A resource management method and device based on edge computing, and storage medium

Abstract

The present application discloses a resource management method and device based on edge computing, a storage medium, and a computer device, the method comprising: after receiving an edge resource processing request sent by a target user, intercepting the edge resource processing request, and identifying the target user identifier, edge computing processing resources, and edge resource processing operations from the edge resource processing request; based on the target user identifier and the edge computing processing resources, determining the target user role of the target user relative to the edge computing processing resources; according to the target user role, determining the operation authority of the target user role relative to the edge computing processing resources, and judging whether the operation authority includes the edge resource processing operation; when the operation authority includes the edge resource processing operation, releasing the edge resource processing request. The present application can effectively prevent edge resources from being maliciously tampered with or deleted, and can greatly improve the security of edge resources.

Description

Technical Field

[0001] The present application relates to the field of edge computing technology, and in particular to a resource management method and device based on edge computing, a storage medium, and a computer device. Background Art

[0002] In recent years, with the development of the "Internet of Things", a large amount of data has been generated under the trend of interconnection of all things, which not only puts higher requirements on computing devices, but also requires computing devices to have good response speed. In this context, edge computing came into being. Edge computing refers to the use of an open platform that integrates network, computing, storage, and application core capabilities on the side close to the source of objects or data to provide the nearest service nearby. Its application is initiated on the edge side, resulting in faster network service response, meeting the basic needs of the industry in real-time business, application intelligence, security and privacy protection, etc.

[0003] There are many edge resources corresponding to edge computing, and there are also many edge objects corresponding to each edge resource, such as edge clusters, edge nodes, edge loads, etc. If these edge resources are not managed securely, it is very likely that the edge resources will be tampered with or deleted at will, thus affecting the security of edge resources. However, there is no security management mechanism for edge resources in the prior art. Summary of the invention

[0004] In view of this, the present application provides a resource management method and device, storage medium, and computer equipment based on edge computing, which can effectively prevent edge resources from being maliciously tampered with or deleted, and can greatly improve the security of edge resources.

[0005] According to one aspect of the present application, a resource management method based on edge computing is provided, comprising:

[0006] After receiving the edge resource processing request sent by the target user, intercept the edge resource processing request, and identify the target user identifier, edge computing processing resources, and edge resource processing operation from the edge resource processing request;

[0007] Determining a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource;

[0008] Determine, based on the target user role, the operation authority of the target user role relative to the edge computing processing resource, and determine whether the operation authority includes the edge resource processing operation;

[0009] When the operation authority includes the edge resource processing operation, the edge resource processing request is released.

[0010] According to another aspect of the present application, a resource management device based on edge computing is provided, comprising:

[0011] An identification module is used to intercept the edge resource processing request after receiving the edge resource processing request sent by the target user, and identify the target user identifier, edge computing processing resources and edge resource processing operation from the edge resource processing request;

[0012] a role determination module, configured to determine a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource;

[0013] A judgment module, configured to determine, based on the target user role, the operation authority of the target user role relative to the edge computing processing resource, and to judge whether the operation authority includes the edge resource processing operation;

[0014] The request release module is used to release the edge resource processing request when the operation authority includes the edge resource processing operation.

[0015] According to another aspect of the present application, a storage medium is provided, on which a computer program is stored, and when the program is executed by a processor, the above-mentioned resource management method based on edge computing is implemented.

[0016] According to another aspect of the present application, a computer device is provided, including a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor implements the above-mentioned resource management method based on edge computing when executing the program.

[0017] By means of the above technical solution, the present application provides a resource management method and device based on edge computing, a storage medium, and a computer device. When an edge resource processing request sent by a target user is received, the edge resource processing request is intercepted and processed, and the target user identifier, edge computing processing resource, edge resource processing operation, etc. can be respectively identified from the edge resource processing request. Here, the edge computing processing resource is an edge resource corresponding to the edge computing, and specifically can be an edge resource that the target user wants to process. In order to determine whether the target user can perform edge resource processing operations on edge computing processing resources, first, the target user identifier and edge computing processing resources can be used to determine what target user role the target user is relative to the edge computing processing resource. After determining the target user role corresponding to the edge computing processing resource of the target user, the target user role can be further determined based on the target user role. Which operation permissions the target user role has relative to the edge computing processing resource, and whether the determined operation permissions include the edge resource processing operation that the target user wants to perform can be determined. If these operation permissions include the edge resource processing operation that the target user wants to perform, it means that the target user can perform the edge resource processing operation, and the above-intercepted edge resource processing request can be released. The embodiment of the present application determines the target user role of the target user relative to the edge computing processing resources, and then determines the corresponding operation permissions based on the target user role. The edge resource processing request is released only when the operation permissions include edge resource processing operations. This can effectively prevent edge resources from being maliciously tampered with or deleted, and can greatly improve the security of edge resources.

[0018] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0020] Figure 1 A schematic diagram of a process of a resource management method based on edge computing provided in an embodiment of the present application is shown;

[0021] Figure 2 A schematic diagram of another resource management method based on edge computing provided in an embodiment of the present application is shown;

[0022] Figure 3A schematic diagram of the structure of a resource management device based on edge computing provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0023] The present application will be described in detail below with reference to the accompanying drawings and in combination with embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other without conflict.

[0024] In this embodiment, a resource management method based on edge computing is provided. Figure 1 As shown, the method includes:

[0025] Step 101, after receiving the edge resource processing request sent by the target user, intercept the edge resource processing request, and identify the target user identifier, edge computing processing resources and edge resource processing operation from the edge resource processing request.

[0026] The resource management method based on edge computing provided in the embodiment of the present application can prevent edge resources from being maliciously tampered with or deleted, and can effectively improve the security of edge resources. When an edge resource processing request sent by a target user is received, it means that a target user wants to perform an edge resource processing operation on the edge resource, wherein the edge resource processing operation can be an access operation, a creation operation, an update operation, a deletion operation, etc. At this time, the edge resource processing request is intercepted and processed, and the target user identifier, edge computing processing resources, edge resource processing operations, etc. can be respectively identified from the edge resource processing request. Here, the target user identifier is a unique identifier corresponding to the target user, and the edge computing processing resource is one of the edge resources corresponding to the edge computing, which can specifically be the edge resource that the target user wants to process.

[0027] Step 102: Determine a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource.

[0028] In this embodiment, in order to determine whether the target user can perform edge resource processing operations on edge computing processing resources, first, the target user identifier and edge computing processing resources can be used to determine what target user role the target user is relative to the edge computing processing resources. Here, the target user role can be one of the user roles, and the user role can be A-super administrator, A-administrator, B-maintainer, B-developer, C-visitor, etc., and each user role can be pre-set with different operation permissions. Each user role can be composed of two parts, namely "unique identifier of edge computing processing resource" and "role identifier", and the above "A" and "B" refer to the unique identifier of edge computing processing resources, and "super administrator", "administrator", etc. refer to role identifiers. For example, when the target user role is "A-super administrator", it means that the edge computing processing resource that the target user wants to perform edge resource processing operations on is "A" edge resource, and the target user is a super administrator role relative to "A" edge resource; when the target user role is "B-maintainer", it means that the edge computing processing resource that the target user wants to perform edge resource processing operations on is "B" edge resource, and the target user is a maintainer role relative to "B" edge resource. The same target user can have different user roles for different edge computing processing resources.

[0029] In an embodiment of the present application, optionally, step 102 includes: calling a user role list, and based on the target user identifier and the edge computing processing resource, determining a corresponding user role from the user role list as the target user role relative to the edge computing processing resource, wherein the user role list stores a mapping relationship between the user identifier and the user role.

[0030] In this embodiment, before determining the target user role, the user role list can be called first, and then the corresponding user role can be found from the user role list based on the target user identifier and the edge computing processing resource, and this user role can be used as the target user role of the target user relative to the edge computing processing resource. Among them, the user role list pre-stores the mapping relationship between the user identifier and the user role. For example, as shown in Table 1, it is an example of a user role list. The user role list includes two users, and the corresponding user identifiers are A and B, respectively, and the user roles of user A relative to resource A and resource B, and the user roles of user B relative to resource A, resource B, and resource C are listed respectively. If no information is found in the user role list, it can be indicated that the target user does not have the corresponding operation authority. For example, if the user role of user A relative to resource C cannot be found in Table 1, it can be indicated that user A does not have any operation authority for resource C. By setting a user role list, the embodiment of the present application can more simply and conveniently determine the user role of the same user relative to different edge computing processing resources.

[0031] Table 1 User role list

[0032] User ID User roles A A-Visitor A B-Administrator B A - Super Administrator B B-Administrator B C-Visitor

[0033] Step 103: Determine the operation permission of the target user role with respect to the edge computing processing resource based on the target user role, and judge whether the operation permission includes the edge resource processing operation.

[0034] In this embodiment, after determining the target user role corresponding to the edge computing processing resource of the target user, the target user role can be used as a basis to further determine which operation permissions the target user role has relative to the edge computing processing resource. For example, when the target user role is determined to be "A-Super Administrator", the operation permissions corresponding to "A-Super Administrator" can be further found from the preset permission list, that is, which operation permissions the super administrator under A edge resource can have. Next, it can be determined whether the determined operation permissions include the edge resource processing operations that the target user wants to perform.

[0035] Step 104: When the operation permission includes the edge resource processing operation, the edge resource processing request is released.

[0036] In this embodiment, if these operation permissions include the edge resource processing operation that the target user wants to perform, it means that the target user can perform the edge resource processing operation, and the intercepted edge resource processing request can be released.

[0037] By applying the technical solution of this embodiment, when an edge resource processing request sent by a target user is received, the edge resource processing request is intercepted and processed, and the target user identifier, edge computing processing resource, edge resource processing operation, etc. can be respectively identified from the edge resource processing request. Here, the edge computing processing resource is an edge resource corresponding to edge computing, and specifically can be an edge resource that the target user wants to process. In order to determine whether the target user can perform edge resource processing operations on edge computing processing resources, first, the target user identifier and edge computing processing resources can be used to determine what target user role the target user is relative to the edge computing processing resource. After determining the target user role corresponding to the edge computing processing resource of the target user, the target user role can be further determined based on the target user role. Which operation permissions the target user role has relative to the edge computing processing resource, and whether the determined operation permissions include the edge resource processing operation that the target user wants to perform. If these operation permissions include the edge resource processing operation that the target user wants to perform, it means that the target user can perform the edge resource processing operation, and the above-intercepted edge resource processing request can be released. The embodiment of the present application determines the target user role of the target user relative to the edge computing processing resources, and then determines the corresponding operation permissions based on the target user role. The edge resource processing request is released only when the operation permissions include edge resource processing operations. This can effectively prevent edge resources from being maliciously tampered with or deleted, and can greatly improve the security of edge resources.

[0038] Furthermore, as a refinement and extension of the specific implementation of the above embodiment, in order to fully illustrate the specific implementation process of this embodiment, another resource management method based on edge computing is provided, such as Figure 2 As shown, the method includes:

[0039] Step 201, after receiving the edge resource processing request sent by the target user, intercept the edge resource processing request, and identify the target user identifier, edge computing processing resources and edge resource processing operation from the edge resource processing request.

[0040] In this embodiment, when an edge resource processing request sent by a target user is received, it indicates that a target user wants to perform an edge resource processing operation on the edge resource, wherein the edge resource processing operation may be an access operation, a creation operation, an update operation, a deletion operation, etc. At this time, the edge resource processing request is intercepted and processed, and the target user identifier, the edge computing processing resource, the edge resource processing operation, etc. may be respectively identified from the edge resource processing request. Here, the target user identifier is a unique identifier corresponding to the target user, and the edge computing processing resource is one of the edge resources corresponding to the edge computing, and may specifically be an edge resource that the target user wants to process.

[0041] Step 202: Determine a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource.

[0042] In this embodiment, in order to determine whether the target user can perform edge resource processing operations on the edge computing processing resources, first, the target user identifier and the edge computing processing resources can be used to determine what target user role the target user is relative to the edge computing processing resources. Here, the target user role can be one of the user roles, and the user role can be A-super administrator, A-administrator, B-maintainer, B-developer, C-visitor, etc., and each user role can pre-set different operation permissions. Each user role can be composed of two parts, namely "unique identifier of edge computing processing resources" and "role identifier". The above "A" and "B" refer to the unique identifier of edge computing processing resources, and "super administrator", "administrator", etc. refer to role identifiers.

[0043] Step 203, based on the target user role, determine the processable edge objects corresponding to the target user role, and the processable operations corresponding to each processable edge object, wherein the processable edge objects are edge objects under the edge computing processing resources; from the edge resource processing operations, identify the corresponding target processing edge objects and target processing operations; when the processable edge objects include the target processing edge objects, determine whether the processable operations corresponding to the target processing edge objects include the target processing operations.

[0044] In this embodiment, when determining the operation authority of the target user role relative to the edge computing processing resource according to the target user role, first, based on the target user role, the processable edge object corresponding to the target user role and the processable operation corresponding to each processable edge object can be found from the permission list or other files that pre-store the operation authority corresponding to different user roles. The processable edge object and the processable operation constitute the operation authority corresponding to the target user. Among them, the processable edge object can be an edge object under the edge computing processing resource. After determining the processable edge object and the processable operation, the target processing edge object and the target processing operation can be further identified from the edge resource processing operation corresponding to the target user. If the processable edge object corresponding to the target user role just includes the target processing edge object, it can be determined whether the processable operation corresponding to the target processing edge object includes the target processing operation. Here, edge clusters, edge nodes, edge loads, etc. all belong to edge objects, and processable operations can include "create", "update", "delete" and "access".

[0045] For example, as shown in Table 2, it is an example of a permission list. If the edge computing processing resource is edge resource A and the target user role is "A-visitor", then it can be found from Table 2 that the processable edge object corresponding to the target user role includes one, namely "A-edge cluster", and the processable operation corresponding to the processable edge object is "access". At this time, if the target processing edge object is "A-edge cluster" and the target processing operation is "access", then the target user can perform this edge resource processing operation. If the edge computing processing resource is edge resource B and the target user role is "B-administrator", then it can be found from Table 2 that the processable edge object corresponding to the target user role includes one, namely "B-edge cluster", and the processable operations corresponding to the processable edge object include four, namely "create", "update", "delete" and "access". At this time, if the target processing edge object is "B-edge cluster" and the target processing operation is "update", then the target user can perform this edge resource processing operation. However, if the target processing edge object is "B-edge node" or "B-edge load", then the target user cannot perform edge resource processing operations. If no information is found in the permission list, it means that the user role does not have corresponding processable edge objects and processable operations. For example, if no information about "A-Visitor" relative to "A-Edge Node" or "A-Edge Load" can be found in Table 1, it means that "A-Visitor" cannot operate on these edge objects.

[0046] Table 2 Permission list

[0047] User roles Can handle edge objects Processable operations A-Visitor A - Edge Cluster access B-Administrator B - Edge Cluster create B-Administrator B - Edge Cluster renew B-Administrator B - Edge Cluster delete B-Administrator B - Edge Cluster access C-Visitor C-Edge load access

[0048] Step 204: When the processable operations corresponding to the target processing edge object include the target processing operation, release the edge resource processing request.

[0049] In this embodiment, if the processable operations corresponding to the target processing edge object include the target processing operation, it means that the target user has the corresponding operation authority, and the edge resource processing request can be released.

[0050] Step 205: When the processable operations corresponding to the target processing edge object do not include the target processing operation, output a permission error prompt.

[0051] In this embodiment, if the target processing operation is not included in the processable operations corresponding to the target processing edge object, a permission error prompt may be output accordingly, that is, prompting the target user that he does not have the corresponding operation permission.

[0052] Step 206, start the monitoring mode, and when the number of permission error prompts output for the target user within the preset time exceeds the preset threshold, generate an alarm file and send the alarm file to the preset management terminal corresponding to the edge computing processing resource.

[0053] In this embodiment, the monitoring mode can be turned on to monitor the number of output permission error prompts. If the number of output permission error prompts monitored by the same target user exceeds the preset number threshold within the preset time, that is, the number of unauthorized operations performed by the same target user exceeds the preset number threshold, then an alarm file can be generated and sent to the preset management terminal corresponding to the edge computing processing resource, so that the staff corresponding to the preset management terminal can investigate the target user and prevent the edge resources from being maliciously tampered with.

[0054] In an embodiment of the present application, optionally, after the "when the number of times that the permission error prompt is output for the target user within a preset time exceeds a preset number threshold" described in step 206, the method also includes: generating permission modification inquiry information, and sending the permission modification inquiry information to the user terminal corresponding to the target user, so that the target user determines whether to modify the user role based on the permission modification inquiry information; when the target user determines to modify the user role, receiving the role modification file feedback from the user terminal, and forwarding the role modification file to the preset management terminal corresponding to the edge computing processing resource.

[0055] In this embodiment, if the number of times the same target user outputs permission error prompts exceeds the preset number threshold within the preset time, permission modification inquiry information can also be generated. The permission modification inquiry information can include the content such as what user role you want to modify, and then the permission modification inquiry information can be sent to the user terminal corresponding to the target user, so that the target user can decide whether to modify the user role according to the permission modification inquiry information received by the user terminal. After receiving the permission modification inquiry information, the user terminal can also output prompt information on whether to modify the user role. If the user chooses yes, the permission modification inquiry information can be directly output. When the user modification is completed, a role modification file can be generated; if the user chooses no, it can be ended directly. When the target user determines to modify the user role, the role modification file sent by the user terminal is received, and then the role modification file can be forwarded to the preset management terminal corresponding to the edge computing processing resource. In this way, the staff corresponding to the preset management terminal can review the role modification file, which can ensure the security of edge resources and the flexibility of user role formulation. When some edge resources or edge objects are in urgent need of edge resource processing operations, the leader's authorization can be obtained to complete the work.

[0056] In the embodiment of the present application, optionally, after step 202, the method further includes: if the target user role is a super administrator role, directly releasing the edge resource processing request.

[0057] In this embodiment, if it is determined that the target user's target user role relative to the edge computing processing resource is "the unique identifier corresponding to the edge computing processing resource - the super administrator role", then no further judgment is required at this time, and the edge resource processing request can be directly released for processing. In other words, for any edge resource, as long as the target user's target user role relative to the edge computing processing resource is "the unique identifier corresponding to the edge computing processing resource - the super administrator role", then any processing operation can be performed on any edge object under the edge computing processing resource. This can be a privilege of the super administrator. When the embodiment of the present application determines that the target user role is the super administrator role corresponding to the edge computing processing resource, the edge resource processing request is directly released, eliminating unnecessary subsequent steps, which is simpler and more convenient.

[0058] Further, as Figure 1 The specific implementation of the method, the embodiment of the present application provides a resource management device based on edge computing, such as Figure 3 As shown, the device comprises:

[0059] An identification module is used to intercept the edge resource processing request after receiving the edge resource processing request sent by the target user, and identify the target user identifier, edge computing processing resources and edge resource processing operation from the edge resource processing request;

[0060] a role determination module, configured to determine a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource;

[0061] A judgment module, configured to determine, based on the target user role, the operation authority of the target user role relative to the edge computing processing resource, and to judge whether the operation authority includes the edge resource processing operation;

[0062] The request release module is used to release the edge resource processing request when the operation authority includes the edge resource processing operation.

[0063] Optionally, the judging module is used to:

[0064] According to the target user role, determine the processable edge objects corresponding to the target user role and the processable operations corresponding to each processable edge object, wherein the processable edge objects are edge objects under the edge computing processing resources; from the edge resource processing operations, identify the corresponding target processing edge objects and target processing operations; when the processable edge objects include the target processing edge objects, determine whether the processable operations corresponding to the target processing edge objects include the target processing operations.

[0065] Optionally, the release request module is used to:

[0066] When the processable operations corresponding to the target processing edge object include the target processing operation, the edge resource processing request is released.

[0067] Optionally, the device further comprises:

[0068] a prompt output module, configured to output a permission error prompt when the processable operations corresponding to the target processing edge object do not include the target processing operation after determining whether the processable operations corresponding to the target processing edge object include the target processing operation;

[0069] Accordingly, the device further comprises:

[0070] The monitoring module is used to start the monitoring mode after the output permission error prompt, and when the number of output permission error prompts for the target user within a preset time exceeds a preset threshold, generate an alarm file and send the alarm file to the preset management terminal corresponding to the edge computing processing resource.

[0071] Optionally, the device further comprises:

[0072] An information sending module, configured to generate permission modification inquiry information after monitoring that the number of permission error prompts output for the target user within a preset time exceeds a preset number threshold, and send the permission modification inquiry information to a user terminal corresponding to the target user, so that the target user determines whether to modify the user role based on the permission modification inquiry information;

[0073] The file forwarding module is used to receive the role modification file fed back by the user terminal when the target user determines to modify the user role, and forward the role modification file to the preset management terminal corresponding to the edge computing processing resource.

[0074] Optionally, the role determination module is used to:

[0075] Call the user role list, and based on the target user identifier and the edge computing processing resource, determine the corresponding user role from the user role list as the target user role relative to the edge computing processing resource. The user role list stores a mapping relationship between the user identifier and the user role.

[0076] Optionally, the request release module is further used to directly release the edge resource processing request after determining the target user role of the target user relative to the edge computing processing resource if the target user role is a super administrator role.

[0077] It should be noted that for other corresponding descriptions of the functional units involved in the resource management device based on edge computing provided in the embodiment of the present application, please refer to Figure 1 to Figure 2 The corresponding description in the method will not be repeated here.

[0078] Based on the above Figure 1 to Figure 2 The method shown in the embodiment of the present application is accordingly provided with a storage medium on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned Figure 1 to Figure 2 The resource management method based on edge computing is shown.

[0079] Based on this understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each implementation scenario of the present application.

[0080] Based on the above Figure 1 to Figure 2 The method shown, and Figure 3 In order to achieve the above-mentioned purpose, the embodiment of the present application further provides a computer device, which can be a personal computer, a server, a network device, etc. The computer device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to achieve the above-mentioned Figure 1 to Figure 2 The resource management method based on edge computing is shown.

[0081] Optionally, the computer device may further include a user interface, a network interface, a camera, a radio frequency (RF) circuit, a sensor, an audio circuit, a WI-FI module, etc. The user interface may include a display, an input unit such as a keyboard, etc., and the optional user interface may also include a USB interface, a card reader interface, etc. The network interface may optionally include a standard wired interface, a wireless interface (such as a Bluetooth interface, a WI-FI interface), etc.

[0082] Those skilled in the art will appreciate that the computer device structure provided in this embodiment does not limit the computer device, and may include more or fewer components, or a combination of certain components, or different component arrangements.

[0083] The storage medium may also include an operating system and a network communication module. The operating system is a program that manages and saves the hardware and software resources of the computer device, and supports the operation of information processing programs and other software and / or programs. The network communication module is used to realize communication between the components inside the storage medium, and communication with other hardware and software in the physical device.

[0084] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present application can be implemented by means of software plus necessary general hardware platforms, or by hardware. When an edge resource processing request sent by a target user is received, the edge resource processing request is intercepted and processed, and the target user identifier, edge computing processing resources, edge resource processing operations, etc. can be respectively identified from the edge resource processing request. Here, the edge computing processing resource is an edge resource corresponding to edge computing, and specifically can be an edge resource that the target user wants to process. In order to determine whether the target user can perform edge resource processing operations on edge computing processing resources, first, the target user identifier and edge computing processing resources can be used to determine what target user role the target user is relative to the edge computing processing resources. After determining the target user role corresponding to the edge computing processing resource of the target user, the target user role can be further determined based on the target user role. Which operation permissions the target user role has relative to the edge computing processing resource, and whether the determined operation permissions include the edge resource processing operations that the target user wants to perform. If these operation permissions include the edge resource processing operations that the target user wants to perform, it means that the target user can perform the edge resource processing operations, and the above-intercepted edge resource processing requests can be released. The embodiment of the present application determines the target user role of the target user relative to the edge computing processing resources, and then determines the corresponding operation permissions based on the target user role. The edge resource processing request is released only when the operation permissions include edge resource processing operations. This can effectively prevent edge resources from being maliciously tampered with or deleted, and can greatly improve the security of edge resources.

[0085] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for implementing the present application. Those skilled in the art will appreciate that the modules in the devices in the implementation scenario can be distributed in the devices of the implementation scenario according to the description of the implementation scenario, or can be changed accordingly and located in one or more devices different from the present implementation scenario. The modules of the above-mentioned implementation scenario can be combined into one module, or can be further split into multiple submodules.

[0086] The above serial numbers of this application are only for description and do not represent the advantages and disadvantages of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of this application, but this application is not limited to them, and any changes that can be thought of by technicians in this field should fall within the scope of protection of this application.

Claims

1. A resource management method based on edge computing, characterized in that: include: After receiving the edge resource processing request sent by the target user, intercept the edge resource processing request, and identify the target user identifier, edge computing processing resources, and edge resource processing operation from the edge resource processing request; Determining a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource; According to the target user role, determine the processable edge object corresponding to the target user role and the processable operation corresponding to each processable edge object, wherein the processable edge object is an edge object under the edge computing processing resource; from the edge resource processing operation, identify the corresponding target processing edge object and the target processing operation; when the processable edge object includes the target processing edge object, determine whether the processable operation corresponding to the target processing edge object includes the target processing operation; When the processable operations corresponding to the target processing edge object include the target processing operation, the edge resource processing request is released.

2. The method according to claim 1, characterized in that After determining whether the processable operations corresponding to the target processing edge object include the target processing operation, the method further includes: When the processable operations corresponding to the target processing edge object do not include the target processing operation, outputting a permission error prompt; Accordingly, after the output permission error prompt, the method further includes: The monitoring mode is turned on, and when the number of permission error prompts output for the target user within a preset time exceeds a preset threshold, an alarm file is generated and sent to a preset management terminal corresponding to the edge computing processing resource.

3. The method according to claim 2, characterized in that After monitoring that the number of times that the permission error prompt is output for the target user within a preset time exceeds a preset number threshold, the method further includes: Generate permission modification inquiry information, and send the permission modification inquiry information to a user terminal corresponding to the target user, so that the target user determines whether to modify the user role based on the permission modification inquiry information; When the target user determines to modify the user role, the role modification file fed back by the user terminal is received, and the role modification file is forwarded to the preset management terminal corresponding to the edge computing processing resource.

4. The method according to claim 1, characterized in that The determining, based on the target user identifier and the edge computing processing resource, a target user role of the target user relative to the edge computing processing resource includes: Call the user role list, and based on the target user identifier and the edge computing processing resource, determine the corresponding user role from the user role list as the target user role relative to the edge computing processing resource. The user role list stores a mapping relationship between the user identifier and the user role.

5. The method according to claim 1, characterized in that After determining the target user role of the target user relative to the edge computing processing resource, the method further includes: If the target user role is a super administrator role, the edge resource processing request is directly released.

6. A resource management device based on edge computing, characterized in that: include: An identification module is used to intercept the edge resource processing request after receiving the edge resource processing request sent by the target user, and identify the target user identifier, edge computing processing resources and edge resource processing operation from the edge resource processing request; a role determination module, configured to determine a target user role of the target user relative to the edge computing processing resource based on the target user identifier and the edge computing processing resource; A judgment module is used to determine, according to the target user role, a processable edge object corresponding to the target user role and a processable operation corresponding to each processable edge object, wherein the processable edge object is an edge object under the edge computing processing resource; identify the corresponding target processing edge object and target processing operation from the edge resource processing operation; when the processable edge object includes the target processing edge object, determine whether the processable operation corresponding to the target processing edge object includes the target processing operation; The request release module is used to release the edge resource processing request when the processable operations corresponding to the target processing edge object include the target processing operation.

7. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 5 is implemented.

8. A computer device comprising a storage medium, a processor, and a computer program stored in the storage medium and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 5 is implemented.

Images