Cluster equipment management method and device and electronic equipment

Abstract

The invention provides a cluster device management method and apparatus, and an electronic device, a cluster center verifies device information encrypted and transmitted by a target device through a unified management interface, and stores the device information and a digital certificate sent by the target device through the unified management interface after the device information passes the verification. And performing fault detection on the target equipment based on the periodically acquired running state information of the target equipment by adopting a pre-trained fault detection algorithm, performing alarm processing when detecting that the target equipment has a fault, and responding to a configuration operation for the target equipment of the configuration management interface. And generating an encrypted digital signature based on configuration information corresponding to the configuration operation, and sending the configuration information and the encrypted digital signature to the target device through the unified management interface. By adopting the method and the device, the management requirements of various different types of equipment can be met.

Description

Technical Field

[0001] The present invention relates to the technical field of computer data communication, and in particular to a cluster equipment management method, device and electronic equipment. Background Art

[0002] With the continuous development of computer communication technology, large-scale data distribution centers are often composed of multiple high-performance devices. The data accessed by each high-performance device may come from multiple operators. The data accessed by each high-performance device is output to the back-end business system after distribution processing.

[0003] The current device management method is generally: a single device manages itself, and relevant personnel need to log in to the device to view the device status, traffic information, and configure relevant rules, which has poor scalability. This device management method has problems such as low efficiency of independent device management, insufficient resource utilization, and inconsistent interfaces, making it difficult to meet the management needs of various types of devices. Summary of the invention

[0004] In view of this, an object of the present invention is to provide a cluster device management method, apparatus and electronic device to alleviate the above-mentioned problems existing in the existing device management method.

[0005] In a first aspect, an embodiment of the present invention provides a cluster device management method, which is applied to a cluster center, wherein the cluster center is provided with a unified management interface that supports communication with multiple different types of devices, and the cluster center is provided with a configuration management interface connected to the unified management interface, wherein the cluster device management method comprises: verifying device information encrypted and transmitted by a target device through the unified management interface, and storing the device information and a digital certificate sent by the target device through the unified management interface after the device information is verified; wherein the digital certificate is generated by the target device based on the device information, and the digital certificate is used to uniquely characterize the target device; periodically collecting operating status information of the target device, and using a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and performing alarm processing when a fault is detected in the target device; in response to a configuration operation of the target device on the configuration management interface, generating an encrypted digital signature based on the configuration information corresponding to the configuration operation, and sending the configuration information and the encrypted digital signature to the target device through the unified management interface; the target device is used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

[0006] In a second aspect, an embodiment of the present invention further provides a cluster device management device, which is applied to a cluster center, and the cluster center is provided with a unified management interface that supports communication with multiple different types of devices, and the cluster center is provided with a configuration management interface connected to the unified management interface, and the cluster device management device includes: a device verification module, which is used to verify the device information of the target device encrypted and transmitted through the unified management interface, and after the device information is verified, the device information and the digital certificate sent by the target device through the unified management interface are stored; wherein the digital certificate is generated by the target device based on the device information, and the digital certificate The book is used to uniquely characterize the target device; the monitoring alarm module is used to periodically collect the operating status information of the target device, and use a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and perform alarm processing when a fault is detected in the target device; the device configuration module is used to respond to the configuration operation of the target device of the configuration management interface, generate an encrypted digital signature based on the configuration information corresponding to the configuration operation, and send the configuration information and the encrypted digital signature to the target device through the unified management interface; the target device is used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

[0007] In a third aspect, an embodiment of the present invention further provides an electronic device, including a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the cluster device management method described in the first aspect above.

[0008] The embodiment of the present invention provides a cluster device management method, device and electronic device, in which the cluster center verifies the device information encrypted and transmitted by the target device through the unified management interface, and stores the device information and the digital certificate sent by the target device through the unified management interface after the device information verification is passed, uses a pre-trained fault detection algorithm to detect faults on the target device based on the periodically collected operating status information of the target device, performs alarm processing when a fault in the target device is detected, responds to the configuration operation of the target device on the configuration management interface, generates an encrypted digital signature based on the configuration information corresponding to the configuration operation, and sends the configuration information and the encrypted digital signature to the target device through the unified management interface, so that the target device decrypts the encrypted digital signature and verifies the configuration information based on the decrypted digital signature. By adopting the above technology, unified management of different types of devices can be achieved through a unified management interface, which can meet the management needs of multiple different types of devices.

[0009] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description, claims and drawings.

[0010] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0012] Figure 1 A schematic diagram of a cluster device management method according to an embodiment of the present invention;

[0013] Figure 2 A schematic diagram of the structure of a cluster device management device in an embodiment of the present invention;

[0014] Figure 3 A schematic diagram of the structure of another cluster device management device according to an embodiment of the present invention;

[0015] Figure 4 The figure is a schematic diagram of the structure of an electronic device in an embodiment of the present invention. DETAILED DESCRIPTION

[0016] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described in combination with the embodiments below. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] At present, the traditional device management method has problems such as low efficiency of independent device management, insufficient resource utilization, and inconsistent interfaces, making it difficult to meet the management needs of various types of devices. Based on this, the present invention provides a cluster device management method, device, and electronic device, which can alleviate the above problems in the existing device management method.

[0018] To facilitate understanding of this embodiment, a cluster device management method disclosed in an embodiment of the present invention is first described in detail. The cluster device management method can be applied to a cluster center. The cluster center can be provided with a unified management interface that supports communication with multiple different types of devices. The cluster center can be provided with a configuration management interface connected to the unified management interface. Figure 1 As shown, the cluster device management method may include the following steps:

[0019] Step S102: verify the device information encrypted and transmitted by the target device through the unified management interface, and store the device information and the digital certificate sent by the target device through the unified management interface after the device information verification passes.

[0020] The digital certificate may be generated by the target device based on the device information, and the digital certificate may be used to uniquely identify the target device.

[0021] Step S104, periodically collect the operating status information of the target device, and use a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and perform alarm processing when a fault is detected in the target device.

[0022] Step S106, in response to the configuration operation on the target device of the configuration management interface, generating an encrypted digital signature based on the configuration information corresponding to the configuration operation, and sending the configuration information and the encrypted digital signature to the target device through the unified management interface.

[0023] The target device may be used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

[0024] The embodiment of the present invention provides a cluster device management method, in which the cluster center verifies the device information encrypted and transmitted by the target device through the unified management interface, and stores the device information and the digital certificate sent by the target device through the unified management interface after the device information verification is passed, uses a pre-trained fault detection algorithm to detect faults on the target device based on the periodically collected operating status information of the target device, performs alarm processing when a fault is detected in the target device, responds to the configuration operation of the target device on the configuration management interface, generates an encrypted digital signature based on the configuration information corresponding to the configuration operation, and sends the configuration information and the encrypted digital signature to the target device through the unified management interface, so that the target device decrypts the encrypted digital signature and verifies the configuration information based on the decrypted digital signature. By adopting the above technology, unified management of different types of devices can be achieved through the unified management interface, which can meet the management needs of multiple different types of devices.

[0025] As a possible implementation, the above step S102 (i.e., verifying the device information encrypted and transmitted by the target device through the unified management interface, and storing the device information and the digital certificate sent by the target device through the unified management interface after the device information is verified) may include:

[0026] Step 1: Use a first decryption algorithm to decrypt the encrypted device information sent by the target device through the unified management interface to obtain the device information.

[0027] The encrypted device information is obtained after the target device encrypts the device information using the first encryption algorithm corresponding to the first decryption algorithm.

[0028] Step 2: Verify the device information, and store the device information and digital certificate in a secure database after the device information verification is passed.

[0029] As a possible implementation, the operating status information may include device status information and device traffic access output data of the target device; based on this, the periodic collection of the operating status information of the target device in the above step S104 may include: collecting the device status information of the target device according to a first period; collecting the device traffic access output data of the target device according to a second period; wherein the duration of the second period is less than the duration of the first period.

[0030] In actual application, device status information may include device temperature, fan speed, power consumption, disk usage, CPU utilization, memory usage, etc., which are not limited. Device traffic access and output data refers to the data traffic generated by the device on the network, including data traffic in both access and output directions.

[0031] As a possible implementation, the fault detection algorithm may adopt the Transformer algorithm; based on this, the above-mentioned step S104 using a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information may include: using a pre-trained Transformer algorithm to calculate the device status information and the device traffic access output data to determine whether the target device has a fault.

[0032] The training process of the Transformer algorithm can mainly be: obtaining historical equipment operation status data within a preset time period (including historical equipment status data and historical equipment traffic access and output data), and dividing the obtained historical equipment operation status data into a training set and a test set according to a certain ratio, using the training set to train the Transformer algorithm, and using the test set to test the performance of the Transformer algorithm until the Transformer algorithm training is completed.

[0033] As a possible implementation, the alarm processing when a target device failure is detected in the above step S104 may include: when using a pre-trained Transformer algorithm to determine whether the target device has a failure, determining the fault type and fault degree of the target device failure, and performing alarm processing based on the fault type and fault degree.

[0034] Among them, the fault types can be divided into equipment status faults, flow faults and operation faults, and the fault degrees can be divided into slight degree, general degree, severe degree and emergency degree.

[0035] Exemplarily, when using a pre-trained Transformer algorithm to determine whether a target device has a fault, the following operations can be performed: if the fault level is urgent, a first alarm message is generated and the first alarm message is sent to a user terminal connected to the target device through a unified management interface so that the first alarm message is displayed through the user terminal; if the fault level is minor, general or severe, a second alarm message is generated and displayed.

[0036] As a possible implementation, generating an encrypted digital signature based on the configuration information corresponding to the configuration operation in the above step S106 may include: using a preset digest algorithm to calculate a first digest of the configuration information, and using a second encryption algorithm to encrypt the first digest to obtain an encrypted digital signature.

[0037] Correspondingly, the above-mentioned steps of decrypting the encrypted digital signature and verifying the configuration information based on the decrypted digital signature performed by the target device may include: using a second decryption algorithm corresponding to the second encryption algorithm to decrypt the encrypted digital signature to obtain a digital signature; using a preset digest algorithm to calculate a second digest of the configuration information, and comparing the second digest and the digital signature; if the second digest is consistent with the digital signature (indicating that the configuration information has not been tampered with), the configuration information verification is successful; if the second digest is inconsistent with the digital signature (indicating that the configuration information may have been tampered with), the configuration information verification fails.

[0038] As a possible implementation, the cluster device management method may further include: when the target device needs to be upgraded, using breakpoint resume technology to transfer the upgrade file of the target device to the target device in blocks through the unified management interface.

[0039] Accordingly, after receiving all the data blocks divided by the upgrade file, the target device can be used to splice all the received data blocks into the upgrade file and perform the upgrade using the upgrade file.

[0040] For ease of understanding, the implementation of the above cluster device management method is described below by taking a specific application as an example.

[0041] The above cluster device management method realizes the discovery and registration of each cluster device through the device registration mechanism, and realizes the unified management of various types of devices (including device monitoring, configuration, upgrade, etc.) through a unified management interface.

[0042] 1. Device registration mechanism:

[0043] All types of devices are connected to the cluster center through a secure encrypted channel for registration. During registration, in addition to providing basic information such as the device model, serial number, IP address, etc., a unique digital certificate for the device is also generated to ensure the authenticity and security of the device identity.

[0044] The registered device uses the public key of the RSA algorithm to encrypt the device information (such as the device model, serial number, IP address, etc.) and sends the encrypted information to the cluster center. The cluster center uses the private key of the RSA algorithm to decrypt the received encrypted information. The cluster center compares the decrypted information with the existing basic information of the registered device to verify the device information. If the decrypted information is consistent with the existing basic information, the device information verification passes. If the decrypted information is inconsistent with the existing basic information, the device information verification fails. After the device information verification passes, the cluster center stores the device information and digital certificate in a secure database.

[0045] (II) Unified management interface:

[0046] The cluster center provides a unified management interface based on standardized protocols (such as the latest intelligent device management protocol) for various types of devices. This interface has strong compatibility and scalability and can adapt to devices of different models and performances.

[0047] The cluster center can have an adaptation layer and can formulate specifications based on the standard Restful API interface. New devices communicate with the cluster center in a unified manner according to this specification. The cluster center's adaptation layer can be used to map and convert the interfaces of old devices into interfaces that can communicate with the cluster center in accordance with the specification, so that the cluster center can support unified management of new and old devices through a unified management interface. The cluster center's adaptation layer can also be used to convert the interfaces of other manufacturers' devices into interfaces that can communicate with the cluster center in accordance with the specification, so that the cluster center can support multi-vendor device management through a unified management interface.

[0048] The unified management interface uses the RSA algorithm for data encryption and decryption and identity authentication to ensure the security and reliability of communications.

[0049] (III) Intelligent device monitoring:

[0050] The cluster center uses real-time data collection and analysis algorithms to conduct all-round monitoring of the equipment's operating status, including accurate measurement of equipment load and flow, and the use of intelligent fault detection algorithms to promptly detect potential faults. For example, equipment status information (such as equipment temperature, fan speed, power consumption, disk usage, CPU utilization, memory usage and other load data) is collected every five minutes, and equipment flow access and output data is collected every minute. The Transformer algorithm can be trained in advance using historical equipment operating status data (including historical equipment status data and historical equipment flow access and output data), so that the current load data and current flow data can be input into the trained Transformer algorithm, and the trained Transformer algorithm can be used to make judgments on the latest data and predict the data situation in the next 24 hours.

[0051] When a device fails, the cluster center immediately issues an alarm and automatically starts the corresponding fault handling process according to the fault type and fault severity, and pushes the fault information to relevant managers. Faults can be divided into device status alarms (such as power supply, fan, system temperature, disk, CPU, memory, etc.), port flow alarms (such as port packet loss, port error packet, port disconnection, etc.), and operation alarms (such as untrusted IP, user authentication, account password modification, etc.). Device loss in device status alarms and port disconnection in port flow alarms are emergency alarms. For emergency alarms, not only will the alarm information be displayed on the cluster center, but the operation and maintenance managers will also be notified by SMS, E-mail, etc. Other alarms are divided into minor, general, and major. For minor alarms, general alarms, and major alarms, the alarm information is only displayed on the cluster center.

[0052] (IV) Personalized equipment configuration:

[0053] The cluster center provides a visual configuration management interface, where users can perform personalized configurations for different devices according to the needs of different devices. The configuration information is encrypted and decrypted using the RSA algorithm combined with digital signatures during transmission to ensure the accuracy and security of device configuration.

[0054] The cluster center also has the function of intelligent configuration recommendation. Usually, the configurations of the same type of equipment will be similar. Therefore, when users configure a certain type of equipment, simple configuration recommendation information can be given based on the user's configuration history of the equipment (such as data filtering rule configuration, equipment alarm threshold configuration, data collection configuration, etc.).

[0055] (V) Equipment upgrade:

[0056] When the cluster center detects that a device needs to be upgraded, it uses block transmission and breakpoint resume technology to transfer the upgrade file to the diversion device safely and quickly.

[0057] During the block transmission process, both the device and the cluster center will record the transmission progress. For example, the cluster center will record the number of the data block that has been sent, and the device will record the number of the data block that has been successfully received. These records can be stored in variables in the memory or in local files.

[0058] When the block transmission process is interrupted due to network failure, device restart, etc., the device and cluster center will implement breakpoint resuming by checking the transmission progress record. For example, if the transmission is interrupted when the nth data block is transmitted, the device will send a request message containing the number of the received data block to the cluster center after reconnecting to the cluster center.

[0059] After receiving the request message, the cluster center will continue to transmit the remaining data blocks to the device from the last interrupted position (i.e., the nth data block). During the continued transmission process, the cluster center will still wait for the device to return confirmation information after sending each data block in the block transmission mode to ensure that the device correctly receives the data block.

[0060] After receiving all the data blocks, the device will check the header information of each data block again to ensure the integrity of all data blocks. If all data blocks are complete, the device will assemble all the received data blocks into a complete upgrade file according to the data block number.

[0061] The device will perform a comprehensive check on the assembled upgrade file, such as calculating the file's hash value and comparing it with the original file hash value provided by the cluster center to ensure that there are no errors in the upgrade file transmission and assembly process. If the hash values ​​are consistent, the device can use the assembled upgrade file to start the upgrade operation.

[0062] During the upgrade process, the device version is backed up and rolled back to ensure that the device can be quickly restored to the state before the upgrade if the upgrade fails, without affecting normal business operations. The device version is managed and backed up through the cluster center.

[0063] To further facilitate understanding, the above (i) to (v) are exemplarily described below using device A as an example.

[0064] For the device registration in (a) above:

[0065] After device A is started, it connects to the cluster center through a secure encrypted channel; device A generates a unique digital certificate and sends the basic device information and the digital certificate to the cluster center for storage, and device A is successfully registered.

[0066] Device A uses the public key of the RSA algorithm to encrypt the device information and sends it to the cluster center. The cluster center uses the private key of the RSA algorithm to decrypt the device information and compares the decrypted result with the stored basic device information to verify device A. After device A is verified (that is, the decryption result is consistent with the basic device information), the cluster center stores the device information and digital certificate in a secure database.

[0067] For the unified management interface of (ii) above:

[0068] The cluster center provides a unified management interface based on a standardized protocol for device A, which uses the RSA algorithm for data encryption and decryption and identity authentication.

[0069] Device A communicates with the cluster center through a unified management interface to implement management operations such as monitoring, configuration, and upgrading of device A.

[0070] Regarding the equipment monitoring of (III) above:

[0071] The cluster center periodically sends a monitoring request to device A. After receiving the request, device A returns the device's operating status information to the cluster center.

[0072] The cluster center uses the pre-trained Transformer algorithm to analyze and process the operating status information of device A. When a fault is found, an alarm is immediately issued and the fault handling process is started. For emergency alarms, the alarm information is not only displayed on the cluster center, but also notified to the operation and maintenance management personnel in the form of SMS and E-mail. For minor alarms, general alarms and serious alarms, the alarm information is only displayed on the cluster center.

[0073] For the personalized device configuration of (IV) above:

[0074] The user performs personalized configuration of device A through the visual configuration management interface of the cluster center. The configuration information is transmitted to device A using the RSA algorithm encryption and decryption combined with digital signature technology.

[0075] When a user performs personalized configuration on device A, the cluster center provides the user with intelligent configuration recommendation information based on the historical configuration records of device A.

[0076] For the equipment upgrade of (V) above:

[0077] When the cluster center detects that the software version of device A needs to be upgraded, it uses block transmission and breakpoint resume technology to transfer the upgrade file to device A.

[0078] During the upgrade process of device A, the software version is backed up and rolled back to ensure that the upgrade of device A is successful and does not affect normal business operations.

[0079] Based on the above cluster device management method, an embodiment of the present invention further provides a cluster device management device, which can be applied to a cluster center. The cluster center can be provided with a unified management interface that supports communication with multiple different types of devices. The cluster center can be provided with a configuration management interface connected to the unified management interface. Figure 3 As shown, the cluster device management device may include the following modules:

[0080] The device verification module 202 is used to verify the device information encrypted and transmitted by the target device through the unified management interface, and to store the device information and the digital certificate sent by the target device through the unified management interface after the device information is verified; wherein, the digital certificate is generated by the target device based on the device information, and the digital certificate is used to uniquely characterize the target device.

[0081] The monitoring alarm module 204 is used to periodically collect the operating status information of the target device, and use a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and perform alarm processing when a fault is detected in the target device.

[0082] The device configuration module 206 is used to respond to the configuration operation of the target device of the configuration management interface, generate an encrypted digital signature based on the configuration information corresponding to the configuration operation, and send the configuration information and the encrypted digital signature to the target device through the unified management interface; the target device is used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

[0083] By adopting the above-mentioned cluster equipment management device, the cluster center verifies the equipment information of the target device encrypted and transmitted through the unified management interface, and stores the equipment information and the digital certificate sent by the target device through the unified management interface after the equipment information verification is passed. A pre-trained fault detection algorithm is used to perform fault detection on the target device based on the operating status information of the target device collected periodically, and an alarm is processed when a fault in the target device is detected. In response to the configuration operation of the target device on the configuration management interface, an encrypted digital signature is generated based on the configuration information corresponding to the configuration operation, and the configuration information and the encrypted digital signature are sent to the target device through the unified management interface so that the target device can decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature. Unified management of different types of equipment can be achieved through the unified management interface, which can meet the management needs of various different types of equipment.

[0084] The above-mentioned device verification module 202 can also be used to: use a first decryption algorithm to decrypt the encrypted device information sent by the target device through the unified management interface to obtain the device information; wherein the encrypted device information is obtained after the target device uses a first encryption algorithm corresponding to the first decryption algorithm to encrypt the device information; verify the device information, and store the device information and the digital certificate in a security database after the device information verification is passed.

[0085] The above-mentioned operating status information may include the device status information of the target device and the device traffic access and output data; based on this, the above-mentioned monitoring alarm module 204 can also be used to: collect the device status information of the target device according to the first period; collect the device traffic access and output data of the target device according to the second period; wherein the duration of the second period is less than the duration of the first period.

[0086] The above fault detection algorithm may adopt the Transformer algorithm; based on this, the above monitoring alarm module 204 may also be used to: use a pre-trained Transformer algorithm to calculate the device status information and the device traffic access output data to determine whether a target device fails.

[0087] The above-mentioned monitoring alarm module 204 can also be used for: when using a pre-trained Transformer algorithm to determine whether a target device has a fault, determining the fault type and fault degree of the target device, and performing alarm processing based on the fault type and the fault degree; wherein the fault type is divided into device status fault, flow fault and operation fault.

[0088] The above-mentioned fault degree can be divided into a slight degree, a general degree, a severe degree and an emergency degree; based on this, the above-mentioned monitoring alarm module 204 can also be used for: if the fault degree is an emergency degree, then a first alarm message is generated and the first alarm message is sent to a user terminal connected to the target device through the unified management interface, so as to display the first alarm message through the user terminal; if the fault degree is a slight degree, a general degree or a severe degree, then a second alarm message is generated and the second alarm message is displayed.

[0089] The device configuration module 206 can also be used to: calculate the first summary of the configuration information using a preset summary algorithm, and encrypt the first summary using a second encryption algorithm to obtain the encrypted digital signature. Correspondingly, the step of decrypting the encrypted digital signature and verifying the configuration information based on the decrypted digital signature can include: decrypting the encrypted digital signature using a second decryption algorithm corresponding to the second encryption algorithm to obtain the digital signature; calculating the second summary of the configuration information using the preset summary algorithm, and comparing the second summary with the digital signature; if the second summary is consistent with the digital signature, the configuration information is verified.

[0090] Based on the above Figure 2 The cluster device management device shown in the embodiment of the present invention also provides another cluster device management device, see Figure 3 As shown, the cluster device management device may also include:

[0091] The device upgrade module 208 is used to use the breakpoint resume technology to transmit the upgrade file of the target device to the target device in blocks through the unified management interface when the target device needs to be upgraded; the target device is used to splice all the received data blocks into the upgrade file after receiving all the data blocks divided by the upgrade file and use the upgrade file to upgrade.

[0092] The cluster device management device provided in the embodiment of the present invention has the same implementation principle and technical effects as those of the aforementioned cluster device management method embodiment. For the sake of brief description, for matters not mentioned in the cluster device management device embodiment, reference may be made to the corresponding contents in the aforementioned cluster device management method embodiment.

[0093] The embodiment of the present invention further provides an electronic device, such as Figure 4 As shown, it is a schematic diagram of the structure of the electronic device, wherein the electronic device includes a processor 41 and a memory 40, the memory 40 stores computer executable instructions that can be executed by the processor 41, and the processor 41 executes the computer executable instructions to implement the above cluster device management method.

[0094] exist Figure 4 In the illustrated embodiment, the electronic device further includes a bus 42 and a communication interface 43 , wherein the processor 41 , the communication interface 43 and the memory 40 are connected via the bus 42 .

[0095] Among them, the memory 40 may include a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 43 (which can be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. can be used. The bus 42 can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The bus 42 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0096] The processor 41 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 41 or the instruction in the form of software. The above processor 41 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor 41 reads the information in the memory and completes the steps of the cluster device management method of the above embodiment in combination with its hardware.

[0097] Unless otherwise specifically stated, the relative steps, numerical expressions and values ​​of the components and steps set forth in these embodiments do not limit the scope of the present invention.

[0098] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0099] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.

[0100] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A cluster device management method, characterized in that: The cluster device management method is applied to a cluster center, the cluster center is provided with a unified management interface supporting communication with multiple different types of devices, the cluster center is provided with a configuration management interface connected to the unified management interface, and the cluster device management method includes: Verifying the device information encrypted and transmitted by the target device through the unified management interface, and storing the device information and the digital certificate sent by the target device through the unified management interface after the device information is verified; wherein the digital certificate is generated by the target device based on the device information, and the digital certificate is used to uniquely characterize the target device; Periodically collect the operating status information of the target device, and use a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and perform alarm processing when a fault is detected in the target device; In response to a configuration operation on a target device of the configuration management interface, an encrypted digital signature is generated based on configuration information corresponding to the configuration operation, and the configuration information and the encrypted digital signature are sent to the target device through the unified management interface; the target device is used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

2. The cluster device management method according to claim 1, characterized in that: Verifying the device information encrypted and transmitted by the target device through the unified management interface, and storing the device information and the digital certificate sent by the target device through the unified management interface after the device information is verified, including: Decrypting the encrypted device information sent by the target device through the unified management interface using a first decryption algorithm to obtain the device information; wherein the encrypted device information is obtained after the target device encrypts the device information using a first encryption algorithm corresponding to the first decryption algorithm; The device information is verified, and after the device information is verified, the device information and the digital certificate are stored in a secure database.

3. The cluster device management method according to claim 1, characterized in that: The operation status information includes device status information of the target device and device flow access output data; Periodically collect the operating status information of the target device, including: Collect device status information of the target device according to the first cycle; The device traffic access output data of the target device is collected according to a second period; wherein the duration of the second period is shorter than the duration of the first period.

4. The cluster device management method according to claim 3, characterized in that: The fault detection algorithm adopts the Transformer algorithm; Using a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, including: A pre-trained Transformer algorithm is used to calculate the device status information and the device traffic access output data to determine whether a target device fails.

5. The cluster device management method according to claim 4, characterized in that: When a target device failure is detected, an alarm is processed, including: When using a pre-trained Transformer algorithm to determine whether a target device has a fault, the fault type and fault degree of the target device are determined, and an alarm is processed based on the fault type and the fault degree; wherein the fault type is divided into device status fault, flow fault and operation fault.

6. The cluster device management method according to claim 5, characterized in that: The degree of the fault is divided into minor, general, severe and urgent; Determine the fault type and fault severity of the target device, and perform alarm processing based on the fault type and fault severity, including: If the fault degree is an emergency degree, generating first alarm information and sending the first alarm information to a user terminal connected to the target device through the unified management interface, so that the first alarm information is displayed through the user terminal; If the fault level is slight, moderate or severe, a second warning message is generated and displayed.

7. The cluster device management method according to claim 1, characterized in that: Generating an encrypted digital signature based on the configuration information corresponding to the configuration operation includes: Calculating a first summary of the configuration information using a preset summary algorithm, and encrypting the first summary using a second encryption algorithm to obtain the encrypted digital signature; Decrypting the encrypted digital signature and verifying the configuration information based on the decrypted digital signature includes: Decrypting the encrypted digital signature using a second decryption algorithm corresponding to the second encryption algorithm to obtain the digital signature; Calculating a second digest of the configuration information using the preset digest algorithm, and comparing the second digest with the digital signature; If the second summary is consistent with the digital signature, the configuration information is verified successfully.

8. The cluster device management method according to claim 1, characterized in that: The cluster device management method further includes: When the target device needs to be upgraded, the breakpoint resume technology is used to transmit the upgrade file of the target device to the target device in blocks through the unified management interface; the target device is used to splice all the received data blocks into the upgrade file after receiving all the data blocks divided by the upgrade file and use the upgrade file to perform the upgrade.

9. A cluster device management device, characterized in that: The cluster device management device is applied to a cluster center, the cluster center is provided with a unified management interface supporting communication with multiple different types of devices, the cluster center is provided with a configuration management interface connected to the unified management interface, and the cluster device management device includes: A device verification module, used to verify the device information encrypted and transmitted by the target device through the unified management interface, and store the device information and the digital certificate sent by the target device through the unified management interface after the device information is verified; wherein the digital certificate is generated by the target device based on the device information, and the digital certificate is used to uniquely characterize the target device; A monitoring and alarm module is used to periodically collect the operating status information of the target device, and use a pre-trained fault detection algorithm to perform fault detection on the target device based on the operating status information, and perform alarm processing when a fault is detected in the target device; A device configuration module is used to respond to a configuration operation on a target device of the configuration management interface, generate an encrypted digital signature based on configuration information corresponding to the configuration operation, and send the configuration information and the encrypted digital signature to the target device through the unified management interface; the target device is used to decrypt the encrypted digital signature and verify the configuration information based on the decrypted digital signature.

10. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the cluster device management method according to any one of claims 1 to 8.

Images