Data processing method and device, nonvolatile storage medium and electronic equipment
By obtaining and displaying the information of service network elements and network hardware devices in the signaling intercommunication gateway C-IWF, the network topology diagram is constructed, and the problem of intercommunication display of service network elements in the 5G network is solved, and the network is realized Intuitive display of structure and improved management efficiency.
Patent Information
- Application Number
- CN202411578448.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-06
- Publication Date
- 2025-02-14
- Estimated Expiration
- 2044-11-06
AI Technical Summary
The prior art cannot communicate and display the service network elements in trusted areas of 5G networks and the service network elements in non-trusted areas, resulting in difficulty in network management and troubleshooting.
By obtaining information on service network elements and network hardware devices of the private network and public network in the signaling intercom gateway C-IWF, including network service information, network connection information and device status information, a network topology diagram is built and visually displayed.
It realizes the interoperability display of service network elements of trusted areas and non-trusted areas of 5G networks, helping technicians to intuitively understand the network structure and improve the efficiency of network management and troubleshooting.
Smart Images

Figure CN119450749A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of wireless communication technology, and in particular, to a data processing method and device, a non-volatile storage medium, and an electronic device. Background Art
[0002] In order to provide faster network speeds, lower latency and greater connection capacity to meet the growing communication needs, 5G networks have been widely promoted and used in recent years, and 5G network-related technologies have also developed rapidly. In order to meet the diverse needs of industrial networks and ordinary networks, network topology and architecture are becoming more and more complex, which brings challenges to the security, accuracy, accessibility and other aspects of the Internet.
[0003] 5G draws on the successful experience of the IP system service-oriented architecture, and realizes the decoupling and integration of network functions through modularization. Each decoupled network function can be expanded, evolved and deployed on demand independently. The interaction between all network functions (NF) on the control plane adopts service-oriented interfaces. The same service can be called by multiple NFs, reducing the coupling degree of interface definitions between NFs, and finally realizing on-demand customization of the entire network functions, flexibly supporting different business scenarios and requirements.
[0004] The boundary of the 5G core network extends to the enterprise customer side. The 5G large network and the enterprise campus private network need to be interconnected at multiple points. The problems of network security, operator control, and national supervision are becoming more and more prominent, resulting in the network facing many challenges such as multi-point interconnection, business and data security. In order to solve the above problems, the Customized-InterWorking Function (C-IWF) system came into being. C-IWF includes functional modules such as signaling proxy forwarding, routing management, transmission encryption, signaling monitoring, and signaling fuse. It can play the role of a signaling data security agent for the sinking of private network elements to access network elements, as well as the function of access authentication management. It can transfer, adjust and adapt the signaling of multiple network elements, monitor the interactive signaling, filter the attack signaling and data, and fuse the signaling that reaches the threshold, so as to ensure the security of the core network elements. Through the above-mentioned private network elements, signaling interworking gateways and core network elements, a hybrid private network can be formed to provide users with good 5G network services.
[0005] The hybrid private network technology based on the C-IWF architecture is a powerful supplement to the 3GPP standard scenarios. This technology has three major advantages. First, it realizes public and private isolation, improving the security of large networks and campus networks; second, it realizes one-point access, simplifies networking and improves deployment efficiency; third, it realizes user-side interface adaptation, facilitating the introduction of more industry partners.
[0006] With the rapid development of the Internet, the scale of the network has expanded rapidly, and the network structure has become increasingly complex. An accurate and complete network topology discovery method is helpful for the efficient management of the network, and is of great significance for the optimization of network configuration, the location of network faults, the discovery of network vulnerabilities, and the detection of network communications. From the perspective of network security protection, network topology detection or network topology perception is essentially the first step in network management. After the progress of network topology perception is completed, the detection of the device type and operating system type existing in the network can be completed. The main tasks include: detecting possible vulnerabilities, evaluating the security of their working environment, and focusing on monitoring these devices based on the evaluation results.
[0007] However, the relevant technology cannot display the intercommunication between service network elements in the trusted area and service network elements in the non-trusted area of the 5G network.
[0008] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention
[0009] The embodiments of the present application provide a data processing method and device, a non-volatile storage medium, and an electronic device to at least solve the technical problem that the related technology cannot display the service network elements in the trusted area of the 5G network and the service network elements in the untrusted area interconnectedly.
[0010] According to one aspect of an embodiment of the present application, a data processing method is provided, including: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.
[0011] Optionally, obtaining first information of a first service network element in a private network and second information of a first network hardware device in a signaling intercommunication gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, includes: obtaining network element signaling intercommunication records stored in the C-IWF, wherein the network element signaling intercommunication records include: a timestamp for recording the time when the signaling interaction occurs, network element information of a source network element that generates the signaling and network element information of a destination network element that receives the signaling, signaling type, signaling content, communication connection status, performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extracting the first information of the first service network element and the third information of the second service network element from the network element signaling intercommunication records.
[0012] Optionally, first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device are obtained, including: collecting the second information of the first network hardware device and the fourth information of the second network hardware device through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.
[0013] Optionally, based on the first information, the second information, the third information and the fourth information, before displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device, the method also includes: denoising and deduplicating the first information, the second information, the third information and the fourth information, respectively; converting the data formats of different data sources into the target format in the processed first information, the second information, the third information and the fourth information, respectively; and standardizing the indicator data in the converted first information, the second information, the third information and the fourth information.
[0014] Optionally, based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, including: taking the first service network element, the first network hardware device, the second service network element and the second network hardware device as nodes; determining the connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device according to the network connection information in the first information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the second information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the third information According to the connection information in the fourth information, determine the connection relationship between the second service network element and the first service network element, the first network hardware device and the second network hardware device, and use the connection relationship as an edge; according to the network connection information in the fourth information, determine the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device, and use the connection relationship as an edge; according to the nodes and the edges, construct a network topology diagram, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; use a graphical tool to convert the network topology diagram into a visual graph and display the visual graph.
[0015] Optionally, after displaying the visualization graph, the method further includes: when there is an abnormal node in the visualization graph that meets a preset requirement, changing the color of the abnormal node from a first preset color in a normal state to a second preset color.
[0016] Optionally, after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information, the method also includes: monitoring the network traffic of the first service network element and the second service network element using deep packet inspection, and generating a network traffic report; predicting faults of the network traffic of the first service network element and the second service network element using a pre-trained machine learning model, and obtaining a prediction result output by the pre-trained machine learning model.
[0017] According to another aspect of an embodiment of the present application, a data processing device is also provided, including: an acquisition module, used to acquire first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; a display module, used to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.
[0018] According to another aspect of the embodiments of the present application, a non-volatile storage medium is provided, the storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above data processing method.
[0019] According to another aspect of the embodiments of the present application, there is further provided an electronic device, including: a memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the above data processing method is executed when the program is run.
[0020] According to yet another aspect of the embodiments of the present application, a computer program is further provided, wherein the above data processing method is implemented when the computer program is executed by a processor.
[0021] According to another aspect of the embodiments of the present application, a computer program product is provided, which includes a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above data processing method is implemented.
[0022] In an embodiment of the present application, the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device are obtained, wherein the first information at least includes: network service information, network connection information and device status information of the first service network element, the third information at least includes: network service information, network connection information and device status information of the second service network element, the second information at least includes: network connection information and device status information of the first network hardware device, and the fourth information at least includes: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, so as to achieve the purpose of intercommunication display of service network elements in the trusted area of 5G network and service network elements in the untrusted area, thereby achieving the technical effect of helping technical personnel to intuitively understand the network structure, and then solving the technical problem that the related technology cannot intercommunication display service network elements in the trusted area of 5G network and service network elements in the untrusted area. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
[0024] Figure 1 is a flow chart of a data processing method according to an embodiment of the present application;
[0025] Figure 2 is a 5G system structure diagram based on a service interface according to an embodiment of the present application;
[0026] Figure 3 is another 5G system structure diagram based on a service interface according to an embodiment of the present application;
[0027] Figure 4 is a schematic diagram of a network intercommunication solution according to an embodiment of the present application;
[0028] Figure 5 is a schematic diagram of another network intercommunication solution according to an embodiment of the present application;
[0029] Figure 6 is a schematic diagram of another network intercommunication solution according to an embodiment of the present application;
[0030] Figure 7 is a network topology display diagram according to an embodiment of the present application;
[0031] Figure 8 is a flow chart of another data processing method according to an embodiment of the present application;
[0032] Fig. 9 is a structural diagram of a data processing device according to an embodiment of the present application;
[0033] Fig.10 It is a hardware structure block diagram of a computer terminal according to a data processing method of an embodiment of the present application. DETAILED DESCRIPTION
[0034] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.
[0035] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0036] According to an embodiment of the present application, a method embodiment of a data processing method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.
[0037] Figure 1 is a flow chart of a data processing method according to an embodiment of the present application, such as Figure 1 As shown, the method comprises the following steps:
[0038] Step S102, obtain the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device, wherein the first information includes at least: the network service information, network connection information and device status information of the first service network element, the third information includes at least: the network service information, network connection information and device status information of the second service network element, the second information includes at least: the network connection information and device status information of the first network hardware device, and the fourth information includes at least: the network connection information and device status information of the second network hardware device.
[0039] It should be noted that according to the 3GPP standard, the 5G network architecture is decoupled and integrated according to its functional role, and is divided into multiple operating modules, namely 5G service network elements, such as AMF, SMF, UPF, UDM, AUSF, NEF, PCRF, NRF, etc. The 5G system structure diagram based on the service interface is shown in the figure below. Figure 2 As shown in the figure, the various service modules of the 5G architecture are shown. In actual deployment, some services can be selectively deployed according to business needs. The relevant interface protocols are specified for the interaction between the various service modules, such as Figure 3 , various types of service network elements may be deployed in different ways and locations due to different economic costs and business scenarios. For customers with low cost budgets, they can simply deploy specific service modules. For scenarios with high performance requirements, more service network elements can be deployed inside the enterprise private network, and the same type of service can be deployed in a distributed manner. This also brings about the problem of chaotic on-site deployment architecture and inability to perform targeted operation and maintenance. C-IWF supports network interoperability solutions for a variety of network application scenarios, such as Figure 4 , only deploy UPF in the enterprise campus, such as Figure 5 , UPF, AMF, and SMF can be deployed in enterprise parks, such as Figure 6 , available in Figure 5 On the basis of the C-IWF, AUSF, UDM and other network elements are simultaneously sunk to the enterprise campus private network environment. The service network elements deployed by the operator's public network are 5G core network elements in the trusted area, and the service network elements deployed by the enterprise's private network are 5G customized network elements in the untrusted area. The service network elements in the trusted area and the service network elements in the untrusted area need to be interconnected through C-IWF. Various network elements may also come from different manufacturers, and C-IWF also has the function of converting protocols from different manufacturers.
[0040] Specifically, by parsing the PFCP protocol in the N4-P subsystem, the network service information, network connection information, and device status information of the SMF that interacts with the sinking edge UPF are extracted. The network connection information and device status information of hardware devices such as switches, routers, and firewalls in the private network are collected using SNMP, LLDP, or ARP protocols.
[0041] Through the SBI-P subsystem, HTTP2 messages are analyzed to obtain network service information, network connection information, and device status information of the large network 5GC that interacts with network elements such as AMF, SMF, and UDM. In the public network, SNMP, LLDP, or ARP protocols are also used to collect network connection information and device status information of hardware devices.
[0042] Network service information includes but is not limited to: 1. Service type and function: specifies the specific functions and types provided by the service network element (such as AMF, SMF, UPF, etc.). 2. Service interface: includes the type of interface provided by the service network element for external interaction, such as SBI interface, N4 interface, etc., as well as interface-related protocols and message formats. 3. Service status: the service operation status of the network element, such as available, degraded, faulty, etc. 4. Quality of service (QoS) parameters: includes performance indicators such as service delay, throughput, packet loss rate, etc. 5. Service configuration information: such as service policy configuration, user plane path configuration, etc. 6. Security settings: includes security-related configurations such as authentication, encryption, and access control.
[0043] Network connection information includes but is not limited to: 1. Physical connection information: including connected physical devices (such as switches, routers, cables, etc.) and the connection relationship between these devices. 2. Logical connection information: logical connections between service network elements in the network, as well as the path and status of the connection. 3. Communication protocol: used to describe the protocol used for communication between different network elements. 4. Interface address and port number: network interface address and port number used in the connection, such as IP address, SBI interface address, N4 interface address, etc. 5. Traffic statistics: traffic information passing through the connection, including upstream and downstream traffic, peak traffic, average traffic, etc. 6. Delay and packet loss rate: delay time on the connection path and packet loss rate of data packets. 7. Connection history and events: record the change history of connection status, as well as events related to the connection (such as connection establishment, disconnection, failure, etc.).
[0044] Device status information includes but is not limited to: 1. Device ID and model: the unique identification and model information of the device. 2. Device location: the deployment location of the device, including physical location and logical location. 3. Device status: the operating status of the device, such as online, offline, restarting, etc. 4. Device performance data: such as CPU usage, memory usage, disk space usage, etc. 5. Device logs and event records: record the operation logs and events of the device, including software upgrades, fault information, security events, etc.
[0045] Step S104: Based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.
[0046] The service network element information (first information and third information) and network hardware device information (second information and fourth information) obtained from C-IWF are merged and processed. For the same device or network element, ensure that the information collected from different sources is integrated into a complete record. Unify the data format, such as converting all information into JSON or XML format, to facilitate subsequent processing. At the same time, standardize the representation of key fields, such as device status information, network connection information, etc., to ensure data consistency and comparability.
[0047] The first service network element, the first network hardware device, the second service network element, and the second network hardware device are used as nodes in the topology diagram. Each node contains its basic information, such as name, type, status, and location. Based on the collected network connection information, define the connection relationship between nodes. Different line types or colors can be used to represent the type and status of the connection, such as secure connection, abnormal connection, etc. Determine the layout of the topology diagram to ensure that the diagram is clear and intuitive. Automatic layout algorithms, such as force-directed layout, tree layout, etc., can be used to optimize according to the characteristics of the network structure, where Figure 7 It is a network topology display diagram according to an embodiment of the present application.
[0048] Specifically, an interactive network topology view is created, where users can view detailed information or adjust the view by clicking or dragging nodes. Use color coding or icons to indicate different states, such as green for normal, yellow for warning, and red for serious faults. For service network elements, key performance indicators such as the number of sessions and traffic processed can also be displayed. In the topology view, the size and direction of data traffic can be represented by dynamic arrows or line widths, which intuitively displays the data flow in the network. If a fault point is found during data filtering and analysis, it should be clearly marked in the topology map to facilitate operation and maintenance personnel to quickly locate the problem. Provide the function of viewing historical data, so that users can query the network status at a certain point in the past, compare historical trends, and discover potential performance problems or security threats.
[0049] According to the above steps, the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device are obtained, wherein the first information at least includes: the network service information, network connection information and device status information of the first service network element, the third information at least includes: the network service information, network connection information and device status information of the second service network element, the second information at least includes: the network connection information and device status information of the first network hardware device, and the fourth information at least includes: the network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, so as to achieve the purpose of intercommunication display of the service network elements in the trusted area of the 5G network and the service network elements in the non-trusted area, thereby realizing the technical effect of helping technical personnel to intuitively understand the network structure.
[0050] The following Figure 1 The steps shown are exemplary and explanatory.
[0051] According to some optional embodiments of the present application, obtaining the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device can be achieved by the following method: obtaining the network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording the time when the signaling interaction occurs, the network element information of the source network element that generates the signaling and the network element information of the destination network element that receives the signaling, the signaling type, the signaling content, the communication connection status, and the performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extracting the first information of the first service network element and the third information of the second service network element in the network element signaling intercommunication record.
[0052] Obtain the timestamp of each signaling interaction, which helps to organize the signaling data in chronological order and perform time series analysis. By parsing the signaling records, extract the network element information of the source network element and the destination network element, including the Internet Protocol address (IP address), network interface, service type, etc. This will be used to identify the identity and function of the service network element. Determine the type of signaling, such as N1, N2, N4, etc., which helps to understand the purpose and function of the signaling interaction. Parse the actual content of the signaling and extract key fields, such as session ID, user ID, service request, etc., for analyzing the specific information of the signaling. Monitor the connection status during the signaling interaction process, such as connection establishment, maintenance, interruption, etc., to evaluate the stability of the network. Collect performance indicators related to signaling interaction, such as latency, throughput, error rate, etc., for monitoring and optimization of network performance.
[0053] In summary, the relevant information of the first service network element in the private network is classified and extracted from the network element signaling intercommunication record. This includes the network element information of the source network element, such as its IP address, network interface, and type of service provided, as well as the performance data and signaling content of the interaction with it. Similarly, the relevant information of the second service network element in the public network is extracted, focusing on the time, type, content, and performance data of its signaling interaction.
[0054] After obtaining the above information, you can also analyze the relationship between the source network element and the destination network element to determine the data flow path and signaling interaction mode between them. Based on the collected performance data, evaluate the efficiency and quality of signaling interaction between the private network and the public network, and identify potential performance bottlenecks. Detect faults and abnormalities in the network, such as signaling errors and connection interruptions, through signaling content and communication connection status.
[0055] According to some other optional embodiments of the present application, obtaining the first information of the first service network element in the private network in the signaling intercommunication gateway C-IWF and the second information of the first network hardware device, the third information of the second service network element in the public network and the fourth information of the second network hardware device can be achieved by the following method: through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, the second information of the first network hardware device and the fourth information of the second network hardware device are collected, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.
[0056] Use the SNMP get command to query the device's system information, such as system name, system location, system contact, etc., through the device management IP address, so as to determine the first network hardware device and the second network hardware device. Use the SNMP get, getnext or walk command to query the device's MIB (Management Information Base) tree and collect performance data such as CPU utilization, memory utilization, port status, error packet count, etc. as part of the second information and the fourth information. Through SNMP, obtain the device's configuration information, including IP address configuration, VLAN information, routing information, etc. This information helps to understand the role and connection relationship of the device in the network.
[0057] Through C-IWF or network monitoring equipment, LLDP messages are monitored to extract the device's MAC address, port ID, device type, device name and other information to build a connection relationship diagram between network devices. LLDP messages can also carry interface status information, such as port speed, duplex mode, link status, etc., which are important components of the second information and the fourth information.
[0058] ARP (Address Resolution Protocol) is used to resolve IP addresses to MAC addresses. By analyzing the ARP table, you can understand the direct connection relationship between devices. Analyze the ARP table on the C-IWF or network monitoring device to identify the IP address and MAC address of the directly connected device, so as to understand the direct connection between the first network hardware device and the second network hardware device. The number of ARP requests and responses can indirectly understand the active status of the device, such as whether the device is online, whether the network connection is stable, and other information.
[0059] In some optional embodiments of the present application, based on the first information, the second information, the third information and the fourth information, before displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device, the following steps may also be performed: denoising and deduplicating the first information, the second information, the third information and the fourth information, respectively; converting the data formats of different data sources into the target format in the processed first information, the second information, the third information and the fourth information, respectively; and standardizing the indicator data in the converted first information, the second information, the third information and the fourth information.
[0060] The purpose of denoising is to remove useless or erroneous information from the data and improve data quality, including: identifying and removing values that are beyond the normal range, such as abnormally high CPU utilization, which may be a measurement error. Removing data items that do not contain valuable information, such as useless information in some device logs. Correcting erroneous data entries based on context or predefined rules, such as incorrect IP address format, etc.
[0061] Deduplication is the process of removing duplicate data to ensure the uniqueness of each data item and avoid bias in analysis. This can be achieved by selecting one or more key fields (such as the device's MAC address, IP address, or network element ID), comparing data items, and removing duplicate records. For multiple data records for the same device, keep the latest or most relevant timestamp entry and delete other duplicate records.
[0062] Unify the data formats from different sources for unified processing and display. The conversion target formats include but are not limited to: JSON: easy to read and parse, widely used for data exchange; XML: structured and extensible, suitable for complex data structures; CSV: simple and universal, easy to import into data processing software.
[0063] Standardization is to ensure that indicator data from different sources are comparable and help unify analysis standards. It includes: converting all performance indicators into a unified unit, such as converting data traffic from kB / s to MB / s. Scaling or shifting values to make them fall within a specific range, such as converting CPU utilization from a percentage to a value between 0 and 1. Correcting or marking indicator values that are out of the normal range to avoid affecting the accuracy of data analysis.
[0064] As some optional embodiments of the present application, based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, which can be achieved by the following method: taking the first service network element, the first network hardware device, the second service network element and the second network hardware device as nodes; determining the connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device according to the network connection information in the first information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the second information, and taking the connection relationship as an edge ; According to the network connection information in the third information, determine the connection relationship between the second service network element and the first service network element, the first network hardware device and the second network hardware device, and use the connection relationship as an edge; According to the network connection information in the fourth information, determine the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device, and use the connection relationship as an edge; According to the nodes and edges, construct a network topology diagram, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; Use a graphical tool to convert the network topology diagram into a visual graph and display the visual graph.
[0065] Using the network connection information in the first information of the first service network element, determine the connection relationship between it and other network hardware devices or service network elements, and add labels to the edges, such as N4-PFCP (for the connection between the first service network element and the sinking edge UPF) or other protocol types to indicate the connection type. According to the network connection information in the second information of the first network hardware device, determine the connection relationship with the first service network element, the second service network element or the second network hardware device, and also add appropriate protocol or interface type labels to the edges. Analyze the network connection information in the third information of the second service network element, determine the connection relationship between it and the first service network element, the first network hardware device or the second network hardware device, and represent it in the graph. According to the network connection information in the fourth information of the second network hardware device, determine its connection relationship with the first service network element, the first network hardware device or the second service network element, and present it in the graph. Use a graph data structure (such as a graph database or an adjacency matrix) to store node and edge information and construct a network topology graph. Ensure that the edges between each node and other nodes directly connected to it are correctly reflected. In the topology diagram, the information contained in each node should be a complete description that integrates all related information (such as first information, second information, etc.), including but not limited to the status, performance data, network interface information, etc. of the device.
[0066] Use visualization functions such as Graphviz, Gephi, or specialized network management software to convert the constructed network topology diagram into a readable graph. In the visualization graph, different icons or colors are used to represent different types of nodes (such as service network elements, network hardware devices), and different line types or colors are used to represent different types of connections (such as control planes, user planes, hardware connections, etc.). Add interactive elements to the graph, such as hovering the mouse to display node details, clicking on the edge to display connection details, etc., to enhance user experience and convenience of information acquisition. Through the web interface, console or specialized display software, the constructed network topology diagram is displayed graphically to the operation and maintenance personnel or network managers, so that they can quickly understand and analyze the network structure.
[0067] Through the above method, the network topology diagram not only intuitively displays the connection relationship between the first service network element, the first network hardware device, the second service network element and the second network hardware device, but also integrates the detailed information of each node, providing strong support for network management and troubleshooting.
[0068] In some optional embodiments of the present application, after displaying the visualization graph, the following steps may be performed: when there is an abnormal node in the visualization graph that meets the preset requirements, the color of the abnormal node is changed from the first preset color in the normal state to the second preset color.
[0069] Define the first preset color as the color of the node in normal state, usually green or blue, representing healthy and normal operation. Define the second preset color as the color in abnormal state, usually red, orange or yellow, to indicate warnings or serious faults. Analyze the node status information in the network topology diagram, and determine which nodes have abnormalities according to the preset anomaly detection rules. Anomaly detection rules may be based on the following aspects: Performance indicators: such as CPU utilization, memory utilization, packet loss rate, etc. are beyond the normal range. Network connection status: such as device disconnection, connection interruption, etc. Signaling interaction: such as abnormal signaling interaction frequency, incorrect signaling content, etc. Security alarms: such as alarms issued by security devices such as intrusion detection systems (IDS) or firewalls.
[0070] For each node that is judged to be abnormal, its color in the visualization graph is changed from the first preset color (normal color) to the second preset color (abnormal color). This color change can be achieved through programming languages and visualization libraries (such as Python's NetworkX, Matplotlib or JavaScript's D3.js).
[0071] Ensure that the visualization graphics can reflect changes in network status in real time, and automatically detect and update the color of nodes when new data arrives. This usually requires integrating a real-time data update mechanism into the graphic display. When the user hovers over or clicks an abnormal node, detailed information such as the cause of the abnormality, duration, and scope of impact are displayed to help network managers quickly locate the problem and take appropriate measures.
[0072] In summary, highlighting abnormal nodes in the network topology through color coding can not only help network managers quickly identify problems in the network, but also promote timely response and troubleshooting, and improve network stability and security.
[0073] As other optional embodiments of the present application, after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information, the following steps can also be performed: using deep packet inspection to monitor the network traffic of the first service network element and the second service network element, and generating a network traffic report; using a pre-trained machine learning model to predict faults of the network traffic of the first service network element and the second service network element, and obtaining the prediction results output by the pre-trained machine learning model.
[0074] Deploy a DPI system or integrate DPI functions into C-IWF to capture the inbound and outbound traffic of the first service network element (such as AMF, SMF) and the second service network element (such as UPF). Parse the header and payload of each data packet to identify information such as protocol type, source / destination IP address, port number, and possible business data. Classify and count traffic based on metadata, such as TCP / UDP traffic, HTTP / HTTPS traffic, DNS traffic, etc. Analyze traffic trends, including peak traffic detection, abnormal traffic identification, and traffic pattern analysis. Generate network traffic reports automatically or on demand. The reports should include but are not limited to key indicators such as total traffic volume, traffic peaks, protocol distribution, and abnormal traffic warnings. Reports can be real-time, used to monitor current network conditions, or historical, used to analyze traffic trends and optimize network configurations.
[0075] Collect historical network traffic data from the DPI system or C-IWF and combine it with data from other sources such as network logs and signaling records. Mark known fault events as data labels for model training. Use labeled data sets to train machine learning models such as random forests, support vector machines, or deep learning models (such as LSTM). Select the best performing model for pre-training to ensure that the model can accurately predict network failures that may occur in the future. Input the network traffic data of the first service network element and the second service network element collected in real time into the pre-trained machine learning model. The model will predict the probability of failure or specific failure type that may occur in the future based on the input traffic characteristics.
[0076] The prediction results output by the pre-trained machine learning model may include the probability of a fault, time prediction, fault type, and impact range. These prediction results should be updated in real time or regularly to provide network operation and maintenance personnel with fault prevention and resource scheduling. Based on the prediction results of the pre-trained machine learning model, an early warning system is established to automatically issue an alarm when the prediction probability exceeds the preset threshold. Integrate with network automation tools to achieve a closed-loop process from prediction to early warning to automatic response, such as automatically adjusting network bandwidth or starting backup routes.
[0077] By combining DPI’s real-time traffic monitoring with pre-trained machine learning models’ fault prediction, network managers can obtain more comprehensive and forward-looking information about network health, thereby improving network stability and user experience.
[0078] Figure 8 is a flow chart of another data processing method according to an embodiment of the present application. Figure 8 As shown, the method comprises the following steps:
[0079] Step S801: data collection.
[0080] The core modules of C-IWF are the N4-P subsystem and SBI-P subsystem of the control plane. The N4-P subsystem processes the PFCP control protocol between the forwarding large network SMF and the sinking edge UPF, parses the PFCP message protocol and extracts information, replaces the key protocol field information to hide the N4 address of the large network SMF address; analyzes the PFCP session information, modifies key information such as PDR / FAR and manufacturer private fields, and performs N4 decoupling adaptation between SMFs and UPFs of different manufacturers. The SBI-P subsystem processes the HTTP2 signaling between the AUSF / UDM / AMF / NRF and other network elements of the forwarding large network 5GC and the AMF / SMF and other network elements of the sinking private network 5GC, parses the HTTP2 message protocol and proposes information, replaces the Callback URI, FQDN, Location and other field information to hide the SBI interface address of the large network 5GC. C-IWF stores the network element signaling interconnection records for a period of time, so C-IWF stores the conversion addresses of the enterprise private network and the telecommunications network, and is the only one that interconnects the two networks. Various service network element information and connection information of the enterprise private network and the telecommunications network can be obtained from C-IWF.
[0081] Furthermore, C-IWF collects network connection relationships of hardware devices such as switches, firewalls, and routers through SNMP protocols, LLDP protocols, ARP protocols, etc.
[0082] Step S802: data storage and indexing.
[0083] The network service and network connection related information retrieved by C-IWF is stored in an appropriate database for subsequent query and analysis. In this process, it is also necessary to create appropriate indexes to improve the efficiency of data retrieval. Common indexing methods include B-tree index, hash index and full-text index.
[0084] Step S803: data filtering.
[0085] The network environment is complex and changeable, with a large amount of data and may contain a lot of noise. The purpose of data filtering is to extract valuable information from it and eliminate redundant or irrelevant data. The filtering process usually includes operations such as data cleaning, deduplication, and format conversion. For example, the C-IWF system may collect a large amount of device logs and traffic data, and through data filtering, information about the network topology can be filtered out, such as the connection relationship of hardware devices such as switches and routers and the deployment node information of service network elements in the 5G core network. Effective data filtering can ensure that the displayed network topology diagram is accurate and concise, and avoid affecting understanding and analysis due to data overload.
[0086] Further convert the data formats of different data sources into a unified format, such as JSON, XML, etc., for unified processing.
[0087] Further standardize the indicator data of different equipment or systems, unify the dimensions and units, and ensure data comparability.
[0088] Further merge related information from different data sources together, such as merging status data, performance data, and log data of the same device into one record.
[0089] Step S804, data display.
[0090] The information after data collection and filtering needs to be presented in a graphical way so that technicians and managers can quickly understand the network structure. Common display forms include network topology diagrams, hierarchical diagrams, and data flow diagrams. These diagrams not only need to display network devices and their connection relationships, but also reflect the real-time monitoring and historical analysis of key performance indicators to obtain key data such as the distribution of network traffic, performance bottlenecks, and possible failure points. The displayed network topology diagram can adapt to different display requirements (such as real-time monitoring, historical analysis). For example, through graphical tools, you can create an interactive topology diagram, allowing users to click on a device to view its detailed information.
[0091] Step S805: topology analysis.
[0092] C-IWF has the function of traffic statistics for enterprise private networks and large networks. It uses DPI (Deep Packet Inspection) real-time traffic analysis to monitor real-time changes in network traffic, identify traffic peaks and abnormal traffic, and thus provide more accurate network performance analysis and optimization suggestions.
[0093] Furthermore, this embodiment has a fault prediction and warning module. Through machine learning and data mining technology, the fault prediction and warning module can identify potential network problems in advance, provide warning information, and help operators take measures before problems occur.
[0094] Furthermore, this embodiment has an intelligent report generation module, which can automatically generate detailed network reports according to user needs, including performance analysis, fault records and optimization suggestions, and supports regular or on-demand report generation.
[0095] Furthermore, this embodiment has a multi-dimensional data analysis module, which can perform in-depth analysis on network data, including time series analysis, geographic distribution analysis, etc., to help users understand network performance and trends from different perspectives.
[0096] Furthermore, it has a user experience monitoring module, which collects usage data of user devices, analyzes the impact of network service quality (QoS) on user experience, and provides optimization suggestions to improve user satisfaction.
[0097] The network topology is shown in the figure below: Figure 8 As shown, the 5G service network elements deployed in enterprise private networks and large networks are displayed. The interface problems of network element interactions can be intuitively seen, and colors are used to display whether there are any abnormalities in the service network elements and interfaces, which helps operation and maintenance personnel quickly locate problems.
[0098] The topology display of 5G networks is an indispensable part of modern network management. It not only provides an intuitive view of the network structure, but also supports real-time monitoring, fault diagnosis and performance optimization. Through advanced data collection, data filtering, data analysis and visualization technology, the topology display of 5G networks can help operators and technicians better manage and optimize complex network environments.
[0099] Fig. 9 is a structural diagram of a data processing device according to an embodiment of the present application, such as Fig. 9 As shown, the device comprises:
[0100] The acquisition module 91 is used to obtain the first information of the first service network element in the private network in the signaling intercommunication gateway C-IWF and the second information of the first network hardware device, the third information of the second service network element in the public network and the fourth information of the second network hardware device, wherein the first information includes at least: the network service information, network connection information and device status information of the first service network element, the third information includes at least: the network service information, network connection information and device status information of the second service network element, the second information includes at least: the network connection information and device status information of the first network hardware device, and the fourth information includes at least: the network connection information and device status information of the second network hardware device.
[0101] The display module 92 is used to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.
[0102] Optionally, the acquisition module 91 is also used to perform the following steps: obtain the network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording the time when the signaling interaction occurs, network element information of the source network element that generates the signaling and the network element information of the destination network element that receives the signaling, the signaling type, the signaling content, the communication connection status, and performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extract the first information of the first service network element and the third information of the second service network element in the network element signaling intercommunication record.
[0103] Optionally, the acquisition module 91 is also used to perform the following steps: collecting the second information of the first network hardware device and the fourth information of the second network hardware device through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.
[0104] Optionally, the data processing device is also used to perform the following steps before displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information: denoising and deduplicating the first information, the second information, the third information and the fourth information respectively; converting the data formats of different data sources into the target format in the processed first information, the second information, the third information and the fourth information respectively; and standardizing the indicator data in the converted first information, the second information, the third information and the fourth information.
[0105] Optionally, the display module 92 is further used to perform the following steps: taking the first service network element, the first network hardware device, the second service network element, and the second network hardware device as nodes; determining the connection relationship between the first service network element and the first network hardware device, the second service network element, and the second network hardware device according to the network connection information in the first information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element, and the second network hardware device according to the network connection information in the second information, and taking the connection relationship as an edge; determining the connection relationship between the second service network element and the first service network element, the first service network element, and the second network hardware device according to the network connection information in the third information. The connection relationship between the network hardware device and the second network hardware device is determined, and the connection relationship is used as an edge; according to the network connection information in the fourth information, the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device is determined, and the connection relationship is used as an edge; according to the nodes and the edges, a network topology diagram is constructed, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; the network topology diagram is converted into a visual graph using a graphical tool, and the visual graph is displayed.
[0106] Optionally, the data processing device is further used to perform the following steps after displaying the visualization graph: when there is an abnormal node in the visualization graph that meets preset requirements, change the color of the abnormal node from a first preset color in normal state to a second preset color.
[0107] Optionally, the data processing device is also used to perform the following steps after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information: using deep packet inspection to monitor the network traffic of the first service network element and the second service network element, and generating a network traffic report; using a pre-trained machine learning model to predict faults of the network traffic of the first service network element and the second service network element, and obtain the prediction results output by the pre-trained machine learning model.
[0108] It should be noted that the above Fig. 9 The modules in the embodiment may be program modules (e.g., a set of program instructions for implementing a specific function) or hardware modules. For the latter, they may be expressed in the following forms, but are not limited thereto: the expression form of the above modules is a processor, or the functions of the above modules are implemented by a processor.
[0109] It should be noted that Fig. 9 The preferred implementation of the illustrated embodiment can be found in Figure 1 The relevant description of the illustrated embodiment will not be repeated here.
[0110] Fig.10 FIG. 1 shows a hardware structure block diagram of a computer terminal for implementing a data processing method. Fig.10 As shown, the computer terminal 100 may include one or more (1002a, 1002b, ..., 1002n are used to illustrate) processors 1002 (the processor 1002 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 1004 for storing data, and a transmission module 1006 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Fig.10 The structure shown is only for illustration and does not limit the structure of the above electronic device. Fig.10 More or fewer components as shown, or with Fig.10 Different configurations are shown.
[0111] It should be noted that the one or more processors 1002 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 100. As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).
[0112] The memory 1004 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data processing method in the embodiment of the present application. The processor 1002 executes various functional applications and data processing by running the software programs and modules stored in the memory 1004, that is, the above-mentioned data processing method is realized. The memory 1004 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 1004 may further include a memory remotely arranged relative to the processor 1002, and these remote memories may be connected to the computer terminal 100 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0113] The transmission module 1006 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 100. In one example, the transmission module 1006 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission module 1006 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.
[0114] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 100 .
[0115] It should be noted that, in some optional embodiments, the above Fig.10 The computer terminal shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. It should be noted that Fig.10 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the computer terminal described above.
[0116] It should be noted that Fig.10 The computer terminal shown is used to execute Figure 1 The data processing method shown, therefore the relevant explanations in the execution method of the above command are also applicable to the electronic device and will not be repeated here.
[0117] An embodiment of the present application further provides a non-volatile storage medium, which includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above data processing method.
[0118] A program for executing the following functions on a non-volatile storage medium: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device.
[0119] An embodiment of the present application further provides an electronic device, including: a memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the above data processing method is executed when the program is run.
[0120] The processor is used to run a program that performs the following functions: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.
[0121] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.
[0122] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.
[0123] In the above-mentioned embodiments of the present application, the collected information is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary protection measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.
[0124] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.
[0125] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.
[0126] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.
[0127] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.
[0128] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.
Claims
1. A data processing method, characterized in that: include: Obtaining first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; Based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.
2. The method according to claim 1, characterized in that Acquiring first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, including: Obtaining a network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording the time when the signaling interaction occurs, network element information of a source network element that generates the signaling, network element information of a destination network element that receives the signaling, a signaling type, a signaling content, a communication connection state, and performance data of the signaling interaction, wherein the network element information includes at least one of the following: an Internet Protocol address, a network interface, and a service type; The first information of the first service network element and the third information of the second service network element are extracted from the network element signaling intercommunication record.
3. The method according to claim 1 or 2, characterized in that: Acquiring first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, including: The second information of the first network hardware device and the fourth information of the second network hardware device are collected through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.
4. The method according to claim 1, characterized in that Before displaying the first service network element, the first network hardware device, the second service network element, and the second network hardware device based on the first information, the second information, the third information, and the fourth information, the method further includes: performing denoising and deduplication processing on the first information, the second information, the third information, and the fourth information respectively; In the processed first information, the second information, the third information, and the fourth information, respectively, data formats of different data sources are converted into target formats; The index data in the converted first information, the second information, the third information and the fourth information are standardized.
5. The method according to claim 1, characterized in that Based on the first information, the second information, the third information, and the fourth information, the first service network element, the first network hardware device, the second service network element, and the second network hardware device are displayed, including: The first service network element, the first network hardware device, the second service network element and the second network hardware device are taken as nodes; according to the network connection information in the first information, a connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device is determined, and the connection relationship is taken as an edge; Determine, according to the network connection information in the second information, a connection relationship between the first network hardware device and the first service network element, the second service network element, and the second network hardware device, and use the connection relationship as an edge; Determine, according to the network connection information in the third information, a connection relationship between the second service network element and the first service network element, the first network hardware device, and the second network hardware device, and use the connection relationship as an edge; Determine, according to the network connection information in the fourth information, a connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device, and use the connection relationship as an edge; Constructing a network topology graph according to the nodes and the edges, wherein a first service network element node in the network topology graph includes the first information, a first network hardware device node includes the second information, a second service network element node includes the third information, and a second network hardware device node includes the fourth information; The network topology diagram is converted into a visual graph using a graphical tool, and the visual graph is displayed.
6. The method according to claim 5, characterized in that After displaying the visualization graph, the method further includes: When there is an abnormal node that meets the preset requirement in the visualization graph, the color of the abnormal node is changed from a first preset color in a normal state to a second preset color.
7. The method according to claim 1, characterized in that After displaying the first service network element, the first network hardware device, the second service network element, and the second network hardware device based on the first information, the second information, the third information, and the fourth information, the method further includes: Using deep packet inspection to monitor network traffic of the first service network element and the second service network element, and generating a network traffic report; A pre-trained machine learning model is used to perform fault prediction on the network traffic of the first service network element and the second service network element to obtain a prediction result output by the pre-trained machine learning model.
8. A data processing device, characterized in that: include: An acquisition module, used to acquire first information of a first service network element in a private network in a signaling interworking gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; A display module is used to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.
9. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored program, wherein when the program is executed, the device where the non-volatile storage medium is located is controlled to execute the data processing method according to any one of claims 1 to 7.
10. An electronic device, characterized in that: include: A memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the program executes the data processing method according to any one of claims 1 to 7 when running.
11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the data processing method according to any one of claims 1 to 7 is implemented.
Citation Information
Patent Citations
5G core network topology discovery method and device based on signaling link
CN112671565A
Method and device for discovering network topology structure, storage medium and electronic equipment
CN116016197A
Message processing method and device, nonvolatile storage medium and electronic equipment
CN117041211A
Communication method and device based on signaling intercommunication gateway, equipment and storage medium
CN117155621A
Network topological graph generation method and device, electronic equipment and storage medium
CN118264567A