A method and system for evaluating the service capability of secondary nodes in industrial Internet identity resolution
By evaluating in five dimensions of the secondary nodes of the industrial Internet identification and resolution, the problem of lack of effective evaluation methods in the existing technology is solved, the evaluation accuracy and maturity are improved, and the development of the industrial Internet industry ecosystem has been promoted.
Patent Information
- Application Number
- CN202210457263.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-04-27
- Publication Date
- 2024-12-13
- Estimated Expiration
- 2042-04-27
AI Technical Summary
The existing technology lacks an effective method for evaluating service capabilities of industrial Internet identification resolution nodes, which has led to the overall development of the identification resolution system, especially the service capabilities of secondary nodes have not been fully evaluated.
Provide an evaluation method and system for the secondary node service capabilities of industrial Internet identification and resolution. By scoring in five dimensions: business capability, operation capability, security capability, data application capability and service provision capability, generate evaluation scores, and follow presets Model computing service capability level.
Improve the accuracy and uniformity of the evaluation method, verify the feasibility and applicability of the node identification resolution capability, improve the maturity of the existing evaluation method, promote the popularization and implementation of the node identification resolution capability, and improve the industrial Internet industry Ecological system.
Smart Images

Figure CN114785710B_ABST
Abstract
Description
Technical Field
[0001] The present application belongs to the technical field of industrial Internet identification service capability assessment, and in particular, relates to an industrial Internet identification resolution secondary node service capability assessment method and system. Background Art
[0002] At present, my country's industrial Internet is developing in full swing, and has achieved initial results in infrastructure and platform construction. As an industry formed by the all-round and deep integration of new-generation information technology and manufacturing, the industrial Internet provides key technical support for the construction and upgrading of manufacturing and industrial digitalization, networking, and intelligence. At the same time, it has also spawned new models and new formats such as networked collaboration, personalized customization, and service-oriented manufacturing. The development of the industrial Internet will further promote the transformation and upgrading of traditional kinetic energy and the cultivation and growth of new kinetic energy, and help my country's high-quality development.
[0003] The development of the industrial Internet is inseparable from the industrial Internet identification resolution system. Similar to the domain name resolution system in the Internet field, the industrial Internet identification resolution system is the nerve hub supporting the interconnection and interoperability of the industrial Internet. my country's industrial Internet identification resolution system consists of five types of nodes: international root nodes, national top-level nodes, secondary nodes, enterprise nodes, and public recursive resolution nodes. The service capabilities of the industrial Internet identification resolution nodes will directly affect the construction of the industrial Internet identification resolution system, and thus affect the development of the industrial Internet.
[0004] However, there is still a lack of evaluation methods for the service capabilities of relevant industrial Internet identity resolution nodes. The service capabilities of various identity resolution nodes vary, and some have even been launched without special evaluation and assessment, which seriously affects the overall development of the industrial Internet identity resolution system. In particular, the secondary nodes of the industrial Internet identity resolution should provide identity coding registration and identity resolution services for industries or regions, and play a connecting role in the entire industrial Internet resolution process. It is the entrance to data and information resources in all aspects of the industry chain and value chain. Therefore, the evaluation of the service capabilities of the secondary nodes is particularly important. Summary of the invention
[0005] In view of this, the present application provides an evaluation method and system for the service capabilities of the secondary nodes of the industrial Internet identity resolution, so as to improve the accuracy and applicability of the evaluation method.
[0006] The specific technical solutions of this application are as follows:
[0007] This application provides a method for evaluating the service capability of a secondary node of an industrial Internet identity resolution, comprising the following steps:
[0008] Obtain the secondary node information of the Industrial Internet identity resolution from the service provider;
[0009] By analyzing the secondary node information of the industrial Internet identity resolution, scoring is performed in five dimensions: business capability, operation capability, security capability, data application capability, and service provision capability to generate an evaluation score;
[0010] Five evaluation scores are collected and analyzed according to the preset model to calculate the service provider's identity resolution secondary node service capability level.
[0011] Furthermore, the business capabilities are scored as follows:
[0012] Retrieve the relevant interface information of the secondary node of the industrial Internet identity resolution;
[0013] Generate the docking information, support information and encoding protocol information of the relevant interface according to the return value of the relevant interface information and data;
[0014] Determine whether the docking information, support information and encoding protocol information are within the preset values, and count the information within the preset values to generate a detection result.
[0015] Furthermore, the business capabilities are scored as follows:
[0016] Collect the test results, and introduce different weight coefficients to the quantity values of docking information, support information and coding protocol in the test results;
[0017] The quantitative values after introducing different weight coefficients are added in sequence to generate a business capability assessment score.
[0018] Furthermore, the operational capabilities are scored as follows:
[0019] Obtain the relevant interface information of the secondary node of the industrial Internet identity resolution, and obtain the dynamic operation data of the node through the interface information;
[0020] The dynamic operation data is compared with the operation capability level table to generate a first comparison result, and an operation capability assessment score is generated based on the first comparison result.
[0021] Furthermore, the security capabilities are scored as follows:
[0022] Identify the device information connected to the Industrial Internet identity resolution system;
[0023] Scan the process data in the secondary node server to detect attack behavior information, intrusion behavior information and illegal deployment behavior information of the internal network in the process data;
[0024] Abnormal device information, attack behavior information, intrusion behavior information and illegal deployment behavior information are marked to generate security monitoring data.
[0025] Furthermore, the data application capabilities are scored as follows:
[0026] Create a test database in the secondary node database and test the database storage performance based on the amount of data and data level parameters in the parsed database;
[0027] Get the data return value from the database and generate a data storage evaluation score.
[0028] Furthermore, the scoring of data application capabilities also includes:
[0029] Test the database data management performance by analyzing the data interface parameters, response time and delay time in the database;
[0030] Get the data return value from the database and generate a data management evaluation score.
[0031] Furthermore, the service provision capability is scored as follows:
[0032] Test the registration performance, query performance, parsing performance, and data management of secondary node identifiers;
[0033] Get the data return value and generate a service capability evaluation score based on the return value.
[0034] Furthermore, five evaluation scores are collected and analyzed according to the preset model:
[0035] Get the evaluation score of each dimension and the weight value of the corresponding dimension;
[0036] Design a preset model based on the evaluation scores and weight values to perform weighted summation and calculate the total score;
[0037] The total score is divided into thresholds to generate the final level of service capability of the secondary node of the identity resolution.
[0038] The present application also provides an evaluation system for the service capability of a secondary node of an industrial Internet identity resolution, including a business capability evaluation module, an operation capability evaluation module, a security capability evaluation module, a data application capability evaluation module, a service provision capability evaluation module, and a score module;
[0039] The business capability assessment module, operational capability assessment module, security capability assessment module, data application capability assessment module and service provision capability assessment module are used to obtain the secondary node information of the industrial Internet identity resolution from the service provider, and to parse the secondary node information of the industrial Internet identity resolution, and score the five dimensions of business capability, operational capability, security capability, data application capability and service provision capability to generate an assessment score;
[0040] The score module is used to collect five evaluation scores and analyze them according to the preset model to calculate the service provider's identity resolution secondary node service capability level.
[0041] In summary, this application provides an evaluation method and system for the service capability of the secondary node of industrial Internet identity resolution. This application generates the final evaluation score and rating through weighted calculation based on business capability, operation capability, security capability, data application capability and service provision capability, so as to realize the evaluation of the service capability of the secondary node of industrial Internet identity resolution. It can not only verify the feasibility and applicability of the identity resolution capability of the industrial Internet node, and be used to evaluate the maturity level of the service capability of the secondary node of industrial Internet identity resolution, but also improve the accuracy of the existing evaluation methods, unify the evaluation caliber, provide reference for the evaluation of relevant identity resolution service capabilities, and promote the effective popularization and implementation of node identity resolution capabilities. This application is of great significance for improving the industrial Internet industry ecosystem and integrating advantageous industry resources. BRIEF DESCRIPTION OF THE DRAWINGS
[0042] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0043] Figure 1 A flowchart of a method for evaluating the service capability of a secondary node of industrial Internet identity resolution is provided for this application;
[0044] Figure 2 A block diagram of a system for evaluating the service capabilities of a secondary node in industrial Internet identity resolution is provided for this application. DETAILED DESCRIPTION
[0045] In order to make the purpose, features, and advantages of this application more obvious and easy to understand, the technical solutions in the embodiments of this application are clearly and completely described. Obviously, the embodiments described below are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0046] Please refer to Figure 1 , Figure 1 The present invention provides a flowchart of a method for evaluating the service capabilities of a secondary node of industrial Internet identity resolution.
[0047] The present application embodiment provides a method for evaluating the service capability of a secondary node of an industrial Internet identity resolution, comprising the following steps:
[0048] S102: Obtaining the secondary node information of the industrial Internet identity resolution from the service provider;
[0049] S104: By parsing the secondary node information of the industrial Internet identity resolution, scoring is performed in five dimensions: business capability, operation capability, security capability, data application capability, and service provision capability to generate an evaluation score;
[0050] S106: Collect five evaluation scores and analyze them according to a preset model to calculate the service capability level of the service provider's identity resolution secondary node.
[0051] It should be noted that the secondary node information may include interface information, device information, server information, database information, and identification information. By parsing the secondary node information and comparing it with the preset corresponding parameters, the comparison data is sorted and summarized, and the scoring results of the five dimensions are output respectively. The scoring results of the five dimensions are then calculated and output as a total score according to the preset model, and the level of the service capability of the secondary node of the identity resolution is determined according to the threshold division of the total score.
[0052] According to the embodiment of the present application, the business capability is scored specifically as follows:
[0053] Retrieve the relevant interface information of the secondary node of the industrial Internet identity resolution;
[0054] Generate the docking information, support information and encoding protocol information of the relevant interface according to the return value of the relevant interface information and data;
[0055] Determine whether the docking information, support information and encoding protocol information are within the preset values, and count the information within the preset values to generate a detection result.
[0056] It should be noted that business capability is the basic service capability provided by the secondary node system through the interface or background. The docking information can reflect the docking status and quantity with other nodes of the identity resolution, the support information can reflect the type and quantity of one or more technical solutions such as Handle, Ecode, OID, GS1, VAA, etc., and the coding protocol can reflect the status and quantity of compliance with the industrial Internet identification coding specification series standards. The preset value can be obtained based on common sense information in the industry. By testing and verifying the above business capability indicators, such as the number of supported information, it is detected whether the business capability has achieved the expected functions and normal operation, and then the business capability assessment score is obtained based on the score of each business realization capability indicator.
[0057] According to the embodiment of the present application, the business capability is scored specifically as follows:
[0058] Collect the test results, and introduce different weight coefficients to the quantity values of docking information, support information and coding protocol in the test results;
[0059] The quantitative values after introducing different weight coefficients are added in sequence to generate a business capability assessment score.
[0060] It should be noted that after the business test is completed, the indicators can be scored according to the test results based on the needs of different scenarios, and different weight values can be introduced for each indicator to calculate the final business capability evaluation score. For example, when there are special evaluation requirements for the universality of the secondary node identification, the weight coefficients of the support information and docking information can be automatically increased; when there are special evaluation requirements for the standardization of the secondary node identification, the weight coefficient of the encoding protocol can be automatically increased.
[0061] According to the embodiment of the present application, the scoring of operational capability is specifically as follows:
[0062] Obtain the relevant interface information of the secondary node of the industrial Internet identity resolution, and obtain the dynamic operation data of the node through the interface information;
[0063] The dynamic operation data is compared with the operation capability level table to generate a first comparison result, and an operation capability assessment score is generated based on the first comparison result.
[0064] It should be noted that operational capability refers to the ability of the secondary node to maintain the normal operation of the system. Dynamic operational data includes the number of secondary node identification registration and resolution, the number of registered enterprise nodes, node log records, operating status and security status information reporting time, and related service catalogs. The operational capability rating table can be obtained by integrating the general information of the industry. The first comparison result is generated by reading, summarizing, and comparing the above operational indicator data of the secondary node, such as the coverage of registration information. The final operational capability evaluation score is then calculated based on the first comparison result and the weight value of each indicator. Among them, the weight value can be set according to the needs of different scenarios.
[0065] According to the embodiment of the present application, the security capability is scored specifically as follows:
[0066] Identify the device information connected to the Industrial Internet identity resolution system;
[0067] Scan the process data in the secondary node server to detect attack behavior information, intrusion behavior information and illegal deployment behavior information of the internal network in the process data;
[0068] Abnormal device information, attack behavior information, intrusion behavior information and illegal deployment behavior information are marked to generate security monitoring data.
[0069] It should be noted that security capabilities mainly evaluate the functional safety and physical security capabilities of nodes. Through device information and process data, a deep security scan is performed on the secondary node server, the operation of network equipment and network traffic user behavior are monitored, potential node vulnerabilities are detected, and node misconfigurations are discovered. Among them, abnormal behavior is discovered by identifying tampered, shielded, and illegal data in process data, and marking the location and event node. Then, based on the score of each security capability indicator, such as the number of attacks and intrusions, the security capability assessment score is obtained. After the security assessment test is completed, the final security capability assessment score is calculated based on the results of the security assessment test and the weight value of each indicator.
[0070] According to the embodiment of the present application, the data application capability is scored as follows:
[0071] Create a test database in the secondary node database and test the database storage performance based on the amount of data and data level parameters in the parsed database;
[0072] Get the data return value from the database and generate a data storage evaluation score.
[0073] It should be noted that data application capability refers to the node's ability to store and manage massive data resources. During the evaluation, the database performance of the secondary node server is tested first, and the data application capability evaluation score is obtained based on the database storage performance. After the data detection is completed, the final data application capability evaluation score will be calculated based on the test results and the weight value of each indicator.
[0074] According to the embodiment of the present application, scoring the data application capability also includes:
[0075] Test the database data management performance by analyzing the data interface parameters, response time and delay time in the database;
[0076] Get the data return value from the database and generate a data management evaluation score.
[0077] It should be noted that the interface performance of the secondary node server and the response performance of the data interface are tested, and the data application capability evaluation score is obtained based on the data management performance of the database. The database storage performance and data management performance can be combined and then the weight value can be introduced to generate the final data application capability evaluation score. The weight value can be set according to the nature of the service provider. For example, the weight value of the data storage evaluation score can be appropriately increased for service providers with a large user service base.
[0078] According to the embodiment of the present application, the scoring of service provision capability is specifically as follows:
[0079] Test the registration performance, query performance, parsing performance, and data management of secondary node identifiers;
[0080] Get the data return value and generate a service capability evaluation score based on the return value.
[0081] It should be noted that service provision capability refers to the service provision capability of the node for identity resolution. The service capability is determined by testing the input information, output information, time-consuming information, error information, and the return value of the identification type and quantity of the secondary node identification, such as the integrity of the output information, the time-consuming time, and the frequency of error information. The service provision capability evaluation score is obtained based on the score of each service provision capability indicator, and then the weight value of each indicator is introduced according to the service performance test results to calculate the final data application capability evaluation score.
[0082] According to the embodiment of the present application, five evaluation scores are collected and analyzed according to the preset model as follows:
[0083] Get the evaluation score of each dimension and the weight value of the corresponding dimension;
[0084] Design a preset model based on the evaluation scores and weight values to perform weighted summation and calculate the total score;
[0085] The total score is divided into thresholds to generate the final level of service capability of the secondary node of the identity resolution.
[0086] It should be noted that the scores are transmitted and summarized, and the final level of the service capability of the secondary node of the identity resolution is calculated according to the corresponding algorithm. The preset model can be expressed as:
[0087]
[0088] Among them, the weight value of each sub-item can be set according to the nature of the service provider and the special needs of service evaluation. For example, when filtering the service reliability of the secondary node of identity resolution, the weight value of the security capability evaluation score is increased; when filtering the service efficiency of the secondary node of identity resolution, the weight value of the operation capability evaluation score and the data application capability evaluation score is increased; when filtering the service quality and popularity of the secondary node of identity resolution, the weight value of the business capability evaluation score and the service provision capability evaluation score is increased. In the absence of special needs, the weight value of each sub-item is balanced by default to obtain more accurate evaluation data.
[0089] After getting the final score, the final level can be determined according to the score. For example, each score corresponds to a level, 60 to 69 points for the first level (initial level), 70 to 79 points for the second level (managed level), 80 to 89 points for the third level (robust level), 90 to 94 points for the fourth level (quantitative management level), 95 to 100 points for the fifth level (optimization level).
[0090] In another embodiment of the present application, scoring the operational capability further includes:
[0091] Obtain static data from the service provider and collect static operational data through static data;
[0092] The static operation data is compared with the operation capability registration form to generate a second comparison result, and is summarized with the first comparison result to generate an operation capability assessment score.
[0093] It should be noted that static data can be derived from service provider information circulated on various network platforms, such as registration information, review information, public information, etc. The static operational data collected from them includes business data, financial data, credit data, personnel data, and R&D data. These static operational data are compared with the registered service provider data of the same type to produce a second comparison result. Then, the ratio coefficient of the first and second comparison results is set to comprehensively evaluate the operational capabilities. For example, the ratio of the first comparison result can be set to 60%.
[0094] In another embodiment of the present application, scoring the security capability further includes:
[0095] Identify security monitoring data according to data type and format, interpret abnormal behavior categories and issue warning messages of corresponding abnormal categories;
[0096] The security monitoring data is filtered according to the abnormal category and fed back to the service provider.
[0097] It should be noted that data with abnormal types and formats are identified through preset data types and format templates, and abnormal categories are defined and warnings are issued according to the location of the data or event nodes, so as to timely check risks. At the same time, data determined to be abnormal is selectively filtered according to the abnormal category and then data feedback is performed, so that security devices deployed at the system boundary can provide effective defense and prevention against port scanning and attack intrusion events. For example, when the abnormal type is determined to be an attack behavior, such data is directly intercepted and eliminated; if the abnormal type is determined to be a system error, such data is formatted and re-determined.
[0098] In another embodiment of the present application, scoring the service provision capability further includes:
[0099] Obtain static data from the service provider and collect service evaluation data through static data;
[0100] Service quality parameters and data connectivity parameters are generated based on the service evaluation data, and different weight coefficients are introduced to correct the service capability evaluation score.
[0101] It should be noted that the static data of the service provider can come from the user evaluation system of each network platform or user terminal. The service evaluation data includes product evaluation data, personnel evaluation data, organization evaluation data and supplier evaluation data. The service quality parameters are determined according to the evaluation scores of each item, and the data connectivity parameters are determined according to the sample size of each evaluation data. Then, by setting the weight coefficient of each evaluation indicator to affect the previously generated service capability evaluation score, the result can integrate the data of all parties, and the evaluation result is more accurate and objective.
[0102] Please refer to Figure 2 , Figure 2 A block diagram of a system for evaluating the service capabilities of a secondary node in industrial Internet identity resolution is provided for this application.
[0103] The embodiment of the present application also provides an evaluation system for the service capability of a secondary node of an industrial Internet identity resolution, including a business capability evaluation module, an operation capability evaluation module, a security capability evaluation module, a data application capability evaluation module, a service provision capability evaluation module, and a score module;
[0104] The business capability assessment module, operational capability assessment module, security capability assessment module, data application capability assessment module and service provision capability assessment module are used to obtain the secondary node information of the industrial Internet identity resolution from the service provider, and to parse the secondary node information of the industrial Internet identity resolution, and score the five dimensions of business capability, operational capability, security capability, data application capability and service provision capability to generate an assessment score;
[0105] The score module is used to collect five evaluation scores and analyze them according to the preset model to calculate the service provider's identity resolution secondary node service capability level.
[0106] According to the embodiment of the present application, the business capability evaluation module is specifically used for:
[0107] Retrieve the relevant interface information of the secondary node of the industrial Internet identity resolution;
[0108] Generate the docking information, support information and encoding protocol information of the relevant interface according to the return value of the relevant interface information and data;
[0109] Determine whether the docking information, support information and encoding protocol information are within the preset values, and count the information within the preset values to generate a detection result.
[0110] According to the embodiment of the present application, the business capability evaluation module is specifically used for:
[0111] Collect the test results, and introduce different weight coefficients to the quantity values of docking information, support information and coding protocol in the test results;
[0112] The quantitative values after introducing different weight coefficients are added in sequence to generate a business capability assessment score.
[0113] According to the embodiment of the present application, the operational capability assessment module is specifically used to:
[0114] Obtain the relevant interface information of the secondary node of the industrial Internet identity resolution, and obtain the dynamic operation data of the node through the interface information;
[0115] The dynamic operation data is compared with the operation capability level table to generate a first comparison result, and an operation capability assessment score is generated based on the first comparison result.
[0116] According to the embodiment of the present application, the security capability assessment module is specifically used to:
[0117] Identify the device information connected to the Industrial Internet identity resolution system;
[0118] Scan the process data in the secondary node server to detect attack behavior information, intrusion behavior information and illegal deployment behavior information of the internal network in the process data;
[0119] Abnormal device information, attack behavior information, intrusion behavior information and illegal deployment behavior information are marked to generate security monitoring data.
[0120] According to the embodiment of the present application, the data application capability evaluation module is specifically used for:
[0121] Create a test database in the secondary node database and test the database storage performance based on the amount of data and data level parameters in the parsed database;
[0122] Get the data return value from the database and generate a data storage evaluation score.
[0123] According to an embodiment of the present application, the data application capability evaluation module is also used to:
[0124] Test the database data management performance by analyzing the data interface parameters, response time and delay time in the database;
[0125] Get the data return value from the database and generate a data management evaluation score.
[0126] According to the embodiment of the present application, the service provision capability evaluation module is specifically used to:
[0127] Test the registration performance, query performance, parsing performance, and data management of secondary node identifiers;
[0128] Get the data return value and generate a service capability evaluation score based on the return value.
[0129] According to the embodiment of the present application, the score module is specifically used for:
[0130] Get the evaluation score of each dimension and the weight value of the corresponding dimension;
[0131] Design a preset model based on the evaluation scores and weight values to perform weighted summation and calculate the total score;
[0132] The total score is divided into thresholds to generate the final level of service capability of the secondary node of the identity resolution.
[0133] In another embodiment of the present application, the operational capability assessment module is further used to:
[0134] Obtain static data from the service provider and collect static operational data through static data;
[0135] The static operation data is compared with the operation capability registration form to generate a second comparison result, and is summarized with the first comparison result to generate an operation capability assessment score.
[0136] In another embodiment of the present application, the security capability assessment module is further used to:
[0137] Identify security monitoring data according to data type and format, interpret abnormal behavior categories and issue warning messages of corresponding abnormal categories;
[0138] The security monitoring data is filtered according to the abnormal category and fed back to the service provider.
[0139] In another embodiment of the present application, the service provision capability evaluation module further includes:
[0140] Obtain static data from the service provider and collect service evaluation data through static data;
[0141] Service quality parameters and data connectivity parameters are generated based on the service evaluation data, and different weight coefficients are introduced to correct the service capability evaluation score.
[0142] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.
[0143] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.
[0144] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.
[0145] Those skilled in the art can understand that: all or part of the steps of implementing the above method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above method embodiments; and the aforementioned storage medium includes: mobile storage devices, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), disks or optical disks, and other media that can store program codes.
[0146] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.
[0147] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.
Claims
1. A method for evaluating the service capability of a secondary node of industrial Internet identity resolution, characterized in that: The steps include: Obtain the secondary node information of the Industrial Internet identity resolution from the service provider; By analyzing the secondary node information of the industrial Internet identity resolution, scoring is performed in five dimensions: business capability, operation capability, security capability, data application capability, and service provision capability to generate an evaluation score; Collect five evaluation scores and analyze them according to the preset model to calculate the service provider's industrial Internet identity resolution secondary node service capability level; The specific scoring of business capabilities is as follows: Collect the test results, and introduce different weight coefficients to the quantity values of docking information, support information and coding protocol in the test results; The quantitative values after introducing different weight coefficients are added up in sequence to generate a business capability assessment score; The specific scoring of operational capabilities is as follows: Obtain the relevant interface information of the secondary node of the industrial Internet identity resolution, and obtain the dynamic operation data of the node through the interface information; Comparing the dynamic operation data with the operation capability rating table to generate a first comparison result, and generating an operation capability evaluation score according to the first comparison result; The specific scoring of safety capabilities is as follows: Identify the device information connected to the Industrial Internet identity resolution system; Scan the process data in the secondary node server to detect attack behavior information, intrusion behavior information and illegal deployment behavior information of the internal network in the process data; Mark abnormal device information, attack behavior information, intrusion behavior information, and illegal deployment behavior information to generate security monitoring data; According to the score of each safety capability indicator, a safety capability assessment score is obtained; After the safety assessment is completed, the final safety capability assessment score is calculated based on the results of the safety assessment and the weight value of each indicator; The data application ability is also scored in the following aspects: Test the database data management performance by analyzing the data interface parameters, response time and delay time in the database; Obtain data return values from the database and generate data management evaluation scores; The specific scoring of service provision capabilities is as follows: Test the registration performance, query performance, parsing performance, and data management of secondary node identifiers; Get the data return value and generate the service capability evaluation score according to the return value; Collect five evaluation scores and analyze them according to the preset model: Get the evaluation score of each dimension and the weight value of the corresponding dimension; Calculate the total score by performing weighted summation based on the evaluation scores and weight values according to the preset model; The total score is divided into thresholds to generate the final level of service capability of the secondary node of the identity resolution; Among them, the preset model can be expressed as: ; The safety capabilities are also scored: Identify security monitoring data according to data type and format, interpret abnormal behavior categories and issue warning messages of corresponding abnormal categories; The security monitoring data is filtered according to the abnormal category and fed back to the service provider.
2. The method for evaluating the service capability of the secondary node of the industrial Internet identity resolution according to claim 1 is characterized in that: The specific scoring of business capabilities is as follows: Retrieve the relevant interface information of the secondary node of the industrial Internet identity resolution; Generate the docking information, support information and encoding protocol information of the relevant interface according to the return value of the relevant interface information and data; Determine whether the docking information, support information and encoding protocol information are within the preset values, and count the information within the preset values to generate a detection result.
3. The method for evaluating the service capability of the secondary node of the industrial Internet identity resolution according to claim 2 is characterized in that:The specific scoring of data application ability is as follows: Create a test database in the secondary node database and test the database storage performance based on the amount of data and data level parameters in the parsed database; Get the data return value from the database and generate a data storage evaluation score.
4. An evaluation system for the service capability of secondary nodes of industrial Internet identity resolution, characterized in that: It includes business capability assessment module, operation capability assessment module, security capability assessment module, data application capability assessment module, service provision capability assessment module and score module; The business capability assessment module, operation capability assessment module, security capability assessment module, data application capability assessment module and service provision capability assessment module are used to obtain the secondary node information of the industrial Internet identity resolution from the service provider; By analyzing the secondary node information of the industrial Internet identity resolution, scoring is performed in five dimensions: business capability, operation capability, security capability, data application capability, and service provision capability to generate an evaluation score; Collect five evaluation scores and analyze them according to the preset model to calculate the service provider's industrial Internet identity resolution secondary node service capability level; The specific scoring of business capabilities is as follows: Collect the test results, and introduce different weight coefficients to the quantity values of docking information, support information and coding protocol in the test results; The quantitative values after introducing different weight coefficients are added up in sequence to generate a business capability assessment score; The specific scoring of operational capabilities is as follows: Obtain the relevant interface information of the secondary node of the industrial Internet identity resolution, and obtain the dynamic operation data of the node through the interface information; Comparing the dynamic operation data with the operation capability rating table to generate a first comparison result, and generating an operation capability evaluation score according to the first comparison result; The specific scoring of safety capabilities is as follows: Identify the device information connected to the Industrial Internet identity resolution system; Scan the process data in the secondary node server to detect attack behavior information, intrusion behavior information and illegal deployment behavior information of the internal network in the process data; Mark abnormal device information, attack behavior information, intrusion behavior information, and illegal deployment behavior information to generate security monitoring data; According to the score of each safety capability indicator, a safety capability assessment score is obtained; After the safety assessment is completed, the final safety capability assessment score is calculated based on the results of the safety assessment and the weight value of each indicator; The data application ability is also scored in the following aspects: Test the database data management performance by analyzing the data interface parameters, response time and delay time in the database; Obtain data return values from the database and generate data management evaluation scores; The specific scoring of service provision capabilities is as follows: Test the registration performance, query performance, parsing performance, and data management of secondary node identifiers; Get the data return value and generate the service capability evaluation score according to the return value; Collect five evaluation scores and analyze them according to the preset model: Get the evaluation score of each dimension and the weight value of the corresponding dimension; Calculate the total score by performing weighted summation based on the evaluation scores and weight values according to the preset model; The total score is divided into thresholds to generate the final level of service capability of the secondary node of the identity resolution; Among them, the preset model can be expressed as: ; The safety capabilities are also scored: Identify security monitoring data according to data type and format, interpret abnormal behavior categories and issue warning messages of corresponding abnormal categories; The security monitoring data is filtered according to the abnormal category and fed back to the service provider.
