Enterprise equipment management method and equipment based on CMDB, medium and program product

Abstract

The invention discloses a CMDB-based enterprise equipment management method, equipment, a medium and a program product. The method comprises the following steps: firstly, acquiring equipment information of enterprise equipment; based on the enterprise organizational structure, organizational structure information corresponding to the enterprise equipment is obtained; generating a CMDB model configuration item and storing the CMDB model configuration item in a CMDB database by utilizing the equipment information and the organization structure information corresponding to the enterprise equipment; generating a corresponding asset label for the enterprise equipment, and obtaining application information corresponding to the enterprise equipment according to the asset label; and then, according to the application information, establishing an association relationship between the enterprise equipment and the corresponding application, and finally, updating the CMDB model configuration item by utilizing the asset label and the association relationship. According to the embodiment of the invention, the enterprise equipment can be automatically discovered, and the CMDB model configuration item is generated and updated in real time by utilizing the equipment information and the organization structure information of the equipment, so that the information acquisition and management efficiency of the enterprise equipment is remarkably improved, and the real-time performance and accuracy of the IT asset CMDB data are improved.

Description

Technical Field

[0001] The present invention relates to the field of IT asset operation and maintenance and security management, and in particular to an enterprise equipment management method, equipment, medium and program product based on CMDB. Background Art

[0002] With the expansion of data center scale and the widespread application of virtualization technology, the management of physical equipment and virtualized assets in IT environments has become increasingly complex. Traditional asset management methods usually rely on manual entry or scattered tools, which are not only difficult to cope with dynamic changes, but also prone to inconsistent or delayed information. In addition, the complexity of the enterprise's organizational structure makes it difficult for the equipment responsible person to accurately implement maintenance management.

[0003] In terms of security management, it is difficult to respond to security incidents or vulnerability threats in a timely manner due to unclear correlation between devices and applications and inflexible deployment of security probes. Existing technologies urgently need a method to combine physical devices, virtualized assets, and organizational structures to achieve dynamic correlation between assets and applications and intelligent management of security protection.

[0004] Therefore, it is urgent to invent an enterprise equipment management method based on CMDB to solve the problems of low efficiency and high error rate in equipment data collection and identification, low efficiency of IT asset data operation and maintenance, and difficulty in timely response to security incidents in existing enterprise equipment management methods. Summary of the invention

[0005] In view of this, embodiments of the present invention provide a CMDB-based enterprise equipment management method, equipment, medium, and program product to at least partially solve the problems existing in the prior art.

[0006] Other features and advantages of the present invention will become apparent from the following detailed description, or may be learned in part by practice of the present invention.

[0007] In order to achieve the above purpose, the embodiment of the present invention provides the following technical solutions:

[0008] According to a first aspect of an embodiment of the present invention, a CMDB-based enterprise device management method is provided, the method comprising:

[0009] Collect equipment information of enterprise equipment;

[0010] Based on the enterprise organizational structure, obtain the organizational structure information corresponding to the enterprise equipment;

[0011] Using the device information and organizational structure information corresponding to the enterprise device, a CMDB model configuration item is generated and stored in the CMDB database;

[0012] Generate a corresponding asset tag for the enterprise device, and obtain application information corresponding to the enterprise device according to the asset tag;

[0013] According to the application information, an association relationship is established between the enterprise device and the corresponding application, and the CMDB model configuration item is updated using the asset tag and the association relationship.

[0014] Furthermore, the device information of the enterprise equipment is collected, including:

[0015] Automatically discover IT physical devices using the Redfish protocol, and collect hardware information and operating status information of the IT physical devices out-of-band, where the hardware information includes device serial number, model, and hardware configuration;

[0016] The virtualization platform is connected through the REST interface to collect virtualization asset data of virtual devices, which includes the number of virtual machines, storage volume capacity and virtual network configuration information.

[0017] Furthermore, the organizational structure information includes the name, department and contact information of the equipment management personnel and equipment maintenance personnel.

[0018] Furthermore, the asset tag includes the department to which the device belongs, the function of the device, and application-related data.

[0019] Furthermore, the method further comprises:

[0020] Classify each application based on its importance and sensitivity;

[0021] For applications at each level, probes are deployed according to preset deployment rules, and the probes include security probes and monitoring probes;

[0022] Using the probe to collect application security information, the security information includes security events, host vulnerabilities, application vulnerabilities and alarm information;

[0023] Associating the security information with the corresponding CMDB model configuration item;

[0024] According to the level of the security incident, the corresponding alarm information is automatically pushed to the corresponding responsible person;

[0025] Trigger the automated repair process and close the alarm record after the security repair is completed.

[0026] Further, the security probes include network traffic monitoring probes, host behavior analysis probes, and file integrity probes;

[0027] The monitoring probe is used to collect application running status, performance indicators and resource utilization.

[0028] Furthermore, the security events include unauthorized access, malware detection, and abnormal traffic alerts;

[0029] The vulnerabilities include missing system patches and configuration weaknesses.

[0030] According to a second aspect of an embodiment of the present invention, there is provided an enterprise equipment management device based on CMDB, the device comprising: a processor and a memory;

[0031] The memory is used to store one or more program instructions;

[0032] The processor is used to run one or more program instructions to execute the steps of a CMDB-based enterprise equipment management method as described in any one of the above items.

[0033] According to a third aspect of an embodiment of the present invention, a computer-readable storage medium is provided, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of a CMDB-based enterprise equipment management method as described in any one of the above items are implemented.

[0034] According to a fourth aspect of an embodiment of the present invention, a computer program product is provided, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, and when the program instructions are executed by a computer, the computer implements the steps of a CMDB-based enterprise equipment management method as described in any one of the above items.

[0035] The embodiments of the present invention have the following advantages:

[0036] The enterprise equipment management method, equipment, medium and program product based on CMDB provided by the embodiments of the present invention realize the unified management and dynamic synchronization of physical equipment and virtualized assets, eliminate data silos; provide organizational structure management support, improve the accuracy of equipment responsibility allocation; can dynamically generate CMDB configuration items, improve the real-time and accuracy of CMDB; provide a data basis for security management by automatically associating equipment and applications; provide flexible deployment capabilities of hierarchical security probes and monitoring probes, and enhance the automation efficiency of security incident processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0038] Figure 1 A flow chart of a CMDB-based enterprise equipment management method provided by an embodiment of the present invention;

[0039] Figure 2 A data flow diagram of a CMDB-based enterprise equipment management method provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0040] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0041] In addition, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or elements is not necessarily limited to those steps or elements explicitly listed, but may include other steps or elements not explicitly listed or inherent to such process, method, product, or apparatus.

[0042] Figure 1 The figure shows a flow chart of a CMDB-based enterprise equipment management method according to an embodiment of the present invention.

[0043] like Figure 1 As shown, the enterprise device management method based on CMDB according to an embodiment of the present invention may include step S100, step S200, step S300, step S400 and step S500.

[0044] In step S100, device information of enterprise devices is collected.

[0045] Specifically, the above steps include:

[0046] Use the Redfish protocol to automatically discover IT physical devices and collect hardware information and operating status information of IT physical devices out-of-band. The hardware information includes device serial number, model, and hardware configuration.

[0047] Connect to the virtualization platform through the REST interface to collect virtualized asset data of virtual devices, including the number of virtual machines, storage volume capacity, and virtual network configuration information.

[0048] Next, in step S200, based on the enterprise organizational structure, the organizational structure information corresponding to the enterprise device is obtained.

[0049] Specifically, the organizational structure information is imported from the enterprise management platform, and the organizational structure information includes the name, department and contact information of the equipment management personnel and equipment maintenance personnel.

[0050] In step S300, the CMDB model configuration items are generated using the device information and organizational structure information corresponding to the enterprise devices and stored in a CMDB (Configuration Management Database) database.

[0051] Specifically, the above steps include:

[0052] Integrate the physical device information, virtualized asset data and organizational structure information corresponding to enterprise equipment, dynamically generate CMDB model configuration items and store them in the CMDB database.

[0053] Next, in step S400, a corresponding asset tag is generated for the enterprise device, and application information corresponding to the enterprise device is obtained according to the asset tag.

[0054] Specifically, the above steps include:

[0055] Assign corresponding asset tags to each enterprise device, which include the department to which the device belongs, the device function, and application-related data.

[0056] By analyzing tag rules, the application information corresponding to enterprise equipment is obtained according to asset tags.

[0057] Finally, in step S500, an association relationship is established between the enterprise device and the corresponding application according to the above application information, and the CMDB model configuration items are dynamically updated using the asset tags and association relationships corresponding to the enterprise device.

[0058] In addition, the embodiment of the present invention also includes:

[0059] Build dynamically adjustable application classification rules based on application importance, sensitivity, and business impact.

[0060] According to the above application classification rules, the applications are classified.

[0061] For applications of all levels, probes are deployed for applications according to preset deployment rules. The above probes include security probes and monitoring probes to achieve comprehensive status monitoring and security protection.

[0062] The probe is used to collect application security information, wherein the security information includes security events, host vulnerabilities, application vulnerabilities and alarm information.

[0063] Associate security information with corresponding CMDB model configuration items.

[0064] According to the level of the security incident, the security information will be automatically pushed to the corresponding responsible person.

[0065] Trigger the automated repair process and close the alarm record after the security repair is completed.

[0066] Figure 2 The figure shows a data flow diagram of a CMDB-based enterprise equipment management method provided by an embodiment of the present invention.

[0067] In addition, an embodiment of the present invention also provides a device, which includes: a processor and a memory; the memory is used to store one or more program instructions; the processor is used to run one or more program instructions to execute the steps of a CMDB-based enterprise equipment management method as described above.

[0068] In addition, an embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the enterprise device management method based on CMDB as described above are implemented.

[0069] In addition, an embodiment of the present invention further provides a computer program product, which includes computer program instructions. When the computer program instructions are executed by a processor, the steps of the enterprise equipment management method based on CMDB as described above are implemented.

[0070] The enterprise equipment management method, equipment, medium and program product based on CMDB provided by the embodiments of the present invention realize the unified management and dynamic synchronization of physical equipment and virtualized assets, eliminate data silos; provide organizational structure management support, improve the accuracy of equipment responsibility allocation; can dynamically generate CMDB configuration items, improve the real-time and accuracy of CMDB; provide a data basis for security management by automatically associating equipment and applications; provide flexible deployment capabilities of hierarchical security probes and monitoring probes, and enhance the automation efficiency of security incident processing.

[0071] In the embodiment of the present invention, the processor may be an integrated circuit chip with signal processing capability. The processor may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, or discrete hardware components. The methods, steps, and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present invention may be directly embodied as being executed by a hardware decoding processor, or may be executed by a combination of hardware and software modules in a decoding processor. The software module may be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The processor reads the information in the storage medium and completes the steps of the above method in combination with its hardware. The storage medium may be a memory, for example, a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DRRAM).The storage medium described in the embodiment of the present invention is intended to include but is not limited to these and any other suitable types of memory. Those skilled in the art should be aware that in one or more of the above examples, the functions described in the present invention can be implemented by a combination of hardware and software. When the software is applied, the corresponding function can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein the communication medium includes any medium that is convenient for transmitting a computer program from one place to another. The storage medium can be any available medium that a general or special-purpose computer can access. Although the present invention has been described in detail above with general descriptions and specific embodiments, it is obvious to those skilled in the art that some modifications or improvements can be made to it on the basis of the present invention. Therefore, these modifications or improvements made on the basis of not departing from the spirit of the present invention all belong to the scope of protection claimed in the present invention.

Claims

1. A CMDB-based enterprise equipment management method, characterized in that: The method comprises: Collect equipment information of enterprise equipment; Based on the enterprise organizational structure, obtain the organizational structure information corresponding to the enterprise equipment; Using the device information and organizational structure information corresponding to the enterprise device, a CMDB model configuration item is generated and stored in the CMDB database; Generate a corresponding asset tag for the enterprise device, and obtain application information corresponding to the enterprise device according to the asset tag; According to the application information, an association relationship is established between the enterprise device and the corresponding application, and the CMDB model configuration item is updated using the asset tag and the association relationship.

2. The enterprise equipment management method based on CMDB according to claim 1, characterized in that: Collect device information of enterprise devices, including: Automatically discover IT physical devices using the Redfish protocol, and collect hardware information and operating status information of the IT physical devices out-of-band, where the hardware information includes device serial number, model, and hardware configuration; The virtualization platform is connected through the REST interface to collect virtualization asset data of virtual devices, which includes the number of virtual machines, storage volume capacity and virtual network configuration information.

3. The enterprise equipment management method based on CMDB according to claim 1, characterized in that: The organizational structure information includes the name, department and contact information of the equipment management personnel and equipment maintenance personnel.

4. The enterprise equipment management method based on CMDB according to claim 1, characterized in that: The asset tag includes the department to which the device belongs, the function of the device, and application-related data.

5. The enterprise equipment management method based on CMDB according to claim 1, characterized in that: The method further comprises: Classify applications based on their importance and sensitivity; For applications of each level, probes are deployed according to preset deployment rules, and the probes include security probes and monitoring probes; Using the probe to collect application security information, the security information includes security events, host vulnerabilities, application vulnerabilities and alarm information; Associating the security information with the corresponding CMDB model configuration item; According to the level of the security incident, the corresponding alarm information is automatically pushed to the corresponding responsible person; Trigger the automated repair process and close the alarm record after the security repair is completed.

6. The enterprise equipment management method based on CMDB as claimed in claim 5, characterized in that: The security probes include network traffic monitoring probes, host behavior analysis probes, and file integrity probes; The monitoring probe is used to collect application running status, performance indicators and resource utilization.

7. The enterprise equipment management method based on CMDB as claimed in claim 5, characterized in that: The security events include unauthorized access, malware detection, and abnormal traffic alerts; The vulnerabilities include missing system patches and configuration weaknesses.

8. An enterprise equipment management device based on CMDB, characterized in that: The device comprises: a processor and a memory; The memory is used to store one or more program instructions; The processor is used to run one or more program instructions to execute the steps of the CMDB-based enterprise equipment management method as described in any one of claims 1 to 7.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the enterprise equipment management method based on CMDB as described in any one of claims 1 to 7 are implemented.

10. A computer program product, characterized in that The computer program product includes computer program instructions, which, when executed by a processor, implement the steps of a CMDB-based enterprise device management method as described in any one of claims 1 to 7.

Images