Route adding method based on natural language processing, electronic equipment and program product

Through the routing addition method based on natural language processing, the natural language commands entered by the user are automatically parsed, the routing configuration is generated, and the network connectivity check is carried out, which solves the problems of high complexity of routing configuration and lacks automated inspection in the existing technology, and realizes the Efficient and accurate routing configuration and network stability and security.

CN119484275APending Publication Date: 2025-02-18BEIJING TOPSEC NETWORK SECURITY TECH +2
View PDF 6 Cites 0 Cited by

Patent Information

Application Number
CN202411400968.3
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-09
Publication Date
2025-02-18

AI Technical Summary

Technical Problem

The existing technology is very complex when configuring routing, making it difficult for non-technical personnel to configure accurately, which can easily cause network failures. The existing technology lacks automated routing configuration and network connectivity check functions, resulting in instability and security risks of network operation. .

Method used

The routing addition method based on natural language processing is adopted to parse the user's natural language input information, automatically extract information related to routing configuration, generate routing configuration, and conduct network connectivity checks to ensure the correctness of the configuration and network stability.

Benefits of technology

Improve the efficiency and accuracy of routing configuration, reduce human errors, improve network stability and security, and enable dynamic adjustment of routing configuration to cope with changes in the network environment.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119484275A_ABST
    Figure CN119484275A_ABST
Patent Text Reader

Abstract

The invention provides a route adding method based on natural language processing, which comprises the following steps: analyzing input information from a user by using a natural language processing technology to obtain information related to route configuration; generating the routing configuration according to the information related to the routing configuration; starting a device related routing function according to the routing configuration; performing network connectivity check on the routing configuration to obtain a check result; and according to the check result, determining whether to issue the routing configuration to the device. The disclosure also provides an electronic device, a computer readable medium, and a computer program product. According to the method and the device, the user operation threshold is reduced, high expansibility and flexibility are provided, the method and the device are suitable for different network environments, the accuracy of routing configuration is improved, the routing configuration is dynamically adjusted according to the demand change of the user network environment, human errors and network fault risks are reduced, and the network connectivity is ensured.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to the field of network communication technology, and in particular to a route adding method based on natural language processing, an electronic device, a computer-readable medium, and a computer program product. Background Art

[0002] With the rapid development of science and technology, the network environment has become increasingly complex. When a new device is connected to the network, it is often necessary to configure multiple routes and enable different routing protocols. Due to the wide variety of network devices, the configuration methods of various types of devices vary greatly, and technicians must master the configuration methods of different devices. This not only increases the complexity of configuration work, but also prolongs the configuration time. At the same time, when non-technical personnel use network devices, they may introduce errors when configuring routes due to lack of in-depth understanding of the network structure, resulting in network paralysis or communication interruption.

[0003] In addition, after configuring the routing, manually checking the network connectivity and verifying the correctness of the configuration is also a complex task, especially when the network scale and the number of devices increase, the difficulty of troubleshooting increases further. Therefore, the prior art urgently needs an automated routing configuration method that can efficiently generate the routing configuration of the device and has a network connectivity check function to reduce human errors and improve the reliability of network operation. Summary of the invention

[0004] The embodiments of the present disclosure provide a route adding method based on natural language processing, an electronic device, a computer-readable medium, and a computer program product.

[0005] In a first aspect, an embodiment of the present disclosure provides a method for adding routes based on natural language processing, including: using natural language processing technology to parse input information from a user to obtain information related to the route configuration; generating a route configuration based on the information related to the route configuration; enabling device-related routing functions based on the route configuration; performing a network connectivity check on the route configuration to obtain a check result; and determining whether to send the route configuration to the device based on the check result.

[0006] In some embodiments, natural language processing technology is used to parse input information from a user to obtain information related to the routing configuration, including: receiving input information from a user; splitting the input information into independent words using word segmentation; deleting useless words from the independent words using part-of-speech tagging to obtain candidate words; performing named entity recognition on the candidate words and combining them with semantic analysis to obtain information related to the routing configuration.

[0007] In some embodiments, a network connectivity check is performed on the routing configuration to obtain a check result, including: sending a connectivity detection message to perform a connectivity detection on the device and the network, and generating a detection report; checking and analyzing the routing table of the device, verifying the consistency of the routing configuration, and generating a routing table consistency check report; checking and analyzing anomalies in the routing table, and generating an anomaly report; generating optimization tips for the routing configuration based on the detection report, the routing table consistency check report, and the anomaly report; collecting the detection report, the routing table consistency check report, the anomaly report, and the optimization tips to generate an inspection report, and the inspection result includes the inspection report.

[0008] In some embodiments, generating a routing configuration according to the information related to the routing configuration includes: selecting a matching routing configuration template according to the information related to the routing configuration; and generating a routing configuration of a matching device according to the selected routing configuration template.

[0009] In some embodiments, before using natural language processing technology to parse the input information from the user to obtain information related to the routing configuration, it also includes: receiving the input information from the user through the user interface of the firewall.

[0010] In some embodiments, before performing a network connectivity check on the routing configuration and generating an inspection report, it also includes: checking and analyzing the firewall rule configuration, verifying whether the firewall rule conflicts with the routing configuration, and generating a firewall rule inspection result; generating optimization tips for the firewall rule based on the firewall rule inspection result; and collecting the firewall rule inspection report and the optimization tips as part of the inspection result.

[0011] In some embodiments, based on the inspection result, determining whether to send the routing configuration to the device includes: displaying the inspection report on the user interface; in response to a user's instruction to send, sending the routing configuration to the device; or, in response to a user's update instruction, updating the routing configuration and the firewall rules according to the optimization tips for the routing configuration and the firewall rules in the inspection report, and sending the updated routing configuration to the device.

[0012] In a second aspect, an embodiment of the present disclosure provides an electronic device, comprising: one or more processors; a memory on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the route adding method based on natural language processing described in the first aspect of the embodiment of the present disclosure.

[0013] In a third aspect, an embodiment of the present disclosure provides a computer-readable medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for adding routes based on natural language processing described in the first aspect of the embodiment of the present disclosure is implemented.

[0014] In a fourth aspect, an embodiment of the present disclosure provides a computer program product, including a computer program or instructions, which, when executed by a processor, implements the route adding method based on natural language processing described in the first aspect of the embodiment of the present disclosure.

[0015] The disclosed embodiments use natural language processing technology, so users only need to use simple natural language commands to automatically parse and generate accurate routing configurations. This not only improves the efficiency of routing configuration, but also reduces the possibility of human input errors and improves the accuracy of the overall network configuration. Real-time network connectivity checks and dynamic adjustment functions can effectively respond to the ever-changing network environment and ensure network stability. This dynamic adjustment can not only handle network failures, but also optimize routing configurations according to actual network needs, improving the overall performance of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a flowchart of a route adding method based on natural language processing according to an embodiment of the present disclosure.

[0017] Figure 2 It is a schematic diagram of the composition of an electronic device according to an embodiment of the present disclosure.

[0018] Figure 3 is a block diagram of a route adding system based on natural language processing according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0019] In order to enable those skilled in the art to better understand the technical solution of the present disclosure, the technical solution of the present disclosure is described in detail below with reference to the accompanying drawings.

[0020] Example embodiments will be described more fully below with reference to the accompanying drawings, but the example embodiments may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. On the contrary, the purpose of providing these embodiments is to make the present disclosure thorough and complete and to enable those skilled in the art to fully understand the scope of the present disclosure.

[0021] In the absence of conflict, the various embodiments of the present disclosure and the various features therein may be combined with each other.

[0022] As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0023] The terms used herein are only used to describe specific embodiments and are not intended to limit the present disclosure. As used herein, the singular forms "a", "an" and "the" are also intended to include the plural forms, unless the context clearly indicates otherwise. It will also be understood that when the terms "comprising" and / or "made of" are used in this specification, the presence of the features, wholes, steps, operations, elements and / or components is specified, but the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or groups thereof is not excluded.

[0024] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present disclosure, and will not be interpreted as having an idealized or overly formal meaning unless explicitly defined as such herein.

[0025] In this disclosure, unless otherwise specified, the following technical terms should be understood as follows:

[0026] Natural Language Processing (NLP) is a branch of computer science and artificial intelligence that focuses on studying how computers understand, interpret, generate and process human natural language. NLP combines linguistics, statistics and machine learning techniques to enable computers to process and analyze large amounts of natural language data.

[0027] Routing configuration refers to the process of setting and managing data flow paths in network devices (such as firewalls, routers, etc.). It includes adding, modifying and deleting network routing entries, setting routing protocols (such as OSPF, BGP) and related parameters, and ensuring that data can be transmitted between different network nodes through the best path.

[0028] Network connectivity refers to the ability of different devices or nodes in a network to communicate with each other. Network connectivity check is a process used to verify whether the network routing configuration is correct and ensure that data can be successfully sent and received between nodes.

[0029] A firewall is a network security device or software that is located between the internal network and the external network and is used to monitor and control network traffic. It filters data packets entering or leaving the network through predefined security rules to prevent unauthorized access, malicious attacks, and other security threats, thereby protecting the security and integrity of the network.

[0030] A routing protocol is a communication rule used between network devices to dynamically share routing information, helping devices automatically determine the best data transmission path. Common routing protocols include: OSPF (Open Shortest Path First) and BGP (Border Gateway Protocol). OSPF is a link-state-based internal gateway routing protocol used to dynamically update routing information within the same autonomous system. BGP is an external gateway protocol used to exchange routing information between different autonomous systems, mainly used for routing selection in the Internet.

[0031] Ping (Packet Internet Groper) is a tool for testing network connectivity. It checks whether the target host is reachable by sending ICMP (Internet Control Message Protocol) EchoRequest messages and measures the round trip time (RTT) from the source host to the target host. Ping is used to detect whether the target device is reachable on the network; measure the network delay from the source to the target; and check the network packet loss rate and unstable connection.

[0032] Traceroute is a tool used to display the routing nodes from the source host to the target host. It tracks the path of each hop by sending ICMP, UDP (User Datagram Protocol) or TCP (Transfer Control Protocol) messages hop by hop to help locate bottlenecks and delays in the network. Traceroute is used to trace the path of data packets from source to destination; locate bottlenecks and delay points in the network; and confirm the network topology and routing paths of devices.

[0033] The present disclosure provides a route configuration and checking method based on natural language processing technology, which can automatically extract relevant key information according to the natural language command input by the user, generate and configure the corresponding route function. Subsequently, the generated route is checked for network connectivity to ensure the correctness of the configuration and the stability of the network.

[0034] The route adding method based on natural language processing disclosed in the present invention can solve the following problems:

[0035] Existing routing configuration methods have high technical requirements. It is difficult for non-technical personnel to accurately configure routing, which can easily cause network failures. Based on natural language processing technology, the present invention can automatically parse the natural language commands input by users, extract key routing configuration requirements, and automatically generate correct routing configurations, which reduces the difficulty of operation and significantly improves the accuracy of configuration.

[0036] Traditional device configuration relies on opening a large number of external interfaces, which may bring security risks. By integrating automatic routing configuration and inspection functions based on natural language processing into the firewall, the firewall can automatically parse the routing configuration requirements entered by the user and perform connectivity checks in real time while completing its core security protection tasks. Since these functions are integrated into the firewall, the dependence on external interfaces is reduced, which effectively improves the overall security of the device and reduces potential security risks.

[0037] As network environments and requirements are constantly changing, the present disclosure provides a real-time routing configuration check function. Through automated routing checks and network connectivity detection, routing configurations can be dynamically adjusted to ensure network stability and connectivity, thereby effectively reducing the risk of network failures and communication interruptions.

[0038] The present disclosure solves the problems of complex routing configuration, high network security risks, and high difficulty in network maintenance through an automated approach, thereby improving the efficiency and security of network management.

[0039] The present disclosure provides a route adding method based on natural language processing technology, which can automatically extract relevant key information according to the natural language commands input by the user, generate corresponding route configuration, and perform simulated network inspection before issuing the configuration to verify the validity of the configuration and ensure network connectivity and security. The system reduces human errors and improves the accuracy of configuration and the stability of the network through automated route configuration and inspection functions.

[0040] Figure 1 It is a flowchart of a route adding method based on natural language processing according to an embodiment of the present disclosure.

[0041] First, refer to Figure 1 The present disclosure provides a method for adding a route based on natural language processing, including:

[0042] S11, using natural language processing technology to parse input information from the user to obtain information related to the routing configuration;

[0043] S12. Generate a routing configuration according to the information related to the routing configuration;

[0044] S13, enabling device-related routing functions according to the routing configuration;

[0045] S14, performing a network connectivity check on the routing configuration to obtain a check result;

[0046] S15. Determine whether to send the routing configuration to a device based on the inspection result.

[0047] In some embodiments, using natural language processing technology to parse input information from a user to obtain information related to the routing configuration includes:

[0048] receiving input information from the user;

[0049] Splitting the input information into independent words using word segmentation;

[0050] Deleting useless words from the independent words by using part-of-speech tagging to obtain candidate words;

[0051] Named entity recognition is performed on the candidate words and combined with semantic analysis to obtain information related to the routing configuration.

[0052] In the embodiment of the present disclosure, the information related to the routing configuration includes but is not limited to: IP address, port number, protocol type, gateway, source address, destination address, and subnet mask.

[0053] In the embodiment of the present disclosure, word segmentation is used to break down the sentence input by the user into independent words. For example, "enable OSPF function, add a route from the 10.0.0.0 network segment to the 20.0.0.0 network segment, and the gateway is 10.0.0.1" is broken down into: enable, OSPF, function, add, route, 10.0.0.0, network segment, access, 20.0.0.0, gateway, 10.0.0.1.

[0054] In the embodiment of the present disclosure, unnecessary words (such as articles, prepositions, etc.) in the split words are identified and deleted through part-of-speech tagging, and key information such as main nouns and verbs are retained to improve the accuracy of generating routing configurations. For example, the candidate words that are finally retained are: OSPF, 10.0.0.0, access, 20.0.0.0, gateway, 10.0.0.1.

[0055] In the disclosed embodiment, after unnecessary words are deleted, named entity recognition is performed on the remaining candidate words, and key information related to the routing configuration is further extracted through semantic analysis. For example, words such as next hop, gateway, ospf, etc. are extracted to generate routing configuration.

[0056] In the embodiment of the present disclosure, the input information from the user is the user's natural language input.

[0057] Those skilled in the art should understand that the route adding method based on natural language processing disclosed in the present invention can identify the information input by the user. The route adding method receives the natural language input of the user, extracts keywords and semantic information using natural language processing technology (such as word segmentation, part-of-speech tagging, named entity recognition) to determine the network routing requirements; generates routes according to the natural language library based on the keywords (e.g., IP address, ospf, bgp, etc.) and semantic information (e.g., access to xxxx by xxxx) extracted from the natural language input. The natural language library may include syntactic analysis, semantic analysis, and word vector algorithms for mapping the extracted keywords and requirements to specific routing configurations.

[0058] In some embodiments, generating a routing configuration according to the information related to the routing configuration includes:

[0059] Selecting a matching routing configuration template according to the information related to the routing configuration;

[0060] Generate a routing configuration for a matching device according to the selected routing configuration template.

[0061] In the disclosed embodiment, the routing configuration template is a series of routing configuration templates predefined for network devices such as firewalls and routers. According to the parsing results (eg, IP address, protocol type, gateway, etc.), an appropriate template is selected to generate the routing configuration of the corresponding network device.

[0062] In the disclosed embodiment, the command template library stores various command templates for network devices such as firewalls and routers. These templates are converted into device-specific executable commands based on the generated routing configuration.

[0063] In the disclosed embodiment, after the routing configuration is generated, an appropriate template is called from a command template library according to the type of device (such as a router, a firewall, a switch, etc.) to convert the routing configuration into a routing configuration command executable by the device.

[0064] Those skilled in the art will understand that the method will require the routing function to be enabled to generate commands by calling relevant command templates according to the command template library in the device. Specifically, the routing information is parsed through semantic analysis, and the relevant command templates in the command template library are called to generate device configuration commands and send them to the device.

[0065] In some embodiments, enabling device-related routing functions according to the routing configuration includes:

[0066] According to the routing configuration, calling a command template library to generate a routing configuration command for the device;

[0067] Sending the generated routing configuration command to the device;

[0068] The device executes the routing configuration command to enable the routing function related to the device.

[0069] Those skilled in the art will understand that the method enables the xx routing function. If the semantics indicates access through xx routing, the corresponding routing function is enabled, access to IP2 by IP1 is split, a routing protocol with xx enabled is generated, and a route from IP1 to IP2 is generated.

[0070] In some embodiments, performing a network connectivity check on the routing configuration to obtain a check result includes:

[0071] Sending a connectivity detection message to detect the connectivity between the device and the network, and generating a detection report;

[0072] Checking and analyzing the routing table of the device, verifying the consistency of the routing configuration, and generating a routing table consistency check report;

[0073] Checking and analyzing abnormalities in the routing table and generating an abnormality report;

[0074] Generate optimization tips for the routing configuration according to the detection report, the routing table consistency check report and the abnormal situation report;

[0075] The detection report, the routing table consistency check report, the abnormal situation report and the optimization prompt are collected to generate an inspection report, and the inspection result includes the inspection report.

[0076] In the embodiment of the present disclosure, sending a connectivity detection message to detect connectivity between the device and the network and generating a detection report includes:

[0077] Select the matching connectivity detection tool;

[0078] Using the connectivity detection tool to send the connectivity detection message to the device;

[0079] Collecting response messages from the device;

[0080] Recording the response message as a detection result;

[0081] Analyzing the detection result to generate an analysis result;

[0082] The detection results and the analysis results are collected to generate the detection report.

[0083] In the embodiment of the present disclosure, selecting a matching connectivity detection tool includes: selecting a matching connectivity detection tool according to the type of the device and the network environment.

[0084] In the embodiment of the present disclosure, the connectivity detection tool includes but is not limited to Ping and Traceroute.

[0085] In the disclosed embodiment, Ping sends multiple ICMP Echo Request messages and sets a fixed number of messages, wherein the number of messages is 4 or 10.

[0086] In the disclosed embodiment, Traceroute sends UDP or ICMP messages with gradually increasing TTL (Time To Live) to display the path tracing of the intermediate nodes that the data packet passes through.

[0087] In the disclosed embodiment, Ping records the round trip time (RTT), packet loss rate, and device response status in the ICMP Echo Reply message.

[0088] In the disclosed embodiment, Traceroute collects response messages returned by each node, and records the intermediate node path and delay information of each node.

[0089] In the embodiment of the present disclosure, the detection report includes: collected detection results and analysis results of the detection results.

[0090] In the disclosed embodiment, the detection report not only displays the collected original detection results, but also includes the results after analyzing these results.

[0091] In the disclosed embodiment, the detection result includes but is not limited to: the reachability of the device, network delay, packet loss rate, and path tracing.

[0092] In the embodiments of the present disclosure, the analysis results include but are not limited to:

[0093] When the device is unreachable, determine whether it is caused by a network outage, routing misconfiguration, or firewall restriction;

[0094] When response time is too long, determine whether it is caused by network congestion or latency issues;

[0095] When the packet loss rate is high, analyze the stability of the link;

[0096] When the path is abnormal, analyze the rationality of the data packet path;

[0097] When neighbor relationships cannot be established, analyze issues related to the dynamic routing protocol.

[0098] In some embodiments, checking and analyzing the routing table of the device, verifying the consistency of the routing configuration, and generating a routing table consistency check report include:

[0099] Obtaining a routing table of the device;

[0100] Parsing the generated routing configuration to generate expected routing entries;

[0101] comparing the routing table with the expected routing entry;

[0102] Generate the routing table consistency check result.

[0103] In some embodiments, checking and analyzing the abnormality in the routing table and generating an abnormality report include:

[0104] Obtaining a routing table of the device;

[0105] Detect routing conflicts or invalid routing and analyze the causes of conflicts or invalid routing, and record the list of problematic routing and the causes;

[0106] Check routing priorities and policy settings, and record priority or policy anomalies;

[0107] Analyze anomalies in dynamic routing protocols and record anomalies in dynamic routing protocols;

[0108] Collect and record all exceptions and generate exception reports.

[0109] In the disclosed embodiment, the abnormal situation report includes but is not limited to: a list of problematic routes and their causes, route priority or policy abnormalities, dynamic routing protocol abnormalities and their impacts, a detailed analysis of each abnormality and suggested repair measures.

[0110] In some embodiments, the device is a firewall.

[0111] In some embodiments, before using natural language processing technology to parse the input information from the user to obtain information related to the routing configuration, the method further includes:

[0112] The input information from the user is received through the user interface of the firewall.

[0113] In some embodiments, before performing a network connectivity check on the routing configuration and generating a check report, the method further includes:

[0114] Check and analyze firewall rule configuration, verify whether firewall rules conflict with routing configuration, and generate firewall rule check report;

[0115] Generating optimization tips for the firewall regulations according to the firewall rule inspection report;

[0116] The firewall rule inspection report and the optimization tips are collected as part of the inspection results.

[0117] Those skilled in the art will appreciate that the method performs connectivity detection on the generated network routes to ensure the validity of the firewall rule configuration (e.g., determining whether the firewall rules are correct or whether there are conflicts) and the stability of the network connection. The method may use a network connectivity testing tool such as Ping, Traceroute, etc.

[0118] In the embodiment of the present disclosure, after performing a network connectivity check on the routing configuration and generating a check report, the method further includes:

[0119] Collect network traffic data and log data;

[0120] Analyze the network traffic data and the log data to generate a network traffic analysis report and a log analysis report;

[0121] Generating optimization tips for the routing configuration and the firewall rules according to the network traffic analysis report and the log analysis report;

[0122] The network traffic analysis report, the log analysis report and the optimization tips are collected as part of the inspection report.

[0123] In the embodiments of the present disclosure, the network traffic data includes but is not limited to real-time traffic, bandwidth utilization, and application layer traffic; and the log data includes but is not limited to firewall logs, router logs, access records, and system health status.

[0124] Those skilled in the art should understand that the method can further optimize firewall and routing policies and improve network performance and security by analyzing network traffic and log data.

[0125] In some embodiments, determining whether to send the routing configuration to a device according to the inspection result includes:

[0126] Displaying the inspection report on the user interface;

[0127] In response to an instruction issued by a user, the routing configuration is issued to the device;

[0128] Or in response to an update instruction from a user, the routing configuration and the firewall rules are updated according to optimization tips for the routing configuration and the firewall rules in the inspection report, and the updated routing configuration is sent to the device.

[0129] In the disclosed embodiment, the user interface allows users to interact through a natural language interface and provides visual routing configuration management and network status feedback.

[0130] Those skilled in the art should understand that the method dynamically adjusts firewall rules and network routing configurations according to the connectivity detection results, handles rule conflicts and routing priority issues, and ensures the correctness of the configuration and the security of the network. The device sends a detection message based on the route to determine the accuracy of the route, and determines whether there is a conflict or an invalid route based on the device's policy or interface, and collects and feeds back the problematic routes. The problematic routes and the routes that cause network interruptions are displayed, and the cause of the problem is marked. The user can decide whether to send the routing configuration to the device based on the needs (for example, the network segment to be accessed or the route to be connected). The connectivity detection can include detecting whether there is a conflict in the firewall rules, whether the network target is reachable, whether there is a loop in the route, and whether the network delay and packet loss rate are within the preset threshold range.

[0131] Figure 2 It is a schematic diagram of the composition of an electronic device according to an embodiment of the present disclosure.

[0132] Second, refer to Figure 2 , an embodiment of the present disclosure provides an electronic device, comprising:

[0133] One or more processors 201;

[0134] A memory 202, on which one or more programs are stored. When the one or more programs are executed by one or more processors, the one or more processors implement the route adding method based on natural language processing according to the first aspect of the embodiment of the present disclosure;

[0135] One or more I / O interfaces 203 are connected between the processor and the memory and are configured to implement information exchange between the processor and the memory.

[0136] Among them, the processor 201 is a device with data processing capabilities, including but not limited to a central processing unit (CPU) and the like; the memory 202 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); the I / O interface (read-write interface) 203 is connected between the processor 201 and the memory 202, and can realize information interaction between the processor 201 and the memory 202, including but not limited to a data bus (Bus) and the like.

[0137] In some embodiments, the processor 201 , the memory 202 , and the I / O interface 203 are connected to each other via a bus 204 , and further connected to other components of the computing device.

[0138] In a third aspect, an embodiment of the present disclosure provides a computer-readable medium having a computer program stored thereon, and when the program is executed by a processor, the route adding method based on natural language processing described in the first aspect of the embodiment of the present disclosure is implemented.

[0139] In a fourth aspect, an embodiment of the present disclosure provides a computer program product, including a computer program or instructions, which, when executed by a processor, implements the route adding method based on natural language processing described in the first aspect of the embodiment of the present disclosure.

[0140] Figure 3 It is a block diagram of a route adding system based on natural language processing according to an embodiment of the present disclosure.

[0141] Fifth, refer to Figure 3 The embodiment of the present disclosure provides a route adding system based on natural language processing, including:

[0142] The parsing module 301 parses the input information from the user using natural language processing technology to obtain information related to the routing configuration;

[0143] A routing configuration generating module 302 generates a routing configuration according to the information related to the routing configuration;

[0144] A routing function activation module 303 activates device-related routing functions according to the routing configuration;

[0145] A network connectivity check module 304 performs a network connectivity check on the routing configuration and generates a check report;

[0146] Confirmation module 305: Based on the inspection report, the user confirms whether to send the routing configuration to the device.

[0147] In some embodiments, the natural language processing route adding system further includes:

[0148] A user interface receives the input information from the user and displays the inspection report.

[0149] In some embodiments, the parsing module 301 includes:

[0150] A word segmentation processing submodule, which uses word segmentation processing to split the input information into independent words;

[0151] A part-of-speech tagging submodule, which uses part-of-speech tagging to delete useless words from the independent words to obtain candidate words;

[0152] The analysis submodule performs named entity recognition on the candidate words and combines semantic analysis to obtain information related to the routing configuration.

[0153] In some embodiments, the routing configuration generation module 302 includes:

[0154] A selection submodule selects a matching routing configuration template according to the information related to the routing configuration;

[0155] The routing configuration generation submodule generates a routing configuration for a matching device according to the selected routing configuration template.

[0156] In some embodiments, the routing function starting module 303 includes:

[0157] A command generation submodule, which calls a command template library to generate a routing configuration command for the device according to the routing configuration;

[0158] The command submodule sends the generated routing configuration command to the device;

[0159] The submodule is enabled, and the device executes the routing configuration command to enable the routing function related to the device.

[0160] In some embodiments, the network connectivity checking module 304 includes:

[0161] A detection message sending submodule sends a connectivity detection message to detect the connectivity between the device and the network and generate a detection report;

[0162] A routing table checking submodule checks and analyzes the routing table of the device, verifies the consistency of the routing configuration, and generates a routing table consistency check report;

[0163] Anomaly check submodule, checks and analyzes anomalies in the routing table and generates anomaly report;

[0164] An optimization prompt generating submodule, generating an optimization prompt for the routing configuration according to the detection report, the routing table consistency check report and the abnormal situation report;

[0165] The inspection report generation submodule collects the detection report, the routing table consistency inspection report, the abnormal situation report and the optimization prompt, and generates the inspection report.

[0166] In some embodiments, the device is a firewall.

[0167] In some embodiments, the natural language processing route adding system further includes:

[0168] Firewall rule checking module, checks and analyzes firewall rule configuration, verifies whether firewall rules conflict with routing configuration, and generates firewall rule checking report;

[0169] Wherein, the optimization prompt generation submodule generates optimization prompts for the firewall regulations according to the firewall rule inspection report;

[0170] The inspection report generation submodule also collects the firewall rule inspection report and the optimization prompt as part of the inspection report.

[0171] In the embodiment of the present disclosure, the route adding system for natural language processing further includes:

[0172] Collection submodule, collects network traffic data and log data;

[0173] The analysis submodule analyzes network traffic data and log data and generates network traffic analysis reports and log analysis reports;

[0174] The optimization prompt generation submodule further generates optimization prompts for the routing configuration and the firewall rules according to the network traffic analysis report and the log analysis report;

[0175] The inspection report generation submodule also collects the network traffic analysis report, the log analysis report and the optimization prompt as part of the inspection report.

[0176] In some embodiments, the confirmation module 305 is further used to perform the following confirmation operations of the user:

[0177] Confirm whether to send the routing configuration to the device, or update the routing configuration and the firewall rules according to the optimization tips for the routing configuration and the firewall rules in the inspection report and send the updated routing configuration to the device.

[0178] In order to enable those skilled in the art to more clearly understand the technical solution provided by the embodiment of the present disclosure, the remote control provided by the embodiment of the present disclosure is described in detail below through specific embodiments:

[0179] Embodiment 1

[0180] The present disclosure can be applied to next-generation firewall products. By integrating natural language processing technology into firewall products, the present disclosure can realize automated routing configuration and network connectivity check. Users can add routes through natural language input, and the firewall product will automatically parse the input content and generate corresponding routing configurations, while performing real-time network connectivity detection on the newly added routes to prevent network paralysis or service failures caused by new devices accessing the network.

[0181] This disclosure enables users and technicians to more intuitively understand the potential problems of new routes when configuring routes, ensuring the accuracy and connectivity of network configuration. By reducing human errors and optimizing the route configuration process, this disclosure can effectively reduce the network failure rate, improve the accuracy of route addition and the overall stability of the network.

[0182] According to a route adding method based on natural language processing disclosed in the present invention, the specific implementation steps are as follows:

[0183] 1) The method disclosed in the present invention is embedded in the web interface of the firewall, and the user can use the natural language processing function to perform routing configuration and management by accessing the web interface of the firewall;

[0184] 2) Analyze the natural language information input by the user, extract key information (for example, IP address, gateway, OSPF, etc.), generate corresponding routing configurations through the device routing configuration template based on this key information, and send the generated routing configurations to the firewall;

[0185] 3) Before the routing configuration is officially issued, the method simulates the issuance operation, first temporarily issuing the routing configuration to the device, and then sending a connectivity check message to determine whether the network is normal; the firewall performs a network check based on the routing configuration to detect whether the network is connected, whether there are routing conflicts or invalid routes; all routes and optimization prompts are displayed together on the Web interface; the user can view and confirm the final configuration.

[0186] 4) After viewing the detection report on the web interface, the user can decide whether to send the problematic route to the device or make further adjustments. Ultimately, the user determines which route configurations need to be officially sent to the firewall device.

[0187] In the embodiments of the present disclosure, those skilled in the art should understand that the examples specifically given above are exemplary and various modifications may be made thereto according to the methods of the present disclosure.

[0188] Those skilled in the art should understand that the method disclosed herein can be applied not only to next-generation firewalls, but also to other network devices with routing functions, such as switches, routers, etc. The method can adapt to different types of network devices and ensure network connectivity and routing management of various types of devices through corresponding configuration templates and routing functions.

[0189] This disclosure focuses on an intelligent route adding method, and the key technical points involved are as follows:

[0190] The natural language instructions input by users are parsed through natural language processing technology to accurately identify the user's network needs and intentions, ensuring that the system can automatically understand the routing configuration needs described by the user; the named entity recognition technology is used to extract key entities (for example, IP addresses, port numbers, protocol types, etc.) from the input natural language information to generate accurate configuration rules to ensure that the configuration matches the user's needs;

[0191] A series of routing configuration templates suitable for firewalls, routers and other devices are predefined. Based on the parsed key information (such as IP address, gateway, routing protocol, etc.), the matching configuration template is automatically selected to generate routing configuration suitable for network devices;

[0192] Automatically send the generated firewall rules and routing configurations to the corresponding network devices (such as firewalls, routers, switches, etc.) to ensure that the configurations are accurately applied to the devices and reduce the error rate of manual intervention;

[0193] Dynamically adjust firewall rules and routing configurations based on real-time monitored network status and demand changes to ensure network security and stability;

[0194] Integrated network detection tools (such as Ping, Traceroute, etc.) are used to detect the network connectivity of the generated routing configuration and firewall rules to ensure that the configuration is effective and the network path is normal, and to eliminate potential connection problems in a timely manner;

[0195] Provides a friendly natural language interface, allowing users to perform complex routing and firewall configuration operations through simple natural language descriptions, lowering the user's technical threshold; provides a visual configuration management and monitoring interface to help users intuitively understand the current network status, routing configuration, and the operating effects of firewall rules;

[0196] Redundancy and fault-tolerant mechanisms are designed to ensure that the system can automatically recover or switch when a failure occurs, thereby ensuring the continuity and stability of network operation.

[0197] The route adding method based on natural language processing disclosed in the present invention can bring the following beneficial effects:

[0198] Through natural language processing (NLP) technology, the disclosed method can automatically parse the requirements and instructions input by the user and convert them into firewall rules and network routing configurations, greatly simplifying the traditional manual configuration process and reducing configuration complexity and error rate.

[0199] By automatically generating and applying configurations, the disclosed method can significantly shorten the deployment and adjustment time of network devices, is particularly suitable for frequent routing adjustment needs in complex network environments, and improves network operation and maintenance efficiency.

[0200] By using NLP technology, the disclosed method can accurately understand the user's natural language input and convert it into specific technical commands. Even if the user does not have a deep network technology background, complex network configuration tasks can be completed through simple natural language descriptions, which greatly reduces the technical threshold for user operation.

[0201] The disclosed method automatically performs network connectivity detection (such as Ping and Traceroute) after generating the routing configuration, ensures the correctness and effectiveness of the configuration, promptly discovers and reports network connection problems, and ensures network stability and security.

[0202] After the user inputs the requirements, the disclosed method performs real-time analysis based on the current network status. If there is a conflict in the routing configuration or it is not the optimal path, the disclosed method will provide a suggestive prompt to prompt the user of possible adjustment plans, and the user can decide whether to accept the suggestions for adjustment. This ensures the optimization and security of the configuration.

[0203] By automatically generating routing configurations and firewall rules, human errors in manual operations are reduced, configuration accuracy and network security are significantly improved, and network failures caused by operational errors are reduced.

[0204] During the network connectivity detection process, the disclosed method can optimize firewall rules and routing strategies by analyzing network traffic, log data and other information, thereby further improving the performance and security of the network.

[0205] Through the natural language interface, the disclosed method lowers the technical threshold for user operation, and users do not need to have complex network technology knowledge to perform configuration, which greatly improves the usability and operability of the system.

[0206] The disclosed method is highly flexible and scalable, can be adjusted according to different application scenarios and network requirements, is applicable to network environments of different scales, and meets various complex network management requirements.

[0207] In general, the route adding method based on natural language processing disclosed in the present invention significantly improves the efficiency and accuracy of network management by automatically parsing user needs, generating network configuration, performing network connectivity detection, and combining real-time optimization and security prompts. The method reduces the technical threshold for user operation, has high scalability and flexibility, is suitable for network environments of different scales and complexities, greatly reduces human errors, and ensures the stability and security of the network.

[0208] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0209] Example embodiments have been disclosed herein, and although specific terms are employed, they are used and should be interpreted only in a general illustrative sense and not for limiting purposes. In some instances, it will be apparent to those skilled in the art that, unless otherwise expressly noted, features, characteristics, and / or elements described in conjunction with a particular embodiment may be used alone or in combination with features, characteristics, and / or elements described in conjunction with other embodiments. Therefore, those skilled in the art will appreciate that various changes in form and detail may be made without departing from the scope of the present disclosure as set forth in the appended claims.

Claims

1. A route adding method based on natural language processing, comprising: Use natural language processing technology to parse input information from users and obtain information related to routing configuration; Generate a routing configuration according to the information related to the routing configuration; Enable device-related routing functions according to the routing configuration; Performing a network connectivity check on the routing configuration to obtain a check result; According to the inspection result, it is determined whether to send the routing configuration to the device.

2. The method for adding routes based on natural language processing according to claim 1, wherein: Use natural language processing technology to parse the input information from the user and obtain information related to the routing configuration, including: Receive input information from the user; Splitting the input information into independent words using word segmentation; Deleting useless words from the independent words by using part-of-speech tagging to obtain candidate words; Named entity recognition is performed on the candidate words and combined with semantic analysis to obtain information related to the routing configuration.

3. The method for adding routes based on natural language processing according to claim 2, wherein: Perform a network connectivity check on the routing configuration to obtain a check result, including: Sending a connectivity detection message to detect the connectivity between the device and the network, and generating a detection report; Check and analyze the routing table of the device, verify the consistency of the routing configuration, and generate a routing table consistency check report; Checking and analyzing abnormalities in the routing table and generating an abnormality report; Generate optimization tips for the routing configuration according to the detection report, the routing table consistency check report and the abnormal situation report; The detection report, the routing table consistency check report, the abnormal situation report and the optimization prompt are collected to generate an inspection report, and the inspection result includes the inspection report.

4. The method for adding routes based on natural language processing according to any one of claims 1 to 3, wherein: Generate a routing configuration according to the information related to the routing configuration, including: Selecting a matching routing configuration template according to the information related to the routing configuration; Generate a routing configuration for a matching device according to the selected routing configuration template.

5. The method for adding routes based on natural language processing according to any one of claims 1 to 3, wherein: Before using natural language processing technology to parse the input information from the user and obtain information related to the routing configuration, it also includes: The input information from the user is received through the user interface of the firewall.

6. The method for adding routes based on natural language processing according to claim 5, wherein: Before performing a network connectivity check on the routing configuration and generating a check report, the method further includes: Check and analyze the firewall rule configuration, verify whether the firewall rule conflicts with the routing configuration, and generate a firewall rule check result; Generating optimization tips for the firewall rules according to the firewall rule check results; The firewall rule inspection report and the optimization tips are collected as part of the inspection results.

7. The method for adding routes based on natural language processing according to claim 6, wherein: Determining whether to send the routing configuration to the device according to the inspection result includes: Displaying the inspection report on the user interface; In response to an instruction issued by a user, issuing the routing configuration to the device; or In response to the user's update instruction, the routing configuration and the firewall rules are updated according to the optimization tips for the routing configuration and the firewall rules in the inspection report, and the updated routing configuration is sent to the device.

8. An electronic device comprising: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the route adding method based on natural language processing according to any one of claims 1 to 7.

9. A computer-readable medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the route adding method based on natural language processing according to any one of claims 1 to 7 is implemented.

10. A computer program product, comprising a computer program or an instruction, wherein when the computer program or the instruction is executed by a processor, the route adding method based on natural language processing according to any one of claims 1 to 7 is implemented.

Citation Information

Patent Citations

  • Routing detection method and device, equipment and storage medium

    CN113518034A

  • Firewall configuration method and device, electronic equipment and readable storage medium

    CN117155684A

  • Business intention-oriented configuration automatic issuing method and system

    CN118555196A

  • Natural language translation interface for networked devices

    US10235353B1

  • Artificial intelligence for intent-based networking

    US11968088B1