Software asset full life cycle management system and method

Abstract

The invention discloses a software asset full lifecycle management and control system, comprising a rental platform, a mirror module, a virtual environment building module, a software asset pool, a feature extraction module, a feature comparison module, and an abnormal alarm module which are connected in sequence; further comprising an identity recognition module and a permission setting module connected to the rental platform, an operating system pool connected to the virtual environment building module, and a software update module connected to the software asset pool; the rental platform is respectively connected to the feature extraction module and the feature comparison module; the feature extraction module is used to extract feature information of software assets, and the virtual environment building module constructs a virtual machine according to the operating system model and required software on the user side; the scheme manages and controls the entire lifecycle of software archiving, updating, rental, and use, effectively ensures the integrity and reliability of software data, verifies and manages user behavior, and effectively improves the efficiency of software management and control.

Description

Technical Field

[0001] The present invention relates to the technical field of data management, and in particular to a software asset full lifecycle management and control system and method. Background Art

[0002] Software assets are the core support platform for information services. Their changes and tampering are not easy to be discovered intuitively, and they cause huge technical and security risks to the operation of the system. At the same time, the unauthorized installation and operation of software assets involve legal risks for enterprises. At present, the verification of software assets mainly relies on manual means, which is time-sensitive and inefficient, and cannot meet the management requirements of large enterprises with a large number of IT equipment.

[0003] Software asset management based on the Windows platform, on the one hand, the Windows system platform provides a relatively complete graphical management interface, and the corresponding antivirus security software also provides a scanning mechanism for some abnormal software changes; but for the server system of the Lunix platform, software asset monitoring and management is more difficult, requiring the professional skills of professionals, and there is currently no good technical support. Most monitoring systems only provide monitoring methods for hardware resources, performance, bandwidth, ports, processes, services, etc., and there are still large monitoring loopholes for software assets and changes installed on the server. There is a lack of authority control and supervision for the rental or use of software. Whether the software obtained by the user is complete and reliable greatly increases the risk of software operation and brings great difficulties to the management of software assets. Summary of the invention

[0004] The purpose of the present invention is to propose a software asset full life cycle management system and method to manage the entire life cycle of software archiving, updating, leasing and use, effectively ensure the integrity and reliability of software data, verify and control user behavior, and effectively improve the efficiency of software management.

[0005] To achieve the above technical purpose, the present invention provides a technical solution, which is a software asset full life chain management and control system, including a rental platform, a mirror module, a virtual environment building module, a software asset pool, an operating system pool, a software update module, a feature extraction module, a feature comparison module, an abnormal alarm module, an identity recognition module and a permission setting module;

[0006] The rental platform is electrically connected to the identity recognition module, the authority setting module, the mirror module, the alarm module, the feature comparison module and the feature extraction module respectively, and is used to interact with the user side; the rental platform can be a client terminal application or a web page without a client, and the user can install the client on the user terminal or access the client platform through a browser, and its identity information can be collected through an identity collector (such as identity card recognition, account password login or voiceprint recognition to collect and input identity information);

[0007] The mirror module is used to obtain the virtual mirror of the software and operating system, and is electrically connected to the virtual environment building module;

[0008] The virtual environment building module builds a virtual machine according to the operating system model and required software on the user side, and is electrically connected to the operating system pool and the software asset pool respectively;

[0009] The operating system pool stores a variety of operating system image packages and is electrically connected to the virtual environment building module;

[0010] The software asset pool stores multiple sets of enterprise software image packages, which are electrically connected to the virtual environment building module;

[0011] The software update module serves as an input verification interface of the software asset pool and is used for replacement, addition and deletion of software assets in the software asset pool;

[0012] The feature extraction module is used to extract feature information of software assets and is electrically connected to the feature comparison module;

[0013] The feature comparison module is used to compare feature information of software assets, identify whether the software is abnormal, and is electrically connected to the virtual environment building module;

[0014] The abnormal alarm module is used for early warning and analysis of abnormal prompt information in the feature comparison module and is electrically connected to the feature comparison module.

[0015] Preferably, the identity recognition module includes at least one of identity verification, biometric fingerprint recognition or voiceprint recognition representing user identity information.

[0016] Preferably, the characteristic information of the software asset includes software name, version number, architecture type number, software fingerprint information and summary information.

[0017] Preferably, the software fingerprint information is the unique identity information assigned by the feature comparison module when the software first accesses the software asset pool, the unique identity information corresponds to the physical address code of the storage unit in the feature comparison module, and the permission setting module configures permission information for the software fingerprint information according to the corresponding user permissions in the identity recognition module.

[0018] In this solution, the physical address code in the storage unit corresponds to the physical storage bit information. Once determined, the physical address cannot be changed and can only store the characteristic information of the corresponding software. Therefore, the permission setting module establishes a mapping relationship with the physical storage bit of the storage unit, and can retrieve the software characteristic information on the corresponding storage bit at any time, which is equivalent to adding a permission label to the physical address bit, and the size of the permission is determined according to the user attributes.

[0019] Preferably, after the software package is flattened, its summary information is extracted as the basis for its integrity verification; a signature code is generated by a feature comparison module according to the time information of the initial entry of the software, and the summary information is signed by the signature code; and the signature information is backed up to the rental platform.

[0020] In this solution, the time stamp when the software is first archived to the software asset pool is fixed and unique. The time stamp is used as the software signature information to verify the reliability of the software source. At the same time, if the software is updated, its signature information will change immediately, but its physical address code will not change. The software summary information contains the plug-ins or entries that are necessary for the safe and reliable operation of the corresponding software. If any of them are missing, it means that the software is unsafe.

[0021] The software asset full lifecycle management and control method includes the following steps:

[0022] S1. The user authenticates his / her identity through the rental platform. If the identity authentication is passed, the user proceeds to step S2. If the authentication fails, a warning message pops up.

[0023] S2. Enter keywords representing software feature information through the search box. At the same time, the mirror module establishes a connection with the user terminal to obtain the operating environment version information of the user terminal and the software to be obtained;

[0024] S3, the feature extraction module obtains the feature information of the corresponding software and verifies the feature information through the feature comparison module; if the verification is successful, execute S4; if the verification is unsuccessful, execute S6;

[0025] S4, the virtual environment building module establishes connections with the software asset pool and the operating system pool respectively, obtains the corresponding operating environment version information and software information, and establishes a mirrored virtual operating environment;

[0026] S5. The user terminal obtains the image virtual operating environment through the image module and obtains the use authority of the corresponding software through the authority setting module, so that the user terminal runs the corresponding software program according to the user authority;

[0027] S6. The abnormal alarm module generates an abnormal log based on the abnormal comparison information generated in the feature comparison module and sends it to the rental platform to warn users of rental risks.

[0028] In S3, the feature comparison module verifies the feature information including the following steps:

[0029] S31, the feature extraction module obtains the corresponding software package in the software asset pool and extracts the feature information of the software package; the feature information includes the software name, version number, architecture type number, software fingerprint information and summary information;

[0030] S32, the rental platform sends the signature information of the software to the feature extraction module, and sends the signature information to the feature comparison module after signing it;

[0031] S32. The feature comparison module finds the corresponding physical address code according to the software fingerprint information, obtains the feature information of the storage unit, and verifies the summary information and signature information of the software respectively. If the verification is successful, it means that the software information is complete or the source is reliable; if the verification is unsuccessful, it means that the software information is missing or the source is unreliable.

[0032] The beneficial effects of the present invention are as follows: the present invention proposes a software asset full lifecycle management and control system and method, which exchanges information with the user end through the rental platform, verifies the user's identity and constrains the use behavior through the identity recognition module and the permission setting module, and facilitates the rental platform to manage the software rental behavior; mirrors with the user end through the mirror module, builds a virtual operating environment on the rental end, prevents the software from leaking, and avoids the loss of software assets without affecting the user experience; verifies the integrity and reliability of the rented software through the extraction and comparison of the feature information of the software package, and further ensures the safety of the software operation; therefore, the beneficial effects of the present invention are summarized as follows: the whole lifecycle of software archiving, updating, renting and use is managed and controlled, effectively ensuring the integrity and reliability of software data, verifying and controlling user behavior, and effectively improving the efficiency of software management and control. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 It is a structural diagram of the software asset full lifecycle management and control system of the present invention.

[0034] Explanation of the marks in the figure: 1-rental platform, 2-image module, 3-virtual environment building module, 41-software asset pool, 42-operating system pool, 43-software update module, 51-feature extraction module, 52-feature comparison module, 53-abnormal alarm module, 11-identity recognition module, 12-authorization setting module. DETAILED DESCRIPTION

[0035] In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific implementation method described herein is only an optimal embodiment of the present invention, which is only used to explain the present invention and does not limit the scope of protection of the present invention. All other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0036] Example: Figure 1 The figure shows a schematic diagram of the structure of the software asset full life chain management and control system, which is composed of a rental platform 1, a mirror module 2, a virtual environment building module 3, a software asset pool 41, an operating system pool 42, a software update module 43, a feature extraction module 451, a feature comparison module 52, an abnormal alarm module 53, an identity recognition module 11 and a permission setting module 12; wherein the rental platform is electrically connected to the identity recognition module, the permission setting module, the mirror module, the alarm module, the feature comparison module and the feature extraction module, respectively, for information interaction with the user side; the mirror module is used to obtain a virtual mirror of the software and the operating system, and is electrically connected to the virtual environment building module;

[0037] The virtual environment building module builds a virtual machine according to the operating system model and required software on the user side, and is electrically connected to the operating system pool and the software asset pool respectively;

[0038] The operating system pool stores a variety of operating system image packages and is electrically connected to the virtual environment building module;

[0039] The software asset pool stores multiple sets of enterprise software image packages, which are electrically connected to the virtual environment building module;

[0040] The software update module serves as an input verification interface of the software asset pool and is used for replacement, addition and deletion of software assets in the software asset pool;

[0041] The feature extraction module is used to extract feature information of software assets and is electrically connected to the feature comparison module;

[0042] The feature comparison module is used to compare feature information of software assets, identify whether the software is abnormal, and is electrically connected to the virtual environment building module;

[0043] The abnormal alarm module is used for early warning and analysis of abnormal prompt information in the feature comparison module and is electrically connected to the feature comparison module.

[0044] In this embodiment, the rental platform can be a client terminal application or a clientless web page. The user can install the client on the user terminal or access the client platform through a browser. The identity information can be collected through an identity collector (such as identity card recognition, account password login or voiceprint recognition to collect and input identity information); the rental platform interacts with the user terminal through information, and the identity of the user is verified and the usage behavior is restricted through the identity recognition module and the permission setting module, so that the rental platform can manage the software rental behavior; the mirroring module is used to mirror the user terminal, and a virtual operating environment is built on the rental terminal to prevent the software from leaking. Without affecting the user experience, the risk of loss of software assets is prevented; the integrity and reliability of the rented software are verified by extracting and comparing the feature information of the software package, and the security of the software operation is further guaranteed.

[0045] The identity recognition module includes at least one of identity verification, biometric fingerprint recognition or voiceprint recognition that represents user identity information.

[0046] The characteristic information of software assets includes software name, version number, architecture type number, software fingerprint information and summary information.

[0047] The software fingerprint information is the unique identity information assigned by the feature comparison module when the software first accesses the software asset pool. The unique identity information corresponds to the physical address code of the storage unit in the feature comparison module. The permission setting module configures permission information for the software fingerprint information according to the corresponding user permissions in the identity recognition module.

[0048] In this embodiment, the physical address code in the storage unit corresponds to the physical storage bit information. Once determined, the physical address cannot be changed and can only store the characteristic information of the corresponding software. Therefore, the permission setting module establishes a mapping relationship with the physical storage bit of the storage unit, and can retrieve the software characteristic information on the corresponding storage bit at any time, which is equivalent to adding a permission label to the physical address bit, and the size of the permission is determined according to the user attributes.

[0049] After the software package is flattened, its summary information is extracted as the basis for its integrity verification; the feature comparison module generates a signature code based on the time information of the first entry of the software, and signs the summary information with the signature code; and the signature information is backed up to the rental platform.

[0050] In this embodiment, the time stamp when the software is first archived to the software asset pool is fixed and unique. The time stamp is used as the software signature information to verify the reliability of the software source. At the same time, if the software is updated, its signature information will change immediately, but its physical address code will not change. The software summary information contains the plug-ins or entries that are necessary for the safe and reliable operation of the corresponding software. If any of them are missing, it indicates that the software is unsafe.

[0051] The software asset full lifecycle management and control method includes the following steps:

[0052] S1. The user authenticates his / her identity through the rental platform. If the identity authentication is passed, the user proceeds to step S2. If the authentication fails, a warning message pops up.

[0053] S2. Enter keywords representing software feature information through the search box. At the same time, the mirror module establishes a connection with the user terminal to obtain the operating environment version information of the user terminal and the software to be obtained;

[0054] S3, the feature extraction module obtains the feature information of the corresponding software and verifies the feature information through the feature comparison module; if the verification is successful, execute S4; if the verification is unsuccessful, execute S6;

[0055] S4, the virtual environment building module establishes connections with the software asset pool and the operating system pool respectively, obtains the corresponding operating environment version information and software information, and establishes a mirrored virtual operating environment;

[0056] S5. The user terminal obtains the image virtual operating environment through the image module and obtains the use authority of the corresponding software through the authority setting module, so that the user terminal runs the corresponding software program according to the user authority;

[0057] S6. The abnormal alarm module generates an abnormal log based on the abnormal comparison information generated in the feature comparison module and sends it to the rental platform to warn users of rental risks.

[0058] In S3, the feature comparison module verifies the feature information including the following steps:

[0059] S31, the feature extraction module obtains the corresponding software package in the software asset pool and extracts the feature information of the software package; the feature information includes the software name, version number, architecture type number, software fingerprint information and summary information;

[0060] S32, the rental platform sends the signature information of the software to the feature extraction module, and sends the signature information to the feature comparison module after signing it;

[0061] S32. The feature comparison module finds the corresponding physical address code according to the software fingerprint information, obtains the feature information of the storage unit, and verifies the summary information and signature information of the software respectively. If the verification is successful, it means that the software information is complete or the source is reliable; if the verification is unsuccessful, it means that the software information is missing or the source is unreliable.

[0062] The specific implementation described above is a preferred implementation of the software asset full life chain management system and method of the present invention, and is not intended to limit the specific implementation scope of the present invention. The scope of the present invention includes but is not limited to this specific implementation. All equivalent changes made in accordance with the shape and structure of the present invention are within the protection scope of the present invention.

Claims

1. Software asset full life cycle management system, It is characterized in that It includes a rental platform, an image module, a virtual environment building module, a software asset pool, an operating system pool, a software update module, a feature extraction module, a feature comparison module, an abnormal alarm module, an identity recognition module, and a permission setting module; The rental platform is electrically connected to the identity recognition module, the authority setting module, the mirror module, the alarm module, the authority setting module and the feature extraction module respectively, and is used to interact with the user side for information; The mirror module is used to obtain the virtual mirror of the software and operating system, and is electrically connected to the virtual environment building module; The virtual environment building module builds a virtual machine according to the operating system model and required software on the user side, and is electrically connected to the operating system pool and the software asset pool respectively; The operating system pool stores a variety of operating system image packages and is electrically connected to the virtual environment building module; The software asset pool stores multiple sets of enterprise software image packages, which are electrically connected to the virtual environment building module; The software update module serves as an input verification interface of the software asset pool and is used for replacement, addition and deletion of software assets in the software asset pool; The feature extraction module is used to extract feature information of software assets and is electrically connected to the feature comparison module; The feature comparison module is used to compare feature information of software assets, identify whether the software is abnormal, and is electrically connected to the virtual environment building module; The abnormal alarm module is used for early warning and analysis of abnormal prompt information in the feature comparison module and is electrically connected to the feature comparison module.

2. The software asset full lifecycle management and control system according to claim 1, It is characterized in that The identity recognition module includes at least one of identity verification, biometric fingerprint recognition or voiceprint recognition representing user identity information.

3. The software asset full lifecycle management and control system according to claim 1, It is characterized in that The characteristic information of the software asset includes software name, version number, architecture type number, software fingerprint information and summary information.

4. The software asset full lifecycle management and control system according to claim 3, It is characterized in that The software fingerprint information is the unique identity information assigned by the feature comparison module when the software first accesses the software asset pool. The unique identity information corresponds to the physical address code of the storage unit in the feature comparison module. The permission setting module configures permission information for the software fingerprint information according to the corresponding user permissions in the identity recognition module.

5. The software asset full lifecycle management and control system according to claim 3 or 4, It is characterized in that After the software package is flattened, its summary information is extracted as the basis for its integrity verification; the feature comparison module generates a signature code based on the time information of the first entry of the software, and signs the summary information with the signature code; and the signature information is backed up to the rental platform.

6. A software asset full lifecycle management and control method, applicable to the software asset full lifecycle management and control system according to any one of claims 1 to 5, It is characterized in that The steps include: S1. The user authenticates his / her identity through the rental platform. If the identity authentication is passed, the user proceeds to step S2. If the authentication fails, a warning message pops up. S2. Enter keywords representing software feature information through the search box. At the same time, the mirror module establishes a connection with the user terminal to obtain the operating environment version information of the user terminal and the software to be obtained; S3, the feature extraction module obtains the feature information of the corresponding software and verifies the feature information through the feature comparison module; if the verification is successful, execute S4; if the verification is unsuccessful, execute S6; S4, the virtual environment building module establishes connections with the software asset pool and the operating system pool respectively, obtains the corresponding operating environment version information and software information, and establishes a mirrored virtual operating environment; S5. The user terminal obtains the image virtual operating environment through the image module and obtains the use authority of the corresponding software through the authority setting module, so that the user terminal runs the corresponding software program according to the user authority; S6. The abnormal alarm module generates an abnormal log based on the abnormal comparison information generated in the feature comparison module and sends it to the rental platform to warn users of rental risks.

7. The software asset full lifecycle management method according to claim 6, It is characterized in that In S3, the feature comparison module verifies the feature information including the following steps: S31, the feature extraction module obtains the corresponding software package in the software asset pool and extracts the feature information of the software package; the feature information includes the software name, version number, architecture type number, software fingerprint information and summary information; S32, the rental platform sends the signature information of the software to the feature extraction module, and sends the signature information to the feature comparison module after signing it; S32. The feature comparison module finds the corresponding physical address code according to the software fingerprint information, obtains the feature information of the storage unit, and verifies the summary information and signature information of the software respectively. If the verification is successful, it means that the software information is complete or the source is reliable; if the verification is unsuccessful, it means that the software information is missing or the source is unreliable.

Images