An intent updating method, device, equipment and medium

Abstract

Embodiments of the present application provide an intent updating method and device, an electronic device and a medium, which are used to solve the problem that the intent updating process cannot accurately and effectively update the intent in the related art, thereby causing the network security and other problems. In the embodiments of the present application, the electronic device determines whether the account initiating the intent updating request has a legal identity and an updating permission, thereby avoiding the account without the legal identity or the updating permission from initiating the intent updating request. In addition, the electronic device determines whether to allow the execution of the intent updating request, thereby avoiding the problem of the infeasibility of the intent itself, and accurately and effectively executing the policy corresponding to the intent updating request, thereby improving the network security.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of network technology and security, and particularly relates to an intention updating method and device, equipment and medium. BACKGROUND

[0002] At present, with the continuous evolution of business scenarios in the intention network, dynamic adjustment of network configuration has become a key link to ensure business continuity. This adjustment requires that the intention must be able to keep up with the pace of business and realize instant and accurate updating. However, in actual operation, the process of intention updating faces multiple security challenges.

[0003] On the one hand, intention updating may be initiated illegally by malicious users or systems, and these unauthorized updates may attempt to disrupt the normal operation of the network or introduce harmful configurations, thereby posing a serious threat to the security of the network. On the other hand, even if the update is initiated by a legitimate user, it may not be possible to accurately and effectively update the intention because of the infeasibility of the intention itself, thereby causing waste of resources. SUMMARY

[0004] Embodiments of the present application provide an intention updating method, device, equipment and medium, which are used to solve the problem that the intention updating cannot be accurately and effectively updated in the intention updating process in the related art, thereby causing the security of the network and other problems.

[0005] In a first aspect, an intention updating method is provided, and the method comprises the following steps:

[0006] receiving an intention updating request;

[0007] obtaining an account initiating the intention updating request, judging whether the account has a legal identity and whether the account has an updating right; if yes, determining whether to allow execution of the intention updating request according to whether a pre-saved allowed operation object and content contain an operation object and operation content contained in the intention updating request;

[0008] if the execution of the intention updating request is allowed, obtaining a network policy saved for the operation object and operation content, and executing the network policy.

[0009] In a second aspect, an intention updating device is also provided, and the device comprises:

[0010] a receiving module configured to receive an intention updating request;

[0011] The acquisition determination module is configured to acquire an account initiating the intent update request, determine whether the account has a legal identity and whether the account has an update permission, and if yes, determine whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content include the operation object and operation content included in the intent update request.

[0012] The processing module is configured to acquire a network policy corresponding to the operation object and operation content if the execution of the intent update request is allowed, and execute the network policy.

[0013] In a third aspect, an electronic device is provided, including:

[0014] A memory is configured to store program instructions.

[0015] A processor is configured to invoke the program instructions stored in the memory, and execute the steps of the method for intent update according to the obtained program instructions.

[0016] In a fourth aspect, a computer readable storage medium is provided, which stores a computer program including program instructions, and the program instructions, when executed by a computer, cause the computer to execute the method for intent update.

[0017] In the embodiments of the present application, the electronic device receives an intent update request, acquires an account initiating the intent update request, and if the account has a legal identity and has an update permission, detects whether to allow execution of the intent update request based on the operation object and operation content included in the intent update request, the pre-stored allowed operation object and content. If the execution of the intent update request is allowed, the corresponding network policy is determined based on the operation object and operation content, and the network policy is executed. Since the electronic device determines whether the account initiating the intent update request has a legal identity and has an update permission, the account without a legal identity or without an update permission cannot initiate the intent update request, and the electronic device determines whether to allow execution of the intent update request, which can avoid the problems of infeasibility of the intent itself, and thus the corresponding policy of the intent update request can be accurately and effectively executed, and the security of the network is improved. BRIEF DESCRIPTION OF DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the present application, the following will briefly introduce the drawings needed in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0019] Figure 1 A process schematic diagram of an intention updating method provided for an embodiment of the present application;

[0020] Figure 2 A detailed process schematic diagram of an intention updating provided for an embodiment of the present application;

[0021] Figure 3 A structure schematic diagram of an intention updating provided for an embodiment of the present application;

[0022] Figure 4 A structure diagram of an intention updating apparatus provided for an embodiment of the present application;

[0023] Figure 5 A structure diagram of an electronic device provided for an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to make the objectives, technical solutions and advantages of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings, obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art belong to the scope of protection of the present application.

[0025] Obviously, the drawings described below in the description are only some examples or embodiments of the present application, and for those of ordinary skill in the art, the present application can be applied to other similar scenarios without creative labor on the basis of the drawings. In addition, it can be understood that although the efforts made in this development process can be complex and lengthy, for those of ordinary skill in the art related to the content disclosed in the present application, some design, manufacture or production changes on the basis of the technical content disclosed in the present application are only routine technical means, and should not be understood as insufficient disclosure of the present application.

[0026] In the present application, "embodiment" means that the specific features, structures or characteristics described in combination with the embodiment can be contained in at least one embodiment of the present application. The phrase appears at various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment to other embodiments. It is explicitly and implicitly understood by those of ordinary skill in the art that the embodiments described in the present application can be combined with other embodiments without conflict.

[0027] The terms "connect," "connected," "coupling," and the like, as used herein, do not necessarily mean a physical or mechanical connection, but can include electrical connection, whether direct or indirect. The term "multiple" refers to two or more. The term "and / or" describes association between associated objects, and means that there can be three types of relationships, for example, "A and / or B" can mean that A exists alone, A and B exist together, and B exists alone. The character " / " generally means that the associated objects before and after it are in an "or" relationship. The terms "first," "second," "third," and the like, merely distinguish similar objects, and do not represent a specific order.

[0028] In addition, the technical solutions of various embodiments can be combined with each other, but it must be based on the realization of a person skilled in the art, when the combination of technical solutions appears contradictory or cannot be realized, it should be considered that the combination of technical solutions does not exist, nor is it within the protection scope required by the present application.

[0029] In order to accurately and effectively update the intent, thereby improving network security, the embodiments of the present application provide an intent updating method, device, equipment and medium.

[0030] The intent updating method comprises: an electronic device receives an intent updating request; an account initiating the intent updating request is obtained, and it is judged whether the account has a legal identity and whether it has an updating right; if yes, it is determined whether to allow execution of the intent updating request according to whether the pre-saved allowed operation object and content contain the operation object and content contained in the intent updating request; if the execution of the intent updating request is allowed, the network policy corresponding to the operation object and operation content is obtained and saved, and the network policy is executed.

[0031] Embodiment 1:

[0032] Figure 1 The process schematic diagram of the intent updating method provided by the embodiments of the present application, the process comprises the following steps:

[0033] S101: receiving an intent updating request.

[0034] The intent updating method provided by the embodiments of the present application is applied to an electronic device, which can be a PC or a server or the like intelligent device.

[0035] In order to accurately and effectively update the intent, the electronic device can first receive an intent updating request. It should be noted that after receiving the intent request, the request carrying the intent, that is, the intent updating request, is received.

[0036] In a possible implementation, when a business personnel needs to update an existing intent, the business personnel can update the intent based on the authorized and configured device used by the business personnel, which usually has a specific application or system interface for intent management and update operation. In such a preset page, the business personnel can clearly see all the intents defined in the current system, as well as the detailed information and status of each intent. To initiate an intent update request, the business personnel can find and click a preset button, for example, a button labeled as “update”, on the preset page. The “update” button is usually designed to be intuitive and easy to identify, to ensure that the business personnel can accurately trigger the update process. Once the business personnel clicks the button, the electronic device can immediately identify and receive the intent update request.

[0037] S102: Obtain an account initiating the intent update request, and determine whether the account has a legal identity and update permission. If yes, determine whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content include the operation object and content included in the intent update request.

[0038] After receiving the intent update request, in order to improve network security, the electronic device can obtain an account initiating the intent update request. In a possible implementation, the business personnel logs in a corresponding account in a specific application or system interface, and therefore, the electronic device receives an account in the intent update request, and can determine the account as the account initiating the intent update request.

[0039] In order to improve network security, the electronic device pre-stores each legal account and each account having update permission locally. The electronic device can determine whether the account is legal based on whether the pre-stored each legal account includes the obtained account, and determine whether the account has update permission based on whether the pre-stored each account having update permission includes the obtained account. If the account has a legal identity and update permission, the account is allowed to update the intent. If the account does not have a legal identity or update permission, the account is not allowed to update the intent, and the execution of the intent update request is stopped.

[0040] If it is determined that the account has a legal identity and the account has the update permission, the electronic device can determine whether the intent corresponding to the intent update request is a feasible intent, and if it is determined that the intent corresponding to the intent update request is not a feasible intent, stop executing the intent update request. Specifically, the electronic device pre-stores the operation object and content associated with each feasible intent, which constitutes the operation range allowed to be executed. When receiving an intent update request, the electronic device checks whether the operation object and content specified in the request have been pre-stored as the operation object and content allowed to be operated.

[0041] In a specific implementation, there are two possible verification methods:

[0042] Direct matching method: If the pre-stored list of operation objects and contents allowed to be operated directly contains the operation object and content in the request, it is determined that the intent update request is allowed to be executed.

[0043] Intent group matching method: In addition, if there is one or more intent groups, and any one of the intent groups contains the operation object and content in the request, it is also determined that the intent update request is allowed to be executed. The intent group here refers to a set formed by combining operation objects and contents having certain association or similarity.

[0044] Which verification method to select can be pre-configured, and the specific selection of which verification method is not limited herein. Through the two verification methods, the electronic device can accurately determine whether an intent update request is allowed to be executed, thereby ensuring the legality and security of the operation.

[0045] It should be noted that by determining whether to allow the execution of the intent update request according to whether the pre-stored operation object and content allowed to be operated contain the operation object and content contained in the intent update request, it can be determined whether the update intent is a safe intent, that is, whether the intent translation contains malicious operations, malicious privilege escalation, and whether the index after the intent translation is within the predetermined rules of the network.

[0046] S103: If the intent update request is allowed to be executed, the network policy corresponding to the operation object and operation content saved is obtained, and the network policy is executed.

[0047] In order to accurately and effectively update the intent, the electronic device pre-stores the correspondence between the operation object and content and the policy, and if it is determined that the intent update request is allowed to be executed, the electronic device can obtain the network policy corresponding to the operation object and operation content contained in the intent update request. After determining the network policy, the electronic device can execute the network policy.

[0048] It should be noted that in a possible implementation, the operation duration can also be included in the intent update request, and if the operation duration is included, the electronic device executes the network policy for the operation duration.

[0049] In a possible implementation, after determining the network policy, the electronic device can control the corresponding device to execute the network policy.

[0050] If the operation purpose is carried in the intent update request, the electronic device can obtain the network policy corresponding to the operation object, the operation content, and the operation purpose. The operation target refers to the specific purpose expected to be achieved or reached in the intent update request. For example, improving the service guarantee level to level 3, and the "level 3" is the operation purpose.

[0051] The method provided by the embodiments of the present application is suitable for updating user intent or device intent in Internet of Things, Internet of Vehicles, and the like, and is suitable for automatic and intelligent security management of future networks.

[0052] The intent layer of the electronic device can receive the user intent, update and security verify the intent, translate the verified intent to form an executable network policy. Specifically, the intent update module can be responsible for receiving the update intent request, and making the network adapt to the changing business environment. The intent source verification module is responsible for preliminary review of the intent update operation, including identity legality verification, intent legality verification, and discarding unknown or malicious intent interference. The intent feasibility verification module is responsible for checking the feasibility of the update intent, including the executable strategy after the intent translation, potential conflict risk, and the like.

[0053] Suppose there is a smart home system, and the electronic devices in the system have pre-stored corresponding relationships between different operation objects (such as the brightness and color of a light bulb) and operation contents (such as adjusting to a certain brightness level or changing to a certain color) and corresponding network policies. For example, a business personnel wants to update the brightness intent of the smart light bulb, so that when the user says "turn the light bulb up a bit", the light bulb can automatically adjust to a brighter level. In this case, the business personnel will click the "update" button on his device to initiate an intent update request. After receiving the intent update request, the electronic device will check the legality of the request and confirm whether to allow execution. Once it is confirmed to allow, the electronic device will find the corresponding network policy according to the operation object and operation content specified in the request. Suppose the found network policy is: when receiving the "turn up" instruction, increase the brightness level of the light bulb by 20%. The electronic device will execute this network policy to automatically adjust the brightness of the light bulb to a higher level. In this way, through the cooperation of the intent update request and the network policy, the smart home system can flexibly adjust the device state according to the user's instruction, and provide more personalized services.

[0054] The embodiment of the present application provides an intent security updating method in an intent network, wherein the intent network is an advanced network architecture and management method, which allows a network administrator to define network behavior by expressing high-level business intent, without directly operating underlying network configuration details. In the intent network, a user only needs to express a state or effect reached by the network, without using detailed operations of network commands, so as to achieve the goal of network configuration. The intent network is an intelligent network topology structure, and the network is automatically translated and configured according to the idea of the user to complete the user demand.

[0055] In the embodiment of the present application, the electronic device receives an intent updating request, acquires an account initiating the intent updating request, and if the account has a legal identity and has an updating permission, detects whether the intent updating request is allowed to be executed based on an operation object, operation content, pre-stored objects and content allowed to be operated in the intent updating request. If the intent updating request is allowed to be executed, the corresponding network strategy is determined based on the operation object and the operation content, and the network strategy is executed. Since the electronic device judges whether the account initiating the intent updating request has a legal identity and has an updating permission, the account without a legal identity or without an updating permission can be prevented from initiating the intent updating request. In addition, the electronic device judges whether the intent updating request is allowed to be executed, and the unfeasibility of the intent itself can be avoided, so that the strategy corresponding to the intent updating request can be accurately and effectively executed, and the security of the network is improved.

[0056] Embodiment 2

[0057] In order to accurately acquire the account initiating the intent updating request, in the embodiment of the present application, the account initiating the intent updating request is acquired based on the above-mentioned embodiment, and the acquiring the account initiating the intent updating request comprises the following steps.

[0058] If the intent updating request carries voice information, the voice information is subjected to voiceprint recognition, the account corresponding to the recognized target voiceprint is determined as the account initiating the intent updating request according to the pre-stored correspondence between the voiceprint and the account, or

[0059] If the intent updating request carries information of the account, the account initiating the intent updating request is determined according to the information of the account carried in the intent updating request.

[0060] In an actual scenario, a business person can initiate an intent update request through voice information. Specifically, the business person can send voice information to a collection device, and the collection device sends an intent update request carrying the voice information to the electronic device. At this time, the electronic device receives the intent update request carrying the voice information. After receiving the intent update request carrying the voice information, the electronic device can obtain the voice information carried in the intent update request. After obtaining the voice information, the electronic device performs voiceprint recognition on the voice information. The electronic device locally pre-stores a correspondence between a voiceprint and an account. The electronic device can determine the account corresponding to the recognized target voiceprint as the account initiating the intent update request.

[0061] In another possible implementation, a business person can initiate an intent update request based on the fact that he or she uses an authorized and configured device. The device used by the business person usually has a specific application program or system interface to facilitate intent management and update operations. In such a preset page, the business person can clearly see all intents defined in the current system, as well as detailed information and states of each intent. To initiate an intent update request, the business person will look for and click a preset button, such as a button explicitly marked as “update”, on the preset page. Once the business person clicks the button, the electronic device immediately identifies and receives the intent update request. It should be noted that since the application program or system interface is logged in the user's account, when the business person sends an intent update request through his or her device, the intent request will automatically carry the information of the account. Therefore, if the intent update request carries the information of the account, the electronic device can determine the account initiating the intent update request according to the information of the account carried in the intent update request. Specifically, the electronic device can determine the information of the account carried in the intent update request as the account initiating the intent update request.

[0062] Embodiment 3

[0063] To accurately and effectively update an intent, on the basis of the above embodiments, in the embodiment of the present application, before determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent update request, the method further includes:

[0064] If the intent update request carries voice information, the voice information is subjected to semantic recognition, the operation object and content are determined according to the result of semantic recognition, and the subsequent step of determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent update request is performed.

[0065] In the embodiments of the present application, if the voice information is carried in the intent update request, the electronic device can perform semantic recognition on the voice information. Specifically, how to perform semantic recognition on the voice information is prior art, and will not be described here.

[0066] After obtaining the result of semantic recognition, the electronic device can determine the operation object and the operation content contained in the intent update request according to the result of semantic recognition. In a possible implementation, the electronic device pre-stores each object, and if the result of semantic recognition contains any pre-stored object, the object is determined as the operation object. In addition, the electronic device also pre-stores each content, and if the result of semantic recognition contains any pre-stored content, the content can be determined as the operation content.

[0067] After determining the operation object and the operation content, the electronic device can perform subsequent steps based on the operation object and the operation content to determine whether to allow execution of the intent update request.

[0068] In order to accurately and effectively update the intent, on the basis of the above embodiments, in the embodiments of the present application, before obtaining the account initiating the intent update request, the method further includes:

[0069] If the operation object and the operation content contained in the intent update request are identified, the subsequent step of obtaining the account initiating the intent update request is performed.

[0070] Since in actual scenarios, the intent update request may not conform to the format, at this time, the intent update request cannot be executed. Therefore, before obtaining the account initiating the intent update request, the electronic device can perform format review on the intent update request. Specifically, the electronic device can identify the operation object and the operation content contained in the intent update request. If the voice information is carried in the intent update request, the electronic device can perform semantic recognition on the voice information. After obtaining the result of semantic recognition, the electronic device can determine the operation object and the operation content contained in the intent update request according to the result of semantic recognition. If the voice information is not carried in the intent update request, and the operation object and the operation content are carried, the electronic device obtains the operation object and the operation content carried in the intent update request.

[0071] If the operation object and the operation content are contained in the intent update request, it can be determined that the format review is passed, and the subsequent step of obtaining the account initiating the intent update request can be performed based on the intent update request.

[0072] It should be noted that if the business personnel initiates the intent update request based on the device used by the business personnel being authorized and configured, the device used by the business personnel usually has a specific application or system interface for intent management and update operation. In such a preset page, the business personnel can select the operation object and operation content. At this time, the operation object and operation content are carried in the intent update request received by the electronic device.

[0073] In a possible implementation, the preset operation object or the preset operation content can have an operation duration. Therefore, if the operation object is the preset operation object or the operation content is the preset operation content, the electronic device can determine that the format review is passed and perform the subsequent step of obtaining the account initiating the intent update request when the operation object, the operation content, and the operation duration are included in the intent update request.

[0074] Embodiment 4:

[0075] To improve network security, on the basis of the above embodiments, in the embodiment of the present application, whether the intent update request is allowed to be executed is determined according to whether the operation object and the operation content included in the intent update request are included in the pre-stored allowed operation object and content, comprising:

[0076] The allowed operation object and content pre-stored for the account are obtained; and whether the account is allowed to execute the intent update request is determined according to whether the operation object and the operation content included in the intent update request are included in the allowed operation object and content pre-stored for the account.

[0077] Since the allowed operation object and content of different accounts are different in actual scenarios, in order to improve network security and avoid that an account without permission arbitrarily performs intent update, the electronic device pre-stores the allowed operation object and content for each account. The electronic device can obtain the allowed operation object and content pre-stored for the account, and determine whether the account is allowed to execute the intent update request according to whether the operation object and the operation content included in the intent update request are included in the allowed operation object and content pre-stored for the account. Specifically, if the operation object included in the intent update request is included in the allowed operation object pre-stored for the account, and the operation content included in the intent update request is included in the allowed operation content pre-stored for the account, it is determined that the account has the permission to execute the intent update request, and the account is allowed to execute the intent update request.

[0078] In a possible implementation, the electronic device can first determine whether the intent update request is a feasible intent according to whether the saved object and content allowed to be operated contain the operation object and operation content, and if the operation object and operation content are contained, then determine whether the account has the permission to execute the intent update request according to whether the saved object and content allowed to be operated contain the operation object and operation content.

[0079] Embodiment 5

[0080] In order to accurately and effectively update the intent, on the basis of the above embodiments, in the embodiment of the present application, after the network policy corresponding to the operation object and operation content is obtained, before the network policy is executed, the method further comprises:

[0081] For each current request to be executed, it is determined whether the intent update request is related to the request to be executed according to whether the candidate object and candidate content contained in the request to be executed are identical to the operation object and operation content in at least one aspect.

[0082] If it is determined that the intent update request is not related to each current request to be executed, the network policy is executed subsequently.

[0083] In actual application scenarios, the intent update request can be associated with the current queued request to be executed, and such association can cause the same intent to be repeatedly executed, thereby causing unnecessary resource waste. Therefore, after the electronic device obtains the corresponding network policy, it will make a key judgment: whether the intent update request is associated with any to-be-executed intent update request. Such a judgment mechanism aims to avoid repeated allocation and execution of resources.

[0084] Specifically, the electronic device can determine whether the received intent update request is related to each current request to be executed according to whether the candidate object and candidate content contained in the request to be executed are identical to the operation object and operation content in at least one aspect. If the candidate object is identical to the operation object, or the candidate content is identical to the operation content, it can be determined whether the received intent update request is related to the request to be executed.

[0085] This process is equivalent to determining whether the network policy corresponding to the intent update request is related to the strategy corresponding to the existing intent.

[0086] If it is determined that the intent update request is not related to each current request to be executed, the electronic device does not need to perform intent merging and the like, and can execute the step of subsequently executing the network policy corresponding to the intent update request.

[0087] In the embodiments of the present application, the intent correlation checking module can be responsible for performing correlation checking between intents, merging multiple intents with the same strategy, and improving efficiency.

[0088] It should be noted that the purpose of this determination is to improve execution efficiency, so the update intent will continue to be executed regardless of the relevance.

[0089] Embodiment 6:

[0090] In order to accurately and effectively update the intent, on the basis of the above embodiments, in the embodiments of the present application, the method further comprises:

[0091] If it is determined that the intent update request is related to any current pending request, and the candidate target corresponding to the pending request is different from the operation target carried in the intent update request, it is determined whether the strategy corresponding to the pending request is currently being executed, if yes, the execution is stopped, and the network strategy is executed, if no, and the strategy has not been executed, the strategy corresponding to the pending request is deleted, and the network strategy is executed.

[0092] In actual application, if the intent update request is related to any current pending request, and if the candidate target corresponding to the pending request is inconsistent with the operation target explicitly indicated in the intent update request, it may indicate that the previously sent intent information has an error, and therefore the intent corresponding to the pending request needs to be corrected. Here, the operation target refers to the specific purpose expected to be achieved or reached in the intent update request. In order to accurately and effectively perform the intent, and improve efficiency, the electronic device will adopt a merging strategy. Considering that the user usually expresses the latest demand through subsequent requests, the electronic device will select to execute only the latest received intent update request. Specifically, the electronic device can check whether the strategy corresponding to the pending request is currently being executed. If it is being executed, the electronic device will release the related resources, stop the execution of the strategy, and execute the newly acquired network strategy instead. If the strategy corresponding to the pending request is not currently being executed, and the strategy has not been executed, the electronic device will delete the strategy corresponding to the pending request, so as to avoid performing redundant operations, and directly execute the newly acquired network strategy.

[0093] Among them, the electronic device control layer can be used to control the network strategy and the network state, update the update intent with the network strategy, and perform real-time sensing on the network state. The electronic device network layer is used for implementation of the network strategy and analysis of the network state. Among them, the implementation of the network strategy is to determine whether the strategy is currently being executed.

[0094] That is, if the translated strategy of the new intent has no correlation with the existing executed strategy, the network state is perceived and analyzed, the network policy implementation is monitored, it is judged whether the network resource is occupied by the existing intent network policy, the condition for executing the updated intent is not met, if the resource is occupied, the resource is released with the updated intent as the high priority, the network condition is provided for the execution of the new intent, if the resource is not occupied, the updated strategy is implemented.

[0095] For example, if the translated strategy of the new intent has correlation with the existing executed strategy, and the untranslated strategy is not the same as the existing executed strategy, the related strategies are combined and executed. For example, one of the purposes of the updated intent is to improve the service guarantee level to level 3, wherein the level is defined as being established in the network system through other configurations, and the strategy executed by the existing intent is also to improve the service guarantee level to level 4. Therefore, the strategies of the two intents can be combined and processed, and the latest intent strategy is level 3. Among them, level 3 and level 4 refer to specific operation targets.

[0096] The processing flow provided by the embodiments of the present application ensures that the electronic device can efficiently and accurately respond to the user's intent update, while avoiding unnecessary resource waste.

[0097] In the embodiments of the present application, four modules are added: an intent update module, an intent source verification module, an intent feasibility verification module, and an intent correlation checking module. Through information interaction between different modules, the standardization of the intent update process is ensured. Five judgment conditions are added: judgment on the identity of the intent initiator, judgment on the legality of the intent, judgment on the feasibility of the intent, judgment on the correlation of the intent, and judgment on the network resource. According to the judgment results of different conditions, corresponding implementation strategies are taken respectively.

[0098] The electronic device verifies the identity and legality of the updated intent, verifies the security of the intent, reviews the feasibility of the intent, checks the correlation of multiple intents, and judges the resources required for strategy implementation, to ensure the legality and rationality of the intent implementation. By taking targeted and differentiated measures on multiple judgment results, the application scenarios of the intent update process are expanded, and the scientificity of the strategy implementation condition is ensured.

[0099] Embodiment 7:

[0100] Figure 2 A detailed process diagram of an intent update is provided for the embodiments of the present application, which includes the following steps:

[0101] S201: receiving an intent update request, performing semantic conversion on a new intent, and performing preliminary review on format, etc.

[0102] When the voice information is carried in the intent update request, the semantic conversion is performed.

[0103] Specifically, how to perform the format review has been described in the above embodiments, and will not be repeated here.

[0104] S202: Obtain an account initiating the intent update request.

[0105] S203: Determine whether the account has a legal identity and update permission, if yes, perform S204, if not, perform S205.

[0106] S204: Determine whether to allow the execution of the intent update request according to whether the pre-saved allowed operation object and content contain the operation object and content contained in the intent update request, if yes, perform S206, if not, perform S205.

[0107] S205: End.

[0108] S206: Determine the network policy corresponding to the intent update request.

[0109] S207: Determine whether the intent update request and the request to be executed have relevance, if yes, perform S208, if not, perform S209.

[0110] The process is equivalent to determining whether the updated intent and the existing intent have relevance.

[0111] S208: If it is determined that the intent update request is related to any of the to-be-executed requests, and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, determine whether the policy corresponding to the to-be-executed request is being executed, if yes, stop the execution and perform the network policy, if not, and the policy has not been executed, delete the policy corresponding to the to-be-executed request and perform the network policy.

[0112] S209, perform the network policy.

[0113] In the embodiments of the present application, in view of the demand for updating the user intent or the device intent in the changing service scenarios, in order to solve the security problems such as the identity spoofing of the initiator in the intent updating process, the update strategy conflict, and the network resource shortage, a method based on the security judgment of the legitimacy verification, the feasibility verification, the strategy conflict determination, and the network resource guarantee is proposed to optimize the intent updating process. The present application promotes the rationalization of the intent updating process by adding the intent updating module, the security verification module, and the network strategy updating module in the intent layer, the control layer, and the network layer respectively to perform the identity verification, the feasibility verification, the conflict determination, and the resource determination in the intent updating process. The method proposed in the embodiments of the present application can effectively improve the security review and the security management of the intent network for the intent updating, and is helpful to realize the reliability and the availability of the intent network, and provides a new method for the safe development of the future intelligent network.

[0114] Figure 3 A structural schematic diagram of intent updating is provided for the embodiments of the present application.

[0115] By Figure 3 It can be known that the intent layer is used to receive the intent updating request, to perform the source verification on the intent updating request, and specifically to verify whether the account initiating the intent updating request has a legal identity and whether the account has the updating permission. In addition, the intent feasibility is verified, that is, whether the intent updating request is allowed to be executed is determined according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent updating request, and the intent correlation check is performed.

[0116] The control layer determines the network strategy, obtains the intent correlation check result determined by the intent layer through the intent interface, and performs the network state sensing.

[0117] The network layer is used for the implementation of the network strategy and the analysis of the network state, and the network layer and the control layer interact through the network interface.

[0118] Embodiment 8:

[0119] Based on the same inventive concept, the embodiments of the present application provide an intent updating device, please refer to Figure 4 The device comprises:

[0120] The receiving module 401 is used to receive the intent updating request.

[0121] The obtaining and determining module 402 is used to obtain the account initiating the intent updating request, to determine whether the account has a legal identity and whether the account has the updating permission, and if yes, to determine whether the intent updating request is allowed to be executed according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent updating request.

[0122] The processing module 403 is configured to, if the intent update request is allowed to be executed, acquire a network policy corresponding to the operation object and the operation content, and execute the network policy.

[0123] In a possible implementation, the acquisition and determination module 402 is specifically configured to, if the intent update request carries voice information, perform voiceprint recognition on the voice information, determine an account corresponding to a recognized target voiceprint as an account that initiates the intent update request according to a pre-stored correspondence between voiceprints and accounts; or, if the intent update request carries information of an account, determine the account that initiates the intent update request according to the information of the account carried in the intent update request.

[0124] In a possible implementation, the acquisition and determination module 402 is further configured to, if the intent update request carries voice information, perform semantic recognition on the voice information, determine an operation object and an operation content according to a result of the semantic recognition, and perform a subsequent step of determining whether to allow the intent update request to be executed according to whether the pre-stored operation object and the operation content allowed to be operated include the operation object and the operation content included in the intent update request.

[0125] In a possible implementation, the acquisition and determination module 402 is further configured to recognize an operation object and an operation content included in the intent update request, and perform a subsequent step of acquiring an account that initiates the intent update request if the operation object and the operation content included in the intent update request.

[0126] In a possible implementation, the acquisition and determination module 402 is specifically configured to acquire an operation object and an operation content allowed to be operated that are pre-stored for the account, and determine whether the account is allowed to execute the intent update request according to whether the operation object and the operation content allowed to be operated pre-stored for the account include the operation object and the operation content included in the intent update request.

[0127] In a possible implementation, the processing module 403 is further configured to, for each to-be-executed request currently, determine whether the intent update request is related to the to-be-executed request according to whether a candidate object and a candidate content included in the to-be-executed request are identical to the operation object and the operation content in at least one aspect, and perform a subsequent step of executing the network policy if it is determined that the intent update request is not related to each to-be-executed request currently.

[0128] In a possible implementation, the processing module 403 is further configured to: if it is determined that the intent update request is related to any current to-be-executed request, and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, determine whether the policy corresponding to the to-be-executed request is being executed currently, if yes, stop the execution, and execute the network policy, if no, and the policy is not executed, delete the policy corresponding to the to-be-executed request, and execute the network policy.

[0129] Embodiment 9

[0130] Based on the same inventive concept, the embodiments of the present application provide an electronic device, which can implement the function of intent update as described above, please refer to Figure 5 The device comprises a processor 501, a memory 503 and a communication bus 504, wherein the processor 501, the communication interface 502 and the memory 503 communicate with each other through the communication bus 504.

[0131] The memory 503 stores a computer program, and when the program is executed by the processor 501, the processor 501 executes the following steps:

[0132] receiving an intent update request;

[0133] obtaining an account initiating the intent update request, and determining whether the account has a legal identity and an update permission; if yes, determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content include the operation object and content included in the intent update request;

[0134] if the execution of the intent update request is allowed, obtaining a network policy corresponding to the operation object and the operation content, and executing the network policy.

[0135] In a possible implementation, the obtaining of the account initiating the intent update request comprises:

[0136] if the intent update request carries voice information, performing voiceprint recognition on the voice information, determining an account corresponding to a target voiceprint recognized as the account initiating the intent update request according to a pre-stored correspondence between voiceprints and accounts; or

[0137] if the intent update request carries information of an account, determining the account initiating the intent update request according to the information of the account carried in the intent update request.

[0138] In a possible implementation, before determining whether to allow execution of the intent update request according to whether the pre-stored objects and contents allowed to be operated include the operation object and the operation content included in the intent update request, the method further includes:

[0139] If the intent update request carries voice information, the voice information is subjected to semantic recognition, the operation object and the operation content are determined according to the result of the semantic recognition, and the subsequent step of determining whether to allow execution of the intent update request according to whether the pre-stored objects and contents allowed to be operated include the operation object and the operation content included in the intent update request is executed.

[0140] In a possible implementation, before obtaining the account initiating the intent update request, the method further includes:

[0141] The operation object and the operation content included in the intent update request are identified, and if the operation object and the operation content included in the intent update request, the subsequent step of obtaining the account initiating the intent update request is executed.

[0142] In a possible implementation, the step of determining whether to allow execution of the intent update request according to whether the pre-stored objects and contents allowed to be operated include the operation object and the operation content included in the intent update request includes:

[0143] The objects and contents allowed to be operated pre-stored for the account are obtained, and it is determined whether to allow the account to execute the intent update request according to whether the objects and contents allowed to be operated pre-stored for the account include the operation object and the operation content included in the intent update request.

[0144] In a possible implementation, before executing the network policy, the method further includes:

[0145] For each to-be-executed request currently, it is determined whether the intent update request is related to the to-be-executed request according to whether the candidate object and the candidate content included in the to-be-executed request are identical to the operation object and the operation content in at least one aspect;

[0146] If it is determined that the intent update request is not related to each to-be-executed request currently, the subsequent step of executing the network policy is executed.

[0147] In a possible implementation, the method further includes:

[0148] If it is determined that the intent update request is related to any current to-be-executed request, and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, it is determined whether the policy corresponding to the to-be-executed request is being executed currently, if yes, the execution is stopped, and the network policy is executed, if not, and the policy has not been executed, the policy corresponding to the to-be-executed request is deleted, and the network policy is executed.

[0149] The communication bus mentioned by the server can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0150] The communication interface 502 is used for communication between the electronic device and other devices.

[0151] The memory can include a Random Access Memory (RAM) and can also include a Non-Volatile Memory (NVM), such as at least one disk memory. Optionally, the memory can also be at least one storage device located away from the aforementioned processor.

[0152] The processor can be a general-purpose processor, including a central processing unit, a network processor (NP), etc. It can also be a Digital Signal Processing (DSP), an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc.

[0153] Embodiment 10:

[0154] Based on the same inventive concept, the embodiment of the present application provides a computer readable storage medium, the computer readable storage medium stores a computer program executable by an electronic device, when the program runs on the electronic device, the electronic device executes the following steps:

[0155] receiving an intent update request;

[0156] obtaining an account initiating the intent update request, determining whether the account has a legal identity and whether the account has an update permission; if yes, determining whether to allow execution of the intent update request according to whether an object and content allowed to be operated are included in the object and content included in the intent update request;

[0157] if the intent update request is allowed to be executed, obtaining a network policy corresponding to the object and content and executing the network policy.

[0158] In a possible implementation, the obtaining of the account initiating the intent update request comprises:

[0159] if the intent update request carries voice information, performing voiceprint recognition on the voice information, determining an account corresponding to a target voiceprint recognized as the account initiating the intent update request according to a pre-stored correspondence between voiceprints and accounts; or

[0160] if the intent update request carries information of an account, determining the account initiating the intent update request according to the information of the account carried in the intent update request.

[0161] In a possible implementation, before the determining of whether to allow execution of the intent update request according to whether an object and content allowed to be operated are included in the object and content included in the intent update request, the method further comprises:

[0162] if the intent update request carries voice information, performing semantic recognition on the voice information, determining the object and content according to a result of the semantic recognition, and then performing the determining of whether to allow execution of the intent update request according to whether an object and content allowed to be operated are included in the object and content included in the intent update request.

[0163] In a possible implementation, before the obtaining of the account initiating the intent update request, the method further comprises:

[0164] recognizing the object and content included in the intent update request, and if the object and content included in the intent update request, performing the obtaining of the account initiating the intent update request.

[0165] In a possible implementation, the determining of whether to allow execution of the intent update request according to whether an object and content allowed to be operated are included in the object and content included in the intent update request comprises:

[0166] acquire the object and content allowed to operate previously saved for the account; determine whether the account is allowed to execute the intent update request according to whether the object and content allowed to operate saved for the account contain the operation object and operation content contained in the intent update request.

[0167] In a possible implementation, after the acquiring the network policy saved correspondingly for the operation object and operation content, and before the executing the network policy, the method further includes:

[0168] for each to-be-executed request currently, determine whether the intent update request is related to the to-be-executed request according to whether the candidate object and candidate content contained in the to-be-executed request are identical with the operation object and the operation content in at least one aspect;

[0169] if it is determined that the intent update request is not related to each to-be-executed request currently, execute the network policy subsequently.

[0170] In a possible implementation, the method further includes:

[0171] if it is determined that the intent update request is related to any to-be-executed request currently, and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, determine whether the strategy corresponding to the to-be-executed request is being executed currently, if yes, stop the execution, and execute the network policy, if no, and the strategy is not executed, delete the strategy corresponding to the to-be-executed request, and execute the network policy.

[0172] Those skilled in the art should understand that embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage media, etc.) containing computer-usable program code.

[0173] The present application is described with reference to the flowcharts and / or block diagrams of the method, device (system), and computer program product according to the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing apparatus to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing apparatus produce a device implemented in accordance with the flowcharts and / or block diagrams. Figure 1One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0174] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0175] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0176] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. An intent update method, characterized by, The method comprises: receiving an intent update request; acquiring an account initiating the intent update request, judging whether the account has a legal identity and whether the account has an update permission; if yes, determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent update request; if the execution of the intent update request is allowed, acquiring the network policy corresponding to the operation object and operation content saved in advance, and executing the network policy; wherein, after acquiring the network policy corresponding to the operation object and operation content, and before executing the network policy, the method further comprises: for each current to-be-executed request, determining whether the intent update request is related to the to-be-executed request according to whether the candidate object and candidate content contained in the to-be-executed request are at least one same as the operation object and the operation content; if it is determined that the intent update request is not related to each current to-be-executed request, then execute the subsequent step of executing the network policy; the method further comprises: if it is determined that the intent update request is related to any to-be-executed request, and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, then determining whether the policy corresponding to the to-be-executed request is being executed, if yes, stopping execution and executing the network policy, if not, and the policy has not been executed, then deleting the policy corresponding to the to-be-executed request and executing the network policy.

2. The method of claim 1, wherein, The acquiring of the account initiating the intent update request comprises: if the intent update request carries voice information, then performing voiceprint recognition on the voice information, determining the account corresponding to the target voiceprint recognized as the account initiating the intent update request according to the pre-stored correspondence between voiceprints and accounts; or if the intent update request carries information of an account, then determining the account initiating the intent update request according to the information of the account carried in the intent update request.

3. The method of claim 1, wherein, Before the step of determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent update request, the method further comprises: if the intent update request carries voice information, then performing semantic recognition on the voice information, determining the operation object and operation content according to the result of semantic recognition, and then executing the step of determining whether to allow execution of the intent update request according to whether the pre-stored allowed operation object and content contain the operation object and content contained in the intent update request.

4. The method of claim 1, wherein, Before the acquiring of the account initiating the intent update request, the method further comprises: recognizing the operation object and operation content contained in the intent update request, and then executing the step of acquiring the account initiating the intent update request if the operation object and operation content are contained in the intent update request.

5. The method of claim 1, wherein, The method comprises the following steps: The method comprises the following steps:

6. An intention updating apparatus characterized by comprising: The device comprises: A receiving module is configured to receive an intent update request. An obtaining and determining module is configured to obtain an account that initiates the intent update request, and determine whether the account has a legal identity and update permission. A processing module is configured to, if the intent update request is allowed to be executed, obtain a network policy that is saved in correspondence with the operation object and operation content, and execute the network policy. The processing module is further configured to, for each to-be-executed request, determine whether the intent update request is related to the to-be-executed request according to whether the candidate object and candidate content contained in the to-be-executed request are identical to the operation object and operation content in at least one aspect. The processing module is further configured to, if it is determined that the intent update request is related to any to-be-executed request and the candidate target corresponding to the to-be-executed request is different from the operation target carried in the intent update request, determine whether the policy corresponding to the to-be-executed request is being executed, stop execution if the policy is being executed, and execute the network policy if the policy is not being executed and has not been executed.

7. An electronic device, comprising: The device comprises: A memory is configured to store program instructions. A processor is configured to invoke the program instructions stored in the memory, and execute the steps of the intent update method according to the obtained program instructions.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer program, and the computer program comprises program instructions. The computer program instructions, when executed by a computer, cause the computer to execute the intent update method.

Images