Path planning method, device, product and medium for multi-node networking

Abstract

The present application provides a path planning method for multi-node networking, a path planning device for multi-node networking, a computer program product, a computer-readable storage medium and an electronic device, which relate to the field of computer technology. The method comprises: obtaining the security level of each node, the user security level, the starting node and the destination node; determining the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node; generating target path information based on user demand information, the starting node, the destination node and the necessary nodes. In this way, the necessary nodes matching the user security level can be determined, and then the target path information matching the user security level can be generated, so that the user can access data through the path matching his own security level, and the user's access security can be guaranteed.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a path planning method applied to multi-node networking, a path planning device applied to multi-node networking, a computer program product, a computer-readable storage medium, and an electronic device. Background Art

[0002] In a multi-node network, it is usually necessary to plan a data transmission path based on user requests, and the data transmission path usually includes one or more nodes. Specifically, the path is planned for the user's request based on information such as bandwidth and latency, and then the planned path information is issued, and the user can access the data based on the path information. However, the access security of the user cannot be guaranteed when accessing data through the path determined by the above method.

[0003] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present application, and therefore may include information that does not constitute an existing solution known to ordinary technicians in the field. Summary of the invention

[0004] The purpose of the present application is to provide a path planning method for multi-node networking, a path planning device for multi-node networking, a computer program product, a computer-readable storage medium and an electronic device, which can determine the necessary nodes that match the user's security level, and then generate target path information that matches the user's security level, so that the user can access data through a path that matches his or her own security level, thereby ensuring the user's access security.

[0005] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by the practice of the present application.

[0006] According to one aspect of the present application, a path planning method applied to a multi-node network is provided, the method comprising:

[0007] Obtain the security level of each node, user security level, starting node and destination node;

[0008] Determine the necessary nodes corresponding to the user's security level according to the security level of each node, the starting node and the destination node;

[0009] Generate target path information based on user demand information, starting node, destination node and necessary nodes.

[0010] In an exemplary embodiment of the present application, obtaining the security level of each node, the user security level, the starting node and the destination node includes:

[0011] When a user request is received, the security level of each node, the user security level, the starting node and the destination node are obtained.

[0012] In an exemplary embodiment of the present application, generating target path information based on user demand information, a starting node, a destination node, and necessary nodes includes:

[0013] Generate intermediate path information based on the starting node, destination node and necessary nodes;

[0014] Determine user demand information based on user requests;

[0015] Generate target path information based on user demand information and intermediate path information.

[0016] In an exemplary embodiment of the present application, after generating target path information based on user demand information, a starting node, a destination node, and necessary nodes, the method further includes:

[0017] In response to user requests, target path information is issued.

[0018] In an exemplary embodiment of the present application, the method further includes:

[0019] Get the user's baseline security level;

[0020] The user security level is calculated based on the user's baseline security level and the user's request.

[0021] In an exemplary embodiment of the present application, the method further includes:

[0022] If the user baseline security level does not change within the first preset update period, the user baseline security level is updated.

[0023] In an exemplary embodiment of the present application, the method further includes:

[0024] Obtain security resource information and security event information corresponding to each node;

[0025] The security level of at least one of the nodes is updated according to the security resource information and the security event information.

[0026] In an exemplary embodiment of the present application, obtaining security resource information and security event information corresponding to each node includes:

[0027] The security resource information and security event information corresponding to each node are obtained based on a second preset update period.

[0028] In an exemplary embodiment of the present application, determining the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node includes:

[0029] Determine a reference node corresponding to the user's security level based on the security level of each node, the starting node and the destination node;

[0030] If the number of reference nodes is 1, the reference node is determined as a must-pass node.

[0031] In an exemplary embodiment of the present application, the method further includes:

[0032] If the number of reference nodes is greater than 1, the necessary nodes are determined from the reference nodes according to the node parameters corresponding to each reference node.

[0033] According to one aspect of the present application, a path planning device applied to a multi-node network is provided, comprising:

[0034] An information acquisition unit, used to acquire the security level of each node, the user security level, the starting node and the destination node;

[0035] A node determination unit, used to determine the necessary nodes corresponding to the user's security level according to the security level of each node, the starting node and the destination node;

[0036] The path information generating unit is used to generate target path information based on user demand information, a starting node, a destination node and necessary nodes.

[0037] In an exemplary embodiment of the present application, the information acquisition unit acquires the security level of each node, the user security level, the starting node and the destination node, including:

[0038] When a user request is received, the security level of each node, the user security level, the starting node and the destination node are obtained.

[0039] In an exemplary embodiment of the present application, the path information generating unit generates target path information based on user demand information, a starting node, a destination node, and necessary nodes, including:

[0040] Generate intermediate path information based on the starting node, destination node and necessary nodes;

[0041] Determine user demand information based on user requests;

[0042] Generate target path information based on user demand information and intermediate path information.

[0043] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0044] The information sending unit is used to send the target path information in response to the user request after the path information generating unit generates the target path information based on the user demand information, the starting node, the destination node and the necessary nodes.

[0045] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0046] The level determination unit is used to obtain a user baseline security level; and calculate the user security level based on the user baseline security level and the user request.

[0047] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0048] The level updating unit is used to update the user's baseline security level if the user's baseline security level has not changed within a first preset update period.

[0049] In an exemplary embodiment of the present application, the level updating unit is further used to obtain security resource information and security event information corresponding to each node; and update the security level of at least one of the nodes according to the security resource information and the security event information.

[0050] In an exemplary embodiment of the present application, the level update unit obtains security resource information and security event information corresponding to each node, including:

[0051] The security resource information and security event information corresponding to each node are obtained based on a second preset update period.

[0052] In an exemplary embodiment of the present application, the node determination unit determines the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node, including:

[0053] Determine a reference node corresponding to the user's security level based on the security level of each node, the starting node and the destination node;

[0054] If the number of reference nodes is 1, the reference node is determined as a must-pass node.

[0055] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0056] The node selection unit is used to determine the necessary nodes from the reference nodes according to the node parameters corresponding to each reference node if the number of reference nodes is greater than 1.

[0057] According to one aspect of the present application, a computer program product or a computer program is provided, the computer program product or the computer program comprising computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided in the above-mentioned various optional implementations.

[0058] According to one aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, any one of the above methods is implemented.

[0059] According to one aspect of the present application, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform any one of the above methods by executing the executable instructions.

[0060] The exemplary embodiments of the present application may have some or all of the following beneficial effects:

[0061] In a path planning method applied to multi-node networking provided in an example implementation of the present application, the security level of each node, the user security level, the starting node and the destination node can be obtained; the necessary nodes corresponding to the user security level are determined according to the security level of each node, the starting node and the destination node; the target path information is generated based on the user demand information, the starting node, the destination node and the necessary nodes. In this way, the necessary nodes that match the user security level can be determined, and then the target path information that matches the user security level can be generated, so that the user can access data through the path that matches his own security level, and the user's access security can be guaranteed. In addition, the target path information can also be generated based on the user demand information, the starting node, the destination node and the necessary nodes, so that the target path information can not only guarantee the user's access security but also meet the user's needs, and the target path information can be personalized.

[0062] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] The drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present application, and together with the specification are used to explain the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0064] Figure 1 A schematic diagram showing an exemplary system architecture of a path planning method applied to a multi-node network and a path planning device applied to a multi-node network to which an embodiment of the present application can be applied;

[0065] Figure 2 A flowchart of a path planning method applied to a multi-node network according to an embodiment of the present application is schematically shown;

[0066] Figure 3A flow chart schematically shows a path planning method applied to multi-node networking according to another embodiment of the present application;

[0067] Figure 4 A schematic diagram of an application scenario according to an embodiment of the present application is schematically shown;

[0068] Figure 5 A schematic diagram of a structure of a path planning device applied to a multi-node network according to an embodiment of the present application is shown;

[0069] Figure 6 The structure diagram of a computer system suitable for implementing an electronic device of an embodiment of the present application is schematically shown. DETAILED DESCRIPTION

[0070] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present application will be more comprehensive and complete, and the concept of the example embodiments will be fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present application. However, those skilled in the art will appreciate that the technical solutions of the present application may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present application.

[0071] In addition, the accompanying drawings are only schematic illustrations of the present application and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0072] See also Figure 1 , Figure 1 The schematic diagram shows a system architecture of an exemplary application environment in which a path planning method for multi-node networking and a path planning device for multi-node networking according to an embodiment of the present application can be applied. Figure 1As shown, the system architecture 100 may include one or more of terminal devices 101, 102, 103, a network 104, and a server 105. The network 104 is used to provide a medium for communication links between the terminal devices 101, 102, 103 and the server 105.

[0073] The network 104 may include various connection types, such as wired, wireless communication links or fiber optic cables, etc. The terminal devices 101, 102, and 103 may be devices that provide voice and / or data connectivity to users, handheld devices with wireless connection functions, or other processing devices connected to wireless modems. The wireless terminal may communicate with one or more core networks via the RAN. The wireless terminal may be a user equipment (UE), a handheld terminal, a laptop, a subscriber unit, a cellular phone, a smart phone, a wireless data card, a personal digital assistant (PDA) computer, a tablet computer, a wireless modem, a handheld device (handheld), a laptop computer, a cordless phone or a wireless local loop (WLL) station, a machine type communication (MTC) terminal, or other device that can access the network. The terminal and the access network device communicate with each other using a certain air interface technology (for example, 3GPP access technology or non-3GPP access technology). It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. According to the implementation requirements, there may be any number of terminal devices, networks and servers. For example, the server 105 may be a server cluster composed of multiple servers.

[0074] The path planning method for multi-node networking provided in the embodiment of the present application can be executed by the server 105, and accordingly, the path planning device for multi-node networking is generally set in the server 105. However, it is easy for those skilled in the art to understand that the path planning method for multi-node networking provided in the embodiment of the present application can also be executed by the terminal device 101, 102 or 103, and accordingly, the path planning device for multi-node networking can also be set in the terminal device 101, 102 or 103, which is not particularly limited in this exemplary embodiment. For example, in an exemplary embodiment, the server 105 can obtain the security level of each node, the user security level, the starting node and the destination node; determine the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node; generate the target path information based on the user demand information, the starting node, the destination node and the necessary nodes.

[0075] See also Figure 2 , Figure 2 The following schematically shows a flow chart of a path planning method for multi-node networking according to an embodiment of the present application. Figure 2 As shown, the path planning method applied to multi-node networking may include: steps S210 to S230.

[0076] Step S210: Obtain the security level of each node, the user security level, the starting node and the destination node.

[0077] Step S220: determining the necessary nodes corresponding to the user's security level according to the security level of each node, the starting node and the destination node.

[0078] Step S230: Generate target path information based on user demand information, the start node, the destination node and the necessary nodes.

[0079] Implementation Figure 2 The method shown can determine the necessary nodes that match the user's security level, and then generate target path information that matches the user's security level, so that the user can access data through the path that matches his or her own security level, and the user's access security can be guaranteed. In addition, the target path information can also be generated based on the user's demand information, the starting node, the destination node, and the necessary nodes, so that the target path information can not only guarantee the user's access security but also meet the user's needs, and the target path information can be personalized.

[0080] Next, the above steps of this exemplary embodiment are described in more detail.

[0081] In step S210, the security level of each node, the user security level, the start node and the destination node are obtained.

[0082] Specifically, the number of nodes in the multi-node network used in the present application is not limited by the embodiments of the present application. The security level of each node may be the same or different. The security level of each node can be used to quantify the security level of the corresponding node. The fewer attack events a node encounters or the more security resources a node has, the higher the security level of the node and the higher its security level. In addition, the user security level can be used to quantify the security level of the user. The higher the frequency of the user's historical normal access behavior, the higher the user security level. In addition, the starting node and the destination node can be any node in the multi-node network, respectively, and the embodiments of the present application are not limited.

[0083] As an optional embodiment, obtaining the security level of each node, the user security level, the starting node and the destination node includes: when receiving a user request, obtaining the security level of each node, the user security level, the starting node and the destination node. In this way, data acquisition based on user requests can be achieved. When receiving a user request, the latest security level of each node, the user security level, and the starting node and the destination node related to the user request can be obtained, which can be conducive to generating path information with a higher matching degree with the user security level, thereby improving the personalization of the path information.

[0084] Specifically, the user request can be used to describe the data / services and other resources that the user wants to access. When the user request is received, the security level of each node obtained is the latest security level updated, and the user security level is the real-time security level. Among them, the security level of each node and the user security level can be expressed as numbers, symbols, characters in any language, etc., which are not limited in the embodiments of this application.

[0085] As an optional embodiment, the method further includes: obtaining a user baseline security level; and calculating a user security level based on the user baseline security level and the user request. In this way, a user security level that is compatible with the user baseline security level and the user request can be determined, so that the user security level can more accurately represent the security level of the user and improve the accuracy of generating target path information.

[0086] Specifically, the user baseline security level can be expressed as If the user request is the first request, It can be a baseline security level assigned to the user based on a random number algorithm or a preset baseline security level. Different users can correspond to the same baseline security level or different baseline security levels, which is not limited in the embodiments of the present application.

[0087] Optionally, calculating the user security level based on the user baseline security level and the user request includes: when receiving the user request, determining the user's n access behaviors s jAs well as j One-to-one corresponding weight value w i , j represents the jth visit behavior among n visits, w i represents the weight value corresponding to the jth access behavior among n access behaviors, s j 、w i It can be expressed as a number, a string, or any other form, where n is a positive integer; furthermore, it can be expressed based on the expression Calculate the current user security level L u .

[0088] As an optional embodiment, the method further includes: if the user baseline security level does not change within the first preset update period, updating the user baseline security level. In this way, when the user baseline security level remains stable, the user baseline security level can be updated in time, so that the user baseline security level can more accurately characterize the user.

[0089] Specifically, the first preset update period can be expressed in any form such as a numerical value, a symbol, a character string, etc. Wherein, if the user baseline security level has not changed within the first preset update period, the user baseline security level is updated, including: if the user baseline security level has not changed within the first preset update period, the user baseline security level is updated based on a preset level promotion mechanism; wherein the level promotion mechanism is used to limit the number of promotion levels corresponding to different user baseline security levels. For example, the level promotion mechanism can be used to limit the number of promotion levels corresponding to user baseline security levels P1, P2, P3, etc. to 1, or the level promotion mechanism can be used to limit the number of promotion levels corresponding to user baseline security levels P1, P2, P3, etc. to increase in sequence, such as 1, 2, 3. For example, the user baseline security level P1=2, and the updated user baseline security level can be P1=3.

[0090] As an optional embodiment, the method further includes: obtaining security resource information and security event information corresponding to each node; and updating the security level of at least one of the nodes according to the security resource information and security event information. In this way, the security level of the node can be updated based on the periodically obtained security resource information and security event information, and the node and its security level are continuously ensured to match each other.

[0091] Specifically, the security resource information A(x) can be represented as firewall, intrusion detection information, intrusion prevention information, zero-trust access gateway information, WEB security gateway information, data leakage prevention information, etc., and the security event information E(t) can be represented as information about attack events, information about leakage events, etc., which are not limited in the embodiments of the present application. Among them, A(x) and E(t) can be represented as numerical values ​​or expressions for numerical calculations, etc.

[0092] Optionally, the security level of at least one of the nodes is updated according to the security resource information and the security event information, including: for each node, the following steps can be performed to assign an initial security level to the node based on a random number algorithm: Or set the preset initial level as the initial security level of the node Furthermore, we can Substitute security event information E(t) and security resource information A(x) into the expression To calculate the node security level L p , and then, based on the above steps, the node security level L of each node can be determined p If the calculated node safety level L p If the calculated node security level L is consistent with the current security level of the node, the security level of the node is not updated. p If it is inconsistent with the current security level of the node, the current security level of the node is updated to the calculated L p .

[0093] As an optional embodiment, obtaining security resource information and security event information corresponding to each node includes: obtaining security resource information and security event information corresponding to each node based on a second preset update period. In this way, the node security level can be periodically updated based on the periodically obtained security resource information and security event information, which is conducive to improving the accuracy of path generation.

[0094] Specifically, the second preset update period (e.g., one week) may be a period different from the first preset update period (e.g., one day), and the second preset update period (e.g., one week) may also be the same as the first preset update period (e.g., one week), which is not limited in the embodiments of the present application.

[0095] The security resource information and security event information corresponding to each node are obtained based on the second preset update period, including: obtaining the security resource information and security event information corresponding to each node in each second preset update period.

[0096] In step S220, the necessary nodes corresponding to the user's security level are determined according to the security level of each node, the starting node and the destination node.

[0097] Specifically, there may be one or more optional nodes corresponding to the user's security level, which is not limited in the present embodiment. The node security level corresponding to the necessary node may be consistent with the user's security level to ensure that the user can safely access resources that match their own level.

[0098] As an optional embodiment, determining the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node includes: determining the reference node corresponding to the user security level according to the security level of each node, the starting node and the destination node; if the number of reference nodes is 1, determining the reference node as the necessary node. In this way, the only necessary node corresponding to the user security level can be determined, which is conducive to simplifying the target path information and improving the efficiency of the user's resource access based on the target path information.

[0099] Specifically, there may be one or more reference nodes corresponding to the user security level. If there are multiple reference nodes, the multiple reference nodes correspond to the same node security level.

[0100] As an optional embodiment, the method further includes: if the number of reference nodes is greater than 1, determining the necessary nodes from the reference nodes according to the node parameters corresponding to each reference node. In this way, the necessary nodes can be selected based on the node parameters corresponding to each reference node, and the reference nodes can be optimized, which is conducive to determining the necessary nodes with a high degree of matching with the user's security level for the user.

[0101] Specifically, the node parameters corresponding to each reference node can be used to describe the corresponding reference node from multiple dimensions (such as latency, bandwidth), and each reference node is in a multi-node network. Optionally, the necessary nodes are determined from the reference nodes according to the node parameters corresponding to each reference node, including: performing weighted sum calculations on the node parameters of each reference node to obtain an evaluation value of each reference node; sorting the evaluation values, and determining the necessary nodes from the reference nodes based on the sorting results. For example, the reference node with the highest evaluation value in the sorting result can be determined as the necessary node.

[0102] In step S230, target path information is generated based on user demand information, a start node, a destination node, and necessary nodes.

[0103] Specifically, the target path information corresponding to different user requests may be the same or different, or there may be partial overlap in the target path information corresponding to different user requests. In addition, the target path information may be represented in any form that can be decoded by the receiving end, and the embodiment of the present application is not limited thereto. The target path information may include multiple ordered nodes, and the receiving end may access resources through multiple ordered nodes in sequence.

[0104] As an optional embodiment, generating target path information based on user demand information, a starting node, a destination node, and necessary nodes includes: generating intermediate path information based on the starting node, the destination node, and the necessary nodes; determining user demand information according to a user request; generating target path information based on the user demand information and the intermediate path information. In this way, the intermediate path information including the starting node, the destination node, and the necessary nodes can be generated first, and the preliminary planning of the path can be realized. Then, based on the intermediate path information generated first, the user demand information is added as a generation condition to the secondary path generation process, which is conducive to improving the generation efficiency of the target path information.

[0105] Specifically, user demand information can be interpreted as quality of service (QoS) demand information. Under limited bandwidth resources, QoS demand information can be used to allocate bandwidth for various services and provide end-to-end service quality assurance for the services. QoS demand information may include bandwidth, delay, jitter, packet loss rate, etc., which are not limited in the embodiments of the present application. In the target path information generated based on the user demand information and the intermediate path information, each node can meet the QoS demand information, so that the target path information can meet the user demand information and ensure that the target path information matches the user security level.

[0106] In addition, optionally, generating target path information based on user demand information and intermediate path information includes: using a shortest path planning algorithm (such as Dijkstra algorithm, etc.) to generate target path information from a starting node to a destination node and passing through necessary nodes based on user demand information and intermediate path information. The number of nodes in the target path information can be less than the number of nodes in the intermediate path information, which is conducive to saving the time for users to access resources.

[0107] As an optional embodiment, after generating the target path information based on the user demand information, the starting node, the destination node and the necessary nodes, the method further includes: responding to the user request and sending the target path information. In this way, the user request can be responded to in a timely manner, and personalized target path information can be sent, so that the user can access resources based on the target path information that matches his or her own security level.

[0108] Specifically, sending the target path information includes: determining the sending end of the user request, and sending the target path information to the sending end. If there are multiple user requests, the corresponding target path information can be sent according to the sending ends corresponding to the user requests. Optionally, the embodiment of the present application can process multiple user requests simultaneously in multiple threads, thereby improving the processing efficiency of user requests and improving the system's ability to process high-concurrency requests.

[0109] In addition, optionally, after sending the target path information, the above method may further include: controlling each node in the target path information to open user access rights so that the user can access resources through each node in the target path information.

[0110] See also Figure 3 , Figure 3 The following schematically shows a flow chart of a path planning method for multi-node networking according to an embodiment of the present application. Figure 3 As shown, the path planning method applied to multi-node networking may include: steps S310 to S370.

[0111] Step S310: obtaining security resource information and security event information corresponding to each node based on a second preset update period, and updating the security level of at least one of the nodes according to the security resource information and the security event information.

[0112] Step S320: Obtain the user baseline security level, and calculate the user security level based on the user baseline security level and the user request. If the user baseline security level has not changed within the first preset update period, update the user baseline security level.

[0113] Step S330: Determine a reference node corresponding to the user security level according to the security level of each node, the starting node and the destination node.

[0114] Step S340: If the number of reference nodes is 1, the reference node is determined as a necessary node; if the number of reference nodes is greater than 1, the necessary node is determined from the reference nodes according to the node parameters corresponding to each reference node.

[0115] Step S350: Generate intermediate path information based on the start node, the destination node and the necessary nodes.

[0116] Step S360: Determine user demand information according to the user request, and generate target path information based on the user demand information and the intermediate path information.

[0117] Step S370: In response to the user request, the target path information is issued.

[0118] It should be noted that steps S310 to S370 are Figure 2 The steps and their embodiments shown correspond to each other. For the specific implementation of steps S310 to S370, please refer to Figure 2 The steps and embodiments shown are not described in detail here.

[0119] It can be seen that implementation Figure 3The method shown can determine the necessary nodes that match the user's security level, and then generate target path information that matches the user's security level, so that the user can access data through the path that matches his or her own security level, and the user's access security can be guaranteed. In addition, the target path information can also be generated based on the user's demand information, the starting node, the destination node, and the necessary nodes, so that the target path information can not only guarantee the user's access security but also meet the user's needs, and the target path information can be personalized.

[0120] See also Figure 4 , Figure 4 The following schematically shows an application scenario diagram according to an embodiment of the present application. Figure 4 As shown, the application scenario includes: node 400 , node 420 , node 430 , node 411 , node 412 , and node 413 .

[0121] Among them, node 400 is used as the starting node, node 430 is used as the destination node, and node 420 is used as the necessary node. When receiving a user request, the control center can obtain the security level of each node, the user security level, node 400 and node 430; wherein the control center can be implemented in the server. Furthermore, the control center can determine the node 420 corresponding to the user security level according to the security level of each node, node 400 and node 430. Furthermore, the control center can generate intermediate path information based on node 400, node 430 and node 420, and the intermediate path information can be expressed as: node 400-node 411-node 420-node 412-node 413-node 430. Furthermore, the control center can determine the user demand information according to the user request, and generate the target path information based on the user demand information and the intermediate path information, and the target path information can be expressed as: node 400-node 420-node 430. Through the above steps, the necessary nodes that match the user's security level can be determined, and then the target path information that matches the user's security level can be generated, so that the user can access the data through the path that matches his or her own security level, and the user's access security can be guaranteed. In addition, the target path information can also be generated based on the user's demand information, the starting node, the destination node, and the necessary nodes, so that the target path information can not only guarantee the user's access security but also meet the user's needs, and the target path information can be personalized.

[0122] It should be noted that Figure 4 The nodes shown are only for illustrative purposes. In actual applications, the number and type of nodes are not necessarily Figure 4 is limited by the examples of .

[0123] See also Figure 5 , Figure 5The structure block diagram of a path planning device applied to a multi-node network in one embodiment of the present application is schematically shown. Figure 5 As shown, the path planning device 500 applied to multi-node networking includes:

[0124] The information acquisition unit 501 is used to acquire the security level of each node, the user security level, the starting node and the destination node;

[0125] A node determination unit 502, configured to determine the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node;

[0126] The path information generating unit 503 is used to generate target path information based on user demand information, a start node, a destination node and necessary nodes.

[0127] It can be seen that implementation Figure 5 The device shown can determine the necessary nodes that match the user's security level, and then generate target path information that matches the user's security level, so that the user can access data through the path that matches his or her own security level, and the user's access security can be guaranteed. In addition, the target path information can also be generated based on the user's demand information, the starting node, the destination node, and the necessary nodes, so that the target path information can not only guarantee the user's access security but also meet the user's needs, and the target path information can be personalized.

[0128] In an exemplary embodiment of the present application, the information acquisition unit 501 acquires the security level of each node, the user security level, the starting node and the destination node, including:

[0129] When a user request is received, the security level of each node, the user security level, the starting node and the destination node are obtained.

[0130] It can be seen that the implementation of this optional embodiment can realize data acquisition based on user requests. When a user request is received, the latest security level of each node, the user security level, and the starting node and destination node related to the user request can be obtained. This can help generate path information that is more closely matched with the user security level, thereby improving the personalization of the path information.

[0131] In an exemplary embodiment of the present application, the path information generating unit 503 generates target path information based on user demand information, a starting node, a destination node, and necessary nodes, including:

[0132] Generate intermediate path information based on the starting node, destination node and necessary nodes;

[0133] Determine user demand information based on user requests;

[0134] Generate target path information based on user demand information and intermediate path information.

[0135] It can be seen that by implementing this optional embodiment, the intermediate path information including the starting node, the destination node and the necessary nodes can be generated first, so as to realize the preliminary planning of the path. Then, based on the first generated intermediate path information, the user demand information is added as a generation condition to the secondary path generation process, which is beneficial to improve the generation efficiency of the target path information.

[0136] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0137] The information sending unit is used to send the target path information in response to the user request after the path information generating unit 503 generates the target path information based on the user demand information, the starting node, the destination node and the necessary nodes.

[0138] It can be seen that by implementing this optional embodiment, it is possible to respond to user requests in a timely manner and issue personalized target path information, so that users can access resources based on target path information that matches their own security level.

[0139] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0140] The level determination unit is used to obtain a user baseline security level; and calculate the user security level based on the user baseline security level and the user request.

[0141] It can be seen that by implementing this optional embodiment, a user security level that is compatible with the user's baseline security level and the user's request can be determined, so that the user security level can more accurately represent the user's security level and improve the accuracy of generating target path information.

[0142] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0143] The level updating unit is used to update the user's baseline security level if the user's baseline security level has not changed within a first preset update period.

[0144] It can be seen that by implementing this optional embodiment, the user baseline security level can be updated in a timely manner when the user baseline security level remains stable, so that the user baseline security level can more accurately characterize the user.

[0145] In an exemplary embodiment of the present application, the level updating unit is further used to obtain security resource information and security event information corresponding to each node; and update the security level of at least one of the nodes according to the security resource information and the security event information.

[0146] It can be seen that by implementing this optional embodiment, the node security level can be updated based on the periodically acquired security resource information and security event information, and the node and its security level can be continuously guaranteed to match each other.

[0147] In an exemplary embodiment of the present application, the level update unit obtains security resource information and security event information corresponding to each node, including:

[0148] The security resource information and security event information corresponding to each node are obtained based on a second preset update period.

[0149] It can be seen that by implementing this optional embodiment, the node security level can be periodically updated based on the periodically acquired security resource information and security event information, which is beneficial to improving the path generation accuracy.

[0150] In an exemplary embodiment of the present application, the node determination unit 502 determines the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node, including:

[0151] Determine a reference node corresponding to the user's security level based on the security level of each node, the starting node and the destination node;

[0152] If the number of reference nodes is 1, the reference node is determined as a must-pass node.

[0153] It can be seen that by implementing this optional embodiment, a unique necessary node corresponding to the user's security level can be determined, which is conducive to simplifying the target path information and improving the efficiency of the user's resource access based on the target path information.

[0154] In an exemplary embodiment of the present application, the above-mentioned device further includes:

[0155] The node selection unit is used to determine the necessary nodes from the reference nodes according to the node parameters corresponding to each reference node if the number of reference nodes is greater than 1.

[0156] It can be seen that by implementing this optional embodiment, necessary nodes can be selected based on the node parameters corresponding to each reference node, thereby achieving the optimization of reference nodes, which is conducive to determining necessary nodes with a high degree of matching with the user's security level for the user.

[0157] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0158] Since the various functional modules of the task scheduling device of the example embodiment of the present application correspond to the steps of the example embodiment of the task scheduling method described above, for details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the task scheduling method described above in the present application.

[0159] See also Figure 6 , Figure 6 A schematic diagram of the structure of a computer system suitable for implementing an electronic device of an embodiment of the present application is shown.

[0160] It should be noted that Figure 6 The computer system 600 of the electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0161] like Figure 6 As shown, computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage part 608 into a random access memory (RAM) 603. Various programs and data required for system operation are also stored in RAM 603. CPU 601, ROM 602 and RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to bus 604.

[0162] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed, so that a computer program read therefrom is installed into the storage section 608 as needed.

[0163] In particular, according to an embodiment of the present application, the process described below with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication section 609, and / or installed from a removable medium 611. When the computer program is executed by a central processing unit (CPU) 601, various functions defined in the method and apparatus of the present application are executed.

[0164] As another aspect, the present application also provides a computer-readable medium, which may be included in the electronic device described in the above embodiment; or may exist independently without being assembled into the electronic device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by an electronic device, the electronic device implements the method described in the above embodiment.

[0165] It should be noted that the computer-readable medium shown in the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0166] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the above-mentioned module, program segment or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0167] The units involved in the embodiments described in this application may be implemented by software or hardware, and the units described may also be set in a processor. The names of these units do not constitute limitations on the units themselves in some cases.

[0168] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary technical means in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the aforementioned claims.

Claims

1. A path planning method applied to multi-node networking, characterized in that: include: Obtaining the security level of each node, the user security level, the starting node and the destination node; wherein the user security level is determined based on a user request describing a resource to be accessed by the user and a user baseline security level; Determine the necessary nodes corresponding to the user security level according to the security level of each node, the starting node and the destination node; The target path information is generated based on the user demand information, the starting node, the destination node and the necessary nodes.

2. The method according to claim 1, characterized in that Obtain the security level of each node, user security level, start node and destination node, including: When a user request is received, the security level of each node, the user security level, the starting node and the destination node are obtained.

3. The method according to claim 2, characterized in that Generating target path information based on user demand information, the starting node, the destination node, and the necessary nodes includes: Generate intermediate path information based on the starting node, the destination node and the necessary nodes; Determining the user demand information according to the user request; The target path information is generated based on the user demand information and the intermediate path information.

4. The method according to claim 2, characterized in that: After generating target path information based on user demand information, the starting node, the destination node, and the necessary nodes, the method further includes: In response to the user request, the target path information is issued.

5. The method according to claim 2, characterized in that: The method further comprises: Get the user's baseline security level; The user security level is calculated based on the user baseline security level and the user request.

6. The method according to claim 5, characterized in that The method further comprises: If the user baseline security level does not change within a first preset update period, the user baseline security level is updated.

7. The method according to claim 1, characterized in that The method further comprises: Obtain security resource information and security event information corresponding to each node; The security level of at least one of the nodes is updated according to the security resource information and the security event information.

8. The method according to claim 7, characterized in that Obtain security resource information and security event information corresponding to each node, including: The security resource information and security event information corresponding to each node are obtained based on a second preset update period.

9. The method according to claim 1, characterized in that: Determining the necessary nodes corresponding to the user security level according to the security levels of the nodes, the starting node, and the destination node includes: Determine a reference node corresponding to the user security level according to the security levels of the nodes, the starting node and the destination node; If the number of the reference node is 1, the reference node is determined as a necessary node.

10. The method according to claim 9, characterized in that The method further comprises: If the number of the reference nodes is greater than 1, the necessary nodes are determined from the reference nodes according to the node parameters corresponding to the reference nodes.

11. A path planning device applied to multi-node networking, characterized in that: include: An information acquisition unit, used to acquire the security level of each node, the user security level, the starting node and the destination node; wherein the user security level is determined based on a user request describing a resource to be accessed by the user and a user baseline security level; A node determination unit, configured to determine a necessary node corresponding to the user security level according to the security level of each node, the starting node and the destination node; The path information generating unit is used to generate target path information based on user demand information, the starting node, the destination node and the necessary nodes.

12. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 10 is implemented.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 10 is implemented.

14. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; The processor is configured to perform the method of any one of claims 1-10 by executing the executable instructions.

Images