Network element data exception processing method and device, computer device, and storage medium
Patent Information
- Application Number
- CN202310877018.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-07-17
- Publication Date
- 2026-10-13
- Estimated Expiration
- 2043-07-17
AI Technical Summary
[0003]新一代运营系统中,由于5GC网元或数据通信设备的版本升级或参数调整,导致上层应用监控无法有效解析5GC网元或数据通信设备输出的数据,即存在通信受阻的情况,需要对相应5GC网元或数据通信设备输出的数据进行调整,才能保证有效通信
[0041]上述网元数据异常处理方法、装置、计算机设备和存储介质,方法包括:采集目标网元输出的目标网元数据;基于通信标准定义的标准数据格式,对所述目标网元数据进行格式校验,确定所述目标网元数据的数据校验结果;在所述数据校验结果为数据格式异常的情况下,生成对所述目标网元的异常告警信息。本申请通过基于通信标准定义的标准数据格式,识别目标网元数据是否格式异常,并对产生格式异常数据的目标网元进行异常告警,可快速识别系统内出现故障的网元,进而,提高系统运维效率。
Smart Images

Figure CN116708154B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of data analysis technology, and in particular to a method, apparatus, computer equipment, and storage medium for handling network data anomalies. Background Technology
[0002] With the continuous development of communication technology, the new generation of operating systems requires centralized and unified control and data acquisition of 5GC (5th Generation Mobile Communication Technology core) network elements or data communication equipment in order to achieve comprehensive monitoring of upper-layer applications.
[0003] In the new generation of operating systems, version upgrades or parameter adjustments to 5GC network elements or data communication equipment can cause upper-layer application monitoring to be unable to effectively parse the data output by these devices, resulting in communication disruptions. Adjustments to the output data of the corresponding 5GC network elements or data communication equipment are necessary to ensure effective communication. However, existing technologies cannot promptly detect faulty network elements outputting abnormal data, thus affecting the comprehensive monitoring of 5GC network elements or data communication equipment by upper-layer applications, as well as the real-time analysis of critical network data.
[0004] Therefore, improving the efficiency of locating faulty network elements within the operating system has become a technical problem that needs to be solved. Summary of the Invention
[0005] Therefore, it is necessary to provide a method, apparatus, computer equipment, and storage medium for handling network data anomalies that can quickly locate faulty network elements within an operating system, addressing the aforementioned technical problems.
[0006] Firstly, this application provides a method for handling network data anomalies. The method includes:
[0007] Collect target network data output by the target network element;
[0008] Based on the standard data format defined by the communication standard, the target network data element is format-validated to determine the data validation result of the target network data element.
[0009] If the data verification result indicates an abnormal data format, an abnormal alarm message is generated for the target network element.
[0010] In one embodiment, after generating abnormal alarm information for the target network element, the method further includes:
[0011] The abnormal alarm information is sent to the network management system, so that the network management system sends the abnormal alarm information to the target network element, and the target network element revises and adjusts the output network data.
[0012] In one embodiment, after generating abnormal alarm information for the target network element, the method further includes:
[0013] Add the target network element to the list of network elements with abnormal data;
[0014] According to the set period, the network data output by each network element in the list of network elements with abnormal data is audited.
[0015] In one embodiment, the method further includes:
[0016] When the target network data output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated.
[0017] The recovery alarm information is sent to the network management system to eliminate the abnormal alarms on the target network element in the network management system.
[0018] In one embodiment, the target network metadata is format-validated based on a standard data format defined by a communication standard, and the data validation result of the target network metadata is determined, including:
[0019] The target network data is parsed;
[0020] In the event that the target network metadata parsing fails, the target network metadata is format-validated based on the standard data format defined by the communication standard to determine the data validation result of the target network metadata.
[0021] In one embodiment, the abnormal alarm information includes the following information:
[0022] The identification information of the target network element;
[0023] The data type of the network data; and
[0024] The data verification result.
[0025] Secondly, this application also provides a network data anomaly processing device. The device includes:
[0026] The data acquisition module is used to collect target network data output by the target network element;
[0027] The data verification module is used to perform format verification on the target network data based on the standard data format defined by the communication standard, and to determine the data verification result of the target network data.
[0028] The alarm generation module is used to generate abnormal alarm information for the target network element when the data verification result shows that the data format is abnormal.
[0029] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0030] Collect target network data output by the target network element;
[0031] Based on the standard data format defined by the communication standard, the target network data element is format-validated to determine the data validation result of the target network data element.
[0032] If the data verification result indicates an abnormal data format, an abnormal alarm message is generated for the target network element.
[0033] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:
[0034] Collect target network data output by the target network element;
[0035] Based on the standard data format defined by the communication standard, the target network data element is format-validated to determine the data validation result of the target network data element.
[0036] If the data verification result indicates an abnormal data format, an abnormal alarm message is generated for the target network element.
[0037] Fifthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:
[0038] Collect target network data output by the target network element;
[0039] Based on the standard data format defined by the communication standard, the target network data element is format-validated to determine the data validation result of the target network data element.
[0040] If the data verification result indicates an abnormal data format, an abnormal alarm message is generated for the target network element.
[0041] The aforementioned method, apparatus, computer equipment, and storage medium for handling network data anomalies include: collecting target network data output by a target network element; performing format verification on the target network data based on a standard data format defined by communication standards to determine the data verification result of the target network data; and generating an anomaly alarm message for the target network element if the data verification result indicates a data format anomaly. This application, by identifying whether target network data is formatted abnormally based on a standard data format defined by communication standards and issuing an anomaly alarm for the target network element generating the formatted abnormal data, can quickly identify faulty network elements within the system, thereby improving system operation and maintenance efficiency. Attached Figure Description
[0042] Figure 1 This is an application environment diagram of a network data anomaly handling method in one embodiment;
[0043] Figure 2 This is a flowchart illustrating a network data anomaly handling method in one embodiment;
[0044] Figure 3 This is a flowchart illustrating the process of auditing network data in one embodiment;
[0045] Figure 4 This is a schematic diagram of the alarm recovery process in another embodiment;
[0046] Figure 5 This is a flowchart illustrating a network data anomaly handling method in another embodiment;
[0047] Figure 6 This is a structural block diagram of a network data anomaly processing device in one embodiment;
[0048] Figure 7 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation
[0049] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.
[0050] As mentioned in the background section, the new generation of operating systems requires centralized and unified control and data collection of 5GC network elements or data communication equipment. Based on the monitoring needs of upper-layer applications, the collection cycle of different types of network data varies. The finest granularity of network data collection cycle is 5 minutes, while the largest granularity of network data collection cycle is 12 hours.
[0051] Data collection for 5GC network elements is carried out according to specifications. However, in actual production, network element version upgrades and parameter adjustments can cause changes in the format and content of the data output. This can lead to the inability of the new generation of operating systems to parse the files correctly, resulting in data collection anomalies. Consequently, the comprehensiveness of upper-layer application monitoring and the real-time performance of important data are affected.
[0052] Based on this, this application provides a method, apparatus, computer device, and storage medium for handling network data anomalies. By using standard data formats defined by communication standards, it identifies whether the target network data is formatted abnormally and issues an anomaly alarm to the target network element that generates the formatted abnormal data. This can quickly identify faulty network elements within the system, thereby improving system operation and maintenance efficiency and ensuring effective communication between network elements within the system.
[0053] The network data anomaly handling method or apparatus provided in this application embodiment can be applied to, for example... Figure 1 The application environment shown. For example... Figure 1 As shown, the application environment includes an unlimited number of network management systems 110, data monitoring devices 120, and target network elements 130, which are connected via network communication.
[0054] The network management system 110 manages the target network element 130. The network management system 110 can be a server providing various services, such as a backend management server supporting user operations via terminal devices. The backend management server can analyze and process received requests and other data, and feed the processing results back to the terminal device. Optionally, the server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The terminal and server can be connected directly or indirectly via wired or wireless communication; this application does not impose any restrictions.
[0055] The data monitoring device 120 can be used to collect network data output by the target network element and perform data format anomaly analysis on the network data. The data monitoring device can be various information collection devices. The data monitoring device can be registered with the network management system as a third-party device and obtain the network data output by the target network element from the network management system.
[0056] The target network element 130 can be various communication function network elements or communication equipment. For example, the communication function network element can be a PCF (Policy Control Function) network element, an AMF (Access and Mobility Management Function) network element, an SMF (Session Management Function) network element, or a UPF (User Plane Function) network element, etc. The communication equipment can be a router, switch, modem, or optical transceiver, etc.
[0057] The network can be a wireless or wired network, which uses standard communication technologies and / or protocols. The network is typically the Internet, but can be any network, including but not limited to Local Area Networks (LANs), Metropolitan Area Networks (MANs), Wide Area Networks (WANs), mobile, wired or wireless networks, private networks, or any combination of virtual private networks. In some embodiments, technologies and / or formats, including Hyper Text Markup Language (HTML), Extensible Markup Language (XML), etc., are used to represent data exchanged over the network. Furthermore, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Networks (VPNs), and Internet Protocol Security (IPsec) can be used to encrypt all or some links. In other embodiments, custom and / or dedicated data communication technologies may be used to replace or supplement the aforementioned data communication technologies.
[0058] Those skilled in the art will know that Figure 1 The number of network management systems, data monitoring devices, and target network elements shown is merely illustrative; any number of these can be used depending on actual needs. This application does not limit this.
[0059] The embodiments of this application will now be described in detail with reference to the accompanying drawings and examples.
[0060] In one embodiment, such as Figure 2As shown, a method for handling network data anomalies is provided, which can be applied to... Figure 1 Taking the data monitoring equipment in the middle as an example, the following steps are included:
[0061] S202, Collect target network data output by the target network element.
[0062] The target network element can be various communication devices or functional network elements within the core network, such as routers, switches, UPF (User Plane Function) network elements, or SMF (Session Management Function) network elements, etc. The target network element data can be data of various types, such as data packets, RRC (Radio Resource Control) signaling, or messages.
[0063] Optionally, data monitoring equipment can periodically collect target network element data output by the target network element to monitor the data output by the target network element in real time.
[0064] Optionally, the data monitoring device is communicatively connected to the network management system, and can obtain target network data output by the target network elements managed by the network management system. The data monitoring device can register with the network management system to obtain target network data output by the target network elements managed by the network management system in a timely manner.
[0065] S204, based on the standard data format defined by the communication standard, performs format verification on the target network data and determines the data verification result of the target network data.
[0066] The standard data format defined by the communication standard can be the data format defined by the 3GPP (3rd Generation Partnership Project) standard, or the data format uniformly specified by the network management system.
[0067] Optionally, the data monitoring equipment is pre-configured with a standard data format defined by the communication standard. After successfully collecting the target network element's output data, the data monitoring equipment performs format verification on the target network element data according to the pre-configured standard data format. When the target network element data is consistent with the standard data format, the data verification result is determined to be normal; when the target network element data is inconsistent with the standard data format, the data verification result is determined to be abnormal.
[0068] S206: If the data verification result indicates that the data format is abnormal, generate an abnormal alarm message for the target network element.
[0069] The data verification result is either "data format is normal" or "data format is abnormal". The data verification result may also include the data format and / or data type of the target network element information.
[0070] Optionally, the abnormal alarm information includes the following: the target network element's identification information and the data type of the network element's data, as well as the data verification result. If the data verification result indicates an abnormal data format, the data monitoring device generates an abnormal alarm information for the target network element based on its identification information, the data type of the network element's data, and the data verification result. The target network element's identification information is used to uniquely identify the target network element; this identification information can be a device identifier or a network identifier. The data type can be request data, response data, RRC signaling, messages, or data packets, etc.
[0071] In this embodiment, by using standard data formats defined by communication standards, it is possible to identify whether the target network data is in an abnormal format, and to issue an anomaly alarm for the target network element that generates abnormal data. This can quickly identify faulty network elements in the system, thereby improving system operation and maintenance efficiency.
[0072] In one embodiment, to prevent the target network element from continuing to output data with an abnormal data format, which could cause other network elements to be unable to parse the data output by the target network element and lead to communication anomalies, the method optionally includes, after generating an anomaly alarm message for the target network element, sending the anomaly alarm message to the network management system, so that the network management system sends the anomaly alarm message to the target network element, and the target network element revises and adjusts the output network data. By forwarding the anomaly alarm message to the target network element through the network management system, the target network element is reminded to revise and adjust the format of the output data, thereby resolving the impact caused by the target network element continuing to output data with an abnormal data format.
[0073] Based on the above embodiments, the network management system forwards abnormal alarm information to the target network element, reminding the target network element to revise and adjust the format of the output data. To facilitate knowing whether the target network element has revised and adjusted the format of the output data, the network data output by the target network element can be periodically audited, such as... Figure 3 As shown, after generating abnormal alarm information for the target network element, the method further includes:
[0074] S302, Add the target network element to the list of network elements with abnormal data.
[0075] The list of network elements with abnormal data is used to record network elements whose output data has abnormal format.
[0076] Optionally, a list of network elements with abnormal data is maintained on the data monitoring device. During the process of format verification of network data, the corresponding network elements whose data verification results are abnormal are added to the list of network elements with abnormal data format, so as to monitor the data output by each network element in the list of network elements with abnormal data format.
[0077] S304, according to the set period, audit the network data output by each network element in the list of network elements with abnormal data.
[0078] The set period can be a freely set period, such as every 10 seconds, every minute, or every hour, etc.
[0079] For example, taking a set period of 1 minute, the data monitoring equipment can audit the network data output by each network element in the list of network elements with abnormal data every minute. Here, the audit can be a comparison and verification of the data format.
[0080] Based on the above embodiments, during the monitoring of the data output of each network element in the list of abnormal data network elements, it is necessary to clear the alarms of network elements whose data formats have been revised and adjusted, so as to promptly inform the network management system that the data output of that network element is normal. Figure 4 As shown, the above method may further include the following steps:
[0081] S402: When the target network data output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated.
[0082] Optionally, the alarm recovery information is used to instruct the network management system to eliminate abnormal alarms to the target network element, and the alarm recovery information may carry the identification information of the target network element.
[0083] S404 sends the recovery alarm information to the network management system to eliminate the abnormal alarms on the target network element in the network management system.
[0084] Optionally, the data monitoring equipment sends the recovery alarm information to the network management system. The network management system can then eliminate the abnormal alarms for the target network element based on the identifier of the target network element in the recovery alarm information. The network management system can be a server or network device that manages various network elements or communication equipment, such as an EMS (Equipment Management System) network management system.
[0085] In one embodiment, the target network metadata is format-validated based on the standard data format defined by the communication standard to determine the data validation result. This includes: parsing the target network metadata; and, if parsing fails, performing format validation on the target network metadata based on the standard data format defined by the communication standard to determine the data validation result. The data monitoring device can first parse the target network metadata. If parsing fails, it indicates an anomaly in the target network metadata. In this case, the data monitoring device performs format validation on the target network metadata based on the standard data format defined by the communication standard to determine the data format of the target network metadata. This facilitates adjustments to the target network element to ensure that the target network element outputs network metadata with the correct data format.
[0086] For example, this embodiment provides an optional implementation process based on the above embodiments, see [link to example]. Figure 5 The diagram shows another method for handling network data anomalies, which specifically includes the following steps:
[0087] S502 collects target network data output by the target network element.
[0088] S504, based on the standard data format defined by the communication standard, performs format verification on the target network data and determines the data verification result of the target network data.
[0089] S506 generates an abnormal alarm message for the target network element when the data verification result indicates that the data format is abnormal.
[0090] S508 sends abnormal alarm information to the network management system.
[0091] This allows the network management system to send abnormal alarm information to the target network element, which then revises and adjusts the output network data.
[0092] S510, add the target network element to the list of network elements with abnormal data.
[0093] S512, according to the set period, audits the network data output by each network element in the list of network elements with abnormal data.
[0094] S514: When the target network data output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated.
[0095] S516 will send the recovery alarm information to the network management system to eliminate the abnormal alarms on the target network element on the network management system.
[0096] The specific processes of S502-S516 described above can be found in the description of the above method embodiments. Their implementation principles and technical effects are similar, and will not be repeated here.
[0097] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.
[0098] Based on the same inventive concept, this application also provides a network data element anomaly processing device for implementing the aforementioned network data element anomaly processing method. The solution provided by this device is similar to the implementation described in the above method; therefore, the specific limitations in one or more network data element anomaly processing device embodiments provided below can be found in the limitations of the network data element anomaly processing method described above, and will not be repeated here.
[0099] In one embodiment, such as Figure 6 As shown, a network data anomaly processing device is provided, comprising:
[0100] Data acquisition module 610 is used to acquire target network data output by the target network element;
[0101] The data verification module 620 is used to perform format verification on the target network data based on the standard data format defined by the communication standard, and to determine the data verification result of the target network data.
[0102] The alarm generation module 630 is used to generate abnormal alarm information for the target network element when the data verification result shows that the data format is abnormal.
[0103] In one embodiment, the above-mentioned device further includes an alarm sending module, which is used to send abnormal alarm information to the network management system so that the network management system sends the abnormal alarm information to the target network element, and the target network element revises and adjusts the output network data.
[0104] In one embodiment, the above-mentioned device further includes an auditing module, which is used to add the target network element to the list of abnormal data network elements; and to audit the network data output by each network element in the list of abnormal data network elements according to a set period.
[0105] In one embodiment, the alarm generation module 630 is further configured to generate recovery alarm information when the target network data output by the target network element in the list of abnormal data network elements is consistent with the standard data format; the alarm sending module is further configured to send the recovery alarm information to the network management system to eliminate the abnormal alarms on the target network element in the network management system.
[0106] In one embodiment, the data verification module 620 is specifically used to parse the target network metadata; if the parsing of the target network metadata fails, the target network metadata is format-verified based on the standard data format defined by the communication standard to determine the data verification result of the target network metadata.
[0107] In one embodiment, the abnormal alarm information includes the following information: the identification information of the target network element, the data type of the network element data, and the data verification result.
[0108] Each module in the aforementioned network data anomaly handling device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the corresponding operations of each module.
[0109] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 7 As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores target network data, standard data formats, data verification results, anomaly alarm information, recovery alarm information, and a list of network elements with data anomalies. The network interface communicates with external terminals via a network connection. When executed by the processor, the computer program implements a method for handling network data anomalies.
[0110] Those skilled in the art will understand that Figure 7The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0111] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor performs the following steps when executing processing logic in the computer program:
[0112] Collect target network data output by the target network element;
[0113] Based on the standard data format defined by the communication standard, the target network data is format-validated to determine the data validation result of the target network data.
[0114] If the data verification result indicates that the data format is abnormal, an abnormal alarm message is generated for the target network element.
[0115] In one embodiment, when the processor executes the processing logic in the computer program after generating abnormal alarm information for the target network element, it also implements the following steps: sending the abnormal alarm information to the network management system so that the network management system sends the abnormal alarm information to the target network element, and the target network element revises and adjusts the output network data.
[0116] In one embodiment, when the processor executes the processing logic in the computer program after generating abnormal alarm information for the target network element, it also performs the following steps: adding the target network element to the list of abnormal data network elements; and auditing the network data output by each network element in the list of abnormal data network elements according to a set period.
[0117] In one embodiment, when the processor executes processing logic in a computer program, it also performs the following steps:
[0118] When the target network element output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated; the recovery alarm message is sent to the network management system to eliminate the abnormal alarm for the target network element on the network management system.
[0119] In one embodiment, when the processor executes the processing logic in the computer program to perform format verification on the target network metadata based on the standard data format defined by the communication standard, and determines the data verification result of the target network metadata, the processor also performs the following steps: parsing the target network metadata; if the parsing of the target network metadata fails, performing format verification on the target network metadata based on the standard data format defined by the communication standard, and determining the data verification result of the target network metadata.
[0120] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, wherein the processing logic in the computer program, when executed by a processor, performs the following steps:
[0121] Collect target network data output by the target network element;
[0122] Based on the standard data format defined by the communication standard, the target network data is format-validated to determine the data validation result of the target network data.
[0123] If the data verification result indicates that the data format is abnormal, an abnormal alarm message is generated for the target network element.
[0124] In one embodiment, when the processing logic in the computer program after generating abnormal alarm information for the target network element is executed by the processor, the following steps are also implemented:
[0125] The abnormal alarm information is sent to the network management system, so that the network management system can send the abnormal alarm information to the target network element, and the target network element can revise and adjust the output network data.
[0126] In one embodiment, when the processing logic in the computer program after generating abnormal alarm information for the target network element is executed by the processor, the following steps are also implemented:
[0127] Add the target network element to the list of network elements with abnormal data; audit the network data output by each network element in the list of network elements with abnormal data according to the set period.
[0128] In one embodiment, when the processing logic in a computer program is executed by a processor, the following steps are also performed:
[0129] When the target network element output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated; the recovery alarm message is sent to the network management system to eliminate the abnormal alarm for the target network element on the network management system.
[0130] In one embodiment, the computer program performs format verification on the target network metadata based on the standard data format defined by the communication standard. When the data verification result of the target network metadata is executed by the processor, the following steps are also implemented:
[0131] Parse the target network metadata; if the target network metadata parsing fails, perform format verification on the target network metadata based on the standard data format defined by the communication standard, and determine the data verification result of the target network metadata.
[0132] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:
[0133] Collect target network data output by the target network element;
[0134] Based on the standard data format defined by the communication standard, the target network data is format-validated to determine the data validation result of the target network data.
[0135] If the data verification result indicates that the data format is abnormal, an abnormal alarm message is generated for the target network element.
[0136] In one embodiment, when the processing logic in the computer program after generating abnormal alarm information for the target network element is executed by the processor, the following steps are also implemented:
[0137] The abnormal alarm information is sent to the network management system, so that the network management system can send the abnormal alarm information to the target network element, and the target network element can revise and adjust the output network data.
[0138] In one embodiment, when the processing logic in the computer program after generating abnormal alarm information for the target network element is executed by the processor, the following steps are also implemented:
[0139] Add the target network element to the list of network elements with abnormal data; audit the network data output by each network element in the list of network elements with abnormal data according to the set period.
[0140] In one embodiment, when the processing logic in a computer program is executed by a processor, the following steps are also performed:
[0141] When the target network element output by the target network element in the list of abnormal data network elements is found to be consistent with the standard data format, a recovery alarm message is generated; the recovery alarm message is sent to the network management system to eliminate the abnormal alarm for the target network element on the network management system.
[0142] In one embodiment, the computer program performs format verification on the target network metadata based on the standard data format defined by the communication standard. When the data verification result of the target network metadata is executed by the processor, the following steps are also implemented:
[0143] Parse the target network metadata; if the target network metadata parsing fails, perform format verification on the target network metadata based on the standard data format defined by the communication standard, and determine the data verification result of the target network metadata.
[0144] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0145] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0146] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A method for handling network data anomalies, characterized in that, The method includes: Obtain target network data output by the target network element managed by the network management system, wherein the target network data is data of Radio Resource Control Protocol (RRC) signaling or messages; Based on the standard data format defined by the communication standard, the target network data element is format-validated to determine the data validation result of the target network data element. If the data verification result indicates that the data format is abnormal, an abnormal alarm message is generated for the target network element, and the abnormal alarm message is sent to the network management system so that the network management system sends the abnormal alarm message to the target network element, and the target network element revises and adjusts the output network data. Add the target network element to the list of network elements with abnormal data; audit the network data output by each network element in the list of network elements with abnormal data according to a set period; When the target network data output by the target network element in the list of abnormal data network elements is detected to be consistent with the standard data format, a recovery alarm message is generated; the recovery alarm message is sent to the network management system to eliminate the abnormal alarm for the target network element on the network management system.
2. The method according to claim 1, characterized in that, Based on the standard data format defined by communication standards, the target network data metadata is format-validated to determine the data validation result of the target network data metadata, including: The target network data is parsed; In the event that the target network metadata parsing fails, the target network metadata is format-validated based on the standard data format defined by the communication standard to determine the data validation result of the target network metadata.
3. The method according to claim 1, characterized in that, The abnormal alarm information includes the following information: The identification information of the target network element; The data type of the target network data; and The data verification result.
4. The method according to claim 3, characterized in that, When the data verification result indicates an abnormal data format, generating an abnormal alarm message for the target network element includes: If the data verification result indicates that the data format is abnormal, an abnormal alarm message for the target network element is generated based on the identification information of the target network element, the data type of the target network element's data, and the data verification result.
5. The method according to claim 1, characterized in that, The target network element is a communication device or a functional network element within the core network.
6. The method according to claim 1, characterized in that, The standard data format defined by the communication standard is used to perform format verification on the target network metadata, and to determine the data verification result of the target network metadata, including: Based on the standard data format defined by the communication standard, the target network data element is format-validated. When the target network metadata is consistent with the standard data format, the data verification result of the target network metadata is determined to be that the data format is normal. When the target network data is inconsistent with the standard data format, the data verification result is determined to be an abnormal data format.
7. A network data anomaly processing device, characterized in that, The device includes: The data acquisition module is used to acquire target network data output by the target network element managed by the network management system from the network management system, wherein the target network data is data of Radio Resource Control Protocol (RRC) signaling or messages; The data verification module is used to perform format verification on the target network data based on the standard data format defined by the communication standard, and to determine the data verification result of the target network data. The alarm generation module is used to generate abnormal alarm information for the target network element when the data verification result is abnormal data format, and send the abnormal alarm information to the network management system so that the network management system sends the abnormal alarm information to the target network element, and the target network element revises and adjusts the output network data. The audit module is used to add the target network element to the list of network elements with abnormal data; and to audit the network data output by each network element in the list of network elements with abnormal data according to a set period. The alarm generation module is further configured to generate recovery alarm information when it detects that the target network data output by the target network element in the list of abnormal data network elements is consistent with the standard data format; and send the recovery alarm information to the network management system to eliminate the abnormal alarm for the target network element on the network management system.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.
10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.
Citation Information
Patent Citations
5G network endogenous security protection method and device, network element and storage medium
CN115567942A