A port auditing method and apparatus

Abstract

The application provides a port auditing method and device, relates to the field of port auditing, and aims to solve the problems of low efficiency and low accuracy of manual auditing. The method comprises the following steps: obtaining first information of a plurality of ports from a network management system; obtaining second information of the plurality of ports from an operation support system (OSS) and / or a business support system (BSS); filtering the plurality of ports based on preset port filtering rules and the first information of the plurality of ports, and obtaining at least one to-be-audited port reserved after filtering; storing the first information and the second information of the same to-be-audited port in an auditing database according to a matching relationship between first identification information and second identification information; extracting service management information and configuration running information of the to-be-audited port from the auditing database, and judging whether the to-be-audited port is compliant based on the service management information and the configuration running information of the to-be-audited port.

Description

A port auditing method and apparatus Technical Field

[0001] This application relates to the field of port auditing, and more particularly to a port auditing method and apparatus. Background Technology

[0002] Auditing, also known as inspection and review, refers to the supervision and inspection of economic activities. With the advancement of information technology, auditors have begun to make good use of auditing tools, shifting from traditional manual sampling audits to electronic and automated auditing operations.

[0003] In the telecommunications industry, auditing user communication service data is a crucial management technique for ensuring the stable development of communication services. Currently, with the rapid development of communication services, the required audit data is also increasing. Existing technologies involve manually extracting and analyzing the source data needed for auditing from Terminal Access Controller Access-Control System (TACACS), network management systems, Internet Data Centers (IDCs), and IDC scheduling systems. This process filters out non-compliant data, making the final audit results more convincing and the information more accurate.

[0004] However, this method is inefficient and prone to data omissions and analytical errors. With the annual increase in IDC business data volume, the application scenarios for manual auditing are becoming increasingly limited. Summary of the Invention

[0005] This application provides a port auditing method and apparatus to solve the problems of low efficiency and low accuracy of manual auditing.

[0006] In a first aspect, this application provides a port auditing method, which includes: obtaining first information of multiple ports from a network management system, wherein the first information of each port includes first identification information related to the port and configuration operation information; obtaining second information of multiple ports from an Operation Support System (OSS) and / or a Business Support System (BSS), wherein the second information of each port includes second identification information related to the port and service management information; filtering the multiple ports based on preset port filtering rules and the first information of the multiple ports to obtain at least one port to be audited after filtering; storing the first information and second information of the same port to be audited in an audit database according to the matching relationship between the first identification information and the second identification information; extracting the service management information and configuration operation information of the port to be audited from the audit database, and determining whether the port to be audited is compliant based on the service management information and configuration operation information of the port to be audited.

[0007] The technical solution provided in this application offers at least the following benefits: First, by acquiring the audit data from the network management system, OSS, and BSS, the method enables interaction between these three systems, allowing the audit task to be performed entirely within a network environment. Second, by using preset filtering rules, spam or invalid ports are filtered out before the port audit task begins, shortening the time required for a single audit. Third, based on the matching relationship between the first and second identification information, the first and second information of the same port to be audited are associated and stored in the audit database. Furthermore, based on the business management information and configuration operation information of the port to be audited, the port is defined as a compliant or non-compliant port. Through these methods, not only are the port audit processing steps simplified and the process shortened, but also, by comparing and correlating relevant data and establishing matching relationships, the integrity of the information in the port to be audited is ensured, making the audit process more rigorous and the audit results more accurate.

[0008] In one possible implementation, the compliance of the port to be audited is determined based on its business management information and configuration operation information. This includes: determining the type of the port to be audited based on the port description field in its configuration operation information; if the port to be audited is a trunk port, finding its upstream and next-hop ports using an automatic link discovery protocol; if both upstream and next-hop ports are found, the port to be audited is determined to be compliant; if neither upstream nor next-hop port is found, the port to be audited is determined to be non-compliant. In the case of a business port, if the business account order number field and / or customer name field in the business management information of the port to be audited are empty, the port to be audited is determined to be a non-compliant port; if the business account order number field and customer name field in the business management information of the port to be audited are not empty, the port to be audited is determined to be a compliant port. In the case of an idle port, if the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, the port to be audited is determined to be a non-compliant port; if the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

[0009] Based on this possible implementation method, the system can use this automatic auditing method to determine whether the port to be audited is compliant. Furthermore, because this auditing method performs port auditing based on both the business management information and configuration operation information of the port to be audited, as well as the port description, the compliant and non-compliant ports identified are more accurate and reasonable.

[0010] In another possible implementation, the method further includes: if the port to be audited is determined to be a compliant port, setting compliance identification information for the port to be audited in the audit database; if the port to be audited is determined to be a non-compliant port, setting non-compliant identification information for the port to be audited in the audit database.

[0011] Based on this possible implementation method, compliant and non-compliant ports obtained after auditing are identified and distinguished in the audit database, making it simpler and faster for users to access port information and improving the efficiency of auditing work.

[0012] In another possible implementation, the method further includes: receiving a port query command input by a user, the port query command including query conditions; and in response to the port query command, retrieving query results from an audit database, the query results including information on qualified ports that meet the query conditions, and information on non-compliant ports that meet the query conditions.

[0013] Based on this possible implementation, users can query compliant or non-compliant port information already stored in the audit database according to the conditions for the desired port query. This enables quick retrieval of query results based on query conditions, improving query efficiency.

[0014] In another possible implementation, the first identification information includes the device address and port name; the second identification information includes the device network management identifier and the port network management identifier; the matching relationship between the first identification information and the second identification information includes: the matching relationship between the device address and the device network management identifier; and the matching relationship between the port name and the port network management identifier.

[0015] Based on this possible implementation, the device address and port name are encapsulated as the first identification information, and the device network management identifier and port network management identifier are encapsulated as the second identification information. This simplifies the information processing steps and shortens the audit process. Simultaneously, establishing matching relationships between relevant data makes the audit data more accurate and less prone to errors, and also ensures the integrity of the information in the port to be audited, thus making the audit results more convincing.

[0016] Secondly, this application provides a port auditing device, comprising: a receiving module, configured to receive first information of multiple ports obtained from a network management system, wherein the first information of each port includes first identification information related to the port and configuration operation information; and / or, to receive second information of multiple ports obtained from an Operation Support System (OSS) and / or a Business Support System (BSS), wherein the second information of each port includes second identification information related to the port and service management information. A processing module, configured to filter the multiple ports based on preset port filtering rules and the first information of the multiple ports, obtaining at least one port to be audited after filtering; and / or, to associate and store the first information and second information of the same port to be audited in an audit database according to the matching relationship between the first identification information and the second identification information; and / or, to extract the service management information and configuration operation information of the port to be audited from the audit database, and to determine whether the port to be audited is compliant based on the service management information and configuration operation information of the port to be audited.

[0017] In one possible implementation, the processing module is specifically used to: determine the type of the port to be audited based on the port description field in the configuration and operation information of the port to be audited; if the port to be audited is a trunk port, find the upstream and next-hop ports of the port to be audited through the link auto-discovery protocol; if the upstream and next-hop ports of the port to be audited are found, determine that the port to be audited is a compliant port; if the upstream and / or next-hop ports of the port to be audited are not found, determine that the port to be audited is a non-compliant port; if the port to be audited is a service port, if the port to be audited... If the business account order number and / or customer name fields in the business management information of the port are empty, the port to be audited is determined to be a non-compliant port; if the business account order number and customer name fields in the business management information of the port to be audited are not empty, the port to be audited is determined to be a compliant port; if the port to be audited is an idle port, and the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, the port to be audited is determined to be a non-compliant port; if the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

[0018] In another possible implementation, the processing module is also used to: set compliance identification information for the port to be audited in the audit database when it is determined that the port to be audited is a compliant port; and set violation identification information for the port to be audited in the audit database when it is determined that the port to be audited is a non-compliant port.

[0019] In another possible implementation, the receiving module is further configured to: receive a port query command input by the user, the port query command including query conditions; and the processing module is further configured to: in response to the port query command, retrieve query results from the audit database, the query results including information on qualified ports that meet the query conditions, and information on non-compliant ports that meet the query conditions.

[0020] Thirdly, this application provides a communication device comprising: a processor and a memory for storing processor-executable instructions; wherein the processor is configured to execute a port auditing method as described in the first aspect and any possible implementation thereof.

[0021] Fourthly, this application provides a computer program product that, when run on a computer, causes the computer to perform the steps of the related method described in the first aspect, so as to implement the port auditing method described in the first aspect.

[0022] Fifthly, this application provides a computer-readable storage medium that, when the instructions in the computer-readable storage medium are executed by a processor of a server, enables the server to execute the port auditing method provided by the first aspect and any possible implementation thereof; or, when the instructions in the computer-readable storage medium are executed by a processor of a client, enables the client to execute the port auditing method provided by the second aspect and any possible implementation thereof.

[0023] The beneficial effects of the second to fifth aspects mentioned above can be referred to the first aspect, and will not be repeated here. Attached Figure Description

[0024] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 is a schematic diagram of an IDC port auditing system architecture provided in an embodiment of this application;

[0026] Figure 2 is a flowchart of a port auditing method provided in an embodiment of this application;

[0027] Figure 3 is a flowchart of a method for storing data in an audit database according to an embodiment of this application;

[0028] Figure 4 is a flowchart of a method for determining a compliant port provided in an embodiment of this application;

[0029] Figure 5 is a flowchart of a user query port implementation method provided in an embodiment of this application;

[0030] Figure 6 is a schematic diagram of a port audit query front-end interface provided in an embodiment of this application;

[0031] Figure 7 is a hardware structure block diagram of a port auditing device provided in an embodiment of this application;

[0032] Figure 8 is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0033] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0034] It should be noted that in the embodiments of this application, the words "exemplarily" or "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design scheme described as "exemplarily" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design schemes. Specifically, the use of the words "exemplarily" or "for example" is intended to present the relevant concepts in a specific manner.

[0035] Furthermore, in the description of the embodiments of this application, unless otherwise stated, " / " means "or". For example, A / B can mean A or B. The term "and / or" in this document is merely a description of the association relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, in the description of the embodiments of this application, "multiple" refers to two or more than two.

[0036] To facilitate a clear description of the technical solutions of the embodiments of this application, the terms "first" and "second" are used in the embodiments of this application to distinguish the same or similar items with essentially the same function and effect. Those skilled in the art can understand that the terms "first" and "second" are not intended to limit the quantity or execution order.

[0037] Auditing, also known as inspection and review, refers to the supervision and inspection of economic activities. With the advancement of information technology, auditors have begun to make good use of auditing tools, shifting from traditional manual sampling auditing to electronic and automated auditing operations.

[0038] In the telecommunications industry, auditing user communication service data is a crucial management technique for ensuring the stable development of communication services. Currently, with the rapid development of communication services, the required audit data is also increasing. Existing technologies involve manually extracting and analyzing the source data needed for auditing from TACACS systems, network management systems, IDC resource systems, and IDC scheduling systems to filter out non-compliant data, thereby making the final audit results more convincing and the information more accurate.

[0039] However, this method is inefficient and prone to data omissions and analytical errors. With the annual increase in IDC business data volume, the application scenarios for manual auditing are becoming increasingly limited.

[0040] As described in the background section, manual auditing methods are inefficient and inaccurate, and as the required audit volume increases, manual auditing methods face numerous problems.

[0041] Based on this, please provide a port auditing method, which involves obtaining first information of multiple ports from a network management system, where the first information of each port includes port-related first identification information and configuration and operation information; obtaining second information of multiple ports from an Operation Support System (OSS) and / or a Business Support System (BSS), where the second information of each port includes port-related second identification information and service management information; filtering multiple ports based on preset port filtering rules and the first information of multiple ports to obtain at least one port to be audited after filtering; associating and storing the first information and second information of the same port to be audited in an audit database according to the matching relationship between the first identification information and the second identification information; extracting the service management information and configuration and operation information of the port to be audited from the audit database; and determining whether the port to be audited is compliant based on the service management information and configuration and operation information of the port to be audited.

[0042] This approach not only enables interaction between different systems but also reduces the workload of auditing by filtering invalid and unnecessary data. Furthermore, the establishment of the audit database makes the audit process more automated and intelligent, thereby improving audit efficiency.

[0043] In some embodiments, the executing entity of the method can be a computer, server, or other device with computing capabilities. The server can be a single server or a server cluster consisting of multiple servers. In some embodiments, the server cluster can also be a distributed cluster. This application does not limit the specific form of the executing entity of the method.

[0044] For example, the server may include an Operation and Maintenance Center Radio (OMC-R) server, and other servers connected to the OMC-R server. This application does not limit the specific type of server.

[0045] Figure 1 is a schematic diagram of an IDC port audit system architecture provided in an embodiment of this application. As shown in Figure 1, the IDC port audit system includes: Internet touchpoints, customer acquisition system, contract management system, customer acquisition order center, customer acquisition billing center, network management system, OSS, and BSS.

[0046] Among these, internet touchpoints include self-service, online intention forms, and appointment forms.

[0047] The customer acquisition system has the following functions: business acceptance, business changes, contract management, business account cancellation, and account suspension / reactivation.

[0048] The contract management system has the following functions: contract management.

[0049] The customer acquisition order center has the following functions: self-service work order scheduling, intention / reservation order processing, IDC service activation / change scheduling, and IDC service shutdown / start scheduling.

[0050] The Customer Acquisition Billing Center has the following functions: preprocessing, billing, discounts, and accounting.

[0051] The network management system has the following functions: network management data collection, business auditing, and alarm monitoring.

[0052] OSS has the following functions: resource management, service activation, and traffic collection.

[0053] BSS has the following functions: data receiving, accounting management, invoice management, and credit control management.

[0054] In some embodiments, for all IDC devices, the SNMPv2 protocol is deployed to record all IDC devices into the network management system. Information such as device name, port name, port description, port management status and running status, port configuration bandwidth, and port traffic are collected through two collection methods: management information base (MIB) - object identifier (OID) node and script query.

[0055] SNMP stands for Simple Network Management Protocol. MIB is organized in a tree structure, consisting of many nodes. Each node represents a managed object, and each managed object can be uniquely identified by a string of numbers representing the path starting from the root of the tree. This string of numbers is called OID.

[0056] For example, the data that can be collected through the two methods of MIB-OID node and script query can be shown in Tables 1 and 2 below:

[0057] Table 1

[0058]

[0059] Table 2

[0060]

[0061]

[0062] For example, when the MIB node name is ifIndex, the node identifies the interface index, and the corresponding OID value of the node is (1.3.6.1.2.1.2.2.1.1).

[0063] For example, when the MIB node name is idDescr, this node identifies the interface description. The correspondence between the index and the interface can be obtained through this node. The OID value corresponding to this node is (1.3.6.1.2.1.2.2.1.1).

[0064] For example, when the MIB node name is ifMtu, the node identifies the maximum transmission unit (MTU) value in bytes, and the corresponding OID value is (1.3.6.1.2.1.2.2.1.4).

[0065] For example, when the MIB node name is ifSpeed, this node identifies the estimated interface bandwidth in bits per second. The corresponding OID value for this node is (1.3.6.1.2.1.2.2.1.5).

[0066] It's important to understand that for interfaces whose bandwidth cannot be changed or accurately estimated, this entry represents the rated bandwidth value. If the interface's bandwidth is larger than the range represented by this entry, then the value of this entry is its maximum value (i.e., 4294967295). In this case, the value of ifHighSpeed ​​(OID 1.3.6.1.2.1.31.1.1.1.15, unit: Mbit / s) in ifXRable is the interface's rate. For sublayer interfaces without a rate concept, the value of this entry is zero.

[0067] For example, when the MIB node name is ifPhysAddress, the node identifies the interface address corresponding to the protocol sublayer of the interface. For 802.1x interfaces, this item is generally the MAC address, and the OID value corresponding to this node is (1.3.6.1.2.1.2.2.1.6).

[0068] Furthermore, by combining the information such as the city, bureau, computer room, equipment manufacturer, model, name, and IP address of the equipment entered in the network management system, an audit database is created in the network management system, and the operating and configuration data of the equipment ports are collected and stored in the database. The information in the audit database is shown in Table 3.

[0069] Table 3

[0070]

[0071]

[0072] The port auditing method provided in the embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0073] Figure 2 is a flowchart of a port auditing method provided in an embodiment of this application. As shown in Figure 2, the method includes the following steps:

[0074] S101. Obtain the first information of multiple ports from the network management system.

[0075] The first information for each port includes port-related first identification information and configuration and operation information.

[0076] Specifically, the first identification information includes the device address and port name.

[0077] In some embodiments, the configuration runtime information includes one or more of the following: port description, port management runtime status, port configuration bandwidth, and port traffic.

[0078] S102. Obtain second information for multiple ports from the Operation Support System (OSS) and / or Business Support System (BSS).

[0079] The second information for each port includes port-related second identification information and service management information.

[0080] Specifically, the second identification information includes the device network management identifier and the port network management identifier.

[0081] In some embodiments, the business management information includes one or more of the following: the business order associated with the port, the contracted bandwidth of the port, the customer name associated with the port, and the business status of the port.

[0082] S103. Based on the preset port filtering rules and the first information of multiple ports, filter multiple ports to obtain at least one port to be audited after filtering.

[0083] In some embodiments, the preset port filtering rules specifically include filtering out non-bearing service ports and trunk ports from the ports collected from the network management system, including logical ports, network management ports, link aggregation group ports, Loopback ports, NULL ports, and other ports that need to be filtered.

[0084] In some embodiments, the preset port filtering rules may also include filtering out information where the device address of the first identification information in the first information does not match the device gateway identifier of the second identification information in the second information.

[0085] In some embodiments, the preset port filtering rules may include filtering out information in which the port name in the first identification information of the first information does not match the device gateway identifier in the second identification information of the second information.

[0086] In some embodiments, the preset port filtering rules may further include filtering out ports whose port information contains any one or more keywords listed in Table 4. The port keywords to be filtered are shown in Table 4:

[0087] Table 4

[0088]

[0089] S104. Based on the matching relationship between the first identification information and the second identification information, the first information and the second information of the same port to be audited are associated and stored in the audit database.

[0090] The matching relationship between the first identification information and the second identification information includes: the matching relationship between the device address and the device network management identifier, and the matching relationship between the port name and the port network management identifier.

[0091] In some embodiments, the first and second information of the same audit port are associated and stored in the audit database according to the matching relationship between the first identification information and the second identification information. This can also be represented by the flowchart shown in Figure 3. (Figure 3 is shown.)

[0092] In some embodiments, the system obtains first identification information and configuration operation information from the network management system, and second identification information and service management information from OSS and / or BSS. Based on preset port filtering rules and the first information of multiple ports, the system filters multiple ports to obtain at least one port to be audited after filtering, and stores this port to be audited in the audit database.

[0093] Furthermore, the system retrieves port descriptions, port management status, port configuration bandwidth, and port traffic from the configuration and operation information, and stores this information in the audit database. It also retrieves port-associated service orders, port contracted bandwidth, port-associated customer names, and port service status from the business management information, and stores this information in the audit database as well.

[0094] In some embodiments, the contents stored in the audit database are shown in Table 5.

[0095] Table 5

[0096]

[0097]

[0098]

[0099] In some embodiments, the content stored in the audit database may include one or more of the following: province (REGION_PROVINCE), city (REGION_CITY), data center (ROOM_NAME), business number (BUSINESS_INENTITY), customer name (CUST_NAME), device address (EQP_EMS_ID), port device name (PORT_EMS_ID), port configuration bandwidth (CONFIG_BANDWIDTH), port traffic (PORT_RATE), bandwidth billing method (BANDWIDTH_BILLING_WAY), port method (PORT_WAY), port type (PORT_TYPE), device name (EQP_NAME), port name (PORT_NAME), port management operation status (OPERATION_STATE), and port service status (OPR_STSTE_ID).

[0100] The following changes have been made: City (REGION_CITY) is now named City (REGION_NAME); Business Number (BUSINESS_INENTITY) is now Business Number (ACC_NBR); Device Address (EQP_EMS_ID) is now Device Address (EQP_ORIG_RES_ID); Port Device Name (PORT_EMS_ID) is now Port Device Name (EMS_ORIG_RES_ID); Port Configuration Bandwidth (CONFIG_BANDWIDTH) is now Port Configuration Bandwidth (PORT_RATE_1); and Port Type (PORT_TYPE) is now Port Type (PORT_TYPE_ID).

[0101] In some embodiments, the bandwidth billing method (BANDWIDTH_BILLING_WAY) can be 1482571 fixed rate or 1482572 traffic. The port type (PORT_TYPE_ID) can be any of the following: electrical port, optical port, logical port, or adapter port. The port service status (OPR_STSTE_ID) can be any of the following: idle, reserved, occupied, or pre-released.

[0102] S105. Extract the business management information and configuration operation information of the port to be audited from the audit database, and determine whether the port to be audited is compliant based on the business management information and configuration operation information of the port to be audited.

[0103] In some embodiments, the service management information of the port to be audited refers to the port status collected from the network management system. It can be online or offline.

[0104] In some embodiments, the type of the port to be audited is determined based on the port description field in the configuration and operation information of the port to be audited.

[0105] In some embodiments, the port description field in the configuration and operation information of the port to be audited includes any of the following descriptions: starting with the keyword to_, ​​starting with the keyword for_, or neither starting with the keyword to_ nor starting with the keyword for_.

[0106] Furthermore, the type of the port to be audited can be determined based on the port description field according to the preset correspondence.

[0107] The preset correspondence is used to indicate the type of at least one port description field and at least one port to be audited.

[0108] For example, the preset correspondence can be implemented in the form of a correspondence table. Table 6 shows one such correspondence table. As shown in Table 6, the preset correspondence may include multiple port description fields and multiple types of ports to be audited, and there is a one-to-one correspondence between at least one port description field and at least one type of port to be audited.

[0109] Table 6

[0110] The port description field indicates the type of the port to be audited. Trunk ports begin with the keyword "to_", service ports do not begin with "to_" or "for_", and are unused ports. surface

[0111] In some embodiments, when the port to be audited is a relay port, the link auto-discovery protocol is used to find the upstream and next-hop ports of the port to be audited; if the upstream and next-hop ports of the port to be audited are found, the port to be audited is determined to be a compliant port; if the upstream and / or next-hop ports of the port to be audited are not found, the port to be audited is determined to be a non-compliant port.

[0112] In some embodiments, when the port to be audited is a business port, if the business account order number field and / or customer name field in the business management information of the port to be audited are empty fields, the port to be audited is determined to be a non-compliant port; if the business account order number field and customer name field in the business management information of the port to be audited are not empty fields, the port to be audited is determined to be a compliant port.

[0113] In some embodiments, if the port to be audited is an idle port, and the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, the port to be audited is determined to be a non-compliant port; if the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

[0114] In some embodiments, the port determination method provided in this embodiment can also be implemented using the method shown in Figure 4. (Figure 4 is shown.)

[0115] In some embodiments, if the port to be audited is determined to be a compliant port, compliance identification information is set for the port to be audited in the audit database. If the port to be audited is determined to be a non-compliant port, non-compliance identification information is set for the port to be audited in the audit database.

[0116] In the actual implementation, compliance information is presented as a compliance port report. Violation information is presented as a violation port report.

[0117] In some embodiments, once a port to be audited is determined to be a compliant port, a compliant port report is generated based on the network management system using multiple conditions such as device location, device IP, port network management status, port service status, port bandwidth, and / or customer name.

[0118] In some embodiments, once a port to be audited is determined to be a non-compliant port, a non-compliant port report is generated based on the network management system using multiple conditions such as device location, device IP, port network management status, port service status, port bandwidth, and / or customer name.

[0119] The port auditing method provided in this application provides at least the following beneficial effects: First, by acquiring the audit data from the network management system, OSS, and BSS, the method achieves interaction between the three systems, enabling the auditing task to be performed entirely within the network environment. Second, by using preset filtering rules, spam or invalid ports are filtered out before the port auditing task begins, shortening the time required for a single audit. Third, based on the matching relationship between the first and second identification information, the first and second information of the same port to be audited are associated and stored in the auditing database. Furthermore, based on the business management information and configuration operation information of the port to be audited, the port is defined as a compliant port or a non-compliant port. Through these methods, not only are the port auditing processing steps simplified and the process shortened, but also, by comparing and associating relevant data and establishing matching relationships, the integrity of the information in the port to be audited is ensured, making the auditing process more rigorous and the audit results more accurate.

[0120] In some embodiments, based on the port information and data already stored in the audit database, users can query relevant content from the audit database by entering a port query command. Figure 5 is a flowchart of a port query method provided in an embodiment of this application. As shown in Figure 5, the method includes the following steps:

[0121] S201, Receive the port query command input by the user.

[0122] The port query command includes query conditions.

[0123] In some embodiments, the query conditions include one or more of the following: location, device name, port alias, network management system port operating status, OSS port rate, OSS port type, port type, time, device IP, port description, network management system port bandwidth rate, OSS port configured bandwidth, OSS bandwidth billing method, BSS customer name, device level, port name, network management system port management status, OSS port status, OSS port name, BSS customer order number, or other conditions that may be used for querying.

[0124] Among these options, the location, OSS bandwidth billing method, and device level can be selected from data within the system's preset range. The operating status of the network management system port can be selected as online or offline. The BSS port type can be selected as any of the following: trunk port, service port, or idle port. The port type can be selected as compliant port or non-compliant port. The BSS port status can be selected as any of the following: idle, disabled, unused, or damaged.

[0125] S202. In response to the port query command, retrieve the query results from the audit database.

[0126] The query results include information on qualified ports that meet the query criteria, as well as information on illegal ports that meet the query criteria.

[0127] This application embodiment also provides a front-end interface for port auditing query, which allows users to perform operations such as port querying and port information export. Figure 6 is a schematic diagram of a port auditing front-end interface provided in this application embodiment, as shown in Figure 6.

[0128] The query conditions provided by the front-end interface may include one or more of the following: location, device name, port alias, network management system port operating status, OSS port speed, OSS port type, port type, time, device IP, port description, network management system port bandwidth speed, OSS port configured bandwidth, OSS bandwidth billing method, BSS customer name, device level, port name, network management system port management status, OSS port status, OSS port name, BSS customer order number, or other conditions that may be used for querying.

[0129] Among these options, the location, OSS bandwidth billing method, and device level can be selected from data within the system's preset range. The operating status of the network management system port can be selected as online or offline. The BSS port type can be selected as any of the following: trunk port, service port, or idle port. The port type can be selected as compliant port or non-compliant port. The BSS port status can be selected as any of the following: idle, disabled, unused, or damaged.

[0130] This application embodiment can divide the port auditing device into functional modules according to the above method example. For example, each function can be divided into its own functional modules. The integrated modules can be implemented in hardware or software. It should be noted that the module division in this application embodiment is illustrative and only represents one logical functional division. In actual implementation, there may be other division methods.

[0131] Figure 7 illustrates the port auditing device 1000 in the above embodiment, where each functional module is divided according to its corresponding function. As shown in Figure 7, the port auditing device 1000 includes a receiving module 1001 and a processing module 1002. The receiving module 1001 and the processing module 1002 are connected.

[0132] The receiving module 1001 is used to receive first information of multiple ports obtained from the network management system, wherein the first information of each port includes first identification information related to the port and configuration operation information; and / or to receive second information of multiple ports obtained from the operation support system OSS and / or the service support system BSS, wherein the second information of each port includes second identification information related to the port and service management information.

[0133] The processing module 1002 is used to filter multiple ports based on preset port filtering rules and first information of multiple ports to obtain at least one port to be audited after filtering; and / or, according to the matching relationship between the first identification information and the second identification information, associate and store the first information and the second information of the same port to be audited in the audit database; and / or, extract the business management information and configuration operation information of the port to be audited from the audit database, and determine whether the port to be audited is compliant based on the business management information and configuration operation information of the port to be audited.

[0134] In some embodiments, the processing module 1002 is further configured to determine the type of the port to be audited based on the port description field in the configuration and operation information of the port to be audited; if the port to be audited is a trunk port, it uses the link auto-discovery protocol to find the upstream and next-hop ports of the port to be audited; if the upstream and next-hop ports of the port to be audited are found, the port to be audited is determined to be a compliant port; if the upstream and / or next-hop ports of the port to be audited are not found, the port to be audited is determined to be a non-compliant port; if the port to be audited is a service port, if the port to be audited is a service port, it uses the link auto-discovery protocol to find the upstream and next-hop ports of the port to be audited. If the business account order number and / or customer name fields in the business management information of the port are empty, the port to be audited is determined to be a non-compliant port; if the business account order number and customer name fields in the business management information of the port to be audited are not empty, the port to be audited is determined to be a compliant port; if the port to be audited is an idle port, and the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, the port to be audited is determined to be a non-compliant port; if the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

[0135] In some embodiments, the processing module 1002 is further configured to, when it is determined that the port to be audited is a compliant port, set compliance identification information for the port to be audited in the audit database; and when it is determined that the port to be audited is a non-compliant port, set non-compliant identification information for the port to be audited in the audit database.

[0136] In some embodiments, the receiving module 1001 is further configured to receive a port query instruction input by a user, the port query instruction including query conditions. The processing module 1002 is further configured to, in response to the port query instruction, obtain query results from an audit database, the query results including information on qualified ports that meet the query conditions, and information on non-compliant ports that meet the query conditions.

[0137] Of course, the port auditing device 1000 includes, but is not limited to, the unit modules listed above. Furthermore, the specific functions that the aforementioned functional units can implement include, but are not limited to, the functions corresponding to the method steps in the above embodiments. For detailed descriptions of other modules of the port auditing device 1000, please refer to the detailed descriptions of their corresponding method steps; these descriptions will not be repeated here.

[0138] In an exemplary embodiment, this application also provides a computer program product that, when run on a computer, causes the computer to execute the aforementioned related method steps to implement the port auditing method in the above embodiments.

[0139] In an exemplary embodiment, this application also provides an electronic device. Figure 8 is a schematic diagram of the structure of the electronic device provided in this application embodiment. As shown in Figure 8, the electronic device may include: a processor 1101 and a memory 1102; the memory 1102 stores instructions executable by the processor 1101; when the processor 1101 is configured to execute the instructions, the electronic device implements the method described in the foregoing method embodiments.

[0140] In an exemplary embodiment, this application also provides a computer-readable storage medium storing computer program instructions thereon; when the computer program instructions are executed by an electronic device, the electronic device causes the electronic device to perform the method described in the foregoing embodiments. The computer-readable storage medium may be a non-transitory computer-readable storage medium, such as a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device.

[0141] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A port auditing method, characterized in that, The method includes: obtaining first information of multiple ports from a network management system, wherein the first information of each port includes first identification information and configuration operation information related to the port; the first identification information includes a device address and a port name; obtaining second information of multiple ports from an Operation Support System (OSS) and / or a Business Support System (BSS), wherein the second information of each port includes second identification information and service management information related to the port; the second identification information includes a device network management identifier and a port network management identifier; filtering the multiple ports based on preset port filtering rules and the first information of the multiple ports to obtain at least one port to be audited after filtering; storing the first information and second information of the same port to be audited in an audit database according to the matching relationship between the first identification information and the second identification information; the matching relationship between the first identification information and the second identification information includes: the matching relationship between the device address and the device network management identifier; and the matching relationship between the port name and the port network management identifier; extracting the service management information and configuration operation information of the port to be audited from the audit database, and determining whether the port to be audited is compliant based on the service management information and configuration operation information of the port to be audited.

2. The method according to claim 1, characterized in that, The determination of compliance of the port to be audited based on its service management information and configuration operation information includes: determining the type of the port to be audited based on the port description field in its configuration operation information; if the port to be audited is a trunk port, finding its upstream and next-hop ports using an automatic link discovery protocol; if both upstream and next-hop ports are found, determining the port to be audited as a compliant port; if neither upstream nor next-hop port is found, determining the port to be audited as a non-compliant port; if the port to be audited is a service port... In the following circumstances, if the business account order number field and / or customer name field in the business management information of the port to be audited are empty fields, the port to be audited is determined to be a non-compliant port; if the business account order number field and customer name field in the business management information of the port to be audited are not empty fields, the port to be audited is determined to be a compliant port; if the port to be audited is an idle port, if the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, the port to be audited is determined to be a non-compliant port; if the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

3. The method according to claim 2, characterized in that, The method further includes: if the port to be audited is determined to be a compliant port, setting compliance identification information for the port to be audited in the audit database; if the port to be audited is determined to be a non-compliant port, setting non-compliant identification information for the port to be audited in the audit database.

4. The method according to claim 3, characterized in that, The method further includes: receiving a port query instruction input by a user, the port query instruction including query conditions; and in response to the port query instruction, obtaining query results from the audit database, the query results including information on qualified ports that meet the query conditions and information on non-compliant ports that meet the query conditions.

5. A port auditing device, characterized in that, The device includes: a receiving module, configured to receive first information of multiple ports obtained from a network management system, wherein the first information of each port includes first identification information related to the port and configuration operation information; the first identification information includes a device address and a port name; the receiving module is further configured to obtain second information of multiple ports from an Operation Support System (OSS) and / or a Business Support System (BSS), wherein the second information of each port includes second identification information related to the port and service management information; the second identification information includes a device network management identifier and a port network management identifier; and a processing module, configured to filter the multiple ports based on preset port filtering rules and the first information of the multiple ports to obtain filtered information. The processing module is further configured to retain at least one port to be audited; and to associate and store the first information and the second information of the same port to be audited in the audit database according to the matching relationship between the first identification information and the second identification information; the matching relationship between the first identification information and the second identification information includes: the matching relationship between the device address and the device network management identifier; and the matching relationship between the port name and the port network management identifier; the processing module is further configured to extract the business management information and configuration operation information of the port to be audited from the audit database, and to determine whether the port to be audited is compliant based on the business management information and configuration operation information of the port to be audited.

6. The apparatus according to claim 5, characterized in that, The processing module is specifically used to: determine the type of the port to be audited based on the port description field in the configuration and operation information of the port to be audited; and, in the case that the port to be audited is a relay port, find the previous hop port and the next hop port of the port to be audited through the link auto-discovery protocol. If the previous hop port and the next hop port of the port to be audited are found, the port to be audited is determined to be a compliant port; If the previous hop port and / or next hop port of the port to be audited cannot be found, the port to be audited is determined to be a non-compliant port; If the port to be audited is a business port, and the business account order number field and / or customer name field in the business management information of the port to be audited are empty fields, the port to be audited is determined to be a violation port. If the business account order number field and customer name field in the business management information of the port to be audited are not empty fields, the port to be audited is determined to be a compliant port. If the port to be audited is an idle port, and the port management status field in the configuration running status of the port to be audited indicates that the port to be audited is offline, then the port to be audited is determined to be a non-compliant port. If the port management status field indicates that the port to be audited is online, the port to be audited is determined to be a compliant port.

7. The apparatus according to claim 5, characterized in that, The processing module is further configured to: when it is determined that the port to be audited is a compliant port, set compliance identification information for the port to be audited in the audit database; when it is determined that the port to be audited is a non-compliant port, set non-compliant identification information for the port to be audited in the audit database.

8. The apparatus according to claim 5, characterized in that, The receiving module is further configured to: receive a port query instruction input by a user, the port query instruction including query conditions; the processing module is further configured to: in response to the port query instruction, obtain query results from the audit database, the query results including information on qualified ports that meet the query conditions, and information on non-compliant ports that meet the query conditions.

9. An electronic device, characterized in that, The electronic device includes: a processor and a memory; the memory stores instructions executable by the processor; the processor is configured to, when executing the instructions, cause the electronic device to perform the method as described in any one of claims 1-4.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes: computer software instructions; when the computer software instructions are executed in an electronic device, the electronic device causes the electronic device to perform the method as described in any one of claims 1-4.

Images