Multi-protocol single sign-on visual design system

Abstract

The invention discloses a multi-protocol single sign-on visual design system. The system comprises a visual general item configuration module and a high-level item configuration module, wherein the general item configuration module comprises a general item determination unit and a general item conversion unit; the advanced item configuration module comprises an SSO session timeout parameter setting unit, a single point exit strategy setting unit, an error processing setting unit, a certificate and key management unit and a log and audit setting unit. According to the invention, the configuration process can be simplified, the learning cost can be reduced, and the configuration efficiency, usability, safety and flexibility of the multi-protocol single-point authentication system can be improved.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and more specifically to a multi-protocol single sign-on visual design system. Background Art

[0002] With the rapid development of information technology, login technology has become the core link to ensure system security and user identity identification. The traditional single sign-on method faces problems such as users needing to remember multiple usernames and passwords and repeated logins, resulting in low efficiency and poor user experience. To solve this problem, multi-protocol single sign-on technology came into being, enabling users to log in seamlessly in multiple systems using a single authentication credential, improving convenience and operational efficiency.

[0003] However, the current multi-protocol single sign-on technology still faces many challenges in practical applications. Traditional single-point authentication systems integrate multiple authentication protocols and rely on complex text configurations or underlying protocol codes for configuration and management, which makes it difficult for non-professional technicians to design and manage authentication processes, and greatly increases learning costs. Faced with cumbersome configuration options and lengthy processes, it is difficult for users to complete the settings efficiently, limiting the system's adaptability to diverse business scenarios.

[0004] In addition, the existing single-point authentication system has shortcomings in collaborative work and is difficult to support efficient cooperation between teams, resulting in hindered project progress and low efficiency.

[0005] To solve the above problems, the present invention proposes a multi-protocol single sign-on visual auxiliary design method. Summary of the invention

[0006] In view of this, the present invention provides a multi-protocol single sign-on visual design system, which aims to innovatively apply design concepts and functional modules to simplify the configuration process, reduce learning costs, and allow non-professionals to easily get started; as well as improve the configuration efficiency, ease of use, security and flexibility of the multi-protocol single-point authentication system to cope with diverse business scenarios and collaborative work needs.

[0007] In order to achieve the above object, the present invention adopts the following technical solution:

[0008] A multi-protocol single sign-on visual design system, including a visual general item configuration module and an advanced item configuration module;

[0009] The general item configuration module includes a general item determination unit and a general item conversion unit;

[0010] The advanced item configuration module includes an SSO session timeout parameter setting unit, a single sign-out policy setting unit, an error handling setting unit, a certificate and key management unit, and a log and audit setting unit.

[0011] Preferably, the common item determination unit is used to configure the service provider and the identity provider, as well as the URL and certificate information corresponding to each.

[0012] Preferably, the certificate information includes: certificate type, certificate content, certificate validity period, certificate issuing authority, encryption algorithm, signature algorithm and identity authentication method.

[0013] Preferably, the general item conversion unit is used to convert the determined general item into text data according to the key-value relationship corresponding to the required protocol.

[0014] Preferably, the text data format is YAML, JSON or CSV; using configuration text data, support exporting to JSON or CSV format, which is convenient for data management and maintenance;

[0015] The preset key-value relationships include:

[0016] The top-level key is the protocol type, the second-level keys are the protocol version and common properties, and the third-level keys are specific properties.

[0017] Preferably, the general item configuration module further includes a configuration information distribution unit for distributing the converted text data to a cloud server to ensure the security and consistency of the configuration information.

[0018] Preferably, the single-point exit strategy setting unit is used to set exit associations and key service indicators of different service providers;

[0019] The key service indicators include error rate and response time.

[0020] The error rate is measured by monitoring the HTTP response code of the service, and tracked and recorded by the monitoring tool APM.

[0021] Response time is measured by monitoring the time it takes the service to process a request, which is monitored and tracked using the monitoring tool Datadog.

[0022] This application integrates monitoring tools and performance monitoring tools to track error rates and response times in real time, ensuring the stable operation of the system and the security of data.

[0023] Preferably, the error handling setting unit is used to customize error information and the corresponding processing flow; the processing flow includes exception capture, error response format, error information display, and providing user operation guidance.

[0024] Preferably, the certificate and key management unit is used for updating, maintaining and tracking the certificate key.

[0025] Preferably, the log and audit setting unit is used to configure the log host IP address, port number, and the log server IP address, port number and log filtering rules.

[0026] To further optimize the above technical solution, the system also includes a visual operation module, which includes:

[0027] A locking unit, used to trigger a locking function on a selected target through a preset operation mode, so as to maintain the locking state of the selected target and provide visual feedback of the node locking state;

[0028] The grouping unit is used to realize visual dynamic grouping and custom configuration between nodes to establish and manage parent-child relationships;

[0029] A business view switching unit is used to realize the detailed display of business protocol nodes and the dynamic switching of business views at different levels through custom operation methods;

[0030] The node viewing unit is used to visually display the protocol type and configuration parameters of the node.

[0031] The multi-protocol single sign-on visual design system disclosed in the present invention has the following beneficial effects compared with the prior art:

[0032] (1) Significantly improve configuration and management efficiency: Through the groundbreaking visual configuration of general items and advanced items, the configuration process of the single sign-on system is simplified, allowing easy addition or modification of protocol types and attributes, greatly improving user operation efficiency while reducing technical barriers and learning costs; and adapting to new protocols or technical changes that may appear in the future, ensuring the long-term effectiveness and advancement of the system.

[0033] (2) Enhance system flexibility and adaptability: The system provides node locking, grouping functions, and custom group configuration, allowing users to make personalized settings based on different business needs, ensuring that the system can adapt to diverse business scenarios.

[0034] This application makes it easy for users to understand and operate through clear description information and intuitive user interface design, reduces the risk of misoperation, and improves the overall user experience. By supporting export functions and cloud storage distribution mechanisms, it promotes communication and collaboration between different roles and significantly improves team work efficiency.

[0035] The multi-protocol single sign-on visual design system in the present invention not only improves the convenience of configuration and management, but also enhances the overall performance and user experience of the system, providing an innovative, efficient and practical solution for the configuration and management of the single sign-on system. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0037] Figure 1 A schematic diagram of the structure of the multi-protocol single sign-on visual design system provided by the present invention;

[0038] Figure 2 It is the visual module process of the general configuration items of the present invention;

[0039] Figure 3 It is a high-level configuration flow chart of the system of the present invention;

[0040] Figure 4 A schematic flow chart of the visualization node group of the present invention;

[0041] Figure 5 It is a schematic diagram of business view switching of the present invention. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] The embodiment of the present invention discloses a multi-protocol single sign-on visual design system, which is dedicated to solving the deficiencies of the existing single sign-on system in terms of configuration complexity, visual support and flexibility.

[0044] In this embodiment, a multi-protocol single sign-on visual design system, such as Figure 1 As shown, it includes a general item configuration module and an advanced item configuration module;

[0045] The general item configuration module focuses on the common attributes of different protocols, confirms the configuration management text format, and stores it in the server module;

[0046] In one embodiment, the general item configuration module includes a general item determination unit and a general item conversion unit;

[0047] The common item determination unit is used to configure the basic parameters required for user authentication, such as the service provider (SP) and identity provider (IdP), as well as their corresponding URLs and certificate information. The protocol type can be SAML or OAuth2, and the protocol version can be expressed as SAML2.0 or OAuth2.0. The URL of the service provider points to its authentication interface, and the URL of the identity provider points to its corresponding authentication service. The certificate information includes the certificate type (such as X.509), certificate content (expressed in PEM format), certificate validity period, certificate issuing authority, encryption algorithm (such as RSA or AES), signature algorithm (such as SHA-256), and authentication method (such as username / password, SAML assertion or OAuth token).

[0048] The general item conversion unit is used to convert the determined general items into text data according to a preset key-value relationship to realize the storage and management of different protocol configuration information.

[0049] In this embodiment, the text data format supports YAML, and supports exporting YAML data to JSON or CSV format to meet the needs of other business lines. Further, confirm the required protocol, clarify the common attributes, and confirm the key-value relationship of the protocol to distinguish between common attributes and unique attributes, ensure the structuring and scalability of the configuration items, and facilitate management and maintenance;

[0050] In this embodiment, the preset key-value relationship includes:

[0051] The protocol type as a top-level key, such as SAML or OAuth2;

[0052] The protocol version is used as a secondary key, such as saml:version:2.0;

[0053] Common attributes as secondary keys, such as saml:sp_url:"https: / / example.com / sp";

[0054] Specific attributes serve as tertiary keys, such as

[0055] saml:nameid_format:"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress".

[0056] To further optimize the above technical solution, the general item configuration module also includes a configuration information distribution unit, which is used to distribute the converted text data to a cloud server, such as AWS S3, Azure Blob Storage or Google Cloud Storage, so as to ensure the security of the configuration information with the help of the powerful security measures of the cloud storage service, such as access control, encryption, etc.; at the same time, ensure consistency when accessing the project at different locations.

[0057] In one embodiment, the advanced item configuration module includes an SSO session timeout parameter setting unit, a single sign-out policy setting unit, an error handling setting unit, a certificate and key management unit, and a log and audit setting unit.

[0058] SSO session timeout parameter setting unit: used to provide an intuitive design interface, allowing designers to set SSO session timeout parameters. Preferably, the interface includes a slider or input box for defining a specific time for the session timeout, such as 15 minutes, 30 minutes or longer, which determines how long it takes for a user to be automatically logged out of the system after inactivity.

[0059] Single-point exit strategy setting unit: used to set the exit association relationship and key service indicators of different service providers;

[0060] The exit association relationship between different service providers determines whether the user will exit all other service providers at the same time when exiting one service provider;

[0061] For the login service of the Internet customer base, the key service indicators include error rate and response time. Designers need to set specific goals, such as an error rate of less than 1% in the past 5 minutes, or 95% of the response time in the past month is no more than 5 seconds. The error rate can be measured by monitoring the HTTP response code of the service. 429 or 5XX status codes are usually judged as unavailable services. System integration monitoring tools APM tools track and record error rates in real time; response time is measured by monitoring the time it takes for the service to process requests, usually in milliseconds. Performance monitoring tools (such as Datadog) can be used to track and record response time.

[0062] Error handling setting unit: used to customize error information and corresponding processing flow; the processing flow includes exception capture, error response format, error information display, and providing user operation guidance.

[0063] This unit can define the error handling process for each link of the authentication and authorization process. That is, when an error occurs, its handling process can be configured and defined, such as setting a URL to point to an error handling page, or providing information about the error and possible solutions. At the same time, the system supports custom error information. In applications with front-end and back-end separation architecture, the back-end can use @ControllerAdvice and @ExceptionHandler annotations for unified exception handling. When an exception occurs, it captures the exception and returns a JSON format error response containing an error code and description information; in the server-side rendering scenario, you can create a page with a specific error code (such as 404.html, 500.html, etc.) in the classpath: / templates / error / directory or use a general error page (such as error.html) to display the error information. These pages should provide useful information and guidance to help users understand the error and the solution steps. In addition, you can set up a variety of asynchronous checks to implement custom error prompts. For example, when a user registers, if the input account is detected to already exist, the system can immediately display a message on the front end and provide a link to guide the user to operate, improving the user experience.

[0064] Certificate and key management unit: used for certificate key update maintenance and tracking reminders. This embodiment supports certificate management of multi-protocol content of the project, including certificate key update maintenance, and tracks the validity period of certificates within the project, reminding administrators to update certificates before they expire, so as to unify management and auditing. Various settings ensure the robustness and robustness of the multi-protocol design system, and can also access third-party open source certificate maintenance systems.

[0065] Log and audit setting unit: used to configure the log host IP address, port number, log server IP address, port number and log filtering rules.

[0066] Considering various log and audit situations, configure network devices (such as switches and routers) to send logs to the log audit platform, which involves setting the log host IP address and port number, enabling necessary log services, and using NTP services to synchronize timestamps. Configure the log server in the log audit platform, including the IP address, port number, and log filtering rules, to ensure that the log server can receive and process logs from network devices.

[0067] In order to further optimize the above technical solution, reasonable configuration item verification is performed on the configuration items made by the user. For example, manual review can be used to entrust other business personnel to verify whether the configuration items fully meet the development requirements so as to facilitate further modification or release.

[0068] In one embodiment, the system further includes a visualization operation module.

[0069] The visual operation module includes:

[0070] Locking unit: used to trigger the locking function of the selected target through a preset operation mode to maintain the locking state of the selected target and provide visual feedback of the node locking state;

[0071] In the design interface of the present invention, the user can select the node to be locked, right-click the node and select the "lock node" option, or use the lock button provided on the interface to lock the node. After locking, the node icon will change (such as changing the color of the component node range), intuitively displaying its status, and the node cannot be dragged or edited in any way, effectively preventing misoperation.

[0072] Grouping unit: used to realize visual dynamic grouping and custom configuration between nodes to establish and manage parent-child relationships;

[0073] In an exemplary embodiment, users can drag child nodes of the same type into the corresponding group node area to create a parent-child relationship. The system stores the parent-child relationship in a tree structure to facilitate management and maintenance. For example, in the example of dragging a user child node, it is determined whether it overlaps with the outer judgment box of other nodes of the same type. If the judgment is successful, the grouping is successful. At the same time, users can flexibly customize the group relationship in the configuration panel and implement customized group configuration to cope with the complex business needs of different projects. All operations can be completed intuitively through the visual interface.

[0074] In a preferred embodiment, it also includes an export unit: used to export the visualization configuration as a schematic diagram to facilitate viewing and business distribution between different roles (such as operation and maintenance, security experts, etc.).

[0075] Furthermore, the business view switching unit is used to realize the detailed display of business protocol nodes and the dynamic switching of different levels of business views through a custom operation mode; in one embodiment, the user refines the business protocol nodes within the visible range and switches the business view by rolling the wheel. For example, in the example, the user group can be enlarged by the wheel to view more advanced business details.

[0076] The node viewing unit is used to visualize the protocol type and configuration parameters of the node. In this embodiment, the user can right-click on the node to view the detailed information such as the protocol type and configuration parameters of the node, so as to quickly understand the node function and view the proprietary details of the protocol without going deep into the underlying code to quickly understand the existing configuration.

[0077] This application has significant advantages in single sign-on system configuration and management, including:

[0078] The visual management of common configuration items and the intuitive design of advanced configuration items improve configuration efficiency, allowing users to quickly understand and operate the authentication process. The visual design and drag-and-drop operation simplify the configuration process, allowing users to quickly complete the configuration without having to deeply understand the details of the underlying protocol, reducing the technical threshold and learning cost.

[0079] In addition, the system supports node locking, grouping functions and custom group configuration, which enhances the flexibility and adaptability of the system. Users can make personalized settings based on specific business needs to meet the needs of different business scenarios.

[0080] This solution improves the usability of the system. Through clear description information and intuitive user interface, users can more easily understand and operate various configurations, reducing the risk of misoperation and improving user experience. The export function and cloud storage distribution mechanism provided by the system facilitate communication and collaboration between different roles, further improving the work efficiency of the team. By integrating monitoring tools and performance monitoring tools, error rates and response times are tracked and recorded in real time to ensure the stability and security of the system.

[0081] Finally, configuration text data is used and supported to be exported to JSON or CSV format, which facilitates data management and maintenance. The configuration information is stored in the cloud server, and the security and accessibility of cloud services are utilized to ensure the security and consistency of the data, while supporting remote access and collaboration. The system design allows easy addition or modification of protocol types and attributes, so that it can adapt to new protocols or technology changes that may appear in the future. By providing detailed information on protocol types and configuration parameters, it helps users make more informed configuration decisions, thereby improving the operation quality and efficiency of the entire system.

[0082] This application can be applied to the power industry and other scenarios that require multi-protocol single sign-on. The following uses the power system as an example to illustrate the design process.

[0083] In the power industry, the power system involves multiple business areas, and has extremely high requirements for security and operational convenience. Multi-protocol single sign-on technology provides a unified identity authentication entrance for the power industry, ensuring that all types of users can quickly and securely access power-related application systems.

[0084] In the equipment monitoring system of a certain power company, multiple subsystems are included for monitoring and management of equipment in different areas, such as substation equipment monitoring subsystem, transmission line equipment monitoring subsystem, etc. These subsystems were previously logged in independently, which brought inconvenience to the staff and complicated management. The multi-protocol single sign-on visual auxiliary design system of the present invention is now used for unified identity authentication configuration.

[0085] 1. Configure common items through the common item configuration module;

[0086] First, if Figure 2 , confirm the common configuration items. Determine that the service provider (SP) is the login entry URL of each device monitoring subsystem, and the identity provider (IdP) is the enterprise's unified identity authentication server URL. The certificate information uses an X.509 certificate, and the certificate content is imported in PEM format. The certificate validity period is set to 1 year. The certificate issuing authority is the enterprise's internal certification center, the encryption algorithm is RSA, the signature algorithm is SHA-256, and the authentication method uses a username / password combined with a SAML assertion.

[0087] Next, configure the text data and write the configuration file in YAML format to store the above information according to the protocol type (SAML), version (SAML2.0), and the key-value relationship between common attributes and specific attributes.

[0088] Finally, the configuration information is distributed to the enterprise's internal cloud server (such as private cloud storage based on OpenStack) to ensure that the login configuration information is consistent and secure when different monitoring sites access the device monitoring system.

[0089] 2. Further configure through the advanced configuration module, such as Figure 3 ,include:

[0090] In session management configuration, according to the operational characteristics of power equipment monitoring, the SSO session timeout is set to 30 minutes. This is because staff may have short pauses when operating equipment monitoring, but there will usually be continuous operations within 30 minutes.

[0091] The single-point exit policy setting ensures that when a staff member exits from a subsystem, all other related equipment monitoring subsystems are automatically exited to ensure system security. For key services and indicators (SLI), the error rate target is set to be less than 0.5% in the past 10 minutes (measured by monitoring the HTTP response code of the service, 429 or 5XX status codes are judged as service unavailable, and real-time tracking is performed using monitoring tools developed within the enterprise), and the response time target is that 95% of the response times in the past week do not exceed 3 seconds (measured by monitoring the time it takes for the service to process requests, and recorded using performance monitoring tools).

[0092] Set up an error handling mechanism. During the authentication and authorization process, when a username / password error occurs, configure it to pop up a prompt box to display the error information and provide a password retrieval link; when the SAML assertion verification fails, configure it to jump to a special error handling page, detailing the possible causes and solutions. In the front-end and back-end separation architecture, the back-end uses @ControllerAdvice and @ExceptionHandler annotations for unified exception handling to ensure that the error response format returned to the front-end is standardized and contains detailed error information.

[0093] Certificate and key management configuration, regular update of certificate keys (once every 6 months), and reminder of renewal of administrators through the internal corporate email system one month before the certificate expires. At the same time, access to the certificate maintenance system developed within the enterprise facilitates unified management and audit of certificate-related operations.

[0094] Implement the log and audit configuration, configure network devices (such as switches and routers connected to the device monitoring subsystem) to send logs to the internal log audit platform of the enterprise. Set the log host IP address to 192.168.10.10, the port number to 514, and enable the Syslog service. Use the NTP service to synchronize timestamps to ensure accurate log time. Configure the corresponding log server in the log audit platform, set the IP address to 192.168.10.20, the port number to 514, and set log filtering rules to only receive and process log information related to the device monitoring system.

[0095] Configuration item verification: For user configuration items, manual review is adopted, and senior technical personnel from the equipment management department verify whether the configuration items meet the development requirements of the equipment monitoring system. If any problems are found, they will be modified and released in a timely manner.

[0096] 3. Use the visual operation module for visual management, including:

[0097] Node lock: used to lock important system configuration nodes, such as identity provider nodes. After completing the initial configuration, the staff right-clicks the identity provider node and selects "Lock Node". The node icon changes color to indicate that it has been locked to prevent accidental modification.

[0098] Group functions, such as Figure 4 As shown, it is used to drag different types of user nodes (such as operation and maintenance personnel user nodes, management personnel user nodes, etc.) to the corresponding group node area (such as "operation and maintenance personnel group" and "management personnel group") to create a parent-child relationship. The system is stored in a tree structure to facilitate subsequent permission management and user classification statistics. In the custom group configuration, according to the organizational structure and business needs of the power company, create custom groups such as "substation equipment operation group" and "transmission line equipment operation group", and flexibly configure their association relationships. For example, set the "substation equipment operation group" to only access the relevant functions of the substation equipment monitoring subsystem.

[0099] The export function is used to export the visualization configuration as a schematic diagram and provide it to the enterprise's security audit department for review to facilitate security assessment and compliance inspection.

[0100] Business view switching allows staff to view business protocol nodes at different levels. Figure 5When viewing a user group node, you can use the scroll wheel to zoom in to view the permission configuration details of specific users under the user group, as well as the access relationship with related device monitoring subsystems.

[0101] For node viewing, staff can right-click a node (such as the device monitoring subsystem node) to view detailed information such as the node's protocol type (SAML), configuration parameters (such as login interface URL, interaction settings with the identity provider, etc.), and quickly understand the system configuration without having to delve into the underlying code.

[0102] This application provides better solutions for the power industry and other fields through an innovative multi-protocol single sign-on visual auxiliary design system, realizes efficient, secure and flexible single sign-on configuration of power enterprise equipment monitoring systems, improves staff operating efficiency, and enhances the convenience and security of system management.

[0103] This application pioneered the introduction of visual design, allowing users to quickly and easily complete configuration work without delving into the complex details of the underlying protocol. This design pattern greatly improves configuration efficiency, significantly reduces learning costs, breaks the traditional single sign-on system configuration's high reliance on professional knowledge, and allows non-professionals to operate smoothly.

[0104] At the same time, this application provides visual node locking, grouping functions and custom group configuration, which enhances the flexibility and adaptability of the system, allowing users to make personalized settings according to specific business needs to meet the needs of different business scenarios.

[0105] This patent seeks to protect this systematic technical solution rather than a single functional module.

[0106] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0107] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A multi-protocol single sign-on visual design system, characterized in that: Includes visual general item configuration module and advanced item configuration module; The general item configuration module includes a general item determination unit and a general item conversion unit; The advanced item configuration module includes an SSO session timeout parameter setting unit, a single sign-out policy setting unit, an error handling setting unit, a certificate and key management unit, and a log and audit setting unit.

2. The visual design system according to claim 1, characterized in that: The general item determination unit is used to configure the service provider and the identity provider, as well as their corresponding URLs and certificate information.

3. The visual design system according to claim 2, characterized in that: Certificate information includes: certificate type, certificate content, certificate validity period, certificate issuing authority, encryption algorithm, signature algorithm, and identity authentication method.

4. The visual design system according to claim 1, characterized in that: The general item conversion unit is used to convert the determined general item into text data according to the key-value relationship corresponding to the required protocol.

5. The visual design system according to claim 4, characterized in that: The text data format is YAML, JSON or CSV; The preset key-value relationships include: The top-level key is the protocol type, the second-level keys are the protocol version and common properties, and the third-level keys are specific properties.

6. The visual design system according to claim 1, characterized in that: The general item configuration module also includes a configuration information distribution unit for distributing the converted text data to the cloud server to ensure the security and consistency of the configuration information.

7. The visual design system according to claim 1, characterized in that: The single-point exit strategy setting unit is used to set the exit association relationship and key service indicators of different service providers; The key service indicators include error rate and response time.

8. The visual design system according to claim 1, characterized in that: The error handling setting unit is used to customize error information and corresponding processing procedures.

9. The visual design system according to claim 1, characterized in that: The log and audit setting unit is used to configure the log host IP address, port number, log server IP address, port number and log filtering rules.

10. The visual design system according to claim 1, characterized in that: It also includes a visual operation module, which includes: A locking unit, used to trigger a locking function on a selected target through a preset operation mode, so as to maintain the locking state of the selected target and provide visual feedback of the node locking state; The grouping unit is used to realize visual dynamic grouping and custom configuration between nodes to establish and manage parent-child relationships; A business view switching unit is used to realize the detailed display of business protocol nodes and the dynamic switching of business views at different levels through custom operation methods; The node viewing unit is used to visually display the protocol type and configuration parameters of the node.

Images