Safety management method and system based on cloud computing, terminal and storage medium

Abstract

The invention belongs to the technical field of computing power resource management, and particularly relates to a safety management method and system based on cloud computing, a terminal and a storage medium. Comprising the steps of constructing a computing power management platform; the user node generates computing power resource request information and sends the computing power resource request information to the corresponding transfer node; the transfer node judges the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; according to the computing power resource feedback information, the management platform generates verification confirmation information for the transfer node to obtain a verification result; according to the verification result, the management platform generates computing power scheduling information; computing task information is generated according to the computing power scheduling information and transmitted to the transfer node and the user node; and the user node obtains the optimal task allocation amount according to the calculation task information. According to the method, the link mode most suitable for the current task can be generated and released, and the completion rate of the computing power task is ensured; and the security and the management efficiency of the data can be improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of computing resource management, and in particular, relates to a cloud computing-based security management method, system, terminal and storage medium. Background Art

[0002] The computing network integrates multi-level computing power, storage and other resource islands through ubiquitous network connections, combines network information (such as bandwidth, latency, etc.) with different types of user needs, and provides users with the best resource allocation solution. The computing network can achieve load balancing of network nodes through resource collaboration between nodes, optimize the use of resources across the entire network, and ensure flexible and dynamic deployment of services and consistency of user experience. Users do not need to care about the location and deployment status of various basic resources, and the network coordinates and dispatches various resources.

[0003] However, the current problems faced in optimizing and coordinating the use of computing resources and data include: how to efficiently control access to a large number of computing network devices; how to provide unified and coordinated equipment and data management methods to further improve management efficiency. Summary of the invention

[0004] The purpose of the present invention is to provide a cloud computing-based security management method to address the deficiencies in the prior art and to solve any of the above-mentioned technical problems.

[0005] In order to achieve the above object, the present invention adopts the following technical solution: A cloud computing-based security management method comprises the following steps: S1. Build a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; S2. The user node generates computing resource request information and sends the computing resource request information to the corresponding transfer node; S3, the transfer node determines the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; S4. According to the computing power resource feedback information, the management platform generates verification confirmation information for the transfer node to obtain a verification result; S5. According to the verification result, the management platform generates computing power scheduling information; and generates computing task information to the transfer node and the user node according to the computing power scheduling information; S6. The user node obtains an optimal task allocation amount according to the computing task information.

[0006] Preferably, the step of building a computing power management platform includes the following: According to the geographical factors of all the user nodes and the completion rate of the computing tasks, at least two of the transfer nodes are classified; and the data between all the transfer nodes are relatively independent; All the transfer nodes are controlled by the background management node.

[0007] Preferably, the step of the user node generating computing power resource request information and sending the computing power resource request information to the corresponding transfer node includes the following: The user node actively generates computing resource request information according to demand and performs encryption optimization processing; wherein the encryption optimization processing includes static character password verification, dynamic character password verification and character password verification formed by combining static and dynamic; Sending the encrypted and optimized computing resource request information to the corresponding transfer node; Generate preliminary storage record information to the user node.

[0008] Preferably, the step of the transfer node judging the computing power resource request information to generate corresponding computing power resource feedback information to the management platform includes the following: The transfer node compares the previous computing resources of the user node with the content of the computing resource request information; Determine and confirm the self-adjustment status of the user node within the preset time; The information formed by the comparison and the self-adjustment situation are combined to generate corresponding computing power resource feedback information to the management platform.

[0009] Preferably, the step of generating verification confirmation information for the transfer node by the management platform according to the computing resource feedback information to obtain the verification result includes the following: According to the computing power resource feedback information, the management platform directly sends a direct verification instruction to the transfer node that makes the feedback; the direct verification instruction includes querying whether the computing power resource feedback information is issued by the transfer node that makes the feedback and the accuracy of the computing power resource feedback information; and obtaining direct verification data according to the direct verification instruction; generating direct confirmation information according to the direct verification data to obtain a direct verification conclusion; According to the computing power resource feedback information, the management platform sends an assisting verification instruction to the assisting node; the assisting node sends an assisting verification instruction to the transit node that makes feedback according to the assisting verification instruction; the assisting verification instruction includes querying whether the computing power resource feedback information is issued by the transit node that makes feedback and the accuracy of the computing power resource feedback information; and obtaining indirect verification data according to the assisting verification instruction; generating indirect confirmation information according to the indirect verification data to obtain an indirect verification conclusion; The direct verification conclusion and the indirect verification conclusion are compared to obtain a verification result.

[0010] Preferably, the step of comparing the direct verification conclusion and the indirect verification conclusion to obtain the verification result includes the following: When the direct verification conclusion and the indirect verification conclusion are consistent, step S5 can be executed; When the direct verification conclusion and the indirect verification conclusion are completely inconsistent or partially inconsistent, a data return confirmation instruction is generated to the corresponding transfer node; and the number of data inconsistencies of the corresponding transfer node is recorded.

[0011] Preferably, the step of generating computing power scheduling information by the management platform according to the verification result; and generating computing task information to the transfer node and the user node according to the computing power scheduling information includes the following: According to the verification result, the computing power information set corresponding to the computing power resource request information is identified to obtain the target service type; Converting a computing power information set corresponding to the computing power resource request information into network information, and generating computing power scheduling information from the network information; The computing power scheduling information is transmitted to the transfer node in the form of the computing task information through scheduling; The transfer node then schedules the computing task information to be transmitted to the user node.

[0012] The present invention also discloses a cloud computing-based security management system, which is used to execute the cloud computing-based security management method described above; wherein the cloud computing-based security management system comprises: A construction module, wherein the construction module is used to construct a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; A generation and analysis module, the generation and analysis module is used to generate computing power resource request information, and send the computing power resource request information to the corresponding transfer node; and judge the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; and generate computing power scheduling information; and generate computing task information according to the computing power scheduling information to the transfer node and the user node; A verification module, the verification module is used to generate verification confirmation information for the transfer node to obtain a verification result; A receiving module is used to obtain an optimal task allocation amount according to the computing task information.

[0013] The present invention also discloses a cloud computing-based security management terminal, which includes: a memory, a processor, and a cloud computing-based security management program stored in the memory and executable on the processor, wherein the cloud computing-based security management program implements the steps of the cloud computing-based security management method when executed by the processor.

[0014] The present invention also discloses a storage medium, on which a cloud computing-based security management program is stored. When the cloud computing-based security management program is executed by a processor, the steps of the cloud computing-based security management method are implemented.

[0015] The beneficial effect of the present invention is that the technical solution first constructs a computing power management platform to realize a distributed architecture platform, which is conducive to improving the efficiency and security of remote calls to cloud computing power; then generates computing power resource request information through user nodes, and sends the computing power resource request information to the corresponding transfer nodes, so as to realize the link mode of the underlying user nodes actively requesting tasks before verifying and dispatching tasks, which is conducive to reducing the operating load of the background management node and ensuring its operating efficiency and security; then the transfer node judges the computing power resource request information to generate corresponding computing power resource feedback information to the management platform to realize the preliminary judgment and screening function, which is conducive to reducing the operating load of the background management node and ensuring its operating efficiency and security; then according to the computing power resource Source feedback information, the management platform generates verification confirmation information for the transfer node to obtain the verification result, so as to avoid the intermediate layer of the transfer node from making mistakes or erroneous sending of computing resource feedback information, which is conducive to improving the accuracy and rationality of data transmission; then according to the verification result, the management platform generates computing power scheduling information; and generates computing task information to the transfer node and the user node according to the computing power scheduling information; the user node obtains the best task allocation amount according to the computing task information to realize the secondary confirmation of the rationality and accuracy of the computing task information, so as to obtain the best task allocation amount, and then can realize the generation and decentralization of the link method most suitable for the current task, and ensure the reliable completion of the computing power task; it can also improve the accuracy, security and management efficiency of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The following will refer to the attached Figures 1 to 3 To describe the features, advantages and technical effects of exemplary embodiments of the present invention.

[0017] Figure 1 A flowchart of a cloud computing-based security management method according to an embodiment of the present invention; Figure 2 A structural block diagram of a cloud computing-based security management system according to an embodiment of the present invention; Figure 3This is a structural block diagram of an embodiment of a cloud computing-based security management terminal according to an embodiment of the present invention.

[0018] In the figure: 1001 - processor; 1002 - communication bus; 1003 - user interface; 1004 - network interface; 1005 - memory. DETAILED DESCRIPTION

[0019] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by technicians in the technical field to which this application belongs; the terms used herein are only for the purpose of describing specific embodiments and are not intended to limit this application; the terms "including" and "having" in the specification and claims of this application and the above-mentioned figure descriptions and any variations thereof are intended to cover non-exclusive inclusions.

[0020] In the description of the embodiments of the present application, the technical terms "first", "second", etc. are only used to distinguish different objects, and cannot be understood as indicating or implying relative importance or implicitly indicating the number, specific order or primary and secondary relationship of the indicated technical features. In the description of the embodiments of the present application, the meaning of "multiple" is more than two, unless otherwise clearly and specifically defined.

[0021] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0022] In the description of the embodiments of the present application, the term "and / or" is only a description of the association relationship of the associated objects, indicating that there may be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and multiple situations exist alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0023] In the description of the embodiments of the present application, unless otherwise clearly specified and limited, technical terms such as "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, and it can be the internal connection of two elements or the interaction relationship between two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the embodiments of the present application can be understood according to the specific circumstances.

[0024] The present invention provides a cloud computing-based security management method, system, terminal and storage medium.

[0025] like Figure 3 As shown, Figure 3 It is a schematic diagram of the terminal structure of the hardware operating environment involved in the embodiment of the present invention.

[0026] The terminal of the embodiment of the present invention can be a PC, or it can be a mobile terminal device with display function such as a smart phone, a tablet computer, an e-book reader, an MP3 (Moving Picture Experts Group Audio Layer III) player, an MP4 (Moving Picture Experts Group Audio Layer IV) player, a portable computer, etc.

[0027] like Figure 3 As shown, the terminal may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or a stable memory (non-volatile memory), such as a disk memory. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0028] Optionally, the terminal may also include a camera, an RF (Radio Frequency) circuit, a sensor, an audio circuit, a WiFi module, and the like. Among them, sensors include light sensors, motion sensors, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display screen according to the brightness of the ambient light, and the proximity sensor may turn off the display screen and / or backlight when the mobile terminal is moved to the ear. As a type of motion sensor, the gravity acceleration sensor can monitor the magnitude of acceleration in all directions (generally three axes), and can monitor the magnitude and direction of gravity when stationary. It can be used for applications that identify the posture of the mobile terminal (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer, tapping), etc.; of course, the mobile terminal can also be equipped with other sensors such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc., which will not be repeated here.

[0029] Those skilled in the art will appreciate that the terminal structure shown in the figure does not constitute a limitation on the terminal, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0030] Reference Figure 1 One embodiment of the cloud computing-based security management method, system, terminal and storage medium of the present invention provides a cloud computing-based security management method, such as Figure 1 As shown, the cloud computing-based security management method includes the following steps: S1. Build a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; S2. The user node generates computing resource request information and sends the computing resource request information to the corresponding transfer node; S3, the transfer node determines the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; S4. According to the computing power resource feedback information, the management platform generates verification confirmation information for the transfer node to obtain a verification result; S5. According to the verification result, the management platform generates computing power scheduling information; and generates computing task information to the transfer node and the user node according to the computing power scheduling information; S6. The user node obtains an optimal task allocation amount according to the computing task information.

[0031] In this embodiment, this technical solution first constructs a computing power management platform to realize a distributed architecture platform, which is conducive to improving the efficiency and security of remote calls to cloud computing power; then generates computing power resource request information through user nodes, and sends the computing power resource request information to the corresponding transfer nodes, so as to realize the link mode of the underlying user nodes actively requesting tasks before verifying and dispatching tasks, which is conducive to reducing the operating load of the background management node and ensuring its operating efficiency and security; then the transfer node judges the computing power resource request information to generate corresponding computing power resource feedback information to the management platform to realize the preliminary judgment and screening function, which is conducive to reducing the operating load of the background management node and ensuring its operating efficiency and security; then according to the computing power resource feedback Feedback information, the management platform generates verification confirmation information for the transfer node to obtain the verification result, so as to avoid the intermediate layer of the transfer node from making mistakes or errors in sending computing resource feedback information, which is conducive to improving the accuracy and rationality of data transmission; then according to the verification result, the management platform generates computing power scheduling information; and generates computing task information to the transfer node and the user node according to the computing power scheduling information; the user node obtains the best task allocation amount according to the computing task information to realize the secondary confirmation of the rationality and accuracy of the computing task information, so as to obtain the best task allocation amount, and then it can realize the generation and decentralization of the link method most suitable for the current task, and ensure the reliable completion of the computing power task; it can also improve the accuracy, security and management efficiency of the data.

[0032] Specifically, in some implementations, in S1, the step of building a computing power management platform includes the following: According to the geographical factors of all the user nodes and the completion rate of the computing tasks, at least two of the transfer nodes are classified; and the data between all the transfer nodes are relatively independent; All the transfer nodes are controlled by the background management node. The background management node establishes BGP connections with the BGP Speakers in all the transfer nodes through the BGP protocol; each transfer node establishes BGP connections with the BGP Speakers in all corresponding user nodes through the BGP protocol.

[0033] In other words, through the primary parallel processing of multiple groups of user nodes and the secondary parallel processing of multiple groups of transit nodes, combined with the three-level distributed architecture of user nodes + transit nodes + background management nodes, the efficiency and security of remote calls to cloud computing power can be greatly improved; and the demand for computing power can be maximized as much as possible.

[0034] Specifically, in some implementations, in S2, the step of the user node generating computing power resource request information and sending the computing power resource request information to the corresponding transfer node includes the following: The user node actively generates computing resource request information according to demand and performs encryption optimization processing; wherein the encryption optimization processing includes static character password verification, dynamic character password verification and character password verification formed by combining static and dynamic; Sending the encrypted and optimized computing resource request information to the corresponding transfer node; At the same time, preliminary storage record information is generated to the user node.

[0035] That is to say, in order to ensure the security of the transmission of computing power resource request information, it is encrypted in one or more ways to ensure the independence of the operation of each user node and avoid mutual interference between user nodes. The computing power resource request information is then converted into preliminary storage record information to the user node to achieve comprehensive data storage, which is conducive to the convenience and speed of subsequent review and verification operations.

[0036] Specifically, in some implementations, in S3, the step of the transfer node determining the computing resource request information to generate corresponding computing resource feedback information to the management platform includes the following: The transfer node compares the previous computing resources of the user node with the content of the computing resource request information; Determine and confirm the self-adjustment status of the user node within a preset period (the preset period may be one week, one month, or one year, etc.); The information formed by the comparison and the self-adjustment situation are combined to generate corresponding computing power resource feedback information to the management platform.

[0037] That is to say, according to the comparison between the previous computing power resources of the user node and the content of the computing power resource request information, if the scope of the content covered by the two is completely consistent or the deviation is within the preset ratio (the preset ratio can be 10%-20%, etc.), it means that the content of the computing power resource request information is relatively reasonable, and combined with the self-optimization degree of the user node within the preset time, if the self-condition is better and the content is relatively reasonable, it can be requested, and the corresponding computing power resource feedback information is generated to the management platform at the same time. If the scope of the content covered by the two is completely consistent or the deviation exceeds the preset ratio, and self-optimization is performed to reduce its own conditions, the user node will be ordered to make rectifications and re-request, thereby improving the accuracy, security and management efficiency of the data.

[0038] Specifically, in some implementations, in S4, the step of generating verification confirmation information for the transfer node according to the computing resource feedback information by the management platform to obtain the verification result includes the following: According to the computing power resource feedback information, the management platform directly sends a direct verification instruction to the transfer node that makes the feedback; the direct verification instruction includes querying whether the computing power resource feedback information is issued by the transfer node that makes the feedback and the accuracy of the computing power resource feedback information; and obtaining direct verification data according to the direct verification instruction; generating direct confirmation information according to the direct verification data to obtain a direct verification conclusion; According to the computing power resource feedback information, the management platform sends an assisting verification instruction to the assisting node; the assisting node sends an assisting verification instruction to the transit node that makes feedback according to the assisting verification instruction; the assisting verification instruction includes querying whether the computing power resource feedback information is issued by the transit node that makes feedback and the accuracy of the computing power resource feedback information; and obtaining indirect verification data according to the assisting verification instruction; generating indirect confirmation information according to the indirect verification data to obtain an indirect verification conclusion; The direct verification conclusion and the indirect verification conclusion are compared to obtain a verification result.

[0039] In other words, this method realizes double verification and comparison of the rationality and accuracy of computing resource feedback information through direct verification and indirect verification of the management platform, avoiding phenomena such as random operation of transfer nodes; thereby, it can realize the generation and decentralization of the link method that is most suitable for the current task, and ensure the reliable completion of computing tasks; it can also improve the accuracy, security and management efficiency of data.

[0040] Among them, the assisting node is another transit node of the same level as the transit node that makes feedback; that is, the assisting node and the transit node that makes feedback are two relatively independently operated transit nodes; this structure can reduce the need to add different assisting devices to perform assisting verification, improve the reasonable utilization performance of the equipment, thereby avoiding the incompatibility of information transmission between devices, and thus improving management efficiency.

[0041] Specifically, in some implementations, the step of comparing the direct verification conclusion and the indirect verification conclusion to obtain a verification result includes the following: When the direct verification conclusion and the indirect verification conclusion are consistent, step S5 can be executed; When the direct verification conclusion and the indirect verification conclusion are completely inconsistent or partially inconsistent, a data return confirmation instruction is generated to the corresponding transfer node; and the number of inconsistent data of the corresponding transfer node is recorded; When the number of inconsistencies exceeds a preset number, the corresponding transfer node's transfer qualification is suspended, wherein the preset number may be 3, 4, 5 or 6 times, etc., depending on the actual setting.

[0042] That is to say, in order to ensure the rationality and accuracy of data transmission, when data inconsistency occurs, the data needs to be sent back to the original transit node for verification. After the correct data is corrected, new computing resources feedback information is regenerated to the management platform; then the management platform re-executes the new S4 step for verification, and then executes the step S5 process after verification, thereby improving the speed and security of data management and processing.

[0043] Specifically, in some implementations, the management platform sends an assisting verification instruction to the assisting node according to the computing resource feedback information; the assisting node sends an assisting verification instruction to the transit node that makes feedback according to the assisting verification instruction; and obtains indirect verification data according to the assisting verification instruction; and generates indirect confirmation information according to the indirect verification data to obtain the step of indirect verification conclusion, including the following: When the assisting node receives the assisting verification instruction sent by the management platform, it sends the assisting verification instruction to the relay node that gives feedback; The transfer node reconfirms the content of the computing power resource feedback information to ensure the authenticity of the computing power resource feedback information; The relay node obtains the indirect verification data according to the authenticity situation, and sends the indirect verification data to the assisting node; The assisting node generates indirect confirmation information according to the indirect verification data, and sends the indirect confirmation information to the background management node to obtain the indirect verification conclusion; At the same time, the transfer node deletes the indirect verification data and the information of the transfer node confirming the authenticity of the computing power resource feedback information; and the assisting node deletes the received assisting verification instruction and the indirect verification data and the indirect confirmation information; and the background management node saves the indirect verification data, the information of the transfer node confirming the authenticity of the computing power resource feedback information, the assisting verification instruction and the indirect confirmation information.

[0044] That is to say, in order to achieve the indirect confirmation of confidentiality and privacy, after obtaining the indirect verification conclusion, the transit node and the assisting node will delete the relevant assisting operation traces and only save the process in the background management node to prevent intentional persons from controlling the operations of the assisting node or the transit node, which is conducive to improving the authenticity of the data and ensuring the security and efficiency of management.

[0045] Specifically, in some implementations, in S5, the step of generating computing power scheduling information by the management platform according to the verification result; and generating computing task information to the transfer node and the user node according to the computing power scheduling information includes the following: According to the verification result, the computing power information set corresponding to the computing power resource request information is identified to obtain the target service type; Converting a computing power information set corresponding to the computing power resource request information into network information, and generating computing power scheduling information from the network information; The computing power scheduling information is transmitted to the transfer node in the form of the computing task information through scheduling; The transfer node then schedules the computing task information to be transmitted to the user node.

[0046] Furthermore, the step of obtaining the target business type includes: Enter the ID of the target business and identify the computing power information set corresponding to the computing power resource request information; Determine the user node corresponding to the target service according to the identifier of the target service; Determine the actual required computing power information corresponding to the target business based on the user node corresponding to the target business; The network information corresponding to the target business is calculated based on the actual computing power information required by the target business.

[0047] Specifically, in some embodiments, in S6, in the step in which the user node obtains the optimal task allocation amount according to the computing task information, the computing task information contains a task allocation amount within a certain preset range, and the user node can obtain the optimal task allocation amount according to its own needs.

[0048] The present invention also provides a security management system based on cloud computing.

[0049] Specifically, Figure 2 As shown, the cloud computing-based security management system includes: A construction module 610 is used to construct a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; A generation and analysis module 620, the generation and analysis module 620 is used to generate computing power resource request information, and send the computing power resource request information to the corresponding transfer node; and judge the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; and generate computing power scheduling information; and generate computing task information according to the computing power scheduling information to the transfer node and the user node; A verification module 630, wherein the verification module 630 is used to generate verification confirmation information for the transfer node to obtain a verification result; The receiving module 640 obtains an optimal task allocation amount according to the computing task information.

[0050] In addition, an embodiment of the present invention further provides a computer-readable storage medium, on which a cloud computing-based security management program is stored. When the cloud computing-based security management program is executed by a processor, the following operations are implemented: Constructing a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; The user node generates computing power resource request information and sends the computing power resource request information to the corresponding transfer node; The transfer node determines the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; According to the computing power resource feedback information, the management platform generates verification confirmation information for the transfer node to obtain the verification result; According to the verification result, the management platform generates computing power scheduling information; and generates computing task information to the transfer node and the user node according to the computing power scheduling information; The user node obtains the optimal task allocation amount according to the computing task information.

[0051] Furthermore, the step of building a computing power management platform includes the following: According to the geographical factors of all the user nodes and the completion rate of the computing tasks, at least two of the transfer nodes are classified; and the data between all the transfer nodes are relatively independent; All the transfer nodes are controlled by the background management node.

[0052] Furthermore, the step of the user node generating computing power resource request information and sending the computing power resource request information to the corresponding transfer node includes the following: The user node actively generates computing resource request information according to demand and performs encryption optimization processing; wherein the encryption optimization processing includes static character password verification, dynamic character password verification and character password verification formed by combining static and dynamic; Sending the encrypted and optimized computing resource request information to the corresponding transfer node; Generate preliminary storage record information to the user node.

[0053] Furthermore, the step of the transfer node judging the computing resource request information to generate corresponding computing resource feedback information to the management platform includes the following: The transfer node compares the previous computing resources of the user node with the content of the computing resource request information; Determine and confirm the self-adjustment status of the user node within the preset time; The information formed by the comparison and the self-adjustment situation are combined to generate corresponding computing power resource feedback information to the management platform.

[0054] Furthermore, the step of generating verification confirmation information for the transfer node by the management platform according to the computing resource feedback information to obtain the verification result includes the following: According to the computing power resource feedback information, the management platform directly sends a direct verification instruction to the transfer node that makes the feedback; the direct verification instruction includes querying whether the computing power resource feedback information is issued by the transfer node that makes the feedback and the accuracy of the computing power resource feedback information; and obtaining direct verification data according to the direct verification instruction; generating direct confirmation information according to the direct verification data to obtain a direct verification conclusion; According to the computing power resource feedback information, the management platform sends an assisting verification instruction to the assisting node; the assisting node sends an assisting verification instruction to the transit node that makes feedback according to the assisting verification instruction; the assisting verification instruction includes querying whether the computing power resource feedback information is issued by the transit node that makes feedback and the accuracy of the computing power resource feedback information; and obtaining indirect verification data according to the assisting verification instruction; generating indirect confirmation information according to the indirect verification data to obtain an indirect verification conclusion; The direct verification conclusion and the indirect verification conclusion are compared to obtain a verification result.

[0055] Further, the step of comparing the direct verification conclusion and the indirect verification conclusion to obtain the verification result includes the following: When the direct verification conclusion and the indirect verification conclusion are consistent, step S5 can be executed; When the direct verification conclusion and the indirect verification conclusion are completely inconsistent or partially inconsistent, a data return confirmation instruction is generated to the corresponding transfer node; and the number of data inconsistencies of the corresponding transfer node is recorded.

[0056] Further, the management platform generates computing power scheduling information according to the verification result; and generates computing task information to the transfer node and the user node according to the computing power scheduling information, including the following steps: According to the verification result, the computing power information set corresponding to the computing power resource request information is identified to obtain the target service type; Converting a computing power information set corresponding to the computing power resource request information into network information, and generating computing power scheduling information from the network information; The computing power scheduling information is transmitted to the transfer node in the form of the computing task information through scheduling; The transfer node then schedules the computing task information to be transmitted to the user node.

[0057] In addition, it should be understood that although the present specification is described according to implementation modes, not every implementation mode includes only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment can also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

[0058] According to the disclosure and teaching of the above description, those skilled in the art to which the present invention belongs can also change and modify the above embodiment. Therefore, the present invention is not limited to the above specific embodiment, and any obvious improvement, replacement or modification made by those skilled in the art on the basis of the present invention belongs to the protection scope of the present invention. In addition, although some specific terms are used in this specification, these terms are only for the convenience of description and do not constitute any limitation to the present invention.

Claims

1. A security management method based on cloud computing, Features: The following steps are involved: S1. Build a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; S2. The user node generates computing resource request information and sends the computing resource request information to the corresponding transfer node; S3, the transfer node determines the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; S4. According to the computing power resource feedback information, the management platform generates verification confirmation information for the transfer node to obtain a verification result; S5. According to the verification result, the management platform generates computing power scheduling information; And generate computing task information to the transfer node and the user node according to the computing power scheduling information; S6. The user node obtains an optimal task allocation amount according to the computing task information.

2. According to the cloud computing-based security management method of claim 1, Features: The steps of constructing the computing power management platform include the following: According to the geographical factors of all the user nodes and the completion rate of the computing tasks, at least two of the transfer nodes are classified; and the data between all the transfer nodes are relatively independent; All the transfer nodes are controlled by the background management node.

3. According to the cloud computing-based security management method of claim 1, Features: The step of generating computing resource request information by the user node and sending the computing resource request information to the corresponding transfer node includes the following: The user node actively generates computing resource request information according to demand and performs encryption optimization processing; wherein the encryption optimization processing includes static character password verification, dynamic character password verification and character password verification formed by combining static and dynamic; Sending the encrypted and optimized computing resource request information to the corresponding transfer node; Generate preliminary storage record information to the user node.

4. According to the cloud computing-based security management method of claim 1, Features: The step of the transfer node judging the computing resource request information to generate corresponding computing resource feedback information to the management platform includes the following: The transfer node compares the previous computing resources of the user node with the content of the computing resource request information; Determine and confirm the self-adjustment status of the user node within the preset time; The information formed by the comparison and the self-adjustment situation are combined to generate corresponding computing power resource feedback information to the management platform.

5. According to the cloud computing-based security management method of claim 1, Features: The step of generating verification confirmation information for the transfer node by the management platform according to the computing resource feedback information to obtain the verification result includes the following: According to the computing power resource feedback information, the management platform directly sends a direct verification instruction to the transfer node that makes the feedback; the direct verification instruction includes querying whether the computing power resource feedback information is issued by the transfer node that makes the feedback and the accuracy of the computing power resource feedback information; and obtaining direct verification data according to the direct verification instruction; generating direct confirmation information according to the direct verification data to obtain a direct verification conclusion; According to the computing power resource feedback information, the management platform sends an assistance verification instruction to the assisting node; The assisting node sends an assisting verification instruction to the transit node that makes feedback according to the assisting verification instruction; the assisting verification instruction includes querying whether the computing power resource feedback information is issued by the transit node that makes feedback and the accuracy of the computing power resource feedback information; and obtaining indirect verification data according to the assisting verification instruction; Generate indirect confirmation information according to the indirect verification data to obtain an indirect verification conclusion; The direct verification conclusion and the indirect verification conclusion are compared to obtain a verification result.

6. According to the cloud computing-based security management method of claim 5, Features: The step of comparing the direct verification conclusion and the indirect verification conclusion to obtain the verification result includes the following: When the direct verification conclusion and the indirect verification conclusion are consistent, step S5 can be executed; When the direct verification conclusion and the indirect verification conclusion are completely inconsistent or partially inconsistent, a data return confirmation instruction is generated to the corresponding transfer node; and the number of data inconsistencies of the corresponding transfer node is recorded.

7. According to the cloud computing-based security management method of claim 1, Features: According to the verification result, the management platform generates computing power scheduling information; The step of generating computing task information to the transfer node and the user node according to the computing power scheduling information includes the following: According to the verification result, the computing power information set corresponding to the computing power resource request information is identified to obtain the target service type; Converting a computing power information set corresponding to the computing power resource request information into network information, and generating computing power scheduling information from the network information; The computing power scheduling information is transmitted to the transfer node in the form of the computing task information through scheduling; The transfer node then schedules the computing task information to be transmitted to the user node.

8. A security management system based on cloud computing, Features: Used to execute the cloud computing-based security management method according to any one of claims 1 to 7 above; wherein the cloud computing-based security management system comprises: A construction module, wherein the construction module is used to construct a computing power management platform; the management platform includes a background management node, at least two transfer nodes and at least one user node; A generation and analysis module, the generation and analysis module is used to generate computing power resource request information, and send the computing power resource request information to the corresponding transfer node; and judge the computing power resource request information to generate corresponding computing power resource feedback information to the management platform; and generate computing power scheduling information; and generate computing task information according to the computing power scheduling information to the transfer node and the user node; A verification module, the verification module is used to generate verification confirmation information for the transfer node to obtain a verification result; A receiving module is used to obtain an optimal task allocation amount according to the computing task information.

9. A cloud computing-based security management terminal, Features: The cloud computing-based security management terminal includes: a memory, a processor, and a cloud computing-based security management program stored in the memory and executable on the processor. When the cloud computing-based security management program is executed by the processor, the steps of the cloud computing-based security management method as described in any one of claims 1 to 7 are implemented.

10. A storage medium, Features: The storage medium stores a cloud computing-based security management program, which, when executed by a processor, implements the steps of the cloud computing-based security management method according to any one of claims 1 to 7.

Images