Network configuration data auditing method and device, storage medium and electronic equipment

Abstract

The invention provides a network configuration data auditing method and device, a computer storage medium and electronic equipment, and relates to the technical field of computers. Comprising the following steps: generating a network element twinborn body of an actual network element based on a digital twinborn technology, wherein network element data of the network element twinborn body at least comprises instruction configuration data; packaging the instruction configuration data according to the network element configuration model to obtain a network element configuration twin; associating the network element configuration twins based on a pre-constructed service twinborn model to generate a first service object, and further generating a service twinborn; for each piece of instruction configuration data in the to-be-issued network configuration scheme, generating a configuration instance corresponding to each piece of instruction configuration data according to the network element configuration model, associating the configuration instances based on the service twinborn model to generate a second service object, and further generating an instance to be issued; and auditing the to-be-issued instance based on the service instance in the actual network. According to the invention, the workload of auditing the network configuration data can be reduced, and the auditing efficiency is improved.

Description

Background Art

[0002] In the process of daily network operation and maintenance or business operation, various network configuration plans are often issued to the existing network to achieve functions such as network upgrade and maintenance or business activation. The essence of a network configuration plan is a collection of configuration instructions, specifically involving the addition, deletion, and modification of existing network devices. Therefore, auditing each network configuration plan to ensure the correctness of the issued configuration instructions is of great significance to the normal operation of the network.

[0003] The related technical solutions often formulate verification rules based on configuration specifications to verify the network configuration plan at the "instruction" level. However, the network configuration plan uses "business objects" as configuration objects, and a business object needs to issue configuration instructions on multiple types of network elements. In addition, the existing network is complex and the number of network elements is large.

[0004] Therefore, the above-mentioned related technical solutions need to read the network configuration data from the dispersed multiple types of network elements one by one, and audit the parameter values ​​of the configuration instructions, resulting in a large workload and low audit efficiency. Summary of the invention

[0005] The present disclosure provides a network configuration data auditing method, a network configuration data auditing device, a computer storage medium and an electronic device, thereby reducing the workload of auditing the network configuration data, thereby achieving the technical effect of improving the auditing efficiency.

[0006] In a first aspect, an embodiment of the present disclosure provides a method for auditing network configuration data, the method comprising: generating a network element twin of an actual network element based on digital twin technology, wherein the network element data corresponding to the network element twin includes at least instruction configuration data; encapsulating the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; associating multiple network element configuration twins based on a pre-built business twin model to generate a first business object, and generating a business twin based on the first business object; wherein each business twin corresponds to a business instance in the actual network; for each instruction configuration data in the network configuration scheme to be issued, generating a configuration instance corresponding to each instruction configuration data according to the network element configuration model, and associating multiple configuration instances based on the business twin model to generate a second business object, and generating an instance to be issued based on the second business object; auditing the instance to be issued based on the business instance in the actual network to obtain an audit result.

[0007] In the second aspect, an embodiment of the present disclosure provides an auditing device for network configuration data, which includes: a twin generation module, which is used to generate a network element twin of an actual network element based on digital twin technology, and the network element data corresponding to the network element twin includes at least instruction configuration data; an encapsulation module, which is used to encapsulate the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; a first business object generation module, which is used to associate multiple network element configuration twins based on a pre-built business twin model, generate a first business object, and generate a business twin based on the first business object; wherein each business twin corresponds to a business instance in the actual network; a second business object generation module, which is used to generate a configuration instance corresponding to each instruction configuration data in the network configuration scheme to be issued according to the network element configuration model, and associate multiple configuration instances based on the business twin model to generate a second business object, and generate an instance to be issued based on the second business object; an audit module, which is used to audit the instance to be issued based on the business instance in the actual network to obtain an audit result.

[0008] In a third aspect, an embodiment of the present disclosure provides a computer-readable storage medium having a computer program stored thereon, which implements the above-mentioned network configuration data auditing method when executed by a processor.

[0009] In a fourth aspect, an embodiment of the present disclosure provides an electronic device, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the above-mentioned network configuration data auditing method by executing the executable instructions.

[0010] In a fifth aspect, an embodiment of the present disclosure provides a computer program product, including a computer program, which is executed by a processor to implement the above network configuration data auditing method.

[0011] The technical solution disclosed in this disclosure has the following beneficial effects:

[0012] The above method generates a network element twin of an actual network element based on digital twin technology, and the network element data corresponding to the network element twin contains at least instruction configuration data; encapsulates the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; associates multiple network element configuration twins based on a pre-built business twin model to generate a first business object, and generates a business twin based on the first business object; wherein each business twin corresponds to a business instance in the actual network; for each instruction configuration data in the network configuration scheme to be issued, generates a configuration instance corresponding to each instruction configuration data according to the network element configuration model, and associates multiple configuration instances based on the business twin model to generate a second business object, and generates an instance to be issued based on the second business object; audits the instance to be issued based on the business instance in the actual network to obtain an audit result. This method transforms the original audit method based on instructions into an audit method centered on business objects, thereby avoiding the technical problems of long time consumption and low audit efficiency caused by large workload caused by auditing a large number of network elements one by one. The latest business twin configuration data of the existing network is used as the verification standard for the scheme audit, which improves the accuracy and real-time performance of the audit. On the other hand, this method changes the current situation that the traditional configuration scheme audit lacks a unified and reusable audit standard. It is easy to be compatible with the configuration differences of the existing networks in various provinces.

[0013] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and are used together with the specification to explain the principles of the present disclosure. Obviously, the drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0015] Figure 1 A schematic diagram of an application scenario of an audit requirement for network configuration data of a customized DNN service in this exemplary embodiment is shown;

[0016] Figure 2 An architectural diagram showing a network configuration data audit system according to the exemplary embodiment;

[0017] Figure 3 A flowchart showing a method for auditing network configuration data in this exemplary embodiment is shown;

[0018] Figure 4A A schematic diagram showing the structure of a customized DNN service in this exemplary embodiment is shown;

[0019] Figure 4B A schematic diagram showing a network element configuration model for customizing a DNN service part configuration instruction in this exemplary embodiment;

[0020] Figure 5 A schematic diagram of building a business twin model for a customized DNN business instance in this exemplary embodiment is shown;

[0021] Figure 6 A schematic diagram of the structure of a network configuration data auditing device in this exemplary embodiment is shown;

[0022] Figure 7 The structure diagram of an electronic device in this exemplary embodiment is schematically shown. DETAILED DESCRIPTION

[0023] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, exemplary embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present disclosure will be more comprehensive and complete, and the concepts of the exemplary embodiments are fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0024] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0025] The flowcharts shown in the accompanying drawings are only exemplary and do not necessarily include all the steps. For example, some steps may be decomposed, while some steps may be combined or partially combined, so the actual execution order may change according to the actual situation.

[0026] In the relevant technical background, in the daily network operation and maintenance or business operation process, various network configuration plans are often issued to the existing network to achieve network upgrade maintenance or business activation, etc. The essence of the network configuration plan is a collection of a series of instructions, involving operations such as adding, deleting, and modifying existing network devices. Therefore, auditing each network configuration plan to ensure the correctness of the issued instructions is of great significance to the normal operation of the network.

[0027] The audit of network configuration plans mainly includes: auditing the integrity of instructions, verifying the conflicts of instruction parameter values, and verifying the dependencies of instruction parameter values.

[0028] In related technical solutions, the audit of network configuration solutions often formulates verification rules based on pre-set configuration specifications, and verifies each instruction in a series of instruction sets one by one.

[0029] In order to facilitate those skilled in the art to understand the audit process of the above network configuration scheme, the following will be combined with Figure 1 Taking the network configuration scheme of the customized Domain Name Network (DNN) service as an example, the audit method of the existing network configuration scheme is exemplarily described.

[0030] Figure 1 A schematic diagram of an application scenario of an audit requirement for network configuration data of a customized DNN service in this exemplary embodiment is shown, referring to Figure 1 As shown, the steps of customizing DNN configuration specifications usually include: configuring DNN, configuring address pool, and binding DNN to address pool. In addition, the process of customizing DNN configuration specifications involves configuring each network element, configuring content, and customizing DNN activation plans for each network element in provinces A and B. Figure 1 The figure shows the instruction sets for each configuration network element in different configuration steps in provinces A and B.

[0031] When auditing the network configuration data of customized DNN services, it is usually necessary to verify the integrity of instructions, the conflict of instruction parameter values, and the dependency of instruction parameter values. Among them, the integrity of instructions is verified based on the network configuration basis of each province and region to determine the integrity of instructions. For example, by comparing the configuration specifications, the customized DNN activation plan in Province A lacks the configuration address pool instruction, but the address pool group "iot_pg1_fj" has been configured in the existing network, so it can be determined that its instructions are complete. For the verification of instruction parameter value conflicts, taking the DNN name of Province A as an example, the configuration specification requires that the DNN name is unified throughout the network, all of which are "Micar.ctiot", so it can be determined that the instruction parameter values ​​do not conflict. For the verification of instruction parameter value dependencies, taking the DNN binding slice of Province B as an example, the configuration specification requires that the existing network has completed pre-configuration, that is, Figure 1 As shown in "NSIDX=123", the instruction parameter value dependency check is completed.

[0032] However, the inventors found that the above technical solution mainly faces the following technical problems:

[0033] 1) The above-mentioned related technical solutions use "instructions" as the audit object, and the configuration solution uses "business objects" as the configuration object. A business object needs to issue configuration instructions on multiple types of network elements. However, the existing network is complex and has a large number of network elements. In addition, the audit of instruction parameter values ​​requires reading data from the network elements, resulting in a large workload and low audit efficiency.

[0034] 2) Business rules are hidden in configuration instructions, and audit rules involve implicit business rules. Operation personnel / O&M personnel need to understand complex business rules and have high technical threshold requirements, which leads to high audit complexity.

[0035] 3) The existing network configuration solutions in different provinces and regions vary greatly, and the above-mentioned related technical solutions are difficult to flexibly cope with the above configuration differences.

[0036] 4) The audit method is tightly coupled with the configuration instructions of specific businesses, that is, one business corresponds to a set of configuration plans and implies a set of business rules, which is difficult to reuse for other businesses.

[0037] Taking the above problems into consideration, the exemplary embodiments of the present disclosure propose an audit method for network configuration data, which transforms the original audit method based on instructions into an audit method centered on business objects, thereby avoiding the technical problems of low audit efficiency caused by long time consumption and heavy workload caused by auditing a large number of network elements one by one. And the configuration data of the latest business twin of the existing network is used as the verification standard for the scheme audit, which improves the accuracy and real-time performance of the audit; on the other hand, this method changes the current situation of the lack of a unified and reusable audit standard for the audit of traditional configuration schemes. It is easy to be compatible with the configuration differences existing in the existing networks of various provinces.

[0038] The following will be combined Figure 2 , the network configuration data audit method and device proposed in the present disclosure are applied to Figure 2 The exemplary application environment is illustrated in the system architecture.

[0039] Figure 2 FIG. 1 shows an architecture diagram of a network configuration data audit system in this exemplary embodiment. Figure 2 As shown, it is a schematic diagram of an application scenario provided by an embodiment of the present disclosure, in which a terminal device 101 and a server 102 may be included.

[0040] The terminal device 101 can be, for example, a mobile phone, a tablet computer (PAD), a laptop computer, a desktop computer, a smart TV, a smart vehicle-mounted device, a smart wearable device, a smart TV, an aircraft, or any other device that can trigger an audit of network configuration data. The terminal device 101 can be installed with a target application, and the target application can have functions such as a network configuration scheme and presenting the audit results of the network configuration scheme. The application involved in the embodiment of the present disclosure can be a software client, or a client such as a web page or a small program. The server 102 is a server corresponding to the software or a web page, a small program, etc., and does not limit the specific type of the client.

[0041] The server 102 may be a background server of the target application, and is used to provide corresponding background services for it, such as auditing network configuration data, generating audit result services, etc. It may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, i.e., content delivery networks (CDNs), as well as big data and artificial intelligence platforms, but is not limited thereto.

[0042] It should be noted that the network configuration data audit method in the embodiment of the present disclosure can be executed by the terminal device 101 or the server 102 alone, or by the server 102 and the terminal device 101 together. In actual application, specific configuration can be performed according to the situation, and the present disclosure does not make specific limitations here.

[0043] Among them, the server 102 and the terminal device 101 may include one or more processors, memories, and interactive I / O interfaces, etc. In addition, the server 102 may also be configured with a database, which may be used to store network element twin models, parameters of network element configuration models, etc. Among them, the memories of the server 102 and the terminal device 101 may also store program instructions required to be executed in the audit method of network configuration data provided in the embodiment of the present disclosure, and these program instructions can be used to implement the audit process of network configuration data provided in the embodiment of the present disclosure when executed by the processor.

[0044] It should be noted that when the audit method for network configuration data provided by the embodiment of the present disclosure is executed by the server 102 or the terminal device 101 alone, the above-mentioned application scenario may also only include a single device of the server 102 or the terminal device 101, or the server 102 and the terminal device 101 may also be considered to be the same device. Of course, in actual application, when the audit method for network configuration data provided by the embodiment of the present disclosure is jointly executed by the server 102 and the terminal device 101, the server 102 and the terminal device 101 may also be the same device, that is, the server 102 and the terminal device 101 may be different functional modules of the same device, or virtual devices virtualized from the same physical device.

[0045] In the embodiment of the present disclosure, the terminal device 101 and the server 102 can be directly or indirectly connected to each other through one or more networks 103. The network 103 can be a wired network or a wireless network. For example, the wireless network can be a mobile cellular network or a wireless fidelity (Wireless-Fidelity, WIFI) network. Of course, it can also be other possible networks, which are not limited in the embodiment of the present disclosure. It should be noted that Figure 1 The figure is only an example. In fact, the number of terminal devices and servers is not limited and is not specifically limited in the embodiments of the present disclosure.

[0046] For example, in an exemplary embodiment, a network element twin of an actual network element is generated based on digital twin technology, and the network element data corresponding to the network element twin includes at least instruction configuration data; the instruction configuration data is encapsulated according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; multiple network element configuration twins are associated based on a pre-built business twin model to generate a first business object, and a business twin is generated based on the first business object; wherein each business twin corresponds to a business instance in the actual network; for each instruction configuration data in the network configuration scheme to be issued, a configuration instance corresponding to each instruction configuration data is generated according to the network element configuration model, and multiple configuration instances are associated based on the business twin model to generate a second business object, and an instance to be issued is generated based on the second business object; the instance to be issued is audited based on the business instance in the actual network to obtain an audit result.

[0047] However, it is easy for those skilled in the art to understand that the above application scenarios are only used as examples and are not limited to this in the present exemplary embodiment.

[0048] Below, in combination with the application scenarios described above, the method provided by the exemplary embodiment of the present disclosure is described with reference to the accompanying drawings. It should be noted that the above application scenarios are only shown to facilitate understanding of the spirit and principle of the present disclosure, and the embodiments of the present disclosure are not limited in this respect. It should be noted that the following method can be executed by the above terminal device or server, or by the terminal device and the server together. Here, the execution of the terminal device or the server is specifically shown as an example.

[0049] See also Figure 3 FIG. 1 is a flowchart of a method for auditing network configuration data provided by an embodiment of the present disclosure. The method can be executed by a computer device, which can be Figure 2 The terminal device or server shown in the figure, the specific implementation process of the method includes the following steps 301 to 305:

[0050] Step 301: Generate a network element twin of an actual network element based on digital twin technology, and the network element data corresponding to the network element twin includes at least instruction configuration data.

[0051] Step 302: Encapsulate the instruction configuration data according to the pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data.

[0052] Step 303: Associating multiple network element configuration twins based on a pre-built business twin model to generate a first business object, and generating a business twin based on the first business object; wherein each business twin corresponds to a business instance in the actual network.

[0053] Step 304: For each instruction configuration data in the network configuration scheme to be issued, a configuration instance corresponding to each instruction configuration data is generated according to the network element configuration model, and multiple configuration instances are associated based on the business twin model to generate a second business object, and an instance to be issued is generated based on the second business object.

[0054] Step 305: Audit the instance to be issued based on the service instance in the actual network to obtain the audit result.

[0055] In the technical solutions provided by some embodiments of the present disclosure, a network element twin of an actual network element is generated based on digital twin technology, and the network element data corresponding to the network element twin contains at least instruction configuration data; the instruction configuration data is encapsulated according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; multiple network element configuration twins are associated based on a pre-built business twin model to generate a first business object, and a business twin is generated based on the first business object; wherein each business twin corresponds to a business instance in the actual network; for each instruction configuration data in the network configuration scheme to be issued, a configuration instance corresponding to each instruction configuration data is generated according to the network element configuration model, and multiple configuration instances are associated based on the business twin model to generate a second business object, and an instance to be issued is generated based on the second business object; based on the business instance in the actual network, the instance to be issued is audited to obtain an audit result. This method transforms the original audit method based on instructions into an audit method centered on business objects, thereby avoiding the technical problems of long time consumption and low audit efficiency caused by large workload caused by auditing a large number of network elements one by one. The latest business twin configuration data of the existing network is used as the verification standard for the scheme audit, which improves the accuracy and real-time performance of the audit. On the other hand, this method changes the current situation that the traditional configuration scheme audit lacks a unified and reusable audit standard. It is easy to be compatible with the configuration differences of the existing networks in various provinces.

[0056] The following will be combined with specific embodiments to Figure 3 The specific implementation methods of each step in the embodiment shown are described in detail:

[0057] In step 301, a network element twin of an actual network element is generated based on the digital twin technology, and the network element data corresponding to the network element twin at least includes instruction configuration data.

[0058] Among them, the actual network element is the network element device in the real network (i.e. the actual network / actual networking), and the network element twin is the network element device in the digital twin environment constructed for the network element device in the real network. The network element twin in the digital twin environment has the same parameters as those of each network element in the actual physical network, such as networking relationship and network element data.

[0059] Exemplarily, a network element twin of an actual network element can be generated by digital twin technology, and the network element data collected in real time from the actual network element can be synchronized to the network element twin to obtain the network element data corresponding to the network element twin. The instruction configuration data contained in the network element data can be a configuration instruction issued to the network element.

[0060] It should be noted that when generating network element twins of actual network elements based on digital twin technology, network element twins can be created for some network elements in the actual networking, or for all network elements. The specific number can be determined based on actual conditions, and the embodiments of the present disclosure do not impose any special restrictions on this.

[0061] In step 302, the instruction configuration data is encapsulated according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data.

[0062] Among them, the network element configuration model is used to describe the configuration instructions (i.e., instruction configuration data) supported by a type of network element, and a configuration instruction on the network element corresponds to a network element configuration model. Correspondingly, each instruction configuration data on the network element twin corresponds to a network element configuration twin.

[0063] When executing step 302, in an optional embodiment, target instruction configuration data having instruction configuration parameters is searched from all instruction configuration data on the network element twin, so as to encapsulate the target instruction configuration data and obtain the network element configuration twin corresponding to the target instruction configuration data.

[0064] by Figure 4B The command configuration parameters of the session management function (SMF) network element shown correspond to attributes, such as APN (Access Point Name) corresponding to attribute 1.

[0065] In this embodiment, since the audit of the network element configuration plan mainly audits the instruction configuration parameters, constructing the network element configuration twin only for the network element twins with the instruction configuration parameters can reduce the amount of calculation and improve the audit efficiency.

[0066] In an optional embodiment of the present disclosure, the constructed network element configuration model includes one or more of a configuration model name, a configuration specification, an instruction parameter list, and a parameter constraint condition.

[0067] The above configuration specification is composed of "network element type" and "command keyword" corresponding to the network element configuration model. For example, "network element type_command keyword", for example, the configuration specification for SMF network element can be "SMF_APN".

[0068] The above instruction parameter list represents the parameter list included in the configuration instruction. It should be explained that the instruction parameter list may be a parameter list generated by modeling some or all parameters of the configuration instruction, and whether to model or not can be adjusted according to actual needs.

[0069] The above parameter constraints are used to describe the restrictions on the values ​​of instruction parameters and are usually used to implement parameter value conflict verification. Figure 1 Taking the DNN name shown as an example, the parameter constraints can be used to limit the DNN name to be unique within Province A.

[0070] In one embodiment, the network element configuration model generally includes a configuration model name, a configuration specification, and a command parameter list, and the parameter constraint condition may or may not exist. Figure 4B An example explanation is given of a network element configuration model for customizing some instructions related to DNN services on SMF and user plane function (UPF) network elements.

[0071] exist Figure 1 Based on the shown Figure 4A A schematic diagram of a structure of a customized DNN service in this exemplary embodiment is shown; and Figure 4A Based on the structure shown, Figure 4B A schematic diagram showing a network element configuration model for customizing a DNN service part configuration instruction in this exemplary embodiment; Figure 4B As shown, Figure 4B This is a schematic diagram of the network element configuration model generated for the configuration instruction "ADD NSDNN: NSIDX=123, DNN="Tescar.ctiot"", where "ADD" is the operation type, "NSDNN" is the instruction keyword, NSIDX is parameter 1, and DNN is parameter 2. Figure 4A It corresponds to the network structure for executing customized DNN services, which at least includes SMF network elements, UPF network elements, AMF network elements, PCF network elements, etc. Taking the network element configuration model corresponding to SMF network elements and UPF network elements as an example, Figure 4B It includes the network element configuration model corresponding to the "DNN configuration" of the SMF network element, the network element configuration model of the "DNN configuration" of the UPF network element, the network element configuration model of the "address pool" of the UPF network element, etc.

[0072] Depend on Figure 4BFor the configuration instruction of the DNN binding slice of the SMF network element, the generated network element configuration model includes the configuration model name "SMF network element DNN binding slice", the configuration specification is "SMF_NSDNN", and the instruction parameters included in the instruction parameter list are "NSIDX" and "DNN", and the corresponding parameter constraints are the default state. For the configuration DNN instruction of the SMF network element, the generated network element configuration model includes the configuration model name "SMF network element configuration DNN", the configuration specification is "SMF_APN", and the instruction parameter list includes "APN", and the corresponding parameter constraint is "APN value "unique within the province"".

[0073] In step 303, multiple network element configuration twins are associated based on a pre-built business twin model to generate a first business object, and a business twin is generated based on the first business object; wherein each business twin corresponds to a business instance in the actual network.

[0074] Among them, the business twin model is used to integrate multiple network element configuration twins of multiple types of network elements, thereby realizing business twins for business objects, so as to establish a converged business twin model for business objects.

[0075] In an optional embodiment of the present disclosure, the business twin model also includes a business identifier, a business object, a mapping relationship between the business object and the network element configuration twin, and constraints of the network element configuration twin.

[0076] The above-mentioned business identifier is a unique business identifier for a business instance, and all sub-business object instances contained in a business instance can also be retrieved through the business identifier.

[0077] For the above business objects, each business instance can contain one or more business objects. Figure 4B The customized DNN business instance shown includes three business objects: "DNN", "slice" and "address pool".

[0078] Based on the above-mentioned mapping relationship between business objects and network element configuration twins, the instruction configuration data of a business object is usually scattered on different types of network element twins, so a business object can be mapped to multiple network element configuration twins of multiple network element types.

[0079] The constraints based on the network element configuration twins are used to define the value association relationship of the instruction configuration parameters between the two network element configuration twins; the constraints based on the network element configuration twins are usually used to implement parameter value dependency verification in the network configuration scheme.

[0080] In order to facilitate the understanding of the above business twin model, Figure 4A , Figure 4B Based on the customized DNN business instance shown, combined with Figure 5 The process of building a business twin model is illustrated.

[0081] Figure 5 A schematic diagram of building a business twin model for a customized DNN business instance in this exemplary embodiment is shown, referring to Figure 5 As shown in the figure, the service name, service identifier, service object and constraints of the network element configuration twin are marked, and the value association relationship of the instruction configuration parameters between the network element configuration twins is defined.

[0082] Exemplarily, since the instruction configuration data of a business object is usually scattered on different types of network element twins, after generating the network element configuration twin, it is possible to associate multiple network element configuration twins corresponding to cross-type network element twins to generate a first business object to assemble the business twin corresponding to the first business object, and a business twin is mapped to a business instance in the actual network element.

[0083] In step 304, for each instruction configuration data in the network configuration scheme to be issued, a configuration instance corresponding to each instruction configuration data is generated according to the network element configuration model, and multiple configuration instances are associated based on the business twin model to generate a second business object, and an instance to be issued is generated based on the second business object.

[0084] Exemplarily, the network configuration scheme to be sent is a collection of a series of configuration instructions, that is, it contains multiple instruction configuration data. For each instruction configuration data in the network configuration scheme to be sent, a configuration instance corresponding to each instruction configuration data is generated according to the network element configuration model, and multiple configuration instances are associated based on the business twin model to generate a second business object, so as to assemble it into an instance to be sent based on the second business object.

[0085] In step 305, the instance to be issued is audited based on the service instance in the actual network to obtain an audit result.

[0086] In an optional embodiment of the present disclosure, based on an audit request for the network configuration scheme to be issued, an operation type for the network configuration scheme to be issued is determined; based on the operation type, the instance to be issued is audited to obtain an audit result.

[0087] Exemplarily, the judgment is based on the "operation type" of the instruction, which includes operation types such as add (ADD), delete (DEL), modify (MOD), etc. The following will be described in conjunction with specific embodiments.

[0088] Embodiment 1:

[0089] If the operation type is an add operation, a search is performed from the service instances in the actual network according to the instance to be delivered, and if a service instance identical to the instance to be delivered is found, the audit result is an audit failure.

[0090] This embodiment verifies the existence of the service instance, that is, the service twin of the existing network is retrieved according to the service identifier of the service to be issued; if the same service instance is retrieved, the audit fails.

[0091] And / or, if there are configuration instances in the instances to be sent that are not defined by the business twin model, the audit result is audit failure.

[0092] In this embodiment, redundant instructions of the business to be issued are checked. Specifically, if there are configuration instances that are not defined by the "business twin model" in the business instance to be issued, they are redundant instructions and the audit fails.

[0093] And / or, based on the command configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, and the audit result is audit failure.

[0094] In this embodiment, the parameter value dependency check of the service to be issued is implemented. Specifically, according to the association relationship of the configuration model, if the value of a parameter is not retrieved in the "pre-configuration instance" of the "to be issued" service instance, and is not retrieved in the "pre-configuration instance" of the existing network, it is considered as missing instruction and the audit fails.

[0095] And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, and the audit result is audit failure.

[0096] In this embodiment, a conflict check of parameter values ​​for the services to be delivered is implemented: based on the attribute constraints defined in the "configuration model", the service twins of the existing network are retrieved to determine whether there are parameter values ​​that conflict with the existing network.

[0097] Embodiment 2:

[0098] If the operation type is a modification operation or a deletion operation, a search is performed from the service instances in the actual network according to the instance to be delivered. If the same service instance as the instance to be delivered is not found, the audit result is an audit failure.

[0099] And / or, if there are configuration instances in the instances to be delivered that are not defined by the business twin model, the audit result is audit failure;

[0100] And / or, based on the command configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, then the audit result is audit failure;

[0101] And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, and the audit result is audit failure.

[0102] That is, through the above embodiments, the existence check, redundant instruction check, parameter value dependency check, and parameter value conflict check of the service instance can be performed. Among them, the existence check of the service instance is that if the service instance identical to the instance to be issued is not found in the service instance of the actual network, it is impossible to perform operations such as modification and deletion, and it can be judged that the audit has failed.

[0103] In order to implement the above-mentioned network configuration data auditing method, an auditing device for network configuration data is provided in one embodiment of the present disclosure. Figure 6 A schematic architecture diagram of a network configuration data auditing device is schematically shown.

[0104] The network configuration data auditing device 600 includes a twin generation module 601 , an encapsulation module 602 , a first business object generation module 603 , a second business object generation module 604 , and an auditing module 605 .

[0105] The twin generation module 601 is used to generate a network element twin of an actual network element based on the digital twin technology, and the network element data corresponding to the network element twin includes at least instruction configuration data; the encapsulation module 602 is used to encapsulate the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; the first business object generation module 603 is used to associate multiple network element configuration twins based on a pre-built business twin model to generate a first business object, and generate a business twin based on the first business object; wherein each business twin corresponds to a business instance in the actual network; the second business object generation module 604 is used to generate a configuration instance corresponding to each instruction configuration data in the network configuration scheme to be issued according to the network element configuration model, and associate multiple configuration instances based on the business twin model to generate a second business object, and generate an instance to be issued based on the second business object; the audit module 605 is used to audit the instance to be issued based on the business instance in the actual network to obtain an audit result.

[0106] In an optional embodiment of the present disclosure, the network element configuration model includes one or more of a configuration model name, a configuration specification, an instruction parameter list, and a parameter constraint condition; wherein the configuration specification is composed of a network element type and an instruction keyword corresponding to the network element configuration model, and each instruction configuration data corresponds to a network element configuration model.

[0107] In an optional embodiment of the present disclosure, the encapsulation module 602 is specifically used to search for target instruction configuration data with instruction configuration parameters from all instruction configuration data on the network element twin, encapsulate the target instruction configuration data, and obtain the network element configuration twin corresponding to the target instruction configuration data.

[0108] In an optional embodiment of the present disclosure, the business twin model includes a business identifier, a business object, a mapping relationship between the business object and the network element configuration twin, and constraints of the network element configuration twin; wherein each business includes one or more business objects.

[0109] In an optional embodiment of the present disclosure, the audit module 605 is specifically used to determine the operation type of the network configuration plan to be issued based on the audit request for the network configuration plan to be issued; audit the instance to be issued based on the operation type to obtain the audit result.

[0110] In an optional embodiment of the present disclosure, the audit module 605 is specifically used to search from the service instances in the actual network according to the instance to be issued if the operation type is an addition operation, so that if the service instance identical to the instance to be issued is found, the audit result is an audit failure;

[0111] And / or, if there are configuration instances in the instances to be delivered that are not defined by the business twin model, the audit result is audit failure;

[0112] And / or, based on the command configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, then the audit result is audit failure;

[0113] And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, and the audit result is audit failure.

[0114] In an optional embodiment of the present disclosure, the audit module 605 is specifically configured to search from the service instances in the actual network according to the instance to be issued if the operation type is a modification operation or a deletion operation, so that if the service instance identical to the instance to be issued is not found, the audit result is an audit failure;

[0115] And / or, if there are configuration instances in the instances to be delivered that are not defined by the business twin model, the audit result is audit failure;

[0116] And / or, based on the command configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, then the audit result is audit failure;

[0117] And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, and the audit result is audit failure.

[0118] The network configuration data auditing device 600 provided in the embodiment of the present disclosure can execute the technical solution of the network configuration data auditing method in any of the above-mentioned embodiments. Its implementation principle and beneficial effects are similar to the implementation principle and beneficial effects of the network configuration data auditing method. Please refer to the implementation principle and beneficial effects of the network configuration data auditing method, which will not be repeated here.

[0119] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, on which a program product capable of implementing the above method of the present specification is stored. In some possible implementations, various aspects of the present invention may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of the present specification.

[0120] The program product for implementing the above method according to an embodiment of the present invention may adopt a portable compact disc read-only memory (CD-ROM) and include program code, and may be run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited thereto, and in this document, a readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus or a device.

[0121] The program product may adopt any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0122] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0123] The program code contained on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, radio frequency (RF), etc., or any suitable combination of the foregoing.

[0124] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., via the Internet using an Internet Service Provider).

[0125] In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

[0126] It will be appreciated by those skilled in the art that various aspects of the present invention may be implemented as a system, method or program product. Therefore, various aspects of the present invention may be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as a "circuit", "module" or "system".

[0127] Refer to the following Figure 7 An electronic device 700 according to this embodiment of the present invention will be described. Figure 7 The electronic device 700 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0128] like Figure 7As shown, the electronic device 700 is in the form of a general computing device. The components of the electronic device 700 may include, but are not limited to: the at least one processing unit 710, the at least one storage unit 720, a bus 730 connecting different system components (including the storage unit 720 and the processing unit 710), and a display unit 740.

[0129] The storage unit stores program codes, which can be executed by the processing unit 710, so that the processing unit 710 performs the steps of various exemplary embodiments of the present invention described in the above “Exemplary Method” section of this specification. For example, the processing unit 710 can perform the following steps: Figure 3 Steps 301 to 305 shown in FIG.

[0130] The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 7201 and / or a cache storage unit 7202 , and may further include a read-only storage unit (ROM) 7203 .

[0131] The storage unit 720 may also include a program / utility 7204 having a set (at least one) of program modules 7205, such program modules 7205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0132] Bus 730 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0133] The electronic device 700 may also communicate with one or more external devices 1000 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 700, and / or communicate with any device that enables the electronic device 700 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 750. Furthermore, the electronic device 700 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 760. As shown, the network adapter 760 communicates with other modules of the electronic device 700 via a bus 730. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, disk arrays (Redundant Arrays of Independent Disks, RAID) systems, tape drives, and data backup storage systems.

[0134] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0135] In addition, the above-mentioned figures are only schematic illustrations of the processes included in the method according to an exemplary embodiment of the present invention, and are not intended to be limiting. It is easy to understand that the processes shown in the above-mentioned figures do not indicate or limit the time sequence of these processes. In addition, it is also easy to understand that these processes can be performed synchronously or asynchronously, for example, in multiple modules.

[0136] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0137] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary technical means in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the claims.

[0138] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A method for auditing network configuration data, characterized in that: include: Generate a network element twin of an actual network element based on the digital twin technology, wherein the network element data corresponding to the network element twin at least includes instruction configuration data; Encapsulating the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; Based on the pre-built service twin model, multiple network element configuration twins are associated to generate a first service object, and a service twin is generated based on the first service object; wherein each service twin corresponds to a service instance in the actual network; For each instruction configuration data in the network configuration scheme to be issued, generate a configuration instance corresponding to each instruction configuration data according to the network element configuration model, associate multiple configuration instances based on the business twin model, generate a second business object, and generate an instance to be issued based on the second business object; The instance to be issued is audited based on the service instance in the actual network to obtain an audit result.

2. The method according to claim 1, characterized in that The network element configuration model includes one or more of a configuration model name, a configuration specification, an instruction parameter list, and a parameter constraint condition; wherein the configuration specification is composed of a network element type and an instruction keyword corresponding to the network element configuration model, and each instruction configuration data corresponds to a network element configuration model.

3. The method according to claim 1 or 2, characterized in that: The instruction configuration data is encapsulated according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data, including: Search target instruction configuration data with instruction configuration parameters from all instruction configuration data on the network element twin, encapsulate the target instruction configuration data, and obtain the network element configuration twin corresponding to the target instruction configuration data.

4. The method according to claim 1, characterized in that: The business twin model includes the business identifier, business objects, a mapping relationship between business objects and network element configuration twins, and constraints of network element configuration twins; wherein each business includes one or more business objects.

5. The method according to claim 1, characterized in that Auditing the instance to be issued based on the service instance in the actual network to obtain an audit result, including: Based on the audit request for the network configuration scheme to be issued, determining the operation type for the network configuration scheme to be issued; The instance to be issued is audited based on the operation type to obtain an audit result.

6. The method according to claim 5, characterized in that Auditing the instance to be issued based on the operation type to obtain an audit result, including: If the operation type is an add operation, a search is performed from the service instances in the actual network according to the instance to be issued, and if a service instance identical to the instance to be issued is found, the audit result is an audit failure; And / or, if there is a configuration instance in the to-be-delivered instance that is not defined by the business twin model, the audit result is an audit failure; and / or, based on the instruction configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, then the audit result is an audit failure; And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, then the audit result is an audit failure.

7. The method according to claim 5, characterized in that Auditing the instance to be issued based on the operation type to obtain an audit result, including: If the operation type is a modification operation or a deletion operation, a search is performed from the service instances in the actual network according to the instance to be issued, and if a service instance identical to the instance to be issued is not found, the audit result is an audit failure; And / or, if there is a configuration instance in the to-be-delivered instance that is not defined by the business twin model, the audit result is an audit failure; and / or, based on the instruction configuration parameters in the instance to be issued, no associated configuration instance is searched in the service instance in the actual network, then the audit result is an audit failure; And / or, based on the attribute constraints of the configuration instance in the instance to be issued, the corresponding business twin is not searched from the business instance in the actual network, then the audit result is an audit failure.

8. A network configuration data auditing device, characterized in that: The device comprises: A twin generation module, used to generate a network element twin of an actual network element based on the digital twin technology, wherein the network element data corresponding to the network element twin at least includes instruction configuration data; A packaging module, used to package the instruction configuration data according to a pre-built network element configuration model to obtain a network element configuration twin corresponding to the instruction configuration data; A first business object generation module, used to associate the plurality of network element configuration twins based on a pre-built business twin model, generate a first business object, and generate a business twin based on the first business object; wherein each of the business twins corresponds to a business instance in an actual network; A second business object generation module, for each instruction configuration data in the network configuration scheme to be issued, generating a configuration instance corresponding to each instruction configuration data according to the network element configuration model, and associating multiple configuration instances based on the business twin model to generate a second business object, and generating an instance to be issued based on the second business object; The audit module is used to audit the instance to be issued based on the service instance in the actual network to obtain an audit result.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the network configuration data audit method according to any one of claims 1 to 7 is implemented.

10. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; The processor is configured to execute the network configuration data auditing method according to any one of claims 1 to 7 by executing the executable instructions.

Images