A new operation and maintenance method for bastion host work orders

Abstract

The present invention discloses a new operation and maintenance method for bastion host work orders. According to the entered operation and maintenance tasks, work orders are created. For task management outside the bastion host system, after an administrator generates corresponding work orders for tasks in the bastion host, shareable content of the work orders is created, including operation and maintenance information, and a share is created using a jwt signed with the private key of the bastion host. The task system outside the bastion host can use the public key provided by the bastion host to verify the legitimacy of the jwt signature, integrate the agreed content into its own platform, present the operation and maintenance information after parsing, and generate an operation and maintenance jump link. When a user clicks on the operation and maintenance jump link, they return to the bastion host platform and trigger the corresponding work order for operation and maintenance. By associating work orders with task information and enabling work orders to be signed and shared to other platforms, the present invention effectively links tasks and operation and maintenance information both inside and outside the bastion host, improves work efficiency, and has good practicability.

Description

Technical Field

[0001] The present invention belongs to the technical field of bastion host operation and maintenance, and particularly relates to a new type of bastion host work order operation and maintenance method. Background Art

[0002] IT operation and maintenance is becoming increasingly important in the company's computer management activities. With the development of business, operation and maintenance tasks are becoming more diverse and refined. Relying solely on the manual division of tasks by managers has affected the actual operation and maintenance efficiency, resulting in an increase in management costs, a decrease in the efficiency of operation and maintenance operators, and the task cannot be closed in a timely manner. In the existing bastion host system, operation and maintenance personnel often receive operation and maintenance tasks and information from other channels, and then log in to the bastion host to create a work order by noting the relevant information as the work order content for computer operation and maintenance work. The existing work order operation and maintenance of the bastion host only occurs when the operation and maintenance personnel have obtained information and goals from other channels. If the user does not have permission and needs to initiate work order operation and maintenance, the following problems will occur:

[0003] 1. The acquisition of task information is from other channels, and the task information is disjointed from the operation and maintenance information, and the process is cumbersome;

[0004] 2. The operation and maintenance work order is initiated by the operation and maintenance personnel from bottom to top and is bound to specific personnel, which is not convenient for others to participate and cannot enable the operation and maintenance personnel to actively and flexibly handle tasks;

[0005] 3. It does not provide more help for administrators in task management, and only provides an approval function. Summary of the Invention

[0006] The purpose of the present invention is to provide a new type of bastion host work order operation and maintenance method. By creating a work order for operation and maintenance according to the operation and maintenance, the operation and maintenance of the work order is targeted and associated with the task information, and the corresponding operation and maintenance personnel are matched for the corresponding work order, effectively solving the problems of single and low-efficiency existing work order operation and maintenance, and having good practicability.

[0007] The present invention is mainly realized through the following technical solutions:

[0008] A new type of bastion host work order operation and maintenance method includes the following steps:

[0009] Step S100: Enter operation and maintenance tasks;

[0010] Step S200: Perform operation and maintenance by creating a work order based on the task; The administrator creates a work order according to the task and designates the operation and maintenance personnel for the operation, or sets the task preemption status as not designated for the operation and maintenance personnel. The operation and maintenance personnel can match and preempt the work order according to their own time and skills;

[0011] Step S300: Associating tasks with work orders: Inside the bastion host system, directly associate tasks with work orders. For task management outside the bastion host system, after an administrator generates a corresponding work order for a task in the bastion host, create shareable content for the work order, including operation and maintenance information, and create a share using a jwt signed with the private key of the bastion host. The task system outside the bastion host can use the public key provided by the bastion host to verify the legitimacy of the jwt signature, integrate the agreed content into its own platform, parse it to present operation and maintenance information, and generate an operation and maintenance jump link. When a user clicks the operation and maintenance jump link, they return to the bastion host platform and trigger the corresponding work order for operation and maintenance.

[0012] Operation and maintenance tasks are similar to task boards, and work orders are finally attached under tasks. An administrator can create work orders from top to bottom and assign personnel to operate, or not assign, allowing operation and maintenance personnel familiar with this part of the business to preempt these tasks, which is convenient for operation and maintenance personnel to be motivated and handle flexibly, reducing the possibility of the administrator becoming a bottleneck for piled-up tasks. Divide the work orders of the bastion host into two mutually associated objects: tasks and work orders. Work orders must be data existing in the bastion host because this is the final credential for operation and maintenance. Task management can use other platforms and make it easy to share by sharing the content after signing the work order content to other platforms. Tasks can be entered by an administrator after collecting information from various channels, or an agent provided by the bastion host can be used to automatically generate some tasks for specific channels. For example, for a service integrated with an agent, the log monitoring ability of the agent can be configured, or the api can be called to generate specific operation and maintenance tasks in the bastion host. The administrator decides whether human intervention is required to create a work order or directly close it after preprocessing the content in the task pool.

[0013] To better implement the present invention, further, the task entry in step S100 includes manual entry and automatic entry. In manual entry, the administrator manually enters information in the bastion host system according to the entry form of the operation and maintenance task. In automatic entry, the agent program provided by the bastion host monitors the log and is automatically called when the trigger condition is met.

[0014] To better implement the present invention, further, in manual entry, before entry, check whether there are similar tasks in the entry form according to keywords. The retrieval basis is to calculate and store the results of word segmentation of existing tasks using a text similarity algorithm to avoid duplicate entry. The text similarity algorithm is prior art and will not be elaborated here.

[0015] To better implement the present invention, further, in automatic entry, when the bastion host receives an automatic entry task, it automatically checks the task similarity. If the task similarity exceeds the set value, it is considered the same or similar task, and no duplicate creation is performed, but the trigger record is marked. If the task similarity does not reach the set value, the task is created, but the first N tasks with a certain similarity are associated.

[0016] To better implement the present invention, further, in step S200, before creating a work order, the administrator marks whether the operation and maintenance tasks in step S100 are valid. The operation and maintenance tasks marked as valid can create work orders to eliminate duplicate operation and maintenance tasks entered automatically.

[0017] The present invention adds operation and maintenance tasks in the bastion host, and work orders are created through operation and maintenance tasks, so that the operation and maintenance of a work order can be associated with task information. The introduction of operation and maintenance tasks also optimizes the process of creating work orders. Not only can the operation and maintenance personnel create work orders, but the administrator can also create work orders without specifying the operation and maintenance personnel according to tasks. The operation and maintenance personnel can preempt familiar work content and match their skills and time according to the actual operations and requirements of the work orders, which is more flexible and efficient. The bastion host can provide the function of automatically creating operation and maintenance tasks, which speeds up the efficiency of task creation. In addition, in order to speed up the processing efficiency of the administrator in the two input methods of task entry and automatic entry, text similarity calculation is introduced. Based on the processing methods and results of existing similar tasks, a judgment on the current task processing can be quickly made, and tasks entered in various ways can also be de-duplicated to a certain extent, avoiding the accumulation of a large number of duplicate or similar tasks and reducing the management burden of the administrator on some sudden tasks.

[0018] Advantages of the present invention:

[0019] (1) By creating work orders for operation and maintenance according to operation and maintenance, the present invention specifically associates the operation and maintenance of work orders with task information, and matches the associated operation and maintenance personnel for the corresponding work orders, effectively solving the problems of single operation and maintenance of existing work orders and low efficiency, and having good practicability.

[0020] (2) The administrator can create work orders from top to bottom and specify personnel to operate, or not specify, allowing the operation and maintenance personnel familiar with this part of the business to preempt this part of the tasks, which is convenient for the operation and maintenance personnel to exert their enthusiasm and handle flexibly, reducing the possibility of the administrator becoming a bottleneck for piled-up tasks. The task allocation method is no longer from top to bottom by the administrator, but the operation and maintenance personnel can preempt work orders: the efficiency and flexibility of handling problems are higher, and it has good practicability.

[0021] (3) Existing bastion host work orders only have system work order information, and the task content may only be briefly noted or not available at all, resulting in a disconnection between tasks and work order information. If the understanding of the initial tasks by operation and maintenance personnel and administrators is inconsistent, it may lead to unsatisfactory final results. Through the means of associating work orders and task information in the bastion host and allowing work orders to be signed and shared on other platforms, the present invention enables the association of tasks and operation and maintenance information both inside and outside the bastion host, effectively improving work efficiency and having good practicality.

[0022] (4) The present invention can reduce the pressure on administrators to collect tasks by automatically creating operation and maintenance tasks through agents, enabling them to focus more on task processing and management, and having good practicality. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 Schematic diagram for automatically entering operation and maintenance tasks;

[0024] Figure 2 Flow chart for similarity matching;

[0025] Figure 3 Principle block diagram of the present invention;

[0026] Figure 4 Schematic diagram for jwt private key signature sharing. DETAILED DESCRIPTION OF THE INVENTION

[0027] Embodiment 1:

[0028] A new type of bastion host work order operation and maintenance method, as Figure 3 shown, includes the following steps:

[0029] Step S100: Enter operation and maintenance tasks;

[0030] Step S200: Perform operation and maintenance by creating a work order through a task; the administrator creates a work order based on the task and designates the operation and maintenance personnel for the operation, or sets the task preemption status for unassigned operation and maintenance personnel. The operation and maintenance personnel can match and preempt the work order according to their own time and skills.

[0031] Step S300: Associate the task with the work order: For the internal bastion host system, directly associate the task with the work order; as Figure 4 shown, for task management outside the bastion host system, after the administrator generates a corresponding work order for the task in the bastion host, create shareable content for the work order, including operation and maintenance information, and create a share using jwt signed with the bastion host private key; the task system outside the bastion host can use the public key provided by the bastion host to verify the legality of the jwt signature, integrate the agreed content into its own platform, parse it to present the operation and maintenance information, and generate an operation and maintenance jump link; the user clicks the operation and maintenance jump link to return to the bastion host platform and trigger the corresponding work order for operation and maintenance.

[0032] Further, in step S200, before creating a work order, the administrator marks whether the operation and maintenance tasks in step S100 are valid. The operation and maintenance tasks marked as valid can create work orders to eliminate duplicate automatically entered operation and maintenance tasks.

[0033] The operation and maintenance tasks are similar to a task board. The work orders are finally hung under the tasks. The administrator can create work orders from top to bottom and assign personnel to operate, or can not assign, allowing the operation and maintenance personnel familiar with this part of the business to preempt these tasks, which is convenient for the operation and maintenance personnel to exert their enthusiasm and handle flexibly, reducing the possibility of the administrator becoming a bottleneck for piled-up tasks. The work orders of the bastion host are divided into two interrelated objects: tasks and work orders. The work orders must be data existing in the bastion host because this is the final credential for operation and maintenance. Task management can use other platforms, and it is easy to share by sharing the signed content of the work order content to other platforms; the tasks can be entered by the administrator after collecting information from various channels, or the agent provided by the bastion host can be used to automatically generate some tasks for specific channels. For example, for a service integrated with an agent, the log monitoring ability of the agent can be configured, or the API can be called to generate specific operation and maintenance tasks in the bastion host. The administrator decides whether human intervention is required to create a work order or directly close it after preprocessing the content in the task pool.

[0034] The existing bastion host work orders only have system work order information, and the task content may only be simply noted or not available, resulting in the disconnection between task and work order information. If the operation and maintenance personnel and the administrator have inconsistent understandings of the initial tasks, the final results may not be ideal. By associating work order and task information in the bastion host and the means that the work order can be signed and shared to other platforms, the present invention enables the association of tasks and operation and maintenance information both inside and outside the bastion host, effectively improving work efficiency and having good practicability.

[0035] Embodiment 2:

[0036] This embodiment is optimized on the basis of Embodiment 1. The task entry in step S100 includes manual entry and automatic entry. In manual entry, the administrator manually enters information in the bastion host system according to the entry form of the operation and maintenance tasks; as Figure 1 shown, in automatic entry, the agent program provided by the bastion host monitors the log and is automatically called when the trigger condition is reached.

[0037] Further, in manual entry, before entry, it is retrieved according to keywords whether there are similar tasks in the entry form. The retrieval basis is to calculate and store the results of word segmentation of existing tasks using a text similarity algorithm to avoid duplicate entry.

[0038] Text similarity algorithm: There will be a program in the background that regularly reads the titles and details of past tasks, performs word segmentation, and builds two LSI models corresponding to the titles and details (updating if there are existing model files); when the user enters a title or content, a request will be triggered to obtain similar task titles or content in the background. By performing word segmentation on the input content, a query vector is built, and through matching with the existing model and the query vector, a series of matching values and task IDs will be obtained. After sorting from high to low, the corresponding content is retrieved using the relevant task IDs and returned to the front-end for display. Here, the matching values greater than a certain value or the first N results can be displayed, and the matching results are presented to the front-end in a list. The user who is typing can see the relevant results and click to view the details.

[0039] Furthermore, as Figure 2 shown, in automatic entry, when the bastion host receives an automatic entry task, it automatically checks the task similarity. If the task similarity exceeds the set value, it is considered the same or similar task and will not be created repeatedly, but the trigger record is marked; if the task similarity does not reach the set value, the task is created, but the first N tasks with a certain similarity are associated.

[0040] Other parts of this embodiment are the same as those of Embodiment 1, so they will not be elaborated here.

[0041] Embodiment 3:

[0042] A new method for bastion host work order operation and maintenance, as Figure 3 shown, includes the following steps:

[0043] 1. Manual entry and automatic entry of operation and maintenance tasks (mainly emphasizing the function of automatic entry through integrated agent)

[0044] 1.1. Provide an entry form for creating a new operation and maintenance task, and the administrator manually enters the relevant information

[0045] 1.2. Before entry, it is possible to retrieve whether there are similar tasks according to keywords. The retrieval basis is to calculate and store the results of word segmentation of existing tasks using the text similarity algorithm; it is also possible to click on the item thinking check after entering the key content of the relevant task to avoid duplicate entry.

[0046] Text similarity algorithm: There will be a program in the background that regularly reads the titles and details of previous tasks, performs word segmentation, and builds two LSI models corresponding to the titles and details (updating if there are existing model files); when the user enters a title or content, a request will be triggered to obtain similar task titles or content from the background. By performing word segmentation on the input content, a query vector is built, and through matching with the existing models and the query vector, a series of matching values and task IDs will be obtained. After sorting from high to low, the corresponding content will be retrieved using the relevant task IDs and returned to the front-end for display. Here, the matching values greater than a certain value or the first N results can be displayed, and the matching results will be presented to the front-end in a list. The user who is typing can see the relevant results and click to view the details.

[0047] 1.3. As Figure 1 shown, for automatic entry, the agent program provided by the bastion host can be used to monitor logs or the interfaces of other service-integrated agents. When the trigger condition is met, it will be automatically called.

[0048] 1.4. As Figure 2 shown, when the bastion host receives an automatic entry task, it will automatically check the task similarity. If the task similarity exceeds the set value, it is considered the same or similar task, and no duplicate creation will occur, but the trigger record will be marked; if it does not reach the set value but there is a certain similarity, a task will be created, but the first N tasks with a certain similarity will be associated. The administrator can refer to this for preprocessing.

[0049] 2. Create work orders through tasks for operation and maintenance

[0050] 2.1. The administrator marks whether the task is valid. A task marked as valid can create a work order. This step is to eliminate duplicate automatic entry tasks.

[0051] 2.2. The administrator directly creates a work order and designates the operator for the operation.

[0052] 2.3. In another case, the administrator creates a work order but does not specify a specific person. The operator can view and preempt relevant tasks in the list of work orders that are pending but not assigned to specific persons according to their own time and skills. Unassigned work orders can be assigned to themselves by the operator. Only the administrator and the assigned person have the right to change the assigned work order. In the existing technology, the person has been assigned when creating a work order and cannot be changed, which is highly dependent on the administrator's scheduling of work orders and cannot flexibly utilize resources.

[0053] 3. The association relationship between tasks and work orders (mainly emphasizing that they can be associated with tasks outside the bastion host through the method of sharing signature information)

[0054] 3.1. Association can be directly carried out within the bastion host system; the concepts of tasks and work orders in the existing operation and maintenance system are coupled, which is not conducive to implementing the improvement method in this article. For example, if a work order is directly generated during automatic entry, it may lead to the abuse of work orders. Separating the concept of tasks is convenient for administrators to carry out management work, and work orders mainly bear the information required for final operation and maintenance.

[0055] 3.2. As Figure 4 shown, for task management outside the existing bastion host system, after an administrator generates a corresponding work order for a certain task in the bastion host, the administrator can create a sharable content format, and the content is a JWT that contains the main operation and maintenance information and is signed with the private key of the bastion host.

[0056] 3.3. The task system outside the bastion host can use the public key provided by the bastion host (corresponding to the above signature private key) to verify the legitimacy of the JWT signature, and integrate it into its own platform according to the content agreed upon by both parties (generally, the payload content is agreed upon by both parties). After parsing, the operation and maintenance information can be presented and an operation and maintenance jump link can be generated.

[0057] 3.4. When a user clicks on the operation and maintenance link to jump, they can return to the bastion host platform and trigger the corresponding work order operation and maintenance behavior (here, if the bastion host detects that the user is not logged in, it will require the user to log in).

[0058] Furthermore, a signed JWT (JSON Web Token) consists of three base64 strings separated by dots <Header>.<Payload>.<Signature Information>:

[0059] l Header

[0060] n alg, signature algorithm flag

[0061] n typ, token type

[0062] l Payload, the main body of the content carried, and the content can be agreed upon by the sender and the receiver. There are some recommended contents, such as: iss (issuer), exp (expiration time), sub (subject), iat (issuance time), and the work order information involved in this patent will be stored here

[0063] l Signature Information, which the receiver uses to verify whether the previous two content information received is correct

[0064] Header

[0065] {

[0066] "alg":"RS512",

[0067] "typ":"JWT"

[0068] }

[0069] Payload

[0070] {

[0071] "sub":"order",

[0072] "id":<Unique identifier of the work order in the bastion host>,

[0073] "name":"Work order - 20211210 - 1888", / / Work order name

[0074] "tid":<Unique identifier of the operation and maintenance target in the bastion host>,

[0075] "target":"10.10.1.88", / / Operation and maintenance target

[0076] "port":22, / / Operation and maintenance port

[0077] "protocol":"SSH", / / Operation and maintenance protocol

[0078] "username":"root", / / Operation and maintenance user

[0079] "user":"Zhang San", / / Bastion host user

[0080] "exp":1640848479, / / Expiration time

[0081] "iat":1516239022 / / Issuance time

[0082] }

[0083] Private key signature: Use the private key in a pair of public and private keys to sign the information. Rs512 is the selected asymmetric encryption algorithm (meeting the requirements of the asymmetric encryption algorithm here). The signed content is the header and payload information connected by dots and encoded by base64urlencode. This step is to enable the receiving party, after receiving the information, to use the public key to verify the signature based on the characteristics of asymmetric encryption signature verification, ensuring that the received content has not been tampered with or lost during transmission.

[0084] The generated Token after signature (Format: <Header>.<Payload>.<Signature>)

[0085] Public key signature verification: Use the public key in the public and private key pair, select the same algorithm as the signature, and verify the signature of the received content <Header>.<Payload> (recalculate the signature using the public key). If the signature calculated using the public key is equal to the signature carried in the Token, it indicates that the content is correct and is the content signed by the sharing party, and can be used directly.

[0086] The operation and maintenance tasks are similar to a task kanban. Work orders are finally attached under the tasks. Administrators can create work orders from top to bottom and assign personnel to operate, or they can choose not to assign, allowing the operation and maintenance personnel familiar with this part of the business to preempt these tasks, which facilitates the operation and maintenance personnel to give full play to their enthusiasm and handle them flexibly, reducing the possibility of the administrator becoming a bottleneck for piled-up tasks. The work orders of the bastion host are divided into two interrelated objects: tasks and work orders. Work orders must be data existing in the bastion host because this is the final credential for operation and maintenance. Task management can use other platforms. By sharing the signed content of the work order content to other platforms, it is easy to share; tasks can be entered by the administrator after collecting information from various channels, or the agent provided by the bastion host can be used to automatically generate some tasks for specific channels. For example, for services integrated with the agent, the log monitoring ability of the agent can be configured, or the API can be called to generate specific operation and maintenance tasks in the bastion host. The administrator decides whether human intervention is required to create a work order or directly close it after preprocessing the content in the task pool.

[0087] In the present invention, operation and maintenance tasks are added to the bastion host, and work orders are created through operation and maintenance tasks, so that the operation and maintenance and task information of a work order can be linked. The introduction of operation and maintenance tasks also optimizes the process of creating work orders. Not only can operation and maintenance personnel create work orders, but administrators can also create work orders without specifying operation and maintenance personnel based on tasks. The operation and maintenance personnel can preempt the familiar work content by themselves and can match their skills and time according to the actual operation and requirements of the work order, which is more flexible and efficient. The bastion host can provide the function of automatically creating operation and maintenance tasks, which speeds up the efficiency of task creation. In addition, in order to speed up the processing efficiency of managers in the two input methods of task entry and automatic entry, text similarity calculation is introduced. Based on the processing methods and results of existing similar tasks, a judgment on the current task processing can be quickly made, and tasks entered in various ways can also be deduplicated to a certain extent, avoiding the accumulation of a large number of duplicate or similar tasks and reducing the management burden of administrators for some sudden tasks.

[0088] Existing bastion host work orders only have system work order information, and the task content may only be simply noted or not available, resulting in the disconnection of task and work order information. If the operation and maintenance personnel and administrators have inconsistent understandings of the initial tasks, the final results may not be ideal. Through the means of associating work order and task information in the bastion host and allowing work orders to be signed and shared to other platforms, the present invention enables task and operation and maintenance information to be associated both inside and outside the bastion host, effectively improving work efficiency and having good practicality.

[0089] The above are only the preferred embodiments of the present invention, and do not impose any form of limitation on the present invention. Any simple modifications and equivalent changes made to the above embodiments based on the technical essence of the present invention all fall within the protection scope of the present invention.

Claims

1. A new method for operation and maintenance of bastion host work orders, characterized in that, It includes the following steps: Step S100: Enter the operation and maintenance tasks; Step S200: Perform operation and maintenance by creating work orders for tasks; The administrator creates a work order according to the task, designates the operator for the operation, or sets the task preemption status as the operator not designated. The operator can match and preempt the work order according to his own time and skills; Step S300: Associate the task with the work order: Inside the bastion host system, directly associate the task with the work order; For the task management outside the bastion host system, after the administrator generates the corresponding work order for the task in the bastion host, create the shareable content of the work order. The content includes operation and maintenance information, and create a share using the jwt signed with the private key of the bastion host; The task system outside the bastion host can use the public key provided by the bastion host to verify the legitimacy of the jwt signature, integrate the agreed content into its own platform, parse it to present the operation and maintenance information and generate an operation and maintenance jump link; The user clicks on the operation and maintenance jump link to return to the bastion host platform and trigger the corresponding work order for operation and maintenance; The format of the Token generated after signing is <Header>.<Payload>.<Signature>; In the task entry in the step S100, it includes manual entry and automatic entry. In the manual entry, the administrator manually enters information in the bastion host system according to the entry form of the operation and maintenance task; In the automatic entry, monitor the log through the agent program provided by the bastion host and automatically call it when the trigger condition is met; When the user enters a title or content, a request will be triggered to obtain similar task titles or content in the background. By segmenting the input content, a query vector is established, and it is matched with the existing model and the query vector to obtain a series of matching values and task IDs. After sorting from high to low, use the relevant task IDs to query the corresponding content and return it to the front end for display, so as to display the matching values greater than a certain value or the first N results. The matching results are displayed to the front end in a list. The user who is typing can see the relevant results and click to view the details.

2. The novel bastion host work order operation and maintenance method according to claim 1, wherein In the manual entry, before entry, retrieve whether there is a similar task in the entry form according to the keyword. The retrieval basis is to calculate and store the results of the word segmentation of the existing tasks using the text similarity algorithm to avoid duplicate entry.

3. A novel bastion host work order operation and maintenance method according to claim 1, characterized in that, In the automatic entry, when the bastion host receives the automatic entry task, it automatically checks the task similarity. If the task similarity exceeds the set value, it is considered to be the same or similar task and will not be created repeatedly, but the trigger record will be marked; If the task similarity does not reach the set value, the task will be created, but the first N tasks with a certain similarity will be associated.

4. A novel bastion host work order operation and maintenance method according to claim 1, characterized in that, In the step S200, before creating the work order, the administrator marks whether the operation and maintenance tasks in the step S100 are valid. The operation and maintenance tasks marked as valid can create work orders to remove duplicate operation and maintenance tasks entered automatically.

Images