Integrated security trusteeship operation platform and method based on hybrid cloud and related equipment

Abstract

The invention belongs to the technical field of cloud data, and discloses an integrated security trusteeship operation platform and method based on hybrid cloud and related equipment, and the method comprises the steps: determining a user search level based on a user authentication request sent by a user terminal, and determining a target application demand; determining a cloud platform display list according to the sequence of distributing the public cloud platforms according to the priority; performing fuzzy pattern recognition analysis on response text information in the to-be-analyzed cloud platform display list, extracting membership degrees of different target application requirements, and performing data deployment on the response text information according to the principle of the maximum membership degree to obtain a target retrieval cluster; obtaining a terminal address corresponding to the target retrieval cluster, and receiving transmission state information sent by the terminal address in real time; selecting a proper storage access strategy according to the current transmission state information, the data access frequency, the access volume and the access mode; unified management and operation and maintenance of multi-cloud resources are realized, and the resource utilization efficiency and the operation and maintenance efficiency are improved.

Description

Technical Field

[0001] The present invention relates to the field of cloud data technology, and more specifically, to an integrated secure hosting operation platform, method and related equipment based on a hybrid cloud. Background Art

[0002] The use of hybrid cloud has great barriers in different cloud environments. The geographical location, strategic location, data interface and other indicators of data centers of various cloud service providers are different. There are more and more security hosting issues. In the application of security hosting operation, the disaster recovery architecture cannot meet the security needs of hybrid cloud. Therefore, unlike the single cloud architecture model, a new hybrid cloud security thinking is needed. The disaster recovery architecture considers the impact of large-scale disasters, business strategy, construction cost, technical feasibility, architecture compatibility, policy compliance and other aspects. Therefore, it is very necessary to manage the security of hybrid cloud. For example, Chinese patent application number: CN110266787A discloses a hybrid cloud management system and method, which effectively solves the multi-party data security and efficiency problems in the implementation of hybrid cloud. While protecting the user's data security, the resource allocation problem of hybrid cloud should also be considered. Different allocation methods will affect the integration of resources and the user's experience. For multiple user terminals, different user terminals have different actual needs for hybrid cloud, and access optimization strategies in different directions are required. When a failure occurs, it cannot be fed back to the user terminal in time, so that the user terminal repeats the operation without understanding the actual situation. On the one hand, it affects the user experience, and on the other hand, it causes computer operation pressure and causes unnecessary losses.

[0003] In view of this, the present invention provides an integrated secure hosting operation platform, method and related equipment based on hybrid cloud. Summary of the invention

[0004] In order to overcome the above-mentioned defects of the prior art, the present invention provides an integrated secure hosting operation platform, method and related equipment based on hybrid cloud.

[0005] According to a first aspect of the present invention, there is provided an integrated secure hosting operation platform based on a hybrid cloud, comprising a user analysis module, a cloud platform confirmation module, a data deployment module, a data monitoring module and an access policy generation module, wherein the modules are connected to each other via wired and / or wireless connections; A user analysis module, which determines a user search level based on a user authentication request sent by a user terminal, performs semantic analysis on user search data based on the user search level to determine target application requirements, and sends the target application requirements to a cloud platform confirmation module; The cloud platform confirmation module obtains the number of public cloud platforms corresponding to the current hybrid cloud platform based on the target application requirements, performs priority analysis on all public cloud platforms, allocates the order of public cloud platforms according to the priority, determines the cloud platform display list, and sends the cloud platform display list to the data deployment module; The data deployment module performs fuzzy pattern recognition analysis on the response text information in the display list of the cloud platform to be analyzed, extracts the membership of different target application requirements, and performs data deployment on the response text information according to the principle of maximum membership to obtain the target retrieval cluster, and sends the target retrieval cluster to the data monitoring module; The data monitoring module obtains the terminal address corresponding to the target retrieval cluster, receives the transmission status information sent by the terminal address in real time, determines whether the current cloud platform is operating normally based on the transmission status information, and performs fault statistics on the cloud platform with faults, and displays the fault information of each cloud platform on the user terminal; The access policy generation module selects the appropriate storage access policy based on the current transmission status information, data access frequency, access volume and access mode.

[0006] As a preferred solution of the first aspect of the present invention, the logic for obtaining the target application requirements is: Obtaining a user search level based on a user authentication request, and entering a virtual database at the current user search level, wherein the virtual database is associated with databases corresponding to different cloud platforms; Based on the large model network, feature extraction is performed on a large amount of historical data with correct domain classification to form a feature word list. Request text data with successful semantic parsing and correct classification in user log data is collected. Based on the request text data, a user feature word list is obtained. Similarity analysis is performed between the user feature word list and the feature word list to obtain matching key features. According to preset rules, the successfully matched key features are converted into key feature vectors to be analyzed, and the corresponding target application requirements are extracted based on the key feature vectors.

[0007] As a preferred solution of the first aspect of the present invention, the display logic of the cloud platform display list is: Obtain the number of public cloud platforms corresponding to the current hybrid cloud platform, determine the allocation priority of the current public cloud platform according to the historical access frequency of the public cloud platform, set an access level for each public cloud platform, obtain the target application requirements corresponding to the current public cloud platform based on different access levels, and determine the access priority of the current public cloud platform based on the supply quantity of the target application requirements; The access weights corresponding to the allocation priority and access priority are obtained through the big data access algorithm. The priority of each public cloud platform is determined based on the access weight ratio. The order in which the public cloud platforms are displayed is determined by allocating the order of priority to the public cloud platforms. The private cloud platform is the default optimal option, and the display order of the private cloud platform and the public cloud platform is integrated to determine the cloud platform display list.

[0008] As a preferred solution of the first aspect of the present invention, the membership acquisition logic of the target application requirement is: Constructing a membership function for each target application requirement: performing fuzzy pattern recognition on the request text data of the user terminal to obtain the membership of each target application requirement; The membership function represents the ratio of the number of intersections of user feature words to the total number of feature word lists required by the target application, wherein the number of intersections of user feature words represents the total number of intersections of the user feature word list of the request text data of the user terminal and the feature word list required by the target application; The membership function reflects the degree to which the requested text data of the user terminal belongs to a certain target application requirement. The membership increases monotonically within [0, +∞) and varies within [0, 1).

[0009] As a preferred solution of the first aspect of the present invention, the target retrieval cluster is associated with different cloud platforms, and the cloud platforms include a private cloud platform and multiple public cloud platforms; the databases of different cloud platforms are mapped in the virtual database through a data retrieval template.

[0010] As a preferred solution of the first aspect of the present invention, the transmission status information includes platform status information and signal status information, and the logic for obtaining the transmission status information is: Acquire signal reference information in advance, compare and analyze the signal parameters collected in real time with the signal reference information respectively, the signal parameters include bandwidth, signal-to-noise ratio, network delay, and signal strength, mark the parameters that are inconsistent with the signal reference information as abnormal, and perform abnormal statistics on the signal parameters; characterize the signal status information based on the abnormal statistical information; If the number of abnormal statistics is within the preset abnormal range, the signal status information is normal; If the number of abnormal statistics exceeds the preset abnormal range, the signal status information is abnormal; Based on the target retrieval cluster, the cloud platform list that the operation platform can receive and that is sent by the cloud server the most recently is obtained. According to the cloud platform list that the operation platform can receive, the connectable cloud platform is obtained, and the transmission channel that can communicate between the connectable cloud platform and the virtual machine is extracted. Analyzing key data packets in the current transmission channel to obtain platform status information, wherein the platform status information includes a data packet transmission rate, a data packet error rate, a data packet discard rate, and a response time; The packet transmission rate represents the ratio of outbound packets to inbound packets, the packet error rate represents the ratio of erroneous packets to inbound packets, the packet discard rate represents the ratio of discarded packets to inbound packets, and the response duration represents the round-trip time of the packet; The transmission status information is fed back to the user terminal in real time, reminding the user to adjust the signal transmission end in real time.

[0011] As a preferred solution of the first aspect of the present invention, the acquisition logic of the storage access policy is: The current transmission status information, data access frequency, access volume and access mode are associated with access endorsement based on weight settings, and compliance checks are performed on the access content. The access content is converted into text information, and semantic and sentiment analysis is performed on the access content to obtain a single review result, which is then reported to the decision node; The current access content and historical access content are stored in the cache database, and semantic and sentiment analysis is performed on the access content in different time periods to obtain comprehensive review results, which are then reported to the decision node; The single review results and the comprehensive review results are processed, and the access content with non-compliant content is refused to be displayed and stored in the database for identification, and the access content that has been uploaded to the chain is blocked or queried.

[0012] According to a second aspect of the present invention, a hybrid cloud-based integrated security hosting operation method is provided, which is based on the implementation of the first aspect and includes the following steps: Determine a user search level based on a user authentication request sent by a user terminal, and perform semantic analysis on user search data based on the user search level to determine target application requirements; Based on the target application requirements, the number of public cloud platforms corresponding to the current hybrid cloud platform is obtained, and priority analysis is performed on all public cloud platforms. The public cloud platforms are allocated in order according to their priorities to determine the cloud platform display list. Perform fuzzy pattern recognition analysis on the response text information in the cloud platform display list to be analyzed, extract the membership of different target application requirements, and deploy the data of the response text information according to the principle of maximum membership to obtain the target retrieval cluster; Obtain the terminal address corresponding to the target retrieval cluster, receive the transmission status information sent by the terminal address in real time, determine whether the current cloud platform is operating normally based on the transmission status information, perform fault statistics on the cloud platform with faults, and display the fault information of each cloud platform on the user terminal; Select the appropriate storage access strategy based on the current transfer status information, data access frequency, access volume and access mode.

[0013] According to a third aspect of the present invention, there is provided a computer program product stored on a computer readable medium, comprising a computer readable program for providing a user input interface to implement the first aspect when executed on an electronic device.

[0014] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the first aspect.

[0015] The technical effects and advantages of the integrated secure hosting operation platform, method and related equipment based on hybrid cloud of the present invention are as follows: The present invention provides comprehensive hybrid cloud management and security operation services, directly connects the public cloud platform with the virtual machine, and simulates the resource integration of each cloud platform in the virtual machine, thereby reducing the difficulty and cost of cloud security construction and ensuring business continuity and security; it realizes unified management and operation and maintenance of multi-cloud resources and improves resource utilization efficiency and operation and maintenance efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A schematic diagram of a cloud platform connection structure based on a hybrid cloud according to the present invention; Figure 2 This is a schematic diagram of the structure of an integrated secure hosting and operation platform based on hybrid cloud of the present invention; Figure 3 This is a flow chart of an integrated secure hosting operation method based on hybrid cloud of the present invention; Figure 4 The figure is a schematic structural diagram of an electronic device of the present invention. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0018] In actual enterprise applications, enterprises not only need to build private cloud platforms with better confidentiality, but also need to consider objective factors such as cost when using public cloud platforms. Therefore, a virtual machine is added on the basis of the private cloud platform, and multiple public cloud platforms are connected based on the virtual machine. The public cloud platform needs to obtain the authority to extract data through contracts. In view of this, a hybrid cloud architecture is deployed in the virtual machine, and unified management, unified operation and maintenance, and unified operation are achieved by integrating multiple public and private cloud resources. Build an integrated security hosting operation platform based on hybrid cloud to achieve intercommunication between private cloud and virtual private cloud on public cloud, build a virtual private hybrid cloud across multiple clouds for users, ensure the secure transmission and synchronization of data between different cloud environments, and provide enterprises with a full range of hybrid cloud management and security operation services to ensure that enterprises can effectively deal with various security risks while enjoying the convenience brought by cloud computing.

[0019] Example 1 The present invention provides Figure 1-2 The integrated secure hosting operation platform based on hybrid cloud shown includes a user analysis module 100, a cloud platform confirmation module 200, a data deployment module 300, a data monitoring module 400 and an access policy generation module 500, and each module is connected by wire and / or wirelessly; The user analysis module 100 determines the user search level based on the user authentication request sent by the user terminal, performs semantic analysis on the user search data based on the user search level to determine the target application requirements, and sends the target application requirements to the cloud platform confirmation module 200; Specifically, the acquisition logic of the target application requirements is: Obtaining a user search level based on a user authentication request, and entering a virtual database at the current user search level, wherein the virtual database is associated with databases corresponding to different cloud platforms; More specifically, the user authentication request includes an image authentication request, a biometric information authentication request, and a data information authentication request; that is, common user authentication request methods are face recognition, fingerprint recognition, and password recognition.

[0020] Based on the large model network, feature extraction is performed on a large amount of historical data with correct domain classification to form a feature word list. Request text data with successful semantic parsing and correct classification in user log data is collected. Based on the request text data, a user feature word list is obtained. Similarity analysis is performed between the user feature word list and the feature word list to obtain matching key features. According to preset rules, the successfully matched key features are converted into key feature vectors to be analyzed, and the corresponding target application requirements are extracted based on the key feature vectors.

[0021] The cloud platform confirmation module 200 obtains the number of public cloud platforms corresponding to the current hybrid cloud platform based on the target application requirements, performs priority analysis on all public cloud platforms, allocates the order of public cloud platforms according to the priority, determines the cloud platform display list, and sends the cloud platform display list to the data deployment module 300.

[0022] Specifically, the display logic of the cloud platform display list is: Obtain the number of public cloud platforms corresponding to the current hybrid cloud platform, determine the allocation priority of the current public cloud platform according to the historical access frequency of the public cloud platform, set an access level for each public cloud platform, obtain the target application requirements corresponding to the current public cloud platform based on different access levels, and determine the access priority of the current public cloud platform based on the supply quantity of the target application requirements; The access weights corresponding to the allocation priority and access priority are obtained through the big data access algorithm. The priority of each public cloud platform is determined based on the access weight ratio. The order in which the public cloud platforms are displayed is determined by allocating the order of priority to the public cloud platforms. The private cloud platform is the default optimal option, and the display order of the private cloud platform and the public cloud platform is integrated to determine the cloud platform display list.

[0023] The data deployment module 300 performs fuzzy pattern recognition analysis on the response text information in the cloud platform display list to be analyzed, extracts the membership of different target application requirements, performs data deployment on the response text information according to the principle of maximum membership to obtain a target retrieval cluster, and sends the target retrieval cluster to the data monitoring module 400; Specifically, the logic for obtaining the membership of the target application requirements is: Constructing a membership function for each target application requirement: performing fuzzy pattern recognition on the request text data of the user terminal to obtain the membership of each target application requirement; More specifically, the membership function represents the ratio of the number of intersections of user feature words to the total number of feature word lists required by the target application, and the number of intersections of user feature words represents the total number of intersections of the user feature word list of the request text data of the user terminal and the feature word list required by the target application; The membership function reflects the degree to which the requested text data of the user terminal belongs to a certain target application requirement. The membership increases monotonically within [0, +∞) and varies within [0, 1).

[0024] Specifically, the target search cluster is associated with different cloud platforms, which include a private cloud platform and multiple public cloud platforms; the databases of different cloud platforms are mapped in a virtual database through a data search template.

[0025] It should be noted that: a private cloud platform corresponds to one enterprise user, and the enterprise user corresponds to multiple user terminals; each user terminal includes at least one target user, and each target user submits target application requirements for hybrid cloud use to the integrated security hosting operation platform based on its own business needs. The target application requirements include retrieval of resource data, retrieval of security feature data, and access timeliness data; The data monitoring module 400 obtains the terminal address corresponding to the target retrieval cluster, receives the transmission status information sent by the terminal address in real time, determines whether the current cloud platform is operating normally based on the transmission status information, performs fault statistics on the cloud platform where the fault occurs, and displays the fault information of each cloud platform on the user terminal.

[0026] Specifically, the transmission status information includes platform status information and signal status information, and the acquisition logic of the transmission status information is: Acquire signal reference information in advance, compare and analyze the signal parameters collected in real time with the signal reference information respectively, the signal parameters include bandwidth, signal-to-noise ratio, network delay, and signal strength, mark the parameters that are inconsistent with the signal reference information as abnormal, and perform abnormal statistics on the signal parameters; characterize the signal status information based on the abnormal statistical information; If the number of abnormal statistics is within the preset abnormal range, the signal status information is normal; If the number of abnormal statistics exceeds the preset abnormal range, the signal status information is abnormal; Based on the target retrieval cluster, the cloud platform list that the operation platform can receive and that is sent by the cloud server the most recently is obtained. According to the cloud platform list that the operation platform can receive, the connectable cloud platform is obtained, and the transmission channel that can communicate between the connectable cloud platform and the virtual machine is extracted. Analyzing key data packets in the current transmission channel to obtain platform status information, wherein the platform status information includes a data packet transmission rate, a data packet error rate, a data packet discard rate, and a response time; The packet transmission rate represents the ratio of outbound packets to inbound packets, the packet error rate represents the ratio of erroneous packets to inbound packets, the packet discard rate represents the ratio of discarded packets to inbound packets, and the response duration represents the round-trip time of the packet; The transmission status information is fed back to the user terminal in real time, reminding the user to adjust the signal transmission end in real time.

[0027] The access policy generation module 500 selects a suitable storage access policy according to current transmission status information, data access frequency, access volume and access mode.

[0028] Specifically, the acquisition logic of the storage access policy is: The current transmission status information, data access frequency, access volume and access mode are associated with access endorsement based on weight settings, and compliance checks are performed on the access content. The access content is converted into text information, and semantic and sentiment analysis is performed on the access content to obtain a single review result, which is then reported to the decision node; The current access content and historical access content are stored in the cache database, and semantic and sentiment analysis is performed on the access content in different time periods to obtain comprehensive review results, which are then reported to the decision node; The single review results and the comprehensive review results are processed, and the access content with non-compliant content is refused to be displayed and stored in the database for identification, and the access content that has been uploaded to the chain is blocked or queried.

[0029] Example 2 like Figure 3 As shown, the parts not described in detail in this embodiment are as described in Example 1. This embodiment provides an integrated secure hosting operation method based on a hybrid cloud, including the following steps: Determine a user search level based on a user authentication request sent by a user terminal, and perform semantic analysis on user search data based on the user search level to determine target application requirements; Based on the target application requirements, the number of public cloud platforms corresponding to the current hybrid cloud platform is obtained, and priority analysis is performed on all public cloud platforms. The public cloud platforms are allocated in order according to their priorities to determine the cloud platform display list. Perform fuzzy pattern recognition analysis on the response text information in the cloud platform display list to be analyzed, extract the membership of different target application requirements, and deploy the data of the response text information according to the principle of maximum membership to obtain the target retrieval cluster; Obtain the terminal address corresponding to the target retrieval cluster, receive the transmission status information sent by the terminal address in real time, determine whether the current cloud platform is operating normally based on the transmission status information, perform fault statistics on the cloud platform with faults, and display the fault information of each cloud platform on the user terminal; Select the appropriate storage access strategy based on the current transfer status information, data access frequency, access volume and access mode.

[0030] The acquisition logic of the target application requirements: Obtaining a user search level based on a user authentication request, and entering a virtual database at the current user search level, wherein the virtual database is associated with databases corresponding to different cloud platforms; Based on the large model network, feature extraction is performed on a large amount of historical data with correct domain classification to form a feature word list. Request text data with successful semantic parsing and correct classification in user log data is collected. Based on the request text data, a user feature word list is obtained. Similarity analysis is performed between the user feature word list and the feature word list to obtain matching key features. According to preset rules, the successfully matched key features are converted into key feature vectors to be analyzed, and the corresponding target application requirements are extracted based on the key feature vectors.

[0031] The display logic of the cloud platform display list is: Obtain the number of public cloud platforms corresponding to the current hybrid cloud platform, determine the allocation priority of the current public cloud platform according to the historical access frequency of the public cloud platform, set an access level for each public cloud platform, obtain the target application requirements corresponding to the current public cloud platform based on different access levels, and determine the access priority of the current public cloud platform based on the supply quantity of the target application requirements; The access weights corresponding to the allocation priority and access priority are obtained through the big data access algorithm. The priority of each public cloud platform is determined based on the access weight ratio. The order in which the public cloud platforms are displayed is determined by allocating the order of priority to the public cloud platforms. The private cloud platform is the default optimal option, and the display order of the private cloud platform and the public cloud platform is integrated to determine the cloud platform display list.

[0032] The logic for obtaining the membership of the target application requirement is: Constructing a membership function for each target application requirement: performing fuzzy pattern recognition on the request text data of the user terminal to obtain the membership of each target application requirement; The membership function represents the ratio of the number of intersections of user feature words to the total number of feature word lists required by the target application, wherein the number of intersections of user feature words represents the total number of intersections of the user feature word list of the request text data of the user terminal and the feature word list required by the target application; The membership function reflects the degree to which the requested text data of the user terminal belongs to a certain target application requirement. The membership increases monotonically within [0, +∞) and varies within [0, 1).

[0033] The target search cluster is associated with different cloud platforms, which include a private cloud platform and multiple public cloud platforms; the databases of different cloud platforms are mapped in a virtual database through a data search template.

[0034] The transmission status information includes platform status information and signal status information. The acquisition logic of the transmission status information is: Acquire signal reference information in advance, compare and analyze the signal parameters collected in real time with the signal reference information respectively, the signal parameters include bandwidth, signal-to-noise ratio, network delay, and signal strength, mark the parameters that are inconsistent with the signal reference information as abnormal, and perform abnormal statistics on the signal parameters; characterize the signal status information based on the abnormal statistical information; If the number of abnormal statistics is within the preset abnormal range, the signal status information is normal; If the number of abnormal statistics exceeds the preset abnormal range, the signal status information is abnormal; Based on the target retrieval cluster, the cloud platform list that the operation platform can receive and that is sent by the cloud server the most recently is obtained. According to the cloud platform list that the operation platform can receive, the connectable cloud platform is obtained, and the transmission channel that can communicate between the connectable cloud platform and the virtual machine is extracted. Analyzing key data packets in the current transmission channel to obtain platform status information, wherein the platform status information includes a data packet transmission rate, a data packet error rate, a data packet discard rate, and a response time; The packet transmission rate represents the ratio of outbound packets to inbound packets, the packet error rate represents the ratio of erroneous packets to inbound packets, the packet discard rate represents the ratio of discarded packets to inbound packets, and the response duration represents the round-trip time of the packet; The transmission status information is fed back to the user terminal in real time, reminding the user to adjust the signal transmission end in real time.

[0035] The acquisition logic of the storage access policy: The current transmission status information, data access frequency, access volume and access mode are associated with access endorsement based on weight settings, and compliance checks are performed on the access content. The access content is converted into text information, and semantic and sentiment analysis is performed on the access content to obtain a single review result, which is then reported to the decision node; The current access content and historical access content are stored in the cache database, and semantic and sentiment analysis is performed on the access content in different time periods to obtain comprehensive review results, which are then reported to the decision node; The single review results and the comprehensive review results are processed, and the access content with non-compliant content is refused to be displayed and stored in the database for identification, and the access content that has been uploaded to the chain is blocked or queried.

[0036] Example 3 An electronic device according to an exemplary embodiment includes: a processor and a memory, wherein the memory stores a computer program that can be called by the processor; The processor executes the above-mentioned hybrid cloud-based integrated security hosting operation platform by calling the computer program stored in the memory.

[0037] Figure 4 It is a structural diagram of an electronic device provided in an embodiment of the present application. The electronic device may have relatively large differences due to different configurations or performances, and may include one or more processors (Central Processing Units, CPU) and one or more memories, wherein the memory stores at least one computer program, and the at least one computer program is loaded and executed by the processor to implement the stock algorithm trading method based on deep neural network provided in the above-mentioned various method embodiments. The electronic device may also include other components for realizing the functions of the device. For example, the electronic device may also have components such as wired or wireless network interfaces and input and output interfaces for input and output. The embodiments of the present application are not described in detail here.

[0038] Example 4 According to an exemplary embodiment, a computer-readable storage medium is shown, on which a rewritable computer program is stored; When the computer program runs on a computer device, the computer device executes the above-mentioned integrated security hosting operation platform based on hybrid cloud.

[0039] The above embodiments can be implemented in whole or in part by software, hardware, firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0040] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0041] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0042] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only one, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0043] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0044] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0045] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0046] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0047] Finally: The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. An integrated security hosting and operation platform based on hybrid cloud. It is characterized in that It comprises a user analysis module (100), a cloud platform confirmation module (200), a data deployment module (300), a data monitoring module (400) and an access policy generation module (500), wherein each module is connected via wired and / or wireless connections; A user analysis module (100) determines a user search level based on a user authentication request sent by a user terminal, performs semantic analysis on user search data based on the user search level to determine a target application requirement, and sends the target application requirement to a cloud platform confirmation module (200); The cloud platform confirmation module (200) obtains the number of public cloud platforms corresponding to the current hybrid cloud platform based on the target application requirements, performs priority analysis on all public cloud platforms, allocates the order of the public cloud platforms according to the priority, determines the cloud platform display list, and sends the cloud platform display list to the data deployment module (300); The data deployment module (300) performs fuzzy pattern recognition analysis on the response text information in the cloud platform display list to be analyzed, extracts the membership of different target application requirements, performs data deployment on the response text information according to the principle of maximum membership to obtain a target retrieval cluster, and sends the target retrieval cluster to the data monitoring module (400); The data monitoring module (400) obtains the terminal address corresponding to the target search cluster, receives the transmission status information sent by the terminal address in real time, determines whether the current cloud platform is operating normally based on the transmission status information, performs fault statistics on the cloud platform that has failed, and displays the fault information of each cloud platform on the user terminal; The access policy generation module (500) selects a suitable storage access policy according to current transmission status information, data access frequency, access volume and access mode.

2. According to claim 1, the integrated secure hosting and operation platform based on hybrid cloud, It is characterized in that The acquisition logic of the target application requirements: Obtaining a user search level based on a user authentication request, and entering a virtual database at the current user search level, wherein the virtual database is associated with databases corresponding to different cloud platforms; Based on the large model network, feature extraction is performed on a large amount of historical data with correct domain classification to form a feature word list. Request text data with successful semantic parsing and correct classification in user log data is collected. Based on the request text data, a user feature word list is obtained. Similarity analysis is performed between the user feature word list and the feature word list to obtain matching key features. According to preset rules, the successfully matched key features are converted into key feature vectors to be analyzed, and the corresponding target application requirements are extracted based on the key feature vectors.

3. According to the hybrid cloud-based integrated security hosting operation platform of claim 2, Features: The display logic of the cloud platform display list is: Obtain the number of public cloud platforms corresponding to the current hybrid cloud platform, determine the allocation priority of the current public cloud platform according to the historical access frequency of the public cloud platform, set an access level for each public cloud platform, obtain the target application requirements corresponding to the current public cloud platform based on different access levels, and determine the access priority of the current public cloud platform based on the supply quantity of the target application requirements; The access weights corresponding to the allocation priority and access priority are obtained through the big data access algorithm. The priority of each public cloud platform is determined based on the access weight ratio. The order in which the public cloud platforms are displayed is determined by allocating the order of priority to the public cloud platforms. The private cloud platform is the default optimal option, and the display order of the private cloud platform and the public cloud platform is integrated to determine the cloud platform display list.

4. According to claim 3, the integrated secure hosting and operation platform based on hybrid cloud, Features: The logic for obtaining the membership of the target application requirement is: Constructing a membership function for each target application requirement: performing fuzzy pattern recognition on the request text data of the user terminal to obtain the membership of each target application requirement; The membership function represents the ratio of the number of intersections of user feature words to the total number of feature word lists required by the target application, wherein the number of intersections of user feature words represents the total number of intersections of the user feature word list of the request text data of the user terminal and the feature word list required by the target application; The membership function reflects the degree to which the requested text data of the user terminal belongs to a certain target application requirement. The membership increases monotonically within [0, +∞) and varies within [0, 1).

5. According to claim 4, the integrated secure hosting and operation platform based on hybrid cloud, Features: The target search cluster is associated with different cloud platforms, which include a private cloud platform and multiple public cloud platforms; the databases of different cloud platforms are mapped in a virtual database through a data search template.

6. The integrated secure hosting and operation platform based on hybrid cloud according to claim 5, Features: The transmission status information includes platform status information and signal status information. The acquisition logic of the transmission status information is: Acquire signal reference information in advance, compare and analyze the signal parameters collected in real time with the signal reference information respectively, the signal parameters include bandwidth, signal-to-noise ratio, network delay, and signal strength, mark the parameters that are inconsistent with the signal reference information as abnormal, and perform abnormal statistics on the signal parameters; Characterize signal status information based on abnormal statistical information; If the number of abnormal statistics is within the preset abnormal range, the signal status information is normal; If the number of abnormal statistics exceeds the preset abnormal range, the signal status information is abnormal; Based on the target retrieval cluster, the cloud platform list that the operation platform can receive and that is sent by the cloud server the most recently is obtained. According to the cloud platform list that the operation platform can receive, the connectable cloud platform is obtained, and the transmission channel that can communicate between the connectable cloud platform and the virtual machine is extracted. Analyzing key data packets in the current transmission channel to obtain platform status information, wherein the platform status information includes a data packet transmission rate, a data packet error rate, a data packet discard rate, and a response time; The packet transmission rate represents the ratio of outbound packets to inbound packets, the packet error rate represents the ratio of erroneous packets to inbound packets, the packet discard rate represents the ratio of discarded packets to inbound packets, and the response duration represents the round-trip time of the packet; The transmission status information is fed back to the user terminal in real time, reminding the user to adjust the signal transmission end in real time.

7. The integrated secure hosting and operation platform based on hybrid cloud according to claim 6, Features: The acquisition logic of the storage access policy: The current transmission status information, data access frequency, access volume and access mode are associated with access endorsement based on weight settings, and compliance checks are performed on the access content. The access content is converted into text information, and semantic and sentiment analysis is performed on the access content to obtain a single review result, which is then reported to the decision node; The current access content and historical access content are stored in the cache database, and semantic and sentiment analysis is performed on the access content in different time periods to obtain comprehensive review results, which are then reported to the decision node; The single review results and the comprehensive review results are processed, and the access content with non-compliant content is refused to be displayed and stored in the database for identification, and the access content that has been uploaded to the chain is blocked or queried.

8. Integrated security hosting operation method based on hybrid cloud, Features: The method is implemented based on the integrated secure hosting operation platform based on hybrid cloud according to any one of claims 1 to 7, and is characterized in that it includes the following steps: Determine a user search level based on a user authentication request sent by a user terminal, and perform semantic analysis on user search data based on the user search level to determine target application requirements; Based on the target application requirements, the number of public cloud platforms corresponding to the current hybrid cloud platform is obtained, and priority analysis is performed on all public cloud platforms. The public cloud platforms are allocated in order according to their priorities to determine the cloud platform display list. Perform fuzzy pattern recognition analysis on the response text information in the cloud platform display list to be analyzed, extract the membership of different target application requirements, and deploy the data of the response text information according to the principle of maximum membership to obtain the target retrieval cluster; Obtain the terminal address corresponding to the target retrieval cluster, receive the transmission status information sent by the terminal address in real time, determine whether the current cloud platform is operating normally based on the transmission status information, perform fault statistics on the cloud platform with faults, and display the fault information of each cloud platform on the user terminal; Select the appropriate storage access strategy based on the current transfer status information, data access frequency, access volume and access mode.

9. A computer program product stored on a computer readable medium, Features: It includes a computer-readable program, which, when executed on an electronic device, provides a user input interface to implement the integrated security hosting operation platform based on hybrid cloud as described in any one of claims 1-7.

10. A computer-readable storage medium, Features: Instructions are stored, and when the instructions are executed on a computer, the computer executes the integrated secure hosting operation platform based on hybrid cloud as described in any one of claims 1-7.

Images