Warehouse logistics management system and method based on digitization

Abstract

The invention discloses a warehouse logistics management system and method based on digitization, and relates to the technical field of warehouse logistics management, and the system comprises a cloud service module which is used for providing cloud resource management and scheduling: a safety module which comprises a detection unit and a response unit; the detection unit is used for formulating a safety baseline and performing safety detection; the response unit is used for identifying threats according to a result of the detection unit and making a response; all assets including hardware, software and data resources in warehouse logistics can be automatically found, classified and continuously tracked, the accuracy and the newest state of an asset list are ensured, a safety configuration standard (safety baseline) is established, safety configuration of a system and an application program is regularly checked, it is ensured that the system and the application program obey an established safety strategy, and the safety of the system and the application program is ensured. Vulnerability scanning is carried out on the system regularly, potential security vulnerabilities are identified, and sorting is carried out according to risk levels, so that key vulnerabilities can be repaired preferentially.

Description

Technical Field

[0001] The present invention relates to the technical field of warehousing logistics management, and more specifically, to a digitized warehousing logistics management system and method. Background Art

[0002] It is mainly used to improve the efficiency of warehousing and logistics management, save costs, and promote information sharing and business collaboration.

[0003] The use process includes: Cloud platform implementation: providing full-link warehouse cloud deployment solutions and delivery services, including computer room survey, construction wiring, network deployment, etc., to ensure the availability of cloud platform services;

[0004] Cloud platform operation and maintenance: Based on ITIL best practices and IS020000 and other standards, combined with the characteristics of warehouse informatization, we form the best practices for operation and maintenance, and provide a comprehensive operation and maintenance service catalog and service content, including operation and maintenance standard construction, daily inspections, monitoring management, etc.;

[0005] Cloud resource operation: Plan, approve, activate, and recycle various resources on the cloud platform. The operation process strictly follows standard specifications and records all operation logs;

[0006] Platform audit: Relying on the cloud management and monitoring capabilities provided by the Warehouse Cloud, relevant logs of the entire life cycle of the Warehouse Cloud are collected and analyzed, and audit reports are issued regularly;

[0007] Cloud migration solutions: Provide cloud migration tools to support the migration of government applications to the cloud, including database and application migration services, cloud host image migration tools, data transmission services, etc.

[0008] However, in actual use, the existing warehousing cloud service providers are relatively scattered, which makes it difficult to form economies of scale. The scale is generally small, and the proportion of physical servers with less than 500 units exceeds 70%, which affects the security assurance capabilities and may affect the security and stability of the cloud platform.

[0009] Moreover, the existing management maturity is low, and there are problems such as unclear warehousing and logistics assets, unknown exposure areas, failure to establish an effective security baseline mechanism, weak safety awareness of operation and maintenance personnel, and irregular operation and maintenance management. Although security products are widely deployed, there are problems such as expired authorization, outdated feature libraries, and unreasonable firewall rules, which lead to the failure of security products to play their due role. Summary of the invention

[0010] In view of the existing deficiencies in the prior art, the object of the present invention is to provide a digital-based warehouse logistics management system and method.

[0011] To achieve the above object, the present invention provides the following technical solutions:

[0012] A digital warehouse logistics management system and method, including a cloud service module, wherein the cloud service module is used to provide cloud resource management and scheduling:

[0013] A security module, the security module comprising a detection unit and a response unit;

[0014] The detection unit is used to formulate a security baseline and perform security detection;

[0015] The response unit is used to identify threats according to the results of the detection unit and respond.

[0016] Preferably, the specific working mode of the cloud service module is as follows:

[0017] First, build a unified access layer;

[0018] Then, the predicted resource demand value Q of the cloud service management is obtained;

[0019] Obtain the resource usage value W for the current time period;

[0020] Set the maximum and minimum thresholds for resource usage in advance;

[0021] If the resource usage value W in the current time period is greater than the maximum threshold or less than the minimum threshold, resource adjustment is triggered;

[0022] According to the formula , calculate and obtain the resource adjustment amount , according to the amount of resources adjustment Make corresponding resource adjustments.

[0023] Preferably, the specific method of obtaining the resource usage value W is as follows:

[0024] According to the formula , calculate the resource usage value W, where N is the number of characteristics of the resource usage value, and the value of i is an integer from 1 to N. represents the actual value of the ith feature, represents the i-th feature.

[0025] Preferably, the specific method of obtaining the predicted resource demand value Q is as follows:

[0026] Set a time period in days;

[0027] Obtain the resource usage value for each day in the time period, and calculate the average resource usage value Y in the time period;

[0028] The average resource usage value Y is marked as the predicted resource demand value Q for the next time period.

[0029] Preferably, the specific working mode of the detection unit is as follows:

[0030] According to the formula , calculate and obtain the basic score of the management system ,in is the impact subscore, is the available degree sub-score;

[0031] Implementing setting a base score If the basic score If the value is greater than the corresponding threshold, an alarm signal is generated and transmitted to the response unit.

[0032] Preferably, the specific working method of the detection unit also includes:

[0033] Obtain the time score J and environment score M of the management system;

[0034] According to the formula , get the adjusted basic score , using the adjusted base score The detection is completed by comparing with the corresponding threshold.

[0035] Preferably, the specific method of obtaining the time score J and the environment score M is as follows:

[0036] The time score J is obtained by dividing the total number of working days of the management system from the current time period to the last maintenance by the preset number of working days of the management system and then multiplying it by the time coefficient, where the time coefficient is the preset proportional coefficient;

[0037] The environmental score M is obtained as follows: , calculate and obtain the environmental score M;

[0038] Where C is the number of influencing features of the environmental score, and j is an integer from 1 to C. represents the jth influencing eigenvalue, Represents the weight coefficient of the jth influencing feature.

[0039] Preferably, the specific working mode of the response unit is as follows:

[0040] Get the adjusted basic score The difference between and the corresponding threshold;

[0041] A threshold range of the difference is set in advance. If the difference is within the threshold range, the threat is marked as a medium-severity threat. If the difference is greater than the maximum value within the threshold range, the threat is marked as a severe threat. If the difference is less than the minimum value within the threshold range, the threat is marked as a low-severity threat.

[0042] Develop different response strategies based on the severity of the threat;

[0043] For serious threats, immediate action is required;

[0044] For medium-severity threats, in-depth analysis and monitoring are required;

[0045] For low-severity threats, routine monitoring and reporting are performed.

[0046] Preferably, it also includes a policy management module, and the specific working method of the policy management module is as follows:

[0047] All warehouse information resources are divided into three categories: unconditional sharing, conditional sharing and non-sharing, and the sharing requirements of each type of information resources are clearly defined;

[0048] Improve laws and regulations:

[0049] Establish information sharing processes and norms.

[0050] On the other hand, the present invention also proposes a warehousing logistics management method based on digitalization, comprising the following steps:

[0051] Step 1: First, provide cloud resource management and scheduling;

[0052] Step 2: Establish security baseline and security testing;

[0053] Step 3: Identify threats based on security detection results and respond.

[0054] How it works

[0055] It can automatically discover all assets in warehousing and logistics, including hardware, software and data resources, and classify and continuously track them to ensure the accuracy and up-to-date status of the asset list, establish security configuration standards (security baselines), and regularly check the security configuration of systems and applications to ensure that they comply with established security policies. It can also regularly scan the system for vulnerabilities, identify potential security vulnerabilities, and sort them according to risk levels so that critical vulnerabilities can be repaired first. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 This is a flow chart of the management system of the present invention.

[0057] Figure 2 Schematic diagram of the method of the present invention. DETAILED DESCRIPTION

[0058] Reference Figure 1 : A digital-based warehouse logistics management system and method, including a cloud service module, the cloud service module is used to provide cloud resource management and scheduling: It should be noted that it can support multi-cloud and hybrid cloud environments, realize resource sharing and load balancing, integrate automated deployment and elastic scaling services to cope with different load requirements, enhance service capabilities, achieve economies of scale, and improve resource utilization and system efficiency;

[0059] It should also be noted that the warehousing cloud service management system is mainly used to improve the efficiency of warehousing and logistics management, save costs, promote information sharing and business collaboration, and promote the digital transformation of the government. The application fields of warehousing cloud service management system are wide, including but not limited to electronic warehousing, industry, transportation, environmental protection, tourism, business, food safety and other fields;

[0060] The use process includes: Cloud platform implementation: providing full-link warehouse cloud deployment solutions and delivery services, including computer room survey, construction wiring, network deployment, etc., to ensure the availability of cloud platform services;

[0061] Cloud platform operation and maintenance: Based on ITIL best practices and IS020000 and other standards, combined with the characteristics of warehouse informatization, we form the best practices for operation and maintenance, and provide a comprehensive operation and maintenance service catalog and service content, including operation and maintenance standard construction, daily inspections, monitoring management, etc.;

[0062] Cloud resource operation: Plan, approve, activate, and recycle various resources on the cloud platform. The operation process strictly follows standard specifications and records all operation logs;

[0063] Platform audit: Relying on the cloud management and monitoring capabilities provided by the Warehouse Cloud, relevant logs of the entire life cycle of the Warehouse Cloud are collected and analyzed, and audit reports are issued regularly;

[0064] Cloud migration solutions: Provide cloud migration tools to support the migration of government applications to the cloud, including database and application migration services, cloud host image migration tools, data transmission services, etc.

[0065] However, in actual use, the existing warehousing cloud service providers are relatively scattered, which makes it difficult to form economies of scale. The scale is generally small, and the proportion of physical servers with less than 500 units exceeds 70%, which affects the security assurance capabilities and may affect the security and stability of the cloud platform.

[0066] In addition, the existing management maturity is low, with unclear warehouse and logistics assets, unknown exposure, no effective security baseline mechanism, weak security awareness of operation and maintenance personnel, and irregular operation and maintenance management. Although security products are widely deployed, there are problems such as expired authorization, outdated feature libraries, and unreasonable firewall rules, which lead to the failure of security products to play their due role.

[0067] A security module, the security module comprising a detection unit and a response unit;

[0068] The detection unit is used to develop security baselines and security detection; it should be noted that it can automatically discover all assets in warehousing and logistics, including hardware, software and data resources, and classify and continuously track them to ensure the accuracy and latest status of the asset list, establish security configuration standards (security baselines), and regularly check the security configuration of systems and applications to ensure that they comply with established security policies, regularly scan the system for vulnerabilities, identify potential security vulnerabilities, and sort them according to risk levels so that critical vulnerabilities can be repaired first;

[0069] The response unit is used to identify threats according to the results of the detection unit and respond to them, which can improve the maturity of security management, reduce security vulnerabilities, and enhance the defense capabilities against internal and external threats.

[0070] As an optional embodiment: the specific working mode of the cloud service module is as follows:

[0071] First, we build a unified access layer. It should be noted that it is used to abstract and encapsulate the APIs of different cloud service providers to achieve unified interface calls in multi-cloud and hybrid cloud environments. It simplifies resource management and scheduling in multi-cloud environments, reduces the complexity of connecting with various cloud service providers, and achieves unified management of resource sharing and load balancing.

[0072] Then, the predicted resource demand value Q of cloud service management is obtained; it should be noted that resource demand refers to the demand for computing resources in the cloud environment, including but not limited to CPU, memory, storage, and network bandwidth. These resources jointly support various applications and services running on the cloud. The purpose of resource demand forecasting is to accurately estimate the demand for these resources in the future, so as to adjust resource allocation in a timely manner to meet business needs and optimize costs;

[0073] Get the resource usage value W for the current time period; it should be noted that the key monitoring indicators are focused on, such as CPU usage, memory usage, storage usage, network bandwidth usage, etc. These indicators can be obtained through the cloud monitoring console and obtained through comprehensive calculation of the above indicators;

[0074] Set the maximum and minimum thresholds for resource usage in advance; it should be noted that these thresholds are determined based on business needs and historical data;

[0075] If the resource usage value W in the current time period is greater than the maximum threshold or less than the minimum threshold, resource adjustment is triggered;

[0076] According to the formula , calculate and obtain the resource adjustment amount , according to the amount of resources adjustment Make corresponding resource adjustments. It should be noted that if the resource adjustment amount If it is a positive number, resources will be increased, otherwise, resources will be reduced. The resource adjustment amount Reflects the difference between the predicted resource demand and the current actual usage. A positive value means that the resource demand exceeds the current usage, and resources may need to be increased; a negative value means that the current usage exceeds the predicted demand, and resources may need to be reduced or optimized. By quantifying this difference, the system can clearly determine the amount of resources that need to be adjusted, thereby achieving accurate resource allocation and cost control;

[0077] It should also be noted that resource allocation in the cloud environment can be automatically adjusted based on the results of resource demand forecasts. This includes quickly deploying new computing instances or expanding existing instances through automated tools to cope with business peaks when resource demand increases; and reducing computing instances or recycling resources accordingly when resource demand decreases to save costs.

[0078] As an optional embodiment: the specific method of obtaining the resource usage value W is as follows:

[0079] According to the formula , calculate the resource usage value W, where N is the number of characteristics of the resource usage value, and the value of i is an integer from 1 to N. represents the actual value of the ith feature, It should be noted that in this embodiment, the value of N is 5, and the characteristics of resource usage values ​​are CPU usage, memory usage, storage usage, bandwidth usage and network traffic, respectively. The i in is 1 to 5, corresponding to the above characteristics respectively. It can also be , , , and , obtained through staff evaluation, the initial value is 0.2, and the value in this embodiment can be , , , and ;

[0080] It should also be noted that CPU usage is obtained by adding the user's CPU share to the system's CPU share and then dividing it by the total CPU share. Memory usage is obtained by dividing the used memory by the total memory. Storage usage is the used storage space. Bandwidth usage is the total number of inbound or outbound bytes divided by the measurement period.

[0081] Network traffic is the amount of data transmitted within a certain period of time.

[0082] As an optional embodiment: the specific method of obtaining the predicted resource demand value Q is as follows:

[0083] A time period is set in days; it should be noted that in this embodiment, the time period can be 7 days;

[0084] Obtain the resource usage value for each day in the time period, and calculate the average resource usage value Y for the time period; it should be noted that the resource usage value for each day is divided by the number of days;

[0085] The average resource usage value Y is marked as the predicted resource demand value Q for the next time period. It should be noted that compared with more complex time series models or machine learning algorithms, the moving average method has a fast calculation speed and can make predictions in real time or near real time. By averaging resource usage data over a period of time, the moving average method can smooth short-term fluctuations and show the trend of resource usage more clearly.

[0086] As an optional embodiment: the specific working mode of the detection unit is as follows:

[0087] According to the formula , calculate and obtain the basic score of the management system ,in is the impact subscore, It is the exploitability subscore. It should be noted that the base score reflects the inherent characteristics of the vulnerability and is not related to the specific user environment. The impact subscore measures the impact of the vulnerability exploitation on the confidentiality, integrity, and availability of the affected components. The exploitability subscore measures the ease with which the vulnerability can be exploited.

[0088] In this embodiment, the method for obtaining the influence sub-score can be: ,in For confidentiality reasons, For completeness impact, For availability impact, the value range of each is 1 to 3, corresponding to 1 for none, 2 for low, and 3 for high;

[0089] The exploitability subscore is 8.22 multiplied by the attack vector, attack complexity, required permissions, and user interaction, where the attack vector ranges from network, adjacent network, local, and physical, the attack complexity ranges from low to high, the required permissions range from none, low, and high, and the user interaction ranges from no to required. The specific value is determined by the staff, and the quantitative value range is 1 to 10;

[0090] Implementing setting a base score If the basic score If the value is greater than the corresponding threshold, an alarm signal is generated and transmitted to the response unit.

[0091] As an optional embodiment: the specific working method of the detection unit also includes:

[0092] The time score J and environment score M of the management system are obtained. It should be noted that although the basic score can evaluate the potential vulnerabilities of the management system, the time score and environment score require additional data, such as the current status of vulnerability exploitation, the availability of patches, and detailed information of the specific user environment. Comprehensive consideration can better fit the actual situation.

[0093] According to the formula , get the adjusted basic score , using the adjusted base score The detection is completed by comparing with the corresponding threshold.

[0094] As an optional embodiment: the specific method of obtaining the time score J and the environment score M is as follows:

[0095] The time score J is obtained by dividing the total number of working days of the management system from the current time period until the last maintenance by the preset number of working days of the management system and then multiplying it by the time coefficient, where the time system is a preset proportional coefficient; it should be noted that the preset number of working days of the management system is obtained by the staff according to the manufacturer's setting, and the time system is a preset proportional coefficient used to measure the degree of influence of the system's working time on the time score J, which is 1 in the initial state and 1,023 in this embodiment;

[0096] The environmental score M is obtained as follows: , calculate and obtain the environmental score M;

[0097] Where C is the number of influencing features of the environmental score, and j is an integer from 1 to C. represents the jth influencing eigenvalue, represents the weight coefficient of the jth influencing feature. It should be noted that, in this embodiment, the number of C is 5. Indicates the jth influencing characteristic value, the number of j is 1 to 5, corresponding to Can be , , , and , in this embodiment, they are, in order, asset value indicators, which reflect the importance of the affected assets to the organization, business impact indicators, which assess the potential impact of the vulnerability on business operations, existing security control indicators, which reflect the ability of the organization's security measures to mitigate the impact of the vulnerability, system complexity indicators, which assess the complexity of the system environment, which may increase the risk of the vulnerability being exploited, and risk mitigation capability indicators, which reflect the organization's ability to take mitigation measures for known vulnerabilities;

[0098] Can be , , , and In this embodiment, it can be , , , and .

[0099] As an optional embodiment: the specific working mode of the response unit is as follows:

[0100] Get the adjusted basic score The difference between and the corresponding threshold;

[0101] A threshold range of the difference is set in advance. If the difference is within the threshold range, the threat is marked as a medium-severity threat. If the difference is greater than the maximum value within the threshold range, the threat is marked as a severe threat. If the difference is less than the minimum value within the threshold range, the threat is marked as a low-severity threat.

[0102] Develop different response strategies based on the severity of the threat;

[0103] For serious threats, immediate action is required; it should be noted that such actions include isolating the affected system and disconnecting the network;

[0104] For medium-severity threats, in-depth analysis and monitoring are required;

[0105] For low-severity threats, routine monitoring and reporting are performed. It should be noted that the detection unit and the response unit can work together to form a closed-loop security management system to improve the overall security and response capabilities of the warehouse cloud service management system. At the same time, combined with the key monitoring indicators of the cloud monitoring console, such as CPU usage, memory usage, etc., resource usage can be further quantified to achieve dynamic adjustment and management of resources.

[0106] As an optional embodiment: a policy management module is also included, and the specific working mode of the policy management module is as follows:

[0107] All warehouse information resources are divided into three categories: unconditional sharing, conditional sharing and non-sharing, and the sharing requirements of each type of information resources are clarified; it should be noted that the classification of warehouse information resources is obtained in accordance with the "Interim Measures for the Management of Warehousing Information Resource Sharing";

[0108] Improve laws and regulations: It is necessary to establish and improve laws and regulations related to information sharing to ensure that information sharing activities are legal and standardized and reduce resistance in the implementation process;

[0109] Establish information sharing processes and specifications. It should be noted that the existing electronic warehousing management regulations are imperfect and the standards are not unified, which leads to a large development gap across the country, a low level of warehousing information disclosure, the existence of "information islands", and difficulty in resource sharing and business collaboration between departments. This technical solution can effectively improve the transparency and sharing of warehousing information, reduce the phenomenon of information islands, promote resource sharing and business collaboration between government departments, and improve the efficiency and quality of government services through the above solution.

[0110] On the other hand, the present invention also proposes a warehousing logistics management method based on digitalization, comprising the following steps:

[0111] Step 1: First, provide cloud resource management and scheduling;

[0112] Step 2: Establish security baseline and security testing;

[0113] Step 3: Identify threats based on security detection results and respond.

[0114] How it works: It can automatically discover all assets in warehousing and logistics, including hardware, software and data resources, and classify and continuously track them to ensure the accuracy and latest status of the asset list, establish security configuration standards (security baselines), and regularly check the security configuration of systems and applications to ensure that they comply with established security policies. It can also regularly scan the system for vulnerabilities, identify potential security vulnerabilities, and sort them according to risk levels so that critical vulnerabilities can be repaired first.

[0115] The above are only preferred implementations of the present invention. The protection scope of the present invention is not limited to the above embodiments. All technical solutions under the concept of the present invention belong to the protection scope of the present invention. It should be pointed out that for ordinary technicians in this technical field, some improvements and modifications without departing from the principle of the present invention should also be regarded as the protection scope of this template.

Claims

1. A digital warehouse logistics management system, characterized in that: It includes a cloud service module, which is used to provide cloud resource management and scheduling: A security module, the security module comprising a detection unit and a response unit; The detection unit is used to formulate a security baseline and perform security detection; The response unit is used to identify threats according to the results of the detection unit and respond.

2. A digital warehouse logistics management system according to claim 1, characterized in that: The specific working method of the cloud service module is as follows: First, build a unified access layer; Then, the predicted resource demand value Q of the cloud service management is obtained; Obtain the resource usage value W for the current time period; Set the maximum and minimum thresholds for resource usage in advance; If the resource usage value W in the current time period is greater than the maximum threshold or less than the minimum threshold, resource adjustment is triggered; According to the formula , calculate and obtain the resource adjustment amount , according to the amount of resources adjustment Make corresponding resource adjustments.

3. A digital warehouse logistics management system according to claim 2, characterized in that: The specific method of obtaining the resource usage value W is as follows: According to the formula , calculate the resource usage value W, where N is the number of characteristics of the resource usage value, and the value of i is an integer from 1 to N. represents the actual value of the i-th feature, represents the i-th feature.

4. A digital warehouse logistics management system according to claim 2, characterized in that: The specific method of obtaining the predicted resource demand value Q is as follows: Set a time period in days; Obtain the resource usage value for each day in the time period, and calculate the average resource usage value Y in the time period; The average resource usage value Y is marked as the predicted resource demand value Q for the next time period.

5. A digital warehouse logistics management system according to claim 1, characterized in that: The specific working mode of the detection unit is as follows: According to the formula , calculate and obtain the basic score of the management system ,in is the impact subscore, is the available degree sub-score; Implementing setting a base score If the basic score If the value is greater than the corresponding threshold, an alarm signal is generated and transmitted to the response unit.

6. A digital warehouse logistics management system according to claim 5, characterized in that: The specific working method of the detection unit also includes: Obtain the time score J and environment score M of the management system; According to the formula , get the adjusted basic score , using the adjusted base score The detection is completed by comparing with the corresponding threshold.

7. A digital warehouse logistics management system according to claim 6, characterized in that: The specific method of obtaining the time score J and the environment score M is as follows: The time score J is obtained by dividing the total number of working days of the management system from the current time period to the last maintenance by the preset number of working days of the management system and then multiplying it by the time coefficient, where the time coefficient is the preset proportional coefficient; The environmental score M is obtained as follows: , calculate and obtain the environmental score M; Where C is the number of influencing features of the environmental score, and j is an integer from 1 to C. represents the jth influencing eigenvalue, Represents the weight coefficient of the jth influencing feature.

8. A digital warehouse logistics management system according to claim 7, characterized in that: The specific working mode of the response unit is as follows: Get the adjusted basic score The difference between and the corresponding threshold; A threshold range of the difference is set in advance. If the difference is within the threshold range, the threat is marked as a medium-severity threat. If the difference is greater than the maximum value within the threshold range, the threat is marked as a severe threat. If the difference is less than the minimum value within the threshold range, the threat is marked as a low-severity threat. Develop different response strategies based on the severity of the threat; For serious threats, immediate action is required; For medium-severity threats, in-depth analysis and monitoring are required; For low-severity threats, routine monitoring and reporting are performed.

9. A digital warehouse logistics management system according to claim 1, characterized in that: It also includes a policy management module, and the specific working method of the policy management module is as follows: All warehouse information resources are divided into three categories: unconditional sharing, conditional sharing and non-sharing, and the sharing requirements of each type of information resources are clearly defined; Improve laws and regulations: Establish information sharing processes and norms.

10. A digital warehouse logistics management method, applicable to the digital warehouse logistics management system of claim 1, characterized in that: The following steps are involved: Step 1: First, provide cloud resource management and scheduling; Step 2: Establish security baseline and security testing; Step 3: Identify threats based on security detection results and respond.

Images