An IT equipment status management system based on data acquisition
Through the identity identification and security assessment module of the IT equipment status management system, the problems of diverse types of IT equipment and low accuracy in determining security risks are solved, and the precise management of IT equipment and efficient safety hazard detection are realized.
Patent Information
- Application Number
- CN202411275171.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-12
- Publication Date
- 2024-12-17
- Estimated Expiration
- 2044-09-12
AI Technical Summary
Traditional technology has not established an IT device identity tag library and grouped it, ignoring the variety of IT devices and the differences in function, resulting in inaccurate management and low accuracy in judging security risks, which is prone to false alarms.
Design an IT equipment status management system based on data acquisition, including IT equipment identity identification module, security assessment and early warning module, status data acquisition module, data management and storage module and interactive terminal module, and IT is carried out through identity tags and clustering algorithms. Equipment is grouped, status data is collected to determine safety hazards, and early warning notification is generated.
It realizes automated identity identification and grouping of IT equipment, improves management accuracy and comprehensiveness, reduces the complexity of security risks interpretation, and improves the detection sensitivity of network and physical security risks.
Smart Images

Figure CN118802833B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of IT equipment management, and in particular to an IT equipment status management system based on data acquisition. Background Art
[0002] In recent years, thanks to the popularization of technologies such as big data and the Internet of Things, the production and operation or office activities of various industrial and commercial enterprises, public institutions and government departments have gradually transformed into an information-based and networked working mode, which requires various IT equipment to provide technical support, including but not limited to computers, mobile terminals, servers, network equipment, etc. With the continuous innovation and development of IT equipment, its types and quantities are also increasing. As a result, the complexity of real-time management of IT equipment by various institutions has also increased rapidly. Therefore, it is necessary to adopt a high-quality IT equipment status management system to monitor and manage the real-time status of IT equipment to ensure the normal operation and timely maintenance of IT equipment.
[0003] At present, the Chinese invention patent with application number 202410619687.0 discloses an integrated operation and maintenance management evaluation method and system for IT equipment based on the Internet of Things. The invention specifically includes: classifying historical problem data of IT operation and maintenance services; collecting corresponding IT operation and maintenance service business indicator data; evaluating IT operation and maintenance service business indicator data through an IT operation and maintenance service business evaluation model, and distinguishing and displaying the corresponding IT operation and maintenance service business economic benefits according to the IT operation and maintenance service business operation status. The invention evaluates IT operation and maintenance service business indicator data through an IT operation and maintenance service business evaluation model, distinguishes and displays the corresponding IT operation and maintenance service business economic benefits, and achieves the effect of effectively evaluating and managing the economic benefits of integrated operation and maintenance of IT equipment, solving the problem that it is difficult to effectively evaluate and manage the economic benefits of integrated operation and maintenance of IT equipment in the prior art. However, the invention does not establish an identity tag library for IT equipment and group them, ignoring the characteristics that there are many types of IT equipment, and even the same type of equipment has different execution functions, which is not conducive to differentiated and accurate management of IT equipment. At the same time, it focuses on economic benefit evaluation, and the security of the system is insufficient. Summary of the invention
[0004] The technical problem solved by the present invention is that the traditional technology does not establish an identity tag library for IT equipment and group them, ignoring the fact that there are many types of IT equipment and the same type of equipment has different functions, which is not conducive to differentiated and accurate management of IT equipment. At the same time, the accuracy of judging system security risks is often not high, which is easy to cause risk neglect and false alarm.
[0005] In order to solve the above technical problems, the present invention provides the following technical solutions:
[0006] An IT equipment status management system based on data acquisition, comprising: an IT equipment identification module, a security assessment and early warning module, a status data acquisition module, a data management and storage module and an interactive terminal module;
[0007] IT equipment identification module, security assessment and early warning module, status data collection module, data management and storage module and interactive terminal module;
[0008] The IT equipment identification module is used to establish an IT equipment identity library and group IT equipment, generate an IT equipment identity tag based on the first status data set sent by the status data acquisition module, obtain an IT equipment identity library based on the IT equipment identity tag, calculate a first IT equipment group based on the identity tag and a priority model, and calculate a second IT equipment group based on the identity tag and a clustering algorithm;
[0009] The security assessment and early warning module is used to detect the network security status and physical security status of IT equipment, identify network security risks based on the fourth status data set, the historical network status data set and the first IT equipment group, identify physical security risks based on the third status data set and the second IT equipment group, and send a first early warning notification and a second early warning notification to the interactive terminal module;
[0010] The status data acquisition module is used to collect IT equipment status data, collect the third status data set according to the first IT equipment grouping arrangement wireless sensor network, and send the collected IT equipment status data to the IT equipment identification module, the security assessment and early warning module and the data management and storage module;
[0011] The data management and storage module is used to receive data and establish a historical database, receive all data sent by the status data acquisition module, IT equipment identity module and security assessment and early warning module and establish a data index, and send corresponding storage data according to the requests of the status data acquisition module, IT equipment identity module, security assessment and early warning module and interactive terminal module;
[0012] The interactive terminal module is used to perform human-computer interaction functions, receive instructions from administrators to read data in the data management and storage module and perform visualization processing to generate IT equipment status reports;
[0013] The status data collection module is used to collect the data required by the IT equipment status management system, including:
[0014] Collect data and establish a first state data set and a second state data set, and send the first state data set and the second state data set to an IT equipment identification module;
[0015] The first status data set includes IP data, port data, CPU model data, manufacturer code data, IT device model data and IT device serial number data;
[0016] The second status data set includes IT device response time data, network connection time data, IT device CPU utilization data, memory utilization data and network throughput data;
[0017] Collect data and establish a third state data set and a fourth state data, and send the third state data set and the fourth state data to a safety assessment and early warning module;
[0018] The third state data set includes temperature data, static data, humidity data, smoke data, and neutral-ground voltage data;
[0019] The fourth state data set includes process data, memory utilization increment and duration data, traffic peak and peak duration data, port link data and traffic protocol distribution data;
[0020] The historical network status data set includes historical average process data, historical average memory utilization increment and duration data, historical average traffic peak and peak duration data, historical average port link data and historical traffic protocol distribution data.
[0021] Wherein, an environmental wireless sensor network is arranged based on the result of the first IT device grouping, and data is collected through the environmental wireless sensor network to obtain a third state data set. The environmental wireless sensor network includes a temperature sensor, a humidity sensor, a smoke sensor, a current sensor and a voltage sensor.
[0022] As a preferred solution of an IT equipment status management system based on data acquisition described in the present invention, wherein: the IT equipment identity identification module is used to establish an IT equipment identity library and group IT equipment, and the calculation logic for establishing the IT equipment identity library is: extracting identity features based on the first status data set sent by the status data acquisition module to obtain a first IT equipment identity feature set, obtaining an IT equipment identity tag based on the first status data set and the first IT equipment identity feature set, and generating an IT equipment identity library based on the IT equipment and the corresponding IT equipment identity tag;
[0023] As a preferred solution of an IT equipment status management system based on data acquisition described in the present invention, wherein: the calculation logic of the identity feature extraction is: extracting the CPU model data, manufacturer code data, IT equipment model data and IT equipment serial number data in the first status data set, performing standardization processing to obtain the first inherent IT equipment data, performing hash calculation on the first inherent IT equipment data set through the MD5 hash function to obtain the second inherent IT equipment data, and performing vectorization processing on the IP data, port data and the second inherent IT equipment data to obtain the first IT equipment identity feature set;
[0024] The processing logic of the standardization processing is: removing spaces, separators and line breaks in the CPU model data, manufacturer code data, IT device model data and IT device serial number data, and converting all letters in the CPU model data, manufacturer code data, IT device model data and IT device serial number data into uppercase format, and obtaining a first inherent IT device data set by data splicing;
[0025] The generation logic of the IT device identity tag is: obtaining an identity table identification string based on the IP data and port data in the first state data set, and obtaining the IT device identity tag based on the identity table identification string.
[0026] As a preferred solution of an IT equipment status management system based on data acquisition described in the present invention, wherein: the IT equipment identification module is used to classify IT equipment to obtain a first IT equipment group and a second IT equipment group, and the calculation logic of the first IT equipment group is: receiving a second status data set from a status data acquisition module, performing data cleaning and normalization processing on the data in the second status data set to obtain a first group data set, calculating a priority score for each IT device through the first group data set and a priority model, and performing a threshold based on the priority score to determine the priority level of the IT equipment as high priority, medium priority and low priority, thereby completing the first IT equipment grouping;
[0027] The priority model calculation expression is:
[0028] Among them, PR represents the priority score, Indicates IT equipment response time data, Indicates the IT equipment response time weight, Indicates network connection time data, Represents the network connection time weight, Indicates the CPU utilization data of IT equipment. Indicates the CPU utilization weight of IT equipment. Indicates memory utilization data, Indicates the memory utilization weight, Represents network throughput data, Indicates the network throughput weight.
[0029] As a preferred solution of an IT equipment status management system based on data acquisition described in the present invention, wherein: the IT equipment identity identification module is used to classify IT equipment to obtain a second IT equipment group, and the calculation logic of the second IT equipment group is: add reference IT equipment type data to the first inherent IT equipment data to obtain third inherent IT equipment data, classify the third inherent IT equipment data through a clustering algorithm, randomly select K data points as initial clustering centers, calculate the Euclidean distance between each data point and each initial clustering center, and assign each data point to the initial clustering center with the smallest Euclidean distance based on the minimum Euclidean distance assignment principle to form an initial cluster, calculate the mean of all data points in the initial cluster to obtain the average value within the cluster, obtain an updated clustering center based on the average value within the cluster, stop the iterative calculation after M times to obtain the clustering result, add an IT equipment type label to the cluster where the reference IT equipment type data is located based on the clustering result, and obtain the second IT equipment group based on the IT equipment type label;
[0030] Among them, the K value, M value and reference IT equipment type data are preset values.
[0031] As a preferred solution of the IT equipment status management system based on data acquisition described in the present invention, the security assessment and early warning module is used to judge and warn the security status of IT equipment, and issue a first early warning notification when it is judged that there is a physical safety hazard, and issue a second early warning notification when it is judged that there is a network security hazard;
[0032] A third state data set is received from the state data acquisition module, and a physical safety hazard state is determined based on the third state data set and the second IT equipment group. If a physical safety hazard exists, the security assessment and early warning module sends a first early warning notification to the interactive terminal module. The physical safety hazard determination logic is as follows: S types of IT equipment are obtained based on the second IT equipment group, and S physical threshold sets are obtained based on the S types of IT equipment and the preset physical safety hazard threshold group. When the data in the third state data set is greater than or equal to the threshold in the corresponding physical threshold set, it is determined that a physical safety hazard exists.
[0033] As a preferred solution of the IT equipment status management system based on data acquisition described in the present invention, wherein: the security assessment and early warning module is used to monitor and warn the security status of IT equipment, receive a fourth status data set from the status data acquisition module, receive a historical network status data set from the data management and storage module, perform a difference calculation based on the fourth status data set and the historical network status data set to obtain a deviation data set, determine a threshold judgment standard based on the first IT equipment grouping, judge network security risks based on the deviation data set and the threshold judgment standard, and if the judgment result is that there is a network security risk, the security assessment and early warning module sends a second early warning notification to the interactive terminal module;
[0034] The logic for judging network security risks is as follows: the first threshold set is used to judge high-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the first threshold set, the judgment result is that there is a network security risk. The second threshold set is used to judge medium-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the second threshold set, the judgment result is that there is a network security risk. The third threshold set is used to judge low-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the third threshold set, the judgment result is that there is a network security risk.
[0035] As a preferred solution of the IT equipment status management system based on data acquisition described in the present invention, wherein: the data management and storage module is used to receive all data and establish a historical database, receive all data sent by the status data acquisition module, the IT equipment identity module and the security assessment and early warning module and establish a data index, establish a historical database based on the data index, and send corresponding storage data according to the requests of the status data acquisition module, the IT equipment identity module, the security assessment and early warning module and the interactive terminal module.
[0036] As a preferred solution of the IT equipment status management system based on data acquisition described in the present invention, the interactive terminal module is used to provide an operation interface, allowing users to perform interactive operations and send early warning notifications to users, extract data from the data management and storage module based on user instructions and generate a visual IT equipment status report, set the authority levels of different administrators and record the administrator's operation history.
[0037] The beneficial effects of the present invention are as follows: automatic identification of IT equipment and establishment of identity tags through remote network communication avoids manual entry and registration of each IT equipment, which is conducive to quickly handling the situation where the number of IT equipment is huge and distributed in different physical locations. Establishing IT equipment identity tags can not only provide unique identification codes for IT equipment, but also comprehensively reflect IT equipment information. At the same time, the privacy data security of the equipment can be protected through hash value calculation, which is conducive to direct subsequent calculations as equipment identity feature values, reducing the complexity of subsequent calculations. Based on the first IT equipment grouping result, IT equipment such as computers, computers and printers are classified according to the frequency of use and work intensity, which is conducive to the use of different thresholds for safety hazard judgment during subsequent equipment management, improves the sensitivity of safety hazard judgment, and is conducive to arranging maintenance frequency. Network security risks and physical security risks are distinguished separately, which improves the comprehensiveness and accuracy of IT equipment status management. BRIEF DESCRIPTION OF THE DRAWINGS
[0038] Figure 1 An IT equipment status management system based on data acquisition provided by an embodiment of the present invention
[0039] Schematic diagram of the basic process.
[0040] Figure 2 for Figure 1 A schematic diagram of the basic framework of an IT equipment status management system based on data acquisition provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0041] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings. It is obvious that the described embodiments are only part of the embodiments of the present invention, but not all of the embodiments.
[0042] Example 1, reference Figure 1 and Figure 2 , as an embodiment of the present invention, provides an IT equipment status management system based on data acquisition, including:
[0043] IT equipment identification module, security assessment and early warning module, status data collection module, data management and storage module and interactive terminal module;
[0044] The IT equipment identification module is used to establish an IT equipment identity library and group IT equipment, generate an IT equipment identity tag based on the first status data set sent by the status data acquisition module, obtain an IT equipment identity library based on the IT equipment identity tag, calculate a first IT equipment group based on the identity tag and a priority model, and calculate a second IT equipment group based on the identity tag and a clustering algorithm;
[0045] The security assessment and early warning module is used to detect the network security status and physical security status of IT equipment, identify network security risks based on the fourth status data set, the historical network status data set and the first IT equipment group, identify physical security risks based on the third status data set and the second IT equipment group, and send a first early warning notification and a second early warning notification to the interactive terminal module;
[0046] The status data acquisition module is used to collect IT equipment status data, collect the third status data set according to the first IT equipment grouping arrangement wireless sensor network, and send the collected IT equipment status data to the IT equipment identification module, the security assessment and early warning module and the data management and storage module;
[0047] The data management and storage module is used to receive data and establish a historical database, receive all data sent by the status data acquisition module, IT equipment identity module and security assessment and early warning module and establish a data index, and send corresponding storage data according to the requests of the status data acquisition module, IT equipment identity module, security assessment and early warning module and interactive terminal module;
[0048] The interactive terminal module is used to perform human-computer interaction functions, receive instructions from administrators to read data in the data management and storage module and perform visualization processing to generate IT equipment status reports;
[0049] The status data collection module is used to collect the data required by the IT equipment status management system, including:
[0050] Collect data and establish a first state data set and a second state data set, and send the first state data set and the second state data set to an IT equipment identification module;
[0051] The first status data set includes IP data, port data, CPU model data, manufacturer code data, IT device model data and IT device serial number data;
[0052] The second status data set includes IT device response time data, network connection time data, IT device CPU utilization data, memory utilization data and network throughput data;
[0053] Collect data and establish a third state data set and a fourth state data, and send the third state data set and the fourth state data to a safety assessment and early warning module;
[0054] The third state data set includes temperature data, static data, humidity data, smoke data, and neutral-ground voltage data;
[0055] The fourth state data set includes process data, memory utilization increment and duration data, traffic peak and peak duration data, port link data and traffic protocol distribution data;
[0056] The historical network status data set includes historical average process data, historical average memory utilization increment and duration data, historical average traffic peak and peak duration data, historical average port link data and historical traffic protocol distribution data.
[0057] Wherein, an environmental wireless sensor network is arranged based on the result of the first IT device grouping, and data is collected through the environmental wireless sensor network to obtain a third state data set. The environmental wireless sensor network includes a temperature sensor, a humidity sensor, a smoke sensor, a current sensor and a voltage sensor.
[0058] In this embodiment, the IT equipment identity identification module is used to establish an IT equipment identity library and group IT equipment. The calculation logic for establishing the IT equipment identity library is: extracting identity features based on the first state data set sent by the state data acquisition module to obtain a first IT equipment identity feature set, obtaining an IT equipment identity tag based on the first state data set and the first IT equipment identity feature set, and generating an IT equipment identity library based on the IT equipment and the corresponding IT equipment identity tag;
[0059] In this embodiment, the calculation logic of the identity feature extraction is: extract the CPU model data, manufacturer code data, IT device model data and IT device serial number data in the first state data set, perform standardization processing on the first inherent IT device data set to obtain the second inherent IT device data, perform hash calculation on the first inherent IT device data set through the MD5 hash function to obtain the second inherent IT device data, and perform vectorization processing on the IP data, port data and the second inherent IT device data to obtain the first IT device identity feature set;
[0060] The processing logic of the standardization processing is: removing spaces, separators and line breaks in the CPU model data, manufacturer code data, IT device model data and IT device serial number data, and converting all letters in the CPU model data, manufacturer code data, IT device model data and IT device serial number data into uppercase format, and obtaining a first inherent IT device data set by data splicing;
[0061] The generation logic of the IT device identity tag is: obtaining an identity table identification string based on the IP data and port data in the first state data set, and obtaining the IT device identity tag based on the identity table identification string.
[0062] Among them, the identity tag generation method of this embodiment avoids manual input registration of each IT device, but automatically identifies the IT device through network communication, which is conducive to quickly handling the situation where the number of IT devices is huge and distributed in different physical locations. Establishing an IT device identity tag can not only provide a unique identification code for the IT device, but also comprehensively reflect the IT device information, providing a basis for further grouping. The hash value calculation can protect the privacy data security of the device, and is conducive to directly performing subsequent calculations as a device identity feature value.
[0063] In this embodiment, the IT equipment identification module is used to classify IT equipment to obtain a first IT equipment group and a second IT equipment group. The calculation logic of the first IT equipment group is: receiving a second state data set from the state data acquisition module, performing data cleaning and normalization processing on the data in the second state data set to obtain a first group data set, calculating a priority score for each IT device through the first group data set and the priority model, and performing a threshold based on the priority score to determine the priority level of the IT device as high priority, medium priority and low priority, thereby completing the first IT equipment group;
[0064] The priority model calculation expression is: ;
[0065] Among them, PR represents the priority score, Indicates IT equipment response time data, Indicates the IT equipment response time weight, Indicates network connection time data, Represents the network connection time weight, Indicates the CPU utilization data of IT equipment. Indicates the CPU utilization weight of IT equipment. Indicates memory utilization data, Indicates the memory utilization weight, Represents network throughput data, Indicates the network throughput weight.
[0066] Among them, based on the first IT equipment grouping result, IT equipment such as computers, printers, etc. are classified according to the frequency of use and work intensity, which is conducive to using different thresholds to judge safety hazards in subsequent equipment management, improves the sensitivity and accuracy of safety hazard judgment, and is conducive to arranging maintenance frequency.
[0067] In this embodiment, the IT equipment identity identification module is used to classify IT equipment to obtain a second IT equipment group. The calculation logic of the second IT equipment group is: add reference IT equipment type data to the first inherent IT equipment data to obtain third inherent IT equipment data, classify the third inherent IT equipment data through a clustering algorithm, randomly select K data points as initial cluster centers, calculate the Euclidean distance between each data point and each initial cluster center, and assign each data point to the initial cluster center with the smallest Euclidean distance based on the minimum Euclidean distance assignment principle to form an initial cluster, perform mean calculation on all data points in the initial cluster to obtain an intra-cluster average value, obtain an updated cluster center based on the intra-cluster average value, stop after iterative calculation M times to obtain a clustering result, add an IT equipment type label to the cluster where the reference IT equipment type data is located based on the clustering result, and obtain a second IT equipment group based on the IT equipment type label;
[0068] Among them, the K value, M value and reference IT equipment type data are preset values.
[0069] In this embodiment, the security assessment and early warning module is used to judge and warn the security status of IT equipment, and issue a first early warning notification if a physical security risk exists, and issue a second early warning notification if a network security risk exists;
[0070] A third state data set is received from the state data acquisition module, and a physical safety hazard state is determined based on the third state data set and the second IT equipment group. If a physical safety hazard exists, the security assessment and early warning module sends a first early warning notification to the interactive terminal module. The physical safety hazard determination logic is as follows: S types of IT equipment are obtained based on the second IT equipment group, and S physical threshold sets are obtained based on the S types of IT equipment and the preset physical safety hazard threshold group. When the data in the third state data set is greater than or equal to the threshold in the corresponding physical threshold set, it is determined that a physical safety hazard exists.
[0071] In this embodiment, the security assessment and early warning module is used to monitor and warn the security status of IT equipment, receive a fourth status data set from the status data acquisition module, receive a historical network status data set from the data management and storage module, perform a difference calculation based on the fourth status data set and the historical network status data set to obtain a deviation data set, determine a threshold judgment standard based on the first IT equipment grouping, judge network security risks based on the deviation data set and the threshold judgment standard, and if the judgment result is that there is a network security risk, the security assessment and early warning module sends a second early warning notification to the interactive terminal module;
[0072] The logic for judging network security risks is as follows: the first threshold set is used to judge high-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the first threshold set, the judgment result is that there is a network security risk. The second threshold set is used to judge medium-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the second threshold set, the judgment result is that there is a network security risk. The third threshold set is used to judge low-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the third threshold set, the judgment result is that there is a network security risk.
[0073] In this embodiment, the data management and storage module is used to receive all data and establish a historical database, receive all data sent by the status data acquisition module, IT equipment identity module and security assessment and early warning module and establish a data index, establish a historical database based on the data index, and send corresponding storage data according to the requests of the status data acquisition module, IT equipment identity module, security assessment and early warning module and interactive terminal module.
[0074] In this embodiment, the interactive terminal module is used to provide an operation interface, allowing users to perform interactive operations and send early warning notifications to users, extract data from the data management and storage module based on user instructions and generate a visual IT equipment status report, set the authority levels of different administrators and record the administrator's operation history.
[0075] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program codes. Among them, the storage medium may be implemented by any type of volatile or non-volatile storage IT device or a combination thereof, such as static random access memory (Static Random Access Memory, referred to as SRAM), electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, referred to as EEPROM), erasable programmable read-only memory (Erasable Programmable Read Only Memory, referred to as EPROM), programmable read-only memory (Programmable Red-Only Memory, referred to as PROM), read-only memory (Read-Only Memory, referred to as ROM), magnetic memory, flash memory, magnetic disk or optical disk. These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing IT equipment to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0076] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.
Claims
1. An IT equipment status management system based on data acquisition, It is characterized in that include: IT equipment identification module, security assessment and early warning module, status data collection module, data management and storage module and interactive terminal module; The IT equipment identification module is used to establish an IT equipment identity library and group IT equipment, generate an IT equipment identity tag based on the first status data set sent by the status data acquisition module, obtain an IT equipment identity library based on the IT equipment identity tag, calculate a first IT equipment group based on the identity tag and a priority model, and calculate a second IT equipment group based on the identity tag and a clustering algorithm; The security assessment and early warning module is used to detect the network security status and physical security status of IT equipment, identify network security risks based on the fourth status data set, the historical network status data set and the first IT equipment group, identify physical security risks based on the third status data set and the second IT equipment group, and send a first early warning notification and a second early warning notification to the interactive terminal module; The status data acquisition module is used to collect IT equipment status data, collect the third status data set according to the first IT equipment grouping arrangement wireless sensor network, and send the collected IT equipment status data to the IT equipment identification module, the security assessment and early warning module and the data management and storage module; The data management and storage module is used to receive data and establish a historical database, receive all data sent by the status data acquisition module, IT equipment identity module and security assessment and early warning module and establish a data index, and send corresponding storage data according to the requests of the status data acquisition module, IT equipment identity module, security assessment and early warning module and interactive terminal module; The interactive terminal module is used to perform human-computer interaction functions, receive instructions from administrators to read data in the data management and storage module and perform visualization processing to generate IT equipment status reports; The status data collection module is used to collect the data required by the IT equipment status management system, including: Collect data and establish a first state data set and a second state data set, and send the first state data set and the second state data set to an IT equipment identification module; The first status data set includes IP data, port data, CPU model data, manufacturer code data, IT device model data and IT device serial number data; The second status data set includes IT device response time data, network connection time data, IT device CPU utilization data, memory utilization data and network throughput data; Collect data and establish a third state data set and a fourth state data, and send the third state data set and the fourth state data to a safety assessment and early warning module; The third state data set includes temperature data, static data, humidity data, smoke data, and neutral-ground voltage data; The fourth state data set includes process data, memory utilization increment and duration data, traffic peak and peak duration data, port link data and traffic protocol distribution data; The historical network status data set includes historical average process data, historical average memory utilization increment and duration data, historical average traffic peak and peak duration data, historical average port link data and historical traffic protocol distribution data; Wherein, an environmental wireless sensor network is arranged based on the result of the first IT device grouping, and data is collected through the environmental wireless sensor network to obtain a third state data set. The environmental wireless sensor network includes a temperature sensor, a humidity sensor, a smoke sensor, a current sensor and a voltage sensor.
2. An IT equipment status management system based on data acquisition as claimed in claim 1, Features: The IT equipment identity identification module is used to establish an IT equipment identity library and group IT equipment. The calculation logic for establishing the IT equipment identity library is: extracting identity features based on the first state data set sent by the state data acquisition module to obtain a first IT equipment identity feature set, obtaining an IT equipment identity tag based on the first state data set and the first IT equipment identity feature set, and generating an IT equipment identity library based on the IT equipment and the corresponding IT equipment identity tag.
3. An IT equipment status management system based on data acquisition as claimed in claim 2, Features: The calculation logic of the identity feature extraction is: extract the CPU model data, manufacturer code data, IT device model data and IT device serial number data in the first state data set, perform standardization processing on the first inherent IT device data set, perform hash calculation on the first inherent IT device data set through the MD5 hash function to obtain the second inherent IT device data, and perform vectorization processing on the IP data, port data and the second inherent IT device data to obtain the first IT device identity feature set; The processing logic of the standardization processing is: removing spaces, separators and line breaks in the CPU model data, manufacturer code data, IT device model data and IT device serial number data, and converting all letters in the CPU model data, manufacturer code data, IT device model data and IT device serial number data into uppercase format, and obtaining a first inherent IT device data set by data splicing; The generation logic of the IT device identity tag is: obtaining an identity table identification string based on the IP data and port data in the first state data set, and obtaining the IT device identity tag based on the identity table identification string.
4. An IT equipment status management system based on data acquisition as claimed in claim 1, Features: The IT equipment identification module is used to classify IT equipment to obtain a first IT equipment group and a second IT equipment group. The calculation logic of the first IT equipment group is: receiving a second state data set from the state data acquisition module, performing data cleaning and normalization processing on the data in the second state data set to obtain a first group data set, calculating a priority score for each IT equipment through the first group data set and the priority model, and performing a threshold based on the priority score to determine the priority level of the IT equipment as high priority, medium priority and low priority, thereby completing the first IT equipment group; The priority model calculation expression is: ; Among them, PR represents the priority score, Indicates IT equipment response time data, Indicates the IT equipment response time weight, Indicates network connection time data, Represents the network connection time weight, Indicates the CPU utilization data of IT equipment. Indicates the CPU utilization weight of IT equipment. Indicates memory utilization data, Indicates the memory utilization weight, Represents network throughput data, Indicates the network throughput weight.
5. The IT equipment status management system based on data acquisition as claimed in claim 4, Features: The IT equipment identification module is used to classify IT equipment to obtain a second IT equipment group. The calculation logic of the second IT equipment group is: add reference IT equipment type data to the first inherent IT equipment data to obtain third inherent IT equipment data, classify the third inherent IT equipment data through a clustering algorithm, randomly select K data points as initial cluster centers, calculate the Euclidean distance between each data point and each initial cluster center, and assign each data point to the initial cluster center with the smallest Euclidean distance to form an initial cluster based on the minimum Euclidean distance assignment principle, perform mean calculation on all data points in the initial cluster to obtain an intra-cluster average value, obtain an updated cluster center based on the intra-cluster average value, stop the iterative calculation after M times to obtain a clustering result, add an IT equipment type label to the cluster where the reference IT equipment type data is located based on the clustering result, and obtain the second IT equipment group based on the IT equipment type label; Among them, the K value, M value and reference IT equipment type data are preset values.
6. An IT equipment status management system based on data acquisition as claimed in claim 1, Features: The security assessment and early warning module is used to identify and warn the security status of IT equipment. If a physical security risk exists, a first early warning notification is issued. If a network security risk exists, a second early warning notification is issued. A third status data set is received from the status data acquisition module, and the physical safety hazard status is judged based on the third status data set and the second IT equipment grouping. If a physical safety hazard exists, the security assessment and early warning module sends a first early warning notification to the interactive terminal module. The physical safety hazard judgment logic is as follows: S types of IT equipment are obtained based on the second IT equipment grouping, and S physical threshold sets are obtained based on the S types of IT equipment and the preset physical safety hazard threshold group. When the data in the third status data set is greater than or equal to the threshold in the corresponding physical threshold set, it is judged that a physical safety hazard exists.
7. An IT equipment status management system based on data acquisition as claimed in claim 6, Features: The security assessment and early warning module is used to monitor and warn the security status of IT equipment, receive a fourth status data set from the status data acquisition module, receive a historical network status data set from the data management and storage module, perform a difference calculation based on the fourth status data set and the historical network status data set to obtain a deviation data set, determine a threshold judgment standard based on the first IT equipment grouping, judge network security risks based on the deviation data set and the threshold judgment standard, and if the judgment result is that there is a network security risk, the security assessment and early warning module sends a second early warning notification to the interactive terminal module; The logic for judging network security risks is as follows: the first threshold set is used to judge high-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the first threshold set, the judgment result is that there is a network security risk. The second threshold set is used to judge medium-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the second threshold set, the judgment result is that there is a network security risk. The third threshold set is used to judge low-priority IT equipment. If the deviation data set is greater than or equal to the corresponding threshold data in the third threshold set, the judgment result is that there is a network security risk.
8. An IT equipment status management system based on data acquisition as claimed in claim 1, Features: The data management and storage module is used to receive all data and establish a historical database, receive all data sent by the status data acquisition module, IT equipment identity module and security assessment and early warning module and establish a data index, establish a historical database based on the data index, and send corresponding storage data according to the requests of the status data acquisition module, IT equipment identity module, security assessment and early warning module and interactive terminal module.
9. The IT equipment status management system based on data acquisition as claimed in claim 1, Features: The interactive terminal module is used to provide an operation interface, allowing users to perform interactive operations and send early warning notifications to users. Based on user instructions, it extracts data from the data management and storage module and generates a visual IT equipment status report, sets the authority levels of different administrators and records the administrator's operation history.
