Equipment management method and device, equipment, medium and product

Abstract

The invention relates to the technical field of Internet of Things, and discloses an equipment management method, device, equipment, medium and product, the method is applied to a software defined wide area network (SD-WAN) controller in an Internet of Things management system, and the Internet of Things management system further comprises at least one access device connected with the SD-WAN controller, an SD-WAN edge node and an application server; the method comprises the following steps: acquiring parameter information of access equipment; allocating a global ID and an application server to the access device according to the parameter information; obtaining a mapping relationship between the global ID and the address of the application server, and sending the mapping relationship to the access device and the application server; and receiving data information acquired by the access equipment, and transmitting the data information to the application server through the SD-WAN edge node. According to the invention, the equipment of various different communication protocols can be managed.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a device management method, apparatus, equipment, medium and product. Background Art

[0002] The Internet of Things refers to a network composed of a large number of smart devices that can communicate and exchange data through the Internet. It has a wide range of applications, including smart homes, smart cities, smart industries, smart healthcare, etc. According to statistics, by 2023, the number of IoT devices worldwide will reach 43 billion, accounting for nearly half of the total number of Internet devices.

[0003] In the related art, when managing IoT devices, due to the differences in communication protocols of different IoT devices, it is impossible to manage IoT devices efficiently and flexibly.

[0004] In view of this, a device management method that can adapt to multiple communication protocols is needed. Summary of the invention

[0005] In view of this, the present invention provides a device management method, which can manage devices of multiple different communication protocols and improve the flexibility of device management.

[0006] In a first aspect, the present invention provides a device management method, which is applied to a software-defined wide area network SD-WAN controller in an Internet of Things management system. The Internet of Things management system also includes at least one access device, an SD-WAN edge node and an application server connected to the SD-WAN controller; the method includes: obtaining parameter information of the access device; according to the parameter information, allocating a global ID and an application server to the access device; obtaining a mapping relationship between the global ID and the application server address, and sending the mapping relationship to the access device and the application server; receiving data information collected by the access device, and transmitting the data information to the application server through the SD-WAN edge node.

[0007] In this embodiment, by acquiring the parameter information of the access device, a global ID and an application server are assigned to the access device; the mapping relationship between the global ID and the application server address is acquired, and the mapping relationship is sent to the access device and the application server to complete the connection between the access device and the application server; by receiving the data information collected by the access device, and transmitting the data information to the application server through the SD-WAN edge node. In the above scheme: according to the characteristics of the access device, the corresponding global ID and application server are assigned to the access device, and the data information of the access device is received and transmitted to the application server through the SD-WAN edge node, which can optimize the utilization of network resources, centrally manage and analyze data, and realize efficient, flexible and intelligent connection and management of IoT devices.

[0008] In an optional embodiment, receiving data information collected by an access device and transmitting the data information to an application server through an SD-WAN edge node includes: acquiring data information collected by the access device; determining transmission parameters of the data information based on the type of the data information; the transmission parameters include a transmission path and a transmission bandwidth; based on the transmission parameters, transmitting the data information to the application server through an SD-WAN edge node.

[0009] In this embodiment, the transmission parameters of the data information are determined according to the type of data information collected by the access device, and the data information is transmitted to the application server through the SD-WAN edge node according to the transmission parameters. This can improve the data transmission efficiency and ensure data quality and data security.

[0010] In an optional embodiment, transmitting data information to an application server via an SD-WAN edge node includes: the SD-WAN edge node processes the data information and forwards the processed data information to the application server; wherein the data processing includes at least one of data encryption, data compression and data cleaning.

[0011] In this embodiment, the SD-WAN edge node processes the data information. The data processing includes data encryption to improve the security of data interaction, the data processing includes data compression to speed up data transmission, and the data processing includes data cleaning to improve data quality.

[0012] In an optional implementation, acquiring parameter information of an access device includes: establishing a communication connection with the access device, and identifying parameter information of the access device, wherein the parameter information includes a device type and a communication protocol.

[0013] In this embodiment, a communication connection with an access device is established, and parameter information of the access device is identified, and targeted optimization and adjustment can be performed based on the identified device information.

[0014] In an optional implementation, the method further includes: performing security verification on the access device, and determining whether to generate a key based on the security verification result; wherein the key is used to encrypt the interaction data, and the interaction data is the interaction data between the access device and the SD-WAN controller.

[0015] In this embodiment, security verification is performed on the access device, and based on the security verification result, it is determined whether to generate a key, and the secure interaction data can be encrypted to improve the security of data interaction.

[0016] In an optional embodiment, the method further includes: receiving a first instruction from the application controller, and sending the first instruction to the access device through the SD-WAN edge node to control the access device to execute the first instruction.

[0017] In this implementation, by receiving the first instruction from the application server and sending the first instruction to the access device to control the access device to execute the first instruction, the demand can be responded to quickly.

[0018] In the second aspect, the present invention provides a device management device, which includes: an acquisition module for acquiring parameter information of an access device; an allocation module for allocating a global ID and an application server to the access device based on the parameter information; a mapping module for acquiring a mapping relationship between the global ID and the application server address, and sending the mapping relationship to the access device and the application server; a receiving module for receiving data information collected by the access device, and transmitting the data information to the application server through the SD-WAN edge node.

[0019] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the device management method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0020] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the device management method of the first aspect or any corresponding embodiment thereof.

[0021] In a fifth aspect, the present invention provides a computer program product, including computer instructions, which are used to enable a computer to execute the device management method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0023] Figure 1 is a flow chart of a device management method according to an embodiment of the present invention;

[0024] Figure 2 is a flow chart of another device management method according to an embodiment of the present invention;

[0025] Figure 3 is a schematic diagram of a module structure of a device management system according to an embodiment of the present invention;

[0026] Figure 4 is a flow chart of another device management method according to an embodiment of the present invention;

[0027] Figure 5 is a structural block diagram of a device management apparatus according to an embodiment of the present invention;

[0028] Figure 6 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0030] SD-WAN (Software Defined Wide Area Network) can dynamically optimize the data and quality of data flows based on network conditions and business needs. It has been widely used in enterprise networks and cloud services, which can improve network reliability, flexibility and security while reducing network costs and complexity.

[0031] The application field of IoT is very wide, with the following characteristics:

[0032] (1) Large number and wide distribution. IoT devices are spread across various fields and scenarios, such as homes, offices, factories, hospitals, public places, etc. These devices need to be connected and managed through the network, but traditional network architectures are difficult to support such large-scale and dispersed device access.

[0033] (2) Low power consumption and weak computing power. IoT devices are usually small, low-cost, low-power embedded devices such as sensors, controllers, cameras, etc. These devices have limited computing power and storage capacity and cannot execute complex network protocols and security algorithms.

[0034] (3) Diverse communication protocols and low security. IoT devices use a variety of different communication protocols, such as ZigBee, LoRaWAN (Long Range Wide Area Network), NB-IoT (Narrow Band Internet of Things), etc. These protocols have their own advantages and disadvantages, but it is difficult to ensure efficient and secure data transmission. IoT devices are also vulnerable to attacks and interference, such as DoS (Denial of Service), MITM (Man-in-the-Middle), Spoofing, etc.

[0035] (4) Small data flow and delay sensitivity. The data generated by IoT devices are usually small-sized, high-frequency, and real-time data streams, such as temperature, humidity, pressure, video, etc. These data need to be transmitted and processed in a short time, otherwise it will affect the functions and performance of IoT devices.

[0036] The embodiment of the present invention provides a device management method, which allocates a global ID and an application server to the access device by acquiring parameter information of the access device; acquires the mapping relationship between the global ID and the application server address, and sends the mapping relationship to the access device and the application server to complete the connection between the access device and the application server; receives data information collected by the access device, and transmits the data information to the application server through the SD-WAN edge node. According to the characteristics of the access device, the corresponding global ID and application server are allocated to the access device, and the data information of the access device is received and transmitted to the application server through the SD-WAN edge node, which can optimize resource utilization, centrally manage and analyze data, and realize efficient, flexible and intelligent connection and management of IoT devices.

[0037] According to an embodiment of the present invention, an embodiment of a device management method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0038] In this embodiment, a device management method is provided, which is applied to a software-defined wide area network SD-WAN controller in an Internet of Things management system, and the Internet of Things management system also includes at least one access device connected to the SD-WAN controller, an SD-WAN edge node, and an application server; Figure 1 is a flow chart of a device management method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0039] Step S101, obtaining parameter information of an access device.

[0040] The connection mode between the access device and the IoT management system can be determined, and then the corresponding communication protocol can be determined according to the type, function and connection mode of the access device. The connection mode can be a wired connection or a wireless connection. In an actual application, the access device is a network device, which is connected to the IoT management system via Ethernet, and protocols such as HTTP (Hypertext Transfer Protocol) can be used.

[0041] According to the determined connection mode and communication protocol, a request message can be sent to the access device, and then the access device response can be waited for. After receiving the device response, the device response message can be parsed according to the communication protocol and data format specification to complete the connection with the access device. According to the device response message, the parameter information of the access device can be obtained. The parameter information may include the performance parameter indicators, operation status parameters and other information of the access device.

[0042] Step S102: Allocate a global ID and an application server to the access device according to the parameter information.

[0043] According to the parameter information, an unoccupied global ID can be selected from a global ID (Identity) pool to correspond to the access device.

[0044] According to the parameter information, the selection criteria of the access device are determined, where the selection criteria may include network bandwidth, storage capacity, etc. Then, the importance of each selection criterion to the access device can be determined, and a corresponding weight can be assigned to each selection criterion. Then, according to the weight and the selection criterion, each application server can be scored to select a suitable application server.

[0045] When there are many access devices connected to the IoT management system, a local ID can be assigned to the access device according to the communication protocol of the access device, and then a global ID can be assigned to the access device according to the local ID and parameter information of the access device. The local ID is assigned to the access device, and the devices with the same communication protocol can be managed uniformly.

[0046] Step S103: Acquire a mapping relationship between a global ID and an application server address, and send the mapping relationship to the access device and the application server.

[0047] The global ID of the same access device and the application server address are matched to obtain the mapping relationship between the global ID of the access device and the application server address. The mapping relationship can then be encapsulated into a data packet, and then the data packet is sent to the access device and the application server corresponding to the access device.

[0048] When a data packet is sent, it can be encrypted to improve the security of the method.

[0049] Step S104, receiving data information collected by the access device, and transmitting the data information to the application server through the SD-WAN edge node.

[0050] After receiving the data information collected by the access device, the data information may be processed first. The data processing may include removing outliers, etc. The processed data information is then encrypted, and the encrypted data information is sent to the SD-WAN edge node. The data transmission parameters may be determined according to the type and attributes of the data information, and then the data information is sent to the SD-WAN edge node according to the data transmission parameters, and the SD-WAN edge node forwards the data information to the application server.

[0051] After receiving the data information, the application server can save the data information. The staff can also send instructions to the access device through the application server to control the operation of the access device.

[0052] In some optional implementations, after receiving the data information, the application server may also generate result data or control instructions, and then send the result data or control instructions to the access device. The access device may display the result data or execute the control instruction. After the access device displays the result data or executes the control instruction, the display result or execution result may also be transmitted back.

[0053] By passing data information through SD-WAN edge nodes, the traffic processing capabilities of SD-WAN edge nodes can be fully utilized to improve the security and reliability of data information transmission of IoT devices. Data leakage and attacks can be prevented, and data information transmission in the network can be accelerated.

[0054] The device management method provided in this embodiment allocates a global ID and an application server to the access device by acquiring parameter information of the access device; acquires the mapping relationship between the global ID and the application server address, and sends the mapping relationship to the access device and the application server to complete the connection between the access device and the application server; receives data information collected by the access device, and transmits the data information to the application server through the SD-WAN edge node. In the above scheme: according to the characteristics of the access device, the corresponding global ID and application server are allocated to the access device, and the data information of the access device is received and transmitted to the application server through the SD-WAN edge node, which can optimize the utilization of network resources, centrally manage and analyze data, and realize efficient, flexible and intelligent connection and management of IoT devices.

[0055] In this embodiment, a device management method is provided, which is applied to a software-defined wide area network SD-WAN controller in an Internet of Things management system, and the Internet of Things management system also includes at least one access device connected to the SD-WAN controller, an SD-WAN edge node, and an application server; Figure 2 is a flow chart of a device management method according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps:

[0056] Step S201: Acquire parameter information of an access device.

[0057] For details, please see Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0058] In some optional implementations, the above step S201 includes:

[0059] Step S2011, establish a communication connection with the access device and identify parameter information of the access device, wherein the parameter information includes the device type and the communication protocol.

[0060] After the access device is accessed, communication request information may be generated according to the communication protocol of the access device, and the communication request information may include access parameter information, etc. Then the communication request information is sent to the access device, and the access device is waited for to respond. After receiving the communication request information, the access device may generate corresponding response information according to the content of the communication request information, wherein the response information may include the working parameters of the access device, etc. After receiving the response information, the response information may also be verified.

[0061] The parameter information may also include the working conditions of the access device, the frequency of parameter collection, etc.

[0062] Establish a communication connection with the access device and identify the parameter information of the access device, and make targeted optimization adjustments based on the identified device information.

[0063] Step S202: Allocate a global ID and an application server to the access device according to the parameter information.

[0064] For details, please see Figure 1 Step S102 of the illustrated embodiment will not be described in detail here.

[0065] Step S203: Acquire a mapping relationship between a global ID and an application server address, and send the mapping relationship to the access device and the application server.

[0066] For details, please see Figure 1 Step S103 of the illustrated embodiment will not be described in detail here.

[0067] Step S204, receiving data information collected by the access device, and transmitting the data information to the application server through the SD-WAN edge node.

[0068] Specifically, the above step S204 includes:

[0069] Step S2041, obtaining data information collected by the access device.

[0070] The data information collected varies depending on the type of access device. In a practical application, the access device is a temperature sensor, and the data information is the temperature of the environment in which the access device is located.

[0071] Step S2042: determining transmission parameters of the data information based on the type of the data information; the transmission parameters include a transmission path and a transmission bandwidth.

[0072] The type of data information may be structured data, unstructured data, and semi-structured data. The transmission parameters of the data information may be determined according to the type of data information and the purpose of data transmission. When the real-time requirements for data transmission are high, a transmission path with low latency needs to be selected as much as possible, and the transmission bandwidth also needs to be expanded accordingly.

[0073] In some optional implementations, the transmission parameters may also include data encryption and the like.

[0074] Step S2043, based on the transmission parameters, transmit the data information to the application server through the SD-WAN edge node.

[0075] The data information can be forwarded to the SD-WAN edge node first according to the transmission parameters. After receiving the data information, the SD-WAN edge node can directly forward the data information to the application server, and the application server generates control instructions or result data based on the data information. After the control instruction is generated, the control instruction can be transmitted back to the access device along the original path. After the result data is generated, the result data can be displayed to the staff.

[0076] In some optional implementations, the above method S2043 includes:

[0077] In step a1, the SD-WAN edge node processes the data information and forwards the processed data information to the application server; wherein the data processing includes at least one of data encryption, data compression and data cleaning.

[0078] In the case where data processing includes data encryption, a suitable encryption algorithm can be selected according to the data type and security requirements of the data information, wherein the encryption algorithm may include a symmetric encryption algorithm, an asymmetric encryption algorithm, and a hash algorithm. An encryption key is generated according to the encryption algorithm. Then, the data information is encrypted according to the encryption algorithm and the encryption key. After receiving the encrypted data information, the application server can decrypt the encrypted data information using the corresponding decryption key according to the encryption algorithm.

[0079] In some optional implementations, after decrypting the data information, the application server may also check the data information and then determine whether the decrypted data is consistent with the data encrypted by the SD-WAN edge node.

[0080] When data processing includes data compression, the data compression requirement can be determined first, and then a suitable compression algorithm can be selected to compress the data according to the compression requirement. The compression algorithm can be a lossless compression algorithm or a lossy compression algorithm. After the compression is completed, it is necessary to determine the ratio between the size of the compressed data and the size of the original data information to determine whether the compression requirement is met. If the compression requirement is not met, the data information can be recompressed.

[0081] When data processing includes data cleaning, the data problem types in the data information can be determined first, and then the data can be cleaned according to the data problem types. The data problem types can include duplicate data, missing data, etc. The data can be optimized by deleting duplicate data and supplementing the average value.

[0082] SD-WAN edge nodes process data information. Data processing includes data encryption to improve the security of data interaction, data processing includes data compression to speed up data transmission, and data processing includes data cleaning to improve data quality.

[0083] In some optional embodiments, the method further comprises:

[0084] Step b1, perform security verification on the access device, and determine whether to generate a key based on the security verification result; the key is used to encrypt the interaction data, and the interaction data is the interaction data between the access device and the SD-WAN controller.

[0085] After accessing the device, you can send an authentication request to the access device, where the authentication request can include information such as a public key and a random number. After receiving the authentication request, the access device can use its private key to sign the random number and other information, and return the signature result and its public key and other information. Perform security verification on the returned signature result and public key and other information. If the security verification result is successful, you can use a symmetric encryption algorithm to generate a shared key, and use the key to encrypt subsequent interactive data. Among them, the symmetric encryption algorithm can be AES (Advanced Encryption Standard).

[0086] Perform security verification on the access device and determine whether to generate a key based on the security verification result. The secure interactive data can be encrypted to improve the security of data interaction.

[0087] In some optional embodiments, the method further comprises:

[0088] Step c1, receiving a first instruction from the application controller, and sending the first instruction to the access device through the SD-WAN edge node to control the access device to execute the first instruction.

[0089] After receiving the first instruction from the application controller, the transmission parameters of the first instruction can be determined according to the type of the first instruction, wherein the transmission parameters include the transmission path and the transmission bandwidth. The first instruction is sent to the SD-WAN edge node according to the transmission parameters, and then the SD-WAN edge node sends the first instruction to the access device, and the access device executes the first instruction.

[0090] In some optional implementations, after the access device executes the first instruction, the execution result may be returned to the SD-WAN controller.

[0091] By receiving the first instruction from the application server and sending the first instruction to the access device to control the access device to execute the first instruction, the demand can be responded to quickly.

[0092] The device management method provided in this embodiment determines the transmission parameters of the data information according to the type of data information collected by the access device, and transmits the data information to the application server through the SD-WAN edge node according to the transmission parameters. This can improve the data transmission efficiency and ensure data quality and data security.

[0093] In this embodiment, a device management system is provided. Figure 3 is a schematic diagram of the module structure of a device management system according to an embodiment of the present invention, such as Figure 3 As shown, the device includes an IoT device module, an IoT gateway module, an SD-WAN controller module, an SD-WAN edge node module and an application server module.

[0094] The IoT device module includes a device interface submodule, a device driver submodule, and a device data submodule. The IoT device module can be various smart devices connected via the Internet, such as sensors, controllers, cameras, display screens, etc. These devices can be connected to the device management system in a wired or wireless manner.

[0095] The device interface submodule is the communication interface between the IoT device and the IoT gateway, and can support multiple access protocols and standards, such as Wi-Fi (Wireless Fidelity), Bluetooth, ZigBee, LoRaWAN, etc. The device driver submodule can provide a software driver for the IoT device to realize the initialization, configuration and control of the IoT device, as well as the interaction with the device interface submodule. In some optional embodiments, the IoT device module also includes a device configuration submodule, which can generate corresponding configuration files for each IoT device or each IoT device group based on the type, function, location and other information of the IoT device, and send it to the device through the SD-WAN network. The device data submodule can process the data generated or consumed by the IoT device, including raw data, processed data, command data, result data, etc.

[0096] The IoT gateway module includes a gateway interface submodule, an edge computing submodule, and a security management submodule. The IoT gateway module can be located near the IoT device and can perform edge computing to access, manage, control, and process data of the IoT device. The module communicates with the SD-WAN controller module and the SD-WAN edge node module.

[0097] The gateway interface submodule is used to provide a communication interface for IoT devices, SD-WAN controller modules, and SD-WAN edge node modules, and can support multiple transmission protocols and encryption algorithms. The edge computing submodule is used to provide edge computing capabilities, which can process and analyze IoT device data locally, reducing the IoT device's dependence on cloud resources. The security management submodule is used to authenticate, encrypt, and access control the communication between the IoT device module and the IoT gateway module, which can ensure the security of the communication between the IoT device module and the IoT gateway module.

[0098] The SD-WAN controller module includes a configuration management submodule, a performance optimization submodule, and a monitoring and analysis submodule. It can be deployed in the cloud or locally to configure, optimize, and manage IoT gateway devices and SD-WAN edge node devices. In some optional implementations, the SD-WAN controller module can also communicate with the application server.

[0099] The configuration management submodule can be used to dynamically configure and set parameters for the IoT gateway module and SD-WAN edge node module. The performance optimization submodule can dynamically optimize the communication paths and bandwidths of IoT devices, SD-WAN edge nodes, and application servers based on network conditions and traffic characteristics. The monitoring and analysis submodule can monitor the operating status of the entire device management system and perform data analysis and fault diagnosis on the operating status.

[0100] The SD-WAN edge node module includes a traffic forwarding submodule, a traffic acceleration submodule, and a traffic security submodule. It is deployed between the IoT gateway module and the SD-WAN controller module to forward, accelerate, and protect traffic.

[0101] The traffic forwarding submodule is used to forward data from the source point to the destination point, and can support multiple routing protocols and forwarding strategies. The traffic acceleration submodule can improve the efficiency and speed of data transmission through compression, caching and optimization technologies. The traffic security submodule can protect the security of data during transmission through encryption, authentication and firewall technologies.

[0102] The application server module includes a business processing module, a scenario integration submodule, and a user interface submodule. It is used to customize and integrate according to the business logic and scenario requirements of the IoT device module. It can be deployed in the cloud or locally to communicate with the SD-WAN controller.

[0103] The business processing submodule is used to process and execute data according to the data provided by the IoT device module and the business logic of the IoT device module. The scenario integration submodule is used to customize and integrate corresponding functions and services according to different application scenario requirements. The user interface submodule is used to provide a user-friendly interface and interaction method to facilitate user management and control of IoT devices.

[0104] The device management system provided in this embodiment utilizes the IoT gateway module, SD-WAN controller module, SD-WAN edge node module and application server to realize efficient, secure, flexible and intelligent connection and management of IoT device modules. It can realize multiple functions of IoT devices according to the type, protocol, data, business logic and scenario requirements of IoT devices, including multiple key links such as device access, mapping, interaction, forwarding, acceleration, processing and execution. It also makes full use of the centralized control capability of the SD-WAN controller module, improves the data transmission speed and communication network quality of IoT devices, optimizes the mapping relationship between IoT devices and application servers, and can meet different application requirements.

[0105] In a practical application, the equipment management system is applied to the smart agriculture scenario. The IoT devices can be temperature sensors, humidity sensors, light sensors, soil sensors, water level sensors, water pump controllers, sprinkler systems, etc., which can realize real-time monitoring and intelligent control of the farmland environment, improve the growth quality and yield of crops, save water resources and energy consumption, and protect the ecological environment.

[0106] In a practical application, the equipment management system is applied to a smart factory scenario. IoT devices may include robots, conveyor belts, cameras, display screens, thermometers, pressure gauges, flow meters, etc., which can realize real-time monitoring and intelligent optimization of the factory production process, improve production efficiency and quality, reduce production costs and risks, and ensure production safety.

[0107] In a practical application, the device management system is applied to the smart city scenario. IoT devices can include street lights, traffic lights, parking lots, buses, shared bicycles, cameras, environmental monitors, etc., which can realize real-time monitoring and intelligent adjustment of urban operation conditions, improve urban management efficiency and service levels, save urban resources and energy consumption, and improve urban environment and people's livelihood.

[0108] In this embodiment, a device management method is also provided. Figure 4 As shown, the method is applied to a device management system.

[0109] First, the device is connected. The IoT device module can establish a communication connection with the IoT gateway module through the device interface submodule. In some optional implementations, the IoT device module can support multiple access protocols and standards, including Wi-Fi, Bluetooth, ZigBee, LoRaWAN, etc.

[0110] After the IoT device is connected, the IoT gateway module performs device identification on the IoT device; wherein the IoT gateway module can identify the type and protocol of the IoT device through the device driver submodule, and assign a local ID to the IoT device. In some optional implementations, the IoT gateway module loads the corresponding device driver submodule according to the information provided by the device interface submodule of the IoT device module; communicates with the IoT device through the device driver submodule to obtain more detailed information; wherein information such as the working status of the IoT device can be obtained; assigns a local ID to the IoT device through the device driver submodule, and binds the local ID to the device interface submodule to facilitate local calls to the IoT device.

[0111] After the device is identified, the IoT gateway module authenticates the IoT device through the security management submodule, verifies its legitimacy and credibility, and establishes a secure channel to improve the security of communication. In some optional implementations, the IoT gateway module sends an authentication request to the IoT device through the security management submodule, wherein the authentication request contains information such as its public key and random number. After the IoT device module receives the authentication request through the security management submodule, the private key can be used to sign the random number in the authentication request, and the signature result and its public key and other information can be returned. The IoT gateway module receives and verifies the signature result and public key and other information through the security management submodule, and returns authentication success or authentication failure according to the verification result. In the case of successful authentication, it indicates that the IoT device has high security; in the case of failed authentication, it indicates that the IoT device has low security, and the communication connection with the IoT device can be cut off. The IoT gateway module uses a symmetric encryption algorithm through the security management submodule to generate a shared key, and sends the shared key to the IoT device. The IoT gateway module and the IoT device can use the key to encrypt subsequent communication data, wherein the symmetric encryption algorithm can be AES, etc.

[0112] After authenticating the IoT device, the IoT gateway module reports the IoT device information and reports the type, protocol, local ID and other information of the IoT device to the SD-WAN controller module through the gateway interface submodule.

[0113] After receiving the device information of the IoT device, the SD-WAN controller module assigns a global ID to the IoT device. A unique global ID can be assigned to the IoT device based on the information of the IoT device through the configuration management submodule, and correspond to the local ID. In some optional implementations, the SD-WAN controller module maintains a global ID pool through the configuration management submodule to store available global IDs. After receiving the reported device information, the SD-WAN controller module selects an unoccupied global ID from the global ID pool through the configuration management submodule, and corresponds it to the local ID of the IoT device. The SD-WAN controller module stores the correspondence between the global ID and the local ID in a mapping table through the configuration management submodule for subsequent data forwarding and management.

[0114] After allocating the global ID, the SD-WAN controller module will select the application server for the IoT device. The performance optimization submodule can be used to select the appropriate application server for the IoT device based on the business logic and scenario requirements provided by the application server.

[0115] In addition, the SD-WAN controller module will also establish a mapping relationship through the monitoring and analysis submodule, where the mapping relationship is the mapping relationship between the global ID of the IoT device and the address of the application server, and send the established mapping relationship to the IoT gateway module and the application server. In some optional implementations, the SD-WAN controller module encapsulates the global ID of the IoT device and the address of the application server into a data packet through the monitoring and analysis submodule, and encrypts the data packet and sends it to the IoT gateway module and the application server. The monitoring and analysis submodule of the application server and the IoT gateway module receives and decrypts the data packet, and extracts the global ID of the IoT device and the address of the application server from the decrypted data packet. The monitoring and analysis submodule of the application server and the IoT gateway module can also store the global ID of the IoT device and the address of the application server in a mapping table for subsequent data interaction.

[0116] The IoT device collects data. In some optional implementations, the IoT device collects or generates raw data through a device data submodule and sends the raw data to the IoT gateway module.

[0117] After receiving the raw data, the IoT gateway module will process the raw data. In some optional implementations, the IoT gateway module processes and analyzes the raw data locally through the edge computing submodule and generates processed data. The local processing and analysis may include data cleaning, data compression, etc.

[0118] After the IoT gateway module processes the data, it will report the processed data to the SD-WAN controller. The IoT gateway module can report data through the gateway interface submodule. In some optional implementations, the IoT gateway module establishes a communication connection with the SD-WAN controller module through the gateway interface submodule, and encapsulates the processed data into a data packet and sends it to the SD-WAN controller module. The SD-WAN controller module receives the data packet through the gateway interface submodule and extracts the processed data. Among them, an encryption algorithm can also be selected according to actual conditions. The IoT gateway module encrypts the data packet and sends it to the SD-WAN controller module. The SD-WAN controller module decrypts the data packet through the gateway interface submodule to improve the security of data transmission.

[0119] After receiving the processed data, the SD-WAN controller module will forward the data to the SD-WAN edge node module, and then the SD-WAN edge node module will forward the data to the application manager. In some optional implementations, the configuration management submodule of the SD-WAN controller module will select a transmission path and bandwidth for the data according to the type and attributes of the data, and forward the data to the SD-WAN edge node module according to the selected transmission path and bandwidth. The SD-WAN edge node module encrypts, compresses and optimizes the data through the traffic acceleration submodule, and forwards the data to the application server.

[0120] After receiving the data, the application server performs business processing. In some optional implementations, the business processing submodule of the application server processes and executes specific business logic according to the information of the data and generates commands or result data, wherein the specific business logic can be set by the staff.

[0121] After generating the command or result data, the application server will send the data. In some optional implementations, the application server sends the command or result data to the SD-WAN controller module through the user interface submodule.

[0122] After receiving the command or result data sent by the application server, the SD-WAN controller module will transmit the data back to the SD-WAN edge node. In some optional implementations, the SD-WAN controller module selects a transmission path and bandwidth for the command or result data according to the type and attributes of the command or result data through the configuration management submodule, and forwards the command or result data to the SD-WAN edge node module.

[0123] After receiving the command or result data, the SD-WAN edge node module will decrypt the data. In some optional implementations, the SD-WAN edge node module decrypts, decompresses and optimizes the command or result data through the traffic security submodule, and forwards the command or result data to the IoT gateway module.

[0124] After receiving the command or result data, the IoT gateway module can send it to the IoT device to control the IoT device to execute the command or display the result data. In some optional implementations, the IoT gateway module can locally execute or display the command or result data through the edge computing submodule, and feed back the execution or display status to the SD-WAN controller.

[0125] In this embodiment, a device management device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0126] This embodiment provides a device management device, such as Figure 5 As shown, including:

[0127] The acquisition module 301 is used to acquire parameter information of an access device.

[0128] The allocation module 302 is used to allocate a global ID and an application server to the access device according to the parameter information.

[0129] The mapping module 303 is used to obtain the mapping relationship between the global ID and the application server address, and send the mapping relationship to the access device and the application server.

[0130] The receiving module 304 is used to receive data information collected by the access device and transmit the data information to the application server through the SD-WAN edge node.

[0131] In some optional implementations, the acquisition module 301 includes:

[0132] The connection unit is used to establish a communication connection with an access device and identify parameter information of the access device, wherein the parameter information includes a device type and a communication protocol.

[0133] In some optional implementations, the receiving module 304 includes:

[0134] A data information acquisition unit, used to acquire data information collected by the access device;

[0135] A parameter determination unit, used to determine the transmission parameters of the data information based on the type of the data information; the transmission parameters include a transmission path and a transmission bandwidth;

[0136] The data transmission unit is used to transmit data information to the application server through the SD-WAN edge node based on the transmission parameters.

[0137] In some optional implementations, the data transmission unit includes:

[0138] The data processing subunit is used for processing data information at the SD-WAN edge node and forwarding the processed data information to the application server; wherein the data processing includes at least one of data encryption, data compression and data cleaning.

[0139] In some optional implementations, the device management apparatus further includes:

[0140] The security verification module 305 is used to perform security verification on the access device and determine whether to generate a key based on the security verification result; the key is used to encrypt the interaction data, and the interaction data is the interaction data between the access device and the SD-WAN controller.

[0141] In some optional implementations, the device management apparatus further includes:

[0142] The control module 306 is used to receive a first instruction from the application controller and send the first instruction to the access device through the SD-WAN edge node to control the access device to execute the first instruction.

[0143] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0144] The equipment management device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0145] The embodiment of the present invention also provides a computer device having the above Figure 5 The device management device shown.

[0146] See also Figure 6 , Figure 6 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 6As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 6 A processor 10 is taken as an example.

[0147] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0148] The memory 20 stores instructions executable by at least one processor 10, so that at least one processor 10 executes the method shown in the above embodiment.

[0149] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0150] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0151] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 6 The example of connecting through bus is taken in the following.

[0152] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0153] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0154] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0155] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A device management method, characterized in that: The method is applied to a software-defined wide area network SD-WAN controller in an Internet of Things management system, wherein the Internet of Things management system further comprises at least one access device connected to the SD-WAN controller, an SD-WAN edge node, and an application server; the method comprises: Get parameter information of access device; Allocating a global ID and an application server to the access device according to the parameter information; Obtaining a mapping relationship between the global ID and the application server address, and sending the mapping relationship to the access device and the application server; Receive data information collected by the access device, and transmit the data information to the application server through the SD-WAN edge node.

2. The method according to claim 1, characterized in that: The receiving the data information collected by the access device and transmitting the data information to the application server through the SD-WAN edge node includes: Acquiring data information collected by the access device; Determining transmission parameters of the data information based on the type of the data information; the transmission parameters include a transmission path and a transmission bandwidth; Based on the transmission parameters, the data information is transmitted to the application server through the SD-WAN edge node.

3. The method according to claim 2, characterized in that The transmitting the data information to the application server through the SD-WAN edge node includes: The SD-WAN edge node processes the data information and forwards the processed data information to the application server; wherein the data processing includes at least one of data encryption, data compression and data cleaning.

4. The method according to any one of claims 1 to 3, characterized in that The acquiring of parameter information of the access device includes: A communication connection is established with the access device, and parameter information of the access device is identified, wherein the parameter information includes a device type and a communication protocol.

5. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: Perform security verification on the access device, and determine whether to generate a key based on the security verification result; wherein the key is used to encrypt interaction data, and the interaction data is interaction data between the access device and the SD-WAN controller.

6. The method according to any one of claims 1 to 3, characterized in that The method further comprises: Receive a first instruction from the application controller, and send the first instruction to the access device through the SD-WAN edge node to control the access device to execute the first instruction.

7. A device management device, characterized in that: The device comprises: An acquisition module is used to obtain parameter information of an access device; An allocation module, configured to allocate a global ID and an application server to the access device according to the parameter information; A mapping module, used to obtain a mapping relationship between the global ID and the application server address, and send the mapping relationship to the access device and the application server; The receiving module is used to receive the data information collected by the access device and transmit the data information to the application server through the SD-WAN edge node.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the device management method according to any one of claims 1 to 6 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the device management method according to any one of claims 1 to 6.

10. A computer program product, characterized in that The device comprises computer instructions, wherein the computer instructions are used to cause a computer to execute the device management method according to any one of claims 1 to 6.

Images