A registration method, device and system for edge cloud container platform

Abstract

The present invention provides a registration method, device and system for an edge cloud container platform, which relates to the field of communication technology. The method applied to the edge cloud container platform includes: receiving an authentication instruction sent by a central cloud management platform; establishing a network tunnel with the central cloud management platform according to the authentication instruction; receiving an authentication certificate sent by the central cloud management platform through the network tunnel; performing a secure access authentication connection with the central cloud management platform according to the authentication certificate; and registering the edge cloud container platform to the central cloud management platform through the secure access authentication connection. The solution of the present invention realizes the automated deployment of the edge cloud container platform and actively realizes the coordination of business, application, operation and maintenance data.

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and in particular to a registration method, device and system for an edge cloud container platform. Background Art

[0002] Edge computing is a distributed open platform that integrates the core capabilities of network, computing, storage, and application at the edge of the network close to the source of objects or data, providing edge intelligent services nearby to meet the key needs of industry digitalization in terms of agile connection, real-time business, data optimization, application intelligence, security and privacy protection, etc. It can serve as a bridge connecting the physical and digital worlds, enabling smart assets, smart gateways, smart systems, and smart services.

[0003] Cloud computing and edge computing are gradually merging. Edge computing is the extension of cloud-based capabilities to the edge and their collaboration. Only through close collaboration can edge computing and cloud computing better meet the matching of various demand scenarios, thereby amplifying the application value of edge computing and cloud computing. As 5G technology gradually matures, edge-cloud collaboration can better support the realization of various new application scenarios that require low network latency and high bandwidth, such as autonomous driving, drones, AR / VR, smart cities, etc.

[0004] The edge cloud also has a central cloud architecture, including ECIAAS (edge ​​infrastructure layer), ECPAAS (edge ​​platform layer), and ECSAAS (edge ​​application layer). ECIAAS layer, as an infrastructure, provides computing resources, storage, network and other services for the edge cloud; ECPAAS is built on ECIAAS to provide platform layer management services for the edge cloud; ECSAAS is built on the ECPAAS layer to provide application layer business services for the edge cloud, and the edge cloud also needs to interact with the central cloud and manage the edge cloud through the central cloud to achieve the edge cloud collaboration effect such as data, business, and operation and maintenance.

[0005] Currently, after the infrastructure is created, ECPAAS needs to be deployed manually or through scripts, and then the edge cloud platform and services are managed through central cloud configuration or edge cloud registration. This approach also has many problems, such as the complexity of edge cloud platform deployment, how to securely access the edge cloud platform and the central cloud management platform, and how the central cloud manages multiple edge cloud platforms.

[0006] The existing solutions have at least the following disadvantages:

[0007] When the edge cloud has no public network access address, it cannot actively access the central cloud management platform. Summary of the invention

[0008] The technical problem to be solved by the present invention is how to provide a registration method, device and system for an edge cloud container platform, which solves the problem that the edge cloud cannot actively access the central cloud management platform when there is no public network access address.

[0009] In order to solve the above technical problems, the technical solution of the present invention is as follows:

[0010] The present invention provides a registration method for an edge cloud container platform, which is applied to the edge cloud container platform. The method includes:

[0011] Receive authentication instructions sent by the central cloud management platform;

[0012] According to the authentication instruction, a network tunnel is established with the central cloud management platform;

[0013] Receiving the authentication certificate sent by the central cloud management platform through the network tunnel;

[0014] Performing a secure access authentication connection with the central cloud management platform according to the authentication certificate;

[0015] The edge cloud container platform is registered to the central cloud management platform through the secure access authentication connection.

[0016] Optionally, the authentication instruction includes at least one of the following:

[0017] Information about the edge proxy gateway module running on the edge cloud;

[0018] Request information for establishing a network tunnel;

[0019] Authentication information for edge cloud access to the central cloud management platform.

[0020] Optionally, the authentication certificate is generated by at least one of the edge cloud container platform name, a unique identifier, and an intranet access address.

[0021] Optionally, registering the edge cloud container platform to the central cloud management platform through the secure access authentication connection includes:

[0022] Receiving deployment component configuration instructions sent by the central cloud management platform;

[0023] Deploy components according to the deployment component configuration instructions;

[0024] After the component deployment is completed, the component deployment information is automatically updated to the central cloud management platform.

[0025] Optionally, the component includes at least one of the following:

[0026] Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

[0027] Optionally, the registration method of the edge cloud container platform also includes:

[0028] Establish a message queue telemetry transmission MQTT data channel with the central cloud management platform;

[0029] Data is transmitted with the central cloud management platform via the MQTT data channel.

[0030] The present invention also provides a registration method for an edge cloud container platform, which is applied to a central cloud management platform, and the method includes:

[0031] Send authentication instructions to the edge cloud container platform;

[0032] According to the authentication instruction, establish a network tunnel with the edge cloud container platform;

[0033] Sending an authentication certificate to the edge cloud container platform through the network tunnel;

[0034] Performing a secure access authentication connection with the edge cloud container platform according to the authentication certificate;

[0035] Based on the secure access authentication connection, registration of the edge cloud container platform is completed.

[0036] Optionally, the authentication instruction includes at least one of the following:

[0037] Information about the edge proxy gateway module running on the edge cloud;

[0038] Request information for establishing a network tunnel;

[0039] Authentication information for edge cloud access to the central cloud management platform.

[0040] Optionally, the authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform.

[0041] Optionally, completing the registration of the edge cloud container platform based on the secure access authentication connection includes:

[0042] Sending a deployment component configuration instruction to the edge cloud container platform;

[0043] Receive component deployment information after the edge cloud container platform completes component deployment according to the deployment component configuration instruction.

[0044] Optionally, the registration method of the edge cloud container platform also includes:

[0045] Establish a message queue telemetry transmission MQTT data channel with the edge cloud container platform;

[0046] Data is transmitted with the edge cloud container platform via the MQTT data channel.

[0047] The present invention provides a registration device for an edge cloud container platform, which is applied to the edge cloud container platform and includes:

[0048] A transceiver module, used to receive an authentication instruction sent by a central cloud management platform; establish a network tunnel with the central cloud management platform according to the authentication instruction; and receive an authentication certificate sent by the central cloud management platform through the network tunnel;

[0049] A processing module is used to perform an SSL access authentication connection with the central cloud management platform according to the authentication certificate; and register the edge cloud container platform to the central cloud management platform through the SSL access authentication connection.

[0050] The present invention also provides a registration device for an edge cloud container platform, which is applied to a central cloud management platform, including:

[0051] A transceiver module, configured to send an authentication instruction to an edge cloud container platform; establish a network tunnel with the edge cloud container platform according to the authentication instruction; and send an authentication certificate to the edge cloud container platform through the network tunnel;

[0052] A processing module is used to perform a secure access authentication connection with the edge cloud container platform according to the authentication certificate; and complete the registration of the edge cloud container platform based on the secure access authentication connection.

[0053] The present invention provides an edge cloud container platform deployment system, comprising: an edge cloud container platform and a central cloud management platform,

[0054] The edge cloud container platform receives the authentication instruction sent by the central cloud management platform;

[0055] The edge cloud container platform establishes a network tunnel with the central cloud management platform according to the authentication instruction;

[0056] The edge cloud container platform receives the authentication certificate sent by the central cloud management platform through the network tunnel;

[0057] The edge cloud container platform performs a secure access authentication connection with the central cloud management platform according to the authentication certificate;

[0058] The edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection.

[0059] Optionally, the edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection, including:

[0060] The central cloud management platform sends a deployment component configuration instruction to the edge cloud container platform;

[0061] The edge cloud container platform deploys components according to the deployment component configuration instruction to obtain component deployment information;

[0062] The edge cloud container platform sends the assembly deployment information to the central cloud management platform.

[0063] Optionally, the edge cloud container platform is also used to establish a message queue telemetry transmission MQTT data channel with the central cloud management platform;

[0064] The edge cloud container platform transmits data to the central cloud management platform through the MQTT data channel.

[0065] The present invention also provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the above method.

[0066] The above solution of the present invention includes at least the following beneficial effects:

[0067] By receiving the authentication instruction sent by the central cloud management platform; establishing a network tunnel with the central cloud management platform according to the authentication instruction; receiving the authentication certificate sent by the central cloud management platform through the network tunnel; making a secure access authentication connection with the central cloud management platform according to the authentication certificate; registering the edge cloud container platform to the central cloud management platform through the secure access authentication connection. The edge cloud can access the central cloud management platform, realize the automated deployment of the edge cloud container platform, and actively realize the collaboration of business, application, operation and maintenance data. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 It is a flowchart of a registration method for an edge cloud container platform according to an embodiment of the present invention;

[0069] Figure 2 It is a schematic diagram of the process of edge cloud and central cloud data collaboration in the edge cloud container platform of an embodiment of the present invention;

[0070] Figure 3 It is a flowchart of a registration method for an edge cloud container platform according to an embodiment of the present invention;

[0071] Figure 4 It is a schematic diagram of a specific embodiment of the present invention;

[0072] Figure 5 It is a structural schematic diagram of a registration device of an edge cloud container platform according to an embodiment of the present invention;

[0073] Figure 6 It is a structural diagram of an edge cloud container platform deployment system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0074] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0075] like Figure 1 As shown, an embodiment of the present invention provides a registration method for an edge cloud container platform, which is applied to an edge cloud container platform, and the method includes:

[0076] Step 11, receiving the authentication instruction sent by the central cloud management platform;

[0077] Step 12: Establish a network tunnel with the central cloud management platform according to the authentication instruction;

[0078] Step 13, receiving the authentication certificate sent by the central cloud management platform through the network tunnel;

[0079] Step 14, performing a secure access authentication connection with the central cloud management platform according to the authentication certificate;

[0080] Step 15: Register the edge cloud container platform to the central cloud management platform through the secure access authentication connection.

[0081] The registration method of the edge cloud container platform of this embodiment is applied to the edge cloud container platform. An edge cloud container platform is built on the edge cloud container platform that already has infrastructure, and is automatically registered on the central cloud management platform. It should be noted that the edge cloud container platform is responsible for ECPAAS (Platform-as-a-Service for Edge Computing) business and AI processing. The edge cloud container platform has the basic environment of the edge cloud, terminal interaction components, and cloud interaction components.

[0082] The solution has the cloud-based unified management capabilities of the edge container platform, network building, two-way access authentication, and automatic registration functions, enabling the edge cloud container platform to automatically join the central cloud management platform and realize automated deployment of the edge container cloud platform, achieving collaborative interaction between the edge cloud container platform and the central cloud platform.

[0083] In an optional embodiment of the present invention, the authentication instruction in step 11 includes at least one of the following: information about the edge cloud running the edge proxy gateway module; information about the edge cloud needing to establish a network tunnel; and authentication information for the edge cloud to access the central cloud management platform.

[0084] In this embodiment, the edge cloud container platform receives the authentication instruction sent by the central cloud management platform, executes the authentication instruction, runs the proxy gateway module, and establishes a network tunnel;

[0085] like Figure 2 As shown in the figure, the network tunnel is further explained. The edge cloud container platform provides a proxy gateway module, and the central cloud management platform provides an edge cloud collaborative gateway. The two interact with each other through the network tunnel. The edge cloud container platform accesses the services and data of the central cloud management platform through the edge cloud collaborative gateway module. The edge cloud container platform and the central cloud management platform implement two-way authentication access through a two-way SSL (Secure Sockets Layer) authentication method.

[0086] In an optional embodiment of the present invention, the authentication certificate in step 13 is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform.

[0087] In this embodiment, the edge cloud container platform receives the authentication certificate through the network tunnel, and then configures SSL access authentication through the certificate information.

[0088] In an optional embodiment of the present invention, step 15 includes:

[0089] Step 151, receiving a deployment component configuration instruction sent by the central cloud management platform;

[0090] Step 152, deploying components according to the deployment component configuration instruction;

[0091] Step 153, automatically updating the component deployment information after the component deployment is completed to the central cloud management platform.

[0092] Among them, the components include at least one of the following: image repository; container cluster; log analysis; monitoring alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence AI operating environment.

[0093] In this embodiment, after the proxy gateway module of the edge cloud container platform receives the edge cloud container platform deployment component configuration command, it deploys the component at the planned corresponding node. After the component deployment is completed, the component deployment information is automatically updated to the central cloud management platform through the proxy gateway service; wherein, the preferred method of step 152 is to use the Ansible tool, which is an automated operation and maintenance tool developed based on the Python operating system.

[0094] In an optional embodiment of the present invention, the registration method of the edge cloud container platform further includes:

[0095] Step 16, establishing a message queue telemetry transmission MQTT data channel with the central cloud management platform;

[0096] Step 17: Transmit data with the central cloud management platform through the MQTT data channel.

[0097] In this embodiment, the edge cloud container platform provides a proxy gateway module, and the central cloud management platform provides an edge cloud collaboration gateway. The two interact with each other through a network tunnel. The edge cloud container platform can also access the edge cloud collaboration gateway and synchronize the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT (Message Queuing Telemetry Transport) message queue.

[0098] like Figure 3 As shown, the present invention also provides a registration method for an edge cloud container platform, which is applied to a central cloud management platform, and the method includes:

[0099] Step 31, sending an authentication instruction to the edge cloud container platform;

[0100] Step 32: Establish a network tunnel with the edge cloud container platform according to the authentication instruction;

[0101] Step 33, sending the authentication certificate to the edge cloud container platform through the network tunnel;

[0102] Step 34, performing a secure access authentication connection with the edge cloud container platform according to the authentication certificate;

[0103] Step 35: Complete the registration of the edge cloud container platform based on the secure access authentication connection.

[0104] The registration method of the edge cloud container platform of this embodiment is applied to the central cloud management platform. An edge cloud container platform is built on the edge cloud container platform that already has infrastructure, and the edge cloud container platform is automatically registered on the central cloud management platform. It should be noted that the central cloud management platform is responsible for the unified management of the central cloud and edge cloud, and the central cloud management platform has edge-cloud interaction functions and central cloud management platform system functional components.

[0105] In an optional embodiment of the present invention, the authentication instruction in step 31 includes at least one of the following: information of the edge cloud running the edge proxy gateway module; request information for establishing a network tunnel; authentication information of the edge cloud accessing the central cloud management platform.

[0106] In this embodiment, the central cloud management platform generates an authentication instruction and sends it to the edge cloud container platform to establish a network tunnel with the edge container platform; Figure 2 As shown, the central cloud management platform and the edge cloud container platform automatically establish a network tunnel. The central cloud management platform provides an edge cloud collaborative gateway and interacts with the edge cloud container platform through the network tunnel. The central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform to implement scheduling task issuance and access and other related data operations.

[0107] In an optional embodiment of the present invention, the authentication certificate in step 33 is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform.

[0108] In an optional embodiment of the present invention, step 35 includes:

[0109] Step 351, sending a deployment component configuration instruction to the edge cloud container platform;

[0110] Step 352: Receive component deployment information after the edge cloud container platform completes component deployment according to the deployment component configuration instruction.

[0111] In this embodiment, after the central cloud management platform establishes an access connection with the proxy gateway module, the relevant deployment component configuration is performed on the central cloud management platform, and then the deployment component configuration instructions are issued to the edge cloud container platform, and the component deployment information of the edge cloud container platform is received after the component deployment is completed.

[0112] In an optional embodiment of the present invention, the registration method of the edge cloud container platform may further include:

[0113] Step 36, establishing an MQTT (Message Queue Telemetry Transport) data channel with the edge cloud container platform;

[0114] Step 37: Transmit data with the edge cloud container platform through the MQTT data channel.

[0115] like Figure 2 As shown, in this embodiment, after the proxy gateway module updates the configuration to the central cloud management platform, it establishes a data channel with the MQTT module of the edge-cloud collaborative gateway of the central cloud management platform, and pushes the business, operation and maintenance, application and other related information of the edge-cloud collaborative gateway through MQTT to achieve data collaboration.

[0116] like Figure 4 As shown, in a specific embodiment, the process of implementing the automatic deployment of the edge cloud container platform is as follows:

[0117] The central cloud management platform creates a new edge cloud, sets up configurations and generates authentication instructions;

[0118] Execute the authentication instructions generated on the central cloud management platform on the edge cloud container platform;

[0119] The edge cloud container platform runs the proxy gateway module by executing authentication instructions;

[0120] The proxy gateway module and the central cloud management platform establish a network tunnel; the proxy gateway module registers the edge cloud container platform to the central cloud management platform, and the central cloud management platform configures SSL-related authentication and implements SSL two-way authentication with the proxy gateway module;

[0121] The central cloud management platform sets up relevant deployment component configurations;

[0122] The central cloud management platform issues a deployment component configuration instruction, and the proxy gateway module receives the deployment component configuration instruction and starts to execute the deployment component configuration instruction;

[0123] After the edge cloud container platform components are deployed, the component deployment information related to the central cloud management platform is automatically updated to the central cloud management platform;

[0124] After receiving the component deployment information, the central cloud management platform establishes an MQTT data channel with the edge cloud container platform to collaborate with the edge cloud container platform on data services;

[0125] Complete the automated deployment of the edge cloud container platform and the central cloud management platform.

[0126] The automated deployment system composed of the edge cloud container platform and the central cloud management platform described in the above embodiments of the present invention has the ability to uniformly manage the edge container platform on the cloud; it has the functions of building a network, two-way access authentication, and automatic registration; through the configuration of the central cloud platform, the edge cloud platform automatically deploys and registers and updates data, thereby realizing the automated deployment of the edge cloud container platform and actively realizing the coordination of business, application, operation and maintenance data; the edge cloud and the central cloud platform actively establish a network tunnel, which solves the problem that the edge cloud cannot be actively accessed when there is no public network access address; by actively generating and automatically configuring SSL two-way access and MQTT data channels, data security and reliability are guaranteed.

[0127] like Figure 5 As shown, the present invention provides a registration device 50 for an edge cloud container platform, which is applied to the edge cloud container platform and includes:

[0128] The transceiver module 51 is used to receive the authentication instruction sent by the central cloud management platform; establish a network tunnel with the central cloud management platform according to the authentication instruction; and receive the authentication certificate sent by the central cloud management platform through the network tunnel;

[0129] The processing module 52 is used to perform an SSL access authentication connection with the central cloud management platform according to the authentication certificate; and register the edge cloud container platform to the central cloud management platform through the SSL access authentication connection.

[0130] Optionally, the authentication instruction includes at least one of the following:

[0131] Information about the edge proxy gateway module running on the edge cloud;

[0132] Request information for establishing a network tunnel;

[0133] Authentication information for edge cloud access to the central cloud management platform.

[0134] Optionally, the authentication certificate is generated by at least one of the edge cloud container platform name, a unique identifier, and an intranet access address.

[0135] Optionally, the processing module 52 is specifically used for:

[0136] Receiving deployment component configuration instructions sent by the central cloud management platform;

[0137] Deploy components according to the deployment component configuration instructions;

[0138] After the component deployment is completed, the component deployment information is automatically updated to the central cloud management platform.

[0139] Optionally, the component includes at least one of the following:

[0140] Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

[0141] Optionally, the registration device 30 of the edge cloud container platform further includes:

[0142] The first processing module 53 is used to establish a message queue telemetry transmission MQTT data channel with the central cloud management platform;

[0143] The second transceiver module 54 is used for data transmission with the central cloud management platform through the MQTT data channel.

[0144] It should be noted that the device is a device corresponding to the above method, and all implementation methods in the above method embodiments are applicable to the embodiments of the device and can achieve the same technical effects.

[0145] An embodiment of the present invention further provides a registration device for an edge cloud container platform, which is applied to a central cloud management platform, including:

[0146] A transceiver module, configured to send an authentication instruction to an edge cloud container platform; establish a network tunnel with the edge cloud container platform according to the authentication instruction; and send an authentication certificate to the edge cloud container platform through the network tunnel;

[0147] A processing module is used to perform a secure access authentication connection with the edge cloud container platform according to the authentication certificate; and complete the registration of the edge cloud container platform based on the secure access authentication connection.

[0148] Optionally, the authentication instruction includes at least one of the following:

[0149] Information about the edge proxy gateway module running on the edge cloud;

[0150] Request information for establishing a network tunnel;

[0151] Authentication information for edge cloud access to the central cloud management platform.

[0152] Optionally, the authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform.

[0153] Optionally, the processing module is specifically used to: send a deployment component configuration instruction to the edge cloud container platform;

[0154] Receive component deployment information after the edge cloud container platform completes component deployment according to the deployment component configuration instruction.

[0155] Optionally, the processing module is further used to establish a message queue telemetry transmission MQTT data channel with the edge cloud container platform;

[0156] The transceiver module is also used to transmit data with the edge cloud container platform through the MQTT data channel.

[0157] It should be noted that the device is a device corresponding to the above method, and all implementation methods in the above method embodiments are applicable to the embodiments of the device and can achieve the same technical effects.

[0158] like Figure 6 As shown, an embodiment of the present invention further provides an edge cloud container platform deployment system, including: an edge cloud container platform and a central cloud management platform,

[0159] The edge cloud container platform receives the authentication instruction sent by the central cloud management platform;

[0160] The edge cloud container platform establishes a network tunnel with the central cloud management platform according to the authentication instruction;

[0161] The edge cloud container platform receives the authentication certificate sent by the central cloud management platform through the network tunnel;

[0162] The edge cloud container platform performs a secure access authentication connection with the central cloud management platform according to the authentication certificate;

[0163] The edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection.

[0164] Optionally, the edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection, including:

[0165] The central cloud management platform sends a deployment component configuration instruction to the edge cloud container platform;

[0166] The edge cloud container platform deploys components according to the deployment component configuration instruction to obtain component deployment information;

[0167] The edge cloud container platform sends the assembly deployment information to the central cloud management platform.

[0168] Optionally, the edge cloud container platform is also used to establish a message queue telemetry transmission MQTT data channel with the central cloud management platform;

[0169] The edge cloud container platform transmits data to the central cloud management platform through the MQTT data channel.

[0170] In the above-mentioned embodiments of the present invention, the entire automated deployment process of the edge cloud container platform has the characteristics of edge-cloud collaboration, and can achieve automated deployment of central cloud configuration, edge cloud registration, and other data collaboration such as edge-cloud services; the edge cloud produces execution commands through the central cloud management platform, runs the edge proxy gateway by executing commands, and establishes a network tunnel to achieve network interconnection from the edge data center to the central cloud; the edge container cloud platform and the central cloud platform automatically generate private authentication certificates and establish SSL two-way authentication and MQTT authentication channels to ensure data security and stability of large amounts of data.

[0171] It should be noted that the system is a system corresponding to the above method, and all implementation methods in the above method embodiments are applicable to the embodiments of the system and can achieve the same technical effects.

[0172] The embodiment of the present invention further provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the above method. All implementations in the above method embodiment are applicable to this embodiment and can achieve the same technical effect.

[0173] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0174] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0175] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0176] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0177] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0178] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0179] In addition, it should be noted that in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it is understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0180] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general device. Therefore, the purpose of the present invention can also be achieved by simply providing a program product containing a program code that implements the method or device. That is to say, such a program product also constitutes the present invention, and the storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order. Some steps can be performed in parallel or independently of each other.

[0181] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A registration method for an edge cloud container platform, characterized in that: Applied to the edge cloud container platform, the method includes: Receive authentication instructions sent by the central cloud management platform; According to the authentication instruction, a network tunnel is established with the central cloud management platform; Receiving the authentication certificate sent by the central cloud management platform through the network tunnel; Performing a secure access authentication connection with the central cloud management platform according to the authentication certificate; Registering the edge cloud container platform to the central cloud management platform through the secure access authentication connection; Among them, the secure socket protocol SSL access authentication is configured according to the authentication certificate; the central cloud management platform and the edge cloud container platform automatically establish a network tunnel, the central cloud management platform provides an edge cloud collaborative gateway, and exchanges data with the edge cloud container platform through the network tunnel; the central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform, and implements the operations of scheduling task issuance and accessing related data; the edge cloud container platform has the basic environment of the edge cloud, terminal interaction components and cloud interaction components; The authentication instruction includes at least one of the following: Information about the edge proxy gateway module running on the edge cloud; Request information for establishing a network tunnel; Authentication information for edge cloud access to the central cloud management platform; The authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address; Registering the edge cloud container platform to the central cloud management platform through the secure access authentication connection includes: Receiving deployment component configuration instructions sent by the central cloud management platform; Deploy components according to the deployment component configuration instructions; Automatically updating component deployment information after component deployment is completed to the central cloud management platform; Establish a message queue telemetry transmission MQTT data channel with the central cloud management platform; Performing data transmission with the central cloud management platform via the MQTT data channel; The edge cloud container platform also synchronizes the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT message queue after accessing the edge cloud collaborative gateway; The components include at least one of the following: Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

2. A registration method for an edge cloud container platform, characterized in that: Applied to the central cloud management platform, the method includes: Send authentication instructions to the edge cloud container platform; According to the authentication instruction, establish a network tunnel with the edge cloud container platform; Sending an authentication certificate to the edge cloud container platform through the network tunnel; Performing a secure access authentication connection with the edge cloud container platform according to the authentication certificate; Based on the secure access authentication connection, completing the registration of the edge cloud container platform; Among them, the secure socket protocol SSL access authentication is configured according to the authentication certificate; the central cloud management platform and the edge cloud container platform automatically establish a network tunnel, and the central cloud management platform provides an edge cloud collaboration gateway to interact with the edge cloud container platform through the network tunnel; the central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform, and realizes the operation of dispatching tasks and accessing related data; The edge cloud container platform has an edge cloud basic environment, a terminal interaction component, and a cloud interaction component; The authentication instruction includes at least one of the following: Information about the edge proxy gateway module running on the edge cloud; Request information for establishing a network tunnel; Authentication information for edge cloud access to the central cloud management platform; The authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform; Based on the secure access authentication connection, completing the registration of the edge cloud container platform includes: Sending a deployment component configuration instruction to the edge cloud container platform; Receiving component deployment information after the edge cloud container platform completes component deployment according to the deployment component configuration instruction; Establish a message queue telemetry transmission MQTT data channel with the edge cloud container platform; Performing data transmission with the edge cloud container platform through the MQTT data channel; The edge cloud container platform also synchronizes the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT message queue after accessing the edge cloud collaborative gateway; The components include at least one of the following: Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

3. A registration device for an edge cloud container platform, characterized in that: Applied to edge cloud container platform, including: A transceiver module, used to receive an authentication instruction sent by a central cloud management platform; establish a network tunnel with the central cloud management platform according to the authentication instruction; and receive an authentication certificate sent by the central cloud management platform through the network tunnel; A processing module, configured to perform a secure access authentication connection with the central cloud management platform according to the authentication certificate; and register the edge cloud container platform with the central cloud management platform through the secure access authentication connection; Among them, the secure socket protocol SSL access authentication is configured according to the authentication certificate; the central cloud management platform and the edge cloud container platform automatically establish a network tunnel, the central cloud management platform provides an edge cloud collaborative gateway, and exchanges data with the edge cloud container platform through the network tunnel; the central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform, and implements the operations of scheduling task issuance and accessing related data; the edge cloud container platform has the basic environment of the edge cloud, terminal interaction components and cloud interaction components; The authentication instruction includes at least one of the following: Information about the edge proxy gateway module running on the edge cloud; Request information for establishing a network tunnel; Authentication information for edge cloud access to the central cloud management platform; The authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address; The processing module is specifically used for: Receiving deployment component configuration instructions sent by the central cloud management platform; Deploy components according to the deployment component configuration instructions; Automatically updating component deployment information after component deployment is completed to the central cloud management platform; The processing module is also used to establish a message queue telemetry transmission MQTT data channel with the central cloud management platform; The transceiver module is also used to transmit data with the central cloud management platform through the MQTT data channel; The edge cloud container platform also synchronizes the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT message queue after accessing the edge cloud collaborative gateway; The components include at least one of the following: Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

4. A registration device for an edge cloud container platform, characterized in that: Applied to the central cloud management platform, including: A transceiver module, configured to send an authentication instruction to an edge cloud container platform; establish a network tunnel with the edge cloud container platform according to the authentication instruction; and send an authentication certificate to the edge cloud container platform through the network tunnel; A processing module, configured to perform a secure access authentication connection with the edge cloud container platform according to the authentication certificate; and complete registration of the edge cloud container platform based on the secure access authentication connection; Among them, the secure socket protocol SSL access authentication is configured according to the authentication certificate; the central cloud management platform and the edge cloud container platform automatically establish a network tunnel, the central cloud management platform provides an edge cloud collaborative gateway, and exchanges data with the edge cloud container platform through the network tunnel; the central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform, and implements the operations of scheduling task issuance and accessing related data; the edge cloud container platform has the basic environment of the edge cloud, terminal interaction components and cloud interaction components; The authentication instruction includes at least one of the following: Information about the edge proxy gateway module running on the edge cloud; Request information for establishing a network tunnel; Authentication information for edge cloud access to the central cloud management platform; The authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address created and configured by the central cloud management platform; The processing module is specifically used to: send a deployment component configuration instruction to the edge cloud container platform; Receiving component deployment information after the edge cloud container platform completes component deployment according to the deployment component configuration instruction; The processing module is also used to establish a message queue telemetry transmission MQTT data channel with the edge cloud container platform; The transceiver module is also used to transmit data with the edge cloud container platform through the MQTT data channel; The edge cloud container platform also synchronizes the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT message queue after accessing the edge cloud collaborative gateway; The components include at least one of the following: Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

5. An edge cloud container platform deployment system, comprising: The edge cloud container platform and the central cloud management platform are characterized by: The edge cloud container platform receives the authentication instruction sent by the central cloud management platform; The edge cloud container platform establishes a network tunnel with the central cloud management platform according to the authentication instruction; The edge cloud container platform receives the authentication certificate sent by the central cloud management platform through the network tunnel; The edge cloud container platform performs a secure access authentication connection with the central cloud management platform according to the authentication certificate; The edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection; Among them, the secure socket protocol SSL access authentication is configured according to the authentication certificate; the central cloud management platform and the edge cloud container platform automatically establish a network tunnel, the central cloud management platform provides an edge cloud collaborative gateway, and exchanges data with the edge cloud container platform through the network tunnel; the central cloud management platform calls the proxy gateway module of the edge cloud container platform to access the edge cloud container platform, and implements the operations of scheduling task issuance and accessing related data; the edge cloud container platform has the basic environment of the edge cloud, terminal interaction components and cloud interaction components; The authentication instruction includes at least one of the following: Information about the edge proxy gateway module running on the edge cloud; Request information for establishing a network tunnel; Authentication information for edge cloud access to the central cloud management platform; The authentication certificate is generated by at least one of the edge cloud container platform name, unique identifier, and intranet access address; The edge cloud container platform registers the edge cloud container platform to the central cloud management platform through the secure access authentication connection, including: The central cloud management platform sends a deployment component configuration instruction to the edge cloud container platform; The edge cloud container platform deploys components according to the deployment component configuration instruction to obtain component deployment information; The edge cloud container platform sends the assembly deployment information to the central cloud management platform; The edge cloud container platform is also used to establish a message queue telemetry transmission MQTT data channel with the central cloud management platform; The edge cloud container platform transmits data to the central cloud management platform through the MQTT data channel; The edge cloud container platform also synchronizes the business data and operation and maintenance data of the edge cloud container platform to the central cloud management platform in the form of MQTT message queue after accessing the edge cloud collaborative gateway; The components include at least one of the following: Image repository; container cluster; log analysis; monitoring and alarm; load balancing; security management; grayscale management; traffic control; domain name resolution; automated configuration management; artificial intelligence (AI) operating environment.

6. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer is caused to execute the method according to claim 1 or 2.

Images