Double-post operation and maintenance operation method, system, equipment and medium

Abstract

The invention belongs to the technical field of safety operation and maintenance, and provides a double-post operation and maintenance operation method, system and device and a medium, and the method comprises the steps: receiving a to-be-executed instruction sent by an operator client; analyzing the risk level of the to-be-executed instruction; sending the to-be-executed instruction and the risk level to an inspector client, so that the inspector client checks the to-be-executed instruction according to the risk level; receiving an audit result of the inspector client, and sending a to-be-executed instruction to the remote server through the SSH client and executing the to-be-executed instruction; clients are distributed to an operator and an inspector, roles of the operator and the inspector are clearly separated, and each instruction input by the operator is required to be checked by the inspector, so that each operation is ensured to be subjected to a strict double-confirmation process before execution, the risk of misoperation is reduced, the transparency of an operation and maintenance process is enhanced, and the operation and maintenance efficiency is improved. Therefore, the system is safer when processing sensitive operation, and the problems of misoperation and insufficient technical supervision caused by human factor influence are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of safe operation and maintenance, and in particular relates to a dual-post operation and maintenance method, system, equipment and medium. Background Art

[0002] In modern operation and maintenance management, as the complexity and criticality of information systems continue to increase, the security of operation and maintenance operations has become a matter of great concern to enterprises and organizations. Especially in large-scale systems, operation and maintenance personnel may need to perform high-risk operations, such as deleting or modifying system files or terminating critical processes. If these operations are performed improperly, it may cause system crashes, data loss, and even serious business interruptions. In order to solve these problems, the traditional single-person operation and maintenance operation mode has become unsafe and inefficient, so the dual-post operation and maintenance mode has gradually become a trend.

[0003] Dual-post operation and maintenance is a management model in which two operation and maintenance personnel jointly complete the operation. In this model, the operator is responsible for inputting commands and performing specific operations, while the inspector is responsible for supervising the operator's behavior and reviewing and confirming his instructions when necessary. This dual supervision mechanism can effectively reduce the accident rate of high-risk operations and improve the stability and safety of system operation. However, traditional dual-post operation and maintenance usually relies on screen sharing or manual observation, which is easily affected by human factors, such as the operator's operation speed is too fast, making it impossible for the inspector to intervene in time. Summary of the invention

[0004] In view of the problems in the background technology, the present invention proposes a dual-post operation and maintenance method, system, equipment and medium.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions:

[0006] In a first aspect, the present disclosure proposes a dual-post operation and maintenance method, comprising:

[0007] Receive instructions to be executed sent by the operator client;

[0008] Analyzing the risk level of the pending instruction;

[0009] Sending the pending instruction and the risk level to the inspector client, so that the inspector client reviews the pending instruction according to the risk level;

[0010] Receive the audit result of the inspector client, and send the to-be-executed instructions to the remote server through the SSH client for execution.

[0011] Preferably, before receiving the to-be-executed instruction sent by the operator client, the method further includes: confirming the operator client and the inspector client.

[0012] Preferably, the confirmation operator client and the inspector client include:

[0013] Confirming the login credentials of the first user, creating a secure operation room, and generating a first operation room ID;

[0014] confirming a second operation room ID input by a second user, and establishing a connection between the first user and the second user;

[0015] Confirm the clients of the first user and the second user; wherein the clients are operator clients or inspector clients.

[0016] Preferably, the confirming the login credentials of the first user, creating a secure operation room, and generating a first operation room ID includes:

[0017] Receive the login credentials of the first user, determine whether the login credentials are the same as the login credentials pre-stored in the database, and if they are the same, create a security operation room with corresponding functions according to the authority of the first user, and generate a first operation room ID.

[0018] Preferably, the confirming the login information of the second user and establishing a connection between the first user and the second user includes:

[0019] A second operation room ID input by a second user is received, and it is determined whether the first operation room ID is the same as the second operation room ID. If they are the same, a connection between the first user and the second user is established.

[0020] Preferably, the connection between the first user and the second user includes: a voice connection and a picture connection.

[0021] Preferably, the method further comprises: recording the operator client operation information, the inspector client operation information, the voice information and the screen information.

[0022] Preferably, the risk levels include: ordinary instructions and high-risk instructions;

[0023] The analyzing the risk level of the instruction to be executed includes:

[0024] It is determined whether the instruction to be executed is the same as an instruction in a predefined high-risk instruction set. If so, the instruction to be executed is a high-risk instruction; if not, the instruction to be executed is a common instruction.

[0025] Preferably, the method further comprises: receiving the execution result of the SSH client, and displaying it on the operator client and the inspector client.

[0026] In a second aspect, the present disclosure proposes a dual-post operation and maintenance operating system, including:

[0027] An instruction receiving module, used to receive instructions to be executed sent by the operator client;

[0028] An instruction analysis module, used to analyze the risk level of the instruction to be executed;

[0029] An instruction review module, used for sending the instruction to be executed and the risk level to the inspector client, so that the inspector client reviews the instruction to be executed according to the risk level;

[0030] The instruction execution module is used to receive the audit result of the inspector client, send the to-be-executed instruction to the remote server through the SSH client and execute it.

[0031] In a third aspect, the present disclosure proposes a device including a memory and a processor, wherein the memory stores computer instructions that can be executed on the processor, and when the processor executes the computer instructions, a dual-post operation and maintenance method described in the first aspect is executed.

[0032] In a fourth aspect, the present disclosure proposes a computer-readable storage medium on which computer instructions are stored. When the computer instructions are executed, a dual-post operation and maintenance method described in the first aspect can be implemented.

[0033] Beneficial effects of the present invention:

[0034] The method of the present invention allocates a dedicated client to each operator and inspector, and clearly separates the roles of the two, requiring that each instruction input by the operator must be reviewed by the inspector, thereby ensuring that each operation is subject to a strict double confirmation process before execution, reducing the risk of misoperation, enhancing the transparency of the operation and maintenance process, making the system safer when processing sensitive operations, and solving the problems of operational errors and insufficient technical supervision caused by human factors in the prior art.

[0035] Other features and advantages of the present invention will be described in the following description, and partly become obvious from the description, or be understood by implementing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0037] Figure 1 The process of the dual-post operation and maintenance method of the present invention is shown Figure 1 ;

[0038] Figure 2 The process of the dual-post operation and maintenance method of the present invention is shown Figure 2 ;

[0039] Figure 3 The framework diagram of the dual-post operation and maintenance operating system of the present invention is shown;

[0040] Figure 4 A schematic diagram of the device structure of the present invention is shown. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] Reference Figure 1 and Figure 2 As shown, a method for supporting dual-post operation and maintenance includes the following steps:

[0043] S11, receiving the to-be-executed instruction sent by the operator client;

[0044] An instruction is a series of commands or actions entered by maintenance personnel to complete a specific task.

[0045] Specifically, the operator enters the to-be-executed instruction in the instruction input box and submits the to-be-executed instruction by clicking the send button. At this stage, the to-be-executed instruction is not directly sent to the remote server.

[0046] S12. Analyze the risk level of the instructions to be executed;

[0047] Among them, risk levels include ordinary instructions and high-risk instructions.

[0048] Specifically, analyzing the risk level of the instruction to be executed includes: determining whether the instruction to be executed is the same as an instruction in a predefined high-risk instruction set, if so, the instruction to be executed is a high-risk instruction, if not, the instruction to be executed is a common instruction. Further, the system first loads the high-risk instruction set, then returns a high-risk instruction list, and then uses a regular expression to traverse the instructions in the high-risk instruction list, and matches them with the input instruction to be executed, to detect whether there is a high-risk instruction in the instruction to be executed.

[0049] The high-risk instruction set is defined in advance by the operation and maintenance personnel and contains a list of commands that may have a significant impact on system stability and security, ensuring that these potentially dangerous operations can be identified in advance and handled with caution during operation and maintenance operations. It is understandable that the operation and maintenance personnel can dynamically adjust the high-risk instruction set. For example, the inspector adds new high-risk instructions or removes old instructions that are no longer applicable.

[0050] S13, sending the instructions to be executed and the risk level to the inspector client, so that the inspector client reviews the instructions to be executed according to the risk level;

[0051] After the pending instruction is analyzed, it will be transmitted to the inspector interface, at which time the inspector can see the complete content of the pending instruction and the risk level of the pending instruction. The inspector judges the safety of the pending instruction based on the content of the pending instruction and the risk level of the pending instruction. For high-risk instructions, the inspector can ask the operator to provide more information. For example, the operator can be asked to provide more information by voice. If the inspector believes that the pending instruction is safe, he can choose to approve it. If there is any doubt, the pending instruction can be rejected.

[0052] S14, receiving the audit result from the inspector client, sending the to-be-executed instructions to the remote server through the SSH client and executing them.

[0053] Specifically, when the inspector agrees to execute the pending instructions, the system will transfer the pending instructions to the remote server through the SSH client and execute them.

[0054] By assigning a dedicated client to each operator and inspector and clearly separating the two roles, each instruction entered by the operator is required to be reviewed by the inspector, ensuring that each operation goes through a strict double confirmation process before execution, reducing the risk of misoperation, enhancing the transparency of the operation and maintenance process, and making the system safer when handling sensitive operations. It solves the problems of operational errors and insufficient technical supervision caused by human factors in existing technologies.

[0055] As a preferred embodiment of the present disclosure, before step S11, receiving the to-be-executed instruction sent by the operator client, the method further includes: S10, confirming the operator client and the inspector client, specifically including the following steps:

[0056] S101, confirming the login credentials of the first user, creating a secure operation room, and generating a first operation room ID;

[0057] Receive the login credentials (such as user name and password) of the first user, determine whether the login credentials are the same as the login credentials pre-stored in the database, and if they are the same, create a security operation room with corresponding functions according to the first user's authority, and generate a first operation room ID. Specifically, encrypt the password using SHA-256 and compare it with the stored password in the database. After the comparison is successful, allow the first user to log in, and obtain the list of accessible operation and maintenance machines from the database according to the first user's authority, and dynamically display it on the front end. After the first user selects the server to be operated according to the operation and maintenance machine list, create an operation room and generate a unique first operation room ID.

[0058] Through the virtualized safe operation room, technical support is provided for dual-post operation and maintenance, which can effectively improve the safety of operations and reduce the potential risks brought about by a single operator executing high-risk instructions.

[0059] S102, confirming the second operation room ID input by the second user, and establishing a connection between the first user and the second user;

[0060] The second operation room ID input by the second user is received, and it is determined whether the first operation room ID is the same as the second operation room ID. If they are the same, a connection between the first user and the second user is established. Specifically, the system checks whether the second operation room ID input by the second user is valid, and determines whether the first operation room ID is the same as the second operation room ID. Only when the correct operation room ID is matched, the operation and maintenance personnel can enter the safe operation room.

[0061] Furthermore, the connection between the first user and the second user includes: voice connection and screen connection. Voice connection enables real-time audio dialogue between the inspector and the operator, ensuring that they can exchange opinions at any time when executing high-risk instructions. Screen connection is mainly used for the inspector and the operator to share screen content in real time, such as showing a specific interface or the content of the instructions to be executed, making it easier to convey complex instructions to be executed.

[0062] S103. Confirm the client of the first user and the second user; wherein the client is an operator client or an inspector client.

[0063] When both the first user and the second user enter the safety operation room, the system will ask the first user and the second user to select a role (operator or inspector). The system will assign different permission functions to the first user and the second user according to the roles selected by the first user and the second user. For example, the operator has an instruction input box, and the inspector has an instruction review function.

[0064] As a preferred embodiment of the present disclosure, the method further includes: when the remote server completes the execution of the instruction to be executed, the remote server returns the execution result of the instruction to be executed. For example, the status information of the execution of the instruction to be executed, the data generated or the error message, etc. Specifically, the SSH client receives the execution result and returns it to the client screen of the operator and the inspector synchronously. When the operation and maintenance is completed, the SSH client automatically closes the existing SSH connection and clears the execution result. If one of the operator or the inspector exits early, the system will suspend the ongoing operation and wait for the other party to reconnect. During this period, the system will keep the current state unchanged so that the unfinished task can be continued after the connection is restored. If the connection is not restored after exceeding the preset time limit (specified timeout), the system will automatically disband the safety operation room and record the operation and exit in detail. After the operation and maintenance operation is completed, one party needs to first make a disbandment request, and the safety operation room will be officially disbanded after the other party confirms and agrees.

[0065] As a preferred embodiment of the present disclosure, the method further includes: recording the operation information of the operator client, the operation information of the inspector client, the voice information and the screen information. Specifically, all information generated during the operation and maintenance process is recorded and saved. For example, the operation information of the operator client, the operation information of the inspector client, the voice communication content of both parties and the screen information are recorded in detail.

[0066] Based on the same inventive concept, Figure 3 As shown, the present disclosure also proposes a dual-post operation and maintenance operating system, including:

[0067] An instruction receiving module, used to receive instructions to be executed sent by the operator client;

[0068] An instruction analysis module, used to analyze the risk level of instructions to be executed;

[0069] An instruction review module is used to send the instructions to be executed and the risk level to the inspector client, so that the inspector client can review the instructions to be executed according to the risk level;

[0070] The instruction execution module is used to receive the audit results of the inspector client, send the instructions to be executed to the remote server through the SSH client and execute them.

[0071] Furthermore, the dual-post operation and maintenance operating system also includes:

[0072] The user management and permission module is used to receive the login credentials of the logged-in user, determine whether the login credentials are the same as the login credentials pre-stored in the database, and if they are the same, create a security operation room with corresponding functions according to the permissions of the logged-in user and generate an operation room ID.

[0073] The operation and maintenance operation recording module is used to record the operator client operation information, the inspector client operation information, the voice information and the screen information.

[0074] Voice call module, used for real-time voice calls between inspectors and operators.

[0075] The terminal command echo module is used to receive the execution results of the SSH client and display them on the operator client and the inspector client.

[0076] Based on the same inventive concept, Figure 4 As shown, the present disclosure also proposes a device, including a memory and a processor, wherein the memory stores computer instructions that can be executed on the processor, and the processor executes the above-mentioned dual-post operation and maintenance method when executing the computer instructions.

[0077] Based on the same inventive concept, the present disclosure also proposes a computer-readable storage medium on which computer instructions are stored. When the computer instructions are executed, the above-mentioned dual-post operation and maintenance method can be implemented.

[0078] Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory.

[0079] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0080] Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent substitutions for some of the technical features therein; and these modifications or substitutions do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A dual-post operation and maintenance method, characterized in that: include: Receive instructions to be executed sent by the operator client; Analyzing the risk level of the pending instruction; Sending the pending instruction and the risk level to the inspector client, so that the inspector client reviews the pending instruction according to the risk level; Receive the audit result of the inspector client, and send the to-be-executed instructions to the remote server through the SSH client for execution.

2. A dual-post operation and maintenance method according to claim 1, characterized in that: Before receiving the to-be-executed instruction sent by the operator client, the method further includes: confirming the operator client and the inspector client.

3. A dual-post operation and maintenance method according to claim 2, characterized in that: The confirmation operator client and the inspector client include: Confirming the login credentials of the first user, creating a secure operation room, and generating a first operation room ID; confirming a second operation room ID input by a second user, and establishing a connection between the first user and the second user; Confirm the clients of the first user and the second user; wherein the clients are operator clients or inspector clients.

4. A dual-post operation and maintenance method according to claim 3, characterized in that: The confirming the login credentials of the first user, creating a secure operation room, and generating a first operation room ID includes: Receive the login credentials of the first user, determine whether the login credentials are the same as the login credentials pre-stored in the database, and if they are the same, create a security operation room with corresponding functions according to the authority of the first user, and generate a first operation room ID.

5. A dual-post operation and maintenance method according to claim 4, characterized in that: The confirming the login information of the second user and establishing a connection between the first user and the second user includes: A second operation room ID input by a second user is received, and it is determined whether the first operation room ID is the same as the second operation room ID. If they are the same, a connection between the first user and the second user is established.

6. A dual-post operation and maintenance method according to claim 3, characterized in that: The connection between the first user and the second user includes: a voice connection and a picture connection.

7. A dual-post operation and maintenance method according to claim 6, characterized in that: The method further includes: recording the operator client operation information, the inspector client operation information, the voice information and the screen information.

8. A dual-post operation and maintenance method according to claim 1, characterized in that: The risk levels include: normal instructions and high-risk instructions; The analyzing the risk level of the instruction to be executed includes: It is determined whether the instruction to be executed is the same as an instruction in a predefined high-risk instruction set. If so, the instruction to be executed is a high-risk instruction; if not, the instruction to be executed is a common instruction.

9. A dual-post operation and maintenance method according to claim 1, characterized in that: The method further includes: receiving an execution result of the SSH client and displaying the result on the operator client and the inspector client.

10. A dual-post operation and maintenance operating system, characterized in that: include: An instruction receiving module, used to receive instructions to be executed sent by the operator client; An instruction analysis module, used to analyze the risk level of the instruction to be executed; An instruction review module, used for sending the instruction to be executed and the risk level to the inspector client, so that the inspector client reviews the instruction to be executed according to the risk level; The instruction execution module is used to receive the audit result of the inspector client, send the to-be-executed instruction to the remote server through the SSH client and execute it.

11. A device comprising a memory and a processor, wherein the memory stores computer instructions that can be executed on the processor, characterized in that: When the processor runs the computer instructions, it executes the dual-post operation and maintenance method described in any one of claims 1 to 9.

12. A computer-readable storage medium having computer instructions stored thereon, characterized in that: When the computer instructions are executed, a dual-post operation and maintenance method as described in any one of claims 1 to 9 can be implemented.

Images