Control system, method and device based on emergency command center

Abstract

The invention relates to a management and control system, method and device based on an emergency command center. The system comprises an operation and maintenance management platform which interacts with upstream and downstream systems and is used for identifying event alarms generated by the systems; judging whether the event alarm meets an emergency command center starting condition or not, and if yes, dividing the event alarm into first alarm information and second alarm information; the emergency command center is used for acquiring event alarm information from the operation and maintenance management platform when the event alarm reaches an emergency starting preset condition, displaying the alarm information on a preset interface and respectively notifying the on-duty nodes; and according to the execution processing of the first alarm information by the first on-duty node and the execution processing of the second alarm information by the second on-duty node, re-judging whether the event alarm information returns to normal. According to the invention, an online emergency command center for managing and controlling the whole process of emergency event disposal in case of abnormality is constructed, and the improvement of the operation function of a bank remote multi-center physical architecture is facilitated.

Description

Technical Field

[0001] This specification relates to the field of emergency response, and in particular to a management and control system, method and device based on an emergency command center. Background Art

[0002] For banks, complex business transactions may generate monitoring alarms that affect business, and it is inevitable to initiate emergency events and invest corresponding human and material resources to resolve system anomalies.

[0003] How to quickly locate and resolve the root cause of anomalies through the emergency command center with standard disposal plans, minimize business impact and ensure business continuity is an extremely important part of the stable development of banks.

[0004] The existing technology for emergency handling based on preset templates has the problem of being unable to respond quickly to emergency situations. Summary of the invention

[0005] To solve the problems of the prior art, the embodiments of this specification provide a management and control system, method and device based on an emergency command center.

[0006] The embodiment of the present specification provides an emergency command center system, the system comprising: an operation and maintenance management platform, the operation and maintenance management platform interacting with upstream and downstream systems to identify event alarms occurring in each system; judging whether the event alarm meets the emergency command center startup condition, and if so, dividing the event alarm into a first alarm message and a second alarm message; the emergency command center communicating with the operation and maintenance management platform to obtain event alarm information from the operation and maintenance management platform when the event alarm meets the emergency startup preset condition, the event alarm information comprising: a first alarm message related to the impact of the event on the upstream and downstream systems and a second alarm message related to the system to which the event belongs; displaying the first alarm message and the second alarm message on a first preset interface and a second preset interface, respectively, and notifying a first duty node of the first preset interface and a second duty node of the second preset interface, respectively; re-judging whether the event alarm message has returned to normal according to the execution processing of the first alarm message by the first duty node and the execution disposal of the second alarm message by the second duty node; if so, recording the alarm message and the disposal process; if not, the execution disposal of the first alarm message and the second alarm message by the second duty node.

[0007] According to one aspect of an embodiment of the present specification, a corresponding preset emergency plan is matched for the event alarm according to key fields in the event alarm, and the preset emergency plan is sent to the emergency command center as the second alarm information.

[0008] The embodiment of the present specification provides a control method based on an emergency command center, the method comprising: when an event alarm reaches a preset condition for emergency initiation, obtaining event alarm information from an operation and maintenance management platform, the event alarm information comprising: a first alarm information related to the impact of the event on upstream and downstream systems and a second alarm information related to the system to which the event belongs; displaying the first alarm information and the second alarm information on a first preset interface and a second preset interface, respectively, and notifying a first on-duty node of the first preset interface and a second on-duty node of the second preset interface, respectively; re-determining whether the event alarm information has returned to normal based on the execution processing of the first alarm information by the first on-duty node and the execution disposal of the second alarm information by the second on-duty node; if so, recording the alarm information and the disposal process; if not, the on-duty node continues to execute disposal on the alarm information.

[0009] According to one aspect of an embodiment of the present specification, determining the execution disposal of the second on-duty node in the following manner includes: determining whether the second alarm information includes a preset emergency plan; if included, determining whether the preset emergency plan requires emergency processing; if so, configuring the emergency processing authority required for emergency processing to the second on-duty node, and obtaining the emergency operation result of the second on-duty node.

[0010] According to one aspect of an embodiment of the present specification, respectively notifying the first on-duty node of the first preset interface and the second on-duty node of the second preset interface includes: sending an alarm notification to the first on-duty node and the second on-duty node respectively according to the on-duty node information of the operation and maintenance management platform; determining the first on-duty node and the second on-duty node that receive the notification according to the response results of the first on-duty node and the second on-duty node to the notification; and configuring emergency operation permissions for the first on-duty node and the second on-duty node that receive the notification.

[0011] According to one aspect of the embodiments of this specification, the method further includes: when the event alarm information returns to normal, issuing an emergency end notification and reclaiming the emergency processing authority of the second duty node.

[0012] The embodiment of the present specification also provides a control device based on an emergency command center, the device comprising: an alarm information acquisition unit, used to acquire event alarm information from an operation and maintenance management platform when the event alarm reaches a preset condition for emergency initiation, the event alarm information comprising: a first alarm information related to the impact of the event on upstream and downstream systems and a second alarm information related to the system to which the event belongs; a notification unit, used to display the first alarm information and the second alarm information on a first preset interface and a second preset interface, respectively, and to notify a first on-duty node of the first preset interface and a second on-duty node of the second preset interface, respectively; a judgment unit, used to re-judge whether the event alarm information has returned to normal based on the execution processing of the first alarm information by the first on-duty node and the execution disposal of the second alarm information by the second on-duty node; a recording unit, used to record the alarm information and the disposal process if so; and a continued disposal unit, used to continue to dispose of the alarm information by the on-duty node if not.

[0013] The embodiments of the present specification also provide a computer device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the management and control method based on the emergency command center when executing the computer program.

[0014] The embodiments of the present specification also provide a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the management and control method based on the emergency command center is implemented.

[0015] The embodiments of the present specification also provide a computer program product, which includes a computer program. When the computer program is executed by a processor, the computer program executes instructions of the control method based on the emergency command center.

[0016] This instruction manual aims to build an online emergency command center that can control the entire process of emergency incident handling when an abnormality occurs. Online emergency handling is conducive to the improvement of the operating functions of the bank's multi-center physical architecture in different locations. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of this specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 The figure shows a schematic diagram of a control system based on an emergency command center according to an embodiment of the present specification;

[0019] Figure 2 The flowchart of a control method based on an emergency command center in an embodiment of this specification is shown;

[0020] Figure 3 The figure is a flow chart of a method for performing treatment on a second duty node according to an embodiment of the present specification;

[0021] Figure 4 The figure is a flow chart of a method for notifying a node on duty according to an embodiment of the present specification;

[0022] Figure 5 The figure shows a schematic diagram of the structure of a control device based on an emergency command center according to an embodiment of the present specification;

[0023] Figure 6 The figure shows a schematic diagram of the structure of a computer device according to an embodiment of the present specification.

[0024] Description of the accompanying symbols:

[0025] 100. Operation and maintenance management platform;

[0026] 200. Emergency command center;

[0027] 501, alarm information acquisition unit;

[0028] 502. Notification unit;

[0029] 503, judging unit;

[0030] 504, recording unit;

[0031] 505, continue to deal with the unit;

[0032] 602. Computer equipment;

[0033] 604, processor;

[0034] 606. Memory;

[0035] 608, driving mechanism;

[0036] 610, input / output module;

[0037] 612. Input devices;

[0038] 614. Output devices;

[0039] 616. Presentation equipment;

[0040] 618. Graphical user interface;

[0041] 620, network interface;

[0042] 622, communication link;

[0043] 624. Communication bus. DETAILED DESCRIPTION

[0044] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this specification.

[0045] It should be noted that the terms "first", "second", etc. in the description and claims of this specification and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of this specification described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, device, product or equipment that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment.

[0046] This specification provides method operation steps as described in the embodiments or flow charts, but more or fewer operation steps may be included based on routine or non-creative work. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent the only execution order. When the system or device product is executed in practice, it can be executed in the order of the method shown in the embodiments or the drawings or in parallel.

[0047] The acquisition, transmission, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0048] It should be noted that the control method based on the emergency command center in this specification can be used in the field of emergency handling technology, and this specification does not limit the application field of a control system, method and device based on the emergency command center.

[0049] Figure 1 The diagram is a schematic diagram of a management and control system based on an emergency command center according to an embodiment of the present specification. The emergency command center system includes: an operation and maintenance management platform 100 and an emergency command center 200.

[0050] The operation and maintenance management platform 100 interacts with upstream and downstream systems to identify event alarms occurring in each system; determines whether the event alarms meet the emergency command center's activation conditions, and if so, divides the event alarms into first alarm information and second alarm information.

[0051] The emergency command center 200 communicates with the operation and maintenance management platform 100 and is used to receive event alarm information sent by the operation and maintenance management platform 100. When the event alarm reaches the preset conditions for emergency initiation, the event alarm information is obtained from the operation and maintenance management platform, and the event alarm information includes: first alarm information related to the impact of the event on the upstream and downstream systems and second alarm information related to the system to which the event belongs; the first alarm information and the second alarm information are displayed on the first preset interface and the second preset interface respectively, and the first duty node of the first preset interface and the second duty node of the second preset interface are notified respectively; according to the execution processing of the first alarm information by the first duty node and the execution disposal of the second alarm information by the second duty node, it is re-determined whether the event alarm information has returned to normal; if so, the alarm information and the disposal process are recorded; if not, the first alarm information and the second alarm information are disposed by the second duty node.

[0052] In the embodiment of the present specification, the operation and maintenance management platform is also used to match the event alarm with a corresponding preset emergency plan according to the key fields in the event alarm, and send the preset emergency plan as the second alarm information to the emergency command center.

[0053] This instruction manual aims to build an online emergency command center that can control the entire process of emergency incident handling when anomalies occur. Online emergency handling is conducive to the improvement of the operating functions of the bank's multi-center physical architecture in different locations.

[0054] Figure 2 The flowchart of a control method based on an emergency command center in an embodiment of this specification is shown, and the method includes:

[0055] Step 201, when the event alarm reaches the preset conditions for emergency start, event alarm information is obtained from the operation and maintenance management platform, and the event alarm information includes: first alarm information related to the impact of the event on upstream and downstream systems and second alarm information related to the system to which the event belongs.

[0056] In the embodiments of this specification, the alarm information includes the first alarm information and the second alarm information, wherein the first alarm information includes but is not limited to: the system to which the fault belongs, the department to which the system belongs, the source of the alarm, the IP of the device generating the alarm, the alarm time, the alarm level, the alarm details, the alarm routine inspection plan (knowledge base), etc. The second alarm information includes an emergency plan, which includes specific emergency operation steps and verification steps. In this step, it is pre-determined whether the severity of the event alarm meets the emergency start preset conditions. If the event alarm does not meet the emergency start preset conditions, it will not trigger the emergency command center to start.

[0057] That is to say, when the event alarm is more serious and reaches the preset conditions for emergency startup, the emergency command center system is automatically triggered to start. In the embodiments of this specification, the preset conditions for emergency startup include many aspects, including but not limited to: the number of instantaneous alarms of a single system exceeds the preset threshold, the number of instantaneous alarms of multiple systems exceeds the preset threshold, the instantaneous alarm level of multiple systems or a single system exceeds the preset alarm level, or the abnormal transaction indicator reaches the warning value and the duration exceeds the preset time, one or any combination thereof. For example, 10 alarms appear instantly in multiple systems, exceeding the preset threshold of 2. The preset conditions for emergency startup are met. For another example, 5 alarms with an alarm level of more than level 4 appear instantly in a single system, exceeding the preset alarm level. The preset conditions for emergency startup are met.

[0058] In some other embodiments of this specification, the situation that the business department or system management node actively reports will also trigger the emergency command center to start, so the situation that the business department or system management node actively reports is also a kind of emergency start preset condition. This specification can realize automatic initiation of emergency when the alarm reaches the preset emergency start condition.

[0059] Specifically, first, the event alarm information is automatically obtained from the operation and maintenance management platform. The event alarm information specifically includes the first alarm information and the second alarm information. Among them, the first alarm information is related to the impact of the event on the upstream and downstream systems; the second alarm information is related to the system to which the alarm event belongs. For example, the first alarm information includes: the progress of the emergency event, the abnormal phenomenon of the emergency event, and the impact of the emergency event on the upstream and downstream systems.

[0060] The second alarm information specifies which technical department or departments are responsible for the maintenance and management of the alarm event. Figure 1 According to the description in the description, the operation and maintenance management platform matches the event alarm with the corresponding preset emergency plan according to the key fields in the event alarm, and sends the preset emergency plan as the second alarm information to the emergency command center. In other words, the second alarm information in this specification is related to the preset emergency plan.

[0061] Step 202: Display the first alarm information and the second alarm information on the first preset interface and the second preset interface respectively, and notify the first on-duty node of the first preset interface and the second on-duty node of the second preset interface respectively.

[0062] In this specification, both the first preset interface and the second preset interface can be interfaces in the form of web pages. The first preset interface displays the first alarm information of the alarm event to the first duty node, including but not limited to: the current progress of the alarm event, the abnormal phenomenon of the alarm event, the impact of the alarm event on the upstream and downstream systems, etc.; the second preset interface is used to display the second alarm information of the alarm event to the second duty node, including but not limited to: which technical department the alarm event belongs to, which business system the alarm event corresponds to, and the preset emergency plan corresponding to the alarm event.

[0063] Specifically, the first duty node may be a front-line operation and maintenance personnel who pays attention to abnormal conditions of all systems of the bank. The first duty node may conduct preliminary abnormality investigation through a first preset interface, and analyze emergency event phenomena and the business impact of emergency events.

[0064] The second duty node may be a node related to the technical department. The second duty node may be maintained by technical personnel of the technical department to handle emergency issues that the first duty node cannot handle.

[0065] Step 203: re-determine whether the event alarm information returns to normal based on the execution processing of the first alarm information by the first duty node and the execution processing of the second alarm information by the second duty node.

[0066] In this step, after the on-duty nodes process the alarm information respectively, they re-judge whether the event alarm has been eliminated and returned to normal.

[0067] Step 204, if yes, record the alarm information and handling process. In this specification, the emergency process includes the main steps of emergency initiation, analysis of emergency event phenomena and business impact, online sign-in, handling plan display, issuance of emergency token authority, execution of handling plan, end of emergency, and recovery of emergency token authority.

[0068] In order to realize post-event review and analysis, in this step, the information such as the time nodes, event phenomena and business impact analysis, disposal plans, disposal results, emergency token issuance, etc. involved in the emergency event process are stored in the database.

[0069] Step 205: If not, the on-duty node continues to process the alarm information. If the alarm event does not return to normal, the first on-duty node continues to process the first alarm information, or the second on-duty node continues to process the second alarm information.

[0070] Figure 3 The flowchart of a method for performing treatment on a second duty node according to an embodiment of the present specification is shown, which specifically includes the following steps:

[0071] Step 301, determining whether the second alarm information includes a preset emergency plan.

[0072] In this step, by parsing the fields of the second alarm information, it is determined whether the fields of the second alarm information contain fields related to the preset emergency plan, thereby determining whether the second alarm information includes the preset emergency plan. In some embodiments of this specification, if similar or identical alarm events have occurred in the past, the operation and maintenance management platform records the emergency plans corresponding to similar or identical alarm events that have occurred in history; or, the operation and maintenance management platform pre-sets the corresponding emergency plans for the alarm information that may appear. Based on this premise, the operation and maintenance management platform writes the corresponding emergency plan into the second alarm information of the alarm event.

[0073] Step 302, if included, determines whether the preset emergency plan requires emergency processing.

[0074] In this step, after determining that the second alarm information contains a preset emergency plan, it is determined whether the preset emergency plan needs to be processed, wherein the emergency processing includes: whether it is necessary to use an emergency token to log in to the bastion host for operation. Specifically, the emergency token is a dynamic password verification tool, and the on-duty node needs to perform high-authority operations on the system using the emergency token.

[0075] Step 303: If yes, configure the emergency processing authority required for emergency processing to the second duty node, and obtain the emergency operation result of the second duty node.

[0076] This step is based on the judgment of step 302. If the preset emergency plan requires emergency processing, high-authority operations need to be performed on the system. High-authority operations include but are not limited to: restarting the Linux system, restarting the container, switching the database, restarting the load, adding, deleting, and modifying operations, etc. Therefore, it is necessary to develop corresponding processing permissions for the second duty node.

[0077] For example: the preset emergency plan in step 302 is to use the emergency token to log in to the bastion host for operation. In this step, it is necessary to issue the emergency token usage permission to the node in the second duty node that is in normal duty status. The second duty node responsible for the faulty system uses an authorized high-authorization account and combines the emergency token to log in to the faulty system through the bastion host to perform disposal operations. Only after authorization can the second duty node log in.

[0078] Figure 4 The flowchart of a method for notifying a node on duty according to an embodiment of the present specification is shown, which specifically includes the following steps:

[0079] Step 401: Send an alarm notification to the first on-duty node and the second on-duty node respectively according to the on-duty node information of the operation and maintenance management platform.

[0080] In this step, the operation and maintenance management platform records the on-duty node information of all nodes respectively, wherein the on-duty node information includes: whether the node is currently on duty. According to the on-duty node information, the node on duty is selected, and the first on-duty node and the second on-duty node are determined according to the department to which the node belongs. Among them, the first on-duty node belongs to the front-line operation and maintenance department, and the second on-duty node belongs to the technical department or the R&D department.

[0081] In this step, sending an alarm notification to the first duty node and the second duty node includes: making a phone call to the first duty node and the second duty node, sending a broadcast notification to the first duty node and the second duty node, and performing instant messaging with the first duty node and the second duty node. This manual automatically notifies the duty nodes of the security group on the day involved in the emergency command center system, and ensures that the nodes are in place through the sign-in mechanism.

[0082] Step 402, according to the response results of the first duty node and the second duty node to the notification, determine the first duty node and the second duty node that received the notification. In this step, after sending the alarm notification to the first duty node and the second duty node in step 401, wait for the first duty node and the second duty node to feedback the notification, which is the response result. Select the nodes with a response result of yes, and determine these nodes as the first duty node and the second duty node that received the notification.

[0083] In this step, the first duty node and the second duty node that receive the notification can perform emergency processing on the event alarm.

[0084] Step 403, configure emergency operation authority for the first duty node and the second duty node that received the notification. In this step, the processing authority is configured for the nodes that received the notification, so that these nodes can process the alarm event and feed back the processed results to the emergency command center system.

[0085] For example, the second duty node signs in on a specific device and determines that the second duty node belongs to a certain technical department. Further association is made with the CMDB to obtain system-related information and display the system's emergency plan. The system-related information includes, but is not limited to: the person in charge of the system, the upstream and downstream systems of the system, the system IP address, etc.

[0086] In the embodiment of this specification, when the event alarm information returns to normal, an emergency end notification is issued, and the emergency processing authority of the second duty node is reclaimed. When the event alarm has been resolved, the emergency command center is automatically closed, and the emergency processing authority of the second duty node is reclaimed to prevent the second duty node from continuing to process the event, effectively ensuring the data security and information security of the emergency command center.

[0087] like Figure 5 The figure shows a schematic diagram of a control device based on an emergency command center in an embodiment of the present specification. The figure describes the basic structure of a variable strength water injection core test pressure control device, wherein the functional units and modules can be implemented by software, or by a general chip or a specific chip. The device specifically includes:

[0088] The alarm information acquisition unit 501 is used to acquire event alarm information from the operation and maintenance management platform when the event alarm reaches the preset condition for emergency start, wherein the event alarm information includes: first alarm information related to the impact of the event on the upstream and downstream systems and second alarm information related to the system to which the event belongs;

[0089] A notification unit 502, configured to display the first alarm information and the second alarm information on a first preset interface and a second preset interface respectively, and notify a first on-duty node on the first preset interface and a second on-duty node on the second preset interface respectively;

[0090] The judging unit 503 is used to re-judge whether the event alarm information returns to normal according to the execution processing of the first alarm information by the first duty node and the execution processing of the second alarm information by the second duty node;

[0091] Recording unit 504, used to record the alarm information and handling process if yes;

[0092] The continuing processing unit 505 is used to, if not, let the on-duty node continue to process the alarm information.

[0093] like Figure 6The diagram shows a schematic diagram of a computer device provided by an embodiment of the present specification. The control method based on the emergency command center described in the present application can be applied to the computer device. The computer device 602 may include one or more processors 604, such as one or more central processing units (CPUs), each of which may implement one or more hardware threads. The computer device 602 may also include any memory 606, which is used to store any kind of information such as code, settings, data, etc. Non-limiting, for example, the memory 606 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory device, hard disk, optical disk, etc. More generally, any memory may use any technology to store information. Further, any memory may provide volatile or non-volatile retention of information. Further, any memory may represent a fixed or removable component of the computer device 602. In one case, when the processor 604 executes an associated instruction stored in any memory or a combination of memories, the computer device 602 may perform any operation of the associated instruction. The computer device 602 also includes one or more drive mechanisms 608 for interacting with any memory, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.

[0094] The computer device 602 may also include an input / output module 610 (I / O) for receiving various inputs (via input devices 612) and for providing various outputs (via output devices 614). A specific output mechanism may include a presentation device 616 and an associated graphical user interface (GUI) 618. In other embodiments, the input / output module 610 (I / O), input device 612, and output device 614 may not be included, and the computer device 602 may be used as a computer device in a network. The computer device 602 may also include one or more network interfaces 620 for exchanging data with other devices via one or more communication links 622. One or more communication buses 624 couple the components described above together.

[0095] The communication link 622 may be implemented in any manner, for example, through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication link 622 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc. governed by any protocol or combination of protocols.

[0096] Corresponds to Figures 1 to 3 The method in the embodiment of the present specification also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are executed.

[0097] The embodiment of the present specification also provides a computer-readable instruction, wherein when the processor executes the instruction, the program therein causes the processor to execute the following Figures 1 to 3 The method shown.

[0098] The embodiment of the present specification also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, Figures 1 to 3 The method shown.

[0099] It should be understood that in the various embodiments of this specification, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this specification.

[0100] It should also be understood that in the embodiments of this specification, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this specification generally indicates that the associated objects before and after are in an "or" relationship.

[0101] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in this specification can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this specification.

[0102] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0103] In the several embodiments provided in this specification, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or it can be an electrical, mechanical or other form of connection.

[0104] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this specification.

[0105] In addition, each functional unit in each embodiment of this specification may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0106] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this specification is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this specification. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0107] Specific embodiments are used in this specification to illustrate the principles and implementation methods of this specification. The description of the above embodiments is only used to help understand the methods and core ideas of this specification. At the same time, for those skilled in the art, according to the ideas of this specification, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on this specification.

Claims

1. A management and control system based on an emergency command center, characterized in that: The system comprises: An operation and maintenance management platform, which interacts with upstream and downstream systems to identify event alarms occurring in each system; determines whether the event alarms meet the conditions for the emergency command center to start, and if so, divides the event alarms into first alarm information and second alarm information; The emergency command center communicates with the operation and maintenance management platform, and is used to obtain event alarm information from the operation and maintenance management platform when the event alarm reaches the preset conditions for emergency startup, and the event alarm information includes: first alarm information related to the impact of the event on upstream and downstream systems and second alarm information related to the system to which the event belongs; the first alarm information and the second alarm information are displayed on the first preset interface and the second preset interface respectively, and the first on-duty node of the first preset interface and the second on-duty node of the second preset interface are notified respectively; according to the execution processing of the first alarm information by the first on-duty node and the execution disposal of the second alarm information by the second on-duty node, it is re-determined whether the event alarm information has returned to normal; if so, the alarm information and the disposal process are recorded; if not, the first alarm information and the second alarm information are executed and disposed by the second on-duty node.

2. The system according to claim 1, characterized in that The operation and maintenance management platform is also used to match the event alarm with a corresponding preset emergency plan according to the key fields in the event alarm, and send the preset emergency plan as the second alarm information to the emergency command center.

3. A control method based on an emergency command center, characterized in that: The method is applied to the management and control system according to any one of claims 1 to 2, comprising: When the event alarm reaches the preset conditions for emergency initiation, the event alarm information is obtained from the operation and maintenance management platform, and the event alarm information includes: first alarm information related to the impact of the event on the upstream and downstream systems and second alarm information related to the system to which the event belongs; Displaying the first alarm information and the second alarm information on a first preset interface and a second preset interface respectively, and notifying a first on-duty node on the first preset interface and a second on-duty node on the second preset interface respectively; Re-determining whether the event alarm information returns to normal according to the execution processing of the first alarm information by the first on-duty node and the execution processing of the second alarm information by the second on-duty node; If so, record the alarm information and handling process; If not, the on-duty node will continue to process the alarm information.

4. The method according to claim 3, characterized in that: The execution disposition of the second duty node is determined by: Determining whether the second alarm information includes a preset emergency plan; If included, determine whether the preset emergency plan requires emergency treatment; If so, the emergency handling authority required for emergency handling is configured for the second duty node, and the emergency operation result of the second duty node is obtained.

5. The method according to claim 4, characterized in that Respectively notifying a first on-duty node of a first preset interface and a second on-duty node of a second preset interface includes: According to the duty node information of the operation and maintenance management platform, an alarm notification is sent to the first duty node and the second duty node respectively; Determine the first on-duty node and the second on-duty node that receive the notification according to the response results of the first on-duty node and the second on-duty node to the notification; Emergency operation permissions are configured for the first on-duty node and the second on-duty node that receive the notification.

6. The method according to claim 5, characterized in that The method further comprises: When the event alarm information returns to normal, an emergency end notification is issued and the emergency processing authority of the second duty node is revoked.

7. A control device based on an emergency command center, characterized in that: The device comprises: An alarm information acquisition unit is used to acquire event alarm information from the operation and maintenance management platform when the event alarm reaches the preset condition for emergency start, wherein the event alarm information includes: first alarm information related to the impact of the event on the upstream and downstream systems and second alarm information related to the system to which the event belongs; a notification unit, configured to display the first alarm information and the second alarm information on a first preset interface and a second preset interface respectively, and to notify a first on-duty node on the first preset interface and a second on-duty node on the second preset interface respectively; a judgment unit, configured to re-judge whether the event alarm information has returned to normal according to the execution processing of the first alarm information by the first duty node and the execution processing of the second alarm information by the second duty node; A recording unit, used to record the alarm information and handling process if yes; The continued processing unit is used to, if not, let the on-duty node continue to process the alarm information.

8. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 3 to 6 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 3 to 6 is implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the instructions of the method according to any one of claims 3 to 6 are executed.

Images