Product instance scheduling management method, system, device and medium

Abstract

The present invention relates to a scheduling management method, system, device and medium for a product instance. The method comprises: obtaining a configuration request, and identifying a product instance to be configured and updated according to the configuration request; searching and retrieving a corresponding authentication method from an authentication library according to identification information in the configuration request, and searching and retrieving a corresponding authentication credential from a credential library; formatting the configuration parameters in the configuration request according to the interface specification of the product instance to generate initial configuration information; determining the embedding position of the initial configuration information according to the authentication method, and embedding the authentication credential into the initial configuration information to generate the final configuration information; sending the configuration information to the product instance, and receiving the configuration result fed back by the product instance. The present invention ensures that the product instance can correctly parse and execute related configuration operations, and realizes unified scheduling management of different devices.

Description

Technical Field

[0001] The present invention relates to the technical field of authentication management, and in particular to a scheduling management method, system, device and medium for a product instance. Background Art

[0002] At present, enterprises usually purchase security products from multiple companies to form a comprehensive solution to solve the security products of enterprise applications and businesses. Enterprises need to achieve unified scheduling and management of multi-vendor and multi-type security products through access authentication. However, due to the different authentication methods, parameter requirements and interface protocols of security products from different manufacturers, product access authentication often lacks unified standards for the authentication interfaces of various products in actual operations. Enterprises need to customize authentication logic for each product, which increases the complexity and development cost of authentication adaptation. In addition, due to the separation of the generation and management mechanism of authentication credentials, it is difficult to link with the scheduling management process, resulting in manual intervention of operations such as credential updates and expiration checks, which reduces system automation and response efficiency. Therefore, it is necessary to provide a scheduling management method, system, device and medium for product instances. Summary of the invention

[0003] In view of the above-mentioned shortcomings of the prior art, an object of the present invention is to provide a scheduling management method, system, device and medium for product instances, which improve the problems of high complexity and slow response rate of product authentication in the prior art.

[0004] To achieve the above-mentioned purpose and other related purposes, the present invention provides a scheduling management method for product instances, including: obtaining a configuration request, and identifying a product instance to be configured and updated according to the configuration request; searching and retrieving a corresponding authentication method from an authentication library according to identification information in the configuration request, and searching and retrieving a corresponding authentication credential from a credential library; formatting the configuration parameters in the configuration request according to an interface specification of the product instance to generate initial configuration information; determining an embedding position of the initial configuration information according to the authentication method, and embedding the authentication credential into the initial configuration information to generate final configuration information; sending the configuration information to the product instance, and receiving the configuration result fed back by the product instance.

[0005] In one embodiment of the present invention, searching and retrieving the corresponding authentication method from the authentication library according to the identification information in the configuration request, and searching and retrieving the corresponding authentication credential from the credential library, include: parsing the configuration request to obtain the identification information of the product instance; based on a preset hierarchical matching mechanism, querying and retrieving the authentication method corresponding to the identification information from the authentication library; querying and retrieving the authentication credential corresponding to the identification information from the credential library.

[0006] In one embodiment of the present invention, the authentication method corresponding to the identification information is queried and loaded from the authentication library based on a preset hierarchical matching mechanism, including: based on the product model in the identification information, screening out multiple first authentication methods that match the product model from the authentication library; based on the product version in the identification information, screening out multiple second authentication methods that match the product version from multiple first authentication methods; based on the IP address in the identification information, screening out an authentication method that matches the IP address from multiple second authentication methods as the final authentication method.

[0007] In one embodiment of the present invention, querying and retrieving the authentication credential corresponding to the identification information from the credential library includes: extracting the credential identifier corresponding to each authentication credential from the credential library; matching the identification information with each credential identifier, and retrieving the authentication credential matching the identification information.

[0008] In one embodiment of the present invention, the method also includes: reading the authentication time of the authentication credential based on a preset monitoring interval; determining the validity period of the authentication credential based on the authentication time, and judging whether the validity period exceeds the preset authentication period: if it exceeds the authentication period, re-authenticating and updating the authentication credential; if it does not exceed the authentication period, keeping the authentication credential unchanged, and continuing to monitor whether the validity period of the authentication credential has timed out.

[0009] In an embodiment of the present invention, after the authentication credential is updated, the method further includes: recording the update time of the authentication credential as the new authentication time.

[0010] In an embodiment of the present invention, the method further includes: after sending the configuration information to the product instance and receiving the configuration result fed back by the product instance, it also includes: saving the configuration information and the configuration result into a log record.

[0011] In one embodiment of the present invention, a scheduling and management system for a product instance is also provided, the system comprising: a request acquisition module, used to acquire a configuration request, and identify a product instance to be configured and updated according to the configuration request; a credential acquisition module, used to search and retrieve a corresponding authentication method from an authentication library according to identification information in the configuration request, and to search and retrieve a corresponding authentication credential from a credential library; a parameter adjustment module, used to format the configuration parameters in the configuration request according to an interface specification of the product instance, and generate initial configuration information; a configuration information generation module, used to determine an embedding position of the authentication credential in the initial configuration information according to the authentication method, and embed the authentication credential into the initial configuration information to generate final configuration information; a configuration update module, used to send the configuration information to the product instance, and accept the configuration result fed back by the product instance.

[0012] In one embodiment of the present invention, an electronic device is also provided, comprising: one or more processors; a storage device for storing one or more programs, and when the one or more programs are executed by the one or more processors, the electronic device implements the scheduling management method of the product instance described in any one of the above items.

[0013] In one embodiment of the present invention, a computer-readable storage medium is further provided, on which a computer program is stored. When the computer program is executed by a processor of a computer, the computer executes any one of the scheduling management methods for product instances described above.

[0014] As described above, a scheduling management method, system, device and medium for a product instance of the present invention has the following beneficial effects: after receiving a configuration request sent by a user, the target product instance that needs to be configured and updated can be quickly and accurately identified based on the identification information therein, and the authentication method and authentication credential that are compatible with the product instance can be searched through the authentication library and the credential library. Since this query is based on the identification information, it can ensure that the authentication credential and authentication method corresponding to the product are obtained accurately and efficiently. Furthermore, the relevant configuration parameters in the configuration request are converted through the interface specification, so that the converted configuration parameters meet the requirements of the product instance, so as to ensure that the entire configuration process can proceed smoothly. Through this automated method, the present invention can complete the entire process from request parsing, parameter conversion to credential embedding and docking with the product instance without human intervention, which can ensure that the product instance can correctly parse and execute related configuration operations, and realize unified scheduling management of different devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 A schematic flow chart of a method for scheduling and managing a product instance provided by an embodiment of the present invention;

[0016] Figure 2 An overall system architecture diagram of a product instance scheduling management method provided by an embodiment of the present invention;

[0017] Figure 3 Shown is a structural block diagram of a scheduling management system for a product example provided by an embodiment of the present invention;

[0018] Figure 4 Shown is a structural schematic diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0020] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0021] In the following description, numerous details are discussed to provide a more thorough explanation of the embodiments of the present invention. However, it is obvious to those skilled in the art that the embodiments of the present invention can be implemented without these specific details. In other embodiments, well-known structures and devices are shown in the form of block diagrams rather than in detail to avoid making the embodiments of the present invention difficult to understand.

[0022] The present invention provides a scheduling management method for a product instance. After receiving a configuration request sent by a user, the target product instance to be configured and updated can be quickly and accurately identified according to the identification information therein, and the authentication method and authentication credential adapted to the product instance can be searched through the authentication library and the credential library. Since this query is performed based on the identification information, it can ensure that the authentication credential and authentication method corresponding to the product are accurately and efficiently obtained. Further, the relevant configuration parameters in the configuration request are converted through the interface specification, so that the converted configuration parameters meet the requirements of the product instance, so as to ensure that the entire configuration process can be carried out smoothly. In this automated manner, the present invention can complete the whole process from request parsing, parameter conversion to credential embedding and docking with the product instance without manual intervention, so as to ensure that the product instance can correctly parse and execute the relevant configuration operations. By associating the identification information with the authentication credential, the authentication method, and the specific product instance, the unified scheduling management of heterogeneous security capabilities (heterogeneous manufacturers, heterogeneous products) is realized, the intensive level of security operations is improved, the security response efficiency is improved, and the automated handling of security incidents is achieved.

[0023] See also Figure 1 ,The scheduling management method of the product instance includes the following steps:

[0024] S1. Obtain a configuration request, and identify a product instance to be updated according to the configuration request.

[0025] When a user needs to update the configuration of a product instance, a configuration request is sent to the scheduling management platform through a standard interface, wherein the configuration request carries the identification information of the product instance and related configuration parameters. The identification information is used to characterize the identity of the product instance so as to accurately identify the corresponding target product instance, and the identification information includes but is not limited to the product model, product version and IP address. The configuration parameters are used to characterize the specific content related to the current configuration, which includes but is not limited to the configuration items that need to be modified, the parameters that need to be modified or the related operation instructions, etc. After receiving the configuration request, the scheduling management platform parses the configuration request and reads the identification information of the product instance from it, and can determine the specific product instance to be configured and updated based on the identification information. Exemplarily, if a user needs to block a specific IP address of a certain firewall, the configuration request carries the identification information of the firewall (such as the device model, IP address, etc.) and the related configuration parameters of the IP to be blocked. After parsing the configuration request, the scheduling management platform identifies the firewall to be blocked according to the identification information, extracts the configuration parameters, converts the configuration parameters into a format suitable for the firewall to receive, and sends them to the firewall, so that the firewall blocks the corresponding IP address.

[0026] S2. According to the identification information in the configuration request, search and retrieve the corresponding authentication method from the authentication library, and search and retrieve the corresponding authentication credential from the credential library.

[0027] After extracting the identification information from the configuration request, the scheduling management platform matches the identification information with the various authentication methods in the authentication library, thereby querying the authentication method that is compatible with the product instance to be updated. Among them, the authentication method includes but is not limited to HMAC, OAuth or other protocols. In addition, the platform also searches the credential library for the authentication credential that matches the target product instance through the identification information. Among them, the authentication credential, as a security credential, can prove the identity of the product instance to ensure the legitimacy of subsequent operations.

[0028] In one embodiment of the present invention, searching and retrieving the corresponding authentication method from the authentication library according to the identification information in the configuration request, and searching and retrieving the corresponding authentication credential from the credential library, include:

[0029] Parsing the configuration request to obtain identification information of the product instance;

[0030] Based on a preset hierarchical matching mechanism, query and retrieve the authentication method corresponding to the identification information from the authentication library;

[0031] The authentication credential corresponding to the identification information is searched and retrieved from the credential library.

[0032] The scheduling management platform parses the received configuration request and extracts the identification information of the product instance, wherein the identification information includes the model of the product instance, the version number of the product instance and the IP address of the product instance. Through the hierarchical matching mechanism, the authentication method corresponding to the identification information is gradually queried from the authentication library. Since the authentication credentials of all product instances are pre-stored in the credential library, the authentication credentials matching them can be retrieved by matching the identification information with each authentication credential in the credential library. Further, in order to ensure that the authentication time changes with the authentication credential, after the authentication credential is updated, it also includes: recording the update time of the authentication credential as the new authentication time. In addition, in order to ensure the security of data transmission, the authentication credential can be encrypted and stored in the credential library. Exemplarily, the entire string of the authentication credential can be encrypted using MD5 and saved in the credential library. Among them, MD5 (Message-Digest Algorithm 5) is a hash function used to convert an input of any length (usually text or file) into a fixed-length 128-bit hash value (32-character hexadecimal string).

[0033] It should be noted that the authentication credentials can be matched through one identification information (such as the model of the product instance), or through hierarchical matching through multiple identification information (such as the model of the product instance, the version number of the product instance and the IP address) at the expense of a certain matching rate to improve the matching accuracy. The specific matching method is not limited here.

[0034] In an embodiment of the present invention, the querying and loading of the authentication method corresponding to the identification information from the authentication library based on a preset hierarchical matching mechanism includes:

[0035] According to the product model in the identification information, a plurality of first authentication methods matching the product model are screened out from the authentication library;

[0036] According to the product version in the identification information, screening out multiple second authentication methods matching the product version from multiple first authentication methods;

[0037] According to the IP address in the identification information, an authentication method matching the IP address is screened out from multiple second authentication methods as a final authentication method.

[0038] After parsing the identification information of the product instance from the configuration request, since the identification information includes the product model, product version number and IP address, the product model can be matched with the product model table corresponding to each authentication method in the authentication library, and all authentication methods suitable for the product model can be found from the authentication library, and these methods are used as the first authentication method. The product model table records the product model adapted by the authentication method. According to the product version, each authentication method in the first authentication method is matched, and the authentication method suitable for the version number is screened out, and these authentication methods are used as the second authentication method, thereby further narrowing the query range according to the version number to ensure that the selected version is consistent with the product instance. Further, the IP address is matched with each second authentication method, and the authentication method matching the IP address is screened out, and the authentication execution program that meets the requirements of the specific location is selected, and it is used as the only authentication method of the identification information. Since each authentication method in the authentication library is uniquely identified according to the product model, version and geographical location information (such as IP address). Therefore, by combining these three types of information, accurate queries can be performed to avoid duplication or conflict of the authentication methods obtained by the query.

[0039] It is understandable that the identification information of the present invention includes the IP address, product model and version number of the product instance, but is not limited thereto. Other information that can characterize the identity of the product instance, such as the product name, etc., can be used as identification information.

[0040] In one embodiment of the present invention, the querying and retrieving the authentication credential corresponding to the identification information from the credential library includes:

[0041] Extracting the credential identifier corresponding to each authentication credential from the credential library;

[0042] The identification information is matched with each credential identification, and the authentication credential matching the identification information is retrieved.

[0043] The credential library pre-stores multiple authentication credentials, each of which is associated with a corresponding credential identifier, wherein the information in the credential identifier includes but is not limited to the product model, product version number, and IP address of the product instance. The identification information is matched with each credential identifier in the credential library one by one, and the credential identifier that matches the identification information is found. It is understandable that the matching method can be matched through a single type of identification information or through hierarchical matching through multiple different types of identification information, which is not limited here.

[0044] S3. Formatting the configuration parameters in the configuration request according to the interface specification of the product instance to generate initial configuration information.

[0045] After receiving the configuration request sent by the user, the scheduling management platform parses the configuration request and extracts the configuration parameters and identification information from it. The corresponding product instance can be determined through the identification information, and the interface specification of the product instance can be determined. Among them, the interface specification defines the configuration parameters, data format, and communication protocol supported by the product instance. According to the interface specification, the extracted configuration parameters are mapped and converted to become an expression form that adapts to the product interface. These converted configuration information forms the initial configuration information in the form of a message according to the requirements of the interface specification.

[0046] S4. Determine the embedding position of the initial configuration information according to the authentication method, and embed the authentication credential into the initial configuration information to generate final configuration information.

[0047] By parsing the authentication method, the specific location of the credential in the initial configuration information can be determined. After the embedding location is determined, the authentication credential is embedded in the initial configuration information to form a complete configuration information. The final configuration information is a request message that complies with the specification and can be directly sent to the target product instance so that the product instance performs the corresponding configuration update operation after receiving the configuration information.

[0048] S5. Send the configuration information to the product instance, and receive the configuration result fed back by the product instance.

[0049] After the final configuration information is generated, the configuration information is sent as a request message to the product instance to be updated, and the feedback results returned by the product instance are continuously monitored. The product instance will parse the configuration information according to the predefined interface specification, check the validity and integrity of the authentication credentials, and confirm whether the request is legal. If the authentication is passed, the product instance will perform the corresponding configuration update operation according to the relevant parameters in the configuration information, such as blocking a specific IP of the firewall, modifying the rules of the firewall, etc. After the execution is completed, the product instance will generate the result feedback information and send it to the scheduling management platform. Among them, the feedback information includes but is not limited to the success status and details of the configuration operation, and explains when errors or incompatibility occur. The scheduling management platform parses the received feedback information, and when it is identified that the corresponding product instance has not been successfully operated, it can be based on the preset strategy. Among them, it includes but is not limited to trying to update again, notifying manual intervention, etc. Through this closed-loop mechanism, effective monitoring of the entire product instance configuration update process can be achieved.

[0050] In one embodiment of the present invention, the method further comprises: reading the authentication time of the authentication credential based on a preset monitoring interval;

[0051] Determine the validity period of the authentication credential based on the authentication time, and judge whether the validity period exceeds the preset authentication period:

[0052] If the authentication time exceeds the specified time, re-authentication is performed and the authentication certificate is updated;

[0053] If the authentication time period has not been exceeded, the authentication credential is kept unchanged, and the valid time period of the authentication credential is continuously monitored to see whether it has expired.

[0054] In order to ensure the validity of the authentication credentials, it is also necessary to monitor the validity of the authentication credentials regularly. Specifically, the scheduling management platform will preset a monitoring interval, and the inspection process will be automatically triggered when the monitoring interval is reached. When the scheduling management platform detects that the duration reaches the monitoring interval, it will read the authentication time of the current authentication credential and calculate the duration from the authentication time to the current moment as the effective duration of the authentication credential. Among them, the effective duration refers to the duration from the generation of the authentication credential to the present. It is judged whether the effective duration is greater than the preset authentication duration. If it exceeds, it means that the authentication credential has expired. At this time, the authentication process will be restarted, and the corresponding authentication method will be matched and a new authentication credential will be generated by accessing the authentication library again to replace the old credential and ensure the security of subsequent matching. On the contrary, if the effective duration does not exceed the authentication duration, it means that the credential is within the validity period and does not need to be updated immediately. At this time, the scheduling management platform will keep the existing credential unchanged and check it again at the next monitoring interval. Further, in order to ensure the security of subsequent operations, when the remaining effective time of the authentication credential is lower than the preset security threshold, the re-authentication process should be triggered in advance to prevent the subsequent operation from being interrupted or failed due to the expiration of the credential.

[0055] In one embodiment of the present invention, after sending the configuration information to the product instance and receiving the configuration result fed back by the product instance, it also includes: saving the configuration information and the configuration result in a log record. Each time the authentication credential is retrieved and a configuration management operation is performed, the system will record a detailed operation log, including the credential call time, configuration content, operator and other information. These logs will be stored in the configuration management system for subsequent auditing and tracking.

[0056] See also Figure 2, which shows the overall system architecture diagram of the product instance scheduling management method. During the first authentication, the product instance that needs to be authenticated (such as security product-1, security product-2, etc.) sends an authentication request to the product access authentication service module, wherein the authentication request carries information such as the product model, version number, and IP address of the product instance. The product access authentication service module queries the authentication library to query the authentication method and required parameters corresponding to the model, version, and IP address, wherein the authentication method includes but is not limited to the authentication protocol, authentication method, and specific product instance interface, etc. The product access authentication service module sends the retrieved authentication method corresponding to the product instance to the product authentication execution module, and the product authentication execution module loads the specific authentication method and generates an authentication credential based on the IP address and other information of the target product instance, and saves the authentication credential to the credential library for subsequent calls. When a user needs to perform relevant configuration updates on a product instance (such as a firewall) (such as blocking a certain IP of the firewall), a configuration request is sent to the product access authentication module of the scheduling management platform by using the standard interface of the platform, and the configuration request carries the model, version, and address information of the target product, etc. The authentication credentials of the product instance are retrieved from the credential library through the product configuration management service module, and the authentication method of the product is retrieved through the product access authentication service module. And by parsing the configuration request and identifying the target product instance, the platform's product unified interface service module maps and converts the relevant information in the configuration request, so as to convert the relevant information suitable for the standard interface into the relevant information adapted to the corresponding product instance interface. The converted information is processed according to the product instance interface specification to form the initial configuration information. Then the authentication credentials are embedded into the initial configuration information according to the position required by the authentication method to form a complete configuration information and sent to the target product instance, so that the product instance performs relevant operations according to the user's specific configuration request. In addition, the product configuration management service will continue to monitor the product instance and receive the configuration results fed back by it. Through the product unified interface service module, the relevant content of the configuration results is reversely mapped to convert it into a form suitable for the standard interface to receive and send it to the standard interface, and finally feedback to the user.

[0057] See also Figure 3The scheduling management system 100 of the product instance includes: a request acquisition module 110, a credential acquisition module 120, a parameter adjustment module 130, a configuration information generation module 140 and a configuration update module 150. The request acquisition module 110 is used to obtain a configuration request and identify the product instance to be configured and updated according to the configuration request. The credential acquisition module 120 is used to search and retrieve the corresponding authentication method from the authentication library according to the identification information in the configuration request, and to search and retrieve the corresponding authentication credential from the credential library. The parameter adjustment module 130 is used to format the configuration parameters in the configuration request according to the interface specification of the product instance to generate initial configuration information. The configuration information generation module 140 is used to determine the embedding position of the authentication credential in the initial configuration information according to the authentication method, and embed the authentication credential into the initial configuration information to generate the final configuration information. The configuration update module 150 is used to send the configuration information to the product instance and accept the configuration result fed back by the product instance.

[0058] For the specific definition of the scheduling management system of the product instance, please refer to the definition of the scheduling management method for the product instance above, which will not be repeated here. Each module in the scheduling management system of the above product instance can be implemented in whole or in part by software, hardware and a combination thereof. The above modules can be embedded in or independent of the processor in the computer device in hardware format, or stored in the memory of the computer device in software format, so that the processor can call the corresponding operations of each of the above modules.

[0059] It should be noted that, in order to highlight the innovative part of the present invention, the present embodiment does not introduce modules that are not closely related to solving the technical problem proposed by the present invention, but this does not mean that there are no other modules in the present embodiment.

[0060] See also Figure 4 The electronic device 1 may include a memory 12, a processor 13 and a bus, and may also include a computer program stored in the memory 12 and executable on the processor 13, such as a scheduling management program for a product instance.

[0061] Among them, the memory 12 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 12 can be an internal storage unit of the electronic device 1, such as a mobile hard disk of the electronic device 1. In other embodiments, the memory 12 can also be an external storage device of the electronic device 1, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device 1. Further, the memory 12 can also include both an internal storage unit of the electronic device 1 and an external storage device. The memory 12 can not only be used to store application software and various types of data installed in the electronic device 1, such as the code for scheduling management of product instances, etc., but can also be used to temporarily store data that has been output or is to be output.

[0062] In some embodiments, the processor 13 may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and combinations of various control chips. The processor 13 is the control core (Control Unit) of the electronic device 1, and uses various interfaces and lines to connect various components of the entire electronic device 1, and executes or executes programs or modules stored in the memory 12 (such as the scheduling management program of the product instance, etc.), and calls the data stored in the memory 12 to execute various functions of the electronic device 1 and process data.

[0063] The processor 13 executes the operating system and various installed application programs of the electronic device 1. The processor 13 executes the application programs to implement the steps in the scheduling management method of the above product instance.

[0064] Exemplarily, the computer program may be divided into one or more modules, which are stored in the memory 12 and executed by the processor 13 to complete the present application. The one or more modules may be a series of computer program instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program in the electronic device 1. For example, the computer program may be divided into a request acquisition module 110, a credential acquisition module 120, a parameter adjustment module 130, a configuration information generation module 140, and a configuration update module 150.

[0065] The above-mentioned integrated unit implemented in the form of a software function module can be stored in a computer-readable storage medium, and the computer-readable storage medium can be non-volatile or volatile. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a computer device, or a network device, etc.) or a processor to perform part of the functions of the scheduling management method of the product instance described in each embodiment of the present application.

[0066] In summary, the scheduling management method, system, device and medium of a product instance disclosed in the present invention can quickly and accurately identify the target product instance to be configured and updated according to the identification information therein after receiving the configuration request sent by the user, and can search the authentication method and authentication credential adapted to the product instance through the authentication library and the credential library. Since this query is based on the identification information, it can ensure that the authentication credential and authentication method corresponding to the product are obtained accurately and efficiently. Further, the relevant configuration parameters in the configuration request are converted through the interface specification, so that the converted configuration parameters meet the requirements of the product instance, so as to ensure that the entire configuration process can be carried out smoothly. In this automated way, the present invention can complete the whole process from request parsing, parameter conversion to credential embedding and docking with the product instance without manual intervention, which can ensure that the product instance can correctly parse and execute the relevant configuration operations. By associating the identification information with the authentication credential, the authentication method, and the specific product instance, the unified scheduling management of heterogeneous security capabilities (heterogeneous manufacturers, heterogeneous products) is realized, the intensive level of security operations is improved, the efficiency of security response is improved, and the automated handling of security incidents is achieved. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

[0067] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the art may modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by a person of ordinary skill in the art without departing from the spirit and technical concept disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A scheduling management method for a product instance, characterized in that: The method comprises: Obtaining a configuration request, and identifying a product instance to be updated according to the configuration request; According to the identification information in the configuration request, searching and retrieving the corresponding authentication method from the authentication library, and searching and retrieving the corresponding authentication credential from the credential library; Formatting the configuration parameters in the configuration request according to the interface specification of the product instance to generate initial configuration information; Determine the embedding position of the initial configuration information according to the authentication method, and embed the authentication credential into the initial configuration information to generate final configuration information; The configuration information is sent to the product instance, and the configuration result fed back by the product instance is received.

2. The method for scheduling and managing product instances according to claim 1, characterized in that: The searching and retrieving the corresponding authentication method from the authentication library according to the identification information in the configuration request, and searching and retrieving the corresponding authentication credential from the credential library, include: Parsing the configuration request to obtain identification information of the product instance; Based on a preset hierarchical matching mechanism, query and retrieve the authentication method corresponding to the identification information from the authentication library; The authentication credential corresponding to the identification information is searched and retrieved from the credential library.

3. The method for scheduling and managing product instances according to claim 2, characterized in that: The step of querying and loading the authentication method corresponding to the identification information from the authentication library based on the preset hierarchical matching mechanism includes: According to the product model in the identification information, a plurality of first authentication methods matching the product model are screened out from the authentication library; According to the product version in the identification information, screening out multiple second authentication methods matching the product version from multiple first authentication methods; According to the IP address in the identification information, an authentication method matching the IP address is screened out from multiple second authentication methods as a final authentication method.

4. The method for scheduling and managing product instances according to claim 2, characterized in that: The querying and retrieving the authentication credential corresponding to the identification information from the credential library includes: Extracting the credential identifier corresponding to each authentication credential from the credential library; The identification information is matched with each credential identification, and the authentication credential matching the identification information is retrieved.

5. The method for scheduling and managing product instances according to claim 1, characterized in that: The method further comprises: Based on a preset monitoring interval, reading the authentication time of the authentication credential; Determine the validity period of the authentication credential based on the authentication time, and judge whether the validity period exceeds the preset authentication period: If the authentication time exceeds the specified time, re-authentication is performed and the authentication certificate is updated; If the authentication time period has not been exceeded, the authentication credential is kept unchanged, and the valid time period of the authentication credential is continuously monitored to see whether it has expired.

6. The method for scheduling and managing product instances according to claim 5, characterized in that: After the authentication credential is updated, the method further includes: recording the update time of the authentication credential as the new authentication time.

7. The method for scheduling and managing product instances according to claim 1, characterized in that: After sending the configuration information to the product instance and receiving the configuration result fed back by the product instance, the method further includes: saving the configuration information and the configuration result into a log record.

8. A scheduling management system for a product instance, characterized in that: The system comprises: A request acquisition module, used to acquire a configuration request and identify a product instance to be updated according to the configuration request; A credential acquisition module, used to search and retrieve the corresponding authentication method from the authentication library according to the identification information in the configuration request, and to search and retrieve the corresponding authentication credential from the credential library; A parameter adjustment module, used to format the configuration parameters in the configuration request according to the interface specification of the product instance to generate initial configuration information; A configuration information generating module, used to determine the embedding position of the authentication credential in the initial configuration information according to the authentication method, and embed the authentication credential into the initial configuration information to generate final configuration information; The configuration update module is used to send the configuration information to the product instance and receive the configuration result fed back by the product instance.

9. An electronic device, characterized in that: The electronic device comprises: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the electronic device to implement the scheduling management method for the product instance as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon, and when the computer program is executed by a processor of a computer, the computer is caused to execute the scheduling management method for a product instance as claimed in any one of claims 1 to 7.

Images