Calculation power node determination method and device

Abstract

The invention provides a computing power node determination method and device, relates to the technical field of computers, and can select a corresponding safe computing power node for a business request based on the safety of the computing power node to provide computing power service so as to meet the safety requirement of the business. The method comprises the following steps: receiving a service request with a computing power demand sent by a terminal device, then determining a target computing power node meeting the computing power demand of the service request from each computing power node based on the security level of each computing power node, and sending the service request to the target computing power node.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a method and device for determining a computing power node. Background Art

[0002] As an emerging network form, the core idea of ​​computing power network is to dynamically connect distributed computing power nodes, realize the coordinated allocation and scheduling of computing tasks through real-time perception of computing resources and network resource status.

[0003] As the core functional layer of the computing network, the computing power routing layer supports the perception and notification of multi-dimensional resources and services such as network and computing, and realizes the joint scheduling of "network + computing". However, the current computing power routing scheduling is mainly based on the computing power requirements of the business and the computing power information of the computing power nodes, network conditions and other factors to determine the target computing power nodes and transmission paths for business requests. However, for some business requests with high security requirements, if the computing power nodes have security risks or are maliciously attacked, it may cause business data leakage or tampering, which cannot meet the security requirements of the business. Summary of the invention

[0004] The present application provides a computing power node determination method and device, which can select corresponding secure computing power nodes to provide computing power services for business requests based on the security of the computing power nodes, so as to meet the security requirements of the business.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, the present application provides a method for determining a computing power node, the method comprising:

[0007] Receive business requests sent by terminal devices. Business requests are requests with computing power requirements.

[0008] Based on the security level of each computing power node, determine the target computing power node that meets the computing power requirements of the business request from each computing power node.

[0009] Send the business request to the target computing power node.

[0010] Based on the above technical solution, the present application provides a method for determining a computing power node. The network node can determine the target computing power node for a business request with computing power requirements based on the security level of each computing power node. The target computing power node can be the computing power node with the highest security level that meets the computing power requirements of the business request. Afterwards, the network node can send the business request to the target computing power node. In the above manner, when the network node determines the target computing power node that meets the computing power requirements of the business request for the business request, the security level of the computing power node is used as a selection factor, so that the computing power requirements and security requirements of the business request can be met at the same time.

[0011] Optionally, before sending the service request to the target computing node, the network node may also determine the optimal path from the network node to the target computing node based on the location information of the network node and the node information of the target computing node.

[0012] On this basis, sending the service request to the target computing power node may include: sending the service request to the target computing power node according to the optimal path.

[0013] Optionally, the node information of each computing power node includes at least the location information, resource information and network status of the computing power node. The resource information is used to characterize the load and remaining computing power of the computing power node.

[0014] On this basis, based on the location information of the network node and the node information of the target computing power node, determining the optimal path from the network node to the target computing power node may include: determining the optimal path from the network node to the target computing power node based on the location of the network node, as well as the location information, resource information and network status of the target computing power node.

[0015] Optionally, based on the security level of each computing power node, the target computing power node that meets the computing power requirements of the business request is determined from the various computing power nodes. This may include: based on the security level of each computing power node, as well as the node information of each computing power node and / or the security level of the business request, the target computing power node that meets the computing power requirements of the business request is determined from the various computing power nodes.

[0016] Optionally, the above method may also include: obtaining node information and configuration information of each computing power node, and then determining the security level of each computing power node based on the node information and configuration information of the computing power node, and storing the node information and security level of each computing power node.

[0017] Optionally, storing the node information and security level of each computing node may include: obtaining the credibility of each computing node, then verifying the credibility of each computing node, and after the verification is passed, storing the node information and security level of each computing node.

[0018] Among them, the credibility of each computing power node is used to characterize the accuracy of the node information of the computing power node.

[0019] Optionally, the above method may also include: broadcasting the node information and security level of each computing power node.

[0020] In a second aspect, the present application provides a computing power node determination device, comprising:

[0021] The transceiver unit is used to receive a service request sent by a terminal device. The service request is a request with computing power requirements.

[0022] The determination unit is used to determine a target computing power node that meets the computing power requirements of the business request from among the computing power nodes based on the security levels of the computing power nodes.

[0023] The transceiver unit is also used to send the service request to the target computing power node.

[0024] Optionally, the determination unit is also used to determine the optimal path from the network node to the target computing power node based on the location information of the network node and the node information of the target computing power node.

[0025] Optionally, the transceiver unit is also used to send the service request to the target computing power node along the optimal path.

[0026] Optionally, the determination unit is also used to determine the optimal path from the network node to the target computing power node based on the location of the network node, as well as the location information, resource information and network status of the target computing power node.

[0027] Optionally, the determination unit is also used to determine the target computing power node that meets the computing power requirements of the business request from among the computing power nodes based on the security level of each computing power node and the node information of each computing power node and / or the security level of the business request.

[0028] Optionally, the determination unit is also used to determine the security level of each computing power node based on the node information and configuration information of the computing power node.

[0029] In a third aspect, the present application provides a computing power node determination device, the device comprising: a processor and a communication interface. The communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement a computing power node determination method as described in any one of the first aspect and any possible implementation of the first aspect.

[0030] In a fourth aspect, the present application provides a computer-readable storage medium, which stores instructions. When the instructions are executed on a terminal, the terminal executes a computing power node determination method as described in any one of the first aspect and any possible implementation of the first aspect.

[0031] In a fifth aspect, the present application provides a computer program product, which includes computer instructions. When the computer instructions are executed on a computer, the computer executes a computing power node determination method as described in any one of the first aspect and any possible implementation of the first aspect.

[0032] It can be understood that the beneficial effects that can be achieved by the second to fifth aspects provided above can refer to the beneficial effects of any possible design method of the computing power node determination method described in any one of the first aspect and any possible implementation method of the first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 An architecture diagram of a computing power node determination system provided in an embodiment of the present application;

[0034] Figure 2 A flowchart of a method for determining a computing power node provided in an embodiment of the present application;

[0035] Figure 3 An interactive flow chart of a computing power node determination method provided in an embodiment of the present application;

[0036] Figure 4 A schematic diagram of the structure of a computing power node determination device provided in an embodiment of the present application;

[0037] Figure 5 A schematic diagram of the structure of another computing power node determination device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0038] The following is a detailed description of a computing power node determination method and device provided in an embodiment of the present application in conjunction with the accompanying drawings.

[0039] The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

[0040] The terms "first" and "second" and the like in the specification and drawings of this application are used to distinguish different objects, or to distinguish different processing of the same object, rather than to describe a specific order of objects.

[0041] In addition, the terms "including" and "having" and any variations thereof mentioned in the description of the present application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0042] It should be noted that, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0043] With the vigorous development of the digital economy, computing power has become a key factor in promoting social progress and industrial upgrading. As an emerging network form, computing power network uses new network technologies such as cloud-network fusion technology, software-defined networking (SDN) and network functions virtualization (NFV) to deeply integrate edge computing nodes, cloud computing nodes and various network resources including wide area networks to form a new generation of information infrastructure. The core idea of ​​computing power network is to dynamically connect distributed computing power nodes, and realize the coordinated allocation and scheduling of computing tasks by real-time perception of computing resources and network resource status. This innovative paradigm not only promotes the deep integration of cloud-edge network, but also marks a new stage in the evolution of edge computing to ubiquitous computing network integration.

[0044] The architecture of the computing network can be divided into the computing service layer, the computing network management layer, the computing routing layer, the computing resource layer and the network resource layer from the perspective of logical functions. Among them, the computing service layer can realize the integrated computing network service supply. The computing resource layer and the network resource layer are the infrastructure layers of the computing network, which can provide ubiquitous computing resources and network basic equipment and facilities for information transmission. The computing network management layer and the computing routing layer are the two core functional layers of the computing network to realize the computing power perception function system.

[0045] As the core functional layer of the computing power network, the computing power routing layer supports the perception and notification of multi-dimensional resources and services such as network, computing, and storage, and realizes the joint scheduling of "network + computing". The computing power routing layer supports computing power routing control and management functions and computing power routing forwarding functions to realize the on-demand scheduling of business requests at the computing power routing layer. Among them, the computing power routing control function supports the collection and maintenance of global computing power information and network information, the formation of a computing power information and network information database, and the maintenance of configuration management between computing power nodes. At the same time, the computing power routing control function supports the reception of business requests, and performs computing power routing scheduling according to the computing power requirements, network conditions, and computing power information of the business requests, and dispatches business requests to different computing power nodes on demand. The computing power routing forwarding function refers to the dispatching of business requests to different computing power nodes on demand according to the destination address and forwarding strategy when the network node receives the business request.

[0046] However, the current computing power routing scheduling mainly determines the corresponding target computing power node and transmission path for the business request based on the computing power requirements of the business, the computing power information of the computing power node, network conditions and other factors. However, for some business requests with high security requirements, if the computing power node has security risks or is maliciously attacked, it may cause business data leakage or tampering, and fail to meet the security requirements of the business.

[0047] In order to solve the above technical problems, an embodiment of the present application provides a method for determining a computing power node. The network node can determine the target computing power node for a business request with computing power requirements based on the security level of each computing power node. The target computing power node can be the computing power node with the highest security level that meets the computing power requirements of the business request. Afterwards, the network node can send the business request to the target computing power node. In the above manner, when the network node determines the target computing power node that meets the computing power requirements of the business request for the business request, the security level of the computing power node is used as a selection factor, so that the computing power requirements and security requirements of the business request can be met at the same time.

[0048] Figure 1 An architecture diagram of a computing power node determination system provided in an embodiment of the present application, such as Figure 1 As shown, the system architecture includes: terminal device 101, network node 102 and computing power node 103.

[0049] In the embodiment of the present application, the terminal device 101 may be a device that provides voice and / or data connectivity to a user, a device with a wireless connection function, or other devices connected to a wireless modem. The terminal device may be at least one of a desktop computer, a laptop, a wireless terminal, and a laptop portable computer. In one embodiment, the terminal device 101 has a communication function and can access a wired network or a wireless network.

[0050] The terminal device 101 may send a service request with computing power requirements to the network node 102 .

[0051] The network node 102 may be a gateway device that connects different networks and provides network communication and data transmission services for different networks. The network node 102 may include, but is not limited to, a router, a switch, and a virtual private network (VPN) device.

[0052] The network node 102 can receive the service request sent by the terminal device 101, and then determine the computing power node 103 (hereinafter referred to as the target computing power node) that meets the computing power requirements of the service request from the various computing power nodes 103 based on the security level of each computing power node 103, and send the service request to the target computing power node.

[0053] The computing power node 103 may be an edge computing device that can provide computing power resources and computing power services. The target computing power node is used to receive the service request sent by the network node 102.

[0054] Optionally, the network node 102 can also determine the optimal path from the network node 102 to the target computing node based on its own location information and the node information of the target computing node, and then send the service request to the target computing node along the optimal path.

[0055] Optionally, each computing node 103 may also send the credibility, node information, and configuration information of the computing node 103 to the network node 102. Accordingly, after the network node 102 receives the node information and configuration information sent by each computing node 103, for each computing node 103, the network node 102 may determine the security level of the computing node 104 based on the node information and configuration information of the computing node 103.

[0056] Correspondingly, after the network node 102 receives the credibility sent by each computing node 103, it can also verify the credibility of each computing node 103. If the verification is passed, the node information and security level of the verified computing node 103 are stored, and the node information and security level of each computing node 103 are broadcast to the entire network.

[0057] Optionally, the computing power node determination system may further include a remote verification terminal 104 and a trusted verification terminal 105 .

[0058] The remote verification terminal 104 and the trusted verification terminal 105 can be high-performance servers that provide various services online, can be independent physical servers, can be server clusters composed of multiple physical servers, or can be at least one of cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks, and big data or artificial intelligence platforms, etc., which are not limited in the embodiments of the present application. Of course, the server can also include other functions to provide more comprehensive and diverse services.

[0059] The remote verification terminal 104 is used to verify the accuracy of the node information of each computing node 103, determine the credibility of each computing node 103, and can also verify the credibility of each computing node 103. The trusted verification terminal 105 is used to send a verification request for the credibility of each computing node 103 to the remote verification terminal 104.

[0060] Optionally, each computing node 103 can measure the integrity of its own node information, obtain the accuracy of the node information, and send the accuracy of the node information to the remote verification terminal 104. Accordingly, the remote verification terminal 104 can verify the accuracy of the node information received from each computing node 103, determine the credibility of each computing node 103, and send the credibility of each computing node 103 to the corresponding computing node 103. Afterwards, each computing node 103 can send the credibility to the network node 102.

[0061] Optionally, after receiving the credibility of each computing node 103, the network node 102 may also send a verification request for the credibility of each computing node 103 to the remote verification terminal 104. The remote verification terminal 104 may verify the credibility of each computing node 103, obtain a verification result, and send the verification result to the network node 102. Alternatively, the network node 102 may send the credibility of each computing node 103 to the trusted verification terminal 105, and after receiving the credibility of each computing node 103, the trusted verification terminal 105 may send a verification request for the credibility of each computing node 103 to the remote verification terminal 104. Afterwards, the remote verification terminal 104 may verify the credibility of each computing node 103, obtain a verification result, and send the verification result to the trusted verification terminal 105, and then the trusted verification terminal 105 sends the received verification result to the network node 102.

[0062] Figure 2 A flowchart of a method for determining a computing power node provided in an embodiment of the present application is provided. The method comprises: Figure 1 The network node 102 shown executes, Figure 2 As shown, the method includes:

[0063] S201, receiving a service request sent by a terminal device.

[0064] S202, based on the security level of each computing power node, determine the target computing power node that meets the computing power requirements of the business request from each computing power node.

[0065] Among them, the business request is a request with computing power requirements.

[0066] Specifically, the network node may store the security level of each computing power node. Accordingly, after receiving a service request with computing power requirements sent by a terminal device, the network node may use the computing power node with the highest security level as the target computing power node.

[0067] The embodiment of the present application does not limit the representation method of the security level of the computing power node. For example, the security level of the computing power node can be level 1, level 2, or level 3, or level A, level B, or level C, etc.

[0068] For example, the network node stores the security levels of computing node A, computing node B, and computing node C, and the security levels of the three computing nodes are level 3, level 2, and level 1. After the network node receives a service request with computing power requirements sent by a terminal device, it can use computing node A with the highest security level as the target computing node.

[0069] In another optional implementation, the network node may also store node information of each computing node. On this basis, the network node may also determine the target computing node that meets the computing power requirements of the service request from each computing node based on the security level and node information of each computing node.

[0070] Among them, the node information may include resource information, and the resource information is used to characterize the load and remaining computing power of the computing power node.

[0071] The embodiment of the present application does not limit the type of resource information. For example, the resource information may include the available processor type, available computing power value, and available storage resource size of the computing power node. Among them, the computing power value may be a specific numerical indicator used to characterize the computing power of the computing power node, that is, the computing power value may reflect the amount of computing tasks that the computing power node can complete within a specific time. For example, the computing power value may be 100, 200, or 300, etc. The processor type may be a central processing unit (CPU) or a graphics processing unit (GPU), etc., which is not limited in the embodiment of the present application.

[0072] The embodiment of the present application does not limit the type of computing power requirement of the service request. For example, the computing power requirement of the service request may include the processor type, computing power value, and storage resource size required by the service request. The available processor type, available computing power value, and available storage resource size of the above computing power node may meet the processor type, computing power value, and storage resource size required by the service request, or may not meet the processor type, computing power value, and storage resource size required by the service request.

[0073] Specifically, the network node may also store node information such as the available processor type, available computing power value, and available storage resource size of each computing power node. Accordingly, after receiving a service request with computing power requirements sent by a terminal device, the network node may first determine at least one candidate computing power node that meets the computing power requirements based on the node information such as the processor type, computing power value, and storage resource size of each computing power node, and then select the computing power node with the highest security level among the candidate computing power nodes as the target computing power node.

[0074] For example, the network node stores the security level and node information of computing node A, computing node B, and computing node C. Among them, the security level of computing node A is level 3, the available processor type is CPU, the available computing power value is 70, and the available storage resource size is 600 gigabytes (GB), the security level of computing node B is level 2, the available processor type is GPU, the available computing power value is 40, and the available storage resource size is 400GB, and the security level of computing node C is level 2, the available processor type is CPU, the available computing power value is 70, and the available storage resource size is 600GB. The terminal device sends a service request with computing power requirements to the network node, where the processor type required for the service request is CPU processor, the required computing power value is 60, and the required storage resource size is 500GB. After the network node receives a service request with computing power requirements sent by the terminal device, it can determine computing node A and computing node C as candidate computing nodes based on the available processor types, available computing power values ​​and available storage resource sizes of the above three computing nodes, and then select computing node A with the highest security level among the two candidate computing nodes as the target computing node.

[0075] In another optional implementation, the service request sent by the terminal device may also be a request with computing power requirements and security levels. On this basis, the network node may determine the target computing power node that meets the computing power requirements of the service request from among the computing power nodes based on the security levels of the computing power nodes and the security level of the service request.

[0076] The embodiment of the present application does not limit the representation method of the security level of the service request. For example, the security level of the service request can be level 1, level 2, or level 3, or level A, level B, or level C.

[0077] Specifically, the network node stores the security level of each computing power node. Accordingly, after receiving a service request with computing power requirements and security levels sent by a terminal device, the network node can first determine at least one candidate computing power node whose security level is greater than or equal to the security level of the service request based on the security level of each computing power node, and then select the computing power node with the highest security level among the candidate computing power nodes as the target computing power node.

[0078] For example, the network node stores the security levels of computing power node A, computing power node B, and computing power node C, and the security levels of the three computing power nodes are level 3, level 2, and level 1 respectively. The terminal device sends a service request with computing power requirements and security levels to the network node, where the security level of the service request is level 2. Accordingly, after the network node receives the service request with computing power requirements and security levels sent by the terminal device, it can determine computing power node A and computing power node B as candidate computing power nodes, and then use computing power node A with the highest security level among the two computing power nodes as the target computing power node.

[0079] On the basis of the various implementation methods described above, the network node can also determine the computing power requirements that meet the business request and at least one candidate computing power node that meets the security level of the business request based on the security level of each computing power node, the node information of each computing power node and the security level of the business request, and then select the computing power node with the highest security level, the highest available computing power value and the highest available storage resource size among the candidate computing power nodes as the target computing power node.

[0080] For example, the network node stores the security level and node information of computing node A, computing node B, and computing node C. Among them, the security level of computing node A is level 3, the available processor type is CPU, the available computing power value is 70, and the available storage resource size is 600 gigabytes (GB), the security level of computing node B is level 2, the available processor type is GPU, the available computing power value is 40, and the available storage resource size is 400GB, and the security level of computing node C is level 2, the available processor type is CPU, the available computing power value is 60, and the available storage resource size is 500GB.

[0081] The terminal device sends a service request with computing power requirements and security levels to the network node, where the security level of the service request is level 2, the required processor type is a CPU processor, the required computing power value is 60, and the required storage resource size is 500GB. After the network node receives the service request with computing power requirements and security levels sent by the terminal device, it can determine computing power node A and computing power node C as candidate computing power nodes based on the available processor types, available computing power values, available storage resource sizes, and security levels of the above three computing power nodes, and then select computing power node A, which has the highest security level, available computing power value, and available storage resources among the two candidate computing power nodes, as the target computing power node.

[0082] In some embodiments, each computing power node can send its own node information and security level to the network node. Accordingly, the network node can integrate the received node information and security level of each computing power node to generate a computing power routing table, which at least contains the node information and security level of each computing power node. Afterwards, the network node can determine the target computing power node that meets the computing power requirements of the service request from each computing power node by querying the computing power routing table.

[0083] In some embodiments, the service request may further include a service identification document (ID) and a network requirement. The service ID is used to identify the service type. The network requirement may include the uplink and downlink bandwidth required by the service request, for example, the uplink and downlink bandwidth required by the service request is 100 megabits per second.

[0084] In an optional implementation, before executing the above S202, the network node may receive node information and configuration information sent by each computing node. Then, for each computing node, the network node may determine the security level of the computing node based on the node information and configuration information of the computing node, and then store the node information and security level of each computing node.

[0085] Among them, the configuration information of the computing power node may include software configuration information such as the network node's operating system, network protocol, firewall, security software, and hardware configuration information such as processor, memory, interface and cable.

[0086] Specifically, each computing power node can send node information and configuration information to the network node. Correspondingly, after receiving the node information and configuration information sent by each computing power node, the network node can determine the security level of each computing power node as level 1, level 2, or level 3, etc. based on the node information such as the available processor type and available computing power value of each computing power node, as well as the configuration information such as the firewall and operating system of each computing power node. Finally, the network node can store the node information and security level of each computing power node.

[0087] S203, sending the service request to the target computing power node.

[0088] Specifically, after the network node determines the target computing power node that meets the computing power requirements of the service request, the service request can be sent to the target computing power node so that the target computing power node provides computing power resources for the service request.

[0089] In an optional implementation, before executing the above S203, the network node can determine the optimal path from the network node to the target computing power node based on the location information of the network node and the node information of the target computing power node. On this basis, the above S203 can be implemented as follows: the network node sends the service request to the target computing power node according to the optimal path.

[0090] The embodiment of the present application does not limit the type of the optimal path. For example, the optimal path may be the shortest path, the lowest cost path, or the fastest path from a network node to a target computing power node.

[0091] In some embodiments, the node information of the computing power node may also include the location information and network status of the computing power node. The location information of the computing power node is the physical location of the computing power node, and the network status may include the uplink and downlink bandwidth, transmission delay and packet loss rate of the computing power node.

[0092] On this basis, the network node can also determine the optimal path from the network node to the target computing node based on the location of the network node, as well as the location information, resource information and network status of the target computing node. After that, the network node can send the service request to the target computing node according to the optimal path.

[0093] For example, the network node can determine two paths from the network node to the target computing node, namely path R1 and path R2, based on its own location, the location information, resource information and network status of the target computing node. The transmission delay of path R1 is 50 milliseconds, and the transmission delay of path R2 is 100 milliseconds. The network node can determine path R1 as the optimal path, and then send the service request to the target computing node according to path R1.

[0094] Exemplarily, the network node can determine two paths from the network node to the target computing node, namely path R3 and path R4, based on its own location, as well as the location information, resource information and network status of the target computing node. Among them, the number of intermediate nodes (i.e., network nodes) passed by path R3 is 3, and the number of intermediate nodes passed by path R4 is 4. The network node can determine path R3 as the optimal path. Then send the service request to the target computing node A according to path R3.

[0095] Based on the above scheme, the network node can determine the computing power requirements and security levels contained in the service request based on the service request sent by the terminal device. Then, the network node can determine the target computing power node that meets the computing power requirements of the service request based on the security level of each computing power node, the node information of each computing power node and / or the security level of the service request, and determine the optimal path from the network node to the target computing power node based on the location information of the network node and the node information of the computing power node. In summary, the network node selects the corresponding target computing power node for the service request based on the node information and security level of the computing power node, which can not only meet the computing power requirements of the service request, but also meet the security requirements of the service request. In addition, the above scheme comprehensively considers the combination of "optimal computing power node + optimal path", which can enable the service request to be sent to the optimal computing power node according to the optimal path, thereby more reasonably allocating computing power resources to the service request.

[0096] In an optional implementation, before the network node stores the node information and security level of each computing node, the network node can also receive the credibility sent by each computing node. Then the network node can verify the credibility of each computing node received, and if the credibility of the computing node passes the verification, the node information and security level of the computing node is stored, and the node information and security level of each computing node is broadcast to the entire network, so that the network nodes of the entire network can obtain the node information and security level of each computing node.

[0097] If the above network node fails to pass the credibility verification of the computing power node, the network node can delete the node information and security level of the computing power node.

[0098] Among them, the credibility of the computing power node is used to characterize the accuracy of the node information of the computing power node. The credibility of the computing power node is positively correlated with the accuracy of the node information of the computing power node, that is, the higher the accuracy of the node information of the computing power node, the higher the credibility of the computing power node.

[0099] In some embodiments, the above-mentioned network node verifies the credibility of each computing power node received, which can also be implemented as: (1) verifying the credibility of each computing power node through a remote verification terminal and (2) verifying the credibility of each computing power node through a trusted verification terminal.

[0100] The following describes in detail the method of verifying the credibility of each computing power node by taking (1) verifying the credibility of each computing power node through a remote verification terminal and (2) verifying the credibility of each computing power node through a trusted verification terminal as examples.

[0101] (1) Verify the credibility of each computing power node through the remote verification terminal

[0102] After receiving the credibility of each computing node, the network node can send a verification request for each computing node to the remote verification end. Correspondingly, the remote verification end can verify the credibility of each computing node, obtain the verification result, and send the verification result to the network node.

[0103] (2) Verify the credibility of each computing power node through the trusted verification terminal

[0104] After receiving the credibility of each computing power node, the network node can send the credibility of each computing power node to the trusted verification end. Correspondingly, after receiving the credibility of each computing power node, the trusted verification end can send a verification request for the credibility of each computing power node to the remote verification end. Afterwards, the remote verification end can verify the credibility of each computing power node and send the verification result to the trusted verification end. Correspondingly, the trusted verification end can send the received verification result to the network node.

[0105] The following will combine the above-mentioned various implementation methods and take the interaction between terminal devices, network nodes, computing power nodes, trusted verification terminals and remote verification terminals as an example to introduce in detail the computing power node determination method provided in this application.

[0106] Figure 3 An interactive flow chart of a method for determining a computing power node provided in an embodiment of the present application, such as Figure 3 As shown, the method includes:

[0107] S301, each computing power node measures the integrity of its own node information to obtain the accuracy of the node information.

[0108] S302, each computing node sends the accuracy of node information to the remote verification end.

[0109] S303, the remote verification end verifies the accuracy of the node information of each computing power node to determine the credibility of each computing power node.

[0110] S304, the remote verification end sends the credibility of the computing power node to each computing power node.

[0111] S305, each computing node sends node information, configuration information and credibility to the network node.

[0112] S306, the network node determines the security level of each computing node based on the node information and configuration information of each computing node.

[0113] S307, the network node sends the credibility of each computing node to the trusted verification terminal.

[0114] S308, the trusted verification end sends a verification request for the credibility of each computing power node to the remote verification end.

[0115] S309, the remote verification end verifies the credibility of each computing power node and obtains the verification result.

[0116] S310, the remote verification end sends the verification result of the credibility of each computing power node to the trusted verification end.

[0117] S311, the trusted verification terminal sends the verification result of the credibility of each computing power node to the network node.

[0118] S312: The network node determines whether the verification is successful based on the verification result.

[0119] If the verification result indicates failure, execute S313; if the verification result indicates success, execute S314-S318.

[0120] S313, the network node deletes the node information and security level of the computing power node.

[0121] In some embodiments, the network node can also delete the node information, configuration information, credibility and security level of the computing power node.

[0122] S314, the network node stores the node information and security level of the computing power node, and broadcasts the node information and security level of the computing power node to the entire network.

[0123] In some embodiments, the network node may also store the node information, configuration information, credibility, and security level of the computing power node, and broadcast the node information, configuration information, credibility, and security level of the computing power node to the entire network.

[0124] S315, the terminal device sends a service request to the network node.

[0125] S316: The network node determines the target computing node that meets the computing power requirements of the business request from among the computing power nodes based on the node information and security level of each computing power node.

[0126] S317, the network node determines the optimal path from the network node to the target computing node based on the location information of the network node and the node information of the target computing node.

[0127] S318, the network node sends the service request to the target computing power node according to the optimal path.

[0128] Figure 4 A schematic diagram of a computing power node determination device provided in an embodiment of the present application is shown in FIG. Figure 4 As shown, the device comprises:

[0129] The transceiver unit 401 is used to receive a service request sent by a terminal device. The service request is a request with computing power requirements.

[0130] The determination unit 402 is used to determine a target computing power node that meets the computing power requirements of the business request from among the computing power nodes based on the security level of each computing power node.

[0131] The transceiver unit 401 is also used to send the service request to the target computing power node.

[0132] Optionally, the determination unit 402 is also used to determine the optimal path from the network node to the target computing power node based on the location information of the network node and the node information of the target computing power node.

[0133] Optionally, the transceiver unit 401 is also used to send the service request to the target computing power node according to the optimal path.

[0134] Optionally, the determination unit 402 is also used to determine the optimal path from the network node to the target computing power node based on the location of the network node, as well as the location information, resource information and network status of the target computing power node.

[0135] Optionally, the determination unit 402 is also used to determine the target computing power node that meets the computing power requirements of the business request from among the computing power nodes based on the security level of each computing power node and the node information of each computing power node and / or the security level of the business request.

[0136] Optionally, the determination unit 402 is also used to determine the security level of each computing power node based on the node information and configuration information of the computing power node.

[0137] Figure 5 Another possible structural diagram of the computing power node determination device involved in the above embodiment is shown. The computing power node determination device includes: a processor 501 and a communication interface 502. The processor 501 is used to control and manage the actions of the computing power node determination device, and the communication interface 502 is used to support the communication between the computing power node determination device and other network entities. The computing power node determination device may also include a memory 503 and a bus 504, and the memory 503 is used to store program code and data of the computing power node determination device.

[0138] Among them, the memory 503 can be a memory in a computing power node determination device, etc. The memory may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a read-only memory, a flash memory, a hard disk or a solid-state drive; the memory may also include a combination of the above types of memory.

[0139] The processor 501 may be a processor that implements or executes various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of the present application. The processor may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array, or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. The processor may be a processor that implements or executes various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of the present application. The processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.

[0140] The bus 504 may be an extended industry standard architecture (EISA) bus, etc. The bus 504 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 5 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0141] Through the description of the above implementation methods, technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, device and unit described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0142] An embodiment of the present application provides a computer program product comprising instructions. When the computer program product is run on a computer, the computer is enabled to execute the computing power node determination method in the above method embodiment.

[0143] An embodiment of the present application also provides a computer-readable storage medium, in which instructions are stored. When the instructions are executed on a computer, the computer executes the computing power node determination method in the method flow shown in the above method embodiment.

[0144] Among them, the computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read only memory (EPROM), a register, a hard disk, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above, or any other form of computer-readable storage medium known in the art. An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). In the embodiments of the present application, a computer-readable storage medium may be any tangible medium that contains or stores a program, which may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0145] An embodiment of the present invention provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute the computing power node determination method described in the embodiment of the present application.

[0146] Since the computing power node determination device, computer-readable storage medium, and computer program product in the embodiments of the present invention can be applied to the above-mentioned method, the technical effects that can be obtained can also refer to the above-mentioned method embodiments, and the embodiments of the present invention will not be repeated here.

[0147] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0148] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0149] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0150] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for determining a computing power node, characterized in that: Applied to a network node, the method comprises: Receiving a service request sent by a terminal device; the service request is a request with computing power requirements; Based on the security level of each computing power node, determine a target computing power node that meets the computing power requirements of the service request from the computing power nodes; Send the service request to the target computing power node.

2. The method according to claim 1, characterized in that: Before sending the service request to the target computing power node, the method further includes: Determine the optimal path from the network node to the target computing node based on the location information of the network node and the node information of the target computing node; The sending the service request to the target computing power node includes: The service request is sent to the target computing power node according to the optimal path.

3. The method according to claim 2, characterized in that The node information of each computing power node includes at least the location information, resource information and network status of the computing power node; the resource information is used to characterize the load and remaining computing power of the computing power node; The determining, based on the location information of the network node and the node information of the target computing power node, an optimal path from the network node to the target computing power node includes: Based on the location of the network node, as well as the location information, resource information and network status of the target computing power node, the optimal path from the network node to the target computing power node is determined.

4. The method according to claim 1, characterized in that: The determining, based on the security level of each computing power node, a target computing power node that satisfies the computing power requirement of the service request from the computing power nodes includes: Based on the security level of each computing power node, as well as the node information of each computing power node and / or the security level of the business request, a target computing power node that meets the computing power requirements of the business request is determined from among the computing power nodes.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: Obtain node information and configuration information of each computing power node; For each computing power node, determine the security level of the computing power node based on the node information and configuration information of the computing power node; The node information and security level of each computing power node are stored.

6. The method according to claim 5, characterized in that The storing of node information and security level of each computing power node includes: Obtaining the credibility of each computing node; the credibility of each computing node is used to characterize the accuracy of the node information of the computing node; For each computing power node, the credibility of the computing power node is verified, and after the verification is passed, the node information and security level of each computing power node are stored.

7. The method according to claim 5, characterized in that The method further comprises: Broadcast the node information and security level of each computing power node.

8. A computing power node determination device, characterized in that: The device comprises: A transceiver unit, configured to receive a service request sent by a terminal device; the service request is a request with computing power requirements; A determination unit, configured to determine, based on the security level of each computing power node, a target computing power node that meets the computing power requirement of the service request from among the computing power nodes; The transceiver unit is also used to send the service request to the target computing power node.

9. A computing power node determination device, characterized in that: include: A processor and a communication interface; the communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement the computing power node determination method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores instructions. When a computer executes the instructions, the computer executes the computing power node determination method as described in any one of claims 1 to 7.

11. A computer program product, characterized in that The computer program product includes computer instructions, and when the computer instructions are executed on a computer, the computer executes the computing power node determination method as described in any one of claims 1 to 7.

Images