Methods, devices, equipment and storage media for the management of computing resources

Abstract

This application provides a method, apparatus, device, and storage medium for managing computing resources, relating to the fields of cloud computing and network security technologies, and is used to solve the problem of low management efficiency of computing resources in computing networks. The method is applied to a management device for managing multiple sets of preset computing resources in a computing network. Each set of preset computing resources corresponds to a preset resource granularity. The method includes: receiving computing power demand information from a user device for the computing network, the computing power demand information indicating the user device's request to call computing resources of a first resource granularity in the computing network; determining a first computing resource from multiple preset computing resources based on the first resource granularity, the first computing resource being the computing resource corresponding to the preset resource granularity with the same first resource granularity; generating an access control policy based on the first computing resource; and sending the access control policy to the user device.

Description

Technical Field

[0001] This application relates to the fields of cloud computing and network security technology, and in particular to a method, apparatus, device and storage medium for managing computing resources. Background Technology

[0002] As a new type of information infrastructure, computing power networks can allocate computing resources (such as computing resources, storage resources, and network resources) on demand among the cloud, network, and edge devices according to the business needs of user devices, so as to bear the computing load of user devices.

[0003] Currently, when computing power networks undertake the computing power needs of user devices, they directly share their own computing power resources with the user devices, so that the user devices can freely call upon the computing power resources of the computing power network to execute computing power services.

[0004] However, in the above scheme, the computing network grants any user device access to computing resources, which means that when faced with different user devices, the computing network can only passively respond to the user devices' real-time changing requests for computing resources, thereby reducing the efficiency of the computing network in managing computing resources. Summary of the Invention

[0005] This application provides a method, apparatus, device, and storage medium for managing computing resources, which addresses the problem of low efficiency in the management of computing resources by computing networks.

[0006] To achieve the above objectives, this application adopts the following technical solution:

[0007] Firstly, this application provides a method for managing computing resources, applied to a management device. The management device manages multiple sets of preset computing resources in a computing network, each set of preset computing resources corresponding to a preset resource granularity. The method includes: receiving computing power demand information from a user device for the computing network, the computing power demand information indicating the user device's request to call computing resources at a first resource granularity in the computing network; determining a first computing resource from multiple preset computing resources based on the first resource granularity, the first computing resource being the computing resource corresponding to the preset resource granularity with the same first resource granularity; generating an access control policy based on the first computing resource, the access control policy instructing the user device to call the first computing resource during access to the computing network; and sending the access control policy to the user device.

[0008] The technical solution provided in this application offers at least the following benefits: Through access control policies, user devices can be assigned the computing resources allowed to be accessed within the computing network (i.e., access permissions to these resources). This allows the computing network to pre-allocate corresponding computing resources to user devices based on their assigned access permissions. This enables the rational planning of the computing resources each user device needs to access within the computing network, avoiding conflicts caused by repeated access to certain resources by different user devices. Furthermore, it allows the computing network to proactively respond to resource access requests from different user devices, improving the efficiency of computing resource management.

[0009] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0010] Optionally, the computing power requirement information includes: the user equipment's identity information. The method further includes: encrypting the access control policy based on the user equipment's identity information to obtain an encrypted access control policy. The aforementioned method of "sending the access control policy to the user equipment" includes: sending the encrypted access control policy to the user equipment.

[0011] Optionally, the method further includes: sending status information of the computing power network to the user equipment, the status information including at least one second computing power resource in an idle state among a plurality of preset computing power resources and a preset resource granularity corresponding to each second computing power resource. The method of "receiving computing power demand information of the computing power network from the user equipment" includes: receiving computing power demand information generated by the user equipment based on the status information. Wherein, the first resource granularity is a preset resource granularity corresponding to any second computing power resource, and the first computing power resource is the computing power resource corresponding to the first resource granularity among at least one second computing power resource.

[0012] Secondly, this application provides another method for managing computing power resources, applied to a user equipment. The method includes: sending computing power demand information for a computing power network to a management device, whereby the management device manages multiple sets of preset computing power resources in the computing power network. Each set of preset computing power resources corresponds to a preset resource granularity. The computing power demand information is used to indicate the user equipment's request to access computing power resources at the first resource granularity in the computing power network. The method also includes receiving an access control policy generated by the management device based on the computing power demand information, whereby the access control policy instructs the user equipment to access the first computing power resource corresponding to the first resource granularity during access to the computing power network. Finally, based on the access control policy, the method invokes computing power resources in the computing power network.

[0013] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0014] Thirdly, this application provides a computing power resource management device, which is applied to a management device. The management device is used to manage multiple sets of preset computing power resources in a computing power network. Each set of preset computing power resources corresponds to a preset resource granularity. The device includes a receiving module, a processing module, and a sending module.

[0015] The receiving module receives computing power demand information from user equipment on the computing power network. This demand information indicates the user equipment's request to access computing power resources at a first resource granularity within the computing power network. The processing module determines a first computing power resource from multiple preset computing power resources based on the first resource granularity. The first computing power resource is the computing power resource corresponding to the preset resource granularity with the same first resource granularity. The processing module also generates an access control policy based on the first computing power resource. This access control policy instructs the user equipment to access the first computing power resource during its access to the computing power network. The sending module sends the access control policy to the user equipment.

[0016] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0017] Optionally, the computing power requirement information includes: the user equipment's identity information. The processing module is further used to encrypt the access control policy based on the user equipment's identity information, obtaining an encrypted access control policy. The sending module is specifically used to send the encrypted access control policy to the user equipment.

[0018] Optionally, the sending module is further configured to send status information of the computing power network to the user equipment. The status information includes at least one second computing power resource that is in an idle state among a plurality of preset computing power resources, and a preset resource granularity corresponding to each second computing power resource. The receiving module is specifically configured to receive computing power demand information generated by the user equipment based on the status information. Here, the first resource granularity is a preset resource granularity corresponding to any second computing power resource, and the first computing power resource is the computing power resource corresponding to the first resource granularity among at least one second computing power resource.

[0019] Fourthly, this application provides another computing resource management device for use in user equipment, the device comprising: a sending module, a processing module, and a receiving module.

[0020] The sending module is used to send computing power demand information for the computing power network to the management device. The management device manages multiple sets of preset computing power resources in the computing power network. Each set of preset computing power resources corresponds to a preset resource granularity. The computing power demand information is used to indicate the user equipment's request to call computing power resources of the first resource granularity in the computing power network. The receiving module is used to receive the access control policy generated by the management device based on the computing power demand information. The access control policy is used to instruct the user equipment to call the first computing power resource corresponding to the first resource granularity during access to the computing power network. The processing module is used to call the computing power resources in the computing power network based on the access control policy.

[0021] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0022] Fifthly, this application provides a computing resource management device, the device comprising: a processor and a memory coupled together, the memory for storing one or more programs, the one or more programs including computer-executable instructions, wherein when the computing resource management device is running, the processor executes the computer-executable instructions stored in the memory to implement the computing resource management method described in either the first or second aspect above.

[0023] Sixthly, this application provides a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the computing resource management method described in either the first or second aspect above.

[0024] In a seventh aspect, this application provides a computer program product applied to a server. The computer program product includes computer instructions, which, when executed on the server, enable the server to implement the computing resource management method described in either the first or second aspect above.

[0025] The technical problems that can be solved and the technical effects that can be achieved by the computing power resource management device, equipment, computer storage medium or computer program product in the above solution can be referred to the technical problems and technical effects solved in the first aspect above, and will not be repeated here. Attached Figure Description

[0026] Figure 1 A schematic diagram of a communication system provided in an embodiment of this application;

[0027] Figure 2 A flowchart illustrating a method for managing computing resources provided in an embodiment of this application;

[0028] Figure 3 A flowchart illustrating another method for managing computing resources provided in this application embodiment;

[0029] Figure 4 A flowchart illustrating another method for managing computing resources provided in this application embodiment;

[0030] Figure 5 A schematic diagram of the structure of a computing resource management device provided in an embodiment of this application;

[0031] Figure 6 A schematic diagram of another computing resource management device provided in an embodiment of this application;

[0032] Figure 7 A schematic diagram of the structure of a computing resource management device provided in an embodiment of this application;

[0033] Figure 8 A conceptual partial view of a computer program product provided for an embodiment of this application. Detailed Implementation

[0034] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0035] In this article, the character " / " generally indicates that the objects before and after it are in an "or" relationship. For example, A / B can be understood as A or B.

[0036] The terms “first” and “second” in the specification and claims of this application are used to distinguish different objects, rather than to describe a specific order of objects.

[0037] Furthermore, the terms "comprising" and "having," and any variations thereof, used in the description of this application are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or modules is not limited to the steps or modules listed, but may optionally include other steps or modules not listed, or may optionally include other steps or modules inherent to such process, method, product, or device.

[0038] Furthermore, in the embodiments of this application, the words "exemplary" or "for example" are used to indicate that they are examples, illustrations, or descriptions. Any embodiment or design that is described as "exemplary" or "for example" in this application should not be construed as being more preferred or advantageous than other embodiments or design options. Specifically, the use of the words "exemplary" or "for example" is intended to present concepts in a concrete manner.

[0039] Before providing a detailed description of the computing resource management method provided in the embodiments of this application, the implementation environment and application scenarios of the embodiments of this application will be introduced first.

[0040] First, the application scenarios of the embodiments of this application will be introduced.

[0041] Guided by the "Eastern Data, Western Computing" strategy, computing power networks have become a crucial tool for building my country's digital infrastructure. There is an urgent need to improve the level of cross-regional computing power trading to ensure efficient resource utilization. Therefore, how to enhance the trading level of cross-regional computing power networks has become a pressing issue.

[0042] Currently, there are methods for using blockchain for computing power trading. Blockchain is a trusted method for allocating computing power; however, storing and retrieving information using blockchain is extremely time-consuming and has a high latency. In today's network environment, some scenarios have very high requirements for the responsiveness of computation results, demanding very low latency and extremely fast responses from computing power services (i.e., computing resources). Blockchain cannot adequately meet these low-latency requirements. Furthermore, with the current large-scale computing power demands, using blockchain to retrieve allocation information will further increase computing power latency.

[0043] Furthermore, with the rapid development of cloud computing and big data technologies, computing networks have become an important way to provide computing resources. However, in the process of using computing networks, how to effectively manage and control computing service capabilities to ensure resource security and rational utilization has become an urgent problem to be solved. Traditional access control methods often only achieve coarse-grained control and cannot meet the precise control requirements of computing networks for service capabilities.

[0044] For example, in the entire computing power network, blockchain is used to realize the notarization and traceability of computing power services to ensure the credibility of the notarization. However, due to the massive amount of data in the overall computing power network, large-scale computing power scheduling and notarization are generated, and using blockchain alone for notarization is not very efficient.

[0045] In other words, the computing power network grants any user device access to computing resources. This means that when faced with different user devices, the network can only passively respond to their real-time changing requests for computing resources, thus reducing its management efficiency. Furthermore, when a large number of user devices are connected to the computing power network, conflicts may arise in the scheduling of computing resources among them, affecting the network's allocation of resources and causing some user devices to miss out on timely access to computing resources.

[0046] In conclusion, improving the efficiency of computing network management of computing resources has become an urgent technical problem to be solved.

[0047] To address the aforementioned issues, this application provides a method for managing computing resources, which is applied to scenarios involving scheduling computing services. This application, through access control policies, can allocate permitted computing resources (i.e., access permissions) within the computing network to user devices. This allows the computing network to pre-allocate corresponding computing resources to user devices based on their allocated access permissions. This approach allows for the rational planning of the computing resources each user device needs to access within the computing network, avoiding conflicts caused by repeated access to certain computing resources by different user devices. Furthermore, it enables the computing network to proactively respond to resource requests from different user devices, improving the efficiency of computing resource management.

[0048] In summary, the embodiments of this application can differentiate computing power services at different granularities through fine-grained access control, enabling low-latency and rapid acquisition of computing power services in large-scale scenarios. That is, by controlling computing power network transactions at different granularities through fine-grained access permissions, a method for quickly establishing computing power transactions can be achieved.

[0049] The implementation environment of the embodiments of this application is described below.

[0050] like Figure 1 The diagram shown is a schematic representation of a communication system provided in an embodiment of this application. The communication system may include a management device 101, a user device 102, and a computing network 103. The management device 101 can communicate wirelessly with the user device 102 and the computing network 103, and the user device 102 can communicate wirelessly with the computing network 103.

[0051] Specifically, the management device 101 can receive the computing power demand of the user device 102 for computing power resources in the computing power network 103, and configure the corresponding computing power resource access permissions for the user device 102 based on the resource granularity in the computing power demand. At the same time, the access permissions of the user device 102 are synchronized to the computing power network 103, so that the user device 102 can access the specified computing power resources in the computing power network 103 based on the configured access permissions. The computing power network 103 opens the corresponding computing power resources to the user device 102 based on the synchronized access permissions.

[0052] It should be noted that in the embodiments of this application, the management device 101 can be a controller (or terminal, server, etc.), the user device 102 can be a terminal, and the computing network 103 can be a server.

[0053] The server can be a single physical server or a server cluster consisting of multiple servers. Alternatively, the server cluster can be a distributed cluster. Alternatively, the server can be a cloud server. This application does not limit the specific implementation of the server.

[0054] The terminal can be a mobile phone, tablet computer, desktop computer, laptop computer, handheld computer, notebook computer, ultra-mobile personal computer (UMPC), netbook, or other device with sending and receiving functions. This application does not impose any special restrictions on the specific form of the terminal. It can interact with the user through one or more methods such as keyboard, touchpad, touch screen, remote control, voice interaction, or handwriting device.

[0055] After introducing the application scenarios and implementation environment of the embodiments of this application, the following describes in detail the method for managing computing resources provided by the embodiments of this application in conjunction with the above implementation environment.

[0056] The methods in the following embodiments can all be implemented in the above application scenarios and implementation environments. The embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0057] Figure 2 This is a flowchart illustrating a method for managing computing resources provided in an embodiment of this application. Figure 2 As shown, the method may include: S201-S204.

[0058] S201. The management device receives information about the computing power demand of the computing network from user equipment.

[0059] Among them, the management equipment is used to manage multiple pre-set computing resources in the computing power network.

[0060] It should be noted that the embodiments of this application do not limit the preset computing power resources. For example, the preset computing power resources can be resources corresponding to storage capacity (i.e., storage resources). As another example, the preset computing power resources can be resources corresponding to transmission speed (i.e., transmission resources). Yet another example, the preset computing power resources can be resources corresponding to processing speed (or computing speed) (i.e., computing resources).

[0061] For example, multiple preset computing resources may include: network bandwidth (i.e., transmission resources) and the CPU's idle cache (i.e., computing resources).

[0062] The processing speed can be characterized by the number of floating point operations per second (FLOPS).

[0063] In this embodiment of the disclosure, a group of preset computing resources corresponds to a preset resource granularity.

[0064] In other words, a computing power network can include multiple sets of preset computing power resources, and the computing power resources in each set of preset computing power resources correspond to a preset resource granularity.

[0065] As one possible implementation, the preset resource granularity corresponding to the preset computing power resources of different groups is also different.

[0066] The preset resource granularity corresponding to the storage capacity can be any of the following: megabytes (MB), gigabytes (GB), terabytes (TB), petabytes (PB);

[0067] The preset resource granularity corresponding to the processing speed can be any of the following: million floating-point operations per second (MFLOPS), billion floating-point operations per second (GFLOPS), or trillion floating-point operations per second (TFLOPS);

[0068] The preset resource granularity corresponding to the transmission speed can be any of the following: kilobits per second (Kbps), megabits per second (Mbps), or gigabits per second (Gbps).

[0069] In other words, by defining computing power service capabilities (i.e. computing power resources) at different granularities, and providing a reference for subsequent access control policies based on fine-grained computing power service capabilities, precise control and management of different computing power service capabilities in the computing power network are achieved, effectively improving the security and resource utilization efficiency of the computing power network.

[0070] In this embodiment of the application, the computing power demand information is used to indicate the user equipment's request for computing power resources at the first resource granularity in the computing power network.

[0071] For example, computing power demand information can indicate the scheduling needs of user devices for resources corresponding to gigabytes of storage capacity in the computing power network.

[0072] Optionally, the first resource granularity can be a preset resource granularity, or the first resource granularity can include multiple preset resource granularities.

[0073] For example, the first resource granularity can be gigabytes corresponding to the storage capacity, or the first resource granularity can include: terabytes corresponding to the storage capacity, or megabits per second corresponding to the transmission speed.

[0074] As one possible implementation, the management device can monitor the real-time utilization of different preset computing resources in the computing power network, determine the network's status information, and send this status information to the user device. The network status information may include at least one second computing resource that is idle (i.e., not utilized) among multiple preset computing resources, and a preset resource granularity corresponding to each second computing resource. Next, the user device can receive the network status information and, based on it, determine a first computing resource from at least one second computing resource. Simultaneously, it uses the preset resource granularity corresponding to the first computing resource as the first resource granularity to generate computing power demand information. Finally, the user device feeds back the generated computing power demand information to the management device, which can then receive this information.

[0075] The process of user equipment determining the first computing power resource based on the status information of the computing power network can be carried out by user equipment through human-computer interaction.

[0076] S202. The management device determines the first computing power resource from multiple preset computing power resources based on the first resource granularity.

[0077] The first computing resource is the computing resource with the same granularity as the first resource among a plurality of preset computing resources.

[0078] For example, multiple preset computing resources may include: resource A, resource B, and resource C. Resource A corresponds to granularity A, resource B corresponds to granularity B, and resource C corresponds to granularity C. If the first resource granularity includes granularity B and granularity C, then the first computing resources include: resource B and resource C.

[0079] S203. The management device generates an access control policy based on the first computing power resource.

[0080] The access control policy is used to instruct user equipment to only access the first computing resource when accessing the computing network.

[0081] Optionally, the access control policy may include resource information of the first computing resource, such as resource name, resource path, resource granularity, etc.

[0082] Understandably, by defining computing power service capabilities (i.e. computing resources) at different granularities and designing fine-grained access control policies, the needs of different users and application scenarios can be met, effectively preventing erroneous access and abuse of resources.

[0083] S204. The management device sends access control policies to the user equipment.

[0084] The technical solution provided by the above embodiments brings at least the following beneficial effects: Through access control policies, the computing resources allowed to be invoked in the computing power network (i.e., the access rights to invoke computing resources) can be allocated to user devices, enabling the computing power network to pre-allocate corresponding computing resources to user devices based on the allocated access rights. This allows for the rational planning of the computing resources that each user device needs to invoke in the computing power network, avoiding invocation conflicts caused by repeated invocations of certain computing resources by different user devices, and enabling the computing power network to proactively respond to invocation requests from different user devices, thereby improving the efficiency of the computing power network in managing computing resources.

[0085] In some embodiments, the aforementioned computing power requirement information may include: the user equipment's identity information (such as a device identifier). After the management device generates an access control policy based on the first computing power resource (i.e., S203), the management device may encrypt the access control policy based on the user equipment's identity information to obtain an encrypted access control policy, and then send the encrypted access control policy to the user equipment during the subsequent process of sending the access control policy to the user equipment (i.e., S204).

[0086] Optionally, the management device can broadcast encrypted access control policies. Upon receiving the access control policy, the user equipment (UE) can determine, based on its own identity information, whether it can decrypt the received policy. If decryption is possible, the UE determines that the received access control policy applies to it and utilizes the computing resources in the computing network accordingly. If decryption is not possible, the UE determines that the received access control policy does not apply to it and discards (deletes) the policy, while simultaneously accepting subsequent access control policies broadcast by the management device.

[0087] It is understandable that by encrypting access control policies, the specificity of each access control policy to user devices can be strengthened, thus preventing user devices from using or misusing access control policies, which could cause scheduling conflicts of computing resources in the computing network.

[0088] In some embodiments, after the management device sends the access control policy to the user equipment, the management device may also synchronize the calling permissions corresponding to the user equipment to the computing network.

[0089] In other words, the management device can synchronize the user device's access permissions to the primary computing resource to the computing network. This allows the computing network to grant the corresponding computing resource to the user device when the user device subsequently accesses the specified computing resource based on the configured access control policy. This dual authentication approach avoids access conflicts and improves the efficiency of computing resource management.

[0090] In some embodiments, such as Figure 3 As shown, it illustrates a method for managing computing resources applied to user equipment, which includes: S301-S303.

[0091] S301. The user equipment sends computing power demand information for computing resources to the management equipment.

[0092] Among them, the management device is used to manage multiple sets of preset computing resources in the computing power network. Each set of preset computing resources corresponds to a preset resource granularity. The computing power demand information is used to indicate the user equipment's call demand for computing resources at the first resource granularity in the computing power network.

[0093] It should be noted that the descriptions of preset computing resources, preset resource granularity, and computing power requirements can be found in the above embodiments and will not be repeated here.

[0094] S302. User equipment receives access control policies generated by management equipment based on computing power demand information.

[0095] The access control policy is used to instruct user equipment to only call the first computing resource corresponding to the first resource granularity when accessing the computing network.

[0096] It should be noted that the process of management devices generating access control policies based on computing power demand information can be referred to the description in the above embodiments, and will not be repeated here.

[0097] S303. User equipment calls upon computing resources in the computing network based on access control policies.

[0098] For example, the computing resources (i.e., the preset computing resources) in the computing power network may include: resource A, resource B and resource C. If the access control policy includes the identifier of resource A and the identifier of resource C, then the user equipment can call resource A and / or resource C in the computing power network.

[0099] The following describes the method for managing computing resources provided in this application, with reference to specific embodiments. Figure 4 As shown, the method may include:

[0100] S401, The management device obtains the status information of the computing network.

[0101] The status information includes at least one second computing resource that is in an idle state among the multiple preset computing resources of the computing power network and the preset resource granularity corresponding to each second computing resource.

[0102] S402. The management device sends the status information of the computing network to the user equipment.

[0103] S403. User equipment receives status information from the computing network.

[0104] S404. The user equipment generates computing power demand information for the computing power network based on the status information of the computing power network.

[0105] The computing power requirement information may include: the first resource granularity.

[0106] S405. The user equipment sends the computing power demand information of the computing power network to the management equipment.

[0107] S406. The management device receives information about the computing power demand of the computing network from user equipment.

[0108] S407. The management device determines the first computing power resource from multiple preset computing power resources based on the first resource granularity.

[0109] The first computing resource is the computing resource with the same granularity as the first resource among a plurality of preset computing resources.

[0110] S408. The management device generates access control policies based on the first computing power resource.

[0111] The access control policy is used to instruct user equipment to only access the first computing resource when accessing the computing network.

[0112] S409. The management device sends access control policies to the user equipment.

[0113] S410, User equipment receives access control policies for the computing network.

[0114] S411. User equipment calls upon computing resources in the computing network based on access control policies.

[0115] The following section describes the method for managing computing resources provided in the embodiments of this application, using specific examples.

[0116] Step 1: The server (i.e., management device) divides the capabilities that the computing network can provide into computing power (i.e., processing power), storage power (storage capacity), and network transmission power (i.e., transmission power), and divides each capability into three levels (i.e., resource granularity).

[0117] A computing network can include computing resources, storage resources, and network resources. Computing services refer to the computing power, storage capacity, and network transmission capacity that can be provided. Processing power is typically measured in FLOPS (Functional Optimal Performance Points) to measure the computing speed (i.e., the computing resources). Storage capacity is measured in units such as GB, TB, and PB to measure the storage capacity (i.e., size) of storage resources. Network bandwidth is measured in units such as Mbps and Gbps to measure the transmission capacity of transmission resources.

[0118] Computing power, storage capacity, and network transmission capacity are categorized into three different granularities for computing power services. For example, storage capacity is categorized into three levels: GB (level 3), TB (level 2), and PB (level 1). Processing capacity is categorized into three levels: MFLOPS (level 3), GFLOPS (level 2), and TFLOPS (level 1). Network transmission capacity is categorized into three levels: Mbps (level 3), Gbps (level 2), and Tbps (level 1).

[0119] Different computing power levels (i.e., resource granularity) correspond to different access control permissions. User devices can apply for different computing power levels, and the server configures different access control trees (i.e., access control policies) for user devices.

[0120] Step 2: The user device accesses the server, and the server displays the capabilities that the computing network can provide.

[0121] Step 3: The user equipment selects the computing power level (i.e., the first resource granularity) according to its own needs and submits a computing power network application (i.e., the computing power requirement information for the computing power network).

[0122] Step 4: The server configures fine-grained access control permissions (i.e., access control policies) for the user based on the computing power level requested by the user's device.

[0123] Different computing power levels correspond to different access control permissions. The server can configure the corresponding access control tree for the user based on the computing power level applied for.

[0124] Furthermore, fine-grained access control allows data owners to formulate access policies based on the recipient's attributes and embed these policies into the ciphertext, while embedding the recipient's attributes into the key. Only recipients who meet these access policies can decrypt and obtain the original data. This encryption method provides fine-grained access control, achieving a good balance between data security and flexibility.

[0125] Typically, fine-grained access control designs permissions in the form of an access control tree, embedding this access control tree within ciphertext and embedding the receiver's attributes within the key. In other words, the structure of the access control tree is contained within the ciphertext, and the user device's attributes are contained within the key.

[0126] In other words, by designing different access control trees for computing power services of different granularities, different access policy ciphertexts are distributed to users who use computing power service capabilities of different granularities, and the user's attributes are embedded in the key, so that different users can use the computing power service capabilities of the required granularity.

[0127] Step 5: The computing network terminal (i.e., the computing network) allows users to call computing network capabilities (i.e., computing resources) according to the configured fine-grained access control permissions.

[0128] The foregoing primarily describes the solutions provided in the embodiments of this application from the perspective of computer devices. It is understood that, in order to achieve the aforementioned functions, the computer device includes corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, based on the steps of the computing resource management methods described in conjunction with the embodiments disclosed in this application, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed through hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0129] This application also provides a computing resource management device. This computing resource management device can be a computer device, a CPU within the aforementioned computer device, a processing module within the aforementioned computer device for managing computing resources, or a client within the aforementioned computer device for managing computing resources.

[0130] This application embodiment can divide the computing resource management device into functional modules or functional units according to the above method example. For example, each function can be divided into a separate functional module or functional unit, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or in software functional modules or functional units. The module or unit division in this application embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0131] like Figure 5 The diagram shown is a structural schematic of a computing resource management device provided in an embodiment of this application. The computing resource management device is used to execute... Figure 2 The management method of computing resources shown, or Figure 4The embodiment of the computing power resource management method shown corresponds to the management device. The computing power resource management device 500 is applied to the management device and may include: a receiving module 501, a processing module 502 and a sending module 503.

[0132] The receiving module 501 is used to receive computing power demand information from a user device for the computing power network. This demand information indicates the user device's request to access computing power resources at a first resource granularity within the computing power network. The processing module 502 is used to determine a first computing power resource from multiple preset computing power resources based on the first resource granularity. The first computing power resource is the computing power resource corresponding to the preset resource granularity with the same first resource granularity. The processing module 502 is also used to generate an access control policy based on the first computing power resource. This access control policy instructs the user device to access the first computing power resource during its access to the computing power network. The sending module 503 is used to send the access control policy to the user device.

[0133] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0134] Optionally, the computing power requirement information includes: the user equipment's identity information. Processing module 502 is further configured to encrypt the access control policy based on the user equipment's identity information, obtaining an encrypted access control policy. Sending module 503 is specifically configured to send the encrypted access control policy to the user equipment.

[0135] Optionally, the sending module 503 is further configured to send status information of the computing power network to the user equipment. The status information includes at least one second computing power resource that is in an idle state among a plurality of preset computing power resources and a preset resource granularity corresponding to each second computing power resource. The receiving module 501 is specifically configured to receive computing power demand information generated by the user equipment based on the status information. Here, the first resource granularity is a preset resource granularity corresponding to any second computing power resource, and the first computing power resource is the computing power resource corresponding to the first resource granularity among at least one second computing power resource.

[0136] like Figure 6 The diagram shown is a structural schematic of a computing resource management device provided in an embodiment of this application. The computing resource management device is used to execute... Figure 3 The management method of computing resources shown, or Figure 4The embodiment of the computing power resource management method shown corresponds to the user equipment. The computing power resource management device 600 is applied to the user equipment and may include: a sending module 601, a processing module 602, and a receiving module 603.

[0137] The sending module 601 is used to send computing power demand information for the computing power network to the management device. The management device manages multiple sets of preset computing power resources in the computing power network. Each set of preset computing power resources corresponds to a preset resource granularity. The computing power demand information is used to indicate the user equipment's request to call computing power resources of the first resource granularity in the computing power network. The receiving module 603 is used to receive an access control policy generated by the management device based on the computing power demand information. The access control policy is used to instruct the user equipment to call the first computing power resource corresponding to the first resource granularity during access to the computing power network. The processing module 602 is used to call computing power resources in the computing power network based on the access control policy.

[0138] Optionally, the preset computing resources are any of the following: resources corresponding to storage capacity, resources corresponding to processing speed, and resources corresponding to transmission speed; wherein, the preset resource granularity corresponding to storage capacity is any of the following: megabytes, gigabytes, terabytes, and quadrillion bytes; the preset resource granularity corresponding to processing speed is any of the following: mega-float operations per second, billion-float operations per second, and trillion-float operations per second; and the preset resource granularity corresponding to transmission speed is any of the following: kilobits per second, megabits per second, and gigabits per second.

[0139] Figure 7 This is a schematic diagram illustrating the structure of a computing resource management device according to an exemplary embodiment. The computing resource management device may include a processor 702, which executes application code to implement the computing resource management method of this application.

[0140] The processor 702 may be a CPU, a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits used to control the execution of the program of the present application.

[0141] like Figure 7 As shown, the computing resource management device may further include a memory 703. The memory 703 stores the application code that executes the scheme of this application, and its execution is controlled by the processor 702.

[0142] Memory 703 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital versatile optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto. Memory 703 may exist independently and be connected to processor 702 via bus 704. Memory 703 may also be integrated with processor 702.

[0143] like Figure 7 As shown, the computing resource management device may further include a communication interface 701, wherein the communication interface 701, processor 702, and memory 703 may be coupled to each other, for example, through a bus 704. The communication interface 701 is used for information interaction with other devices, for example, supporting information interaction between the computing resource management device and other devices.

[0144] It should be pointed out that, Figure 7 The device structure shown does not constitute a limitation on the management equipment for this computing resource, except... Figure 7 In addition to the components shown, the management device for this computing resource may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0145] In actual implementation, the functions implemented by processing module 502 and / or processing module 602 can both be provided by... Figure 7 The processor 702 shown calls the program code in memory 703 to implement this.

[0146] This application also provides a computer-readable storage medium storing instructions that, when executed by a processor of a computer device, enable the computer to perform the management of computing resources provided in the embodiments described above. For example, the computer-readable storage medium may be a memory 703 including instructions, which may be executed by a processor 702 of a computer device to complete the described method. Optionally, the computer-readable storage medium may be a non-transitory computer-readable storage medium, such as a ROM, RAM, CD-ROM, magnetic tape, floppy disk, or optical data storage device.

[0147] Figure 8 A conceptual partial view of a computer program product provided in an embodiment of this application is shown as an example. The computer program product includes a computer program for executing computer processes on a computing device.

[0148] In one embodiment, the computer program product is provided using a signal bearer medium 800. The signal bearer medium 800 may include one or more program instructions that, when executed by one or more processors, can provide the above-mentioned... Figure 2 , Figure 3 or Figure 4 The described function or part of the function. Therefore, for example, refer to... Figure 2 In the embodiment shown, one or more features of S201 to S204 can be fulfilled by one or more instructions associated with the signal carrying medium 800. Furthermore, Figure 8 The program instructions in the document also describe example instructions.

[0149] In some examples, the signal carrying medium 800 may include a computer-readable medium 801, such as, but not limited to, a hard disk drive, a compact disc (CD), a digital video disc (DVD), a digital magnetic tape, a memory, a read-only memory (ROM), or a random access memory (RAM), etc.

[0150] In some implementations, the signal carrying medium 800 may include a computer recordable medium 802, such as, but not limited to, a memory, a read / write (R / W) CD, a R / W DVD, etc.

[0151] In some implementations, the signal carrying medium 800 may include a communication medium 803, such as, but not limited to, digital and / or analog communication media (e.g., fiber optic cables, waveguides, wired communication links, wireless communication links, etc.).

[0152] The signal-bearing medium 800 can be transmitted by a wireless communication medium 803. One or more program instructions can be, for example, computer-executable instructions or logical implementation instructions.

[0153] In some examples, such as targeting Figure 5 or Figure 6 The described computing resource management device can be configured to provide various operations, functions, or actions in response to one or more program instructions in a computer-readable medium 801, a computer-recordable medium 802, and / or a communication medium 803.

[0154] Through the above description of the embodiments, those skilled in the art can clearly understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0155] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another apparatus, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0156] The units described as separate components may or may not be physically separate. A component shown as a unit can be one or more physical units; that is, it can be in one place or distributed in multiple different locations. Some or all of the constituent units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0157] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0158] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiments of this application, essentially, or the part that contributes to the prior art, or a complete or partial classification of the technical solution, can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions to cause a device (which may be a microcontroller, chip, etc.) or processor to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, ROM, RAM, magnetic disks, or optical disks.

[0159] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A method for managing computing power resources, characterized in that, The method is applied to a management device for managing a plurality of preset computing power resources in a computing power network, one set of preset computing power resources corresponding to one preset resource granularity, one preset resource granularity being used to define the computing power service capability of one type of computing power resource, and the method comprises the following steps: Receiving computing power demand information of a user device for a computing power network, the computing power demand information being used to indicate the calling demand of the user device for computing power resources of a first resource granularity in the computing power network; the first resource granularity being any second resource granularity; the second resource granularity being the resource granularity corresponding to a second computing power resource in an idle state in the plurality of preset computing power resources; According to the first resource granularity, determining a first computing power resource from the plurality of preset computing power resources, the first computing power resource being the computing power resource corresponding to the preset resource granularity which is the same as the first resource granularity; According to the first computing power resource, generating an access control policy, the access control policy being used to indicate the calling of the first computing power resource by the user device in the process of accessing the computing power network; Sending the access control policy to the user device.

2. The method of claim 1, wherein, The computing power resource type is any of the following resources: storage capacity, processing speed, transmission speed; The preset resource granularity corresponding to the storage capacity is any of the following: megabyte, gigabyte, terabyte, petabyte; The preset resource granularity corresponding to the processing speed is any of the following: million floating point operations per second, billion floating point operations per second, trillion floating point operations per second; The preset resource granularity corresponding to the transmission speed is any of the following: kilobit per second, megabit per second, gigabit per second.

3. The method according to claim 1 or 2, characterized in that, The computing power demand information includes identity information of the user device; after the access control policy is generated according to the first computing power resource, the method further comprises the following steps: According to the identity information of the user device, encrypting the access control policy to obtain an encrypted access control policy; The step of sending the access control policy to the user device comprises the following step: Sending the encrypted access control policy to the user device.

4. The method according to claim 1 or 2, characterized in that, Before the step of receiving the computing power demand information of the user device for the computing power network, the method further comprises the following steps: Sending state information of the computing power network to the user device, the state information including at least one second computing power resource in an idle state in the plurality of preset computing power resources and the second resource granularity corresponding to each of the at least one second computing power resource.

5. A method for managing computing power resources, characterized in that, The method is applied to a user device and comprises the following steps: Sending computing power demand information of the user device for a computing power network to a management device, the management device being used to manage a plurality of preset computing power resources in the computing power network, one set of preset computing power resources corresponding to one preset resource granularity, one preset resource granularity being used to define the computing power service capability of one type of computing power resource, and the computing power demand information being used to indicate the calling demand of the user device for computing power resources of a first resource granularity in the computing power network; the first resource granularity being any second resource granularity; the second resource granularity being the resource granularity corresponding to a second computing power resource in an idle state in the plurality of preset computing power resources; receive an access control policy generated by the management device based on the computing power requirement information, the access control policy being used to indicate the user device to invoke a first computing power resource corresponding to the first resource granularity in the process of accessing the computing power network; invoke a computing power resource in the computing power network based on the access control policy.

6. A management apparatus of a computing resource, characterized by, An application is applied to a management device, the management device is used for managing a plurality of groups of preset computing power resources in a computing power network, a group of preset computing power resources corresponds to a preset resource granularity, and a preset resource granularity is used to limit the computing power service capability of a type of computing power resource. The device comprises: A receiving module is used for receiving computing power requirement information of a user device for a computing power network, the computing power requirement information being used to indicate the calling requirement of the user device for a computing power resource of a first resource granularity in the computing power network; the first resource granularity is any second resource granularity; and the second resource granularity is the resource granularity corresponding to a second computing power resource in an idle state in the plurality of preset computing power resources. A processing module is used for determining a first computing power resource from the plurality of preset computing power resources according to the first resource granularity, the first computing power resource being a computing power resource corresponding to the preset resource granularity which is the same as the first resource granularity. The processing module is further used for generating an access control policy according to the first computing power resource, the access control policy being used to indicate the user device to invoke the first computing power resource in the process of accessing the computing power network. A sending module is used for sending the access control policy to the user device.

7. A computing resource management apparatus, characterized by comprising: An application is applied to a user device, the device comprising: A sending module is used for sending computing power requirement information of a user device for a computing power network to a management device, the management device being used for managing a plurality of groups of preset computing power resources in the computing power network, a group of preset computing power resources corresponding to a preset resource granularity, and a preset resource granularity being used to limit the computing power service capability of a type of computing power resource. The computing power requirement information is used to indicate the calling requirement of the user device for a computing power resource of a first resource granularity in the computing power network; the first resource granularity is any second resource granularity; and the second resource granularity is the resource granularity corresponding to a second computing power resource in an idle state in the plurality of preset computing power resources. A receiving module is used for receiving an access control policy generated by the management device based on the computing power requirement information, the access control policy being used to indicate the user device to invoke a first computing power resource corresponding to the first resource granularity in the process of accessing the computing power network. A processing module is used for invoking a computing power resource in the computing power network based on the access control policy.

8. A device for managing computing resources, characterized in that, comprise: a processor and a memory; the processor and the memory are coupled; the memory is used for storing one or more programs, the one or more programs comprising computer execution instructions, when the management device of the computing power resource runs, the processor executes the computer execution instructions stored in the memory, so that the management device of the computing power resource executes the management method of the computing power resource as claimed in any one of claims 1-5.

9. A computer-readable storage medium having stored therein instructions, the computer-readable storage medium comprising: When a computer executes the instructions, the computer executes the management method of computing resources as claimed in any one of claims 1-5.

10. A computer program product, characterised in that, The computer program product comprises computer program instructions which, when executed, implement the management method of computing resources as claimed in any one of claims 1-5.

Images