TSN management method and device based on software definition, medium and equipment

Abstract

The invention discloses a TSN management method and device based on software definition, a medium and equipment, and aims to realize centralized configuration and scheduling of a TSN switch by utilizing a northbound interface and a southbound interface through coordination of a centralized controller and the TSN switch. The centralized controller allows remote access and configuration parameter modification through a northbound interface so as to generate a specific configuration instruction and a scheduling strategy, and it is ensured that the network carries out efficient scheduling and bandwidth allocation according to real-time requirements; and the southbound interface is used for issuing the configuration instructions to the switch and executing functions of clock synchronization, network state monitoring, forwarding and control separation and the like. In this way, seamless connection between different network technologies is achieved, the certainty of data transmission is guaranteed, and meanwhile the data processing capacity and the utilization efficiency of bandwidth resources are improved.

Description

Technical Field

[0001] The present invention relates to the field of software security technology, and in particular to a TSN management method, device, medium and equipment based on software definition. Background Art

[0002] With the in-depth development of the power Internet and Industry 4.0, network infrastructure is facing unprecedented challenges and opportunities, and the power Internet of Things architecture is gradually evolving towards integration, openness, and flexibility. This means that future network interconnection not only needs to solve the interoperability issues between existing standards and promote the seamless connection of different network technologies, but also needs to significantly improve data processing capabilities and bandwidth resources while ensuring certainty, in order to cope with the massive data and high-performance requirements emerging in Internet businesses such as power and industry. Summary of the invention

[0003] Based on this, it is necessary to provide software-defined TSN management methods, devices, media and equipment to solve the interoperability problems between different standards in current network interconnection, as well as the problems of insufficient determinism, data processing capabilities and bandwidth resources.

[0004] A software-defined TSN management method is applied to a TSN management system, wherein the TSN management system includes a TSN centralized controller, at least one TSN switch, and at least one real-time terminal, wherein the TSN centralized controller is coupled to the at least one TSN switch, and the method includes:

[0005] The TSN centralized controller centrally configures the software-defined functions of the at least one TSN switch through a northbound interface and a southbound interface; wherein the northbound interface is used to allow a user to remotely access and modify software-defined parameters to generate configuration instructions and scheduling strategies, and the southbound interface is used to issue configuration instructions and scheduling strategies to the at least one TSN switch, and the software-defined functions include clock synchronization, network status monitoring, and forwarding and control separation;

[0006] The configured TSN switch communicates with the real-time terminal.

[0007] In one of the embodiments, the TSN centralized controller centrally configures the software-defined functions of the at least one TSN switch through the northbound interface and the southbound interface, including:

[0008] Through the gPTP protocol, the clock with the highest accuracy value is selected as the master clock among the clocks in all TSN switches, and the remaining clocks are set as slave clocks;

[0009] Sending a configuration instruction to trigger the master clock to send synchronization messages and follow-up messages to all slave clocks through the gPTP protocol, so that all slave clocks calculate the first correspondence between the clock deviation and the link delay according to the received message;

[0010] Sending a delay request message to all slave clocks, so that each slave clock feeds back a delay response message and calculates a second corresponding relationship between the clock deviation and the link delay;

[0011] Determine a calculation result between clock deviation and link delay according to the first corresponding relationship and the second corresponding relationship, and calculate a clock deviation value of each slave clock;

[0012] Each slave clock is configured to be corrected according to the corresponding clock deviation value so as to be synchronized with the master clock.

[0013] In one of the embodiments, the TSN centralized controller centrally configures the software-defined functions of the at least one TSN switch through the northbound interface and the southbound interface, including:

[0014] Establish a network status monitoring model; wherein, in the network status monitoring model, the service flow D within the period T T It is expressed as:

[0015]

[0016] Average queue length L s The relationship with the data arrival rate λ is:

[0017]

[0018] Average data waiting time W s The relationship with λ is:

[0019]

[0020] The probability of packet loss due to insufficient queue buffer D L The relationship with λ is:

[0021]

[0022] In the above formula, the total number of nodes that remain connected in the network status monitoring model is N, the period is T, the amount of data is D0, the number of node layers is i, and the number of nodes in the i-th layer is N i , L is the number of queue levels, the maximum number of levels is M, the data of the i-th layer node will be forwarded by the previous i-1 layer nodes, the i-1 layer data will be transmitted i times, and the average service rate is 1 per second.

[0023] In one of the embodiments, the TSN centralized controller centrally configures the software-defined functions of the at least one TSN switch through the northbound interface and the southbound interface, including:

[0024] The TSN centralized controller serves as a control plane, and allows users to remotely access and modify software-defined parameters using a REST-style API through a standard protocol through the northbound interface to generate configuration instructions and scheduling policies, and sends configuration instructions and scheduling policies to the at least one TSN switch through the southbound interface;

[0025] The at least one TSN switch serves as a forwarding plane and forwards data packets according to the configuration instructions and the scheduling policy.

[0026] In one of the embodiments, the at least one TSN switch is configured with a data encryption module, and the method further comprises:

[0027] The data encryption module is used to configure security policy rules based on the source address, the destination address and the protocol type. If the data packet sent by the TSN centralized controller matches the security policy rules, the first encryption policy or the second encryption policy is executed;

[0028] The first encryption strategy is to generate a random encryption key, use the encryption key to encrypt the content of the data packet based on the ESP protocol, encapsulate it after a new IP header, and add an ESP header and an ESP tail;

[0029] The second encryption strategy is to perform hash processing on the content of the data packet based on the SHA-1 algorithm to obtain a corresponding hash value, and add the hash value to a preset authentication header.

[0030] In one of the embodiments, the method further includes: the data encryption module enables a NAT traversal function during the encryption process, and uses ECMP multi-path routing technology to optimize network connectivity, and a periodic update mechanism is set for the generated key identifier.

[0031] In one of the embodiments, the TSN centralized controller is configured with a status presentation module, and the method further includes: the status presentation module is used to provide a visual monitoring interface during the management process.

[0032] A computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the processor performs the steps of the software-defined TSN management method as described above.

[0033] A terminal device includes a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the above-mentioned software-defined TSN management method.

[0034] The present invention provides a software-defined TSN management method, device, medium and equipment, which realizes the centralized configuration and scheduling of TSN switches by using northbound interface and southbound interface through the coordination of centralized controller and TSN switch. The centralized controller allows remote access and modification of configuration parameters through the northbound interface to generate specific configuration instructions and scheduling strategies to ensure that the network performs efficient scheduling and bandwidth allocation according to real-time requirements; while the southbound interface is used to send these configuration instructions to the switch to perform functions such as clock synchronization, network status monitoring, and forwarding and control separation. In this way, seamless connection between different network technologies can be achieved, ensuring the certainty of data transmission, while improving data processing capabilities and bandwidth resource utilization efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0036] in:

[0037] Figure 1 It is a flowchart of a TSN management method based on software definition;

[0038] Figure 2 This is a schematic diagram of the TSN management system;

[0039] Figure 3 This is the structural block diagram of the TSN centralized controller and TSN switch;

[0040] Figure 4 This is a structural block diagram of the terminal equipment. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] The terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices.

[0043] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0044] like Figure 1 As shown, Figure 1 FIG. 1 is a flow chart of a software-defined TSN management method in an embodiment, which is applied to a TSN management system. Figure 2 As shown, the TSN management system includes a TSN (Time-Sensitive Networking) centralized controller, at least one TSN switch and at least one real-time terminal, and the TSN centralized controller is coupled to at least one TSN switch. Among them, the TSN centralized controller is the core component responsible for managing the entire TSN network. It can configure the device according to the real-time network status to ensure that the network traffic is transmitted according to the predetermined rules. The TSN switch is a network switching device that supports the TSN protocol. It is responsible for processing the forwarding of data packets in the network and performing timing control, traffic isolation and scheduling according to the requirements of the time-sensitive network. A real-time terminal refers to a terminal device that participates in data transmission in the network. These devices usually require the network to be able to transmit data within a strict time limit, such as sensors and actuators in an automation control system.

[0045] The steps provided by the software-defined TSN management method in this embodiment include:

[0046] S101, the TSN centralized controller centrally configures the software-defined functions of at least one TSN switch through a northbound interface and a southbound interface.

[0047] Among them, the northbound interface is the communication interface between the centralized controller and the upper management system, allowing users to remotely access and modify software-defined parameters to generate configuration instructions and scheduling policies, and pass these instructions to the TSN centralized controller. Through this interface, users can manage and optimize the network, such as setting priorities, adjusting bandwidth, or configuring clock synchronization. The southbound interface is the communication interface between the centralized controller and the TSN switch. It allows the controller to send configuration instructions and scheduling policies to the TSN switch, control the behavior of the TSN switch, and ensure that the TSN switch performs traffic forwarding, clock synchronization and other operations according to the rules set by the centralized controller.

[0048] Software-defined functions are network functions that are dynamically configured by a centralized controller through SDN (Software-Defined Networking) technology. The software-defined functions implemented in this embodiment include clock synchronization, network status monitoring, and separation of forwarding and control. Clock synchronization can ensure that all TSN switches operate under the same time reference, reduce latency and timing issues, and ensure that data streams are transmitted according to predetermined time windows. Network status monitoring can continuously monitor the device status, link status, bandwidth utilization, etc. in the network to help the centralized controller determine whether the network configuration needs to be adjusted. Separation of forwarding and control allows the centralized controller to be separated from the forwarding plane TSN switch. The TSN switch is only responsible for data forwarding, while the controller is responsible for management decisions and traffic scheduling.

[0049] S102, the configured TSN switch communicates with the real-time terminal.

[0050] The real-time terminal sends the collected data (such as sensor data, status information, etc.) to other devices through the switch, or receives control commands from other devices (such as actuator control signals, alarm information, etc.). The switch will process the data stream from the real-time terminal according to the configured strategy and ensure that the data is transmitted according to the specified priority and timing requirements.

[0051] The above software-defined TSN management method realizes centralized configuration and scheduling of TSN switches through the coordination of the centralized controller and TSN switches, using the northbound interface and the southbound interface. The centralized controller allows remote access and modification of configuration parameters through the northbound interface to generate specific configuration instructions and scheduling strategies to ensure that the network is efficiently scheduled and bandwidth allocated according to real-time needs; while the southbound interface is used to send these configuration instructions to the switch to perform functions such as clock synchronization, network status monitoring, and forwarding and control separation. In this way, seamless connection between different network technologies can be achieved, ensuring the certainty of data transmission, while improving data processing capabilities and bandwidth resource utilization efficiency.

[0052] Optionally, the TSN centralized controller in S101 centrally configures the software-defined function of at least one TSN switch through the northbound interface and the southbound interface, specifically including the following steps:

[0053] A1. Use the gPTP protocol to select the clock with the highest precision value as the master clock among all the clocks in the TSN switches, and set the remaining clocks as slave clocks.

[0054] Among them, gPTP (Generalized Precision Time Protocol) is a time synchronization protocol. Each TSN switch has a built-in clock, and the accuracy of the clock can be evaluated by comparing it with the deviation between the clocks of other switches. TSN selects the clock with the highest accuracy value as the master clock among the clocks in all TSN switches through the gPTP protocol, and sets the remaining clocks as slave clocks.

[0055] A2. Send configuration instructions to trigger the master clock to send synchronization messages and follow-up messages to all slave clocks through the gPTP protocol, so that all slave clocks calculate the first correspondence between clock deviation and link delay according to the received messages.

[0056] The TSN centralized controller sends configuration instructions to all TSN switches through the southbound interface. The configuration instructions start the clock synchronization process, ensuring that the master clock starts synchronizing with the slave clock through the gPTP protocol. The master clock sends a synchronization message (Sync Message) to the slave clock, which contains the timestamp of the master clock. The master clock also sends a follow-up message (Follow_Up Message) to provide more accurate timestamp data to ensure that the slave clock can perform accurate synchronization calculations.

[0057] After receiving the synchronization message, the slave clock uses the timestamp information in the synchronization message to calculate the clock deviation. At the same time, the slave clock estimates the delay time of the signal transmitted from the master clock to the slave clock through link delay calculation. The slave clock calculates the first correspondence between the clock deviation and the link delay based on the timestamp data of the synchronization message and the follow-up message. This provides a preliminary reference for subsequent clock adjustments.

[0058] A3. Send a delay request message to all slave clocks, so that each slave clock feeds back a delay response message and calculates a second corresponding relationship between the clock deviation and the link delay.

[0059] The master clock sends a delay request message to all slave clocks through the gPTP protocol. This message requests each slave clock to provide the link delay information from the master clock to itself. After each slave clock receives the delay request message, it calculates the link delay based on its own measured data and feeds it back to the master clock through a delay response message. The delay response message contains the signal transmission delay between the master clock and the slave clock. After the master clock receives the delay response message fed back by the slave clock, it combines the delay response timestamp sent by the slave clock and the timestamp in the synchronization message to calculate the second correspondence between the clock deviation and the link delay.

[0060] This relationship further refines the calculation of clock skew so that the slave clock can make more precise clock synchronization adjustments based on the delay data.

[0061] A4. Determine a calculation result between the clock deviation and the link delay according to the first corresponding relationship and the second corresponding relationship, and calculate the clock deviation value of each slave clock.

[0062] The first correspondence provides a preliminary clock synchronization estimate based on the synchronization message, and the second correspondence provides a more accurate clock deviation correction method based on the actual feedback of the link delay. The combination of these two relationships can form a more accurate clock synchronization model. The master clock and the slave clock can determine the relationship between the final clock deviation and the link delay through mathematical calculations (such as weighted average, least squares method, etc.). Finally, the master clock will calculate the specific clock deviation value of each slave clock based on the above calculation results.

[0063] A5. Configure each slave clock to make corrections according to the corresponding clock deviation value so as to synchronize the time with the master clock.

[0064] For example, the correction method may be to slow down the clock step if the slave clock is faster than the master clock; and to speed up the clock step if the slave clock is slower than the master clock.

[0065] The above specific embodiment can accurately determine the calculation result between the clock deviation and the link delay by calculating the first and second corresponding relationships, and correct the clock deviation of each slave clock accordingly. This process can significantly improve the accuracy of clock synchronization, reduce synchronization errors, and ensure the determinism of the system.

[0066] Optionally, the TSN centralized controller in S101 centrally configures the software-defined function of at least one TSN switch through the northbound interface and the southbound interface, specifically including the following steps:

[0067] B1. Establish a network status monitoring model.

[0068] The network status monitoring model is a mathematical modeling of network traffic, queue management, packet loss probability, delay and other indicators. It is used to monitor the network status in real time, evaluate network performance and make scheduling decisions.

[0069] In the network status monitoring model, the service flow D in period T is T It is expressed as:

[0070]

[0071] This formula helps estimate the distribution of traffic and network load in the network, and then infer the overall traffic situation of the network.

[0072] Average queue length L s The relationship with the data arrival rate λ is:

[0073]

[0074] It reflects that as traffic increases, queue lengths may increase, leading to congestion. This relationship helps monitor changes in network queue lengths and predict when congestion may occur.

[0075] Average data waiting time W s The relationship with λ is:

[0076]

[0077] This relationship helps evaluate the real-time performance of the network and guides the system on how to adjust resource allocation based on traffic.

[0078] The probability of packet loss due to insufficient queue buffer D L The relationship with λ is:

[0079]

[0080] This formula expresses the relationship between packet loss probability and data arrival rate, and helps determine the reliability of the network under certain traffic conditions.

[0081] In the above formula, the total number of nodes that remain connected in the network status monitoring model is N, the period is T, the amount of data is D0, the number of node layers is i, and the number of nodes in the i-th layer is N i , L is the number of queue levels, the maximum number of levels is M, the data of the i-th layer node will be forwarded by the previous i-1 layer nodes, the i-1 layer data will be transmitted i times, and the average service rate is 1 per second.

[0082] This method improves the reliability, real-time and bandwidth utilization of the network, effectively avoids network congestion, and ensures efficient data processing and transmission. It is particularly suitable for network environments that require high real-time and determinism.

[0083] Optional, such as Figure 3 As shown, the TSN centralized controller in S101 centrally configures the software-defined function of at least one TSN switch through the northbound interface and the southbound interface, specifically including the following steps:

[0084] C1. The TSN centralized controller serves as the control plane. Through the northbound interface, it allows users to remotely access and modify software-defined parameters using a REST-style API through a standard protocol to generate configuration instructions and scheduling policies, and sends configuration instructions and scheduling policies to at least one TSN switch through the southbound interface.

[0085] Among them, REST (Representational State Transfer) is an architectural style for designing network applications, using the HTTP protocol for communication. REST-style API is an application interface designed based on the REST architecture. Through the RESTful API, users can easily access the controller, obtain or modify network configuration parameters, and achieve flexible remote network management.

[0086] These configuration instructions and scheduling policies may include traffic priority, bandwidth allocation, latency requirements, etc. to ensure that data is transmitted smoothly as planned.

[0087] C2. At least one TSN switch acts as a forwarding plane to forward data packets according to configuration instructions and scheduling policies.

[0088] The above specific embodiments can realize the separation of the controller serving as the control plane and the TSN switch serving as the forwarding plane. The TSN switch is only responsible for data forwarding, while the controller is responsible for management decision-making and traffic scheduling.

[0089] Optional, such as Figure 3 As shown, at least one TSN switch is configured with a data encryption module, and the software-defined TSN management method can also perform the following steps:

[0090] D1. The data encryption module is used to configure security policy rules based on the source address, destination address and protocol type. If the data packet sent by the TSN centralized controller matches the security policy rules, the first encryption policy or the second encryption policy is executed.

[0091] Exemplarily, when configuring security policy rules, the security policy can set rules based on the source address to determine which data packets from specific sources need to be encrypted. For example, only data packets from specific controllers or certain devices are encrypted to protect information from specific sources. Similarly, the security policy can set rules based on the target address to determine whether the data packet needs to be encrypted. For example, only data packets with target addresses of certain key nodes (such as monitoring systems or core servers) are allowed to be encrypted to prevent man-in-the-middle attacks or data tampering. Similarly, the security policy can decide whether to encrypt based on the protocol type. For example, all TCP protocol data packets may be encrypted because the TCP protocol is often used for important and reliable communications, while UDP protocol data packets are not encrypted, especially when used for real-time data transmission, so as to avoid the delay caused by the encryption process. If the data packet matches all rules, it is encrypted according to the first encryption policy or the second encryption policy specified by the rule.

[0092] The first encryption strategy is to generate a random encryption key, use the encryption key to encrypt the content of the data packet based on the ESP protocol, encapsulate it after a new IP header, and add an ESP header and an ESP tail.

[0093] Among them, the key generation may be based on some security protocols (such as Diffie-Hellman) to ensure the randomness and confidentiality of the key. ESP can encrypt the payload (i.e., data content) of the data packet to prevent it from being stolen during transmission. The ESP protocol will encapsulate the encrypted data packet into a new data packet. This new data packet will add a new IP header for network transmission. The encapsulated data packet has a new IP address to ensure that the data packet is transmitted along the correct path. The header of the ESP protocol is used to identify and describe the characteristics of the encrypted data. It contains information such as the encryption algorithm type and key identifier, which is used to help the receiver correctly process the encrypted data during the decryption process. The ESP tail contains an integrity check value (such as the authentication code of the encrypted data) to ensure that the data has not been tampered with during transmission. The receiver verifies the integrity of the data through the checksum at the end of ESP. If the data is modified during transmission, the receiver will find that the checksum does not match, and thus determine that the data may have been tampered with.

[0094] The second encryption strategy is to perform hash processing on the content of the data packet based on the SHA-1 algorithm to obtain a corresponding hash value, and add the hash value to a preset authentication header.

[0095] Hash processing can convert the input data into a fixed-length hash value. This hash value is closely related to the data content. If the data content is tampered with, the hash value will also change. The authentication header (usually an additional field in the data packet) is used to store and transmit the generated hash value. In the data packet, the authentication header will contain the hash value generated by SHA-1 for subsequent integrity verification. After receiving the data packet, the receiver can recalculate the hash value of the received data content and compare it with the hash value in the authentication header. If the two are consistent, it means that the data has not been tampered with during transmission; if they are inconsistent, it means that the data packet may have been tampered with and needs to be discarded or re-requested.

[0096] Through the above strategies, the confidentiality and integrity of data in the TSN network can be ensured, while providing security for high-performance, low-latency industrial real-time applications.

[0097] Optionally, the above-mentioned software-defined TSN management method can also perform the following steps: E1. The data encryption module enables the NAT traversal function during the encryption process, and uses ECMP multi-path routing technology to optimize network connectivity, and the generated key identifier sets a regular update mechanism.

[0098] For the TSN time-sensitive network management method, enabling NAT traversal can ensure that different devices in the network, especially in multi-layer network topologies and environments with NAT devices, can still communicate and transmit data smoothly. ECMP multipath routing can improve network reliability and efficiency, especially in complex network environments. The regular update mechanism refers to the regular rotation of key identifiers and encryption keys. Regular key updates (for example, once a month) can ensure that encryption keys will not become vulnerable to attacks due to long-term use in the long run.

[0099] Optional, such as Figure 3 As shown, the TSN centralized controller is configured with a status presentation module, and the above method can also perform the following steps: F1. The status presentation module is used to provide a visual monitoring interface in the management process.

[0100] In a TSN management system, such an interface usually includes a real-time network topology diagram, data flow display, device status chart, etc., which can help users quickly obtain key information and make responsive decisions.

[0101] Figure 4 FIG. 2 shows an internal structure diagram of a terminal device in an embodiment. Figure 4As shown, the terminal device includes a processor, a memory and a network interface connected via a system bus. The memory includes a non-volatile storage medium and an internal memory. The non-volatile storage medium of the terminal device stores an operating system and may also store a computer program. When the computer program is executed by the processor, the processor can implement a software-defined TSN management method. The internal memory may also store a computer program. When the computer program is executed by the processor, the processor can implement a software-defined TSN management method. Those skilled in the art will understand that Figure 4 The structure shown in the figure is only a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the terminal device to which the scheme of the present application is applied. The specific terminal device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0102] A computer-readable storage medium stores a computer program, which implements the following steps when executed by a processor: a TSN centralized controller centrally configures the software-defined functions of at least one TSN switch through a northbound interface and a southbound interface; wherein the northbound interface is used to allow a user to remotely access and modify software-defined parameters to generate configuration instructions and scheduling strategies, and the southbound interface is used to send configuration instructions and scheduling strategies to at least one TSN switch, and the software-defined functions include clock synchronization, network status monitoring, and forwarding and control separation; the configured TSN switch communicates with a real-time terminal.

[0103] A terminal device comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program: a TSN centralized controller centrally configures the software-defined functions of at least one TSN switch through a northbound interface and a southbound interface; wherein the northbound interface is used to allow a user to remotely access and modify software-defined parameters to generate configuration instructions and scheduling strategies, and the southbound interface is used to issue configuration instructions and scheduling strategies to at least one TSN switch, and the software-defined functions include clock synchronization, network status monitoring, and forwarding and control separation; and the configured TSN switch communicates with a real-time terminal.

[0104] It should be noted that the above-mentioned software-defined TSN management method, apparatus, device and computer-readable storage medium belong to a general inventive concept, and the contents in the embodiments of the software-defined TSN management method, apparatus, device and computer-readable storage medium are applicable to each other.

[0105] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0106] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0107] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A TSN management method based on software definition, characterized in that: Applied to a TSN management system, the TSN management system includes a TSN centralized controller, at least one TSN switch and at least one real-time terminal, the TSN centralized controller is coupled to the at least one TSN switch, the method includes: The TSN centralized controller centrally configures the software-defined functions of the at least one TSN switch through a northbound interface and a southbound interface; wherein the northbound interface is used to allow a user to remotely access and modify software-defined parameters to generate configuration instructions and scheduling strategies, and the southbound interface is used to issue configuration instructions and scheduling strategies to the at least one TSN switch, and the software-defined functions include clock synchronization, network status monitoring, and forwarding and control separation; The configured TSN switch communicates with the real-time terminal.

2. The method according to claim 1, characterized in that The TSN centralized controller centrally configures the software-defined function of the at least one TSN switch through the northbound interface and the southbound interface, including: Through the gPTP protocol, the clock with the highest accuracy value is selected as the master clock among the clocks in all TSN switches, and the remaining clocks are set as slave clocks; Sending a configuration instruction to trigger the master clock to send synchronization messages and follow-up messages to all slave clocks through the gPTP protocol, so that all slave clocks calculate the first correspondence between the clock deviation and the link delay according to the received message; Sending a delay request message to all slave clocks, so that each slave clock feeds back a delay response message and calculates a second corresponding relationship between the clock deviation and the link delay; Determine a calculation result between clock deviation and link delay according to the first corresponding relationship and the second corresponding relationship, and calculate a clock deviation value of each slave clock; Each slave clock is configured to be corrected according to the corresponding clock deviation value so as to be synchronized with the master clock.

3. The method according to claim 1, characterized in that The TSN centralized controller centrally configures the software-defined function of the at least one TSN switch through the northbound interface and the southbound interface, including: Establish a network status monitoring model; wherein, in the network status monitoring model, the service flow D within the period T T It is expressed as: Average queue length L s The relationship with the data arrival rate λ is: Average data waiting time W s The relationship with λ is: The probability of packet loss due to insufficient queue buffer D L The relationship with λ is: In the above formula, the total number of nodes that remain connected in the network status monitoring model is N, the period is T, the amount of data is D0, the number of node layers is i, and the number of nodes in the i-th layer is N i , L is the number of queue levels, the maximum number of levels is M, the data of the i-th layer node will be forwarded by the previous i-1 layer nodes, the i-1 layer data will be transmitted i times, and the average service rate is 1 per second.

4. The method according to claim 1, characterized in that The TSN centralized controller centrally configures the software-defined function of the at least one TSN switch through the northbound interface and the southbound interface, including: The TSN centralized controller serves as a control plane, and allows users to remotely access and modify software-defined parameters using a REST-style API through a standard protocol through the northbound interface to generate configuration instructions and scheduling policies, and sends configuration instructions and scheduling policies to the at least one TSN switch through the southbound interface; The at least one TSN switch serves as a forwarding plane and forwards data packets according to the configuration instructions and the scheduling policy.

5. The method according to claim 1, characterized in that The at least one TSN switch is configured with a data encryption module, and the method further comprises: The data encryption module is used to configure security policy rules based on the source address, the destination address and the protocol type. If the data packet sent by the TSN centralized controller matches the security policy rules, the first encryption policy or the second encryption policy is executed; The first encryption strategy is to generate a random encryption key, use the encryption key to encrypt the content of the data packet based on the ESP protocol, encapsulate it after a new IP header, and add an ESP header and an ESP tail; The second encryption strategy is to perform hash processing on the content of the data packet based on the SHA-1 algorithm to obtain a corresponding hash value, and add the hash value to a preset authentication header.

6. The method according to claim 5, characterized in that The method also includes: the data encryption module enables the NAT traversal function during the encryption process, and adopts ECMP multi-path routing technology to optimize network connectivity, and the generated key identifier is set with a regular update mechanism.

7. The method according to claim 1, characterized in that The TSN centralized controller is configured with a status presentation module, and the method further includes: the status presentation module is used to provide a visual monitoring interface during the management process.

8. A computer-readable storage medium, characterized in that: A computer program is stored, and when the computer program is executed by a processor, the processor is caused to perform the steps of the method according to any one of claims 1 to 7.

9. A terminal device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method according to any one of claims 1 to 7.

Images