Method and device for determining network topology structure and nonvolatile storage medium

Abstract

The invention discloses a method and a device for determining a network topology structure and a nonvolatile storage medium. The method comprises the following steps: obtaining call detailed record data of a core network, the call detailed record data at least comprising a network type, a network element type, a protocol type, a source network element IP address and a destination network element IP address of a service route; determining effective service routing information according to the call detailed record data; obtaining a primary network topological structure based on the effective service routing information and a preset topological relation; and expanding the first-level network topology structure into a multi-layer network topology structure layer by layer according to the service logic relationship. According to the method and the device, the technical problems of low layout efficiency and poor effect caused by difficulty in automatically finding and clearly displaying the topological structure of the core network when a multi-layer complex network is processed due to the fact that the related technology focuses on automatic layout of single-layer network topology are solved.

Description

Technical Field

[0001] The present application relates to the field of information technology, and in particular to a method and device for determining a network topology structure and a non-volatile storage medium. Background Art

[0002] With the rapid development of communication networks, the increasing number of business application scenarios has put forward higher requirements for network construction and maintenance. There are more and more types of network devices connected to the core network, the network scale is getting larger and larger, and the routing topology is getting more and more complex. Traditional network topologies are mostly solidified and displayed through configuration, but modern communication networks are heterogeneous and dynamically changing. How to enable network maintenance personnel to quickly grasp the network situation, intuitively judge and locate network faults, and improve the professionalism, accuracy and real-time performance of network topology is a hot spot and difficulty in the current core network operation and maintenance work. Not only in the field of communications, in recent years, with the rapid development of networks and electronic communications, complex network research has become a frontier field of science and engineering, and has achieved many important results. However, in related technologies, most of the research in the field of complex networks is still focused on single-layer networks (or single networks) and ignores the existence of multiple network interactions in actual complex systems, such as various business networks with different network devices and logical relationships, transportation networks of different transportation tools, etc. The relationship between individuals in the network is also becoming more and more complex. If only single-layer relationships are considered, or each layer of relationships is considered in isolation, it cannot meet the requirements of actual complex system research. Related technologies focus on the automatic layout of single-layer network topology. When dealing with multi-layer complex networks, it is difficult to automatically discover and clearly display the core network topology structure, and there are problems such as low layout efficiency, poor results, and unclear node associations.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present application provide a method, device and non-volatile storage medium for determining a network topology structure, so as to at least solve the technical problems that related technologies focus on the automatic layout of a single-layer network topology, and when processing a multi-layer complex network, it is difficult to automatically discover and clearly display the core network topology structure, resulting in low layout efficiency and poor effect.

[0005] According to one aspect of an embodiment of the present application, a method for determining a network topology structure is provided, including: obtaining call detail record data of a core network, wherein the call detail record data includes at least a network type, a network element type, a protocol type, a source network element IP address, and a destination network element IP address of a service route; determining effective service routing information based on the call detail record data, wherein an effective service route is a number of specified sub-periods in which service routing data exists in a continuous preset statistical period that is greater than a preset threshold, and the specified sub-period is a sub-period in which service routing data exists; obtaining a primary network topology structure based on the valid service routing information and a preset topological relationship; and expanding the primary network topology structure layer by layer into a multi-layer network topology structure according to a service logic relationship, wherein the service logic relationship is at least used to indicate a service association relationship of network devices under each primary network topology node in the primary network topology structure.

[0006] In some embodiments of the present application, a multi-layer network topology structure includes at least a primary network topology structure and a secondary network topology structure. The primary network topology structure is a network topology structure obtained by topologically sorting the network element types of service routing in the effective service routing information according to the network type, and the secondary network topology structure is a network topology structure obtained by topologically sorting the network devices under the network element type according to the business logic relationship for each network type in the primary network topology structure.

[0007] In some embodiments of the present application, a primary network topology structure is obtained based on effective business routing information and preset topological relationships, including: obtaining network types and network element types for all business routes in the effective business routing information; topologically sorting the network element types based on the preset topological relationships to obtain a primary network topological structure, wherein the preset topological relationships are predefined connection rules for topologically sorting network element types according to network types.

[0008] In some embodiments of the present application, the first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to business logic relationships, including: each first-level network topology node in the first-level network topology structure is expanded into a second-level network topology structure in the following manner, wherein a first-level network topology node corresponds to a type of network element: determining the network device under the network element type; topologically sorting the network devices based on the business logic relationship to obtain a second-level network topology structure of the first-level network topology node, wherein each second-level network topology node in the second-level network topology structure corresponds to a network device.

[0009] In some embodiments of the present application, the first-level network topology structure is expanded into a second-level network topology structure according to the business logic relationship, including: when the business logic relationship indicates that there are business logic relationships between regions of different levels of business between network devices, topological sorting is performed in the form of a map according to the locations of the regions where the network devices are located, to obtain a second-level network topology structure of the first-level network topology node, wherein the business logic relationship between regions of different levels refers to the existence of different levels of regional differences in the deployment locations of network devices with business associations.

[0010] In some embodiments of the present application, the first-level network topology structure is expanded into a second-level network topology structure according to the business logic relationship, including: when the business logic relationship indicates that there is no business logic relationship between areas of different levels between the services between network devices, topological sorting is performed according to the preset business priorities corresponding to the network devices to obtain the second-level network topology structure of the first-level network topology node.

[0011] In some embodiments of the present application, the method also includes: when the network quality index of the link between any two first-level network topology nodes in the first-level network topology structure is greater than a first preset threshold, determining the first-level network topology nodes at both ends of the link as first-level target network topology nodes; determining the target second-level network topology structure corresponding to the first-level target network topology node, and determining the target network device in the target second-level network topology structure based on the network quality index; generating alarm information corresponding to the target network device, and displaying it in a visual form at the second-level target network topology node corresponding to the target network device and at the first-level target network topology node.

[0012] In some embodiments of the present application, the method also includes: obtaining predicted values ​​for multiple quality indicators of all links in the first-level network topology structure based on historical quality indicators within a preset time according to a time period; determining the deviation value between the predicted value corresponding to each quality indicator and the actual quality indicator value; determining the product of the deviation value corresponding to each quality and the preset weight as the severity component; determining the sum of the severity components of all quality indicators as the severity, a first-level severe alarm when the severity is greater than a second preset threshold, and a second-level severe alarm when the severity is greater than a third preset threshold, wherein the second preset threshold is less than the third preset threshold; when it is identified that the severity of the second time period is higher than the severity of the first time period, the severity of the second time period is pushed to the user terminal, wherein the first time period is the time period before the second time period.

[0013] According to another aspect of an embodiment of the present application, a device for determining a network topology structure is also provided, including: an acquisition module, used to acquire call detail record data of a core network, wherein the call detail record data includes at least a network type, a network element type, a protocol type, a source network element IP address, and a destination network element IP address of a service route; a first determination module, used to determine valid service routing information based on the call detail record data, wherein a valid service route is a number of specified sub-periods in which service routing data exists in a continuous preset statistical period greater than a preset threshold, and the specified sub-period is a sub-period in which service routing data exists; a second determination module, used to obtain a primary network topology structure based on the valid service routing information and a preset topological relationship; an expansion module, used to expand the primary network topology structure layer by layer into a multi-layer network topology structure according to a service logic relationship, wherein the service logic relationship is at least used to indicate the service association relationship of network devices under each primary network topology node in the primary network topology structure.

[0014] According to another aspect of an embodiment of the present application, a non-volatile storage medium is provided, in which a program is stored, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the above method for determining the network topology structure.

[0015] According to another aspect of an embodiment of the present application, an electronic device is further provided, including: a memory and a processor, the processor being configured to run a program stored in the memory, wherein the above method for determining a network topology is executed when the program is run.

[0016] According to another aspect of an embodiment of the present application, a computer program product is also provided, including computer instructions, and when the computer instructions are executed by a processor, the above method for determining a network topology structure is implemented.

[0017] In an embodiment of the present application, call detail record data of a core network is obtained, wherein the call detail record data at least includes a network type, a network element type, a protocol type, an IP address of a source network element, and an IP address of a destination network element of a service route; valid service route information is determined based on the call detail record data, wherein the number of specified sub-periods in which service route data exists in a continuous preset statistical period is greater than a preset threshold, and the specified sub-period is a sub-period in which service route data exists; a primary network topology structure is obtained based on the valid service route information and a preset topological relationship; the primary network topology structure is expanded layer by layer into a multi-layer network topology structure according to the service logic relationship, wherein the service logic The relationship is at least used to indicate the business association relationship of the network devices under each first-level network topology node in the first-level network topology structure. By determining the effective business routing information, the first-level network topology structure is obtained based on the effective business routing information and the preset topology relationship; the first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to the business logic relationship, so as to achieve the purpose of generating network topology structures of different levels according to different layout methods when processing multi-layer complex networks, thereby solving the problem that the related technology focuses on the automatic layout of single-layer network topology, and it is difficult to automatically discover and clearly display the core network topology structure when processing multi-layer complex networks, and there are technical problems such as low layout efficiency and poor effect. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 It is a hardware structure block diagram of a computer terminal for implementing a method for determining a network topology structure provided in an embodiment of the present application;

[0020] Figure 2 is a flow chart of a method for determining a network topology structure provided according to an embodiment of the present application;

[0021] Figure 3 is a CDR data acquisition flow chart provided according to an embodiment of the present application;

[0022] Figure 4 It is a flowchart of obtaining a network quality prediction indicator according to an embodiment of the present application;

[0023] Figure 5 is a flow chart for determining deviations provided according to an embodiment of the present application;

[0024] Figure 6 It is a flow chart for confirming the severity of a routing alarm provided according to an embodiment of the present application;

[0025] Figure 7 is a schematic diagram of a system module provided according to an embodiment of the present application;

[0026] Figure 8 It is a structural diagram of a device for determining a network topology structure provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0028] The information collected in the embodiments of the present application is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or reject automated decision-making results; if the user chooses to reject, the expert decision-making process will be entered.

[0029] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] In order to better understand the embodiments of the present application, the technical terms involved in the embodiments of the present application are explained as follows:

[0031] Core Network: The core network is located in the mobile network subsystem. The functions of the core network are mainly to provide user connection, user management and service carrying. It also provides an interface to the external network as a bearer network.

[0032] In the related art, most of the research in the field of complex networks is still focused on single-layer networks (or single networks) and ignores the existence of multiple network interactions in actual complex systems, such as various business networks including different network devices and logical relationships, transportation networks of different transportation tools, etc. Therefore, there are related technologies that focus on the automatic layout of single-layer network topology. When dealing with multi-layer complex networks, it is difficult to automatically discover and clearly display the core network topology structure, and there are problems of low layout efficiency and poor effect. In order to solve this problem, the relevant solution is provided in the embodiment of the present application, which is described in detail below.

[0033] According to an embodiment of the present application, an embodiment of a method for determining a network topology structure is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0034] The method embodiments provided in the embodiments of the present application can be executed in a computer terminal or a similar computing device. Figure 1 FIG. 1 shows a hardware structure block diagram of a computer terminal for implementing a method for determining a network topology structure. Figure 1 As shown, the computer terminal 10 may include one or more (102a, 102b, ..., 102n are used to illustrate) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations shown.

[0035] It should be noted that the one or more processors 102 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10. As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0036] The memory 104 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the method for determining the network topology structure in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, the method for determining the network topology structure described above is implemented. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0037] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0038] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 .

[0039] In the above-mentioned operating environment, an embodiment of the present application provides an embodiment of a method for determining a network topology structure. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0040] like Figure 2FIG. 1 is a flowchart of a method for determining a network topology structure according to an embodiment of the present application, including:

[0041] Step S202: Acquire call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route.

[0042] The following are specific embodiments:

[0043] The whole network (the whole core network) Session Initiation Protocol (SIP) message records are obtained from the signaling sharing platform in real time. The SIP message records are the original signaling data exchanged between network element devices during the communication process. The whole network SIP message refers to the collection of SIP messages exchanged between all network element devices that use the SIP protocol for service communication. SIP messages include control messages such as session establishment request (INVITE) (a request for initiating a new session) and session modification request (ReINVITE) (used to modify session parameters in an established session, including but not limited to media type, codec, address information, etc.). Each SIP message carries specific session information, such as session identifier (Call-ID), source network element IP address, destination network element IP address, session parameters, etc. Based on SIP messages, all service routes in the core network can be determined. Specifically, the route direction is obtained through the source and destination IP of the first INVITE message of the SIP protocol. If the INVITE message is sent from IP1 to IP2, it means that there is a service route IP1->IP2. It is effective when the SIP network element initiates a call. After the call is established, the message does not need to pass through the SIP network element. For example, a call process is IP1->IP2->IP3, but after the call is established, the ReINVITE message of the call process does not pass through IP2, but is directly sent from IP1 to IP3. Although there is a direct message, it does not belong to a service route. Use the session identifier to associate these messages, exclude the routing information of IP1->IP3, and only retain the two service routes of IP1->IP2 and IP2->IP3.

[0044] In core network operation and maintenance and fault diagnosis, the network-wide signaling call detail record (CDR) data is indispensable. It provides a detailed record of each part of the network (including different types of network elements and links) during the communication process, which is crucial for understanding network behavior, optimizing network performance, detecting abnormal situations, and locating faults. The signaling sharing platform is a system that centrally processes and stores network signaling data. It receives the network-wide signaling call detail record (CDR) data of all service routes from multiple signaling monitoring points in the core network. The network-wide signaling call detail record (CDR) data is obtained by parsing and processing the SIP message record. Specifically, it is sent to the signaling sharing platform southbound interface service in real time through the socket interface (socket interface provides a mechanism for inter-process communication, so that processes on different computers can communicate with each other through the network). The southbound interface service of the platform is responsible for receiving data from network monitoring equipment (such as signaling monitoring system) southbound interface, and then the shared interface of the sharing platform sends real-time CDR data stream to subscribers, which means that subscribers can immediately obtain the latest signaling CDR data to minimize the calculation field and subscribe to the signaling CDR data of each network element and link in the whole network, which greatly reduces the storage and computing resource overhead and saves the intermediate process time. The network-wide signaling CDR data refers to the call detail record data collected from all service routes in the entire core network. CDR data contains detailed information such as the network type of the service route (for example, IP Multimedia Subsystem (IMS), used to provide multimedia services, Voice Over LTE (Volte), used to provide high-quality voice call services, Circuit-Switched Network (C-net, a traditional telephone network type with fixed bandwidth allocation during communication), network element type, protocol type, source network element IP address, destination network element IP address, etc. This information is crucial for network management and troubleshooting.

[0045] like Figure 3 As shown, it is a flowchart of CDR data acquisition provided according to an embodiment of the present application, which shows the above process. The signaling sharing platform is used to perform control services and manage southbound interfaces and shared interfaces. First, the southbound interface of the signaling sharing platform obtains the CDR data pushed in real time by the signaling network (for example, the C network collection layer, fixed network IMS collection layer, and Volte network collection layer in the figure), and then sends it to the subscriber through the shared interface to realize real-time subscription reception.

[0046] Step S204, determining effective service routing information based on the call detail record data, wherein the effective service routing is when the number of designated sub-periods with service routing data in the continuous preset statistical period is greater than a preset threshold, and the designated sub-period is a sub-period with service routing data.

[0047] The following are specific embodiments:

[0048] Parse the collected CDR data and extract key fields, such as network type, network element type, protocol type, source network element IP address, destination network element IP address, timestamp, etc. Remove invalid or redundant records, for example, exclude test, debugging or erroneous session records to ensure the accuracy of service routing information. In order to confirm the validity of the route, it is necessary to evaluate the continuity and stability of the service routing data within the preset statistical period. A valid service route is a sub-period in which the number of specified sub-periods with service routing data in a continuous preset statistical period is greater than the preset threshold, and the specified sub-period is a sub-period in which service routing data exists. Divide the time into more fine-grained statistical periods, for example, in units of 1 minute (i.e., the above-mentioned sub-period), and create time windows for data aggregation and statistics. In each time window, count the number of service routes that appear in the period. For each service route, check whether there are x (for example, x is 60) 1-minute periods (y (for example, y is 60) 1-minute periods, i.e. the above-mentioned continuous preset statistical period) of service data in at least 12 hours (i.e. the above-mentioned preset threshold) every day for n consecutive days (for example, n is 14 days). This is to confirm the continuity and stability of the route and ensure its reliability as a valid service route. A stable service data flow with x (for example, x is 60) 1-minute periods in at least 12 hours every day for n consecutive days (for example, 14 days) is regarded as valid service route information.

[0049] In order to improve the accuracy of identifying effective service routes, for historical effective service route information, its key attributes are extracted as features, including network type, network element type, protocol type, source network element IP address, destination network element IP address, and the number of services that occurred within a time period. These features are trained using machine learning algorithms (such as logistic regression, decision tree, random forest, or deep learning model) to identify and predict the pattern of effective service routes. The trained model is evaluated and its performance is tested using indicators such as cross-validation, precision, and recall. Based on the evaluation results, the model parameters or feature selection are adjusted to improve the accuracy and generalization ability of the model. The trained model is applied to all collected CDR data. Based on the model prediction results, the service routes identified by the model as meeting the continuity and stability requirements are marked as "valid" as effective service route information. The information confirmed as effective service routes is stored in a database or data structure, and a mechanism is set to regularly update this information to reflect dynamic changes in the network, such as the addition of new devices or the retirement of old devices.

[0050] Step S206, obtaining a primary network topology structure based on the effective service routing information and the preset topology relationship.

[0051] In the technical solution provided in step S206, there are multiple ways to obtain a primary network topology structure based on effective business routing information and preset topological relationships, for example: obtaining the network type and network element type of all business routes in the effective business routing information; topologically sorting the network element types based on the preset topological relationship to obtain a primary network topology structure, wherein the preset topological relationship is a predefined connection rule for topologically sorting network element types according to network types.

[0052] In the technical solution provided in step S206, the preset topological relationship refers to the connection rules between network element types set according to network design and operation and maintenance experience before building the network topology. These rules generally reflect the hierarchy and logical relationship of the network architecture. For example, the relative position and function of each network element type in the network. The preset topological relationship helps to classify and sort the network element types when analyzing effective service routing information, ensuring that the generated topological map not only reflects the actual network connection, but also follows the logical architecture of the network. After determining all network element types and their connection relationships, a topological layout algorithm (such as a tree, ring or force-directed layout algorithm) is used to generate a primary network topology. These algorithms will automatically arrange and layout network elements according to the connection relationship between network elements and the preset network type topological rules to form a primary network topology. The primary topology is the top-level view of the network topology map, which shows the highest-level connections between different network types and the basic relationships between network element types.

[0053] Step S208, the primary network topology structure is expanded layer by layer into a multi-layer network topology structure according to the business logic relationship, wherein the business logic relationship is at least used to indicate the business association relationship of the network devices under each primary network topology node in the primary network topology structure.

[0054] In the technical solution provided in step S208, there are many ways to expand the first-level network topology structure into a multi-layer network topology structure layer by layer according to the business logic relationship. For example: each first-level network topology node in the first-level network topology structure is expanded into a second-level network topology structure in the following way, wherein a first-level network topology node corresponds to a type of network element: determine the network device under the network element type; topologically sort the network devices based on the business logic relationship to obtain a second-level network topology structure of the first-level network topology node, wherein each second-level network topology node in the second-level network topology structure corresponds to a network device.

[0055] There are many ways to expand the primary network topology structure into a secondary network topology structure according to the business logic relationship. For example, when the business logic relationship indicates that the services between network devices have business logic relationships between regions of different levels, topological sorting is performed in the form of a map according to the locations of the regions where the network devices are located to obtain the secondary network topology structure of the primary network topology node, wherein the business logic relationships between regions of different levels refer to the presence of regional differences in the deployment locations of network devices with business associations of different levels. When the business logic relationship indicates that the services between network devices do not have business logic relationships between regions of different levels, topological sorting is performed according to the preset business priorities corresponding to the network devices to obtain the secondary network topology structure of the primary network topology node.

[0056] The following are specific embodiments:

[0057] The business logic relationship information includes at least the protocol type, service scope, geographical location, business processing capabilities, etc. The geographical location is used to indicate whether there is a business logic relationship between different levels of regions in the business between network devices. The business logic relationship between different levels of regions specifically refers to the deployment locations of different levels of regional differences between business-related network devices. Different levels of regional differences refer to different geographical locations, such as provincial and municipal differences. Network devices are located in different provinces and cities, which intuitively presents the direction of business routing and business traffic flow.

[0058] The first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to the business logic relationship, and can be expanded to a three-layer topology structure at most. First, each first-level network topology node (corresponding to a type of network element) in the first-level network topology structure is expanded into a second-level network topology structure in the following manner: when the business logic relationship indicates that the business between network devices has a business logic relationship between regions of different levels, topological sorting is performed in the form of a map according to the location of the region where the network device is located, and the second-level network topology structure of the first-level network topology node is obtained. The location of the second-level network topology node is determined by the business logic relationship, and the topological connection between the second-level network topology nodes is determined by the source network element IP address and the destination network element IP address in the business routing CDR data corresponding to the business. A topological layout algorithm (such as a tree, ring or force-directed layout algorithm) is used to generate a second-level network topology structure. For example, a tree structure layout is used to display a network topology with a hierarchical structure, and a force-directed layout is used for network topology nodes without an obvious hierarchical relationship to reduce intersections and overlaps. When the business logic relationship indicates that the business between network devices does not have a business logic relationship between regions of different levels, a topological sorting is performed according to the preset business priority corresponding to the network device to obtain the second-level network topology structure of the first-level network topology node. The preset service priority is a pre-set priority of all services and the priority of all network devices corresponding to each service, and a topology layout algorithm (such as a tree, ring or force-directed layout algorithm) is used to generate a secondary network topology structure. For such a secondary network topology structure, topological sorting can be further performed in the form of a map according to the location of the area where the network devices are located, and a third-level network topology structure of the secondary network topology nodes is obtained. A third-level network topology node indicates the deployment location of the corresponding network device.

[0059] Alarms can also be issued for network devices corresponding to network topology nodes with problems in the topology structure, for example, in the following form: when the network quality index of the link between any two first-level network topology nodes in the first-level network topology structure is greater than a first preset threshold, the first-level network topology nodes at both ends of the link are determined as first-level target network topology nodes; the target second-level network topology structure corresponding to the first-level target network topology node is determined, and the target network device in the target second-level network topology structure is determined based on the network quality index; alarm information corresponding to the target network device is generated, and displayed in a visual form at the second-level target network topology node corresponding to the target network device and at the first-level target network topology node.

[0060] The following are specific embodiments:

[0061] The network quality index prediction module obtains the network quality index (e.g., number of calls, number of network connections, network connection rate, number of responses, response rate, number of errors, etc.) of each link (i.e., the topological connection between network topology nodes in the network topology structure). When the network quality index of the link between any two first-level network topology nodes in the first-level network topology structure is greater than the first preset threshold (the first threshold is a constant set according to business requirements and historical data statistics, used to determine whether the link is in an abnormal state), the first-level network topology nodes at both ends of the link are used as first-level target network topology nodes, indicating that the links between these nodes need further attention and inspection. The corresponding second-level network topology structure is automatically expanded to determine the target second-level network topology structure corresponding to the first-level target network topology node. In the second-level network topology structure, matching association is performed, and the source network element IP address and the destination network element IP address to which the abnormal network indicator in the network quality index belongs are matched to the target network device in the target second-level network topology structure, and the alarm information corresponding to the target network device is generated, and displayed in a visual form at the second-level target network topology node and the first-level target network topology node corresponding to the target network device. The alarm information should include detailed information of the network equipment, specific values ​​of abnormal indicators, time when the threshold is exceeded, severity assessment, etc. The alarm information is not only displayed visually at the secondary network topology node corresponding to the target network equipment to help network maintenance personnel intuitively locate the problem equipment and links, but also displayed at the primary target network topology node to provide a macro to micro fault alarm view. In addition, the alarm information can be highlighted on the topology structure through visual means such as color coding, flashing effects, and pop-up windows.

[0062] In order to better understand the business routes and business flows of the business, the network quality indicator prediction module can be used to monitor key routes, where the key routes are the first-level network topology nodes in all first-level network topology structures. The average value of the historical network quality indicators within the preset time is used as the prediction of the current cycle. The cycle is 1 minute. The historical network quality indicators of the same cycle within the preset time are obtained and averaged to obtain the network quality prediction indicator, such as Figure 4 As shown, it is a flowchart of obtaining network quality prediction indicators according to an embodiment of the present application. The prediction modes are divided into working days, rest days and holidays. For working days, historical network quality indicators of the same period size within a preset time are obtained (for example, number of calls, number of network connections, network connection rate, number of answers, answer rate, number of errors, etc.), and the historical network quality indicators of all periods are averaged to obtain As a network quality prediction index, for example, as shown in the figure, the quality prediction index of the cycle indicated in the figure of the day is predicted, and the historical network quality index of the same time period of multiple historical working days including the day before yesterday, the day before yesterday, and yesterday is obtained to average. For rest days, the same rest day (Saturday / Sunday) and the same cycle data are used for prediction, that is, if the day is Sunday, the historical network quality index of the same time period of multiple Sundays within the preset time is obtained to average. For rest days, the same rest day (Saturday / Sunday) and the same cycle data are used for prediction, that is, if the day is predicted to be Sunday, the historical network quality index of the same time period of multiple Sundays within the preset time (for example, 3 months) is obtained to average. If the day is predicted to be Saturday, the historical network quality index of the same time period of multiple Saturdays within the preset time is obtained to average. For holidays, the same cycle data of Saturdays, Sundays and holidays within the preset time (for example, 3 months) is obtained for prediction, that is, if the day is predicted to be a holiday, the historical network quality index of the same time period of multiple Saturdays, Sundays and holidays within the preset time (for example, 3 months) is obtained to average. If there is a cycle missing data, "fill 0" processing will be performed.

[0063] In order to verify the accuracy of the network quality prediction index, the predicted value of each indicator in the network quality prediction index (that is, the value of each indicator in the network quality prediction index) and the actual value (the value of each indicator in the network quality prediction index actually obtained after the prediction time arrives) are compared in each cycle, and the percentage difference between the indicators is calculated to obtain the deviation. The indicator values ​​of different data levels are mapped to the same data range, and more intelligent abnormality judgment is achieved through deviation. The deviation is obtained by the following formula: Deviation of each indicator in the network quality prediction index = Abs ((actual value - predicted value) / predicted value) × 100. Figure 5 As shown, it is a flow chart for determining deviations provided according to an embodiment of the present application. As shown in the figure, when the actual (i.e., true value) of a certain indicator is 80 and the predicted (i.e., predicted value is 100), the deviation obtained by the above formula is 20%; when the actual (i.e., true value) of a certain indicator is 800 and the predicted (i.e., predicted value is 1000), the deviation obtained by the above formula is 20%. When the deviation is too large, an alarm of the prediction result will be generated through the alarm service module. When pushing, the most serious routing alarm in each cycle will be selected for pushing. Specifically: the deviation is determined separately for each indicator in the network quality indicator, and then the S-type function (sigmoid function, used to limit the output result to 0-1) is used to normalize it to 0-1, and the preset indicator weight (each indicator corresponds to a preset weight) is used to multiply the corresponding indicator, and then the indicator multiplied by the preset indicator weight is added to obtain the severity of the routing alarm. As shown Figure 6As shown, it is a flow chart for confirming the severity of routing alarms provided according to an embodiment of the present application. As shown in the figure, deviation 1, deviation 2, and deviation 3 are obtained based on the deviation formula for index 1, index 2, and index 3, respectively, and then normalized and multiplied by weight 1, weight 2, and weight 3, respectively, and finally added to obtain the severity (i.e., the above-mentioned routing alarm severity, for example, is divided into three levels: low, medium, and high. The severity is greater than the first alarm value for low, greater than the second alarm value for medium, and greater than the third alarm value for high. The first alarm value, the second alarm value, and the third alarm value are pre-set gradually increasing constants). The severity of routing alarms is generated in each cycle, and the current most serious alarm is obtained and pushed to the network management system through the interface, that is, the current most serious routing alarm severity is judged to be inconsistent with the routing alarm severity pushed last time before it is pushed, so as to realize alarm deduplication filtering and improve the effectiveness of alarms.

[0064] Through the above steps, the multi-layer complex network topology data is parsed, node hierarchical filtering is achieved, mixed layout of multi-layer complex network topology is achieved, and hierarchical display is achieved. Prediction and alarm are also provided, so as to achieve more timely, intelligent and accurate identification of network faults, and further improve the level of intelligent operation and maintenance. It solves the problem that related technologies focus on the automatic layout of single-layer network topology. When dealing with multi-layer complex networks, it is difficult to automatically discover and clearly display the core network topology structure, and there are problems such as low layout efficiency, poor effect, and unclear node association.

[0065] Figure 7 This is a system module diagram provided according to an embodiment of the present application, which is used to show the various modules of the system that implements the above embodiment of the present application, including a signaling subscription module, a routing learning module, a network quality indicator prediction module, and an alarm service module. The signaling subscription module is used to transform the traditional signaling call record file data provision method into a real-time streaming data service, which can improve timeliness and save processing resources. The specific implementation is as follows: Figure 3As shown. The routing learning module is used to obtain valid service routing data between various network elements in the communication network, and form the basis of the network topology through learning accumulation, that is, to train these features using machine learning algorithms (such as logistic regression, decision tree, random forest or deep learning model) to identify and predict the pattern of effective service routing. The trained model is evaluated, and its performance is tested using indicators such as cross-validation, precision, and recall. According to the evaluation results, the model parameters or feature selection are adjusted to improve the accuracy and generalization ability of the model. The trained model is applied to all collected CDR data. According to the model prediction results, the service routes identified by the model as meeting the continuity and stability requirements are marked as "valid" as valid service routing information. The signaling network includes C network, VOLTE (i.e. Volte) network, IMS network (i.e. fixed network IMS), which is used to provide CDR data, and the network quality indicator prediction module is used to obtain abnormal data whose network quality indicator fluctuation deviation exceeds the prediction, and monitor key routes. The network quality digital topology is used to display the generated multi-level network topology. The alarm service module is used to obtain the alarm data of network quality indicators and push alarms through the interface to achieve automatic operation and maintenance. The external interface is used to receive the alarms pushed through the interface.

[0066] The present application also provides a schematic diagram of a device for determining a network topology structure. Figure 8 As shown, including:

[0067] The acquisition module 802 is used to acquire call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route.

[0068] The first determination module 804 is used to determine valid service routing information based on the call detail record data, wherein the valid service routing is that the number of designated sub-periods with service routing data in the continuous preset statistical period is greater than a preset threshold, and the designated sub-period is a sub-period with service routing data.

[0069] The second determining module 806 is used to obtain a primary network topology structure based on the effective service routing information and the preset topology relationship.

[0070] The expansion module 808 is used to expand the primary network topology structure layer by layer into a multi-layer network topology structure according to the business logic relationship, wherein the business logic relationship is at least used to indicate the business association relationship of the network devices under each primary network topology node in the primary network topology structure.

[0071] It should be noted that Figure 8 The network topology determination device shown is used to perform Figure 2The method for determining the network topology shown is therefore Figure 2 The relevant explanations in the method for determining the network topology structure in are also applicable to the device for determining the network topology structure, and will not be repeated here.

[0072] It should be noted that the various modules in the above-mentioned network topology determination device can be a program module (for example, a set of program instructions that implement a certain specific function) or a hardware module. For the latter, it can be expressed in the following forms, but is not limited to this: the expression form of each of the above-mentioned modules is a processor, or the functions of each of the above-mentioned modules are implemented by a processor.

[0073] The embodiment of the present application also provides a non-volatile storage medium, the non-volatile storage medium includes a stored program, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the above method for determining the network topology structure. For example, obtain the call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route; determine the effective service route information based on the call detail record data, wherein the effective service route is the number of specified sub-periods with service route data in the continuous preset statistical period greater than the preset threshold, and the specified sub-period is the sub-period with service route data; obtain a first-level network topology structure based on the valid service route information and the preset topological relationship; expand the first-level network topology structure layer by layer into a multi-layer network topology structure according to the service logic relationship, wherein the service logic relationship is at least used to indicate the service association relationship of the network devices under each first-level network topology node in the first-level network topology structure.

[0074] The embodiment of the present application also provides an electronic device, the electronic device includes a processor, the processor is used to run a program, wherein the above method for determining the network topology structure is executed when the program is running. For example, the call detail record data of the core network is obtained, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route; the effective service route information is determined based on the call detail record data, wherein the effective service route is the number of specified sub-periods with service route data in the continuous preset statistical period greater than the preset threshold, and the specified sub-period is the sub-period with service route data; the first-level network topology structure is obtained based on the valid service route information and the preset topological relationship; the first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to the service logic relationship, wherein the service logic relationship is at least used to indicate the service association relationship of the network devices under each first-level network topology node in the first-level network topology structure.

[0075] According to another aspect of the embodiment of the present application, a computer program product is also provided, including a computer program, which implements the above method for determining the network topology structure when executed by a processor. For example, obtaining call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route; determining effective service routing information based on the call detail record data, wherein the effective service route is the number of specified sub-periods in which service routing data exists in a continuous preset statistical period greater than a preset threshold, and the specified sub-period is the sub-period in which service routing data exists; obtaining a first-level network topology structure based on the effective service routing information and the preset topological relationship; expanding the first-level network topology structure layer by layer into a multi-layer network topology structure according to the service logic relationship, wherein the service logic relationship is at least used to indicate the service association relationship of the network devices under each first-level network topology node in the first-level network topology structure.

[0076] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0077] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0078] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0079] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0080] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.

[0081] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for determining a network topology structure, characterized in that: include: Acquire call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route; Determine valid service routing information according to the call detail record data, wherein the valid service routing is a number of designated sub-periods in which service routing data exists in a continuous preset statistical period that is greater than a preset threshold, and the designated sub-period is a sub-period in which service routing data exists; Obtaining a primary network topology structure based on the effective service routing information and the preset topology relationship; The first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to the business logic relationship, wherein the business logic relationship is at least used to indicate the business association relationship of the network devices under each first-level network topology node in the first-level network topology structure.

2. The method according to claim 1, characterized in that The multi-layer network topology structure includes at least the primary network topology structure and the secondary network topology structure. The primary network topology structure is a network topology structure obtained by topologically sorting the network element types of the service routing in the effective service routing information according to the network type, and the secondary network topology structure is a network topology structure obtained by topologically sorting the network devices under the network element type according to the business logic relationship for each network type in the primary network topology structure.

3. The method according to claim 1, characterized in that The obtaining of a primary network topology structure based on the effective service routing information and the preset topology relationship includes: Acquire the network type and network element type of all service routes in the valid service routing information; The network element types are topologically sorted based on the preset topological relationship to obtain the primary network topology structure, wherein the preset topological relationship is a predefined connection rule for the network element types when topologically sorted according to the network type.

4. The method according to claim 1, characterized in that: The first-level network topology structure is expanded layer by layer into a multi-layer network topology structure according to the business logic relationship, including: Each first-level network topology node in the first-level network topology structure is expanded into a second-level network topology structure in the following manner, wherein one first-level network topology node corresponds to one type of network element: Determine the network device under the network element type; The network devices are topologically sorted based on the business logic relationship to obtain a secondary network topology structure of the primary network topology nodes, wherein each secondary network topology node in the secondary network topology structure corresponds to one of the network devices.

5. The method according to claim 4, characterized in that The first-level network topology structure is expanded into a second-level network topology structure according to the business logic relationship, including: When the business logic relationship indicates that there are business logic relationships between areas of different levels of business between the network devices, topological sorting is performed in the form of a map according to the locations of the areas where the network devices are located to obtain a secondary network topology structure of the primary network topology node, wherein the business logic relationship between areas of different levels refers to the existence of regional differences of different levels in the deployment locations of network devices with business associations.

6. The method according to claim 4, characterized in that The primary network topology structure is expanded into a secondary network topology structure according to the business logic relationship, including: When the business logic relationship indicates that there is no business logic relationship between areas of different levels of services between the network devices, topological sorting is performed according to the preset business priorities corresponding to the network devices to obtain the secondary network topology structure of the primary network topology node.

7. The method according to claim 1, characterized in that The method further comprises: When the network quality index of a link between any two first-level network topology nodes in the first-level network topology structure is greater than a first preset threshold, determining the first-level network topology nodes at both ends of the link as first-level target network topology nodes; Determine a target secondary network topology structure corresponding to the primary target network topology node, and determine a target network device in the target secondary network topology structure based on the network quality indicator; Alarm information corresponding to the target network device is generated and displayed in a visual form at the secondary target network topology node corresponding to the target network device and at the primary target network topology node.

8. The method according to claim 1, characterized in that The method further comprises: Obtaining predicted values ​​of multiple quality indicators of all links in the primary network topology structure based on historical quality indicators within a preset time period according to a time period; Determine the deviation value between the predicted value corresponding to each quality indicator and the actual quality indicator value; determine the product of the deviation value corresponding to each quality and the preset weight as the severity component; The sum of the severity components of all quality indicators is determined as the severity, and when the severity is greater than a second preset threshold, it is a level one severe alarm, and when the severity is greater than a third preset threshold, it is a level two severe alarm, wherein the second preset threshold is less than the third preset threshold; When it is identified that the severity of the second time period is higher than the severity of the first time period, the severity of the second time period is pushed to the user terminal, wherein the first time period is a time period before the second time period.

9. A device for determining a network topology structure, characterized in that: include: An acquisition module, used to acquire call detail record data of the core network, wherein the call detail record data at least includes the network type, network element type, protocol type, source network element IP address, and destination network element IP address of the service route; A first determination module is used to determine valid service routing information according to the call detail record data, wherein the valid service routing is that the number of designated sub-periods in which service routing data exists in a continuous preset statistical period is greater than a preset threshold, and the designated sub-period is a sub-period in which service routing data exists; A second determination module is used to obtain a primary network topology structure based on the effective service routing information and a preset topology relationship; An expansion module is used to expand the first-level network topology structure layer by layer into a multi-layer network topology structure according to the business logic relationship, wherein the business logic relationship is at least used to indicate the business association relationship of the network devices under each first-level network topology node in the first-level network topology structure.

10. A non-volatile storage medium, characterized in that: The non-volatile storage medium stores a program, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the method for determining the network topology structure according to any one of claims 1 to 8.

11. An electronic device, characterized in that: include: A memory and a processor, wherein the processor is used to run a program stored in the memory, wherein the program executes the method for determining a network topology structure as described in any one of claims 1 to 8 when running.

12. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the method for determining the network topology structure described in any one of claims 1 to 8 is implemented.

Images