Third-party tool docking operation and maintenance and management and control method and system of independent station

Abstract

The invention relates to the field of independent station operation, in particular to a third-party tool docking operation, maintenance and management and control method and system for an independent station, and the method comprises the steps: determining thread support demand information of a task execution end of the independent station from a task execution thread log, so as to recognize a target thread which needs to be docked by a third-party tool; determining a connection relationship between the target thread and the virtual nodes based on the operation state of the virtual nodes allowed to be accessed by the target thread in the independent station, and generating a virtual node connection layout; on the basis of the execution time domain feature information of all the target threads, bandwidth configuration of the virtual nodes is adjusted, a third-party tool is called to be connected to the triggered virtual nodes, and it is guaranteed that the third-party tool is accurately connected with the target threads; based on the working behavior information of the third-party tool, whether the third-party tool has an abnormal behavior or not is judged, permission and / or connection management and control are / is performed on the third-party tool, the third-party tool is prevented from performing an unauthorized operation on the independent station, and the operation safety of the independent station is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of independent station operation, and in particular to a method and system for operation, maintenance and management of independent stations using third-party tools. Background Art

[0002] An independent website is a completely independent website that is built and operated by the enterprise independently, including an independent server, website program and a separate domain name. Independent websites need to process a large amount of enterprise data during operation. Usually, independent websites rely on their own servers to complete data processing tasks, ensuring the independence and security of data processing of independent websites. In actual operation, in order to meet the needs of different data processing scenarios or the independent website itself cannot implement a specific data processing mode, third-party tools are needed to assist in the execution of data processing tasks. Third-party tools are usually software tools that can perform specific data processing operations and can be called by different independent websites. In the development process of third-party tools, it is inevitable that there will be backdoor defects. When an independent website calls and connects to a third-party tool, there may be a problem of being invaded by a backdoor attack, which reduces the operational security of the independent website. For this reason, it is of great significance to operate and monitor the third-party tools during the process of the independent website calling and connecting to the third-party tools to prevent the third-party tools from making unauthorized operations on the independent website, which is of great significance to maintaining the security of the independent website. Summary of the invention

[0003] In view of the defects existing in the prior art, the present invention provides an independent station third-party tool docking operation, maintenance and management method and system, which determines the thread support demand information of the task execution end of the independent station from the task execution thread log, thereby identifying the target thread that needs to be docked with the third-party tool and accurately locating the third-party tool docking object; based on the operation status of the virtual node allowed to be accessed by the target thread in the independent station, determines the connection relationship between the target thread and the virtual node, generates a virtual node connection layout, and locates the third-party tool docking; based on the execution time domain feature information of all target threads, adjusts the bandwidth configuration of the virtual node, and calls the third-party tool to connect to the triggered virtual node, to ensure the accurate docking of the third-party tool with the target thread, and improves the data processing efficiency of the target thread; based on the work behavior information of the third-party tool, determines whether the third-party tool has abnormal behavior, and performs permission and / or connection management on the third-party tool to prevent the third-party tool from making unauthorized operations on the independent station, thereby improving the operation security of the independent station.

[0004] The present invention provides a third-party tool docking operation, maintenance and management method for an independent station, including the following steps: Step S1, monitoring the task execution end of the independent station to obtain the task execution thread log of the independent station; analyzing the task execution thread log to determine the thread execution requirement information of the task execution end, thereby identifying all target threads that need to be connected with third-party tools; Step S2, performing virtual node matching and identification on all target threads, determining the virtual nodes that all target threads are allowed to access in the independent station; based on the operation status of the virtual nodes that all target threads are allowed to access, determining the connection relationship between all target threads and the virtual nodes, and generating a virtual node connection layout for all target threads; Step S3, based on the execution time domain feature information of all target threads, adjusting the bandwidth configuration of all virtual nodes under the virtual node connection layout; identifying the triggered virtual node within the virtual node connection layout, thereby calling a third-party tool to connect to the triggered virtual node; Step S4, monitor the third-party tool connected to the triggered virtual node to obtain the work behavior information of the third-party tool; based on the work behavior information, determine whether the third-party tool has abnormal behavior, so as to perform permission and / or connection management on the third-party tool.

[0005] In one embodiment disclosed in the present application, in the step S1, the task execution end of the independent station is monitored to obtain the task execution thread log of the independent station; the task execution thread log is analyzed to determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with a third-party tool, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected with a third-party tool.

[0006] In one embodiment disclosed in the present application, in the step S2, virtual node matching and identification are performed on all target threads to determine the virtual nodes that all target threads are allowed to access in the independent station; based on the operation status of the virtual nodes that all target threads are allowed to access, the connection relationship between all target threads and the virtual nodes is determined, and the virtual node connection layout for all target threads is generated, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

[0007] In one embodiment disclosed in the present application, in the step S3, based on the execution time domain feature information of all target threads, the bandwidth configuration of all virtual nodes under the virtual node connection layout is adjusted; the triggered virtual node in the virtual node connection layout is identified, so as to call a third-party tool to connect to the triggered virtual node, including: Obtaining execution occupied time interval information of all target threads at the task execution end, and determining execution time axis relationship information of all target threads based on the execution occupied time interval information, using the execution time domain feature information as the execution time domain feature information; identifying connection overlapping time intervals of all virtual nodes under the virtual node connection layout based on the execution time domain feature information, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; and then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

[0008] In one embodiment disclosed in the present application, in step S4, the third-party tool connected to the triggered virtual node is monitored to obtain the working behavior information of the third-party tool; based on the working behavior information, it is determined whether the third-party tool has abnormal behavior, so as to perform permission and / or connection management on the third-party tool, including: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool to the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

[0009] The present invention also provides a third-party tool for independent stations to connect to the operation and maintenance and control system, including: The task execution end monitoring module is used to monitor the task execution end of the independent station and obtain the task execution thread log of the independent station; A target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with a third-party tool; A virtual node matching and identification module, used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station; A virtual node connection layout generation module, used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate a virtual node connection layout for all target threads; A virtual node bandwidth configuration module, used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads; A third-party tool connection module, used to identify the triggered virtual node within the virtual node connection layout, so as to call a third-party tool to connect to the triggered virtual node; A third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool.

[0010] In one embodiment disclosed in the present application, the task execution end monitoring module is used to monitor the task execution end of the independent station to obtain the task execution thread log of the independent station, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; The target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with a third-party tool, including: Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected with a third-party tool.

[0011] In one embodiment disclosed in the present application, the virtual node matching and identification module is used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The virtual node connection layout generation module is used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate the virtual node connection layout for all target threads, including: The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

[0012] In one embodiment disclosed in the present application, the virtual node bandwidth configuration module is used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads, including: Obtaining execution occupied time interval information of all target threads at the task execution end, and determining execution time axis relationship information of all target threads based on the execution occupied time interval information, using the execution time domain feature information as the execution time domain feature information; identifying connection overlapping time intervals of all virtual nodes under the virtual node connection layout based on the execution time domain feature information, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; The third-party tool connection module is used to identify the triggered virtual node in the virtual node connection layout, so as to call a third-party tool to connect to the triggered virtual node, including: Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; and then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

[0013] In one embodiment disclosed in the present application, the third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool, including: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool, including: Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool to the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

[0014] Compared with the prior art, the third-party tool docking operation, maintenance and management method and system of the independent station determine the thread support demand information of the task execution end of the independent station from the task execution thread log, so as to identify the target thread that needs to be docked with the third-party tool and accurately locate the docking object of the third-party tool; based on the operating status of the virtual node allowed to be accessed by the target thread in the independent station, determine the connection relationship between the target thread and the virtual node, generate a virtual node connection layout, and locate the docking of the third-party tool; based on the execution time domain feature information of all target threads, adjust the bandwidth configuration of the virtual node, and call the third-party tool to connect to the triggered virtual node to ensure the accurate docking of the third-party tool and the target thread, and improve the data processing efficiency of the target thread; based on the work behavior information of the third-party tool, judge whether the third-party tool has abnormal behavior, and perform permission and / or connection management on the third-party tool to avoid the third-party tool from making unauthorized operations on the independent station, thereby improving the operation security of the independent station.

[0015] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description, claims, and drawings.

[0016] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 A flowchart of the third-party tool docking operation, maintenance and control method for an independent station provided by the present invention; Figure 2 A schematic diagram of the framework of the third-party tool for the independent station provided by the present invention for docking with the operation and maintenance and control system. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] See also Figure 1 , is a flow chart of a third-party tool docking operation, maintenance and control method for an independent station provided by an embodiment of the present invention. The third-party tool docking operation, maintenance and control method for an independent station includes: Step S1, monitor the task execution end of the independent station to obtain the task execution thread log of the independent station; analyze the task execution thread log to determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with third-party tools; Step S2, performing virtual node matching and identification on all target threads, determining the virtual nodes that all target threads are allowed to access in the independent station; based on the operation status of the virtual nodes that all target threads are allowed to access, determining the connection relationship between all target threads and the virtual nodes, and generating a virtual node connection layout for all target threads; Step S3, based on the execution time domain feature information of all target threads, adjusting the bandwidth configuration of all virtual nodes under the virtual node connection layout; identifying the triggered virtual node within the virtual node connection layout, thereby calling a third-party tool to connect to the triggered virtual node; Step S4, monitor the third-party tool connected to the triggered virtual node to obtain the work behavior information of the third-party tool; based on the work behavior information, determine whether the third-party tool has abnormal behavior, so as to perform permission and / or connection management on the third-party tool.

[0021] The third-party tool docking operation, maintenance and management method of the independent station determines the thread support demand information of the task execution end of the independent station from the task execution thread log, thereby identifying the target thread that needs to be docked with the third-party tool and accurately locating the third-party tool docking object; based on the operation status of the virtual node that the target thread is allowed to access in the independent station, the connection relationship between the target thread and the virtual node is determined, and a virtual node connection layout is generated to locate the third-party tool docking; based on the execution time domain feature information of all target threads, the bandwidth configuration of the virtual node is adjusted, and the third-party tool is called to connect to the triggered virtual node to ensure that the third-party tool is accurately docked with the target thread and improve the data processing efficiency of the target thread; based on the work behavior information of the third-party tool, it is determined whether the third-party tool has abnormal behavior, and the permission and / or connection management of the third-party tool is performed to prevent the third-party tool from making unauthorized operations on the independent station and improve the operation security of the independent station.

[0022] Preferably, in step S1, the task execution end of the independent station is monitored to obtain the task execution thread log of the independent station; the task execution thread log is analyzed to determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with third-party tools, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected to a third-party tool.

[0023] In the above technical solution, in order to complete different data processing, the independent station will create different data processing tasks during operation, and the created data processing tasks will be assigned to different task execution terminals under the independent station. Generally speaking, the higher the task processing efficiency and the higher the task processing accuracy of the task execution terminal, the more data processing tasks it is assigned to, and the higher the probability that the task execution terminal needs to connect to a third-party tool in the process of processing the corresponding data processing task. In order to ensure that the task execution terminal of the independent station can accurately and timely connect to the third-party tool in the process of processing the corresponding data processing task, the task creation log of the independent station is analyzed to obtain the new task creation trend information of the independent station, so as to accurately identify and characterize the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution data of the created new tasks in all task execution terminals within the independent station. Based on the new task creation trend information, the number of new tasks assigned to each of the task execution terminals within the independent station per unit time is predicted. When the number of new tasks assigned exceeds the preset number threshold, the corresponding task execution terminal is determined to be in an effective operation state; otherwise, the corresponding task execution terminal is determined to be not in an effective operation state. And monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; wherein, the task execution thread log includes all thread records corresponding to the process of the task execution end processing each new task received. In addition, the task execution thread log is analyzed to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, that is, the computing resources required by each thread during the execution process. Compare the computing resource requirement information with the computing resource information currently available on the independent station to determine whether the independent station can provide the type and quantity of computing resources required by the thread; if not, it is determined that the thread needs to connect to a third-party tool to provide additional computing resources to ensure that the thread (i.e., the target thread) can subsequently obtain effective assisted execution from the third-party tool.

[0024] Preferably, in step S2, virtual node matching and identification are performed on all target threads to determine the virtual nodes that all target threads are allowed to access in the independent station; based on the operation status of the virtual nodes that all target threads are allowed to access, the connection relationship between all target threads and the virtual nodes is determined, and a virtual node connection layout for all target threads is generated, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

[0025] In the above technical solution, the independent station includes several virtual nodes, each of which can be used to connect the target thread with the third-party tool, and serve as a connection intermediary between the target thread and the third-party tool. Since the connection link between the target thread and the virtual node is unstable, the terminal connected to the virtual node may be interfered with, and the available bandwidth of each virtual node itself has a corresponding upper limit. In order to ensure that the target thread can obtain a stable connection with the virtual node, so as to achieve reliable connection with the third-party tool, all connection links between all target threads and all virtual nodes in the independent station are identified, so as to determine the probability of interruption interference events occurring in all connection links. If the probability is less than the preset probability threshold, the corresponding virtual node is determined as the virtual node that the target thread is allowed to access in the independent station, so as to ensure the stability and continuity of the connection between the target thread and the corresponding virtual node. In addition, the available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to achieve matching between the target threads and the virtual nodes that are allowed to access, thereby determining the matching connection relationship between all target threads and all virtual nodes that are allowed to access, and generating a virtual node connection layout for all target threads, so that the virtual node connection layout can globally represent the connection correspondence between all target threads and all virtual nodes that are allowed to access.

[0026] Preferably, in step S3, based on the execution time domain feature information of all target threads, the bandwidth configuration of all virtual nodes under the virtual node connection layout is adjusted; the triggered virtual node within the virtual node connection layout is identified, so as to call a third-party tool to connect to the triggered virtual node, including: Obtaining the execution occupied time interval information of all target threads at the task execution end, and determining the execution time axis relationship information of all target threads based on the execution occupied time interval information, and using this as the execution time domain feature information; based on the execution time domain feature information, identifying the connection overlapping time intervals of all virtual nodes under the virtual node connection layout, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

[0027] In the above technical solution, during the operation of the independent station, the internal virtual node may be connected to multiple target threads at the same time, thereby providing corresponding third-party tool docking for the multiple target threads. At this time, the same virtual node needs to cope with the third-party tool docking requirements of multiple target threads. In order to ensure that in the above situation, the virtual node can provide stable and continuous third-party tool docking services to all connected target threads, based on the execution occupied time interval information of all target threads at the task execution end, the execution timeline relationship information of all target threads is determined, and then based on the execution timeline relationship information, the connection overlapping time intervals of all virtual nodes under the virtual node connection layout are identified to obtain the longest duration length corresponding to each virtual node connecting to more than two target threads at the same time, so as to adjust the available bandwidth allocation value of each virtual node, and ensure that when the virtual node is connected to multiple target threads at the same time, it can provide sufficient bandwidth connection for all target threads. Instruction stream recognition is also performed on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval, so as to identify the triggered virtual node within the virtual node connection layout, and then based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node to ensure that the target thread obtains a reliable third-party tool docking service.

[0028] Preferably, in step S4, the third-party tool connected to the triggered virtual node is monitored to obtain the working behavior information of the third-party tool; based on the working behavior information, it is determined whether the third-party tool has abnormal behavior, so as to perform permission and / or connection management on the third-party tool, including: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool on the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

[0029] In the above technical solution, the third-party tool connected to the triggered virtual node is monitored to obtain the data reading and editing behavior information of the third-party tool, so as to determine whether the third-party tool has illegally accessed the unauthorized interval and / or illegally tampered with the read data, and accurately identify the data access and editing behavior of the third-party tool in the process of providing services in connection with the target thread. In addition, when illegal access to the unauthorized interval occurs, the data reading permission of the third-party tool for the target thread is changed, and when illegal tampering of the read data occurs, the connection between the third-party tool and the virtual node is interrupted, and the permission and / or connection management of the third-party tool is performed to prevent the third-party tool from making unauthorized operations on the independent station, thereby improving the safety of the independent station operation.

[0030] See also Figure 2 , is a schematic diagram of a framework of a third-party tool for an independent station connected to an operation and maintenance and control system according to an embodiment of the present invention. The third-party tool for an independent station connected to an operation and maintenance and control system includes: The task execution end monitoring module is used to monitor the task execution end of the independent station and obtain the task execution thread log of the independent station; The target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with third-party tools; A virtual node matching and identification module is used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station; A virtual node connection layout generation module, used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate a virtual node connection layout for all target threads; A virtual node bandwidth configuration module, used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads; A third-party tool connection module is used to identify the triggered virtual node in the virtual node connection layout, so as to call a third-party tool to connect to the triggered virtual node; A third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool.

[0031] The third-party tool docking operation, maintenance and management system of the independent station determines the thread support demand information of the task execution end of the independent station from the task execution thread log, so as to identify the target thread that needs to be docked with the third-party tool and accurately locate the docking object of the third-party tool; based on the operating status of the virtual node that the target thread is allowed to access in the independent station, the connection relationship between the target thread and the virtual node is determined, and the virtual node connection layout is generated to locate the docking of the third-party tool; based on the execution time domain feature information of all target threads, the bandwidth configuration of the virtual node is adjusted, and the third-party tool is called to connect to the triggered virtual node to ensure the accurate docking of the third-party tool and the target thread, thereby improving the data processing efficiency of the target thread; based on the working behavior information of the third-party tool, it is determined whether the third-party tool has abnormal behavior, and the permission and / or connection management of the third-party tool is performed to prevent the third-party tool from making unauthorized operations on the independent station and improve the operation security of the independent station.

[0032] Preferably, the task execution end monitoring module is used to monitor the task execution end of the independent station to obtain the task execution thread log of the independent station, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; The target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with third-party tools, including: Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected to a third-party tool.

[0033] In the above technical solution, in order to complete different data processing, the independent station will create different data processing tasks during operation, and the created data processing tasks will be assigned to different task execution terminals under the independent station. Generally speaking, the higher the task processing efficiency and the higher the task processing accuracy of the task execution terminal, the more data processing tasks it is assigned to, and the higher the probability that the task execution terminal needs to connect to a third-party tool in the process of processing the corresponding data processing task. In order to ensure that the task execution terminal of the independent station can accurately and timely connect to the third-party tool in the process of processing the corresponding data processing task, the task creation log of the independent station is analyzed to obtain the new task creation trend information of the independent station, so as to accurately identify and characterize the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution data of the created new tasks in all task execution terminals within the independent station. Based on the new task creation trend information, the number of new tasks assigned to each of the task execution terminals within the independent station per unit time is predicted. When the number of new tasks assigned exceeds the preset number threshold, the corresponding task execution terminal is determined to be in an effective operation state; otherwise, the corresponding task execution terminal is determined to be not in an effective operation state. And monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; wherein, the task execution thread log includes all thread records corresponding to the process of the task execution end processing each new task received. In addition, the task execution thread log is analyzed to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, that is, the computing resources required by each thread during the execution process. Compare the computing resource requirement information with the computing resource information currently available on the independent station to determine whether the independent station can provide the type and quantity of computing resources required by the thread; if not, it is determined that the thread needs to connect to a third-party tool to provide additional computing resources to ensure that the thread (i.e., the target thread) can subsequently obtain effective assisted execution from the third-party tool.

[0034] Preferably, the virtual node matching and identification module is used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The virtual node connection layout generation module is used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate the virtual node connection layout for all target threads, including: The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

[0035] In the above technical solution, the independent station includes several virtual nodes, each of which can be used to connect the target thread with the third-party tool, and serve as a connection intermediary between the target thread and the third-party tool. Since the connection link between the target thread and the virtual node is unstable, the terminal connected to the virtual node may be interfered with, and the available bandwidth of each virtual node itself has a corresponding upper limit. In order to ensure that the target thread can obtain a stable connection with the virtual node, so as to achieve reliable connection with the third-party tool, all connection links between all target threads and all virtual nodes in the independent station are identified, so as to determine the probability of interruption interference events occurring in all connection links. If the probability is less than the preset probability threshold, the corresponding virtual node is determined as the virtual node that the target thread is allowed to access in the independent station, so as to ensure the stability and continuity of the connection between the target thread and the corresponding virtual node. In addition, the available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to achieve matching between the target threads and the virtual nodes that are allowed to access, thereby determining the matching connection relationship between all target threads and all virtual nodes that are allowed to access, and generating a virtual node connection layout for all target threads, so that the virtual node connection layout can globally represent the connection correspondence between all target threads and all virtual nodes that are allowed to access.

[0036] Preferably, the virtual node bandwidth configuration module is used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads, including: Obtaining the execution occupied time interval information of all target threads at the task execution end, and determining the execution time axis relationship information of all target threads based on the execution occupied time interval information, and using this as the execution time domain feature information; based on the execution time domain feature information, identifying the connection overlapping time intervals of all virtual nodes under the virtual node connection layout, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; The third-party tool connection module is used to identify the triggered virtual node in the virtual node connection layout, so as to call the third-party tool to connect to the triggered virtual node, including: Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

[0037] In the above technical solution, during the operation of the independent station, the internal virtual node may be connected to multiple target threads at the same time, thereby providing corresponding third-party tool docking for the multiple target threads. At this time, the same virtual node needs to cope with the third-party tool docking requirements of multiple target threads. In order to ensure that in the above situation, the virtual node can provide stable and continuous third-party tool docking services to all connected target threads, based on the execution occupied time interval information of all target threads at the task execution end, the execution timeline relationship information of all target threads is determined, and then based on the execution timeline relationship information, the connection overlapping time intervals of all virtual nodes under the virtual node connection layout are identified to obtain the longest duration length corresponding to each virtual node connecting to more than two target threads at the same time, so as to adjust the available bandwidth allocation value of each virtual node, and ensure that when the virtual node is connected to multiple target threads at the same time, it can provide sufficient bandwidth connection for all target threads. Instruction stream recognition is also performed on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval, so as to identify the triggered virtual node within the virtual node connection layout, and then based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node to ensure that the target thread obtains a reliable third-party tool docking service.

[0038] Preferably, the third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool, including: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool, including: Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool on the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

[0039] In the above technical solution, the third-party tool connected to the triggered virtual node is monitored to obtain the data reading and editing behavior information of the third-party tool, so as to determine whether the third-party tool has illegally accessed the unauthorized interval and / or illegally tampered with the read data, and accurately identify the data access and editing behavior of the third-party tool in the process of providing services in connection with the target thread. In addition, when illegal access to the unauthorized interval occurs, the data reading permission of the third-party tool for the target thread is changed, and when illegal tampering of the read data occurs, the connection between the third-party tool and the virtual node is interrupted, and the permission and / or connection management of the third-party tool is performed to prevent the third-party tool from making unauthorized operations on the independent station, thereby improving the safety of the independent station operation.

[0040] From the contents of the above embodiments, it can be seen that the third-party tool docking operation, maintenance and management method and system of the independent station determine the thread support demand information of the task execution end of the independent station from the task execution thread log, so as to identify the target thread that needs to be docked with the third-party tool and accurately locate the docking object of the third-party tool; based on the operating status of the virtual node allowed to be accessed by the target thread in the independent station, determine the connection relationship between the target thread and the virtual node, generate a virtual node connection layout, and locate the docking of the third-party tool; based on the execution time domain feature information of all target threads, adjust the bandwidth configuration of the virtual node, and call the third-party tool to connect to the triggered virtual node to ensure that the third-party tool is accurately docked with the target thread and improve the data processing efficiency of the target thread; based on the work behavior information of the third-party tool, determine whether the third-party tool has abnormal behavior, and perform permission and / or connection management on the third-party tool to avoid the third-party tool from making unauthorized operations on the independent station and improve the operation security of the independent station.

[0041] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. The third-party tool docking operation, maintenance and control method of the independent station is characterized by: It includes the following steps: Step S1, monitoring the task execution end of the independent station to obtain the task execution thread log of the independent station; analyzing the task execution thread log to determine the thread execution requirement information of the task execution end, thereby identifying all target threads that need to be connected with third-party tools; Step S2, performing virtual node matching and identification on all target threads, and determining the virtual nodes that all target threads are allowed to access in the independent station; Based on the operation status of the virtual nodes that all target threads are allowed to access, determine the connection relationship between all target threads and the virtual nodes, and generate a virtual node connection layout for all target threads; Step S3, based on the execution time domain feature information of all target threads, adjusting the bandwidth configuration of all virtual nodes under the virtual node connection layout; identifying the triggered virtual node within the virtual node connection layout, thereby calling a third-party tool to connect to the triggered virtual node; Step S4, monitoring the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool; Based on the work behavior information, it is determined whether the third-party tool has abnormal behavior, so as to perform permission and / or connection management on the third-party tool.

2. The method for operation, maintenance and control of a third-party tool for an independent station according to claim 1, characterized in that: In the step S1, the task execution end of the independent station is monitored to obtain the task execution thread log of the independent station; Analyze the task execution thread log to determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with third-party tools, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected with a third-party tool.

3. The third-party tool docking operation, maintenance and control method of an independent station according to claim 1, characterized in that: In the step S2, virtual node matching and identification are performed on all target threads to determine the virtual nodes that all target threads are allowed to access in the independent station; based on the operation status of the virtual nodes that all target threads are allowed to access, the connection relationship between all target threads and the virtual nodes is determined, and a virtual node connection layout for all target threads is generated, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

4. The third-party tool docking operation, maintenance and control method of an independent station according to claim 1, characterized in that: In the step S3, based on the execution time domain feature information of all target threads, the bandwidth configuration of all virtual nodes under the virtual node connection layout is adjusted; the triggered virtual node within the virtual node connection layout is identified, so as to call a third-party tool to connect to the triggered virtual node, including: Obtaining execution occupied time interval information of all target threads at the task execution end, and determining execution time axis relationship information of all target threads based on the execution occupied time interval information, using the execution time domain feature information as the execution time domain feature information; identifying connection overlapping time intervals of all virtual nodes under the virtual node connection layout based on the execution time domain feature information, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; and then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

5. The method for operation, maintenance and control of a third-party tool docking of an independent station according to claim 1, characterized in that: In the step S4, the third-party tool connected to the triggered virtual node is monitored to obtain the working behavior information of the third-party tool; Based on the work behavior information, determining whether the third-party tool has abnormal behavior, thereby performing permission and / or connection management on the third-party tool, includes: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool to the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

6. The third-party tool of the independent station is connected to the operation and maintenance and control system, which is characterized by: include: The task execution end monitoring module is used to monitor the task execution end of the independent station and obtain the task execution thread log of the independent station; A target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with a third-party tool; A virtual node matching and identification module, used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station; A virtual node connection layout generation module, used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate a virtual node connection layout for all target threads; A virtual node bandwidth configuration module, used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads; A third-party tool connection module, used to identify the triggered virtual node within the virtual node connection layout, so as to call a third-party tool to connect to the triggered virtual node; A third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool.

7. The third-party tool docking operation and maintenance and control system of the independent station according to claim 6, characterized in that: The task execution end monitoring module is used to monitor the task execution end of the independent station to obtain the task execution thread log of the independent station, including: Analyze the task creation log of the independent station to obtain new task creation trend information of the independent station; wherein the new task creation trend information includes the change trend of the number of new tasks created by the independent station per unit time and the change trend of the distribution number of the created new tasks to all task execution terminals within the independent station; Based on the new task creation trend information, identify the task execution end in the independent station that is in an effective running state; monitor the task execution end in an effective running state to obtain the task execution thread log of the task execution end; The target thread identification module is used to analyze the task execution thread log and determine the thread execution requirement information of the task execution end, so as to identify all target threads that need to be connected with a third-party tool, including: Analyze the task execution thread log to determine the computing resource requirement information of all threads assigned to the task execution end during the execution process, and use this as the thread execution requirement information; based on the computing resource requirement information, determine whether the independent station can provide the computing resources required by the thread; if not, determine the thread as a target thread that needs to be connected with a third-party tool.

8. The third-party tool docking operation and maintenance and control system of the independent station according to claim 6, characterized in that: The virtual node matching and identification module is used to perform virtual node matching and identification on all target threads, and determine the virtual nodes that all target threads are allowed to access in the independent station, including: Identify all connection links between all target threads and all virtual nodes in the independent station, determine the probability of interruption interference events occurring in all connection links, and then determine the virtual nodes that all target threads are allowed to access in the independent station based on the probability of the interruption interference events; The virtual node connection layout generation module is used to determine the connection relationship between all target threads and virtual nodes based on the operation status of the virtual nodes that all target threads are allowed to access, and generate the virtual node connection layout for all target threads, including: The available operating bandwidths of the virtual nodes that all target threads are allowed to access and the estimated data processing volumes of all target threads are compared to determine the matching connection relationships between all target threads and all virtual nodes that are allowed to access, thereby generating a virtual node connection layout for all target threads.

9. The third-party tool docking operation and maintenance and control system of the independent station according to claim 6, characterized in that: The virtual node bandwidth configuration module is used to adjust the bandwidth configuration of all virtual nodes under the virtual node connection layout based on the execution time domain feature information of all target threads, including: Obtaining execution occupied time interval information of all target threads at the task execution end, and determining execution time axis relationship information of all target threads based on the execution occupied time interval information, using the execution time domain feature information as the execution time domain feature information; identifying connection overlapping time intervals of all virtual nodes under the virtual node connection layout based on the execution time domain feature information, and obtaining the longest duration length corresponding to each virtual node being connected to more than two target threads at the same time; and adjusting the available bandwidth allocation value of each virtual node based on the longest duration length; The third-party tool connection module is used to identify the triggered virtual node in the virtual node connection layout, so as to call a third-party tool to connect to the triggered virtual node, including: Perform instruction stream identification on all virtual nodes within the virtual node connection layout to determine whether the virtual node receives a preset instruction code within a preset time interval. If so, determine that the virtual node is triggered; if not, determine that the virtual node is not triggered; and then, based on the preset instruction code received by the triggered virtual node, call a third-party tool to connect to the triggered virtual node.

10. The third-party tool docking operation and maintenance and control system of the independent station according to claim 6, characterized in that: The third-party tool monitoring module is used to monitor the third-party tool connected to the triggered virtual node to obtain the working behavior information of the third-party tool, including: Monitor the third-party tool connected to the triggered virtual node to obtain data reading and editing behavior information of the third-party tool as the work behavior information; wherein the data reading and editing behavior information includes access interval information of the third-party tool reading data from the target thread through the virtual node and editing type information of the read data; The third-party tool management and control module is used to determine whether the third-party tool has abnormal behavior based on the work behavior information, so as to perform permission and / or connection management on the third-party tool, including: Based on the work behavior information, determine whether the third-party tool has illegally accessed an unauthorized interval and / or illegally tampered with the read data; when illegal access to an unauthorized interval occurs, change the data reading permission of the third-party tool to the target thread; when illegal tampering of the read data occurs, interrupt the connection between the third-party tool and the virtual node.

Images