User authentication charging gateway system and method based on supercomputing center SLURM system

Abstract

The invention discloses a user authentication charging gateway system and method based on a supercomputing center SLURM system, the system comprises a gateway system, the gateway system comprises a computing power creation module, a computing power configuration module, an account management module, an authority acquisition module, a data synchronization system and an account charging module, the computing power creation module is in communication connection with the computing power configuration module, and the account management module is in communication connection with the data synchronization system. The account management module is in communication connection with the authority acquisition module, the authority acquisition module is in communication connection with the data synchronization system, and the data synchronization system is in communication connection with the account charging module. After the gateway is deployed, the normal original maintenance process of the system and the use habit of a user are not influenced, and compared with other commercial or open-source computing power scheduling systems based on the SLURM system, the deployment implementation difficulty and cost are low, the boundary is clearer, and the maintenance is simpler.

Description

Technical Field

[0001] The present invention relates to the technical field of gateway systems, and in particular to a user authentication and billing gateway system and method based on a supercomputing center SLURM system. Background Art

[0002] At present, a considerable number of mainstream high-performance computing (HPC) products use SLURM as a scheduler for resource management and job scheduling. SLURM is an open source, fault-tolerant, and highly scalable cluster job scheduling system. Its key functions include: allocating computing resources to execute work tasks; providing a framework for starting, executing, and monitoring jobs on the allocated set of nodes; and arbitrating resource contention issues.

[0003] The existing HPC platform based on the SLURM system has the following problems in terms of refined operation and compliance with the Cybersecurity Law, Data Security Law, and Multi-Security Protection Law:

[0004] Difficulty in real-name management of users: The daily management of the SLURM system is based on two user systems: the operating system (LINUX, WINDOWSSERVER, etc.) and SLURM. The two user systems are not interoperable, that is, after adding operating system users, SLURM users need to be added and configured one by one. Therefore, if administrators want to implement real-name user identity authentication management and log auditing, they can only rely on manual registration, review and operation by the administrators. The work is cumbersome and intensive, and it is difficult to meet the effective real-name traceability required by relevant laws and regulations.

[0005] Existing user management solutions for SLURM-based HPC products have many defects, including: data consistency and permission conflict risks caused by complex user systems, difficulties in connecting to external user systems, and lack of platform-side permission control and scalability.

[0006] Difficulty in implementing refined operations: The SLURM system is mainly based on command line operations. The built-in or open source WEB-side visual management platform has relatively simple functions, focuses on monitoring, and has no Chinese version. The administrator maintenance experience is not good, and visual operation data analysis cannot be performed.

[0007] Poor terminal user experience: The system has low visualization and relies on command line input to obtain job information status.

[0008] Insufficient billing function: The billing policy configuration of the SLURM system is completely based on command lines and configuration files, and there is no visual interface configuration. Although the SLURM system can configure billing accounts and usage quotas, for scientific research units, in order to ensure the normal use of scientific research projects, computing power is usually used in an accounting manner, and it is not truly commercially operated. Strict computing power usage control is performed based on account balances. Therefore, the native SLURM system cannot provide a cost control strategy that does not affect normal job operations. Summary of the invention

[0009] The purpose of the present invention is to provide a user authentication and billing gateway system and method based on the SLURM system of a supercomputing center to solve the problems raised in the above background technology.

[0010] To achieve the above object, the present invention provides the following technical solutions:

[0011] A user authentication and billing gateway system based on a supercomputing center SLURM system, comprising a gateway system, wherein the gateway system comprises a computing power creation module, a computing power configuration module, an account management module, a permission acquisition module, a data synchronization system and an account billing module, wherein the computing power creation module is communicatively connected with the computing power configuration module, the account management module is communicatively connected with the permission acquisition module, the permission acquisition module is communicatively connected with the data synchronization system, and the data synchronization system is communicatively connected with the account billing module;

[0012] The computing power creation module is used to support the creation of computing power accounts and computing power user groups;

[0013] The computing power configuration module is used to configure the computing account billing strategy;

[0014] The account management module is used to support the creation and binding of gateway system accounts and the binding of gateway accounts with SLURM system user information;

[0015] The permission acquisition module is used to obtain the user's account permissions in the SLURM system according to the bound SLURM system user information;

[0016] The data synchronization system is used to support the establishment of a connection between the gateway system and the SLURM system and data transmission between the two;

[0017] The account billing module is used to calculate the user's account fees based on the user's data in the SLURM system, and set overspending limits to implement overspending measures.

[0018] As a preferred solution of the present invention: the account management module includes an account creation support unit, an account binding support unit and an account data storage unit;

[0019] The account creation support unit is used to support the user's account creation in the gateway system;

[0020] The account binding support unit is used to support the binding of the user gateway system account and the SLURM system account;

[0021] The account data storage unit is used to provide a storage location for the user's account data.

[0022] As a preferred solution of the present invention: the permission acquisition module includes a permission request initiating unit, a request window determining unit and a permission signal receiving unit;

[0023] The permission request initiating unit is used to send a permission request permission to the SLURM system;

[0024] The request window determination unit is used to initiate a permission request confirmation window for manual confirmation by the user;

[0025] The permission signal receiving unit is used to receive permission for data acquisition of the SLURM system after the user confirms the permission.

[0026] As a preferred solution of the present invention: the data synchronization system includes a connection establishment module, a data retrieval module and a data transmission module;

[0027] The connection establishment module is used to establish a connection channel between the gateway system and the SLURM system after the interface is accessed;

[0028] The data retrieval module is used to support the retrieval of user data within the SLURM system;

[0029] The data transmission module is used to support data transmission between the gateway system and the SLURM system.

[0030] As a preferred solution of the present invention: the account billing module includes a fee calculation unit, a limit setting unit and an over-limit control unit;

[0031] The fee calculation unit is used to calculate the user's fee according to the billing policy of the computing power account based on the retrieved SLURM system user data;

[0032] The limit setting unit is used to support the user in setting the fee threshold in the SLURM system;

[0033] The over-limit control unit is used to stop the gateway account from accessing the SLURM system when the calculation fee exceeds the fee threshold.

[0034] A user authentication and billing gateway method based on the SLURM system of a supercomputing center specifically comprises the following steps:

[0035] S1. The gateway system synchronously obtains all Account and GroupId information of the SLURM system through the interface;

[0036] S2. Based on the data obtained in the first step, the computing power account and computing power user group are automatically created in the gateway system;

[0037] S3. Configure the computing power account billing strategy in the gateway system;

[0038] S4. Create a real-name account in the gateway system;

[0039] S5. Complete the binding of gateway user and SLURM user information;

[0040] S6. The gateway system verifies whether the SLURM user name and job ID in the previous step match the SLURM system through the interface.

[0041] S7. After the matching is completed, the Account and GroupId corresponding to the SLURM user name are obtained from the SLURM system through the interface;

[0042] S8. Complete the mapping and binding of the gateway account, SLURM UserId, SLURM Account, and SLURM user group GroupId on the gateway system;

[0043] S9. The user logs in to the gateway using the gateway account and password;

[0044] S10. After obtaining the permission to access the SLURM system, the user uses the SLURM user to log in to the SLURM system to perform business operations;

[0045] S11, the gateway system obtains the SLURM Account and SLURM UserId consumption time mapped by the gateway account through the interface in real time;

[0046] S12. Check whether the fee is overspent according to the billing policy of the computing power account where the gateway account is located;

[0047] S13. If the cost is overspent, the gateway account's access to the SLURM system will be terminated;

[0048] S14. The user uses the gateway account to log in to the self-service page of the gateway to view the job running information.

[0049] As a preferred solution of the present invention: the real-name accounts created by the gateway system of S4 can be generated in batches by an administrator, or the user can log in to the self-service page of the gateway and complete the real-name information binding through mobile phone text messages or the like.

[0050] As a preferred solution of the present invention: the gateway user of S5 and the SLURM user information binding method are: use the gateway user to log in to the self-service page, enter the SLURM user name and the submitted job ID.

[0051] Compared with the prior art, the present invention has the following beneficial effects:

[0052] 1. The system proposed by the present invention provides real-name authenticated network boundary security and compliance audit log traceability for supercomputing platforms, making it easier to meet the requirements of relevant laws and regulations such as the Cybersecurity Law and the Information Security Protection Law;

[0053] 2. Provide computing power billing control function based on network access rights to meet the needs of scientific research units to control billing while avoiding affecting the normal operation of HPC jobs. At the same time, it provides visual and refined SLURM system billing strategy functions and detailed visual analysis of operational data to solve the shortcomings of SLURM system billing and operational data analysis functions;

[0054] 3. The deployment of the authentication and billing gateway transforms the security authentication of the SLURM system into two-factor or multi-factor authentication, improving the security of access to the HPC platform.

[0055] 4. The original SLURM system does not need to be modified or redeveloped. The authentication and billing gateway is loosely coupled with the SLURM system. After the gateway is deployed, it does not affect the normal original maintenance process of the system and user usage habits. Compared with other commercial or open source computing power scheduling systems based on the SLURM system, the deployment and implementation difficulty and cost are low, the boundaries are clearer, and maintenance is simpler.

[0056] 5. Provide SLURM users with an intuitive Chinese version of the visual information interface, and be able to complete related tasks by themselves, improving the user experience of the HPC platform. This solves the problem that the native SLURM system does not have a Chinese version of the visual information interface for users, and also greatly reduces the workload of administrators. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 is a flow chart of the method of the present invention;

[0058] Figure 2 is a system block diagram of the present invention;

[0059] Figure 3 This is a diagram of the account management module unit of the present invention;

[0060] Figure 4 A module unit diagram for obtaining the rights of the present invention;

[0061] Figure 5 It is a module diagram of the data synchronization system of the present invention;

[0062] Figure 6 This is a unit diagram of the account billing module of the present invention. DETAILED DESCRIPTION

[0063] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0064] See also Figure 1-Figure 6 , the present invention provides a technical solution:

[0065] A user authentication and billing gateway system based on a supercomputing center SLURM system, comprising a gateway system, the gateway system comprising a computing power creation module, a computing power configuration module, an account management module, a permission acquisition module, a data synchronization system and an account billing module, the computing power creation module is connected in communication with the computing power configuration module, the account management module is connected in communication with the permission acquisition module, the permission acquisition module is connected in communication with the data synchronization system, and the data synchronization system is connected in communication with the account billing module;

[0066] The computing power creation module is used to support the creation of computing power accounts and computing power user groups;

[0067] The computing power configuration module is used to configure the computing account billing strategy;

[0068] The account management module is used to support the creation and binding of gateway system accounts and the binding of gateway accounts with SLURM system user information;

[0069] The permission acquisition module is used to obtain the user's account permissions in the SLURM system based on the bound SLURM system user information;

[0070] The data synchronization system is used to support the connection establishment between the gateway system and the SLURM system and the data transmission between the two;

[0071] The account billing module is used to calculate the user's account fees based on the user's data in the SLURM system, and set overspending limits to implement overspending measures.

[0072] Further, the account management module includes an account creation support unit, an account binding support unit and an account data storage unit;

[0073] The account creation support unit is used to support the user's account creation in the gateway system;

[0074] The account binding support unit is used to support the binding of the user gateway system account and the SLURM system account;

[0075] The account data storage unit is used to provide a storage location for the user's account data.

[0076] Further, the permission acquisition module includes a permission request initiating unit, a request window determining unit and a permission signal receiving unit;

[0077] The permission request initiating unit is used to send a permission request permission to the SLURM system;

[0078] The request window determination unit is used to initiate a permission request confirmation window for manual confirmation by the user;

[0079] The permission signal receiving unit is used to receive permission for data acquisition of the SLURM system after the user confirms the permission.

[0080] Further, the data synchronization system includes a connection establishment module, a data retrieval module and a data transmission module;

[0081] The connection establishment module is used to establish a connection channel between the gateway system and the SLURM system after the interface is connected;

[0082] The data retrieval module is used to support the retrieval of user data within the SLURM system;

[0083] The data transmission module is used to support data transmission between the gateway system and the SLURM system.

[0084] Further, the account billing module includes a fee calculation unit, a limit setting unit and an over-limit control unit;

[0085] The fee calculation unit is used to calculate the user's fee according to the billing policy of the computing power account based on the retrieved SLURM system user data;

[0086] The limit setting unit is used to support users in setting fee thresholds in the SLURM system;

[0087] The over-limit control unit is used to stop the gateway account from accessing the SLURM system when the computing fee exceeds the fee threshold.

[0088] A user authentication and billing gateway method based on a supercomputing center SLURM system is applied to a user authentication and billing gateway system based on a supercomputing center SLURM system, and specifically includes the following steps:

[0089] S1. The gateway system synchronously obtains all Account and GroupId information of the SLURM system through the interface;

[0090] S2. Based on the data obtained in the first step, the computing power account and computing power user group are automatically created in the gateway system;

[0091] S3. Configure the computing power account billing strategy in the gateway system;

[0092] S4. Create a real-name account in the gateway system;

[0093] S5. Complete the binding of gateway user and SLURM user information;

[0094] S6. The gateway system verifies whether the SLURM user name and job ID in the previous step match the SLURM system through the interface.

[0095] S7. After the matching is completed, the Account and GroupId corresponding to the SLURM user name are obtained from the SLURM system through the interface;

[0096] S8. Complete the mapping and binding of the gateway account, SLURM UserId, SLURM Account, and SLURM user group GroupId on the gateway system;

[0097] S9. The user logs in to the gateway using the gateway account and password;

[0098] S10. After obtaining the permission to access the SLURM system, the user uses the SLURM user to log in to the SLURM system to perform business operations;

[0099] S11, the gateway system obtains the SLURM Account and SLURM UserId consumption time mapped by the gateway account through the interface in real time;

[0100] S12. Check whether the fee is overspent according to the billing policy of the computing power account where the gateway account is located;

[0101] S13. If the cost is overspent, the gateway account's access to the SLURM system will be terminated;

[0102] S14. The user uses the gateway account to log in to the self-service page of the gateway to view the job running information.

[0103] Furthermore, the S4 gateway system can create real-name accounts in batches by administrators, or users can log in to the gateway's self-service page and complete the real-name information binding through mobile phone text messages and other methods.

[0104] Furthermore, the S5 gateway user and SLURM user information are bound as follows: log in to the self-service page using the gateway user, enter the SLURM user name and the submitted job ID.

[0105] The above technical solution is deployed in series on the network link between the user and the SLURM system when it is used. The specific steps are as follows:

[0106] 1. The gateway system synchronously obtains all Account and GroupId information of the SLURM system through the interface;

[0107] 2. Based on the data obtained in the first step, the computing power account and computing power user group are automatically created in the gateway system;

[0108] 3. Configure the computing power account billing strategy in the gateway system, such as the amount per core hour, the control strategy after the cost overrun, etc.;

[0109] 4. The gateway system creates real-name accounts, which can be generated in batches by administrators or by users logging into the gateway's self-service page and completing real-name information binding via mobile phone text messages or other methods;

[0110] 5. The user completes the binding of the gateway user and SLURM user information by logging in to the self-service page using the gateway user and entering the SLURM user name and submitted job ID;

[0111] 6. The gateway system verifies whether the SLURM user name and job ID from the previous step match the SLURM system through the interface;

[0112] 7. If the match is verified, the Account and GroupId corresponding to the SLURM username are obtained from the SLURM system through the interface

[0113] 8. Complete the mapping and binding of gateway account, SLURM UserId, SLURM Account, and SLURM user group GroupId on the gateway system;

[0114] 9. The user logs in to the gateway using the gateway account and password;

[0115] 10. After obtaining the permission to access the SLURM system, the user uses the SLURM user to log in to the SLURM system to perform business operations;

[0116] 11. The gateway system obtains the SLURM Account and SLURM UserId mapped by the gateway account through the interface in real time to consume core time;

[0117] 12. Check whether the fees are overspent according to the billing policy of the computing power account where the gateway account is located;

[0118] 13. If the fees are overspent, the gateway account’s access to the SLURM system will be terminated;

[0119] 14. The user uses the gateway account to log in to the gateway's self-service page to view job running information.

[0120] In summary, the main points of this application are:

[0121] 1. A network authentication and billing gateway with a SLURM business interface is deployed in series on the network link between the user and the SLURM system;

[0122] 2. On the gateway system, users can use self-service methods to map and bind gateway accounts, SLURM UserId, SLURM Account, and SLURM user group GroupId based on their own SLURM user names and job IDs;

[0123] 3. The network authentication and billing gateway can charge gateway users based on their SLURM system usage time. If the cost is overspent, the network access rights to the SLURM system through the gateway will be stopped;

[0124] 4. When the user's fees are overspent and he cannot access the SLURM system, he can view the job operation information submitted by the SLURM system from the authentication and billing gateway system.

[0125] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A user authentication and billing gateway system based on the SLURM system of a supercomputing center, comprising a gateway system, characterized in that: The gateway system includes a computing power creation module, a computing power configuration module, an account management module, a permission acquisition module, a data synchronization system and an account billing module. The computing power creation module is connected to the computing power configuration module, the account management module is connected to the permission acquisition module, the permission acquisition module is connected to the data synchronization system, and the data synchronization system is connected to the account billing module; The computing power creation module is used to support the creation of computing power accounts and computing power user groups; The computing power configuration module is used to configure the computing account billing strategy; The account management module is used to support the creation and binding of gateway system accounts and the binding of gateway accounts with SLURM system user information; The permission acquisition module is used to obtain the user's account permissions in the SLURM system according to the bound SLURM system user information; The data synchronization system is used to support the establishment of a connection between the gateway system and the SLURM system and data transmission between the two; The account billing module is used to calculate the user's account fees based on the user's data in the SLURM system, and set overspending limits to implement overspending measures.

2. According to claim 1, a user authentication and billing gateway system based on the supercomputing center SLURM system is characterized in that: The account management module includes an account creation support unit, an account binding support unit and an account data storage unit; The account creation support unit is used to support the user's account creation in the gateway system; The account binding support unit is used to support the binding of the user gateway system account and the SLURM system account; The account data storage unit is used to provide a storage location for the user's account data.

3. A user authentication and billing gateway system based on the supercomputing center SLURM system according to claim 1, characterized in that: The permission acquisition module includes a permission request initiating unit, a request window determining unit and a permission signal receiving unit; The permission request initiating unit is used to send a permission request permission to the SLURM system; The request window determination unit is used to initiate a permission request confirmation window for manual confirmation by the user; The permission signal receiving unit is used to receive permission for data acquisition of the SLURM system after the user confirms the permission.

4. A user authentication and billing gateway system based on the supercomputing center SLURM system according to claim 1, characterized in that: The data synchronization system includes a connection establishment module, a data retrieval module and a data transmission module; The connection establishment module is used to establish a connection channel between the gateway system and the SLURM system after the interface is accessed; The data retrieval module is used to support the retrieval of user data within the SLURM system; The data transmission module is used to support data transmission between the gateway system and the SLURM system.

5. A user authentication and billing gateway system based on the supercomputing center SLURM system according to claim 1, characterized in that: The account billing module includes a fee calculation unit, a limit setting unit and an over-limit control unit; The fee calculation unit is used to calculate the user's fee according to the billing policy of the computing power account based on the retrieved SLURM system user data; The limit setting unit is used to support the user in setting the fee threshold in the SLURM system; The over-limit control unit is used to stop the gateway account from accessing the SLURM system when the calculation fee exceeds the fee threshold.

6. A user authentication and billing gateway method based on a supercomputing center SLURM system, applied to a user authentication and billing gateway system based on a supercomputing center SLURM system proposed in claims 1-5, characterized in that it specifically includes the following steps: S1. The gateway system synchronously obtains all Account and GroupId information of the SLURM system through the interface; S2. Based on the data obtained in the first step, the computing power account and computing power user group are automatically created in the gateway system; S3. Configure the computing power account billing strategy in the gateway system; S4. Create a real-name account in the gateway system; S5. Complete the binding of gateway user and SLURM user information; S6. The gateway system verifies whether the SLURM user name and job ID in the previous step match the SLURM system through the interface. S7. After the matching is completed, the Account and GroupId corresponding to the SLURM user name are obtained from the SLURM system through the interface; S8. Complete the mapping and binding of the gateway account, SLURM UserId, SLURM Account, and SLURM user group GroupId on the gateway system; S9. The user logs in to the gateway using the gateway account and password; S10. After obtaining the permission to access the SLURM system, the user uses the SLURM user to log in to the SLURM system to perform business operations; S11, the gateway system obtains the SLURM Account and SLURM UserId consumption time mapped by the gateway account through the interface in real time; S12. Check whether the fee is overspent according to the billing policy of the computing power account where the gateway account is located; S13. If the cost is overspent, the gateway account's access to the SLURM system will be terminated; S14. The user uses the gateway account to log in to the self-service page of the gateway to view the job running information.

7. A user authentication and billing gateway method based on the supercomputing center SLURM system according to claim 6, characterized in that: The real-name accounts created by the gateway system of S4 can be generated in batches by an administrator, or the user can log in to the self-service page of the gateway and complete the binding of real-name information through mobile phone text messages or the like.

8. A user authentication and billing gateway system and method based on the supercomputing center SLURM system according to claim 6, characterized in that: The S5 gateway user and SLURM user information binding method is: use the gateway user to log in to the self-service page, enter the SLURM user name and the submitted job ID.

Images