A management method, system and terminal device for communication transmission platform

Abstract

The present invention discloses a management method, system and terminal device for a communication transmission platform, and relates to a technical field related to the transmission of digital information. The method comprises: determining a self-service architecture for the entire communication management domain. Traversing the self-service architecture, determining a distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configuring the communication transmission platform. Acquiring platform communication resources and building a platform resource topology. Performing data-driven modeling and generating a communication management model. For interactive communication tasks, performing task data conversion based on a unified information structure, performing communication decision analysis in combination with a communication management model, and determining a communication management strategy. The communication transmission platform responds to the communication management strategy and executes full-cycle communication management of the communication task. The technical problem that the centralized management architecture of the communication transmission platform in the prior art is difficult to cope with diverse communication needs, resulting in unreasonable platform resource division and high difficulty in communication management is solved.

Description

Technical Field

[0001] The present application relates to the field of digital information transmission technology, and specifically to a management method, system and terminal equipment of a communication transmission platform. Background Art

[0002] With the rapid development of modern communication technology, the complexity of communication transmission platforms continues to increase. The interactions between different communication domains, such as intranet and extranet, are becoming more and more frequent, which makes the network security issues faced by communication platforms increasingly severe. At the same time, with the increase in data sensitivity requirements, the requirements for data processing and transmission of different communication tasks are becoming more diverse. This not only includes the need for data encryption, but also involves complex management tasks such as the selection of communication paths and the optimization of resource allocation. The traditional centralized management architecture has been unable to cope with the diverse needs, and a more flexible and efficient distributed management mechanism is urgently needed to achieve effective management of communication tasks.

[0003] Therefore, in the prior art, the centralized management architecture of the communication transmission platform is difficult to cope with diverse communication needs, resulting in technical problems such as unreasonable platform resource division and high difficulty in communication management. Summary of the invention

[0004] This application provides a management method, system and terminal device for a communication transmission platform, which solves the technical problem that the centralized management architecture of the communication transmission platform in the prior art is difficult to cope with diverse communication needs, resulting in unreasonable platform resource division and high difficulty in communication management. By introducing a self-service architecture and distributed management mechanism, the resource allocation and security management of the communication transmission platform are optimized, and the technical effect of significantly improving the execution efficiency of communication tasks and the security of data transmission is significantly improved.

[0005] The present application provides a management method for a communication transmission platform, the method comprising: for the entire communication management domain, based on the network security distribution and the communication characteristics from the source to the destination, performing hierarchical domain fitting, determining a self-service architecture, and configuring the self-service architecture with a unified information structure. Traversing the self-service architecture, determining a distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configuring the communication transmission platform. Acquire platform communication resources, abstractly virtualize the physical resources of the entire communication management domain, and build a platform resource topology, wherein the platform communication resources include physical resources and system resources. Based on the distributed management mechanism and the platform resource topology, perform data-driven modeling to generate a communication management model, and the communication management model is embedded in the communication transmission platform. For interactive communication tasks, perform task data conversion based on the unified information structure, perform communication decision analysis in combination with the communication management model, and determine the communication management strategy. The communication transmission platform responds to the communication management strategy and executes the full-cycle communication management of the communication task.

[0006] In the implementation method, the hierarchical domain fitting and determination of the self-service architecture include: retrieving the communication record data of the entire communication management domain, mining the information confrontation sequence, and extracting the security features based on the information confrontation sequence, wherein the security features include intrusion feature class, protection feature class and system vulnerability feature class. Traverse the security features, perform a layer of autonomous domain division based on feature similarity, and determine the first architecture layer. Based on the communication characteristics from the source to the destination, divide the multi-level communication standards and determine the second architecture layer. Fit the first architecture layer and the second architecture layer to determine the self-service architecture.

[0007] In the implementation, the platform resource topology is constructed, including: traversing the communication resource types, setting the abstract structure, obtaining the physical resources, matching and initializing the structure based on the abstract structure, and determining the physical abstract resources, virtualizing and distributing the physical abstract resources, combining the system resources, and constructing the platform resource topology.

[0008] In the implementation, the communication management strategy is determined, including: the unified information structure includes a multi-level data structure, wherein the multi-level data structure is divided based on data sensitivity level, and the data sensitivity level is positively correlated with the differential relaxation and encryption level. Identify the communication task, traverse the multi-level data structure to match and convert task data, and determine unified task data. Combined with the communication management model, traverse the unified task data and perform modular positioning and resource domain demarcation, make configuration decisions based on network security and communication resources, and integrate and determine the communication management strategy.

[0009] In the implementation, after the interactive communication task, the method includes: identifying the communication task, traversing the trust database, determining the credibility of the source and the credibility of the destination, wherein the source and destination of each task each contain at least one item, and the trust database is updated based on a preset period. Based on the credibility of the source, a first risk control level is determined. Based on the credibility of the destination, a second risk control level is determined. Based on the first risk control level and the second risk control level, communication security management is assisted.

[0010] In the implementation, before traversing the trust database, it includes: traversing the self-service architecture to determine the communication port topology. Traversing the communication port topology, exchanging the communication data of the preset time zone of each communication port, and mining the port credibility. Based on the communication port topology and the port credibility, the trust database is constructed.

[0011] In the implementation, after the interactive communication task, the method includes: if the communication task is a multi-concurrent task, performing decision collision analysis to determine a first constraint condition for decision management. Traversing the communication management strategy, performing transmission collision analysis, and determining a second constraint condition for transmission management, wherein the second constraint condition includes a transmission avoidance condition. Combining the first constraint condition with the second constraint condition, the communication task is promoted.

[0012] The present application also provides a management system for a communication transmission platform, including:

[0013] A service architecture determination module is used to perform hierarchical domain fitting for the entire communication management domain based on network security distribution and communication characteristics from source to sink, and determine the self-service architecture, wherein the self-service architecture is configured with a unified information structure. A modular configuration module is used to traverse the self-service architecture, determine the distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configure the communication transmission platform. A resource topology module is used to obtain platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology, wherein the platform communication resources include physical resources and system resources. A management model construction module is used to perform data-driven modeling based on the distributed management mechanism and the platform resource topology, and generate a communication management model, wherein the communication management model is embedded in the communication transmission platform. A management strategy acquisition module is used for interactive communication tasks, performs task data conversion based on the unified information structure, performs communication decision analysis in combination with the communication management model, and determines the communication management strategy. A communication management module is used for the communication transmission platform to respond to the communication management strategy and perform full-cycle communication management of the communication task.

[0014] The present application also provides a management terminal device for a communication transmission platform, including:

[0015] A memory is used to store executable instructions.

[0016] The processor is used to implement a communication transmission platform management method provided in the present application when executing the executable instructions stored in the memory.

[0017] The management method, system and terminal device of a communication transmission platform proposed in this application are intended to perform hierarchical domain fitting for the entire communication management domain based on network security distribution and communication characteristics from source to sink, and determine a self-service architecture, which is configured with a unified information structure. Traverse the self-service architecture, determine a distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configure the communication transmission platform. Obtain platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology, which includes physical resources and system resources. Based on the distributed management mechanism and the platform resource topology, perform data-driven modeling to generate a communication management model, which is embedded in the communication transmission platform. Interactive communication tasks, perform task data conversion based on the unified information structure, perform communication decision analysis in combination with the communication management model, and determine the communication management strategy. The communication transmission platform responds to the communication management strategy and executes the full-cycle communication management of the communication task. It solves the technical problem that the centralized management architecture of the communication transmission platform in the prior art is difficult to cope with diverse communication needs, resulting in unreasonable platform resource division and high difficulty in communication management. By introducing a self-service architecture and distributed management mechanism, the resource allocation and security management of the communication transmission platform are optimized, and the execution efficiency of communication tasks and the technical effect of data transmission security are significantly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solution of the embodiment of the present disclosure, the accompanying drawings of the embodiment of the present disclosure will be briefly introduced below. A flow chart is used in the present application to illustrate the operations performed by the system according to the embodiment of the present application. It should be understood that the preceding or following operations are not necessarily performed accurately in order. On the contrary, various steps can be processed in reverse order or simultaneously as needed. At the same time, other operations can also be added to these processes, or one or more operations can be removed from these processes.

[0019] Figure 1 A schematic diagram of a management method for a communication transmission platform provided in an embodiment of the present application;

[0020] Figure 2 A schematic diagram of the management system structure of a communication transmission platform provided in an embodiment of the present application;

[0021] Figure 3 A schematic diagram of the structure of a management terminal device of a communication transmission platform provided in an embodiment of the present invention.

[0022] Explanation of the reference numerals: service architecture determination module 11, modular configuration module 12, resource topology module 13, management model construction module 14, management policy acquisition module 15, communication management module 16, processor 31, memory 32, input device 33, output device 34. DETAILED DESCRIPTION

[0023] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below.

[0024] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0025] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict, and the terms "first\second" involved are merely to distinguish similar objects and do not represent a specific ordering of objects. The terms "including" and "having" and any variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or modules that are not clearly listed or inherent to these processes, methods, products, or devices. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by technicians in the technical field of this application. The terms used herein are for the purpose of describing the embodiments of the present application only.

[0026] The present application provides a method, system and terminal device for managing a communication transmission platform, such as Figure 1 As shown, the method includes:

[0027] For the entire communication management domain, hierarchical domain fitting is performed based on network security distribution and communication characteristics from source to sink, and a self-service architecture is determined. The self-service architecture is configured with a unified information structure. The self-service architecture is traversed, and a distributed management mechanism is determined based on the communication characteristics of intra-domain communication and cross-domain communication, and the communication transmission platform is modularly configured. The platform communication resources are obtained, the physical resources of the entire communication management domain are abstractly virtualized, and the platform resource topology is built. The platform communication resources include physical resources and system resources.

[0028] In the whole domain of communication management, there are multiple different communication domains, and the communication between these communication domains involves complex network security issues and differences in communication characteristics. Therefore, it is necessary to divide and fit according to network security issues, that is, security characteristics, combined with communication characteristics, to form a self-service architecture for more effective management. The self-service architecture is configured with a unified information structure, and the information structure is set accordingly based on data characteristics by professional and technical personnel. Further, the self-service architecture is traversed to determine the communication characteristics of intra-domain communication and cross-domain communication, that is, the self-service architecture is traversed, and the self-service architecture is divided into intranet communication and extranet communication according to the intra-domain communication and cross-domain communication of the communication characteristics, and the self-service architecture under the intranet communication and the extranet communication is determined, and the communication data sensitivity level of the intranet communication self-service architecture and the extranet communication self-service architecture and the specific data processing method of the differential relaxation corresponding to the data sensitivity level and the encryption level are determined, including the specific data encryption method and the corresponding data processing method, and a distributed management mechanism is obtained to facilitate distributed processing of different communication tasks. The communication transmission platform is modularly configured, and each module corresponds to the distributed management mechanism to obtain a communication transmission platform including intranet communication and external communication. Acquire platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology. The platform communication resources include physical resources and system resources. System resources are logical resources that cooperate with physical resources, such as operating systems, virtual machines, etc.

[0029] The method provided in the embodiment of the present application also includes: retrieving the communication record data of the entire communication management domain, mining the information confrontation sequence, and extracting security features based on the information confrontation sequence, wherein the security features include intrusion feature classes, protection feature classes, and system vulnerability feature classes. Traversing the security features, performing a layer of autonomous domain division based on feature similarity, and determining the first architecture layer. Based on the communication characteristics from the source to the destination, dividing the multi-level communication standards, and determining the second architecture layer. Fitting the first architecture layer and the second architecture layer to determine the self-service architecture.

[0030] The hierarchical domain fitting and determination of the self-service architecture include: retrieving the communication record data of the entire communication management domain, wherein the communication record data includes all data flow information within the communication platform, such as the communication path including the source and destination objects, the data packet type, the traffic characteristics, etc. Retrieve the communication record data for a period of time in the past from the log and monitoring system of the communication platform, and extract the information confrontation sequence from the communication record through data mining technology. The information confrontation sequence refers to the possible attack behavior pattern, such as multiple failed login attempts, abnormal data traffic, or sudden large-scale data requests. Further, according to the extracted security features, the security features can be divided into three categories: intrusion feature class (for example, unauthorized access attempts), protection feature class (for example, events triggered by firewall rules), and system vulnerability feature class (for example, known vulnerabilities in the operating system or application software). Subsequently, the security features of the adversarial sequence are traversed, and a layer of autonomous domain division is performed based on feature similarity. The similarity is the similarity of each security feature. When there are consistent security features, the corresponding similarity meets the requirements. The consistent security features are clustered into an architecture layer, and all security feature categories are clustered to complete the security feature layer autonomous domain division, and the first architecture layer is determined. Subsequently, based on the communication features from the source to the destination, multi-level communication standards are divided to determine the second architecture layer. The communication features from the source to the destination include communication standards, communication port types, channel characteristics, etc. Cluster the communication features of the same source to the destination, divide the communication features into multi-level communication standards, and determine the second architecture layer if the communication features are consistent in each communication standard. Finally, fit the first architecture layer and the second architecture layer to determine the self-service architecture, and include multiple architecture layers with consistent security features and communication features in the self-service architecture.

[0031] The method provided in the embodiment of the present application further includes: traversing the communication resource types, setting the abstract structure, obtaining the physical resources, matching and initializing the structure based on the abstract structure, and determining the physical abstract resources, virtualizing and distributing the physical abstract resources, combining the system resources, and constructing the platform resource topology.

[0032] Traverse the communication resource types and set the abstract structure corresponding to each communication resource. The abstract structure is a virtual abstract representation of each communication resource to reflect the actual category and connection relationship. For example, the physical resources in the communication resource type, such as communication lines, network devices and other entities, are abstracted. Replace the physical resources with a self-set structure that can characterize the resource characteristics. For example, the communication lines are represented by line segments and data transmission direction arrows in an abstract structure. The network device entities can be represented by abstract structures in the form of graphics, specific categories and functions. Obtain the physical resources, match and initialize the structures of each physical resource based on the abstract structure. The structure initialization includes initialization of the data transmission direction, resource connection quantity, role, etc. set according to the actual physical resource category and role, and determine the physical abstract resources. Finally, the physical abstract resources are virtualized and distributed according to the actual connection relationship, and the system resources are combined to construct the platform resource topology. The system resources are logical resources that cooperate with the physical resources, such as operating systems, virtual machines, etc. Through the above steps, the communication transmission platform is constructed as a complete resource topology structure, which is convenient for further processing and analysis.

[0033] Based on the distributed management mechanism and the platform resource topology, data-driven modeling is performed to generate a communication management model, which is embedded in the communication transmission platform. For interactive communication tasks, task data conversion is performed based on the unified information structure, and communication decision analysis is performed in combination with the communication management model to determine the communication management strategy. The communication transmission platform responds to the communication management strategy and executes the full-cycle communication management of the communication task.

[0034] Based on the distributed management mechanism and the platform resource topology, data-driven modeling is performed, that is, based on the distributed management mechanism and the platform resource topology, a model for guiding management and decision-making is constructed using data analysis technology to generate a communication management model, which is embedded in the communication transmission platform. The communication management model is used to match the corresponding data management module and platform resource domain according to the task attributes of the interactive communication task, that is, the data sensitivity level and the source and destination of the communication task, wherein the data management module is the data processing module corresponding to the interactive communication task in the distributed management mechanism, and the platform resource domain is the processing resource for processing the interactive communication task in the platform resource topology. For the interactive communication task, the data sensitivity level of the communication task and the source and destination of the communication task are obtained, and the unified task data of the unified information structure corresponding to the interactive communication task is determined based on the data sensitivity level. Task data conversion is performed based on the unified information structure, and communication decision analysis is performed based on the converted task data in combination with the communication management model to determine the communication management strategy. The communication management strategy includes the configuration decision of network security and communication resources, the network security decision is the data encryption method corresponding to the data management module, and the configuration decision is the processing resource of the communication task in the platform resource domain. Finally, the communication transmission platform responds to the communication management strategy and performs the full-cycle communication management of the communication task. This solves the technical problem that the centralized management architecture of the communication transmission platform in the prior art is difficult to cope with diverse communication needs, resulting in unreasonable platform resource division and high difficulty in communication management. By introducing a self-service architecture and a distributed management mechanism, the resource allocation and security management of the communication transmission platform are optimized, and the technical effect of significantly improving the execution efficiency of communication tasks and the security of data transmission is significantly improved.

[0035] The method provided in the embodiment of the present application also includes: the unified information structure includes a multi-level data structure, wherein the multi-level data structure is divided based on data sensitivity levels, and the data sensitivity level is positively correlated with the differential relaxation and encryption level. Identify the communication task, traverse the multi-level data structure to match and convert the task data, and determine the unified task data. Combined with the communication management model, traverse the unified task data and perform modular positioning and resource domain delineation, make configuration decisions based on network security and communication resources, and integrate and determine the communication management strategy.

[0036] The communication management strategy is determined, including: the tasks in the communication transmission platform have different data sensitivity levels, the more sensitive the data is, the higher the differential relaxation is, and the higher the encryption level is. The data sensitivity level determines the protection measures that need to be adopted during the data transmission process, such as the selection of encryption method. The unified information structure contains a multi-level data structure, that is, the unified information is composed of a plurality of data structures of different levels. Among them, the multi-level data structure is divided based on the data sensitivity level, and the data sensitivity level is positively correlated with the differential relaxation and the encryption level. Subsequently, the communication task is identified, the multi-level data structure is traversed to match and convert the task data, and the unified task data corresponding to the communication task is determined. In combination with the communication management model, the communication decision analysis is performed on the communication task, and the unified task data is traversed to perform modular positioning and resource domain delineation, and a configuration decision based on network security and communication resources is made. The network security decision is the data encryption method corresponding to the data management module, and the configuration decision is the processing resource of the communication task in the platform resource domain, and the communication management strategy is determined by integration.

[0037] The method provided in the embodiment of the present application also includes: identifying the communication task, traversing the trust database, determining the credibility of the source and the credibility of the destination, wherein the source and destination of each task each contain at least one item, and the trust database is updated based on a preset period. Based on the credibility of the source, a first risk control level is determined. Based on the credibility of the destination, a second risk control level is determined. Based on the first risk control level and the second risk control level, communication security management is assisted.

[0038] After the interactive communication task, it includes: identifying the communication task, obtaining the source and sink objects corresponding to the communication task, and then traversing the trust database, in which the communication port topology, i.e., the credibility level of the source and sink, is stored. Among them, the source and sink of each task each contain at least one item, and the trust database updates the credibility level of the source and sink based on a preset period. Based on the obtained credibility of the source, a first risk control level is determined. Based on the credibility of the sink, a second risk control level is determined. The higher the credibility, the lower the corresponding risk control level, and the higher the security of the information source and the information destination. Conversely, the lower the credibility, the higher the corresponding risk control level. When either the first risk control level or the second risk control level is greater than or equal to the risk control level threshold, the data sensitivity level of the communication task needs to be corrected, based on the deviation parameter between the risk control level and the risk control level threshold, wherein each deviation parameter and the data sensitivity level correction parameter are preset to correspond, and the risk control level threshold is the preset minimum risk control level of the information source and the information destination that meets the communication security requirements. When it is greater than the risk control level, the security is low, and the data sensitivity level of the communication task needs to be corrected to improve the data security level. Based on the first risk control level and the second risk control level, the corresponding data sensitivity level correction parameter is obtained according to the larger value of the deviation parameter between the first risk control level and the second risk control level and the risk control level threshold, to assist in communication security management.

[0039] The method provided in the embodiment of the present application further includes: traversing the self-service architecture to determine the communication port topology, traversing the communication port topology, exchanging the communication data of the preset time zone of each communication port, and mining the port credibility, and constructing the trust database based on the communication port topology and the port credibility.

[0040] Before traversing the trust database, it includes: traversing the self-service architecture according to the communication task, obtaining the source to the destination corresponding to the communication task, and determining the communication port topology. Traversing the communication port topology, interactively obtaining the communication data of each communication port in the preset time zone, identifying the number of abnormal data in the communication data based on the communication data in the preset time zone, calculating the ratio of 1 minus the number of abnormal data to the total number of communication data, and mining to obtain the port credibility. Based on the communication port topology and the port credibility, the trust database is constructed.

[0041] The method provided in the embodiment of the present application further includes: if the communication task is a multi-concurrent task, performing decision collision analysis to determine a first constraint condition for decision management. Traversing the communication management strategy, performing transmission collision analysis, and determining a second constraint condition for transmission management, wherein the second constraint condition includes a transmission avoidance condition. Combining the first constraint condition with the second constraint condition, the communication task is promoted.

[0042] After the interactive communication task, it includes: when multiple communication tasks are running at the same time, they may compete for the same system resources (such as bandwidth, computing resources), thereby causing conflicts, thereby affecting the execution efficiency of the task. If the communication task is a multi-concurrent task, that is, when there are multiple tasks receiving the communication task at the same time, a decision collision analysis is performed to obtain the priority of each task to ensure that the high-priority task can obtain the required resources, while the low-priority task may need to delay execution or adjust the execution plan. The first constraint condition of the decision management is determined according to the task priority, and the first constraint condition is the priority condition of the task. At the same time, transmission conflicts may also occur during the transmission process, such as accessing the same network path or the same storage resource at the same time. If these transmission conflicts are not managed, they may cause data loss, increased delays and other problems. Traverse the communication management strategy, perform transmission collision analysis, obtain the tasks that simultaneously transmit data through the same network path, and determine the second constraint condition of the transmission management according to the task priority. The second constraint condition includes a transmission avoidance condition. Combine the first constraint condition with the second constraint condition to carry out the advancement management of the communication task. After determining the first and second constraints, the platform needs to manage the advancement of multiple concurrent tasks based on these conditions to ensure that the tasks are executed smoothly without conflicts or with minimal conflicts.

[0043] In the above, refer to Figure 1 A method for managing a communication transmission platform according to an embodiment of the present invention is described in detail. Figure 2 A management system of a communication transmission platform according to an embodiment of the present invention is described.

[0044] A management system for a communication transmission platform according to an embodiment of the present invention solves the technical problem that the centralized management architecture of the communication transmission platform in the prior art is difficult to cope with diverse communication needs, resulting in unreasonable platform resource division and high difficulty in communication management. By introducing a self-service architecture and a distributed management mechanism, the resource allocation and security management of the communication transmission platform are optimized, and the execution efficiency of communication tasks and the technical effect of data transmission security are significantly improved. A management system for a communication transmission platform includes: a service architecture determination module 11, a modular configuration module 12, a resource topology module 13, a management model construction module 14, a management policy acquisition module 15, and a communication management module 16.

[0045] The service architecture determination module 11 is used to perform hierarchical domain fitting for the entire communication management domain based on network security distribution and communication characteristics from source to destination, and determine the self-service architecture, which is configured with a unified information structure.

[0046] The modular configuration module 12 is used to traverse the self-service architecture, determine the distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configure the communication transmission platform.

[0047] The resource topology module 13 is used to obtain platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology. The platform communication resources include physical resources and system resources.

[0048] The management model building module 14 is used to perform data-driven modeling based on the distributed management mechanism and the platform resource topology to generate a communication management model, and the communication management model is embedded in the communication transmission platform.

[0049] The management strategy acquisition module 15 is used for interactive communication tasks, performs task data conversion based on the unified information structure, performs communication decision analysis in combination with the communication management model, and determines the communication management strategy.

[0050] The communication management module 16 is used for the communication transmission platform to respond to the communication management strategy and perform full-cycle communication management of the communication task.

[0051] Below, the specific configuration of the service architecture determination module 11 will be described in detail. The surface service architecture determination module 11 may further include: the hierarchical domain fitting to determine the self-service architecture includes: retrieving the communication record data of the entire communication management domain, mining the information confrontation sequence, and extracting the security features based on the information confrontation sequence, wherein the security features include intrusion feature classes, protection feature classes, and system vulnerability feature classes. Traverse the security features, perform a layer of autonomous domain division based on feature similarity, and determine the first architecture layer. Based on the communication characteristics from the source to the destination, divide the multi-level communication standards and determine the second architecture layer. Fit the first architecture layer and the second architecture layer to determine the self-service architecture.

[0052] The specific configuration of the resource topology module 13 will be described in detail below. The resource topology module 13 further includes: the construction of the platform resource topology includes: traversing the communication resource types and setting the abstract structure. Acquiring the physical resources, matching and initializing the structure based on the abstract structure, and determining the physical abstract resources. Virtualizing and distributing the physical abstract resources, combining the system resources, and constructing the platform resource topology.

[0053] Below, the specific configuration of the management policy acquisition module 15 will be described in detail. The management policy acquisition module 15 may further include: the determination of the communication management strategy, including: the unified information structure includes a multi-level data structure, wherein the multi-level data structure is divided based on the data sensitivity level, and the data sensitivity level is positively correlated with the differential relaxation and the encryption level. Identify the communication task, traverse the multi-level data structure to match and convert the task data, and determine the unified task data. In combination with the communication management model, traverse the unified task data and perform modular positioning and resource domain delineation, make configuration decisions based on network security and communication resources, and integrate and determine the communication management strategy.

[0054] The specific configuration of the management strategy acquisition module 15 will be described in detail below. The management strategy acquisition module 15 further includes: after the interactive communication task, it includes: identifying the communication task, traversing the trust database, determining the credibility of the source and the credibility of the destination, wherein the source and destination of each task each contain at least one item, and the trust database is updated based on a preset period. Based on the credibility of the source, determine the first risk control level. Based on the credibility of the destination, determine the second risk control level. Based on the first risk control level and the second risk control level, assist in communication security management.

[0055] The specific configuration of the management strategy acquisition module 15 will be described in detail below. The management strategy acquisition module 15 further includes: before traversing the trust database, including: traversing the self-service architecture to determine the communication port topology. Traversing the communication port topology, exchanging the communication data of the preset time zone of each communication port, and mining the port credibility. Based on the communication port topology and the port credibility, constructing the trust database.

[0056] The specific configuration of the management strategy acquisition module 15 will be described in detail below. After the interactive communication task, it includes: if the communication task is a multi-concurrent task, performing decision collision analysis to determine the first constraint condition of decision management. Traversing the communication management strategy, performing transmission collision analysis, and determining the second constraint condition of transmission management, the second constraint condition includes a transmission avoidance condition. Combining the first constraint condition with the second constraint condition, the communication task is promoted. Embodiment 2

[0057] Figure 3 The structural schematic diagram of the terminal device provided for the second embodiment of the present invention shows a block diagram of an exemplary terminal device suitable for implementing the implementation mode of the present invention. Figure 3 The terminal device shown is only an example and should not limit the functions and scope of use of the embodiments of the present invention. Figure 3As shown, the terminal device includes a processor 31, a memory 32, an input device 33 and an output device 34. The number of processors 31 in the terminal device can be one or more. Figure 3 Taking a processor 31 as an example, the processor 31, memory 32, input device 33 and output device 34 in the terminal device can be connected through a bus or other means. Figure 3 The example of the bus connection is taken as an example. The memory 32, as a computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to a management terminal method of a communication transmission platform in an embodiment of the present invention. The processor 31 executes various functional applications and data processing of the computer device by running the software programs, instructions and modules stored in the memory 32, that is, realizing the management terminal method of the communication transmission platform mentioned above.

[0058] A management system for a communication transmission platform provided in an embodiment of the present invention can execute a management method for a communication transmission platform provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0059] Although the present application makes various references to certain modules in the system according to the embodiments of the present application, any number of different modules can be used and run on the user terminal and / or the server, and the various units and modules included are only divided according to functional logic, but are not limited to the above divisions, as long as the corresponding functions can be achieved. In addition, the specific names of the functional units are only for the convenience of distinguishing from each other, and are not used to limit the scope of protection of the present invention.

[0060] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A method for managing a communication transmission platform, characterized in that: The method comprises: For the entire communication management domain, hierarchical domain fitting is performed based on network security distribution and communication characteristics from source to sink, and a self-service architecture is determined, wherein the self-service architecture is configured with a unified information structure; Traversing the self-service architecture, determining a distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configuring the communication transmission platform; Acquire platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology, wherein the platform communication resources include physical resources and system resources; Based on the distributed management mechanism and the platform resource topology, data-driven modeling is performed to generate a communication management model, wherein the communication management model is embedded in the communication transmission platform; Interactive communication tasks, performing task data conversion based on the unified information structure, performing communication decision analysis in combination with the communication management model, and determining communication management strategies; The communication transmission platform responds to the communication management strategy and performs full-cycle communication management of the communication task; The step of performing hierarchical domain fitting and determining the self-service architecture includes: Retrieving the communication record data of the entire communication management domain, mining the information confrontation sequence, and extracting the security features based on the information confrontation sequence, wherein the security features include intrusion feature class, protection feature class and system vulnerability feature class; Traversing the security features, performing a layer of autonomous domain division based on feature similarity, and determining a first architecture layer; Based on the communication characteristics from the information source to the information sink, the multi-level communication standards are divided to determine the second architecture layer; Fitting the first architecture layer and the second architecture layer to determine the self-service architecture; The platform resource topology construction includes: Traverse the communication resource types and set the abstract structure; Acquire the physical resource, perform matching and structure initialization based on the abstract structure, and determine the physical abstract resource; Virtualizing and distributing the physical abstract resources, combining the system resources, and constructing the platform resource topology; Wherein, determining the communication management strategy includes: The unified information structure includes a multi-level data structure, wherein the multi-level data structure is divided based on data sensitivity levels, and the data sensitivity level is positively correlated with the differential relaxation and the encryption level; Identify the communication task, traverse the multi-level data structure to match and convert task data, and determine unified task data; In combination with the communication management model, the unified task data is traversed and modular positioning and resource domain delineation is performed, configuration decisions based on network security and communication resources are made, and the communication management strategy is integrated and determined; Among them, after the interactive communication task, it includes: Identify the communication task, traverse the trust database, determine the credibility of the source and the credibility of the destination, wherein the source and the destination of each task each include at least one item, and the trust database is updated based on a preset period; Determining a first risk control level based on the credibility of the information source; Determining a second risk control level based on the sink credibility; Based on the first risk control level and the second risk control level, assist in communication security management.

2. A method for managing a communication transmission platform according to claim 1, characterized in that: Before traversing the trust database, include: Traversing the self-service architecture to determine a communication port topology; Traversing the communication port topology, exchanging communication data of preset time zones of each communication port, and mining port credibility; The confidence database is constructed based on the communication port topology and the port credibility.

3. A method for managing a communication transmission platform according to claim 1, characterized in that: After the interactive communication tasks, including: If the communication task is a multi-concurrent task, a decision collision analysis is performed to determine the first constraint condition of decision management; Traversing the communication management strategy, performing transmission collision analysis, and determining a second constraint condition for transmission management, wherein the second constraint condition includes a transmission avoidance condition; The communication task is managed by combining the first constraint condition and the second constraint condition.

4. A management system for a communication transmission platform, characterized in that: A method for managing a communication transmission platform according to any one of claims 1 to 3, the system comprising: A service architecture determination module is used to perform hierarchical domain fitting for the entire communication management domain based on network security distribution and communication characteristics from source to sink, and determine a self-service architecture, wherein the self-service architecture is configured with a unified information structure; A modular configuration module, used to traverse the self-service architecture, determine a distributed management mechanism based on the communication characteristics of intra-domain communication and cross-domain communication, and modularly configure the communication transmission platform; A resource topology module is used to obtain platform communication resources, abstract and virtualize the physical resources of the entire communication management domain, and build a platform resource topology. The platform communication resources include physical resources and system resources. A management model building module, used to perform data-driven modeling based on the distributed management mechanism and the platform resource topology to generate a communication management model, wherein the communication management model is embedded in the communication transmission platform; A management strategy acquisition module, used for interactive communication tasks, performs task data conversion based on the unified information structure, performs communication decision analysis in combination with the communication management model, and determines the communication management strategy; The communication management module is used for the communication transmission platform to respond to the communication management strategy and perform full-cycle communication management of the communication task.

5. A management terminal device for a communication transmission platform, characterized in that: The terminal device comprises: A memory for storing executable instructions; A processor, used to implement a communication transmission platform management method as described in any one of claims 1 to 3 when executing executable instructions stored in the memory.

Images