Signaling communication network topology determination method and apparatus, electronic device, and storage medium
By acquiring the physical layer link topology of the signaling communication network, pruning the links with the lowest weight, and utilizing greedy pruning and hierarchical pruning algorithms, the problem of low inherent security performance in the signaling communication network is solved, achieving more secure and reliable signaling information transmission.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- 北清晋如通信技术有限公司
- Filing Date
- 2023-07-21
- Publication Date
- 2026-06-02
Smart Images
Figure CN116781531B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of communication technology, and in particular to a method, apparatus, electronic device and storage medium for determining the topology of a signaling communication network. Background Technology
[0002] In related technologies, for Signaling Communications Networks (SCNs), to ensure efficient transmission of signaling data within the SCN, the focus is typically on improving SCN bandwidth performance and reducing operating costs. Furthermore, research on optical network topology design primarily targets general optical networks, aiming to improve fault recovery speed and reliability through rational topology planning, thus neglecting SCN security. This results in relatively low security performance at the intrinsic security level of SCNs in related technologies. Summary of the Invention
[0003] In view of this, the purpose of this application is to provide a method, apparatus, electronic device and storage medium for determining the topology of a signaling communication network.
[0004] In view of the above objectives, in a first aspect, this application provides a method for determining the topology of a signaling communication network, the method comprising:
[0005] Obtain the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane;
[0006] The original bearer traffic and original security attribute value of each link are determined based on the total resource volume and the original optical network topology, and the original link weight corresponding to each link is determined based on the original bearer traffic and the original security attribute value.
[0007] The first target link with the lowest original link weight is deleted to obtain the first updated network topology, and it is determined whether the first updated network topology meets the connectivity requirements.
[0008] In response to the first updated network topology satisfying the connectivity requirement, the first update carrying traffic and the first update security attribute value of each link are determined based on the total resource volume and the first updated network topology.
[0009] Determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value;
[0010] In response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value, the first target link is added to the first update network topology to determine the target network topology.
[0011] In a second aspect, this application provides a signaling communication network topology determination apparatus, the apparatus comprising:
[0012] The acquisition module is configured to acquire the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane;
[0013] The first determining module is configured to determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and to determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value.
[0014] The pruning module is configured to delete the first target link with the lowest original link weight to obtain a first updated network topology, and determine whether the first updated network topology meets the connectivity requirements.
[0015] The second determining module is configured to, in response to the first updated network topology satisfying the connectivity requirement, determine the first update carrying traffic and the first update security attribute value for each link based on the total resource volume and the first updated network topology.
[0016] The third determining module is configured to determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value.
[0017] The fourth determining module is configured to add the first target link to the first updated network topology to determine the target network topology in response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value.
[0018] In a third aspect, this application provides an electronic device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the signaling communication network topology determination method as described in the first aspect.
[0019] In a fourth aspect, this application provides a computer-readable storage medium storing computer instructions for causing a computer to perform the signaling communication network topology determination method as described in the first aspect.
[0020] As can be seen from the above description, the signaling communication network topology determination method, apparatus, electronic device, and storage medium provided in this application obtain the original optical network topology corresponding to the physical layer links of the intrinsically secure transmission plane; determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value; delete the first target link with the lowest original link weight to obtain a first updated network topology, and determine whether the first updated network topology meets the connectivity requirements; in response to the first updated network topology meeting the connectivity requirements, determine the first updated bearer traffic and the first updated security attribute value of each link based on the total resource volume and the first updated network topology; determine whether the first updated bearer traffic is not greater than the maximum bearer traffic of the link, and whether the first updated security attribute value reaches a preset security attribute value; in response to the first updated bearer traffic being greater than the maximum bearer traffic of the link, and / or the first updated security attribute value not reaching the preset security attribute value, add the first target link to the first updated network topology to determine the target network topology. This application takes into account factors such as link security attributes and the amount of traffic carried by the link, and determines the link weight trade-off mechanism. Furthermore, based on the direct greedy pruning algorithm and the hierarchical pruning algorithm, it is used to prune links with lower weights in the network topology, thereby enhancing the security performance of the signaling topology. Attached Figure Description
[0021] To more clearly illustrate the technical solutions in this application or related technologies, the drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the drawings described below are only embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0022] Figure 1 This document illustrates an exemplary flowchart of a signaling communication network topology determination method applied to a first communication terminal, provided by an embodiment of this application.
[0023] Figure 2 This diagram illustrates an exemplary topology where the SCN channel and optical path share a topology in the in-band mode of the fiber optic implementation of the SCN architecture.
[0024] Figure 3 This diagram illustrates an exemplary out-of-band networking structure in the in-fiber mode of an SCN architecture implementation.
[0025] Figure 4 A schematic flowchart of the algorithm for determining the topology of a signaling communication network according to an embodiment of this application is shown.
[0026] Figure 5 A schematic diagram of link pruning according to an embodiment of this application is shown.
[0027] Figure 6 This paper illustrates an exemplary structural diagram of a signaling communication network topology determination device provided in an embodiment of this application.
[0028] Figure 7 This illustration shows an exemplary structural diagram of an electronic device provided in an embodiment of this application. Detailed Implementation
[0029] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with specific embodiments and the accompanying drawings.
[0030] It should be noted that, unless otherwise defined, the technical or scientific terms used in the embodiments of this application should have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms "first," "second," and similar terms used in the embodiments of this application do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the elements or objects listed after the word and their equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. Terms such as "upper," "lower," "left," and "right" are only used to indicate relative positional relationships; when the absolute position of the described object changes, the relative positional relationship may also change accordingly.
[0031] As described in the background section, for Signaling Communications Networks (SCNs), to ensure efficient transmission of signaling data within the SCN, it is generally considered to improve the SCN's bandwidth performance and reduce its operating costs. Furthermore, research on optical network topology design primarily focuses on general optical networks, aiming to improve fault recovery speed and reliability through rational topology planning, thus neglecting SCN security.
[0032] SCN (Signaling Network Connectivity) is a distributed signaling network architecture that enables signaling interaction between multiple nodes. In a distributed signaling network, signaling processing functions are distributed across multiple nodes, rather than concentrated on a single node, thus improving network availability and reliability. This distributed signaling network architecture requires speed, flexibility, and reliability to support the transmission of control messages between network nodes and between user network interfaces. The main functions of SCN include: SCN can establish a network topology database using standard topology structures and resource discovery mechanisms, which helps optimize the network topology and improve bandwidth utilization; SCN can establish reliable redundant signaling transmission channels in the network based on the discovered topology and resource availability; SCN can quickly establish and tear down end-to-end paths, achieving fast and reliable optical network transmission; furthermore, in the event of a main path failure, SCN can automatically and effectively restore the path, improving network reliability. Therefore, SCN plays a crucial role in optical network applications and is key to achieving efficient management and control of optical networks.
[0033] Endogenous secure optical transmission technology does not require additional external key negotiation procedures and can complete encrypted transmission and key negotiation simultaneously in a single channel, thus relying entirely on the communication system to achieve endogenous protection of information transmission.
[0034] In intrinsically secure optical transmission technology, the use of negotiation paths solves the problem of the "inherent" security, but the question of how to use intrinsic security remains. There are two approaches to the use of negotiation paths in intrinsically secure optical transmission systems. The first is "stealth," where the negotiation path provides the key to the accompanying transmission path in a stealthy manner, making it invisible and uncontrollable to upper-layer services. The second approach is "openness," which exposes the key negotiation path to upper-layer services and provides on-demand key negotiation functionality in an adjustable and controllable manner. However, in optical networks oriented towards dynamic services, the "stealth" approach sacrifices transmission performance for its negotiation capabilities. The negotiation path itself is sensitive to channel quality and struggles to provide the necessary key negotiation capabilities for different security requirements. Therefore, the current consideration is to adopt an open approach to address the question of how to use negotiation paths in optical networks. This involves elevating the key negotiation capability of the negotiation path to on-demand protection for transmission services, thereby providing users with service-oriented intrinsic security, reflected in different levels of security capabilities in the physical layer transmission links.
[0035] The inventors' research revealed that while intrinsically secure optical communication (SCN) technology is constantly evolving, the optical network control messages transmitted over the signaling topology are crucial to the overall information delivery within the optical network, and their security performance is directly related to the normal operation of the optical network. However, current research on how to effectively apply intrinsic security technologies to optical networks is limited, particularly regarding how to effectively utilize intrinsic security technologies to enhance service security protection in signaling networks. Since network topology is the foundation of communication networks, it is critical to network performance; however, related technologies suffer from relatively low security performance at the intrinsic security level of the SCN.
[0036] Therefore, this application provides a signaling communication network topology determination method, apparatus, electronic device, and storage medium, which obtains the original optical network topology corresponding to the physical layer links of the intrinsically secure transmission plane; determines the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and determines the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value; deletes the first target link with the lowest original link weight to obtain a first updated network topology, and determines whether the first updated network topology meets the connectivity requirements; in response to the first updated network topology meeting the connectivity requirements, determines the first updated bearer traffic and the first updated security attribute value of each link based on the total resource volume and the first updated network topology; determines whether the first updated bearer traffic is not greater than the maximum bearer traffic of the link, and whether the first updated security attribute value reaches a preset security attribute value; in response to the first updated bearer traffic being greater than the maximum bearer traffic of the link, and / or the first updated security attribute value not reaching the preset security attribute value, adds the first target link to the first updated network topology to determine the target network topology. This application takes into account factors such as link security attributes and the amount of traffic carried by the link, and determines the link weight trade-off mechanism. Furthermore, based on the direct greedy pruning algorithm and the hierarchical pruning algorithm, it is used to prune links with lower weights in the network topology, thereby enhancing the security performance of the signaling topology.
[0037] In some specific application scenarios, the signaling communication network topology determination method of this application can be applied to various systems involving signaling communication network topology determination. These systems can be run on PCs or mobile devices such as mobile phones or tablets.
[0038] In certain specific application scenarios, the signaling communication network topology determination method of this application can be directly applied to local operation or run on a cloud server. When running on a cloud server, the acquired data to be processed is sent to the cloud server via the network, and the server processes the data to be processed using the signaling communication network topology determination method of this application, and sends the processing result back to the local machine via the network.
[0039] The following describes a signaling communication network topology determination method according to an exemplary embodiment of this application, using specific application scenarios. It should be noted that the above application scenarios are shown only to facilitate understanding of the spirit and principles of this application, and the embodiments of this application are not limited in any way. Rather, the embodiments of this application can be applied to any applicable scenario.
[0040] The following specific embodiments will be used to illustrate the signaling communication network topology determination method provided in this application.
[0041] Figure 1 This illustration shows an exemplary flowchart of a signaling communication network topology determination method provided in an embodiment of this application.
[0042] refer to Figure 1 The present application provides a method for determining the topology of a signaling communication network, which specifically includes the following steps:
[0043] S102: Obtain the original optical network topology corresponding to the physical layer link of the intrinsically secure transport plane.
[0044] S104: Determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value.
[0045] S106: Delete the first target link with the lowest original link weight to obtain the first updated network topology, and determine whether the first updated network topology meets the connectivity requirements.
[0046] S108: In response to the first updated network topology satisfying the connectivity requirement, the first update carrying traffic and the first update security attribute value of each link are determined based on the total resource volume and the first updated network topology.
[0047] S110: Determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value.
[0048] S112: In response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value, the first target link is added to the first update network topology to determine the target network topology.
[0049] It should be noted that the intrinsically secure optical network studied in this application refers to a multi-point interconnected optical network built based on intrinsically secure optical transmission and all-optical switching technologies, capable of providing users with on-demand key negotiation services. The design and research of the signaling communication network topology for intrinsically secure optical networks is based on the premise that the physical layer transmission links of the optical network possess different security capabilities. Through reasonable planning, the constructed signaling topology can ensure more secure and reliable transmission of signaling information. Specifically, intrinsically secure optical transmission technology can provide on-demand key negotiation services for signaling transmission services, reflected in the differentiated security capabilities of the physical layer transmission links. The intrinsically secure optical signaling network utilizes this technical characteristic of intrinsically secure optical transmission to improve the security of signaling information transmission.
[0050] It should be noted that in an Automatically Switched Optical Network (ASON), the Data Communications Network (DCN) enables the transmission of management and control information among multiple network elements. It consists of two parts: the Management Communications Network (MCN) and the SCN. The MCN primarily facilitates the interactive transmission of management information between the management plane and other planes in the ASON system, while the SCN implements distributed control of the control plane. This application focuses on the security construction scheme of the SCN within the DCN. The SCN is a distributed signaling network architecture for signaling interaction among multiple nodes. The implementation of the SCN architecture can generally employ two methods: in-fiber and out-of-fiber. The in-fiber method specifically includes in-band and out-of-band methods.
[0051] Figure 2 This diagram illustrates an exemplary topology where the SCN channel and optical path share a topology in the in-band mode of the fiber optic implementation of the SCN architecture.
[0052] refer to Figure 2 In-band transmission refers to the transmission of signaling and data information within the same optical fiber and channel. Signaling information is embedded within the optical link or channel carrying the data information; that is, the in-band data channel and the physical connection channel have the same topology. Interruptions in the in-band data channel have a significant impact on signaling information.
[0053] Figure 3This diagram illustrates an exemplary out-of-band networking structure in the in-fiber mode of an SCN architecture implementation.
[0054] refer to Figure 3 Out-of-band (OB) transmission refers to the transmission of signaling information and data messages within the same optical fiber but through different pathways. Signaling information is carried and transmitted on a specific channel, separate from the data channel. In other words, the in-band data channel and the physical connection channel have different topologies. An interruption of the out-of-band data channel only causes disruption to the transmission of controlled network information.
[0055] The external fiber optic method carries signaling information not only within a specific channel but also outside the optical fiber of the data channel. This external fiber optic method can be implemented in two ways: using dedicated optical fiber or using an external IP network. Based on the differences in transport plane and SCN topology planning, there are generally five common topology options for SCNs in optical networks:
[0056] (1) Full connectivity configuration based on transport plane nodes;
[0057] (2) Additional edges have been added to the transport plane topology, but a fully connected configuration has not yet been achieved;
[0058] (3) Reduce certain edges based on the transport plane topology;
[0059] (4) A topology construction scheme consistent with the transport plane topology;
[0060] (5) Connect the nodes based on the tree graph.
[0061] Each of these five schemes has its advantages and disadvantages. Scheme 1, SCN, performs best in terms of network connectivity and reliability, but its relatively simple planning and construction philosophy leads to maximum cost. This scheme typically trades construction cost for network performance. Scheme 5 constructs an SCN network with the lowest cost, but its network topology is the worst in terms of reliability, system response speed, and fault recovery speed. This scheme is suitable for topology planning where cost is the primary consideration. The performance of the other three schemes falls between the two above. The relationship between network performance and cost can be summarized as follows: as network connectivity decreases, network cost decreases, and overall network performance also declines. Scheme 2 balances the performance and cost of the signaling network topology by adding extra redundant edges to improve system reliability while maintaining the consistency between the SCN and transport plane topologies, achieving a relative balance between cost and network performance. Academic research indicates that, in principle, the optical network topology should not be the same as the SCN topology assumption. When designing and planning the topology, the independence between the SCN topology and the optical network topology needs to be considered. Their research results show that non-uniform topology enables the SCN plane to transmit data packets simply and efficiently, and to achieve fast topology synchronization.
[0062] This application, based on intrinsic security, requires a signaling topology that leverages the differentiated security capabilities of optical network physical layer links. If Scheme 2 is adopted, adding redundant edges to the transport plane topology necessitates constructing a signaling topology completely independent of the transport plane, failing to effectively utilize the inherent security advantages offered by intrinsic security technology. While the SCN topology adds redundant links and removes some existing links to form a new topology independent of the transport plane, this scheme suffers from the same problem as Scheme 2's approach of adding redundant links.
[0063] Through research, the inventors discovered that, based on the intrinsically secure physical topology, by reducing a certain number of edges, it is possible to satisfy the requirement that the optical network topology should, in principle, consider maintaining relative independence between the SCN topology and the optical network topology, while also utilizing the characteristic that the intrinsically secure optical network physical layer can provide differentiated intrinsic security protection capabilities.
[0064] Figure 4 A schematic flowchart of the algorithm for determining the topology of a signaling communication network according to an embodiment of this application is shown.
[0065] refer to Figure 4This allows us to obtain the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane. On this topology, path calculation and resource allocation operations are performed for signaling requirements. For example, the total resources are allocated to each link in the original optical network topology. For each link, the original bearer traffic can be determined based on the allocated resources, and the link's security attribute value can be determined. For example, for the i-th link e... i In other words, its original carrying capacity can be y i The corresponding security attribute value is s i The original bearer traffic and security attribute values are normalized, and the original link weight corresponding to the link is determined based on the normalized original bearer traffic, security attribute values, and preset weight factors.
[0066] It should be noted that the path calculation problem in signaling topology involves finding routing channels from the source node to the destination node of a signaling request within the signaling topology. These channels consist of links with different security attributes. The resource allocation algorithm effectively distributes the service flow of the signaling network into optical paths to maximize the overall security protection benefits of the service. This application involves a multi-path routing calculation algorithm, which means that for each signaling request, K candidate paths with different security attributes can be pre-determined. Specifically, different security attributes mean that different candidate paths have different levels of security, but all can meet the security requirements of the links, thereby ensuring the smooth and secure transmission of signaling information.
[0067] Furthermore, the resource allocation algorithm based on secure path priority is applicable to intrinsically secure optical network scenarios. The network topology security capability studied refers to the overall optimal security capability, ensuring that as much traffic as possible passes through the safest path. After performing a round of routing and resource allocation operations on the signaling requirements in the original topology, such as determining the source node and the target node in the original optical network topology, the security attributes of the link obtained after connecting the source node and the target node meet the preset security attribute threshold. Then, this link is determined as the original link, and its original security attribute value is obtained.
[0068] Furthermore, the pre-acquired traffic can be fed into the link to determine its original carrying traffic, that is, the actual traffic it carries when carrying signaling tasks.
[0069] It should be noted that the security attribute values reflect the different levels of security capabilities of the transmission links, meaning that the security attribute values of the links have differentiated characteristics.
[0070] Specifically, using the actual traffic carried by the link and the link's security capability value, the weight of the i-th link can be defined as:
[0071] w i =γy′ i+δs′ i
[0072] Where, y′ i s′ represents the original carrying capacity after normalization. i The values represent the security attribute values after normalization, where γ and δ represent preset weighting factors, satisfying 0 < γ < 1, 0 < δ < 1, and γ + δ = 1. Based on this, the weights of each link in the link set are obtained and sorted in ascending order. The values of γ and δ can be set according to the actual needs of signaling network pruning.
[0073] In some embodiments, the security attribute values of all links in the signaling network are set to be distributed between (0, 5). In this embodiment, links with security attribute values distributed between [3, 4] are defined as medium-security level links in the topology, and links with security attribute values distributed between [4, 5] are defined as high-security level links in the topology. The utilization ratio of medium- and high-security level links is defined as the proportion of the number of paths in the network that pass through medium- and high-security links to the total number of actual paths in the entire network. The higher the value of the utilization ratio of medium- and high-security links, the higher the utilization rate of the network for the medium- and high-security capabilities of the topology, and the more secure and reliable the selected paths are. In the signaling network, global connectivity efficiency refers to the average accessibility of the signaling network topology. The reachability of a signaling network can be measured by topology accessibility; average path security is a characteristic parameter of the topology that reflects the security performance of network connections. It is defined as the average and sum of the security capabilities corresponding to multiple transmittable paths between any two nodes in the signaling topology. A higher average path security indicates a more secure and reliable transmission path in the network, and vice versa. Since the performance of the pruned topology is related to the values of γ and δ, in this embodiment, when the signaling network has higher requirements for the utilization rate of medium-to-high security links, a larger γ value can be set; similarly, when the signaling network has higher requirements for global connectivity efficiency and average path security, a larger δ value can be set.
[0074] Furthermore, for the original optical network topology G(V,E), the first target link with the lowest original link weight (i.e., the edge with the smallest original link weight) can be deleted to obtain the first updated network topology. Then, it can be determined whether the first updated network topology meets the connectivity requirements.
[0075] For example, the pre-acquired test traffic can be allocated to the first updated network topology, and it can be determined whether the test traffic can pass through each link in the first updated network topology in sequence. If the test traffic can pass through each link in the first updated network topology in sequence, then the first updated network topology meets the connectivity requirements. Conversely, if the test traffic fails to pass through at least one link, it proves that the first updated network topology does not meet the connectivity requirements.
[0076] In some embodiments, if the first updated network topology meets the connectivity requirements, the first updated carrying traffic and the first updated security attribute value of each link are determined based on the total resources and the first updated network topology, thereby determining whether the first updated network topology can fully carry the given signaling requirements. Specifically, it can be determined whether the first updated carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first updated security attribute value reaches a preset security attribute value. If the first updated carrying traffic is greater than the maximum carrying traffic of the link, and / or the first updated security attribute value does not reach the preset security attribute value, it proves that the current first updated network topology cannot fully carry the given signaling requirements. That is, after the first target link is pruned, the network topology cannot carry the signaling requirements. In this case, the deleted edge can be added, that is, the first target link can be added to the first updated network topology, thereby obtaining the target network topology.
[0077] In some embodiments, if the first update carrying traffic is not greater than the maximum carrying traffic of the link, and the first update security attribute value reaches a preset security attribute value, it proves that the pruned first update network topology can fully carry the given signaling requirements, and the next round of pruning operations can be performed. Specifically, the second target link with the second lowest original link weight can be deleted to obtain the third update network topology, and it is determined whether the third update network topology meets the connectivity requirements. If the third update network topology meets the connectivity requirements, the third update carrying traffic and the third update security attribute value of each link are determined based on the total resources and the third update network topology, and then it is determined whether the third update network topology can fully carry the given signaling requirements. For example, determine whether the third update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the third update security attribute value reaches the preset security attribute value. If the third update carrying traffic is greater than the maximum carrying traffic of the link, and / or the third update security attribute value does not reach the preset security attribute value, it proves that the current third update network topology cannot fully carry the given signaling requirements. In other words, after the second target link is cut off, the network topology cannot carry the signaling requirements. Then, the edge deleted in this round can be added, that is, the second target link is added to the third update network topology, so as to obtain the final target network topology.
[0078] In some embodiments, if the first updated network topology does not meet connectivity requirements, it proves that the pruned first target link will affect the connectivity of the original optical network topology and should not be pruned. Therefore, it can be added to the first updated network topology to restore the original optical network topology. Further, the second target link with the second lowest weight in the original link is deleted to obtain the second updated network topology, and it is determined whether the second updated network topology meets connectivity requirements. If the second updated network topology meets connectivity requirements, the second updated bearer traffic and the second updated security attribute value for each link are determined based on the total resource volume and the second updated network topology. Further, it is determined whether the second updated bearer traffic is not greater than the maximum bearer traffic of the link, and whether the second updated security attribute value reaches a preset security attribute value. If the second updated bearer traffic is greater than the maximum bearer traffic of the link, and / or the second updated security attribute value does not reach the preset security attribute value, the second target link is added to the second updated network topology, thereby determining the target network topology.
[0079] Figure 5 A schematic diagram of link pruning according to an embodiment of this application is shown.
[0080] refer to Figure 5 The links in the intrinsically secure transmission plane topology possess differentiated security capabilities. Initial link weight coefficients γ and δ are set. Based on the link weights, the edges with the smallest weights are sequentially removed from the original topology. After weight calculation, link BC is determined to have the lowest weight; therefore, link BC in the original optical network topology corresponding to the physical layer links of the intrinsically secure transmission plane is removed first, resulting in a first updated network topology. It is then determined whether the first updated network topology meets connectivity requirements. If the first updated network topology meets connectivity requirements, the first updated carrying traffic and the first updated security attribute value for each link are determined based on the total resource volume and the first updated network topology. Furthermore, it is determined whether the first updated carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first updated security attribute value reaches the preset security attribute value.
[0081] Since the link weights in the topology are completely static after being determined in this process, they will not change with subsequent pruning operations. Therefore, if the first update's carrying traffic is not greater than the link's maximum carrying traffic, and the first update's security attribute value reaches the preset security attribute value, then the second target link with the second lowest original link weight, i.e., link KM, can be further deleted to obtain the second updated network topology.
[0082] Furthermore, it can be determined whether the second updated network topology meets the connectivity requirements. If the second updated network topology meets the connectivity requirements, then the second updated carrying traffic and the second updated security attribute value of each link are determined based on the total resources and the second updated network topology. Further, it is determined whether the second updated carrying traffic is not greater than the maximum carrying traffic of the link, and whether the second updated security attribute value reaches the preset security attribute value. If the second updated carrying traffic is not greater than the maximum carrying traffic of the link, and the second updated security attribute value reaches the preset security attribute value, then the third target link with the third lowest original link weight, i.e., link FJ, can be further deleted. The above operation is repeated until the updated carrying traffic in round N is greater than the maximum carrying traffic of the link, and / or the updated security attribute value in round N does not reach the preset security attribute value.
[0083] For example, after deleting links BC, KM, FJ, EG, and IM in sequence, if link NM with a smaller weight is further deleted, and the current topology cannot fully carry the given signaling requirements, then link NM, which was deleted in this round, is added back in. The current topology is then output as the intrinsic security signaling network topology, and the current topology is used as the target network topology.
[0084] As can be seen from the above description, the signaling communication network topology determination method, apparatus, electronic device, and storage medium provided in this application obtain the original optical network topology corresponding to the physical layer links of the intrinsically secure transmission plane; determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value; delete the first target link with the lowest original link weight to obtain a first updated network topology, and determine whether the first updated network topology meets the connectivity requirements; in response to the first updated network topology meeting the connectivity requirements, determine the first updated bearer traffic and the first updated security attribute value of each link based on the total resource volume and the first updated network topology; determine whether the first updated bearer traffic is not greater than the maximum bearer traffic of the link, and whether the first updated security attribute value reaches a preset security attribute value; in response to the first updated bearer traffic being greater than the maximum bearer traffic of the link, and / or the first updated security attribute value not reaching the preset security attribute value, add the first target link to the first updated network topology to determine the target network topology. This application takes into account factors such as link security attributes and the amount of traffic carried by the link, and determines the link weight trade-off mechanism. Furthermore, based on the direct greedy pruning algorithm and the hierarchical pruning algorithm, it is used to prune links with lower weights in the network topology, thereby enhancing the security performance of the signaling topology.
[0085] It should be noted that the method in this embodiment can be executed by a single device, such as a computer or server. The method can also be applied in a distributed scenario, where multiple devices cooperate to complete the task. In such a distributed scenario, one of these devices may execute only one or more steps of the method in this embodiment, and the multiple devices will interact with each other to complete the method described.
[0086] It should be noted that the above description describes some embodiments of this application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in a different order than that shown in the above embodiments and still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require a specific or sequential order to achieve the desired result. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0087] Figure 6 This paper illustrates an exemplary structural diagram of a signaling communication network topology determination device provided in an embodiment of this application.
[0088] Based on the same inventive concept, corresponding to any of the above embodiments, this application also provides a signaling communication network topology determination device.
[0089] refer to Figure 6 The signaling communication network topology determination device includes: an acquisition module, a first determination module, a trimming module, a second determination module, a third determination module, and a fourth determination module; wherein,
[0090] The acquisition module is configured to acquire the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane;
[0091] The first determining module is configured to determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and to determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value.
[0092] The pruning module is configured to delete the first target link with the lowest original link weight to obtain a first updated network topology, and determine whether the first updated network topology meets the connectivity requirements.
[0093] The second determining module is configured to, in response to the first updated network topology satisfying the connectivity requirement, determine the first update carrying traffic and the first update security attribute value for each link based on the total resource volume and the first updated network topology.
[0094] The third determining module is configured to determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value.
[0095] The fourth determining module is configured to add the first target link to the first updated network topology to determine the target network topology in response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value.
[0096] In one possible implementation, the first determining module is further configured as follows:
[0097] The total resources are allocated to each link in the original optical network topology. For each link,
[0098] The original carrying traffic of the link is determined based on the amount of resources allocated to the link, and the security attribute value of the link is also determined.
[0099] The original bearer traffic and the security attribute value are normalized, and the original link weight corresponding to the link is determined based on the normalized original bearer traffic, the security attribute value, and the preset weight factor.
[0100] In one possible implementation, the cropping module is further configured as follows:
[0101] The pre-acquired test traffic is allocated to the first updated network topology, and it is determined whether the test traffic can pass through each link in the first updated network topology in sequence;
[0102] If the test traffic can pass through each link in the first updated network topology in sequence, then the first updated network topology satisfies the connectivity requirement.
[0103] In one possible implementation, the fourth determining module is further configured as follows:
[0104] If the first updated network topology does not meet the connectivity requirements, the first target link is added to the first updated network topology to restore the original optical network topology.
[0105] The second target link with the second lowest weight in the original link is deleted to obtain the second updated network topology, and it is determined whether the second updated network topology meets the connectivity requirements.
[0106] In response to the second updated network topology satisfying the connectivity requirement, the second updated carrying traffic and the second updated security attribute value for each link are determined based on the total resource volume and the second updated network topology.
[0107] Determine whether the second update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the second update security attribute value reaches the preset security attribute value;
[0108] In response to the second update carrying traffic being greater than the maximum carrying traffic of the link, and / or the second update security attribute value not reaching the preset security attribute value, the second target link is added to the second update network topology to determine the target network topology.
[0109] In one possible implementation, the fourth determining module is further configured as follows:
[0110] In response to the first update carrying traffic not being greater than the maximum carrying traffic of the link, and the first update security attribute value reaching the preset security attribute value, the second target link with the second lowest weight in the original link is deleted to obtain the third updated network topology, and it is determined whether the third updated network topology meets the connectivity requirements.
[0111] In response to the third update network topology satisfying the connectivity requirement, the third update carrying traffic and the third update security attribute value of each link are determined based on the total resource volume and the third update network topology.
[0112] Determine whether the third update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the third update security attribute value reaches the preset security attribute value;
[0113] In response to the third update carrying traffic being greater than the maximum carrying traffic of the link, and / or the third update security attribute value not reaching the preset security attribute value, the second target link is added to the third update network topology to determine the target network topology.
[0114] For ease of description, the above devices are described in terms of function, divided into various modules. Of course, in implementing this application, the functions of each module can be implemented in one or more software and / or hardware.
[0115] The apparatus described above is used to implement the corresponding signaling communication network topology determination method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0116] Figure 7 This illustration shows an exemplary structural diagram of an electronic device provided in an embodiment of this application.
[0117] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the signaling communication network topology determination method described in any of the above embodiments. Figure 7 This embodiment illustrates a more specific hardware structure of an electronic device, which may include a processor 710, a memory 720, an input / output interface 730, a communication interface 740, and a bus 750. The processor 710, memory 720, input / output interface 730, and communication interface 740 are interconnected internally via the bus 750.
[0118] The processor 710 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.
[0119] The memory 720 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 720 can store the operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program code is stored in the memory 720 and is called and executed by the processor 710.
[0120] The input / output interface 730 is used to connect input / output modules to enable information input and output. Input / output modules can be configured as components within the device (not shown in the figure) or externally connected to the device to provide corresponding functions. Input devices may include keyboards, mice, touchscreens, microphones, various sensors, etc., while output devices may include displays, speakers, vibrators, indicator lights, etc.
[0121] The communication interface 740 is used to connect a communication module (not shown in the figure) to enable communication between this device and other devices. The communication module can communicate via wired means (e.g., USB, Ethernet cable) or wireless means (e.g., mobile network, Wi-Fi, Bluetooth).
[0122] Bus 750 includes a pathway for transmitting information between various components of the device (e.g., processor 710, memory 720, input / output interface 730, and communication interface 740).
[0123] It should be noted that although the above-described device only shows the processor 710, memory 720, input / output interface 730, communication interface 740, and bus 750, in specific implementations, the device may also include other components necessary for normal operation. Furthermore, those skilled in the art will understand that the above-described device may only include the components necessary for implementing the embodiments of this specification, and not necessarily all the components shown in the figures.
[0124] The electronic devices described above are used to implement the corresponding signaling communication network topology determination method in any of the foregoing embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0125] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this application also provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the signaling communication network topology determination method as described in any of the above embodiments.
[0126] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device.
[0127] The computer instructions stored in the storage medium of the above embodiments are used to cause the computer to execute the signaling communication network topology determination method as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0128] Based on the same inventive concept, corresponding to the signaling communication network topology determination method described in any of the above embodiments, this disclosure also provides a computer program product, which includes computer program instructions. In some embodiments, the computer program instructions can be executed by one or more processors of a computer to cause the computer and / or the processor to perform the signaling communication network topology determination method. Corresponding to the execution entity for each step in each embodiment of the signaling communication network topology determination method, the processor executing the corresponding step can belong to the corresponding execution entity.
[0129] The computer program product of the above embodiments is used to cause the computer and / or the processor to execute the signaling communication network topology determination method as described in any of the above embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0130] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of this application (including the claims) is limited to these examples; within the framework of this application, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of different aspects of the embodiments of this application as described above, which are not provided in the details for the sake of brevity.
[0131] Additionally, to simplify the description and discussion, and to avoid obscuring the embodiments of this application, the well-known power / ground connections to integrated circuit (IC) chips and other components may or may not be shown in the provided drawings. Furthermore, the apparatus may be shown in block diagram form to avoid obscuring the embodiments of this application, and this also takes into account the fact that the details of the implementation of these block diagram apparatuses are highly dependent on the platform on which the embodiments of this application will be implemented (i.e., these details should be fully understood by those skilled in the art). While specific details (e.g., circuits) have been set forth to describe exemplary embodiments of this application, it will be apparent to those skilled in the art that the embodiments of this application can be implemented without these specific details or with variations thereof. Therefore, these descriptions should be considered illustrative rather than restrictive.
[0132] Although this application has been described in conjunction with specific embodiments thereof, many substitutions, modifications, and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may be used with the embodiments discussed.
[0133] The embodiments of this application are intended to cover all such substitutions, modifications, and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the embodiments of this application should be included within the protection scope of this application.
Claims
1. A method for determining the topology of a signaling communication network, characterized in that, The method includes: Obtain the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane; The original bearer traffic and original security attribute value of each link are determined based on the total resource volume and the original optical network topology, and the original link weight corresponding to each link is determined based on the original bearer traffic and the original security attribute value. The first target link with the lowest original link weight is deleted to obtain the first updated network topology, and it is determined whether the first updated network topology meets the connectivity requirements. In response to the first updated network topology satisfying the connectivity requirement, the first update carrying traffic and the first update security attribute value of each link are determined based on the total resource volume and the first updated network topology. Determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value; In response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value, the first target link is added to the first update network topology to determine the target network topology.
2. The method according to claim 1, characterized in that, The process of determining the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and determining the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value, includes: The total resources are allocated to each link in the original optical network topology. For each link, The original carrying traffic of the link is determined based on the amount of resources allocated to the link, and the original security attribute value of the link is also determined. The original bearer traffic and the original security attribute value are normalized, and the original link weight corresponding to the link is determined based on the normalized original bearer traffic, the original security attribute value, and the preset weight factor.
3. The method according to claim 1, characterized in that, Determining whether the first updated network topology meets the connectivity requirements includes: The pre-acquired test traffic is allocated to the first updated network topology, and it is determined whether the test traffic can pass through each link in the first updated network topology in sequence; If the test traffic can pass through each link in the first updated network topology in sequence, then the first updated network topology satisfies the connectivity requirement.
4. The method according to claim 1, characterized in that, After determining whether the first updated network topology meets the connectivity requirements, the process further includes: If the first updated network topology does not meet the connectivity requirements, the first target link is added to the first updated network topology to restore the original optical network topology. The second target link with the second lowest weight in the original link is deleted to obtain the second updated network topology, and it is determined whether the second updated network topology meets the connectivity requirements. In response to the second updated network topology satisfying the connectivity requirement, the second updated carrying traffic and the second updated security attribute value for each link are determined based on the total resource volume and the second updated network topology. Determine whether the second update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the second update security attribute value reaches the preset security attribute value; In response to the second update carrying traffic being greater than the maximum carrying traffic of the link, and / or the second update security attribute value not reaching the preset security attribute value, the second target link is added to the second update network topology to determine the target network topology.
5. The method according to claim 1, characterized in that, After determining whether the first update bearer traffic is not greater than the maximum bearer traffic of the link, and whether the first update security attribute value reaches the preset security attribute value, the method further includes: In response to the first update carrying traffic not being greater than the maximum carrying traffic of the link, and the first update security attribute value reaching the preset security attribute value, the second target link with the second lowest weight in the original link is deleted to obtain the third updated network topology, and it is determined whether the third updated network topology meets the connectivity requirements. In response to the third update network topology satisfying the connectivity requirement, the third update carrying traffic and the third update security attribute value of each link are determined based on the total resource volume and the third update network topology. Determine whether the third update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the third update security attribute value reaches the preset security attribute value; In response to the third update carrying traffic being greater than the maximum carrying traffic of the link, and / or the third update security attribute value not reaching the preset security attribute value, the second target link is added to the third update network topology to determine the target network topology.
6. A signaling communication network topology determination device, characterized in that, The device includes: The acquisition module is configured to acquire the original optical network topology corresponding to the physical layer links of the intrinsically secure transport plane; The first determining module is configured to determine the original bearer traffic and original security attribute value of each link based on the total resource volume and the original optical network topology, and to determine the original link weight corresponding to each link based on the original bearer traffic and the original security attribute value. The pruning module is configured to delete the first target link with the lowest original link weight to obtain a first updated network topology, and determine whether the first updated network topology meets the connectivity requirements. The second determining module is configured to, in response to the first updated network topology satisfying the connectivity requirement, determine the first update carrying traffic and the first update security attribute value for each link based on the total resource volume and the first updated network topology. The third determining module is configured to determine whether the first update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the first update security attribute value reaches the preset security attribute value. The fourth determining module is configured to add the first target link to the first updated network topology to determine the target network topology in response to the first update carrying traffic being greater than the maximum carrying traffic of the link, and / or the first update security attribute value not reaching the preset security attribute value.
7. The apparatus according to claim 6, characterized in that, The first determining module is also configured to: The total resources are allocated to each link in the original optical network topology. For each link, The original carrying traffic of the link is determined based on the amount of resources allocated to the link, and the original security attribute value of the link is also determined. The original bearer traffic and the original security attribute value are normalized, and the original link weight corresponding to the link is determined based on the normalized original bearer traffic, the original security attribute value, and the preset weight factor.
8. The apparatus according to claim 6, characterized in that, The fourth determining module is further configured to: If the first updated network topology does not meet the connectivity requirements, the first target link is added to the first updated network topology to restore the original optical network topology. The second target link with the second lowest weight in the original link is deleted to obtain the second updated network topology, and it is determined whether the second updated network topology meets the connectivity requirements. In response to the second updated network topology satisfying the connectivity requirement, the second updated carrying traffic and the second updated security attribute value for each link are determined based on the total resource volume and the second updated network topology. Determine whether the second update carrying traffic is not greater than the maximum carrying traffic of the link, and whether the second update security attribute value reaches the preset security attribute value; In response to the second update carrying traffic being greater than the maximum carrying traffic of the link, and / or the second update security attribute value not reaching the preset security attribute value, the second target link is added to the second update network topology to determine the target network topology.
9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the method as described in any one of claims 1 to 5.
10. A computer-readable storage medium storing computer instructions, characterized in that, The computer instructions are used to cause the computer to implement the method as described in any one of claims 1 to 5.