing platform 2, and the classification module 7 establishes a communication connection with the retrieval module 6;

[0090] The security module 9 is used to manage the shared information on the sharing platform 2, and the user can effectively supervise all operation information to ensure the privacy and security of the user's operation query information;

[0091] The security module 9 establishes communication connections with the management module 5, the retrieval module 6, the classification module 7 and the communication module 8 respectively;

[0092] The sharing platform 2 includes a management module 5, a search module 6, a classification module 7, a communication module 8, a security module 9, and a container management module 10. The sharing platform 2 sets the mainstream language images of the ARM architecture and MIPS as the basic environment images. Therefore, when the user shares the platform on the sharing platform 2, he first searches through the search module 6 to search for what he needs, without the need to search step by step. Therefore, a lot of time can be saved and the update efficiency can be greatly improved.

[0093] AC module 8 includes:

[0094] The registration unit 801 is used for the user to register on the sharing platform 2, and the registration unit 801 includes a user's name registration subunit, a mobile phone number registration subunit, and an email registration subunit;

[0095] The question unit 802 is used for users to ask questions and retrieve shared information, and the question unit 802 includes a question topic subunit, a question content subunit and a question type subunit;

[0096] The reply unit 803 is used to obtain the shared information from the sharing platform 2 and feed the shared information back to the questioning unit 802;

[0097] Specifically, the user inputs the requirement for shared information through the questioning unit 802, and the questioning unit 802 sends a search request to the replying unit 803. The replying unit 803 obtains the corresponding shared information from the sharing platform 2 according to the requirement raised by the user in the questioning unit 802, and feeds the obtained shared information back to the questioning unit 802. The questioning unit 802 displays the shared information fed back by the replying unit 803 to the user;

[0098] The registration unit 801 establishes communication connections with the questioning unit 802 and the replying unit 803 respectively;

[0099] The question unit 802 is linked to the reply unit 803;

[0100] The classification module 7 classifies the images on the sharing platform 2, so that users can select the corresponding images through the classification module 7, thereby improving the flexibility and scope of use of the sharing platform 2. At the same time, users can communicate with each other and even realize image sharing based on the sharing platform 2, thereby facilitating communication and timely updating of the images on the sharing platform 2, so as to make the sharing platform 2 more sticky;

[0101] When users use the sharing platform 2, there may be a problem of malicious images because the images are different. The security module 9 can effectively protect the sharing platform 2 to prevent malicious images on the sharing platform 2 from being downloaded to the user's platform to cause the device platform 1 to be poisoned, thereby improving the security of the device platform 1 and the sharing platform 2 and ensuring the data security of users;

[0102] Sharing Platform 2 includes:

[0103] Contract management module 11: Contract management module 11 is used for users to establish contracts with sharing platforms, and to reasonably call platform information and process contracts:

[0104] The memory module 12 is used to temporarily store the web pages and download information selected by the user and form an acquisition list;

[0105] The calculation module 13 is used to calculate and capture information from the web page;

[0106] When the user updates and replaces the image on sharing platform 2, sharing platform 2 can calculate and update the user's original image, and at the same time memorize and store the image required by the user, so as to facilitate direct update later, and also facilitate sharing platform 2 to classify and count the images later.

[0107] In this embodiment, if Figure 3 As shown, the container management module 10 includes a gateway image 14, a registration image 15, a platform UI image 16 and a platform service image 17, and the platform service image 17 establishes a communication connection with the sharing platform 2;

[0108] The gateway mirror 14 is used to receive service requests from the sharing platform 2 and transmit them to other mirrors;

[0109] The platform service image 17 establishes communication connections with the gateway image 14 , the registration image 15 , and the platform UI image 16 .

[0110] In this embodiment, if Figure 3 As shown, the platform service image 17 includes:

[0111] Authentication service image 701, used to authenticate user information;

[0112] Management service image 702, used to manage and store user information;

[0113] The monitoring service image 703 is used to check and monitor the user's information.

[0114] The gateway image 14, the registration image 15, the platform UI image 16, and the platform service image 17 all run in Docker containers;

[0115] The download process of the target container image can be converted into a method of transmission between containers to improve the download process of the target container image. At the same time, the container platforms are interconnected to make the transmission method faster. The authentication service image 701 authenticates the user's information, the management service image 702 manages and stores the user's information, and the monitoring service image 703 verifies and monitors the user's information to ensure the security of the sharing platform 2.

[0116] In one embodiment, the security module 9 further includes: a shared information monitoring unit;

[0117] The shared information monitoring unit performs the following operations:

[0118] Establish a problem user information pool, which is used to store the first user information of users whose uploaded shared information has problems. The problem user information pool is initially empty, and the first user information in the problem user information pool is all set with a counting mark;

[0119] When there is shared information uploaded to the sharing platform 2, the first user information of the user who uploaded the shared information is obtained, and whether the user is a problematic user is determined based on the problematic user information pool; the first user information includes user registration information and user device information;

[0120] User registration information includes user registration name, mobile phone number and email address;

[0121] User device information includes the MAC address and IP address of the device used by the user to share shared information;

[0122] If the first user information exists in the problem user information pool, the user is determined to be a problem user, a count mark is added to the first user information in the problem user information pool, and the problem level of the first user information after the count mark is obtained;

[0123] Marking the shared information accordingly according to the problem level of the first user information, and putting the marked shared information into the sharing platform 2;

[0124] Among them, the problem levels include yellow minor level, red severe level and black blacklist level;

[0125] The method for determining the problem level is to determine it according to the counting mark of the first user information, specifically including:

[0126] If the number of count marks of any first user information is greater than or equal to the preset yellow minor number and less than the preset red severe number, the problem level of the user's first user information is marked as yellow minor level;

[0127] If the number of count marks of any first user information is greater than or equal to the preset red serious number and less than the preset black blacklist number, the problem level of the user's first user information is marked as red serious level;

[0128] If the number of count marks of any first user information is greater than or equal to the preset blacklisting number, the problem level of the first user information of the user is marked as the blacklisting level;

[0129] If the first user information does not exist in the problem user information pool, it is determined that the user is not a problem user, and whether the shared information is a malicious image is determined;

[0130] If the shared information is a malicious image, it is determined that there is a problem with the shared information, the first user information of the user is stored in the problematic user information pool, and the shared information is marked with a yellow minor level and then placed on the sharing platform 2;

[0131] If the shared information is not a malicious image, it is determined that there is no problem with the shared information, and the shared information is allowed to enter the sharing platform 2;

[0132] If the user device information of the user who uploaded the shared information cannot be obtained, the user registration information of the user is directly stored in the problem user information pool. If the user registration information exists in the problem user information pool, the user registration information is counted and marked by one, the problem level of the user registration information after the count mark is obtained, and the shared information is marked accordingly according to the problem level of the user registration information, and the marked shared information is placed in the sharing platform 2;

[0133] The working principle of the above technical solution is as follows: the shared information monitoring unit is used to monitor the shared information (i.e., container images) uploaded by users, and mark the shared information with different degrees of danger, so that other users can clearly and intuitively understand the risk level of the shared information, which greatly reduces the situation where users randomly download shared information uploaded by strangers and cause device poisoning, and provides users with a good sharing environment;

[0134] The shared information monitoring unit performs the following operations:

[0135] First, a problematic user information pool is established and stored inside the shared information monitoring unit. The problematic user information pool is used to store the first user information of users whose uploaded shared information has problems. When the problematic user information pool is initially established, the first user information in the problematic user information pool is empty, and when the first user information is stored in the problematic user information pool, the first user information will be marked with a counting mark, so as to count the number of times the first user information is stored in the problematic user information pool as an indicator for marking the degree of danger of the shared information uploaded by the first user information. The first user information includes user registration information and user device information. In the problematic user information pool, the user registration information and the user device information are stored at the same time. The user registration information and the user device information are preferably stored in combination in a group. For example, if A is the problem user information pool, then A = {ab, cd, ...}, wherein a and c are any user registration information, b and d are any user device information, but a and b or c and d are user registration information and user device information collected simultaneously when the first user information is collected; when the shared information monitoring unit detects that there is shared information uploaded to the sharing platform, the first user information of the user who uploaded the shared information is obtained, wherein the user registration information in the first user information includes the user registration name, mobile phone number and email address, and the acquisition method is preferably to directly register the user through the sharing platform The user device information in the first user information is searched and obtained in the registration unit when the user shares the shared information. The user device information in the first user information is the MAC address and IP address of the device used by the user to share the shared information. The acquisition method is preferably to send a call instruction through the network connection channel established by the sharing platform to call the MAC address and IP address of the device; the obtained first user information is compared with the problem user information pool to query whether there is information in the problem user information pool that is the same as the user registration information or user device information. If there is no information in the problem user information pool that is the same as the user registration information or user device information, that is, there is neither the same information as the user registration information nor the same information as the user device information in the problem user information pool. For example, the problem user A={ab, cd} in the user information pool. If there is a first user information in which the user registration information is a and the user device information is g, or the user registration information is f and the user device information is b, it is considered that there is information identical to the user registration information or the user device information in the problem user information pool, and the user is determined to be a problem user. On the contrary, if neither exists, the user is determined not to be a problem user. When the user is not determined to be a problem user, the shared information uploaded by the user is judged to determine whether the shared information contains a malicious image. The judgment method preferably includes 1. obtaining several layers of the image, and based on the identifier of the image layer, using the loaded image information library to check for malicious containers, and quickly locate the known malicious images;2. Run the image in a closed space, monitor and scan suspicious requests, suspicious processes, resource usage and crash behaviors in the image to locate possible malicious images; two methods: the first method is to quickly check the image for malicious containers based on the known image information library, and the second method is to test run and monitor the image after the first method has completed the detection and no malicious image is determined; if the shared information is determined to include a malicious image, it indicates that there is a problem with the shared information, and the first user information of the user is stored in the problem user information pool, and the shared information is marked with a yellow minor level and placed on the sharing platform, which is beneficial to prevent misjudgment and loss of users and high-quality image containers, and through the danger level label The system reminds other users that the shared information is judged as a dangerous image by the platform, reminds other users to download it with caution, reduces the impact of misjudgment and increases other users' vigilance to the shared information; if the shared information does not contain malicious images, the shared information is normal, and the shared information is directly agreed to be shared on the platform; if the first user information exists in the problem user information pool, that is, if any one of the user registration information or user device information in the first user information exists, the user is judged to be a problem user, and the technical mark of the information in the problem user information pool that is the same as the first user information is added by one, for example: if the first user information is ij, the problem user information pool A = {a+1-b+1,c+1-d+1,i+1-j+1,i+1 -k+1}, where +1 is a counting mark, then after adding one to the technical mark of the information identical to the first user information in the problem user information pool, the problem user information pool A={a+1-b+1,c+1-d+1,i+2-j+2,i+2-k+1}; the problem level of the first user information is determined according to the counting mark of the information identical to the first user information in the problem user information pool, and the problem level includes a yellow minor level, a red severe level and a blacklist level. The determination method is preferably determined according to the counting mark of the user information, specifically including: if the number of counting marks of any first user information is greater than or equal to the preset yellow minor number and less than the preset red severe number, then the first user information of the user is The problem level is marked as a yellow minor level; if the number of count marks of any first user information is greater than or equal to the preset red serious number and less than the preset black black number, the problem level of the user's first user information is marked as a red serious level; if the number of count marks of any first user information is greater than or equal to the preset black black number, the problem level of the user's first user information is marked as a black black level, wherein the count mark of any first user information includes the count mark with the highest count mark among the user registration information count mark and the user device information count mark; the preset yellow minor number, the preset red serious number and the preset black black number are preferably set by the administrator according to the error rate of the judgment of malicious images of the sharing platform;Furthermore, the count mark with the highest count mark in the user registration information and the user device information is always used as the basis for judging the problem level. After obtaining the problem level of the first user information, the shared information uploaded by the user is marked accordingly according to the problem level. Preferably, the problem level is yellow, and the minor level corresponds to a yellow mark, the serious level corresponds to a red mark, and the blacklist level corresponds to a black mark. The marked shared information is placed on the sharing platform, which is beneficial to preventing the loss of users and high-quality image containers due to misjudgment, and reminds other users that the shared information is judged as a dangerous image by the platform through the danger level mark, reminding other users to download with caution, reducing the impact of misjudgment while increasing other users' vigilance to the shared information. Furthermore, after the marked shared information is placed in the sharing platform, a malicious image determination is performed on the shared information. If the shared information does not contain a malicious image, a count mark of the information identical to the first user information in the problem user information pool is reduced by one; further, if the user device information of the user who uploaded the shared information cannot be obtained, the user registration information of the user is directly stored in the problem user information pool. If the user registration information exists in the problem user information pool, a count mark is added to the user registration information to obtain the problem level of the user registration information after the count mark, and the shared information is marked accordingly according to the problem level of the user registration information, and the marked shared information is placed in the sharing platform;

[0136] The beneficial effects of the above technical solution are as follows: through the shared information monitoring unit, the shared information with different degrees of danger is marked with a dangerous degree, so that other users can clearly and intuitively understand the risk level of the shared information, which greatly reduces the situation where the majority of users download the shared information uploaded by strangers indiscriminately and cause device poisoning, and provides users with a good sharing environment. The shared information monitoring unit is set up in the sharing platform, and the shared information is directly detected when the shared information enters the sharing platform, avoiding the lengthy steps and low detection efficiency caused by directly using antivirus software to detect the shared information. By monitoring the user registration information and user device information at the same time, it is beneficial to timely monitor someone who maliciously registers a platform account to spread malicious images on the sharing platform and timely mark the dangerous degree of the malicious image. Through the problem user pool, it is beneficial to ensure the security of the sharing platform, so that after a bad user has a bad record once, the bad record of the user will always exist, preventing the bad user from uploading malicious images and causing losses to other users without being detected.

[0137] In one embodiment, the reply unit 803 performs the following operations:

[0138] Obtain the question topics collected by the question topic subunit, screen out the second user information that asks the same question topic on the sharing platform, obtain the first shared information finally selected by the second user information for the question topic, and sort the first shared information in descending order according to the number of times the first shared information is selected, to obtain an ordered linked list of the first shared information;

[0139] Obtain the question content collected by the question content subunit, extract keywords from the question content based on a preset keyword set, and obtain question keywords; filter out third user information that asks the same question for the question keywords on the sharing platform, and obtain a number of second shared information finally selected by the third user information for the question keywords, and sort the number of second shared information in descending order according to the number of times the number of second shared information is selected, to obtain an ordered linked list of second shared information;

[0140] Obtain the question types collected by the question type subunit, filter out the fourth user information that asks the same question type in the sharing platform, obtain the third shared information finally selected by the fourth user information for the question type, and sort the third shared information in descending order according to the number of times the third shared information is selected, to obtain an ordered linked list of the third shared information;

[0141] The shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list are respectively marked with a score of 1 from high to low, wherein the score of the first shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list is 1;

[0142] Obtain any first shared information in the first shared information ordered linked list, respectively select the second shared information and the third shared information in the second shared information ordered linked list and the third shared information ordered linked list that are the same as the first shared information, obtain the scores of the first shared information, the second shared information and the third shared information, and add them up to obtain the ranking score of the first shared information;

[0143] Sort the first shared information in order from low to high according to the sorting scores of the first shared information to obtain a final shared information ordered linked list;

[0144] Feeding back the shared information in the final shared information ordered linked list to the questioning unit 802 in sequence;

[0145] The working principle of the above technical solution is as follows: the user inputs the requirement for shared information through the questioning unit 802, the questioning unit 802 sends a search request to the replying unit 803, the replying unit 803 obtains the corresponding shared information from the sharing platform 2 according to the requirement raised by the user in the questioning unit 802, and feeds the obtained shared information back to the questioning unit 802, and the questioning unit 802 displays the shared information fed back by the replying unit 803 to the user;

[0146] The reply unit 803 specifically performs the following operations:

[0147] Obtain the question topics collected by the question topic subunit, filter out the second user information that asks the same question on the question topic on the sharing platform, and obtain several first shared information that the second user information finally selects for the question topic, and sort the several first shared information in order from high to low according to the number of times the several first shared information are selected, to obtain an ordered linked list of first shared information; obtain the question content collected by the question content subunit, extract keywords from the question content based on a preset keyword set, and obtain question keywords; filter out the third user information that asks the same question on the question keyword on the sharing platform, and obtain several second shared information that the third user information finally selects for the question keyword, and sort the several second shared information in order from high to low according to the number of times the several second shared information are selected, to obtain an ordered linked list of second shared information; obtain the question type collected by the question type subunit, filter out the third user information that asks the same question type on the sharing platform The fourth user information of the questioner is obtained, and a number of third shared information finally selected by the fourth user information for the question type is obtained, and the number of third shared information is sorted in order from high to low according to the number of times the number of third shared information is selected, so as to obtain an ordered list of third shared information; the shared information in the first ordered list of shared information, the second ordered list of shared information, and the third ordered list of shared information are respectively marked with a score plus one from high to low, wherein the score of the first shared information in the first ordered list of shared information, the second ordered list of shared information, and the third ordered list of shared information is 1; any first shared information in the ordered list of the first shared information is obtained, and the second shared information and the third shared information in the second ordered list of shared information and the third ordered list of shared information that are the same as the first shared information are respectively selected, and the scores of the first shared information, the second shared information, and the third shared information are obtained and then added to obtain the ranking score of the first shared information, and the calculation method is preferably γ β =β1+β2+β3, where γ βis the ranking score of the first shared information β, β1 is the score of the first shared information, β2 is the score of the second shared information that is the same as the first shared information, and β3 is the score of the third shared information that is the same as the first shared information; the first shared information is sorted in order from low to high according to the ranking score of the first shared information to obtain a final shared information ordered linked list; the shared information in the final shared information ordered linked list is fed back to the questioning unit 802 in sequence;

[0148] For example, there is a first shared information ordered linked list of {Z, X, C, V, B, N, M}, there is a second shared information ordered linked list of {M, N, B, V, C, X, Z}, and there is a third shared information ordered linked list of {C, B, Z, N, M, V, X}. In the first shared information ordered linked list, the score of Z is 1, X is 2, C is 3, V is 4, B is 5, N is 6, and M is 7. In the second shared information ordered linked list, the score of M is 1, N is 2, B is 3, V is 4, C is 5, X is 6, and Z is 7. In the third shared information ordered linked list, the score of C is 1, X is 2, C is 3, V is 4, B is 5, N is 6, and M is 7. The score of is 1, B is 2, Z is 3, N is 4, M is 5, V is 6, and X is 7. Then the score of the first shared information of Z is 11, X is 15, C is 9, V is 14, B is 10, N is 12, and M is 13. Then the first shared information is sorted from low to high according to the sorting score of the first shared information, and the final shared information ordered list is {C, B, Z, N, M, V, X}. When giving feedback, C is fed back first, then B, and so on. Furthermore, on the user's device, the first shared information on the first page is C, the second is B, and so on.

[0149] Furthermore, if for any first shared information in the first shared information ordered list, there is no second shared information or third shared information identical to the first shared information in the second shared information ordered list or the third shared information ordered list, it is impossible to obtain the scores of the same first shared information, the second shared information and the third shared information and then add them together, and the ranking score of the first shared information cannot be obtained; preferably, if for any first shared information in the first shared information ordered list, only when there is second shared information or third shared information identical to the first shared information in the second shared information ordered list or the third shared information ordered list, it is impossible to obtain the scores of the same first shared information, the second shared information or the third shared information and then add them together. Add, obtain the second ranking score of the first shared information, sort the first shared information in order from low to high according to the second ranking score of the first shared information, obtain the second final shared information ordered list, and after the shared information in the final shared information ordered list is fed back to the questioning unit 802 in sequence, the shared information in the second final shared information ordered list is fed back to the questioning unit 802 in sequence; similarly, compare any second shared information in the second shared information ordered list with any third shared information in the third shared information ordered list in the same way to obtain the third final shared information, and after the second final shared information ordered list is fed back to the questioning unit 802 in sequence according to the above method, the third final shared information is fed back to the questioning unit 802;

[0150] Furthermore, if for any first shared information in the first shared information ordered linked list, there is no second shared information and third shared information identical to the first shared information in the second shared information ordered linked list and the third shared information ordered linked list, the first shared information that has this situation is sorted in order from low to high according to its own score to obtain a fourth final shared information ordered linked list, and after the shared information in the third final shared information ordered linked list is fed back to the questioning unit 802 in sequence, the shared information in the fourth final shared information ordered linked list is fed back to the questioning unit 802 in sequence; similarly, any second shared information in the second shared information ordered linked list is compared with any third shared information in the third shared information ordered linked list to obtain the fifth final shared information, and according to the above method, the fifth final shared information is fed back to the questioning unit 802 in sequence after the fourth final shared information ordered linked list is fed back to the questioning unit 802;

[0151] The beneficial effects of the above technical solution are: obtaining the most popular shared information when all users in the platform search for the same question topic, question content and question type, and pushing it to users in sequence, which is beneficial for users to quickly select their favorite shared information for downloading, improve the accuracy of the sharing platform in accurately pushing shared content, improve the quality of sharing, and the screening method is simple, which is convenient for users while reducing the platform's resource usage.

[0152] like Figure 2 As shown, the method for constructing a container image sharing platform provided in this embodiment includes the following steps:

[0153] Step 1: The user registers and logs in through the registration unit 801 on the communication module 8;

[0154] Step 2: After registration, search through the search module 6 as needed, and obtain the initial container image from the classification module 7;

[0155] The user obtains the corresponding image from the Docker container, and the platform service image 17 authenticates, manages, verifies and monitors the user's information to ensure the security of the sharing platform 2;

[0156] Step 3: The user performs communication analysis through the communication module 8, writes the required container image to the sharing platform 2, and protects the sharing platform 2 through the security module 9;

[0157] Step 4: The memory module 12 and the calculation module 13 on the sharing platform 2 calculate and count the user's search content and downloaded content, and submit them to the device platform 1 to complete the sharing of the platform.

[0158] For example, certain words are used in the specification and claims to refer to specific components. Those skilled in the art should understand that hardware manufacturers may use different terms to refer to the same component. This specification and claims do not use differences in names as a way to distinguish components, but use differences in the functions of components as the criteria for distinction. For example, "including" mentioned throughout the specification and claims is an open term, so it should be interpreted as "including but not limited to". "Approximately" means that within an acceptable error range, those skilled in the art can solve technical problems within a certain error range and basically achieve technical effects.

[0159] It should be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a product or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such product or system. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the product or system including the elements.

[0160] The above description shows and describes several preferred embodiments of the present invention, but as mentioned above, it should be understood that the present invention is not limited to the form disclosed herein, and should not be regarded as excluding other embodiments, but can be used in various other combinations, modifications and environments, and can be modified within the scope of the invention concept described herein through the above teachings or the technology or knowledge of the relevant field. Changes and variations made by those skilled in the art do not depart from the spirit and scope of the present invention, and should be within the scope of protection of the claims attached to the present invention.

Claims

1. A container image sharing platform, comprising a device platform (1) and a sharing platform (2), characterized in that: The device platform (1) and the sharing platform (2) establish a communication connection; The device platform (1) comprises a server (3) and a hardware workstation (4), wherein the server (3) establishes a communication connection with the hardware workstation (4), and the hardware workstation (4) is provided with a storage array (401), a storage library (402), a switch (403), and a database group (404); The sharing platform (2) comprises a management module (5), a search module (6), a classification module (7), a communication module (8), a security module (9) and a container management module (10), and the sharing platform (2) sets the mainstream language images of the ARM architecture and MIPS as the basic environment images; The management module (5) is used to manage the container images on the sharing platform (2); The search module (6) is used to provide a keyword-based search for shared information on the sharing platform (2); The classification module (7) is used to classify and manage the shared information on the sharing platform (2), and the classification module (7) establishes a communication connection with the retrieval module (6); The security module (9) is used to manage the shared information on the sharing platform (2) and to monitor all operation information of the user; The security module (9) establishes communication connections with the management module (5), the retrieval module (6), the classification module (7) and the communication module (8) respectively; The AC module (8) comprises: A registration unit (801) is used for a user to register on the sharing platform (2), and the registration unit (801) includes a user's name registration subunit, a mobile phone number registration subunit and an email registration subunit; A questioning unit (802), used for users to ask questions and retrieve shared information, and the questioning unit (802) includes a question topic subunit, a question content subunit and a question type subunit; A reply unit (803), used for obtaining shared information from the sharing platform (2) and feeding the shared information back to the questioning unit (802); The registration unit (801) establishes communication connections with the questioning unit (802) and the replying unit (803) respectively; The questioning unit (802) is linked to the replying unit (803); The reply unit (803) performs the following operations: Obtain the question topics collected by the question topic subunit, filter out the second user information that asks the same question on the question topic in the sharing platform, obtain the first shared information finally selected by the second user information for the question topic, and sort the first shared information in descending order according to the number of times the first shared information is selected, to obtain an ordered linked list of the first shared information; Obtain the question content collected by the question content subunit, extract keywords from the question content based on a preset keyword set to obtain question keywords; filter out third user information that asks the same question with the question keyword on the sharing platform, obtain a number of second shared information finally selected by the third user information for the question keyword, and sort the number of second shared information in descending order according to the number of times the number of second shared information is selected to obtain an ordered linked list of second shared information; Acquire the question types collected by the question type subunit, filter out fourth user information that asks the same question type in the sharing platform, and acquire a number of third shared information finally selected by the fourth user information for the question type, and sort the number of third shared information in descending order according to the number of times the number of third shared information is selected, to obtain an ordered linked list of third shared information; The shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list are respectively marked with a score of 1 from high to low, wherein the score of the first shared information in the first shared information ordered linked list, the second shared information ordered linked list, and the third shared information ordered linked list is 1; Obtain any first shared information in the first shared information ordered linked list, respectively select the second shared information and the third shared information in the second shared information ordered linked list and the third shared information ordered linked list that are the same as the first shared information, obtain the scores of the first shared information, the second shared information and the third shared information, and add them to obtain the ranking score of the first shared information; Sort the first shared information in order from low to high according to the sorting scores of the first shared information to obtain a final shared information ordered linked list; The shared information in the final shared information ordered linked list is fed back to the questioning unit in sequence (802).

2. A container image sharing platform according to claim 1, characterized in that: The server (3) comprises an application server (301), a Web server (302), an information transmission server (303) and a communication server (304).

3. The container image sharing platform according to claim 1, characterized in that: The sharing platform (2) comprises: A contract management module (11), wherein the contract management module (11) is used for establishing a contract between a user and the sharing platform (2), and for reasonably calling platform information and performing contract processing: A memory module (12) is used to temporarily store web pages and download information selected by the user and form an acquisition list; The calculation module (13) is used to calculate and capture information from the web page.

4. The container image sharing platform according to claim 1, characterized in that: The container management module (10) comprises a gateway image (14), a registration image (15), a platform UI image (16) and a platform service image (17), wherein the platform service image (17) establishes a communication connection with the sharing platform (2); The gateway mirror (14) is used to receive the service request of the sharing platform (2) and transmit it to other mirrors; The platform service image (17) establishes communication connections with the gateway image (14), the registration image (15) and the platform UI image (16).

5. The container image sharing platform according to claim 4, characterized in that: The platform service image (17) includes: Authentication service image (701), used to authenticate user information; Management service image (702), used to manage and store user information; The monitoring service image (703) is used to check and monitor the user's information.

6. A container image sharing platform according to claim 4, characterized in that: The gateway image (14), the registration image (15), the platform UI image (16) and the platform service image (17) are all run in a Docker container; the repository (402) is used to store data information of the sharing platform (2).

7. The container image sharing platform according to claim 1, characterized in that: The security module (9) further comprises: a shared information monitoring unit; The shared information monitoring unit performs the following operations: Establishing a problem user information pool, the problem user information pool is used to store first user information of users whose uploaded shared information has problems, the problem user information pool is initially empty, and the first user information in the problem user information pool is all set with a counting mark; When there is shared information uploaded to the sharing platform (2), first user information of the user who uploaded the shared information is obtained, and whether the user is a problematic user is determined based on the problematic user information pool; the first user information includes user registration information and user device information; The user registration information includes the user's registered name, mobile phone number and email address; The user device information includes the MAC address and IP address of the device used by the user to share the shared information; If the first user information exists in the problem user information pool, the user is determined to be a problem user, a count mark is added to the first user information in the problem user information pool, and a problem level of the counted first user information is obtained; Marking the shared information accordingly according to the problem level of the first user information, and placing the marked shared information into the sharing platform (2); The problem levels include yellow minor level, red severe level and black blacklist level; The method for determining the problem level is to determine according to the counting mark of the first user information, specifically including: If the number of count marks of any first user information is greater than or equal to the preset yellow minor number and less than the preset red severe number, the problem level of the first user information of the user is marked as yellow minor level; If the number of count marks of any first user information is greater than or equal to the preset red serious number and less than the preset black blacklist number, the problem level of the first user information of the user is marked as red serious level; If the number of count marks of any first user information is greater than or equal to the preset blacklisting number, the problem level of the first user information of the user is marked as the blacklisting level; If the first user information does not exist in the problematic user information pool, it is determined that the user is not a problematic user, and whether the shared information is a malicious image; If the shared information is a malicious image, it is determined that there is a problem with the shared information, the first user information of the user is stored in the problematic user information pool, and the shared information is marked with a yellow minor level and then placed on the sharing platform (2); If the shared information is not a malicious image, it is determined that there is no problem with the shared information, and the shared information is allowed to enter the sharing platform (2); If the user device information of the user who uploaded the shared information cannot be obtained, the user registration information of the user is directly stored in the problem user information pool. If the user registration information exists in the problem user information pool, a count mark is added to the user registration information to obtain the problem level of the user registration information after the count mark. The shared information is marked accordingly according to the problem level of the user registration information, and the marked shared information is placed on the sharing platform (2).

8. A method for constructing a container image sharing platform, characterized in that: Based on a container image sharing platform as described in any one of claims 1 to 7, the following steps are implemented: Step 1: The user registers and logs in through the registration unit (801) on the communication module (8); Step 2: After registration, search through the search module (6) as needed, and obtain the initial container image from the classification module (7); Step 3: The user performs communication analysis through the communication module (8), writes the required container image to the sharing platform (2), and protects the sharing platform (2) through the security module (9); Step 4: The memory module (12) and the calculation module (13) on the sharing platform (2) calculate and count the user's search content and downloaded content, and submit them to the device platform (1), completing the sharing of the platform; The step 2 is specifically as follows: The user obtains the corresponding image from the Docker container, and the platform service image (17) authenticates, manages, verifies and monitors the user's information to ensure the security of the sharing platform (2).

Citation Information

Patent Citations

  • Container isolation enhancement system based on ARM TrustZone

    CN108733455A

  • Endangered animal name listsharing platform based on block chain

    CN110990491A