Data acquisition method and device and electronic equipment

Abstract

The invention discloses a data acquisition method and device and electronic equipment, and relates to the technical field of combination of security technology, core network technology and digital twin network technology, and the method comprises the following steps: a management arrangement module sends a data acquisition request to a communication core network; and the management arrangement module receives a data feature information combination fed back by the communication core network and arranges a target security scheme matched with the data acquisition request according to the data feature information combination, and finally, the management arrangement module sends the target security scheme to the communication core network. Through the method, adaptive and dynamic security schemes can be configured for different types of physical network data, the requirement for diversity of the security schemes is met, and the security of physical network data acquisition is guaranteed to the maximum extent.

Description

Technical Field

[0001] The present application relates to the technical field of the combination of security technology, core network technology and digital twin network technology, and in particular to a data acquisition method, device and electronic equipment. Background Art

[0002] A digital twin network is a network system that creates a virtual twin of a physical network in a digital way and can interact and map with the physical network in real time. In order to achieve real-time interactive mapping between the physical network and the digital twin network, the digital twin network requires accuracy, real-time and security in the collection of physical network data.

[0003] The existing digital twin network data collection method for physical networks is usually that the physical network directly transmits the collected data to the mapped digital twin network. However, due to the dispersion of nodes in the physical network, it is impossible to uniformly manage the physical network data, which may lead to data leakage when collecting physical network data. At the same time, the existing digital twin network uses a unified security solution for the collection of physical network data. However, the digital twin network needs to collect a lot of physical network data types, such as user data, network equipment data, network performance data, network traffic data, etc. During the collection process, different types of physical network data have different data collection security requirements. If a unified security solution is used for physical network data collection, some confidential data may be leaked, posing a security risk. Summary of the invention

[0004] The present application provides a data collection method, device and electronic device, which can solve the problem that when the existing digital twin network collects data of different types of physical networks, data may be leaked and there are security risks.

[0005] In a first aspect, the present application provides a data collection method, which is applied to a digital twin network, wherein the digital twin network includes a management and orchestration module, and the method includes:

[0006] The management and orchestration module sends a data collection request to the communication core network, wherein the data collection request is used to request collection of target physical network data;

[0007] The management and orchestration module receives the data feature information combination fed back by the communication core network, and arranges a target security solution matching the data collection request according to the data feature information combination, wherein the data feature information combination is obtained by the communication core network parsing the data collection request to obtain request identification information, and converting the request identification information;

[0008] The management and orchestration module sends the target security solution to the communication core network, so that the communication core network performs a collection operation of the target physical network data based on the target security solution.

[0009] Through the above method, the management and orchestration module of the digital twin network can combine and orchestrate a target security solution that matches the data collection request based on the data feature information, so that it can configure adaptive and dynamic security collection solutions for different types of physical network data, meet the needs of diverse security collection solutions, and maximize the security of physical network data collection.

[0010] In a possible design, the target security solution matching the data collection request according to the data feature information combination includes:

[0011] The management and arrangement module verifies the data feature information combination;

[0012] When the management and arrangement module verifies that there is no abnormality in the data feature information combination, the management and arrangement module arranges the target security solution according to the data feature information combination.

[0013] In a possible design, the target security solution is compiled according to the data feature information combination, including:

[0014] The management and arrangement module calculates the security level to which the data feature information combination belongs;

[0015] The management and arrangement module arranges the target security solution according to the security level to which the data feature information combination belongs.

[0016] Through the above method, the management and orchestration module of the digital twin network can combine and orchestrate the target security solution according to the data feature information, and can configure adaptive and dynamic security solutions for different types of physical network data.

[0017] In one possible design, the digital twin network includes a digital twin;

[0018] After sending the target security solution to the communication core network, the method further includes:

[0019] The management and orchestration module receives the target physical network data transmitted by the communication core network, and sends the target physical network data to the digital twin.

[0020] Through the above method, the target physical network data is stored in the digital twin of the digital twin network, realizing real-time interactive mapping of data between the physical network and the digital twin network.

[0021] In a second aspect, the present application further provides a data collection method, the method being applied to a communication core network, the communication core network including a network management module, the method comprising:

[0022] The network management module parses the data collection request from the digital twin network to obtain request identification information, wherein the data collection request is used to request the collection of target physical network data;

[0023] The network management module converts the request identification information to obtain a data feature information combination, and feeds the data feature information combination back to the digital twin network, wherein the data feature information combination is used to assist the digital twin network in orchestrating a target security solution that matches the data acquisition request;

[0024] The network management module receives the target security solution sent by the digital twin network, and performs a collection operation of the target physical network data based on the target security solution.

[0025] Through the above method, the network management module based on the communication core network collects and manages the physical network data in a unified manner, which can ensure the security of physical network data collection.

[0026] In a possible design, converting the request identification information to obtain a data feature information combination includes:

[0027] The network management module determines data characteristic information corresponding to the request identification information;

[0028] The network management module assigns values ​​to the data characteristic information to form the data characteristic information combination.

[0029] Through the above method, the network management module based on the communication core network uniformly collects and manages the physical network data, converts the request identification information obtained by analysis, and obtains the corresponding data feature information combination. Then, the management and orchestration module of the digital twin network arranges the target security plan that matches the data collection request according to the data feature information combination, so that adaptive and dynamic security plans can be configured for different types of physical network data.

[0030] In one possible design, the data feature information includes at least one of data type, data distribution, data real-time, data collection frequency, data confidentiality, data privacy level, data magnitude, and a twin graph.

[0031] Through the above method, data feature information can be obtained from multiple dimensions, which can meet the security collection needs of different types of physical network data with a greater probability.

[0032] In one possible design, the step of performing the target physical network data collection operation based on the target security scheme includes:

[0033] The network management module analyzes the target security solution to obtain M target security collection countermeasures and N target security transmission countermeasures, wherein M and N are integers greater than 0;

[0034] The network management module collects the target physical network data from the physical network based on the M target security collection countermeasures;

[0035] When the network management module collects the target physical network data, it transmits the target physical network data to the digital twin network based on the N target security transmission strategies.

[0036] Through the above method, the target physical network data collection operation is performed based on the target security solution, and the target physical network data can be safely collected.

[0037] In a third aspect, the present application provides a data collection device, the device comprising a management and arrangement module, a sending module and an arrangement module;

[0038] The management and orchestration module is used to instruct the sending module to send a data collection request to the communication core network, and when instructing the orchestration module to receive a data feature information combination fed back by the communication core network and, based on the data feature information combination, to orchestrate a target security solution that matches the data collection request, instruct the sending module to send the target security solution to the communication core network;

[0039] The sending module is used to send the data collection request and the target security scheme to the communication core network according to the instruction of the management and orchestration module, so that the communication core network performs the collection operation of the target physical network data based on the target security scheme, wherein the data collection request is used to request the collection of the target physical network data;

[0040] The orchestration module is used to receive the data feature information combination fed back by the communication core network in accordance with the instructions of the management orchestration module, and to orchestrate a target security solution that matches the data collection request based on the data feature information combination, wherein the data feature information combination is obtained by the communication core network parsing the data collection request to obtain request identification information and converting the request identification information.

[0041] In a possible design, the arrangement module is specifically used to:

[0042] When the management and orchestration module verifies that there is no abnormality in the data feature information combination, the target security solution is orchestrated according to the data feature information combination in accordance with the instruction of the management and orchestration module.

[0043] In a possible design, the orchestration module is further used to:

[0044] Calculate the security level of the data feature information combination according to the instruction of the management and arrangement module;

[0045] According to the instruction of the management and arrangement module, the target security scheme is arranged according to the security level to which the data feature information combination belongs.

[0046] In one possible design, the device further includes a digital twin:

[0047] The digital twin is used to receive the target physical network data sent by the management and orchestration module when the management and orchestration module receives the target physical network data transmitted by the communication core network.

[0048] In a fourth aspect, the present application further provides a data collection device, the device comprising a network management module, a conversion module and an execution module;

[0049] The network management module is used to instruct the conversion module to parse the data acquisition request from the digital twin network to obtain request identification information, and to instruct the conversion module to convert the request identification information to obtain a data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data feature information combination is used to assist the digital twin network in orchestrating a target security solution that matches the data acquisition request; and to instruct the execution module to receive the target security solution sent by the digital twin network, and to perform the target physical network data acquisition operation based on the target security solution;

[0050] The conversion module is used to parse the data collection request from the digital twin network according to the instruction of the network management module to obtain request identification information, convert the request identification information to obtain a data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data collection request is used to request the collection of the target physical network data;

[0051] The execution module is used to receive the target security solution sent by the digital twin network according to the instructions of the network management module, and perform the collection operation of the target physical network data based on the target security solution.

[0052] In a possible design, the conversion module is specifically used for:

[0053] According to the instruction of the network management module, determine the data characteristic information corresponding to the request identification information;

[0054] According to the instruction of the network management module, the data characteristic information is assigned a value to form the data characteristic information combination.

[0055] In one possible design, the data feature information includes at least one of data type, data distribution, data real-time, data collection frequency, data confidentiality, data privacy level, data magnitude, and a twin graph.

[0056] In a possible design, the execution module is specifically used to:

[0057] According to the instruction of the network management module, the target security scheme is parsed to obtain M target security collection countermeasures and N target security transmission countermeasures, wherein M and N are integers greater than 0;

[0058] According to the instruction of the network management module, the target physical network data is collected from the physical network based on the M target security collection countermeasures;

[0059] According to the instructions of the network management module, when the target physical network data is collected, the target physical network data is transmitted to the digital twin network based on the N target security transmission countermeasures.

[0060] In a fifth aspect, the present application provides a data acquisition system, the system comprising a digital twin network and a communication core network;

[0061] The digital twin network is used to perform the data acquisition method steps of the first aspect above;

[0062] The communication core network is used to execute the data collection method steps of the second aspect mentioned above.

[0063] In a sixth aspect, the present application provides an electronic device, including:

[0064] Memory, used to store computer programs;

[0065] The processor is used to implement the steps of the data collection method of the first aspect or the second aspect when executing the computer program stored in the memory.

[0066] In a seventh aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the data acquisition method of the first aspect or the second aspect are implemented.

[0067] Based on the above data collection method, physical network data is uniformly collected and managed through the network management module, and adaptive and dynamic security solutions are configured for different types of physical network data. This can meet the needs of diverse security solutions and maximize the security of physical network data collection. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 A schematic diagram of a scenario applicable to an embodiment of the present application;

[0069] Figure 2 A flow chart of a data collection method corresponding to a communication core network provided in an embodiment of the present application;

[0070] Figure 3 A flowchart of a data collection method corresponding to a digital twin network provided in an embodiment of the present application;

[0071] Figure 4 A schematic diagram of signaling interaction for data collection provided in an embodiment of the present application;

[0072] Figure 5 A structural schematic diagram of a data acquisition device corresponding to a digital twin network provided in an embodiment of the present application;

[0073] Figure 6 A schematic diagram of the structure of a data acquisition device corresponding to another digital twin network provided in an embodiment of the present application;

[0074] Figure 7 A schematic diagram of the structure of a data acquisition device corresponding to a communication core network provided in an embodiment of the present application;

[0075] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0076] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The specific operating methods in the method embodiments can also be applied to device embodiments or system embodiments. It should be noted that in the description of the present application, "multiple" is understood as "at least two". "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, and A and B exist, and B exists alone. A is connected to B, which can represent: A is directly connected to B and A is connected to B through C. In addition, in the description of the present application, words such as "first" and "second" are only used to distinguish the purpose of description, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying order.

[0077] In order to facilitate understanding by those skilled in the art, the technical terms involved in the embodiments of the present application are first explained.

[0078] (1) Virtual Private Network (VPN) is a remote access technology that mainly establishes a private network on the physical network for encrypted communication.

[0079] The following is a brief introduction to the application scenarios to which the technical solutions of the embodiments of the present application can be applied. It should be noted that the application scenarios introduced below are only used to illustrate the embodiments of the present application and are not limited. In specific implementation, the technical solutions provided by the embodiments of the present application can be flexibly applied according to actual needs.

[0080] Figure 1 Schematic diagram of an application scenario applicable to the embodiment of the present application. The scenario mainly includes a communication core network 101, a digital twin network 102 and a physical network 103, wherein the digital twin network 102 and the physical network 103 are connected via the communication core network 101.

[0081] Exemplarily, the communication core network 101 can be an International Mobile Telecommunications (IMT)-2020 network, i.e., a 5G network, or the Internet of Things, which is not limited here. The communication core network 101 includes a network management module for converting the request identification information, obtaining a data feature information combination, and feeding back the data feature information combination to the digital twin network 102, wherein the request identification information is obtained by the network management module parsing the data collection request from the digital twin network 102. At the same time, according to the target security scheme sent by the digital twin network 102, the target physical network data collection operation is performed, wherein the target physical network data can be any type of physical network data, such as user data, network equipment data, network performance data, and network traffic data.

[0082] Exemplarily, the digital twin network 102 includes a management and arrangement module 102a and a digital twin 102b. The management and arrangement module 102a is used to arrange a target security solution that matches the above data collection request according to the data feature information combination sent by the communication core network 101, and send the target security solution to the communication core network 101; the digital twin 102b is used to store the collected target physical network data.

[0083] Exemplarily, the physical network 103 is used to upload the target physical network data to the network management module of the communication core network 101 .

[0084] Based on the above application scenarios, a data collection method provided in an embodiment of the present application collects and manages physical network data in a unified manner through a network management module, and configures adaptive and dynamic security solutions for different types of physical network data, which can meet the needs of diverse security solutions and maximize the security of physical network data collection. Among them, the method and device described in the embodiment of the present application are based on the same technical concept. Since the principles of the problems solved by the method and the device are similar, the embodiments of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0085] To further illustrate the technical solution provided by the embodiment of the present application, this is described in detail below in conjunction with the accompanying drawings and specific implementation methods. Although the embodiment of the present application provides the method operation steps as shown in the following embodiments or drawings, more or fewer operation steps may be included in the method based on routine or no creative labor. In the steps where there is no necessary causal relationship logically, the execution order of these steps is not limited to the execution order provided by the embodiment of the present application. The method may be executed or executed in parallel in the actual processing process or when the device is executed in accordance with the method sequence shown in the embodiment or drawings.

[0086] Embodiment 1:

[0087] Figure 2 A flowchart of a data acquisition method corresponding to a digital twin network provided in an embodiment of the present application, the process can be executed by a data acquisition device corresponding to the digital twin network, the device can be implemented by software, hardware, or a combination of software and hardware to ensure the normal operation of the system. Figure 2 As shown, the process includes the following steps:

[0088] S21, the management and orchestration module sends a data collection request to the communication core network;

[0089] In the embodiment of the present application, in order to achieve Figure 1 The digital twin network 102 shown collects physical network data. The digital twin network 102 must first send a data collection request to the communication core network 101, where the data collection request is used to request the collection of target physical network data.

[0090] S22, the management and orchestration module receives the data feature information combination fed back by the communication core network, and orchestrates a target security solution that matches the data collection request based on the data feature information combination;

[0091] Optional, such as Figure 1After receiving the data collection request, the network management module of the communication core network 101 shown in FIG. 1 parses the data collection request to obtain the request identification information, and converts the request identification information to obtain the data feature information combination X. D After that, the data feature information is combined into X D Feedback is sent to the management orchestration module 102 a of the digital twin network 102 .

[0092] Further, the management and arrangement module 102a combines X according to the data feature information D , orchestrate a target security solution S that matches the data collection request D (t). Specifically, upon receiving the X feedback from the communication core network 101, the management and arrangement module 102a D When X D , for example, check X D Is the non-zero bit in zero? If so, check whether X D If there is an abnormality, then resend the data collection request to the communication core network 101; if not, check that X D There is no exception, and then, according to X D Orchestrate a target security solution that matches the above data collection request.

[0093] Optionally, the target security solution S D The arrangement method of (t) can be: combine the above data feature information into X D Input the network model and calculate X D The security level of X D The target security plan is organized according to the security level in, To collect solutions for target security, Safe transmission scheme for the target. and For safety measures i The collection of m i ∈M={m1,m2,…,m j}, M is the set of all security countermeasures. D (t) The specific calculation formula can be:

[0094] S D (t) = f(X D , t) (1)

[0095] In formula (1), f represents the arrangement of the target security solution, which can be implemented by a machine learning network model or a neural network model, and is not specifically limited here. t represents that the target security solution will be updated with time or stage changes.

[0096] S23, the management and orchestration module sends the target security solution to the communication core network.

[0097] Optionally, the management and orchestration module 102a sends the orchestrated target security solution to the communication core network 101, so that the communication core network 101 performs a target physical network data collection operation according to the target security solution and transmits the target physical network data to the management and orchestration module 102a.

[0098] Further, the management and orchestration module 102a receives the target physical network data transmitted by the communication core network 101, and sends the target physical network data to the digital twin 102b.

[0099] Through the above data collection method, the management and orchestration module of the digital twin network can combine and orchestrate a target security solution that matches the data collection request based on the data feature information. In this way, it can configure adaptive and dynamic security solutions for different types of physical network data, meet the needs of diverse security solutions, and maximize the security of physical network data collection.

[0100] Embodiment 2:

[0101] Figure 3 This is a flow chart of a data collection method corresponding to a communication core network provided in an embodiment of the present application. The process can be executed by a data collection device corresponding to the communication core network. The device can be implemented by software, hardware, or a combination of software and hardware to ensure the normal operation of the system. Figure 3 As shown, the process includes the following steps:

[0102] S31, the network management module parses the data collection request from the digital twin network to obtain request identification information;

[0103] In the embodiment of the present application, in order to ensure the security of physical network data collection, the following can be used: Figure 1 The network management module of the communication core network 101 shown collects and manages the physical network data in a unified manner.

[0104] Optionally, the data collection request is used to request collection of target physical network data.

[0105] S32, the network management module converts the request identification information to obtain a data feature information combination, and feeds the data feature information combination back to the digital twin network;

[0106] Optionally, the conversion process of the request identification information may be:

[0107] The network management module determines the data feature information corresponding to the request identification information, wherein the data feature information includes data type, data distribution, data real-time, data collection frequency, data confidentiality, data privacy level, data magnitude, and twin business graph, as shown in Table 1:

[0108]

[0109] Table 1 A data feature information table

[0110] Furthermore, the network management module assigns a value to the data feature information to form a data feature information combination, wherein the data feature information combination is used to assist the digital twin network 102 in orchestrating a target security solution that matches the data collection request.

[0111] For example, the request identification information parsed by the network management module is 10001001. According to Table 1, the data feature information corresponding to the request identification information can be determined as data type, data confidentiality, and twin mindset. Further, the data type is assigned to x1, the data confidentiality is assigned to x5, and the twin mindset is assigned to x8, and the data feature information combination is obtained as follows: D ={x1, 0, 0, 0, x5, 0, 0, x8}.

[0112] S33, the network management module receives the target security solution sent by the digital twin network, and performs the target physical network data collection operation based on the target security solution.

[0113] Optionally, the target physical network data collection operation based on the target security solution may specifically be:

[0114] First, when the network management module receives the target security plan sent by the digital twin network 102, it parses the target security plan to obtain M target security collection countermeasures and N target security transmission countermeasures, where M and N are integers greater than 0.

[0115] Then, based on the M target security collection countermeasures, the target physical network data is collected from the physical network 103. Specifically, the network management module configures the M target security collection countermeasures and sends the M target security collection countermeasures to the physical network 103. The physical network 103 is deployed and configured according to the received M target security collection countermeasures, for example, the transmission encryption countermeasures, transmission path and VPN of the target physical network data are deployed and configured. Further, after the deployment and configuration are completed, the target physical network data is uploaded to the network management module.

[0116] Finally, when the network management module collects the target physical network data, it transmits the target physical network data to the digital twin network 102 based on N target security transmission strategies.

[0117] Through the above-mentioned data collection method, the network management module based on the communication core network uniformly collects and manages the physical network data, realizes the conversion of the request identification information obtained by analysis, and obtains the corresponding data feature information combination. Then, the management and orchestration module of the digital twin network arranges the target security plan that matches the data collection request according to the data feature information combination, so that adaptive and dynamic security plans can be configured for different types of physical network data.

[0118] Based on the above Figure 2 , Figure 3 The data collection method shown, Figure 4 A schematic diagram of signaling interaction for data collection is shown as an example. Figure 4 As shown, it includes physical nodes, network management modules, and digital twin network management and orchestration modules, wherein the physical nodes can be specifically as follows Figure 1 The physical network 103 shown contains nodes of the target physical network data, and the network management module can be specifically as follows: Figure 1 The network management module in the communication core network 101 shown in FIG. 1 and the digital twin network management and orchestration module may be specifically as follows: Figure 1 A management orchestration module 102 a in the digital twin network 102 is shown.

[0119] exist Figure 4 In the process, the digital twin network management and orchestration module first sends a data collection request to the network management module. The network management module parses the data collection request to obtain the request identification information, and converts the request identification information to obtain the data feature information combination X D , further, X D Feedback to the digital twin network management orchestration module.

[0120] Furthermore, the digital twin network management and orchestration module is based on the above X D A target security plan that matches the data collection request is compiled, and the compiled target security plan is sent to the network management module.

[0121] Next, the network management module analyzes the target security solution to obtain M target security collection countermeasures and N target security transmission countermeasures. Then, the M target security collection countermeasures and N target security transmission countermeasures are configured, and the M target security collection countermeasures are sent to the physical node, so that after the physical node completes the deployment and configuration of the target physical network data according to the M target security collection countermeasures, the target physical network data is uploaded to the network management module.

[0122] Finally, the network management module transmits the target physical network data to the digital twin network management and orchestration module based on N target security transmission countermeasures, thereby sending the target physical network data to the digital twin through the digital twin network management and orchestration module.

[0123] Based on the above data collection method, physical network data is uniformly collected and managed through the network management module, and adaptive and dynamic security solutions are configured for different types of physical network data. This can meet the needs of diverse security solutions and maximize the security of physical network data collection.

[0124] Based on the same inventive concept, the present application also provides a data acquisition device in an embodiment, such as Figure 5 As shown, it is a structural schematic diagram of a data acquisition device corresponding to a digital twin network provided in an embodiment of the present application. The device includes a management and orchestration module 51, a sending module 52 and an orchestration module 53.

[0125] The management and arrangement module 51 is used to instruct the sending module 52 to send a data collection request to the communication core network, and when instructing the arrangement module 53 to receive the data feature information combination fed back by the communication core network and arrange a target security solution matching the data collection request according to the data feature information combination, instruct the sending module to send the target security solution to the communication core network;

[0126] The sending module 52 is used to send the data collection request and the target security scheme to the communication core network according to the instruction of the management and orchestration module 51, so that the communication core network performs the collection operation of the target physical network data based on the target security scheme, wherein the data collection request is used to request the collection of the target physical network data;

[0127] The orchestration module 53 is used to receive the data feature information combination fed back by the communication core network in accordance with the instructions of the management orchestration module 51, and to orchestrate a target security solution that matches the data collection request based on the data feature information combination, wherein the data feature information combination is obtained by the communication core network parsing the data collection request to obtain request identification information and converting the request identification information.

[0128] In a possible design, the arrangement module 53 is specifically used for:

[0129] When the management and arrangement module 51 verifies that there is no abnormality in the data feature information combination, the target security solution is arranged according to the data feature information combination in accordance with the instruction of the management and arrangement module 51 .

[0130] In a possible design, the arrangement module 53 is further used for:

[0131] According to the instruction of the management and arrangement module 51, calculate the security level to which the data characteristic information combination belongs;

[0132] According to the instruction of the management and arrangement module 51, the target security scheme is arranged according to the security level to which the data feature information combination belongs.

[0133] In other embodiments, in addition to the above Figure 5 In addition to the modules shown, it can also further include digital twins, such as Figure 6 As shown, a schematic diagram of the structure of another data acquisition device corresponding to a digital twin network provided in an embodiment of the present application is exemplarily shown. The device includes: a management and arrangement module 51, a sending module 52, an arrangement module 53 and a digital twin 61.

[0134] The digital twin 61 is used to receive the target physical network data sent by the management and orchestration module 51 when the management and orchestration module 51 receives the target physical network data transmitted by the communication core network.

[0135] Through the above-mentioned data acquisition device, the management and orchestration module of the digital twin network can combine and orchestrate a target security solution that matches the data acquisition request based on the data feature information, so that it can configure adaptive and dynamic security solutions for different types of physical network data, meet the needs of diverse security solutions, and maximize the security of physical network data acquisition.

[0136] The present application also provides a data acquisition device, such as Figure 7 As shown, it is a structural diagram of a data acquisition device corresponding to a communication core network provided in an embodiment of the present application, and the device includes a network management module 71, a conversion module 72 and an execution module 73.

[0137] The network management module 71 is used to instruct the conversion module 72 to parse the data acquisition request from the digital twin network to obtain request identification information, and to instruct the conversion module 72 to convert the request identification information to obtain a data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data feature information combination is used to assist the digital twin network in orchestrating a target security solution that matches the data acquisition request; and to instruct the execution module 73 to receive the target security solution sent by the digital twin network, and to perform the target physical network data acquisition operation based on the target security solution;

[0138] The conversion module 72 is used to parse the data collection request from the digital twin network according to the instruction of the network management module 71, obtain the request identification information, convert the request identification information, obtain the data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data collection request is used to request the collection of the target physical network data;

[0139] The execution module 73 is used to receive the target security solution sent by the digital twin network according to the instruction of the network management module 71, and perform the collection operation of the target physical network data based on the target security solution.

[0140] In a possible design, the conversion module 72 is specifically used for:

[0141] According to the instruction of the network management module 71, determine the data characteristic information corresponding to the request identification information;

[0142] According to the instruction of the network management module 71, the data characteristic information is assigned a value to form the data characteristic information combination.

[0143] In one possible design, the data feature information includes at least one of data type, data distribution, data real-time, data collection frequency, data confidentiality, data privacy level, data magnitude, and a twin graph.

[0144] In a possible design, the execution module 73 is specifically used to:

[0145] According to the instruction of the network management module 71, the target security scheme is parsed to obtain M target security collection countermeasures and N target security transmission countermeasures, wherein M and N are integers greater than 0;

[0146] According to the instruction of the network management module 71, the target physical network data is collected from the physical network based on the M target security collection countermeasures;

[0147] According to the instructions of the network management module 71, when the target physical network data is collected, the target physical network data is transmitted to the digital twin network based on the N target security transmission countermeasures.

[0148] Through the above-mentioned device, the network management module based on the communication core network uniformly collects and manages the physical network data, realizes the conversion of the request identification information obtained by analysis, and obtains the corresponding data feature information combination. Then, the management and orchestration module of the digital twin network arranges the target security plan that matches the data collection request according to the data feature information combination, and can configure adaptive and dynamic security plans for different types of physical network data.

[0149] Based on the same inventive concept, an electronic device is also provided in the embodiment of the present application, and the electronic device can realize the functions of the aforementioned data acquisition device, referring to Figure 8 , the electronic device comprises:

[0150] At least one processor 81, and a memory 82 connected to the at least one processor 81. The specific connection medium between the processor 81 and the memory 82 is not limited in the embodiment of the present application. Figure 8 In the example, the processor 81 and the memory 82 are connected via a bus 80. The bus 80 is Figure 8 The connection between other components is shown by bold lines, and the connection between other components is only for schematic illustration and is not intended to be limiting. The bus 80 can be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, Figure 8 Only one thick line is used in the diagram, but it does not mean that there is only one bus or one type of bus. Alternatively, the processor 81 may also be referred to as a controller, and there is no limitation on the name.

[0151] In the embodiment of the present application, the memory 82 stores instructions that can be executed by at least one processor 81. The at least one processor 81 can execute the data collection method discussed above by executing the instructions stored in the memory 82. The processor 81 can implement Figure 5 and / or Figure 6 and / or Figure 7 The functions of each module in the device shown.

[0152] Among them, the processor 81 is the control center of the device, and can use various interfaces and lines to connect the various parts of the entire control device. By running or executing instructions stored in the memory 82 and calling data stored in the memory 82, the various functions of the device and processing data, the device can be monitored as a whole.

[0153] In one possible design, the processor 81 may include one or more processing units, and the processor 81 may integrate an application processor and a modem processor, wherein the application processor mainly processes an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the modem processor may not be integrated into the processor 81. In some embodiments, the processor 81 and the memory 82 may be implemented on the same chip, and in some embodiments, they may also be implemented separately on separate chips.

[0154] The processor 81 can be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and can implement or execute the various methods, steps and logic block diagrams disclosed in the embodiments of the present application. The general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the data acquisition method disclosed in the embodiments of the present application can be directly embodied as a hardware processor to be executed, or a combination of hardware and software modules in the processor can be executed.

[0155] The memory 82 is a non-volatile computer-readable storage medium that can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 82 may include at least one type of storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory, a random access memory (Random Access Memory, RAM), a static random access memory (Static Random Access Memory, SRAM), a programmable read-only memory (Programmable Read Only Memory, PROM), a read-only memory (Read Only Memory, ROM), an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a magnetic memory, a disk, an optical disk, etc. The memory 82 is any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The memory 82 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0156] By designing and programming the processor 81, the code corresponding to the data acquisition method described in the above embodiment can be fixed into the chip, so that the chip can execute the code when running. Figure 2 and / or Figure 3The steps of the data acquisition method of the embodiment shown are as follows: How to design and program the processor 81 is a technique known to those skilled in the art and will not be described in detail here.

[0157] Based on the same inventive concept, an embodiment of the present application further provides a storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer executes the data collection method discussed above.

[0158] In some possible implementations, various aspects of the data collection method provided by the present application may also be implemented in the form of a program product, which includes a program code. When the program product is run on an apparatus, the program code is used to enable the control device to execute the steps of the data collection method according to various exemplary implementations of the present application described above in this specification.

[0159] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0160] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0161] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0162] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0163] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A data collection method, characterized in that: The method is applied to a digital twin network, the digital twin network includes a management and orchestration module, and the method includes: The management and orchestration module sends a data collection request to the communication core network, wherein the data collection request is used to request collection of target physical network data; The management and orchestration module receives the data feature information combination fed back by the communication core network, and arranges a target security solution matching the data collection request according to the data feature information combination, wherein the data feature information combination is obtained by the communication core network parsing the data collection request to obtain request identification information, and converting the request identification information; The management and orchestration module sends the target security solution to the communication core network, so that the communication core network performs a collection operation of the target physical network data based on the target security solution.

2. The method according to claim 1, characterized in that The step of compiling a target security solution that matches the data collection request according to the data feature information combination includes: The management and arrangement module verifies the data characteristic information combination; When the management and arrangement module verifies that there is no abnormality in the data feature information combination, the management and arrangement module arranges the target security solution according to the data feature information combination.

3. The method according to claim 2, characterized in that The step of compiling the target security solution based on the data feature information combination includes: The management and arrangement module calculates the security level to which the data feature information combination belongs; The management and arrangement module arranges the target security solution according to the security level to which the data feature information combination belongs.

4. The method according to claim 1, characterized in that The digital twin network includes a digital twin; After sending the target security solution to the communication core network, the method further includes: When the management and orchestration module receives the target physical network data transmitted by the communication core network, the digital twin receives the target physical network data sent by the management and orchestration module.

5. A data collection method, characterized in that: The method is applied to a communication core network, the communication core network includes a network management module, and the method includes: The network management module parses the data collection request from the digital twin network to obtain request identification information, wherein the data collection request is used to request the collection of target physical network data; The network management module converts the request identification information to obtain a data feature information combination, and feeds the data feature information combination back to the digital twin network, wherein the data feature information combination is used to assist the digital twin network in orchestrating a target security solution that matches the data acquisition request; The network management module receives the target security solution sent by the digital twin network, and performs a collection operation of the target physical network data based on the target security solution.

6. The method according to claim 5, characterized in that The converting of the request identification information to obtain a data feature information combination includes: The network management module determines data characteristic information corresponding to the request identification information; The network management module assigns values ​​to the data characteristic information to form the data characteristic information combination.

7. The method according to claim 6, characterized in that The data characteristic information includes at least one of data type, data distribution, data real-time, data collection frequency, data confidentiality, data privacy level, data magnitude, and twin graph.

8. The method according to claim 5, characterized in that The performing the target physical network data collection operation based on the target security scheme includes: The network management module analyzes the target security solution to obtain M target security collection countermeasures and N target security transmission countermeasures, wherein M and N are integers greater than 0; The network management module collects the target physical network data from the physical network based on the M target security collection countermeasures; When the network management module collects the target physical network data, it transmits the target physical network data to the digital twin network based on the N target security transmission strategies.

9. A data acquisition device, characterized in that: The device includes a management and arrangement module, a sending module, and an arrangement module; The management and orchestration module is used to instruct the sending module to send a data collection request to the communication core network, and when instructing the orchestration module to receive a data feature information combination fed back by the communication core network and, based on the data feature information combination, to orchestrate a target security solution that matches the data collection request, instruct the sending module to send the target security solution to the communication core network; The sending module is used to send the data collection request and the target security scheme to the communication core network according to the instruction of the management and orchestration module, so that the communication core network performs the collection operation of the target physical network data based on the target security scheme, wherein the data collection request is used to request the collection of the target physical network data; The orchestration module is used to receive the data feature information combination fed back by the communication core network in accordance with the instructions of the management orchestration module, and to orchestrate a target security solution that matches the data collection request based on the data feature information combination, wherein the data feature information combination is obtained by the communication core network parsing the data collection request to obtain request identification information and converting the request identification information.

10. A data acquisition device, characterized in that: The device includes a network management module, a parsing module, a conversion module and an execution module; The network management module is used to instruct the conversion module to parse the data acquisition request from the digital twin network to obtain request identification information, and to instruct the conversion module to convert the request identification information to obtain a data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data feature information combination is used to assist the digital twin network in orchestrating a target security solution that matches the data acquisition request; and to instruct the execution module to receive the target security solution sent by the digital twin network, and to perform the target physical network data acquisition operation based on the target security solution; The conversion module is used to parse the data collection request from the digital twin network according to the instruction of the network management module to obtain request identification information, convert the request identification information to obtain a data feature information combination, and feed the data feature information combination back to the digital twin network, wherein the data collection request is used to request the collection of the target physical network data; The execution module is used to receive the target security solution sent by the digital twin network according to the instructions of the network management module, and perform the collection operation of the target physical network data based on the target security solution.

11. A data acquisition system, characterized in that: The system includes a digital twin network and a communication core network; The digital twin network is used to perform the method as described in any one of claims 1 to 4; The communication core network is used to perform the method according to any one of claims 5-8.

12. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, for implementing the method steps described in any one of claims 1-4 or 5-8 when executing the computer program stored in the memory.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method steps of any one of claims 1-4 or 5-8 are implemented.

Images