Data processing method and device, nonvolatile storage medium and electronic equipment

By obtaining network information from the signaling intercommunication gateway C-IWF, building a network topology map and visually displaying it, the problem of intercommunication between service network elements in trusted and non-trusted areas in the 5G network is solved, and the efficiency of network management and troubleshooting is improved.

CN119450749BActive Publication Date: 2025-10-10CHINA TELECOM INTELLIGENT NETWORK TECHNOLOGY CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411578448.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-11-06
Publication Date
2025-10-10
Estimated Expiration
2044-11-06

AI Technical Summary

Technical Problem

Existing technologies cannot effectively demonstrate the intercommunication between service network elements in trusted and non-trusted areas of a 5G network.

Method used

By obtaining network information from the signaling interworking gateway (C-IWF), including information on service network elements and hardware devices, data processing and display are performed to build a network topology diagram. Graphical tools are used to display visual graphics, and fault prediction is performed by combining deep packet inspection and pre-trained machine learning models.

Benefits of technology

It realizes the intercommunication display of service network elements in the trusted and non-trusted areas of the 5G network, helps technicians to intuitively understand the network structure and improves the efficiency of network management and troubleshooting.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119450749B_ABST
    Figure CN119450749B_ABST
Patent Text Reader

Abstract

The application discloses a data processing method and device, a nonvolatile storage medium and an electronic device. The method comprises the following steps: acquiring first information of a first service network element in a special network in a signaling interworking gateway C-IWF, second information of a first network hardware device, third information of a second service network element in a public network, and fourth information of a second network hardware device; and based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed. The application solves the technical problem that related technologies cannot interwork and display the service network elements in the trusted area and the untrusted area of the 5G network.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of wireless communication technology, and more specifically, to a data processing method and device, a non-volatile storage medium, and an electronic device. Background Art

[0002] To provide faster network speeds, lower latency, and greater connection capacity to meet growing communications needs, 5G networks have been widely promoted and deployed in recent years, and 5G-related technologies have also developed rapidly. To meet the diverse needs of industrial and general networks, network topologies and architectures are becoming increasingly complex, posing challenges to the security, accuracy, and accessibility of the internet.

[0003] 5G draws on the successful experience of IP system service-oriented architecture, achieving decoupling and integration between network functions through modularization. Each decoupled network function can be independently expanded, evolved, and deployed on demand. Interactions between all network functions (NFs) on the control plane use service-oriented interfaces. The same service can be called by multiple NFs, reducing the coupling between NF interface definitions. Ultimately, this enables on-demand customization of network functions, flexibly supporting diverse business scenarios and requirements.

[0004] The boundaries of the 5G core network extend to the enterprise customer side. 5G networks and enterprise campus private networks require multi-point interoperability. This brings with it increasingly prominent challenges in network security, operator control, and national regulation, leading to numerous challenges in multi-point interoperability, service, and data security. To address these issues, the Customized-Interworking Function (C-IWF) system has emerged. The C-IWF includes functional modules such as signaling proxy forwarding, routing management, transmission encryption, signaling monitoring, and signaling circuit breaking. It serves as a signaling data security proxy for private network elements (NEs) that are deployed to access NEs, as well as provides access authentication management. It forwards, adjusts, and adapts signaling between multiple NEs, monitors interactive signaling, filters attack signaling and data, and circuit-breaks signaling that reaches thresholds, thereby ensuring the security of core network NEs. By combining these private network NEs, the signaling interworking gateway, and core network NEs, a hybrid private network can be formed to provide users with superior 5G network services.

[0005] Hybrid private network technology based on the C-IWF architecture is a powerful supplement to the 3GPP standard scenarios. This technology has three major advantages: first, it achieves public and private isolation, improving the security of large networks and campus networks; second, it achieves single-point access, simplifying networking and improving deployment efficiency; third, it achieves user-side interface adaptation, facilitating the introduction of more industry partners.

[0006] With the rapid development of the internet, networks are rapidly expanding and becoming increasingly complex. Accurate and complete network topology discovery methods facilitate efficient network management and are crucial for optimizing network configurations, locating network faults, identifying network vulnerabilities, and monitoring network communications. From a network security perspective, network topology detection or awareness is essentially the first step in network management. Only after network topology awareness is complete can the device and operating system types present in the network be detected. Key tasks include detecting potential vulnerabilities, assessing the security of their operating environments, and focusing on monitoring these devices based on the assessment results.

[0007] However, the relevant technology cannot display the intercommunication between service network elements in the trusted area and service network elements in the non-trusted area of ​​the 5G network.

[0008] To address the above-mentioned problems, no effective solutions have been proposed so far. Summary of the Invention

[0009] The embodiments of the present application provide a data processing method and device, a non-volatile storage medium, and an electronic device to at least solve the technical problem that the related technology cannot display the intercommunication between service network elements in the trusted area of ​​5G network and service network elements in the untrusted area.

[0010] According to one aspect of an embodiment of the present application, a data processing method is provided, including: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.

[0011] Optionally, obtaining first information of a first service network element in a private network and second information of a first network hardware device in a signaling intercommunication gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, includes: obtaining network element signaling intercommunication records stored in the C-IWF, wherein the network element signaling intercommunication records include: a timestamp for recording the time when the signaling interaction occurs, network element information of the source network element that generates the signaling and network element information of the destination network element that receives the signaling, signaling type, signaling content, communication connection status, performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extracting the first information of the first service network element and the third information of the second service network element from the network element signaling intercommunication records.

[0012] Optionally, obtaining first information of the first service network element in the private network in the signaling intercommunication gateway C-IWF and second information of the first network hardware device, third information of the second service network element in the public network and fourth information of the second network hardware device includes: collecting the second information of the first network hardware device and the fourth information of the second network hardware device through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.

[0013] Optionally, before displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information, the method also includes: performing denoising and deduplication processing on the first information, the second information, the third information and the fourth information respectively; converting the data formats of different data sources into the target format in the processed first information, the second information, the third information and the fourth information respectively; and standardizing the indicator data in the converted first information, the second information, the third information and the fourth information.

[0014] Optionally, based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, including: taking the first service network element, the first network hardware device, the second service network element and the second network hardware device as nodes; determining the connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device according to the network connection information in the first information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the second information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the third information, and taking the connection relationship as an edge; According to the connection information in the fourth information, the connection relationship between the second service network element and the first service network element, the first network hardware device and the second network hardware device is determined, and the connection relationship is used as an edge; according to the network connection information in the fourth information, the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device is determined, and the connection relationship is used as an edge; according to the nodes and the edges, a network topology diagram is constructed, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; the network topology diagram is converted into a visual graph using a graphical tool, and the visual graph is displayed.

[0015] Optionally, after displaying the visualization graph, the method further includes: when there is an abnormal node in the visualization graph that meets preset requirements, changing the color of the abnormal node from a first preset color in normal state to a second preset color.

[0016] Optionally, after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information, the method also includes: monitoring the network traffic of the first service network element and the second service network element using deep packet inspection, and generating a network traffic report; predicting faults of the network traffic of the first service network element and the second service network element using a pre-trained machine learning model, and obtaining a prediction result output by the pre-trained machine learning model.

[0017] According to a further aspect of the embodiments of the present application, a data processing apparatus is also provided, comprising: an obtaining module, configured to obtain first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information at least includes network service information, network connection information and device state information of the first service network element, the third information at least includes network service information, network connection information and device state information of the second service network element, the second information at least includes network connection information and device state information of the first network hardware device, and the fourth information at least includes network connection information and device state information of the second network hardware device; and a display module, configured to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.

[0018] According to a further aspect of the embodiments of the present application, a nonvolatile storage medium is also provided, comprising a stored program, wherein the program, when executed, controls a device in which the storage medium is located to perform the above data processing method.

[0019] According to a further aspect of the embodiments of the present application, an electronic device is also provided, comprising a memory and a processor, wherein the processor is configured to execute a program stored in the memory, and the program, when executed, performs the above data processing method.

[0020] According to a further aspect of the embodiments of the present application, a computer program is also provided, wherein the computer program, when executed by a processor, implements the above data processing method.

[0021] According to a further aspect of the embodiments of the present application, a computer program product is also provided, comprising a nonvolatile computer readable storage medium, wherein the nonvolatile computer readable storage medium stores a computer program, and the computer program, when executed by a processor, implements the above data processing method.

[0022] In the embodiment of the present application, the first information of the first service network element in the special network of the signaling interworking gateway C-IWF and the second information of the first network hardware device, the third information of the second service network element in the public network and the fourth information of the second network hardware device are acquired, wherein the first information at least includes network service information, network connection information and device state information of the first service network element, the third information at least includes network service information, network connection information and device state information of the second service network element, the second information at least includes network connection information and device state information of the first network hardware device, and the fourth information at least includes network connection information and device state information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed in a manner, which achieves the purpose of interworking display of the service network elements in the trusted area and the service network elements in the untrusted area of the 5G network, thereby realizing the technical effect of helping the technical personnel to intuitively understand the network structure, and further solving the technical problem that the related art cannot interwork display of the service network elements in the trusted area and the service network elements in the untrusted area of the 5G network. BRIEF DESCRIPTION OF DRAWINGS

[0023] The drawings described herein are used to provide further understanding of the present application, and form a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application, and do not constitute improper limitations on the present application. In the drawings:

[0024] Figure 1 is a flowchart of a data processing method according to an embodiment of the present application;

[0025] Figure 2 is a 5G system structure diagram based on a service interface according to an embodiment of the present application;

[0026] Figure 3 is another 5G system structure diagram based on a service interface according to an embodiment of the present application;

[0027] Figure 4 is a schematic diagram of a network interworking scheme according to an embodiment of the present application;

[0028] Figure 5 is a schematic diagram of another network interworking scheme according to an embodiment of the present application;

[0029] Figure 6 is a schematic diagram of another network interworking scheme according to an embodiment of the present application;

[0030] Figure 7 is a network topology display diagram according to an embodiment of the present application;

[0031] Figure 8 is a flowchart of another data processing method according to an embodiment of the present application;

[0032] Figure 9 is a structural diagram of a data processing device according to an embodiment of the present application;

[0033] Figure 10 This is a hardware structure block diagram of a computer terminal according to a data processing method of an embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0035] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0036] According to an embodiment of the present application, a method embodiment of a data processing method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0037] Figure 1 is a flow chart of a data processing method according to an embodiment of the present application, such as Figure 1 As shown, the method includes the following steps:

[0038] Step S102, obtain the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device, wherein the first information includes at least: the network service information, network connection information and device status information of the first service network element, the third information includes at least: the network service information, network connection information and device status information of the second service network element, the second information includes at least: the network connection information and device status information of the first network hardware device, and the fourth information includes at least: the network connection information and device status information of the second network hardware device.

[0039] It should be noted that according to the 3GPP standard, the 5G network architecture is decoupled and integrated according to its functional role, and is divided into multiple operation modules, namely 5G service network elements, such as AMF, SMF, UPF, UDM, AUSF, NEF, PCRF, NRF, etc. The 5G system structure diagram based on the service interface is as follows: Figure 2 As shown in the figure, the various service modules of the 5G architecture are disassembled. In actual deployment, some services can be selectively deployed according to business needs. The relevant interface protocols are specified for the interaction between the various service modules. Figure 3 , various types of service network elements may have different deployment methods and locations due to different economic costs and business scenarios. For customers with low cost budgets, they can simply deploy specific service modules. For scenarios with high performance requirements, they can choose to sink more service network elements into the enterprise private network and deploy the same type of service in a distributed manner. This also brings about the problem of chaotic on-site deployment architecture and inability to perform targeted operation and maintenance. C-IWF supports network interoperability solutions for various network application scenarios, such as Figure 4 , only deploy UPF in the enterprise park, such as Figure 5 , UPF, AMF, and SMF can be deployed in enterprise parks, such as Figure 6 , available in Figure 5 Based on this, network elements such as AUSF and UDM are simultaneously deployed in the enterprise campus private network environment. Service network elements deployed on the operator's public network are 5G core network elements in the trusted zone, while service network elements deployed on the enterprise's private network are 5G customized network elements in the untrusted zone. Both service network elements in the trusted and untrusted zones must communicate through the C-IWF. These network elements may also come from different vendors, and the C-IWF also supports interoperability between different vendor protocols.

[0040] Specifically, by parsing the PFCP protocol in the N4-P subsystem, network service information, network connection information, and device status information of the SMF interacting with the sinking edge UPF are extracted. Network connection information and device status information of hardware devices such as switches, routers, and firewalls in the private network are collected using SNMP, LLDP, or ARP protocols.

[0041] The SBI-P subsystem analyzes HTTP2 packets to obtain network service information, network connection information, and device status information for large-scale 5GCs interacting with network elements such as AMF, SMF, and UDM. In public networks, SNMP, LLDP, or ARP protocols are also used to collect network connection information and device status information for hardware devices.

[0042] Network service information includes but is not limited to: 1. Service type and function: indicates the specific functions and types provided by the service network element (such as AMF, SMF, UPF, etc.). 2. Service interface: includes the interface type provided by the service network element for external interaction, such as SBI interface, N4 interface, etc., as well as interface-related protocols and message formats. 3. Service status: the service operation status of the network element, such as available, degraded, faulty, etc. 4. Quality of service (QoS) parameters: including performance indicators such as service delay, throughput, packet loss rate, etc. 5. Service configuration information: such as service policy configuration, user plane path configuration, etc. 6. Security settings: including security-related configurations such as authentication, encryption, and access control.

[0043] Network connection information includes but is not limited to: 1. Physical connection information: including connected physical devices (such as switches, routers, cables, etc.) and the connection relationship between these devices. 2. Logical connection information: logical connections between service network elements in the network, as well as the path and status of the connection. 3. Communication protocol: used to describe the protocol used for communication between different network elements. 4. Interface address and port number: network interface address and port number used in the connection, such as IP address, SBI interface address, N4 interface address, etc. 5. Traffic statistics: traffic information passing through the connection, including upstream and downstream traffic, peak traffic, average traffic, etc. 6. Delay and packet loss rate: delay time on the connection path and packet loss rate of data packets. 7. Connection history and events: records the change history of connection status, as well as events related to the connection (such as connection establishment, disconnection, failure, etc.).

[0044] Device status information includes, but is not limited to, the following: 1. Device ID and Model: The device's unique identifier and model information. 2. Device Location: The device's deployment location, including both physical and logical locations. 3. Device Status: The device's operating status, such as online, offline, and restarting. 4. Device Performance Data: CPU usage, memory usage, and disk space usage. 5. Device Logs and Event Records: Records device operation logs and events, including software upgrades, fault information, and security incidents.

[0045] Step S104: Based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.

[0046] The service network element information (first and third information) and network hardware device information (second and fourth information) obtained from the C-IWF are merged and processed. For the same device or network element, ensure that information collected from different sources is integrated into a complete record. Unify the data format, such as converting all information into JSON or XML format, to facilitate subsequent processing. At the same time, standardize the representation of key fields, such as device status information and network connection information, to ensure data consistency and comparability.

[0047] The first service network element, the first network hardware device, the second service network element, and the second network hardware device are used as nodes in the topology diagram. Each node contains its basic information, such as name, type, status, and location. Based on the collected network connection information, define the connection relationship between nodes. Different line types or colors can be used to represent the type and status of the connection, such as secure connection, abnormal connection, etc. Determine the layout of the topology diagram to ensure that the diagram is clear and intuitive. Automatic layout algorithms, such as force-directed layout and tree layout, can be used to optimize according to the characteristics of the network structure. Figure 7 This is a network topology display diagram according to an embodiment of the present application.

[0048] Specifically, an interactive network topology view is created, where users can view detailed information or adjust the view by clicking or dragging nodes. Color coding or icons are used to indicate different states, such as green for normal, yellow for warning, and red for serious faults. For service network elements, key performance indicators such as the number of sessions and traffic handled can also be displayed. In the topology view, the size and direction of data traffic can be represented by dynamic arrows or line widths, intuitively displaying the data flow in the network. If a fault point is found during data filtering and analysis, it should be clearly marked in the topology map to facilitate operation and maintenance personnel to quickly locate the problem. The function of viewing historical data is provided, so that users can query the network status at a certain point in the past, compare historical trends, and discover potential performance problems or security threats.

[0049] According to the above steps, the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device are obtained, wherein the first information includes at least: the network service information, network connection information and device status information of the first service network element, the third information includes at least: the network service information, network connection information and device status information of the second service network element, the second information includes at least: the network connection information and device status information of the first network hardware device, and the fourth information includes at least: the network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, thereby achieving the purpose of intercommunication display of service network elements in the trusted area of ​​5G network and service network elements in the non-trusted area, thereby achieving the technical effect of helping technical personnel to intuitively understand the network structure.

[0050] The following Figure 1 The steps shown are exemplified and explained.

[0051] According to some optional embodiments of the present application, obtaining the first information of the first service network element in the private network and the second information of the first network hardware device in the signaling intercommunication gateway C-IWF, the third information of the second service network element in the public network and the fourth information of the second network hardware device can be achieved by the following method: obtaining the network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording the time when the signaling interaction occurs, the network element information of the source network element that generates the signaling and the network element information of the destination network element that receives the signaling, the signaling type, the signaling content, the communication connection status, and the performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extracting the first information of the first service network element and the third information of the second service network element in the network element signaling intercommunication record.

[0052] Obtain the timestamp of each signaling interaction, which helps to organize the signaling data in chronological order and perform time series analysis. By parsing the signaling records, extract the network element information of the source network element and the destination network element, including the Internet Protocol address (IP address), network interface, service type, etc. This will be used to identify the identity and function of the service network element. Determine the type of signaling, such as N1, N2, N4, etc., which helps to understand the purpose and function of the signaling interaction. Parse the actual content of the signaling and extract key fields, such as session ID, user ID, service request, etc., for analyzing the specific information of the signaling. Monitor the connection status during the signaling interaction process, such as connection establishment, maintenance, interruption, etc., to evaluate the stability of the network. Collect performance indicators related to signaling interaction, such as latency, throughput, error rate, etc., for monitoring and optimization of network performance.

[0053] In summary, we classify and extract relevant information about the first serving NE in the private network from the NE signaling intercommunication records. This includes information about the source NE, such as its IP address, network interface, and service type, as well as performance data and signaling content from its interactions. Similarly, we extract relevant information about the second serving NE in the public network, focusing on the time, type, content, and performance data of its signaling interactions.

[0054] After obtaining the above information, the relationship between the source and destination network elements can be analyzed to determine the data flow path and signaling interaction pattern between them. Based on the collected performance data, the efficiency and quality of signaling interaction between private and public networks can be evaluated to identify potential performance bottlenecks. By analyzing signaling content and communication connection status, network faults and anomalies such as signaling errors and connection interruptions can be detected.

[0055] According to other optional embodiments of the present application, obtaining the first information of the first service network element in the private network in the signaling intercommunication gateway C-IWF and the second information of the first network hardware device, the third information of the second service network element in the public network and the fourth information of the second network hardware device can be achieved by the following method: through at least one of the simple network management protocol SNMP, the link layer discovery protocol LLDP, and the address resolution protocol ARP, the second information of the first network hardware device and the fourth information of the second network hardware device are collected, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.

[0056] Using the get command of SNMP, the system information of the device is queried through the device management IP address, such as the system name, system location, system contact, etc., so as to determine the first network hardware device and the second network hardware device. Using the get, getnext or walk command of SNMP, the MIB (Management Information Base) tree of the device is queried, and the performance data such as CPU utilization, memory utilization, port state, error packet count, etc. are collected as part of the second information and the fourth information. Through SNMP, the configuration information of the device is obtained, including IP address configuration, VLAN information, routing information, etc., which helps to understand the role and connection relationship of the device in the network.

[0057] Through C-IWF or network monitoring device, LLDP packet is listened to, and the MAC address, port ID, device type, device name, etc. of the device are extracted, which are used to construct the connection relationship diagram between network devices. The LLDP packet can also carry interface state information such as port speed, duplex mode, link state, etc., which are important components of the second information and the fourth information.

[0058] ARP (Address Resolution Protocol) is used to resolve IP address to MAC address. By analyzing the ARP table, the direct connection relationship between devices can be understood. By analyzing the ARP table on C-IWF or network monitoring device, the IP address and MAC address of the directly connected device are identified, so as to understand the direct connection between the first network hardware device and the second network hardware device. Through the number of ARP requests and responses, the active state of the device can be indirectly understood, such as whether the device is online, whether the network connection is stable, etc.

[0059] In some optional embodiments of the present application, before the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed based on the first information, the second information, the third information and the fourth information, the following steps can be further performed: the first information, the second information, the third information and the fourth information are respectively subjected to denoising processing and deduplication processing; the data format of different data sources in the processed first information, second information, third information and fourth information is respectively converted into a target format; the index data in the converted first information, second information, third information and fourth information is subjected to standardization processing.

[0060] The goal of denoising is to remove useless or erroneous information from data and improve data quality. This includes identifying and removing values ​​outside the normal range, such as abnormally high CPU utilization, which may indicate measurement errors. Data items that do not contain valuable information, such as useless information in device logs, can also be removed. Erroneous data entries, such as those with incorrect IP address formats, can be corrected based on context or predefined rules.

[0061] Deduplication is the process of removing duplicate data, ensuring the uniqueness of each data item and avoiding bias in analysis. This can be achieved by selecting one or more key fields (such as a device's MAC address, IP address, or network element ID), comparing data items, and removing duplicate records. For multiple data records for the same device, the latest or most relevant timestamp entry is retained and all other duplicates are deleted.

[0062] Unify data formats from different sources for unified processing and presentation. Target formats include, but are not limited to: JSON: easy to read and parse, widely used for data exchange; XML: structured and extensible, suitable for complex data structures; CSV: simple and versatile, easy to import into data processing software.

[0063] Normalization ensures comparability of metrics from different sources and helps unify analytical standards. This includes converting all performance metrics to a consistent unit, such as converting data throughput from kB / s to MB / s. Scaling or shifting values ​​to fall within a specific range, such as converting CPU utilization from a percentage to a value between 0 and 1. Metric values ​​outside the normal range are corrected or flagged to avoid compromising the accuracy of data analysis.

[0064] As some optional embodiments of the present application, based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed, which can be achieved by the following method: the first service network element, the first network hardware device, the second service network element and the second network hardware device are used as nodes; according to the network connection information in the first information, the connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device is determined, and the connection relationship is used as an edge; according to the network connection information in the second information, the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device is determined, and the connection relationship is used as an edge ; According to the network connection information in the third information, determine the connection relationship between the second service network element and the first service network element, the first network hardware device and the second network hardware device, and use the connection relationship as an edge; According to the network connection information in the fourth information, determine the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device, and use the connection relationship as an edge; According to the nodes and edges, construct a network topology diagram, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; Use a graphical tool to convert the network topology diagram into a visual graph and display the visual graph.

[0065] Utilize the network connection information in the first information of the first service network element to determine its connection relationship with other network hardware devices or service network elements, and add labels to the edges, such as N4-PFCP (for the connection between the first service network element and the sinking edge UPF) or other protocol types to indicate the connection type. Based on the network connection information in the second information of the first network hardware device, determine the connection relationship with the first service network element, the second service network element or the second network hardware device, and similarly add appropriate protocol or interface type labels to the edges. Analyze the network connection information in the third information of the second service network element to determine its connection relationship with the first service network element, the first network hardware device or the second network hardware device, and represent it in the graph. Based on the network connection information in the fourth information of the second network hardware device, determine its connection relationship with the first service network element, the first network hardware device or the second service network element, and present it in the graph. Use a graph data structure (such as a graph database or an adjacency matrix) to store node and edge information and construct a network topology graph. Ensure that the edges between each node and other nodes directly connected to it are correctly reflected. In the topology diagram, the information contained in each node should be a complete description that integrates all related information (such as first information, second information, etc.), including but not limited to the status, performance data, network interface information, etc. of the device.

[0066] Use visualization features in software such as Graphviz, Gephi, or specialized network management software to convert the constructed network topology diagram into a readable graph. In the visualization, use different icons or colors to represent different types of nodes (such as service network elements and network hardware devices), and use different line types or colors to represent different types of connections (such as control planes, user planes, and hardware connections). Add interactive elements to the graph, such as hovering the mouse to display node details and clicking on edges to display connection details, to enhance the user experience and ease of information acquisition. Display the constructed network topology diagram graphically to operations and maintenance personnel or network managers through a web interface, console, or specialized display software, allowing them to quickly understand and analyze the network structure.

[0067] Through the above method, the network topology diagram not only intuitively displays the connection relationship between the first service network element, the first network hardware device, the second service network element and the second network hardware device, but also integrates the detailed information of each node, providing strong support for network management and troubleshooting.

[0068] In some optional embodiments of the present application, after displaying the visualization graph, the following steps may be performed: when there is an abnormal node in the visualization graph that meets the preset requirements, the color of the abnormal node is changed from the first preset color in the normal state to the second preset color.

[0069] Define the first preset color as the color of the node in normal status, usually green or blue, to represent healthy and normal operation. Define the second preset color as the color in abnormal status, usually red, orange or yellow, to indicate warnings or serious faults. Analyze the node status information in the network topology diagram, and determine which nodes have abnormalities based on the preset anomaly detection rules. Anomaly detection rules may be based on the following aspects: Performance indicators: such as CPU utilization, memory utilization, packet loss rate, etc. that are beyond the normal range. Network connection status: such as device disconnection, connection interruption, etc. Signaling interaction: such as abnormal signaling interaction frequency, incorrect signaling content, etc. Security alerts: such as alerts issued by security devices such as intrusion detection systems (IDS) or firewalls.

[0070] For each node that is judged to be abnormal, its color in the visualization graph is changed from the first preset color (normal color) to the second preset color (abnormal color). This color change can be achieved through programming languages ​​and visualization libraries (such as Python's NetworkX, Matplotlib or JavaScript's D3.js).

[0071] Ensure that visualizations reflect changes in network status in real time, automatically detecting and updating node colors as new data arrives. This typically requires integrating a real-time data update mechanism into the graphical display. When users hover over or click on an abnormal node, detailed information such as the cause of the anomaly, duration, and impact area is displayed, allowing network administrators to quickly locate the problem and take appropriate action.

[0072] In summary, highlighting abnormal nodes in the network topology through color coding can not only help network managers quickly identify problems in the network, but also promote timely response and troubleshooting, thereby improving network stability and security.

[0073] As other optional embodiments of the present application, after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information, the following steps can also be performed: using deep packet inspection to monitor the network traffic of the first service network element and the second service network element, and generating a network traffic report; using a pre-trained machine learning model to predict faults in the network traffic of the first service network element and the second service network element, and obtaining the prediction results output by the pre-trained machine learning model.

[0074] Deploy a DPI system or integrate DPI functions into the C-IWF to capture the inbound and outbound traffic of the first service network element (such as AMF, SMF) and the second service network element (such as UPF). Parse the header and payload of each data packet to identify information such as protocol type, source / destination IP address, port number, and possible business data. Classify and count traffic based on metadata, such as TCP / UDP traffic, HTTP / HTTPS traffic, DNS traffic, etc. Analyze traffic trends, including peak traffic detection, abnormal traffic identification, traffic pattern analysis, etc. Generate network traffic reports automatically or on demand. The reports should include but not be limited to key indicators such as total traffic volume, traffic peaks, protocol distribution, and abnormal traffic warnings. Reports can be real-time, used to monitor current network conditions, or historical, used to analyze traffic trends and optimize network configurations.

[0075] Collect historical network traffic data from the DPI system or C-IWF and combine it with data from other sources such as network logs and signaling records. Label known fault events and use them as data labels for model training. Use labeled datasets to train machine learning models, such as random forests, support vector machines, or deep learning models (such as LSTM). Select the best-performing model for pre-training to ensure that the model can accurately predict future network failures. Input the network traffic data collected in real time from the first service network element and the second service network element into the pre-trained machine learning model. Based on the input traffic characteristics, the model predicts the probability of failure or the specific type of failure that may occur in the future.

[0076] Predictions generated by pretrained machine learning models may include the likelihood of a failure, predicted time of occurrence, fault type, and impact range. These predictions should be updated in real time or regularly to facilitate fault prevention and resource scheduling by network operations personnel. Based on the predictions generated by pretrained machine learning models, an early warning system can be established to automatically issue alerts when the predicted probability exceeds a preset threshold. Integration with network automation tools can achieve a closed-loop process from prediction to early warning and automated response, such as automatically adjusting network bandwidth or initiating backup routes.

[0077] By combining DPI's real-time traffic monitoring with pre-trained machine learning models' fault prediction, network managers can obtain more comprehensive and forward-looking information about network health, thereby improving network stability and user experience.

[0078] Figure 8 is a flow chart of another data processing method according to an embodiment of the present application. Figure 8 As shown, the method includes the following steps:

[0079] Step S801: data collection.

[0080] The core modules of the C-IWF are the control plane's N4-P and SBI-P subsystems. The N4-P subsystem handles the PFCP control protocol between the forwarding large-scale network SMF and the downlink edge UPF. It parses and extracts PFCP message protocols, replacing key protocol fields to hide the N4 address of the large-scale network SMF. It also analyzes PFCP session information, modifies key information such as the PDR / FAR and vendor-specific fields, and performs N4 decoupling and adaptation between SMFs and UPFs from different vendors. The SBI-P subsystem handles HTTP2 signaling between the forwarding large-scale network 5GC's AUSF / UDM / AMF / NRF and the downlink private network 5GC's AMF / SMF. It parses and extracts HTTP2 message protocols, replacing fields such as the Callback URI, FQDN, and Location to hide the SBI interface address of the large-scale network 5GC. The C-IWF stores network element signaling interconnection records for a period of time, so the C-IWF stores the conversion addresses of the enterprise private network and the telecommunications network, and is the only one that can communicate with the two networks. Various service network element information and connection information of the enterprise private network and the telecommunications network can be obtained from the C-IWF.

[0081] Furthermore, C-IWF collects network connection relationships of hardware devices such as switches, firewalls, and routers through SNMP protocols, LLDP protocols, ARP protocols, etc.

[0082] Step S802: data storage and indexing.

[0083] The network service and connection information retrieved by the C-IWF is stored in an appropriate database for subsequent query and analysis. During this process, appropriate indexes need to be created to improve data retrieval efficiency. Common indexing methods include B-tree indexes, hash indexes, and full-text indexes.

[0084] Step S803: data filtering.

[0085] The network environment is complex and ever-changing, with vast amounts of data that may contain significant noise. The purpose of data filtering is to extract valuable information and eliminate redundant or irrelevant data. The filtering process typically involves operations such as data cleaning, deduplication, and format conversion. For example, the C-IWF system may collect a large amount of device logs and traffic data. Data filtering can be used to identify information related to the network topology, such as the connectivity between hardware devices like switches and routers, and the deployment node information of service network elements in the 5G core network. Effective data filtering ensures that the displayed network topology diagram is accurate and concise, avoiding data overload that can hinder understanding and analysis.

[0086] Further convert the data formats of different data sources into a unified format, such as JSON, XML, etc., for unified processing.

[0087] Further standardize the indicator data of different equipment or systems, unify the dimensions and units, and ensure data comparability.

[0088] Further merge related information from different data sources, such as merging status data, performance data, and log data of the same device into one record.

[0089] Step S804: data display.

[0090] After data collection and filtering, the information needs to be presented graphically so that technicians and managers can quickly understand the network structure. Common display formats include network topology diagrams, hierarchical structure diagrams, and data flow diagrams. These diagrams not only need to display network devices and their connections, but also provide real-time monitoring and historical analysis of key performance indicators, providing key data such as network traffic distribution, performance bottlenecks, and possible failure points. The displayed network topology diagram can adapt to different display requirements (such as real-time monitoring and historical analysis). For example, graphical tools can create interactive topology diagrams, allowing users to click on a device to view its detailed information.

[0091] Step S805: topology analysis.

[0092] C-IWF has the traffic statistics function of enterprise private networks and large networks. Using DPI (Deep Packet Inspection) real-time traffic analysis, it can monitor real-time changes in network traffic, identify traffic peaks and abnormal traffic, and thus provide more accurate network performance analysis and optimization suggestions.

[0093] Furthermore, this embodiment has a fault prediction and warning module. Through machine learning and data mining technology, the fault prediction and warning module can identify potential network problems in advance, provide warning information, and help operators take measures before problems occur.

[0094] Furthermore, this embodiment has an intelligent report generation module, which can automatically generate detailed network reports according to user needs, including performance analysis, fault records and optimization suggestions, and supports regular or on-demand report generation.

[0095] Furthermore, this embodiment has a multi-dimensional data analysis module, which can perform in-depth analysis of network data, including time series analysis, geographic distribution analysis, etc., to help users understand network performance and trends from different perspectives.

[0096] Furthermore, it has a user experience monitoring module, which collects usage data of user devices, analyzes the impact of network service quality (QoS) on user experience, and provides optimization suggestions to improve user satisfaction.

[0097] The network topology is shown in the figure below: Figure 8 As shown, it shows the 5G service network elements deployed in enterprise private networks and large networks. It can also intuitively see the interface problems of network element interaction, and use colors to show whether there are any abnormalities in service network elements and interfaces, which makes it easier for operation and maintenance personnel to quickly locate problems.

[0098] 5G network topology display is an indispensable part of modern network management. It not only provides an intuitive view of the network structure but also supports real-time monitoring, troubleshooting, and performance optimization. Through advanced data collection, filtering, analysis, and visualization technologies, 5G network topology display can help operators and technicians better manage and optimize complex network environments.

[0099] Figure 9 is a structural diagram of a data processing device according to an embodiment of the present application, such as Figure 9 As shown, the device includes:

[0100] The acquisition module 91 is used to obtain first information of the first service network element in the private network of the signaling intercommunication gateway C-IWF and second information of the first network hardware device, third information of the second service network element in the public network and fourth information of the second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device.

[0101] The display module 92 is used to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.

[0102] Optionally, the acquisition module 91 is also used to perform the following steps: obtaining the network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording the time when the signaling interaction occurs, the network element information of the source network element that generates the signaling and the network element information of the destination network element that receives the signaling, the signaling type, the signaling content, the communication connection status, and the performance data of the signaling interaction, and the network element information includes at least one of the following: Internet Protocol address, network interface, service type; extracting the first information of the first service network element and the third information of the second service network element from the network element signaling intercommunication record.

[0103] Optionally, the acquisition module 91 is also used to perform the following steps: collecting the second information of the first network hardware device and the fourth information of the second network hardware device through at least one of the Simple Network Management Protocol SNMP, the Link Layer Discovery Protocol LLDP, and the Address Resolution Protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.

[0104] Optionally, the data processing device is also used to perform the following steps before displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information: denoising and deduplicating the first information, the second information, the third information and the fourth information respectively; converting the data formats of different data sources into the target format in the processed first information, the second information, the third information and the fourth information respectively; and standardizing the indicator data in the converted first information, the second information, the third information and the fourth information.

[0105] Optionally, the display module 92 is further used to perform the following steps: taking the first service network element, the first network hardware device, the second service network element and the second network hardware device as nodes; determining the connection relationship between the first service network element and the first network hardware device, the second service network element and the second network hardware device according to the network connection information in the first information, and taking the connection relationship as an edge; determining the connection relationship between the first network hardware device and the first service network element, the second service network element and the second network hardware device according to the network connection information in the second information, and taking the connection relationship as an edge; determining the connection relationship between the second service network element and the first service network element, the first service network element and the second network hardware device according to the network connection information in the third information. The connection relationship between the network hardware device and the second network hardware device is determined, and the connection relationship is used as an edge; based on the network connection information in the fourth information, the connection relationship between the second network hardware device and the first service network element, the second service network element and the first network hardware device is determined, and the connection relationship is used as an edge; based on the nodes and the edges, a network topology diagram is constructed, wherein the first service network element node in the network topology diagram includes the first information, the first network hardware device node includes the second information, the second service network element node includes the third information, and the second network hardware device node includes the fourth information; using a graphical tool to convert the network topology diagram into a visual graph and display the visual graph.

[0106] Optionally, the data processing device is further configured to, after displaying the visualization graph, perform the following steps: when there is an abnormal node in the visualization graph that meets preset requirements, change the color of the abnormal node from a first preset color in normal state to a second preset color.

[0107] Optionally, the data processing device is also used to perform the following steps after displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information: using deep packet inspection to monitor the network traffic of the first service network element and the second service network element, and generating a network traffic report; using a pre-trained machine learning model to predict faults in the network traffic of the first service network element and the second service network element, and obtain the prediction results output by the pre-trained machine learning model.

[0108] It should be noted that the above Figure 9 The modules in the embodiment can be program modules (for example, a set of program instructions that implement a specific function) or hardware modules. For the latter, they can be expressed in the following forms, but are not limited to these: the expression form of each of the above modules is a processor, or the functions of each of the above modules are implemented by a processor.

[0109] It should be noted that Figure 9 The preferred implementation of the embodiment shown can be found in Figure 1 The relevant description of the illustrated embodiment will not be repeated here.

[0110] Figure 10 FIG1 shows a hardware structure block diagram of a computer terminal for implementing a data processing method. Figure 10 As shown, the computer terminal 100 may include one or more (illustrated as 1002a, 1002b, ..., 1002n in the figure) processors 1002 (the processor 1002 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 1004 for storing data, and a transmission module 1006 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It will be understood by those skilled in the art that Figure 10 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 10 More or fewer components than shown, or with Figure 10 Different configurations shown.

[0111] It should be noted that the one or more processors 1002 and / or other data processing circuits described above may generally be referred to herein as "data processing circuitry." The data processing circuitry may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuitry may be a single, independent processing module, or may be incorporated in whole or in part into any of the other components of the computer terminal 100. As described in the embodiments of the present application, the data processing circuitry serves as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0112] The memory 1004 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the data processing method in the embodiment of the present application. The processor 1002 executes various functional applications and data processing by running the software programs and modules stored in the memory 1004, that is, implementing the above-mentioned data processing method. The memory 1004 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 1004 may further include a memory remotely located relative to the processor 1002, and these remote memories may be connected to the computer terminal 100 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0113] The transmission module 1006 is configured to receive or transmit data via a network. A specific example of the aforementioned network may include a wireless network provided by the communications provider of the computer terminal 100. In one embodiment, the transmission module 1006 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the transmission module 1006 may be a radio frequency (RF) module, which is configured to communicate with the Internet wirelessly.

[0114] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 100 .

[0115] It should be noted that, in some optional embodiments, the above Figure 10 The computer terminal shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. Figure 10 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the computer terminal described above.

[0116] It should be noted that Figure 10 The computer terminal shown is used to execute Figure 1 The data processing method shown, therefore the relevant explanations in the execution method of the above command are also applicable to the electronic device and will not be repeated here.

[0117] An embodiment of the present application further provides a non-volatile storage medium, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the above data processing method.

[0118] A program for a non-volatile storage medium to perform the following functions: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, displaying the first service network element, the first network hardware device, the second service network element and the second network hardware device.

[0119] An embodiment of the present application further provides an electronic device, comprising: a memory and a processor, wherein the processor is configured to run a program stored in the memory, wherein the above data processing method is executed when the program is run.

[0120] The processor is used to run a program that performs the following functions: obtaining first information of a first service network element in a private network in a signaling intercommunication gateway C-IWF and second information of a first network hardware device, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information and device status information of the first service network element, the third information includes at least: network service information, network connection information and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.

[0121] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0122] In the above embodiments of the present application, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0123] In the above-mentioned embodiments of the present application, the collected information is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary protection measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0124] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of the units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0125] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0126] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0127] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or the part that essentially contributes to the related art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server or a network device, etc.) to execute all or part of the steps of the method described in the embodiments of the present application. The aforementioned storage medium includes a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and various media that can store program codes.

[0128] The above only describes the preferred embodiments of the present application. It should be noted that, for those skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, which should also be considered as the protection scope of the present application.

Claims

1. A data processing method, characterized in that: include: Obtain first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information, and device status information of the first service network element, the third information includes at least: network service information, network connection information, and device status information of the second service network element, the second information includes at least: network connection information and device status information of the first network hardware device, and the fourth information includes at least: network connection information and device status information of the second network hardware device; Based on the first information, the second information, the third information and the fourth information, the first service network element, the first network hardware device, the second service network element and the second network hardware device are displayed.

2. The method according to claim 1, characterized in that Obtaining first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, including: Obtaining a network element signaling intercommunication record stored in the C-IWF, wherein the network element signaling intercommunication record includes: a timestamp for recording a signaling interaction occurrence time, network element information of a source network element generating the signaling, network element information of a destination network element receiving the signaling, a signaling type, signaling content, a communication connection status, and performance data of the signaling interaction, wherein the network element information includes at least one of the following: an Internet Protocol address, a network interface, and a service type; The first information of the first serving network element and the third information of the second serving network element are extracted from the network element signaling intercommunication record.

3. The method according to claim 1 or 2, characterized in that Obtaining first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, including: The second information of the first network hardware device and the fourth information of the second network hardware device are collected through at least one of the Simple Network Management Protocol SNMP, the Link Layer Discovery Protocol LLDP, and the Address Resolution Protocol ARP, wherein the first network hardware device and the second network hardware device include at least one of the following: a switch, a firewall, and a router.

4. The method according to claim 1, wherein Before displaying the first service network element, the first network hardware device, the second service network element, and the second network hardware device based on the first information, the second information, the third information, and the fourth information, the method further includes: performing denoising and deduplication processing on the first information, the second information, the third information, and the fourth information respectively; In the processed first information, the second information, the third information, and the fourth information, data formats of different data sources are converted into target formats respectively; The index data in the converted first information, the second information, the third information and the fourth information are standardized.

5. The method according to claim 1, wherein Displaying the first service network element, the first network hardware device, the second service network element, and the second network hardware device based on the first information, the second information, the third information, and the fourth information includes: The first service network element, the first network hardware device, the second service network element, and the second network hardware device are taken as nodes; based on the network connection information in the first information, a connection relationship between the first service network element and the first network hardware device, the second service network element, and the second network hardware device is determined, and the connection relationship is used as an edge; Determine, based on the network connection information in the second information, connection relationships between the first network hardware device and the first service network element, the second service network element, and the second network hardware device, and use the connection relationships as edges; Determine, based on the network connection information in the third information, a connection relationship between the second service network element and the first service network element, the first network hardware device, and the second network hardware device, and use the connection relationship as an edge; Determine, based on the network connection information in the fourth information, connection relationships between the second network hardware device and the first service network element, the second service network element, and the first network hardware device, and use the connection relationships as edges; Constructing a network topology graph based on the nodes and the edges, wherein a first service network element node in the network topology graph includes the first information, a first network hardware device node includes the second information, a second service network element node includes the third information, and a second network hardware device node includes the fourth information; The network topology diagram is converted into a visual graph using a graphical tool, and the visual graph is displayed.

6. The method according to claim 5, characterized in that After displaying the visualization graph, the method further includes: When an abnormal node that meets a preset requirement exists in the visualization graph, the color of the abnormal node is changed from a first preset color in a normal state to a second preset color.

7. The method according to claim 1, characterized in that After displaying the first service network element, the first network hardware device, the second service network element, and the second network hardware device based on the first information, the second information, the third information, and the fourth information, the method further includes: Monitor network traffic of the first service network element and the second service network element using deep packet inspection, and generate a network traffic report; Use a pre-trained machine learning model to predict faults in the network traffic of the first service network element and the second service network element, and obtain a prediction result output by the pre-trained machine learning model.

8. A data processing device, characterized in that: include: An acquisition module, configured to acquire first information of a first service network element in a private network and second information of a first network hardware device in a signaling interworking gateway C-IWF, third information of a second service network element in a public network and fourth information of a second network hardware device, wherein the first information includes at least: network service information, network connection information, and device status information of the first service network element; the third information includes at least: network service information, network connection information, and device status information of the second service network element; the second information includes at least: network connection information and device status information of the first network hardware device; and the fourth information includes at least: network connection information and device status information of the second network hardware device; A display module is used to display the first service network element, the first network hardware device, the second service network element and the second network hardware device based on the first information, the second information, the third information and the fourth information.

9. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored program, wherein when the program is executed, the device where the non-volatile storage medium is located is controlled to execute the data processing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that: include: A memory and a processor, wherein the processor is configured to run a program stored in the memory, wherein the program executes the data processing method according to any one of claims 1 to 7 when running.

11. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the data processing method according to any one of claims 1 to 7 is implemented.

Citation Information

Patent Citations

  • 5G core network topology discovery method and device based on signaling link

    CN112671565A

  • Message processing method and device, nonvolatile storage medium and electronic equipment

    CN117041211A