Normal offline data synchronization method, system, electronic device and medium

Abstract

The present disclosure provides a normal offline data synchronization method, system, electronic device and storage medium, to solve the security risks encountered when synchronizing data between the core UDM and the edge UDM, and to meet the network privacy requirements. The method is applied to an SFTP proxy server, which is connected to an SFTP server and an edge UDM network element respectively, and the SFTP server is connected to a core UDM network element. The method comprises: splitting the data synchronization process of the core UDM network element and the edge UDM network element; obtaining synchronization data from the core UDM network element, and disconnecting the edge UDM network element when obtaining the synchronization data; synchronizing the synchronization data to the edge UDM network element, and disconnecting the core UDM network element when synchronizing the data with the edge UDM network element. The present disclosure makes the transmission process between the core UDM and the edge UDM more secure, and meets the normal offline requirements of the edge UDM.

Description

Technical Field

[0001] This disclosure relates to the field of communication network technology, specifically to a normal offline data synchronization method, a normal offline data synchronization system, an electronic device, and a computer-readable storage medium. Background Technology

[0002] Unified Data Management (UDM) network elements are a key component of the 5G core network, responsible for storing user subscription data and performing authentication operations. UDM network elements receive authentication information sent by user equipment and compare it with pre-stored registration information within the network element. If they match, the UDM network element confirms that the user equipment has been authenticated. After successful authentication, the UDM network element provides the user with corresponding services based on the service information in the user's subscription data.

[0003] In actual production processes, some network users have high requirements for network reliability, thus necessitating the establishment of independent, decentralized 5G private networks. This requires the 5G core network to be deployed separately within the user's production environment. In a decentralized 5G private network, a dedicated UDM (User Dedicated Device) element is needed to manage the data of the user's independent private network, forming a "center-edge" topology with the public network UDM. The edge UDM element obtains user registration information and subscription data from its corresponding subnet from the core UDM element and executes relevant UDM functions within its subnet based on this information. Furthermore, in application scenarios with high network privacy requirements, maintaining a constant connection between the core UDM and the local edge UDM can lead to the mutual propagation of network risks, reduce the local network's concealment, and increase the burden on the core UDM. Therefore, the edge UDM needs to be normally offline, only connecting when data synchronization with the core UDM is required. This offline data synchronization requirement presents new challenges for UDM networking.

[0004] Currently, the synchronization between core UDM network elements and edge UDM network elements involves two methods: point-to-point direct connection synchronization and synchronization via an SFTP server. In the point-to-point direct connection method, the core UDM determines the data to be synchronized based on preset synchronization trigger conditions and sends the data directly to the edge UDM. In the SFTP (Secure Shell File Transfer Protocol) synchronization method, the core UDM encrypts and saves the data to be synchronized via the SFTP server, and the edge UDM then retrieves the corresponding encrypted data file from the SFTP server, decrypts it, and finally completes the synchronization.

[0005] The existing point-to-point direct connection synchronization technology between the core UDM and edge UDM has three main drawbacks: First, security risks; direct connection means that the data transmission process between the core UDM and edge UDM is more exposed, making them easier targets for attackers. Unencrypted data synchronization may lead to data eavesdropping, tampering, or interception, increasing the risk of information leakage and data integrity loss. Second, limited scalability; as the network scales up, when more edge UDM elements need to be added to the system, the direct connection data synchronization method is difficult to adapt to large-scale expansion, putting enormous pressure on the core UDM. Third, management complexity; maintaining the direct connection between the core UDM and multiple edge UDMs requires complex management configuration, especially in situations with complex network topologies or wide geographical distribution. Failure or misconfiguration at any connection point can affect the stability of the overall system.

[0006] Synchronization via SFTP server requires both the core UDM and the edge UDM to be connected to the network, which cannot meet the differentiated needs of network users in scenarios with high requirements for network privacy, who want the edge UDM to remain offline as usual. Summary of the Invention

[0007] To address the security risks, limited scalability, and complex management issues encountered in existing technologies regarding data synchronization between core UDM and edge UDM, and their inability to meet network privacy requirements, this disclosure provides a method, system, electronic device, and computer-readable storage medium for normalized offline data synchronization. This effectively prevents data leakage during transmission, enhances the security of data transmission between the core UDM and edge UDM, and meets the normalized offline requirements of edge UDM arising from security or privacy needs.

[0008] In a first aspect, this disclosure provides a normal offline data synchronization method applied to an SFTP proxy server, wherein the SFTP proxy server is connected to both an SFTP server and an edge UDM network element, and the SFTP server is connected to a core UDM network element. The method includes:

[0009] The data synchronization process between core UDM network elements and edge UDM network elements is separated;

[0010] It obtains synchronization data from the core UDM network element and disconnects from the edge UDM network element while obtaining the synchronization data from the core UDM network element;

[0011] Synchronize the data to the edge UDM network element and disconnect it from the core UDM network element when synchronizing with the edge UDM network element data.

[0012] Furthermore, the step of obtaining synchronization data from the core UDM network element and disconnecting from the edge UDM network element while obtaining the synchronization data from the core UDM network element includes:

[0013] Receive data synchronization requests sent by edge UDM network elements to the SFTP proxy server;

[0014] After disconnecting from the edge UDM network element, connect to the SFTP server and send a data synchronization request to the business operation system. This causes the business operation system to send a data synchronization instruction to the core UDM network element. The core UDM network element then uses the encryption key sent by the key server to the core UDM network element to encrypt the data to be synchronized according to the data synchronization request from the edge UDM network element, obtaining the synchronized data ciphertext, and sends the synchronized data ciphertext to the SFTP server.

[0015] Download the encrypted synchronization data from the SFTP server.

[0016] Furthermore, the step of synchronizing the data to the edge UDM network element and disconnecting from the core UDM network element during data synchronization includes:

[0017] Obtain the decryption key from the key server;

[0018] Disconnect from the SFTP server to disconnect from the core UDM network element;

[0019] It connects to the edge UDM network element and decrypts the ciphertext of the synchronization data to obtain the plaintext of the synchronization data;

[0020] The data is synchronized in plaintext to the edge UDM network element to complete the data synchronization.

[0021] Secondly, this disclosure provides a normal offline data synchronization system, the system including an SFTP proxy server, the SFTP proxy server being connected to an SFTP server and an edge UDM network element respectively, the SFTP server being connected to a core UDM network element, and the SFTP proxy server comprising:

[0022] The split module is configured to split the data synchronization process between the core UDM network element and the edge UDM network element.

[0023] The acquisition module is configured to acquire synchronization data from the core UDM network element and disconnect from the edge UDM network element when acquiring synchronization data from the core UDM network element.

[0024] The synchronization module is configured to synchronize synchronization data to the edge UDM network element and disconnect from the core UDM network element when synchronizing with the edge UDM network element data.

[0025] Furthermore, the acquisition module is specifically configured as follows:

[0026] Receive data synchronization requests sent by edge UDM network elements to the SFTP proxy server;

[0027] After disconnecting from the edge UDM network element, connect to the SFTP server and send a data synchronization request to the business operation system. This causes the business operation system to send a data synchronization instruction to the core UDM network element. The core UDM network element then uses the encryption key sent by the key server to the core UDM network element to encrypt the data to be synchronized according to the data synchronization request from the edge UDM network element, obtaining the synchronized data ciphertext, and sends the synchronized data ciphertext to the SFTP server.

[0028] Download the encrypted synchronization data from the SFTP server.

[0029] Furthermore, the synchronization module is specifically configured as follows:

[0030] Obtain the decryption key from the key server;

[0031] Disconnect from the SFTP server to disconnect from the core UDM network element;

[0032] It connects to the edge UDM network element and decrypts the ciphertext of the synchronization data to obtain the plaintext of the synchronization data;

[0033] The data is synchronized in plaintext to the edge UDM network element to complete the data synchronization.

[0034] Thirdly, this disclosure provides an electronic device including a memory and a processor, wherein the memory stores a computer program, and when the processor runs the computer program stored in the memory, the processor performs a normal offline data synchronization method as described in any of the first aspects.

[0035] Fourthly, this disclosure provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the normal offline data synchronization method described in any of the first aspects above.

[0036] Beneficial effects:

[0037] This disclosure provides a method, system, electronic device, and storage medium for normal offline data synchronization. Using an SFTP proxy server for relaying ensures that the edge UDM remains normally offline during data synchronization, enabling secure data transmission and maintaining good scalability. When the network expands, new edge UDMs only need to connect to the SFTP server via the SFTP proxy server, without placing additional load on the core UDM. During subsequent network maintenance, the core UDM configuration does not need to be changed; only the configuration of the corresponding SFTP proxy server for the edge UDM needs to be modified. The entire process is easy to maintain and significantly improves the security and efficiency of data synchronization. Attached Figure Description

[0038] Figure 1 This is a flowchart illustrating a normal offline data synchronization method provided in Embodiment 1 of this disclosure;

[0039] Figure 2 This is a schematic diagram of a normal offline data synchronization system provided in an embodiment of the present disclosure;

[0040] Figure 3 A schematic diagram illustrating the offline data synchronization process between the edge UDM and the core UDM based on an SFTP proxy server, provided in this embodiment of the disclosure;

[0041] Figure 4 This is a flowchart illustrating a normal offline data synchronization method provided in Embodiment 2 of this disclosure;

[0042] Figure 5 This is an architecture diagram of an SFTP proxy server provided in Embodiment 3 of this disclosure;

[0043] Figure 6 This is an architectural diagram of an electronic device provided in Embodiment 4 of this disclosure. Detailed Implementation

[0044] To enable those skilled in the art to better understand the technical solutions of this disclosure, the disclosure will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments and drawings described herein are merely for explaining the invention and are not intended to limit the invention.

[0045] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this disclosure are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence; furthermore, in the absence of conflict, the embodiments and features in the embodiments of this disclosure can be arbitrarily combined with each other.

[0046] The terminology used in the embodiments of this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of this disclosure. The singular forms “a,” “the,” and “the” as used in the embodiments of this disclosure and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise.

[0047] In the following description, the use of suffixes such as “module,” “part,” or “unit” to denote elements is solely for the purpose of illustrative purposes and has no specific meaning in itself. Therefore, “module,” “part,” or “unit” may be used interchangeably.

[0048] The following detailed embodiments illustrate the technical solutions of this disclosure and how they solve the aforementioned problems in the prior art. It is understood that in the embodiments of this application, the executing entity may perform some or all of the steps in the embodiments of this application. These steps or operations are merely examples, and the embodiments of this application may also perform other operations or variations thereof. Furthermore, the steps may be executed in different orders as presented in the embodiments of this application, and it is not necessary to execute all the operations in the embodiments of this application. Moreover, the following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments.

[0049] Figure 1 This is a flowchart illustrating a normal offline data synchronization method provided in Embodiment 1 of this disclosure. It is applied to an SFTP proxy server, which connects to both an SFTP server and an edge UDM network element. The SFTP server connects to a core UDM network element. Figure 1 As shown, the method includes:

[0050] Step S101: Decompose the data synchronization process between the core UDM network element and the edge UDM network element;

[0051] Step S102: Obtain synchronization data from the core UDM network element, and disconnect from the edge UDM network element while obtaining the synchronization data from the core UDM network element;

[0052] Step S103: Synchronize the synchronization data to the edge UDM network element, and disconnect from the core UDM network element when synchronizing with the edge UDM network element data.

[0053] SFTP is a secure file transfer protocol based on SSH (Secure Shell). Using the SFTP protocol, a secure network encryption algorithm can be provided during file transfer, thereby ensuring the secure transmission of data.

[0054] This embodiment of the disclosure uses an SFTP proxy server to relay data between the core UDM network element and the edge UDM network element, splitting the data synchronization process between the core UDM and the edge UDM into a data transmission process between the core UDM network element and the SFTP proxy server, and a data transmission process between the SFTP proxy server and the edge UDM network element. When the core UDM network element imports data to the SFTP proxy server through the SFTP server, the SFTP proxy server disconnects from the edge UDM. When the edge UDM network element downloads data from the SFTP proxy server, the SFTP proxy server disconnects from the core UDM. In this way, while maintaining the normal offline state of the edge UDM, data synchronization between the core UDM and the edge UDM is achieved.

[0055] Furthermore, the step of obtaining synchronization data from the core UDM network element and disconnecting from the edge UDM network element while obtaining the synchronization data from the core UDM network element includes:

[0056] Receive data synchronization requests sent by edge UDM network elements to the SFTP proxy server;

[0057] After disconnecting from the edge UDM network element, connect to the SFTP server and send a data synchronization request to the business operation system. This causes the business operation system to send a data synchronization instruction to the core UDM network element. The core UDM network element then uses the encryption key sent by the key server to the core UDM network element to encrypt the data to be synchronized according to the data synchronization request from the edge UDM network element, obtaining the synchronized data ciphertext, and sends the synchronized data ciphertext to the SFTP server.

[0058] Download the encrypted synchronization data from the SFTP server.

[0059] This disclosure embodiment is illustrated by, as follows Figure 2 The system shown is implemented as follows: a core terminal, a relay terminal, and an edge terminal. The core terminal includes a core UDM network element and an SFTP server. Data interaction between the UDM network element and the SFTP server is based on the characteristics of SFTP to ensure data transmission security. The relay terminal includes an SFTP proxy server. The SFTP proxy server and the core UDM network element are connected to a key server to implement data encryption and decryption. Both the SFTP server and the core UDM network element are connected to the business operation system. The SFTP proxy server can send data synchronization requests to the business operation system through the SFTP server, thereby enabling the sending of data synchronization commands to the core UDM. The edge terminal is an edge UDM.

[0060] When the edge UDM needs to obtain user registration information and subscription data from its corresponding subnet from the core UDM network element in order to execute the relevant functions of the UDM network element within its corresponding subnet, the edge UDM sends a data synchronization request to the SFTP proxy server. Upon receiving the synchronization request, the SFTP proxy server first disconnects from the edge UDM and then reconnects to the SFTP server, completing the subsequent encryption of the synchronization data obtained from the core UDM network element. All transmitted data undergoes end-to-end encryption.

[0061] Furthermore, the step of synchronizing the data to the edge UDM network element and disconnecting from the core UDM network element during data synchronization includes:

[0062] Obtain the decryption key from the key server;

[0063] Disconnect from the SFTP server to disconnect from the core UDM network element;

[0064] It connects to the edge UDM network element and decrypts the ciphertext of the synchronization data to obtain the plaintext of the synchronization data;

[0065] The data is synchronized in plaintext to the edge UDM network element to complete the data synchronization.

[0066] The SFTP proxy server obtains the encrypted synchronization data and the decryption key from the key server; it then disconnects from the SFTP server, connects to the edge UDM, decrypts the encrypted synchronization data, and synchronizes the plaintext synchronization data to the edge UDM. This allows the edge UDM to remain offline indefinitely, without the core UDM and edge UDM maintaining a network connection, while still enabling data synchronization.

[0067] This disclosed embodiment enables the edge UDM to maintain a normal offline state while simultaneously synchronizing data with the core UDM. It also achieves secure data transmission and maintains good scalability based on the SFTP proxy server; the edge UDM can be managed simply by changing the configuration of the corresponding SFTP proxy server. This facilitates easy configuration management of both the core UDM and the edge UDM.

[0068] Embodiment 2 of this disclosure also provides a method for normalized offline data synchronization to address the security risks, limited scalability, and complex management issues encountered during data synchronization between the core UDM and the edge UDM. This method allows the edge UDM to maintain normalized offline operation while still synchronizing data with the core UDM. The offline data synchronization process between the edge UDM and the core UDM based on an SFTP proxy server is as follows: Figure 3As shown, an SFTP proxy server relays data between the core UDM network element and the edge UDM network element, splitting the data synchronization process between the core UDM and the edge UDM. When the core UDM network element imports data to the SFTP proxy server, the SFTP proxy server disconnects from the edge UDM. When the edge UDM network element downloads data from the SFTP proxy server, the SFTP proxy server disconnects from the core UDM.

[0069] The specific process is as follows: Figure 4 As shown, it includes:

[0070] S1: The edge UDM sends a data synchronization request to the SFTP proxy server. After the SFTP proxy server disconnects from the edge UDM, it connects to the SFTP server and sends a data synchronization request to the business operation system.

[0071] S2: The business operations system sends a data synchronization command to the core UDM.

[0072] S3: The core UDM receives the encryption key sent by the key server based on the data synchronization request from the edge UDM, and uses the encryption key to encrypt the data to be synchronized to obtain the ciphertext of the synchronized data.

[0073] S4: The core UDM sends the encrypted synchronization data to the SFTP server.

[0074] S5: The SFTP proxy server downloads the encrypted synchronization data from the SFTP server.

[0075] S6: The SFTP proxy server obtains the decryption key from the key server.

[0076] S7: The SFTP proxy server disconnects from the SFTP server.

[0077] S8: The SFTP proxy server connects to the edge UDM and decrypts the encrypted synchronization data to obtain the plaintext synchronization data.

[0078] S9: The edge UDM obtains the plaintext of the synchronization data from the SFTP proxy server and completes the data synchronization.

[0079] Embodiment 3 of this disclosure also provides a normal offline data synchronization system, the system including an SFTP proxy server, the SFTP proxy server being connected to an SFTP server and an edge UDM network element, and the SFTP server being connected to a core UDM network element, such as... Figure 5 As shown, the SFTP proxy server includes:

[0080] Split module 11 is configured to split the data synchronization process between the core UDM network element and the edge UDM network element;

[0081] The acquisition module 12 is configured to acquire synchronization data from the core UDM network element and disconnect from the edge UDM network element when acquiring the synchronization data from the core UDM network element.

[0082] Synchronization module 13 is configured to synchronize synchronization data to the edge UDM network element and disconnect from the core UDM network element when synchronizing with the edge UDM network element data.

[0083] Furthermore, the acquisition module 12 is specifically configured as follows:

[0084] Receive data synchronization requests sent by edge UDM network elements to the SFTP proxy server;

[0085] After disconnecting from the edge UDM network element, connect to the SFTP server and send a data synchronization request to the business operation system. This causes the business operation system to send a data synchronization instruction to the core UDM network element. The core UDM network element then uses the encryption key sent by the key server to the core UDM network element to encrypt the data to be synchronized according to the data synchronization request from the edge UDM network element, obtaining the synchronized data ciphertext, and sends the synchronized data ciphertext to the SFTP server.

[0086] Download the encrypted synchronization data from the SFTP server.

[0087] Furthermore, the synchronization module 13 is specifically configured as follows:

[0088] Obtain the decryption key from the key server;

[0089] Disconnect from the SFTP server to disconnect from the core UDM network element;

[0090] It connects to the edge UDM network element and decrypts the ciphertext of the synchronization data to obtain the plaintext of the synchronization data;

[0091] The data is synchronized in plaintext to the edge UDM network element to complete the data synchronization.

[0092] The normal offline data synchronization system of this disclosure is used to implement the normal offline data synchronization method in Embodiment 1 and Embodiment 2, so the description is relatively simple. For details, please refer to the relevant descriptions in the previous method embodiments, which will not be repeated here.

[0093] In addition, such as Figure 6 As shown, Embodiment 4 of this disclosure also provides an electronic device, including a memory 100 and a processor 200. The memory 100 stores a computer program. When the processor 200 runs the computer program stored in the memory 100, the processor 200 executes the various possible methods described above.

[0094] The memory 100 is connected to the processor 200. The memory 100 can be a flash memory, a read-only memory, or another type of memory. The processor 200 can be a central processing unit or a microcontroller.

[0095] Furthermore, embodiments of this disclosure also provide a computer-readable storage medium storing a computer program, which is executed by a processor using the various possible methods described above.

[0096] The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules or other data). Computer-readable storage media includes, but is not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), flash memory or other memory technologies, CD-ROM (Compact Disc Read-Only Memory), Digital Video Disc (DVD) or other optical disc storage, cartridges, magnetic tapes, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible to a computer.

[0097] It is understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of this disclosure, and this disclosure is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and substance of this disclosure, and these modifications and improvements are also considered to be within the scope of protection of this disclosure.

Claims

1. A method for normal state offline data synchronization, characterized in that, The application is applied to a secure shell file transfer protocol (SFTP) proxy server, the SFTP proxy server is connected with an SFTP server and an edge unified data management (UDM) network element respectively, the SFTP server is connected with a core UDM network element, and the method comprises the following steps: a data synchronization process of the core UDM network element and the edge UDM network element is split; synchronization data is acquired from the core UDM network element, and the edge UDM network element is disconnected when the synchronization data of the core UDM network element is acquired; the synchronization data is synchronized to the edge UDM network element, and the core UDM network element is disconnected when the data of the edge UDM network element is synchronized.

2. The method of claim 1, wherein, the step of acquiring the synchronization data from the core UDM network element and disconnecting the edge UDM network element when the synchronization data of the core UDM network element is acquired comprises the following steps: a data synchronization request sent by the edge UDM network element to the SFTP proxy server is received; the SFTP server is connected after being disconnected with the edge UDM network element, a data synchronization request is sent to a business operation system, the business operation system sends a data synchronization instruction to the core UDM network element, the core UDM network element encrypts data to be synchronized by using an encryption key sent to the core UDM network element by a key server according to the data synchronization request of the edge UDM network element to obtain synchronization data ciphertext, and the synchronization data ciphertext is sent to the SFTP server; the synchronization data ciphertext is downloaded from the SFTP server.

3. The method of claim 2, wherein, the step of synchronizing the synchronization data to the edge UDM network element and disconnecting the core UDM network element when the data is synchronized comprises the following steps: a decryption key is obtained from a key server; the connection with the SFTP server is disconnected to realize the disconnection with the core UDM network element; the edge UDM network element is connected, and the synchronization data ciphertext is decrypted to obtain synchronization data plaintext; the synchronization data plaintext is synchronized to the edge UDM network element to complete the data synchronization.

4. A normal state offline data synchronization system, characterized in that, The system comprises an SFTP proxy server, the SFTP proxy server is connected with an SFTP server and an edge UDM network element respectively, the SFTP server is connected with a core UDM network element, and the SFTP proxy server comprises the following: a splitting module is arranged to split a data synchronization process of the core UDM network element and the edge UDM network element; an acquisition module is arranged to acquire synchronization data from the core UDM network element and disconnect the edge UDM network element when the synchronization data of the core UDM network element is acquired; a synchronization module is arranged to synchronize the synchronization data to the edge UDM network element and disconnect the core UDM network element when the data of the edge UDM network element is synchronized.

5. The system of claim 4, wherein, the acquisition module is specifically arranged as follows: a data synchronization request sent by the edge UDM network element to the SFTP proxy server is received; After being disconnected with the edge UDM network element, the SFTP server is connected, and a data synchronization request is sent to the business operation system, so that the business operation system sends a data synchronization instruction to the core UDM network element, and the core UDM network element encrypts the data to be synchronized using the encryption key sent by the key server to the core UDM network element according to the data synchronization request of the edge UDM network element, obtains the synchronization data ciphertext, and sends the synchronization data ciphertext to the SFTP server; The synchronization data ciphertext is downloaded from the SFTP server.

6. The system of claim 5, wherein, The synchronization module is specifically configured as: The decryption key is obtained from the key server; The connection with the SFTP server is disconnected to realize disconnection with the core UDM network element; The synchronization data ciphertext is decrypted to obtain the synchronization data plaintext; The synchronization data plaintext is synchronized to the edge UDM network element to complete data synchronization.

7. An electronic device, comprising: The computer readable storage medium stores a computer program, and when the processor executes the computer program stored in the memory, the processor executes the normal offline data synchronization method in any one of claims 1-3.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer program, and when the processor executes the computer program stored in the memory, the processor executes the normal offline data synchronization method in any one of claims 1-3.

Images