A network connection control platform based on hardware virtualization

By using a hardware virtualization-based network connection control platform, unified control of network devices is achieved, reducing configuration and deployment difficulty, traffic demand, and maintenance costs.

CN116260723BActive Publication Date: 2025-12-09BEIJING OPTOELECTRONICS ZHIYUN COMM TECH CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202211434522.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-11-16
Publication Date
2025-12-09
Estimated Expiration
2042-11-16

AI Technical Summary

Technical Problem

The complex protocols built into traditional network devices increase the difficulty of configuration and deployment for operators, and the ever-expanding traffic demand leads to increased operation and maintenance costs.

Method used

A hardware virtualization-based network connection control platform is adopted. The network devices are hardware virtualized through the virtualization module to establish global network information. Combined with user needs, the network configuration and protocol deployment are controlled to achieve unified network connection control.

Benefits of technology

It reduces the difficulty of network configuration and deployment, reduces traffic demand, and saves on operation and maintenance costs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116260723B_ABST
    Figure CN116260723B_ABST
Patent Text Reader

Abstract

The application provides a network connection control platform based on hardware virtualization, comprising: a virtualization module, which is used for hardware virtualization of network equipment, obtaining equipment virtual information, and setting an access strategy for the equipment virtual information to obtain a set permission; a building module, which is used for building global network information based on the equipment virtual information; and a control module, which is used for controlling network configuration and protocol deployment based on the global network information and the set permission in combination with user demand to realize network connection; by building the global network information, the network configuration and protocol deployment are facilitated, and finally the network equipment is connected on the network connection control platform, so that the difficulty of configuration and deployment is reduced, and the network connection control platform realizes control operation without data operation, thereby reducing the demand for traffic and saving cost.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet, in particular to a network connection control platform based on hardware virtualization. BACKGROUND

[0002] The service standard of comprehensive communication service has become an important condition for measuring the quality of commercial buildings, and many high-end office buildings introduce "on-site communication comprehensive service" into the building to provide customers with comprehensive, convenient and cost-effective instant communication unified service, and provide timely and convenient communication service environment for the building.

[0003] High-end business office buildings are usually high-end enterprise clients, and clients have high requirements for comprehensive communication. Establishing high-quality network communication between clients and data centers is a necessary condition for realizing communication services. Traditional network equipment has too many complex protocols built-in, increasing the difficulty of operator configuration and deployment, and the demand for traffic is constantly expanding, increasing the network operation and maintenance cost. SUMMARY

[0004] The present application provides a network connection control platform based on hardware virtualization, which can master global network information and realize unified network connection control, thereby reducing configuration and deployment difficulty, reducing traffic usage and reducing operation and maintenance cost.

[0005] A network connection control platform based on hardware virtualization, comprising:

[0006] A virtualization module for hardware virtualization of network equipment to obtain device virtual information and set access policies for the device virtual information to obtain set permissions.

[0007] An establishment module for establishing global network information based on the device virtual information.

[0008] A control module for controlling network configuration and protocol deployment based on the global network information and set permissions in combination with user demand to realize network connection.

[0009] Preferably, the virtualization module comprises:

[0010] A slicing unit for logically slicing hardware in the network equipment to obtain sliced virtual resources and establishing a mapping relationship between the sliced virtual resources and the hardware.

[0011] An establishment unit for establishing virtual hardware based on the mapping relationship to obtain device virtual information.

[0012] A setting unit for setting access policies for the device virtual information based on the permission requirements of the network equipment to obtain set permissions.

[0013] Preferably, the setting unit comprises:

[0014] a range determining unit configured to analyze hardware of the network device, determine hardware performance of each hardware, and determine a permission range of each hardware based on permission requirements of the network device;

[0015] a permission setting unit configured to set an access policy for the device virtual information based on the permission range, and obtain an access permission.

[0016] Preferably, the establishing module comprises:

[0017] a node establishing unit configured to receive the device virtual information, establish a network node based on a device identifier in the device virtual information, and store a network protocol corresponding to the device identifier in the network node;

[0018] a layering unit configured to divide the network node into a plurality of node levels based on the device identifier, and layer the network node based on the node levels, to obtain a plurality of layers of network nodes;

[0019] a structure establishing unit configured to establish an identifier feature of each layer of network nodes, and establish an intra-layer network structure;

[0020] an information determining unit configured to establish an inter-layer network structure based on the identifier feature and the intra-layer network structure, and finally obtain a global network structure and global network information.

[0021] Preferably, the structure establishing unit comprises:

[0022] a node judging unit configured to judge whether there is a communication connection between the network nodes of each layer based on the identifier feature of each layer of network nodes;

[0023] if yes, determine a node position of the network nodes of the layer, determine a communication path between the network nodes of the layer and a path distance corresponding to the communication path according to the communication connection and the node position, and establish the intra-layer network structure based on the network nodes and the path distance;

[0024] otherwise, determine a node position of the network nodes of the layer, and establish the intra-layer network structure based on the node position.

[0025] Preferably, the information determining unit comprises:

[0026] The structure determining unit is configured to determine layer communication connections between network nodes in different layers based on the identification features of the network nodes in each layer, and determine layer connection relationships between the network nodes in the layer communication connections, connect communication paths between the layers according to node positions of the network nodes and the layer connection relationships, and determine path distances corresponding to the communication paths, and establish an inter-layer network structure based on the layer connection relationships and the path distances.

[0027] The information obtaining unit is configured to verify and adjust the intra-layer network structure and the inter-layer network structure based on the network protocol, integrate a global network structure, and obtain global network information based on the global network structure, the network protocol, and the communication paths and the communication distances.

[0028] Preferably, the control module comprises:

[0029] The relationship determining unit is configured to determine a target network device that needs to be connected based on a requirement of a user, determine a target network node corresponding to the target network device based on the global network information, and determine a target connection relationship of the target network node.

[0030] The classification unit is configured to determine a level of the target network node, and classify the target connection relationship based on the level to obtain a target inter-layer connection and a target intra-layer connection.

[0031] The path selecting unit is configured to select a first optimal network path satisfying the target intra-layer connection and a second optimal network path satisfying the target inter-layer connection from the global network information.

[0032] The protocol deploying unit is configured to determine protocol deployment on the target network device based on the first optimal network path and the second optimal network path in combination with the set permission.

[0033] Preferably, the path selecting unit comprises:

[0034] The path determining unit is configured to obtain a plurality of first network paths satisfying the target intra-layer connection and a plurality of second network paths satisfying the target inter-layer connection from the global network information.

[0035] The path screening unit is configured to perform path distance analysis on the plurality of first network paths to select the first optimal network path, and perform analysis on the plurality of second network paths based on the first optimal network path to select the second optimal network path.

[0036] Preferably, the protocol deploying unit comprises:

[0037] A protocol determining unit is configured to select an initial network protocol matching the first optimal network path and the second optimal network path from network protocols.

[0038] A configuration unit is configured to determine a permission distribution between the target network devices based on the set permissions, and perform network configuration of resources for the target network devices based on the permission distribution.

[0039] A deployment unit is configured to determine a protocol position of the network configuration result in the initial network protocol, add a new protocol corresponding to the network configuration result in the protocol position, obtain a target network protocol, perform protocol deployment for the target network devices according to device identification information in the target network protocol, obtain a protocol deployment result, and control network connection.

[0040] Preferably, the target interlayer connection and the target intralayer connection determine initial nodes and termination nodes of network nodes.

[0041] Other features and advantages of the present application will be further described in the following description, and will become apparent from the description, or will be learned through practice of the present application. The objects and other advantages of the present application will be realized and achieved by the structure particularly pointed out in the written description, claims, and drawings.

[0042] The technical solutions of the present application will be further described in detail below with the help of drawings and examples. BRIEF DESCRIPTION OF DRAWINGS

[0043] The accompanying drawings are included to provide a further understanding of the present application, and constitute a part of the specification, illustrate the present application, and explain the present application together with the embodiments of the present application, and do not constitute a limitation on the present application. In the drawings:

[0044] Figure 1 It is a structure diagram of a network connection control platform based on hardware virtualization in an embodiment of the present application;

[0045] Figure 2 It is a structure diagram of the establishing module in the embodiment of the present application;

[0046] Figure 3 It is a structure diagram of the control module in the embodiment of the present application. DETAILED DESCRIPTION

[0047] The preferred embodiments of the present application will be described below in combination with the drawings, and it should be understood that the preferred embodiments described herein are only used to explain and illustrate the present application, and do not constitute a limitation on the present application.

[0048] Embodiment 1

[0049] The embodiment of the present application provides a network connection control platform based on hardware virtualization, which comprises the following steps of: Figure 1 As shown in the figure, comprising:

[0050] A virtualization module is configured to perform hardware virtualization on a network device, obtain device virtual information, and set an access strategy for the device virtual information to obtain a set permission.

[0051] A building module is configured to build global network information based on the device virtual information.

[0052] A control module is configured to control network configuration and protocol deployment based on the global network information and the set permission in combination with user demand, and realize network connection.

[0053] In the embodiment, the hardware virtualization of the network device hides the real computer hardware from the user, and shows another abstract computing platform, which can break away from the limitation of hardware for network connection control.

[0054] In the embodiment, the set permission is to set access to hardware resources.

[0055] In the embodiment, the global network information is network information between all network devices accessing the network connection control platform.

[0056] The above design scheme has the beneficial effects that: by performing hardware virtualization on the network device, the network connection control platform is more easily controlled and operated on the hardware device, by building global network information, the network configuration and protocol deployment are facilitated, and finally the network device connection is realized on the network connection control platform, the configuration and deployment difficulty is reduced, and the network connection control platform only realizes the control operation and does not involve the data operation, thereby reducing the demand for traffic and saving the cost.

[0057] Embodiment 2

[0058] Based on the embodiment 1, the embodiment of the present application provides a network connection control platform based on hardware virtualization, and the virtualization module comprises the following steps of:

[0059] A slicing unit is configured to logically slice the hardware in the network device to obtain sliced virtual resources, and build a mapping relationship between the sliced virtual resources and the hardware.

[0060] A building unit is configured to build virtualized hardware based on the mapping relationship to obtain device virtual information.

[0061] A setting unit is configured to set an access strategy for the device virtual information based on the permission requirement of the network device to obtain a set permission.

[0062] In this embodiment, based on the mapping relationship, the virtual hardware is established by adding corresponding hardware identifiers in the slice virtual resource based on the mapping relationship to obtain device virtual information.

[0063] In this embodiment, the set permission is the access permission of the network device for different users to the hardware.

[0064] The above design scheme has the beneficial effects that: by hardware virtualization of the network device, device virtual information is obtained, and access strategy setting is performed on the device virtual information to obtain a set permission, thereby providing a basis for network connection control.

[0065] Embodiment 3

[0066] Based on the basis of embodiment 2, the present embodiment provides a network connection control platform based on hardware virtualization, and the setting unit comprises:

[0067] A range determination unit is configured to analyze the hardware of the network device, determine the hardware performance of each hardware, and determine the permission range of each hardware based on the permission requirement of the network device.

[0068] The minimum value of the permission range The calculation formula is as follows:

[0069]

[0070] Wherein, The permission allocation standard value of the permission requirement of the network device to the hardware, The performance value of the hardware performance of the hardware, which is (1, 10), The attribute value of the hardware performance, which is (0, 1), The minimum permission value of the permission requirement of the network device to the hardware, e represents a natural constant, and the value is 2.72.

[0071] The maximum value of the permission range The calculation formula is as follows:

[0072]

[0073] Wherein, The maximum permission value of the permission requirement of the network device to the hardware.

[0074] A permission setting unit is configured to set an access strategy for the device virtual information based on the permission range to obtain an access permission, specifically:

[0075] Determine the user feature corresponding to the permission range, set the first access permission for the user with the user feature, and set the second access permission for the user without the user feature;

[0076] Based on the second access permission and the second access permission, the device virtual information is accessed, and the access permission is obtained.

[0077] In this embodiment, the permission of the first access permission is greater than the second access permission.

[0078] In this embodiment, the permission allocation standard value corresponds to the historical permission value of the hardware, and the current permission range is calculated by taking the historical permission value of the hardware as a reference to provide a value basis.

[0079] In this embodiment, the performance value of the hardware performance is related to the actual configuration of the hardware. The better the configuration is, the greater the corresponding performance value is, and the greater the corresponding permission value range is.

[0080] In this embodiment, the attribute value of the hardware performance is related to the function of the hardware, and is pre-set. Different functions correspond to different attribute values.

[0081] In this embodiment, the minimum permission value and the maximum permission value of the hardware according to the permission requirement of the network device are also determined according to the historical permission value of the hardware, which has the same use as the permission allocation standard value.

[0082] In this embodiment, the product of the attribute value and the permission allocation standard value is used to represent the standard function value of the hardware, which is used as a reference basis for the value of the permission range.

[0083] The beneficial effects of the above design scheme are: by setting the access strategy of the device virtual information, the set permission is obtained, and in the process of obtaining the permission range, the historical permission value of the hardware and the function and performance of the hardware are considered, the accuracy of the permission setting is guaranteed, and the network connection control is provided.

[0084] Embodiment 4

[0085] Based on the basis of embodiment 1, the application provides a network connection control platform based on hardware virtualization, as shown in Figure 2 The establishment module comprises:

[0086] The node establishment unit is configured to receive the device virtual information, establish a network node based on the device identifier in the device virtual information, and store the network protocol corresponding to the device identifier in the network node.

[0087] hierarchical unit, configured to divide the network nodes into a plurality of node levels based on the device identities, and hierarchize the network nodes based on the node levels to obtain a plurality of layers of network nodes;

[0088] structure establishing unit, configured to establish an identification feature of each layer of network nodes, and establish an intra-layer network structure;

[0089] information determining unit, configured to establish an inter-layer network structure based on the identification feature and the intra-layer network structure, and finally obtain a global network structure and global network information.

[0090] In this embodiment, one node has multiple network protocols.

[0091] In this embodiment, the node levels are, for example, one level for mobile clients, one level for sub-servers, and one level for total servers.

[0092] In this embodiment, the intra-layer network structure is the structure between network nodes in one level, and the inter-layer network structure is the structure between network nodes in adjacent levels.

[0093] In this embodiment, the structure establishing unit comprises:

[0094] node judging unit, configured to judge whether there is a communication connection between the network nodes in each layer based on the identification feature of each layer of network nodes;

[0095] If yes, the node positions of the network nodes in the layer are determined, and a communication path and a path distance corresponding to the communication path between the network nodes in the layer are determined according to the communication connection and the node positions, and the intra-layer network structure is established based on the network nodes and the path distance;

[0096] Otherwise, the node positions of the network nodes in the layer are determined, and the intra-layer network structure is established based on the node positions.

[0097] In this embodiment, the information determining unit comprises:

[0098] structure determining unit, configured to determine a layer communication connection between the network nodes in adjacent layers based on the identification feature of each layer of network nodes, and determine a layer connection relationship between the network nodes in the layer communication connection, connect a communication path between the layers and a path distance corresponding to the communication path according to the node positions of the network nodes and the layer connection relationship, and establish an inter-layer network structure based on the layer connection relationship and the path distance;

[0099] An information acquisition unit is configured to verify and adjust the intra-layer network structure and the inter-layer network structure based on the network protocol, integrate the global network structure, and obtain the global network information based on the global network structure, the network protocol, the communication path and the communication distance.

[0100] The above design scheme has the beneficial effect that: by taking the device as a network node, according to the device identifier in the device virtual information and the network protocol, and by layering analysis of the network node, the final global network structure and global network information are obtained, the accuracy of the obtained global network structure is ensured, and a basis is provided for network connection control.

[0101] Embodiment 5

[0102] Based on the basis of embodiment 4, the embodiment of the application provides a network connection control platform based on hardware virtualization, and the structure establishment unit comprises:

[0103] A node judgment unit is configured to judge whether there is a communication connection between the network nodes of the layer based on the identification features of each layer network node.

[0104] If yes, the node positions of the network nodes of the layer are determined, and the communication path between the network nodes of the layer and the path distance corresponding to the communication path are determined according to the communication connection and the node positions, and the intra-layer network structure is established based on the network nodes and the path distance.

[0105] Otherwise, the node positions of the network nodes of the layer are determined, and the intra-layer network structure is established based on the node positions.

[0106] In this embodiment, the basis for judging whether there is a communication connection between the network nodes of the layer is determined according to the business relationship between the network nodes.

[0107] In this embodiment, the communication path is all the paths that may exist between two network nodes according to the node positions, and the path distance is determined according to the node positions.

[0108] The above design scheme has the beneficial effect that: by determining the connection relationship between the network nodes of the same layer according to the business relationship, the intra-layer network structure is established, and the comprehensiveness of the obtained intra-layer network structure is ensured.

[0109] Embodiment 6

[0110] Based on the basis of embodiment 5, the embodiment of the application provides a network connection control platform based on hardware virtualization, and the information determination unit comprises:

[0111] The structure determining unit is configured to determine layer communication connections between network nodes in different layers based on the identification features of the network nodes in each layer, and determine layer connection relationships between the network nodes in the layer communication connections, connect communication paths between the layers according to node positions of the network nodes, layer connection relationships, communication paths between the layers and path distances corresponding to the communication paths, and establish an inter-layer network structure based on the layer connection relationships and the path distances.

[0112] The information obtaining unit is configured to verify and adjust the intra-layer network structure and the inter-layer network structure based on the network protocol, integrate a global network structure, and obtain global network information based on the global network structure, the network protocol, communication paths and communication distances.

[0113] In this embodiment, the network protocol corresponding to the intra-layer network structure and the inter-layer network structure is different, and the communication modes are also different.

[0114] In this embodiment, verifying and adjusting the intra-layer network structure and the inter-layer network structure based on the network protocol specifically includes verifying all connections in the intra-layer network structure and the inter-layer network structure based on the network protocol, determining whether the network protocol is satisfied, and deleting corresponding connections if the network protocol is not satisfied, to obtain a new network structure.

[0115] The above design scheme has the following beneficial effects: the intra-layer network structure is first established, then the inter-layer network structure is established, and finally the global network structure is obtained, the connection relationships between the network nodes are determined from inside to outside, the orderliness of the process of determining the global network structure is ensured, and the global network structure is verified and adjusted according to the network protocol after being established, the accuracy of the process of determining the global network structure is ensured, and a basis is provided for network connection control.

[0116] Embodiment 7

[0117] Based on the basis of Embodiment 1, the embodiment of the application provides a network connection control platform based on hardware virtualization, as shown in Figure 3 The control module includes:

[0118] The relationship determining unit is configured to determine a target network device that needs to be connected based on a requirement of a user, determine a target network node corresponding to the target network device based on the global network information, and determine a target connection relationship of the target network node.

[0119] The classification unit is configured to determine a level of the target network node, classify the target connection relationship based on the level, and obtain a target inter-layer connection and a target intra-layer connection.

[0120] The path selection unit is configured to select a first optimal network path meeting the target intra-layer connection and a second optimal network path meeting the target inter-layer connection from the global network information.

[0121] The protocol deployment unit is configured to determine protocol deployment on the target network device based on the first optimal network path and the second optimal network path and in combination with the set permissions.

[0122] In this embodiment, the target inter-layer connection and the target intra-layer connection determine the initial node and the terminal node of the network node.

[0123] In this embodiment, the path selection unit comprises:

[0124] The path determination unit is configured to obtain a plurality of first network paths meeting the target intra-layer connection and a plurality of second network paths meeting the target inter-layer connection from the global network information.

[0125] The path screening unit is configured to perform path distance analysis on the plurality of first network paths to select a first optimal network path, and perform analysis on the plurality of second network paths based on the first optimal network path to select a second optimal network path.

[0126] In this embodiment, the protocol deployment unit comprises:

[0127] The protocol determination unit is configured to select an initial network protocol matching the first optimal network path and the second optimal network path from network protocols.

[0128] The configuration unit is configured to determine permission allocation between the target network devices based on the set permissions, and perform network configuration of resources on the target network devices based on the permission allocation.

[0129] The deployment unit is configured to determine a protocol position of the network configuration result in the initial network protocol, add a new protocol corresponding to the network configuration result in the protocol position to obtain a target network protocol, perform protocol deployment on the target network device according to device identification information in the target network protocol to obtain a protocol deployment result, and control network connection.

[0130] The above design scheme has the following beneficial effects: The protocol is deployed by obtaining an optimal path according to global network information, network connection is controlled, optimal selection of network connection is realized, protocol deployment is performed from a logical layer based on global network information, and the difficulty of configuration and deployment is reduced. The network connection control platform only controls operation and does not involve operation on data, thereby reducing the demand for traffic and saving cost.

[0131] Embodiment 8

[0132] Based on the basis of embodiment 7, the embodiment of the application provides a network connection control platform based on hardware virtualization, the path selection unit comprises:

[0133] The path determination unit is configured to obtain a plurality of first network paths satisfying the target intra-layer connection from the global network information, and obtain a plurality of second network paths satisfying the target inter-layer connection.

[0134] The path screening unit is configured to perform path distance analysis on the plurality of first network paths to obtain a first optimal network path, and perform analysis on a plurality of second network paths based on the first optimal network path to obtain a second optimal network path.

[0135] The beneficial effects of the above design scheme are: by first selecting the path of intra-layer connection, the path of inter-layer connection is selected in turn, the optimality of automatic path selection is ensured, and the deployment of the protocol is facilitated.

[0136] Embodiment 9

[0137] Based on the basis of embodiment 7, the embodiment of the application provides a network connection control platform based on hardware virtualization, the protocol deployment unit comprises:

[0138] The protocol determination unit is configured to select an initial network protocol matching the first optimal network path and the second optimal network path from a network protocol.

[0139] The configuration unit is configured to determine the permission allocation between the target network devices based on the set permission, and perform network configuration of resources on the target network devices based on the permission allocation.

[0140] The deployment unit is configured to determine the protocol position of the network configuration result in the initial network protocol, add a new protocol corresponding to the network configuration result in the protocol position, obtain a target network protocol, perform protocol deployment on the target network devices according to the device identification information in the target network protocol, obtain a protocol deployment result, and control the connection of the network.

[0141] In this embodiment, the network configuration is used to determine the hardware selection on the target device used when implementing network connection.

[0142] In this embodiment, the protocol deployment result determines the selection of the path in the network connection process and the hardware driver selected when connecting the network.

[0143] The network connection control method has the advantages that the deployment of the new protocol is implemented according to the network configuration determined according to the set permission, the protocol deployed can select the path in the network connection process and the hardware driver selected when connecting the network, network connection control is implemented, and the operation on data is not involved, thereby reducing the demand for traffic and saving cost.

[0144] Embodiment 10

[0145] Based on the basis of Embodiment 7, the embodiment of the application provides a network connection control platform based on hardware virtualization, and the target inter-layer connection and the target intra-layer connection determine the initial node and the terminal node of the network node.

[0146] Obviously, various modifications and changes can be made to the present application by those skilled in the art without departing from the spirit and scope of the present application. Thus, it is intended that the present application cover the modifications and changes as long as they come within the scope of the claims of the present application and their equivalents.

Claims

1. A hardware virtualization based network connection control platform, characterized by, The method comprises the following steps: The virtualization module is used for hardware virtualization of the network device to obtain device virtual information, and access policy setting is performed on the device virtual information to obtain a set permission, which comprises the following steps: The slicing unit is used for logical slicing of the hardware in the network device to obtain sliced virtual resources, and a mapping relationship between the sliced virtual resources and the hardware is established; The establishing unit is used for establishing virtualized hardware based on the mapping relationship to obtain the device virtual information; The setting unit is used for access policy setting on the device virtual information based on the permission requirement of the network device to obtain the set permission; The setting unit comprises the following steps: The range determining unit is used for analyzing the hardware of the network device to determine the hardware performance of each hardware, and determining the permission range of each hardware based on the permission requirement of the network device; The minimum value of the range of permissions The calculation formula is as follows: wherein, represents a performance value of a hardware performance of the hardware, and takes a value of (1, 10), represents a performance value of a hardware performance of the hardware, and takes a value of (1, 10), represents a performance value of a hardware performance of the hardware, and takes a value of (1, 10), represents a minimum privilege value of the hardware required by the privilege of the network device, and e represents a natural constant, and takes a value of 2.72; The maximum value of the range of permissions The formula for calculating this is as follows: wherein, represents a value of the highest privilege of the hardware required by the permission of the network device; The permission setting unit is used for access policy setting on the device virtual information based on the permission range to obtain the access permission, which comprises the following steps: Determine the user features corresponding to the permission range, set the first access permission for the user existing the user features, and set the second access permission for the user not existing the user features; Based on the second access permission and the second access permission, access policy setting is performed on the device virtual information to obtain the access permission; The establishing module is used for establishing global network information based on the device virtual information; The control module is used for controlling network configuration and protocol deployment based on the global network information and the set permission in combination with user demand to realize network connection.

2. The hardware virtualization-based network connection control platform of claim 1, wherein, The establishing module comprises the following steps: The node establishing unit is used for receiving the device virtual information, and establishing a network node based on the device identifier in the device virtual information, and storing the network protocol corresponding to the device identifier in the network node; The hierarchical unit is used for dividing the network node into multiple node levels based on the device identifier, and performing hierarchical division on the network node based on the node levels to obtain multiple layers of network nodes; The structure establishing unit is used for establishing the identifier feature of each layer of network nodes, and establishing the intra-layer network structure; The information determining unit is used for establishing the inter-layer network structure based on the identifier feature and the intra-layer network structure, and finally obtaining the global network structure and the global network information.

3. The hardware virtualization-based network connectivity control platform of claim 2, wherein, The structure establishing unit comprises the following steps: The node judging unit is used for judging whether there is a communication connection between the network nodes of the layer based on the identifier feature of each layer of network nodes; If yes, the node position of the network nodes of the layer is determined, and the communication path between the network nodes of the layer and the path distance corresponding to the communication path are determined according to the communication connection in combination with the node position, and the intra-layer network structure is established based on the network nodes and the path distance; Otherwise, the node position of the network nodes of the layer is determined, and the intra-layer network structure is established based on the node position.

4. The hardware virtualization-based network connectivity control platform of claim 3, wherein, The information determining unit comprises the following steps: The structure determining unit is configured to determine layer communication connections between network nodes in different layers based on the identification features of the network nodes in each layer, and determine layer connection relationships between the network nodes in the layer communication connections, connect communication paths between the layers according to node positions of the network nodes and the layer connection relationships, and determine path distances corresponding to the communication paths, and establish an inter-layer network structure based on the layer connection relationships and the path distances; The information obtaining unit is configured to verify and adjust the intra-layer network structure and the inter-layer network structure based on the network protocol, integrate to obtain a global network structure, and obtain global network information based on the global network structure, the network protocol, and the communication paths and the communication distances.

5. The hardware virtualization-based network connectivity control platform of claim 1, wherein, The control module comprises: The relationship determining unit is configured to determine a target network device that needs to be connected based on a requirement of a user, determine a target network node corresponding to the target network device based on the global network information, and determine a target connection relationship of the target network node; The classification unit is configured to determine a level of the target network node, and classify the target connection relationship based on the level to obtain a target inter-layer connection and a target intra-layer connection; The path selecting unit is configured to select a first optimal network path satisfying the target intra-layer connection and a second optimal network path satisfying the target inter-layer connection from the global network information; The protocol deploying unit is configured to determine protocol deployment of the target network device based on the first optimal network path and the second optimal network path in combination with the set permission.

6. The hardware virtualization-based network connectivity control platform of claim 5, wherein, The path selecting unit comprises: The path determining unit is configured to obtain a plurality of first network paths satisfying the target intra-layer connection and a plurality of second network paths satisfying the target inter-layer connection from the global network information; The path screening unit is configured to perform path distance analysis on the plurality of first network paths to select the first optimal network path, and perform analysis on the plurality of second network paths based on the first optimal network path to select the second optimal network path.

7. The hardware virtualization-based network connectivity control platform of claim 5, wherein, The protocol deploying unit comprises: The protocol determining unit is configured to select an initial network protocol matching the first optimal network path and the second optimal network path from network protocols; The configuration unit is configured to determine permission allocation between the target network devices based on the set permission, and perform network configuration of resources on the target network devices based on the permission allocation; The deploying unit is configured to determine a protocol position of the network configuration result in the initial network protocol, add a new protocol corresponding to the network configuration result in the protocol position to obtain a target network protocol, perform protocol deployment on the target network devices according to device identification information in the target network protocol to obtain a protocol deployment result, and control network connection.

8. The hardware virtualization-based network connectivity control platform of claim 5, wherein, The target inter-layer connection and the target intra-layer connection determine initial nodes and termination nodes of the network nodes.

Citation Information

Patent Citations

  • Global network state management

    CN115037624A