A method for updating task parameters in a data center physical isolation environment

Abstract

The present invention relates to the field of computers, and in particular to a method for updating task parameters in a physical isolation environment of a data center, comprising: collecting physical isolation environment parameters of each physical isolation unit of the data center; determining an isolation unit weight evaluation value; determining whether a public key needs to be set for access to the physical isolation unit; setting and storing preset security authentication parameters for the corresponding task; adjusting the corresponding task data level stored in the physical isolation unit; completing automatic release of the task under the condition that the task parameters of the released task match the preset security authentication parameters; counting the frequency of verification failures under the condition that the task parameters of the released task do not match the preset security authentication parameters; and correcting the update cycle of the preset security authentication parameters. The security of data in each physical isolation unit of the data center is improved.

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to a method for updating task parameters in a physical isolation environment of a data center. Background Art

[0002] As the amount of enterprise data continues to increase, data middle platforms, as a platform for centralized data management, are widely used in enterprise data processing and analysis. In the actual application of data middle platforms, it is often necessary to publish tasks to different physically isolated environments, and the parameters of tasks, such as security authentication information, often vary due to differences in environments.

[0003] At present, it is usually necessary to manually modify task parameters to adapt to different physical isolation environments. This method is not only cumbersome but also prone to errors, thus affecting the security of data. Therefore, it is necessary to design a method for updating task parameters in a physical isolation environment of a data center to improve data security. Summary of the invention

[0004] To this end, the present invention provides a method for updating task parameters of a physical isolation environment in a data center, so as to overcome the data security problems caused by the cumbersome steps and high error rate of manually modifying the security authentication information of each physical isolation environment setting in the data center in the prior art.

[0005] To achieve the above object, the present invention provides a method for updating task parameters in a data center physical isolation environment, comprising:

[0006] Collect the physical isolation environment parameters of each physical isolation unit in the data center, where the physical isolation environment parameters include the storage capacity of the physical isolation unit, the computing power of the physical isolation unit, and the power fluctuation frequency of the physical isolation unit;

[0007] Determine the isolation unit weight evaluation value according to the physical isolation environment parameters;

[0008] Determining whether a public key needs to be set for access to the physical isolation unit based on the isolation unit weight evaluation value;

[0009] According to the data level stored in the physical isolation unit, preset security authentication parameters for the corresponding tasks are set and stored;

[0010] Adjusting the level of corresponding task data stored in the physical isolation unit based on the task release frequency;

[0011] Automatically publish the task under the condition that the task parameters of the published task match the preset security authentication parameters;

[0012] Count the verification failure frequency when the task parameters of the published task do not match the preset security authentication parameters;

[0013] In response to the verification failure frequency being greater than a preset verification failure frequency and based on the data storage ratio of each level, an update period of a preset security authentication parameter is modified.

[0014] Furthermore, the isolation unit weight evaluation value is calculated according to the following formula:

[0015]

[0016] In the formula, T is the weight evaluation value of the isolation unit, ε is the storage evaluation coefficient, ε=0.35 is set, B is the storage size of the isolation unit, B0 is the preset storage threshold, is the computing power evaluation coefficient, set S is the computing power of the isolation unit, S0 is the preset computing power threshold, λ is the power stability evaluation coefficient, λ=0.24 is set, V is the power supply voltage fluctuation frequency of the isolation unit, and V0 is the preset fluctuation frequency threshold.

[0017] Further, the process of determining whether a public key needs to be set for access to the physical isolation unit based on the isolation unit weight evaluation value includes:

[0018] Comparing the isolation unit weight evaluation value with a preset weight evaluation value threshold;

[0019] If the weight evaluation value of the isolation unit is greater than or equal to the preset weight evaluation value threshold, a public key is set for access to the physical isolation unit.

[0020] Furthermore, the data levels stored in the physical isolation unit include primary data, secondary data and tertiary data, wherein data whose access rights are only for a single user is marked as primary data, data whose access rights are only for some users is marked as secondary data, and data whose access rights are for all users is marked as tertiary data.

[0021] Furthermore, preset security authentication parameters of the corresponding tasks are set according to the data level stored in the physical isolation unit, wherein:

[0022] If the data level is level one data, the preset security authentication parameters of the data are set to perform private key authentication and portrait authentication in sequence;

[0023] If the data level is level 2 data, the preset security authentication parameters of the data are set to perform private key authentication;

[0024] If the data level is level three data, no preset security authentication parameters are set.

[0025] Further, the level of the corresponding task data stored in the physical isolation unit is adjusted based on the task release frequency, wherein:

[0026] If the task release frequency is less than the first preset frequency, the level of the corresponding task data stored in the physical isolation unit is increased by one level, and if the data level is level three data, the level is not changed;

[0027] If the task publishing frequency is greater than or equal to the first preset frequency and less than the second preset frequency, the corresponding task data level stored in the physical isolation unit is not changed;

[0028] If the task release frequency is greater than or equal to the second preset frequency, the level of the corresponding task data stored in the physical isolation unit is reduced by one level; if the data level is level one data, the level is not changed.

[0029] Furthermore, the process of modifying the update cycle of the preset security authentication parameters based on the data storage ratio of each level includes:

[0030] Calculate the total storage ratio of the primary data and the secondary data in the physical isolation unit;

[0031] Compare the obtained total storage ratio with a preset storage ratio threshold;

[0032] If the total storage ratio is greater than the preset storage ratio threshold, the update period of the preset security authentication parameter is corrected according to the difference between the total storage ratio and the preset storage ratio threshold.

[0033] Furthermore, several correction methods are provided for the correction of the update period, and each correction method has a different correction range for the update period.

[0034] Further, in response to the verification failure frequency being greater than a preset verification failure frequency, a private key authentication mismatch is recorded as a verification failure, and a portrait authentication mismatch is recorded as a verification failure.

[0035] Furthermore, the automatic release of tasks includes reading, retrieving, copying and modifying the data stored in the physical isolation unit.

[0036] Compared with the prior art, the beneficial effect of the present invention lies in that: the present invention collects the physical isolation environment parameters of each physical isolation unit in the data center and determines the weight evaluation value of the isolation unit, thereby determining whether to set the public key based on the data calculation and carrying capacity of each isolation unit in the data center.

[0037] Furthermore, the present invention sets preset security authentication parameters corresponding to the task for the data stored in the physical isolation unit, so that when the task is released, the task parameters are matched with the preset security authentication parameters to complete the automatic release of the task.

[0038] Furthermore, the present invention also performs level updates for preset security authentication parameters and automatically optimizes the update cycle accordingly, thereby improving the security of data in the physically isolated environment of the data center. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 This is a flow chart of a method for updating task parameters in a physical isolation environment of a data center according to an embodiment of the present invention;

[0040] Figure 2 A flowchart of an embodiment of the present invention for determining whether a public key needs to be set for access to a physical isolation unit;

[0041] Figure 3 A flowchart of setting preset security authentication parameters for corresponding tasks according to an embodiment of the present invention;

[0042] Figure 4 The present invention is a flowchart of adjusting the corresponding task data level stored in the physical isolation unit according to an embodiment of the present invention. DETAILED DESCRIPTION

[0043] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0044] Those skilled in the art will appreciate that the method of determining a single parameter mentioned above in the method described in the present invention may be to select the value with the highest proportion as the preset standard parameter based on data distribution, use weighted summation to use the obtained value as the preset standard parameter, substitute each historical data into a specific formula and use the value obtained by the formula as the preset standard parameter or other selection methods, as long as the system described in the present invention can clearly define different specific situations in the single determination process through the obtained values.

[0045] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0046] See also Figure 1 , Figure 2 , Figure 3 as well as Figure 4 As shown, they are respectively a flowchart of a method for updating task parameters in a physical isolation environment of a data center according to an embodiment of the present invention; a flowchart of determining whether access to a physical isolation unit requires setting a public key according to an embodiment of the present invention; a flowchart of setting preset security authentication parameters for corresponding tasks according to an embodiment of the present invention; and a flowchart of adjusting the level of corresponding task data stored in the physical isolation unit according to an embodiment of the present invention.

[0047] An embodiment of the present invention provides a method for updating task parameters in a data center physical isolation environment, including:

[0048] Step S1, collecting physical isolation environment parameters of each physical isolation unit of the data center, wherein the physical isolation environment parameters include the storage capacity of the physical isolation unit, the computing power of the physical isolation unit, and the power fluctuation frequency of the physical isolation unit;

[0049] Step S2, determining the isolation unit weight evaluation value according to the physical isolation environment parameters;

[0050] Step S3, determining whether a public key needs to be set for access to the physical isolation unit based on the isolation unit weight evaluation value;

[0051] Step S4, setting and storing the corresponding task preset security authentication parameters according to the data level stored in the physical isolation unit;

[0052] Step S5, adjusting the corresponding task data level stored in the physical isolation unit based on the task release frequency;

[0053] Step S6, completing automatic release of the task under the condition that the task parameters of the released task match the preset security authentication parameters;

[0054] Step S7, counting the verification failure frequency under the condition that the task parameters of the published task do not match the preset security authentication parameters;

[0055] Step S8, in response to the verification failure frequency being greater than a preset verification failure frequency of 3 times / h and based on the data storage ratio of each level, the updating period of the preset security authentication parameter is corrected.

[0056] Specifically, the task parameters of the published task include security authentication parameters.

[0057] It should be pointed out that the data in this embodiment are all the results obtained through preliminary operation verification by the method described in the present invention before the release of this task. The preset thresholds can be adjusted according to the specific usage, as long as the method described in the present invention can clearly define the different specific situations in the single judgment process through the obtained values.

[0058] Specifically, in step S2, the isolation unit weight evaluation value is calculated according to the following formula:

[0059]

[0060] In the formula, T is the weight evaluation value of the isolation unit, ε is the storage evaluation coefficient, ε is set to 0.35, B is the storage size of the isolation unit, B0 is the preset storage threshold, and B0 is set to 50T. is the computing power evaluation coefficient, set S is the computing power of the isolation unit, S0 is the preset computing power threshold, and S0=5×10 5 H / s, λ is the power stability evaluation coefficient, set λ = 0.24, V is the frequency of fluctuation of the power supply voltage of the isolation unit, V0 is the preset fluctuation frequency threshold, set V0 = 6 times / hour. It can be understood that the weight evaluation value of the isolation unit reflects the data computing and carrying capacity of the physical isolation unit corresponding to the data center, and represents the physical security performance of the data.

[0061] Specifically, a power supply voltage fluctuation of the isolation unit exceeding 50V and lasting more than 20ms is recorded as one power supply voltage fluctuation of the isolation unit. It can be understood that the power supply voltage fluctuation frequency of the isolation unit is the number of power supply voltage fluctuations of the isolation unit within a preset duration of 1h.

[0062] Specifically, the process of determining whether a public key needs to be set for access to a physical isolation unit based on the isolation unit weight evaluation value includes:

[0063] Comparing the isolation unit weight evaluation value with a preset weight evaluation value threshold of 1.22;

[0064] If the weight evaluation value of the isolation unit is greater than or equal to the preset weight evaluation value threshold, a public key is set for access to the physical isolation unit.

[0065] Specifically, the data levels stored in the physical isolation unit include primary data, secondary data and tertiary data, among which data whose access permission is only for a single user is marked as primary data, data whose access permission is only for some users is marked as secondary data, and data whose access permission is for all users is marked as tertiary data. It can be understood that the number of some users is less than the number of all users, and the number of all users is greater than or equal to 3.

[0066] Specifically, the preset security authentication parameters of the corresponding task are set according to the data level stored in the physical isolation unit, where:

[0067] If the data level is level one data, the preset security authentication parameters of the data are set to perform private key authentication and portrait authentication in sequence;

[0068] If the data level is level 2 data, the preset security authentication parameters of the data are set to perform private key authentication;

[0069] If the data level is level three data, no preset security authentication parameters are set.

[0070] Specifically, in step S5, the level of the corresponding task data stored in the physical isolation unit is adjusted based on the task release frequency, wherein:

[0071] If the task release frequency is less than the first preset frequency of 15 times / day, the level of the corresponding task data stored in the physical isolation unit is increased by one level, and if the data level is level three data, the level is not changed;

[0072] If the task publishing frequency is greater than or equal to the first preset frequency and less than the second preset frequency of 39 times / day, the corresponding task data level stored in the physical isolation unit is not changed;

[0073] If the task release frequency is greater than or equal to the second preset frequency, the level of the corresponding task data stored in the physical isolation unit is reduced by one level; if the data level is level one data, the level is not changed.

[0074] Specifically, the process of modifying the update cycle of the preset security authentication parameters based on the data storage ratio of each level includes:

[0075] Calculate the total storage ratio of the primary data and the secondary data in the physical isolation unit;

[0076] Compare the obtained total storage ratio with a preset storage ratio threshold of 77%;

[0077] If the total storage ratio is greater than the preset storage ratio threshold, the update period of the preset security authentication parameter is corrected according to the difference between the total storage ratio and the preset storage ratio threshold.

[0078] Specifically, there are several correction methods for the correction setting of the update cycle, among which,

[0079] Under the condition that the proportion difference is less than the first preset proportion difference of 2.21%, the corrected update period is determined by multiplying the first preset correction coefficient 0.97 by the product of the update period before correction;

[0080] Under the condition that the proportion difference is greater than or equal to the first preset proportion difference of 2.21% and less than the second preset proportion difference of 5.44%, the corrected update period is determined by multiplying the second preset correction coefficient of 0.90 by the product of the update period before correction;

[0081] Under the condition that the proportion difference is greater than or equal to the second preset proportion difference, a third preset correction coefficient of 0.82 is used to determine a corrected update period by multiplying the product with the update period before correction;

[0082] The percentage difference is the difference between the total storage percentage and a preset storage percentage threshold.

[0083] Specifically, the initial update cycle can be set according to user needs, such as 20 days, but there is no specific limit.

[0084] Specifically, in step S8, a private key authentication mismatch is recorded as a verification failure, and a portrait authentication mismatch is recorded as a verification failure.

[0085] Specifically, the automatic release of tasks includes reading, retrieving, copying and modifying the data stored in the physically isolated unit.

[0086] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0087] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for updating task parameters in a data center physical isolation environment, characterized in that: include: Collecting data on the physical isolation environment parameters of each physical isolation unit in the platform, wherein the physical isolation environment parameters include the storage capacity of the physical isolation unit, the computing power of the physical isolation unit, and the power fluctuation frequency of the physical isolation unit; Determine the isolation unit weight evaluation value according to the physical isolation environment parameters; Determining whether a public key needs to be set for access to the physical isolation unit based on the isolation unit weight evaluation value; According to the data level stored in the physical isolation unit, preset security authentication parameters for the corresponding tasks are set and stored; Adjusting the level of corresponding task data stored in the physical isolation unit based on the task release frequency; Automatically publish the task under the condition that the task parameters of the published task match the preset security authentication parameters; Count the verification failure frequency when the task parameters of the published task do not match the preset security authentication parameters; In response to the verification failure frequency being greater than a preset verification failure frequency and based on the data storage ratio of each level, modifying the update period of the preset security authentication parameter; The isolation unit weight evaluation value is calculated according to the following formula: ， In the formula, T is the weight evaluation value of the isolation unit, To store the evaluation coefficient, set , B is the storage size of the isolation unit, B0 is the preset storage threshold, is the computing power evaluation coefficient, set , S is the computing power of the isolation unit, S0 is the preset computing power threshold, For the power stability evaluation coefficient, set , V is the fluctuation frequency of the power supply voltage of the isolation unit, and V0 is the preset fluctuation frequency threshold.

2. According to the data center physical isolation environment task parameter updating method of claim 1, it is characterized in that: The process of determining whether a public key needs to be set for access to a physical isolation unit based on the isolation unit weight evaluation value includes: Comparing the isolation unit weight evaluation value with a preset weight evaluation value threshold; If the weight evaluation value of the isolation unit is greater than or equal to the preset weight evaluation value threshold, a public key is set for access to the physical isolation unit.

3. The method for updating task parameters in a data center physical isolation environment according to claim 2 is characterized in that: The data levels stored in the physical isolation unit include primary data, secondary data and tertiary data, wherein data whose access rights are only for a single user is marked as primary data, data whose access rights are only for some users is marked as secondary data, and data whose access rights are for all users is marked as tertiary data.

4. The method for updating task parameters in a data center physical isolation environment according to claim 3 is characterized in that: The preset security authentication parameters of the corresponding task are set according to the data level stored in the physical isolation unit, where: If the data level is level one data, the preset security authentication parameters of the data are set to perform private key authentication and portrait authentication in sequence; If the data level is level 2 data, the preset security authentication parameters of the data are set to perform private key authentication; If the data level is level three data, no preset security authentication parameters are set.

5. The method for updating task parameters in a data center physical isolation environment according to claim 4 is characterized in that: The corresponding task data level stored in the physical isolation unit is adjusted based on the task release frequency, wherein: If the task release frequency is less than the first preset frequency, the level of the corresponding task data stored in the physical isolation unit is increased by one level, and if the data level is level three data, the level is not changed; If the task publishing frequency is greater than or equal to the first preset frequency and less than the second preset frequency, the corresponding task data level stored in the physical isolation unit is not changed; If the task release frequency is greater than or equal to the second preset frequency, the level of the corresponding task data stored in the physical isolation unit is reduced by one level; if the data level is level one data, the level is not changed.

6. The method for updating task parameters in a data center physical isolation environment according to claim 5 is characterized in that: The process of modifying the update period of the preset security authentication parameters based on the data storage ratio of each level includes: Calculate the total storage ratio of the primary data and the secondary data in the physical isolation unit; Compare the obtained total storage ratio with a preset storage ratio threshold; If the total storage ratio is greater than the preset storage ratio threshold, the update period of the preset security authentication parameter is corrected according to the difference between the total storage ratio and the preset storage ratio threshold.

7. The method for updating task parameters in a data center physical isolation environment according to claim 6 is characterized in that: There are several correction methods for the correction of the update period, and each correction method has a different correction range for the update period.

8. The method for updating task parameters in a data center physical isolation environment according to claim 7 is characterized in that: In response to the verification failure frequency being greater than a preset verification failure frequency, a private key authentication mismatch is recorded as a verification failure, and a portrait authentication mismatch is recorded as a verification failure.

9. The method for updating task parameters in a data center physical isolation environment according to claim 8 is characterized in that: The automatic release of tasks includes reading, retrieving, copying and modifying the data stored in the physical isolation unit.

Images