Method, System and Medium for Character Protocol Playback Based on Operation and Maintenance Audit System

Abstract

The present invention relates to the technical field of operation and maintenance audit systems, and discloses a method, a system and a medium for character protocol playback based on an operation and maintenance audit system. After successful security verification, the playback module, according to the target protocol format, identifies the character protocol representing the target operation from the index file and the data file from the operation and maintenance audit system, and sends the uplink and downlink data of the corresponding character protocol to the terminal emulator. The terminal emulator renders the received uplink and downlink data of the corresponding character protocol to complete the playback. It realizes data parsing on the playback server of the playback module. At the same time, by identifying the target operation and obtaining the corresponding data, it realizes positioning key operations during playback and skipping insignificant idle time periods, and solves the technical problems of low retrieval efficiency when playing back a large character protocol video file and easy collapse of parsing data in the front-end browser.

Description

Technical Field

[0001] The present invention relates to the technical field of operation and maintenance auditing, and specifically, to a method, system, and medium for character protocol playback based on an operation and maintenance auditing system. Background Art

[0002] When using a bastion host system for operation and maintenance auditing, auditors need to play back the videos of users to further confirm whether there are any risky operations by the users. In the prior art, usually when recording the screen, a video file of the character protocol and a related index file are generated by a screen recording software. Then, when playback is required, the index file is retrieved to obtain the specified character protocol video file. Finally, the character protocol video file is parsed and rendered in a front-end browser to complete the video playback.

[0003] However, when adopting the above technology, when playing back some sessions with a long operation time, most of the time there is no operation by anyone, which will occupy a lot of storage space and resources, and the retrieval efficiency is also low. In addition, since the character protocol file is parsed in the front-end browser, when playing back a large character protocol file, the front-end browser will crash. And since the operation and maintenance auditing system needs to record the screens of all operations of the operation and maintenance personnel, the character protocol video files are generally large, and the character protocol video files corresponding to sessions with a long operation time are even larger, so the probability of the front-end browser crashing is relatively high, affecting the auditing efficiency.

[0004] Therefore, the current method for character protocol playback in an operation and maintenance auditing system has technical problems of low retrieval efficiency and easy crashing of parsing data in the front-end browser when playing back a large character protocol video file. Summary of the Invention

[0005] The purpose of the present invention is to provide a method, system, and medium for character protocol playback based on an operation and maintenance auditing system. The method, after successful security verification, the playback module, according to the target protocol format, identifies the character protocol representing the target operation from the index file and data file from the operation and maintenance auditing system, and sends the upstream and downstream data of the corresponding character protocol to the terminal emulator. The terminal emulator renders the received upstream and downstream data of the corresponding character protocol to complete the playback, realizing data parsing on the playback server of the playback module. At the same time, by identifying the target operation and obtaining the corresponding data, it realizes positioning key operations during playback and skipping irrelevant idle time periods, solving the technical problems of low retrieval efficiency and easy crashing of parsing data in the front-end browser when playing back a large character protocol video file.

[0006] The present invention is realized by the following technical solutions:

[0007] In a first aspect, the present application discloses a method for character protocol playback based on an operation and maintenance auditing system. After successful security verification, the playback module, according to the target protocol format, identifies the character protocol representing the target operation from the index file and data file from the operation and maintenance auditing system, and sends the uplink and downlink data of the corresponding character protocol to the terminal emulator. The terminal emulator renders the received uplink and downlink data of the corresponding character protocol to complete the playback.

[0008] To better implement the present invention, further, the target protocol format is configured to represent the start offset and segment length of the target operation.

[0009] To better implement the present invention, further, the playback module reads the index file line by line and parses the current line. If it is determined that the parsing result of the current line is a character protocol, according to the start offset, segment length stored in the current line, and the data file path from the operation and maintenance auditing system, it reads the uplink and downlink data of the corresponding character protocol from the data file; otherwise, it reads the next line of the index file line by line.

[0010] To better implement the present invention, further, if the uplink and downlink data of the corresponding character protocol is successfully read, it sends the uplink and downlink data of the corresponding character protocol to the terminal emulator for rendering, and after the rendering is completed, it reads the next line of the index file line by line; if the uplink and downlink data of the corresponding character protocol cannot be read successfully, it reads the next line of the index file line by line.

[0011] To better implement the present invention, further, the terminal emulator is an Xterm terminal emulator, a MobaXterm terminal emulator, a SecureCRT terminal emulator, a WindTerm terminal emulator, or a ModengTerm terminal emulator.

[0012] To better implement the present invention, further:

[0013] A websocket protocol is used for communication connection between the terminal emulator and the playback module.

[0014] To better implement the present invention, further, the method for security verification includes:

[0015] The terminal emulator receives the verification token for the corresponding session playback from the operation and maintenance auditing system. After the terminal emulator establishes a connection with the playback module, the playback module sends the verification token to the operation and maintenance auditing system to verify the legitimacy of the verification token. If the legitimacy verification of the verification token passes, the security verification is successful, and the playback module receives the index file and data file path from the operation and maintenance auditing system; otherwise, the operation and maintenance auditing system disconnects the connection with the playback module.

[0016] To better implement the present invention, further, the playback module sends the verification token to the operation and maintenance audit system through an internal interface to request the operation and maintenance audit system to verify the legality of the verification token.

[0017] In a second aspect, the present application discloses a system for character protocol playback based on an operation and maintenance audit system, including:

[0018] A playback module, which is used to, after successful security verification, identify the character protocol representing the target operation from the index file and data file from the operation and maintenance audit system according to the target protocol format, and send the uplink and downlink data of the corresponding character protocol to the terminal emulator;

[0019] A terminal emulator, which is used to render the received uplink and downlink data of the corresponding character protocol to complete the playback.

[0020] In a third aspect, the present application discloses a computer-readable storage medium, on which a computer program is stored, characterized in that when the program is executed by a processor, it implements the method for character protocol playback based on an operation and maintenance audit system according to any one of the first aspects.

[0021] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0022] By using the playback module as a playback server to process the playback file for data parsing, it avoids the situation of crashing when the video file is large, improves the playback stability, and has stronger applicability;

[0023] By identifying a specific protocol format in the playback file to obtain the uplink and downlink data of the specified operation, it can skip the insignificant idle time periods in the playback session or identify specific operations in the playback session, improving the retrieval efficiency;

[0024] Through security verification, it ensures the security of data transmission and is applicable to the playback of the operation and maintenance audit system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The present invention will be further described below in conjunction with the following drawings and embodiments. All the innovative concepts of the present invention should be regarded as the disclosed content and the protection scope of the present invention.

[0026] Figure 1 It is a schematic flowchart of the playback and data transmission of the playback module in Embodiment 2 of the method for character protocol playback based on an operation and maintenance audit system in the present application.

[0027] Figure 2 It is a schematic flowchart of Embodiment 3 of the method for character protocol playback based on an operation and maintenance audit system in the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0028] Embodiment 1

[0029] A method for character protocol playback based on an operation and maintenance auditing system. After successful security verification, the playback module, according to the target protocol format, identifies the character protocol representing the target operation from the index file and data file from the operation and maintenance auditing system, and sends the uplink and downlink data of the corresponding character protocol to the terminal emulator. The terminal emulator renders the received uplink and downlink data of the corresponding character protocol to complete the playback.

[0030] Specifically, in this embodiment, since it is to playback the operations on the operation and maintenance auditing system, when performing playback, it is first necessary to verify the security of the playback environment, and playback can only be performed when the security meets the requirements;

[0031] In this embodiment, the target operation can be all the operations generated by the operation and maintenance personnel during the playback session. The uplink and downlink data of the corresponding character protocol are the playback data during the operation period of the operation and maintenance personnel. In contrast, when the operation and maintenance personnel are idle, the playback data during the idle period needs to be skipped. When generating the playback data file, a specific format is used to mark the operations generated by the operation and maintenance personnel, so that the playback module can identify them; of course, the target data can also be the specified operations generated by the operation and maintenance personnel, such as accessing a certain database, downloading a certain type of data, etc. When generating the playback data file for these operations, they can be marked using specified formats respectively for differentiation and identification;

[0032] In this embodiment, the target protocol format can include the storage format of the index file and the format of the protocol data. The index file is identified in the file through the storage format of the index file, and the character protocol representing the target operation is identified in the path of the data file through the format of the protocol data, and further the uplink and downlink data are obtained from the data file through the path;

[0033] In this embodiment, the terminal emulator only needs to render the character data returned by the playback module. By separating the parsing and rendering in this way, rather than both being performed in the browser / client, it can effectively prevent crashes during playback.

[0034] Embodiment 2

[0035] This embodiment further optimizes on the basis of the above Embodiment 1. In this embodiment, the target protocol format is configured as the start offset and segment length representing the target operation;

[0036] Further, the playback module reads the index file line by line and parses the current line. If it determines that the parsing result of the current line is a character protocol, it reads the uplink and downlink data of the corresponding character protocol from the data file according to the starting offset, segment length, and the data file path from the operation and maintenance audit system stored in the current line. Otherwise, it reads the next line of the index file line by line;

[0037] Furthermore, if the uplink and downlink data of the corresponding character protocol are successfully read, the uplink and downlink data of the corresponding character protocol are sent to the terminal emulator for rendering. After the rendering is completed, the next line of the index file is read line by line; if the uplink and downlink data of the corresponding character protocol cannot be read successfully, the next line of the index file is read line by line;

[0038] Adopting this embodiment can optimize the playback of large sessions, skip insignificant idle time periods, make the playback speed faster, especially in long-term operations, can directly locate key operations, improve efficiency, and help auditors review and analyze operation records more efficiently, thus enhancing the overall work efficiency; of course, if only a certain type of key operation is to be located, it can also be identified through the above method, and operations other than this type of key operation are regarded as idle time periods; if specific types of operations need to be located, the types of target protocol formats can be correspondingly configured with operation weights.

[0039] Optionally, the websocket protocol is used for communication connection between the terminal emulator and the playback module;

[0040] Adopting this embodiment can ensure the real-time and security of data transmission under low latency and low consumption.

[0041] Optionally, the terminal emulator is one of the Xterm terminal emulator, MobaXterm terminal emulator, SecureCRT terminal emulator, WindTerm terminal emulator, or ModengTerm terminal emulator;

[0042] Adopting this embodiment can select different terminal emulators according to different playback scenarios to obtain better playback rendering effects;

[0043] The playback method of the Xterm terminal emulator does not require additional installation of terminal software, can be directly run in the target environment, and has strong stability and low resource occupancy rate;

[0044] The MobaXterm terminal emulator, WindTerm terminal emulator, and ModengTerm terminal emulator can achieve batch playback operations;

[0045] Both MobaXterm terminal emulator and SecureCRT terminal emulator can achieve recording and playback simultaneously.

[0046] See Figure 1 , in an optional implementation, the storage format of the index file can be "type - [data]", and the format of the protocol data can be "C - [offset] - [length]", where offset represents the starting offset and length represents the segment length. The terminal emulator is the Xterm terminal emulator, and the terminal emulator and the playback module are communicatively connected using the websocket protocol;

[0047] The method for the playback module to identify the character protocol representing the target operation from the index file and data file from the operation and maintenance audit system according to the target protocol format and send the uplink and downlink data of the corresponding character protocol to the terminal emulator includes the following steps:

[0048] Step S101, read the playback index file line by line;

[0049] Step S102, determine whether the playback index file has been completely read. If so, execute step S108; otherwise, execute step S103;

[0050] Step S103, parse the current line;

[0051] Step S104, determine whether it is a character protocol data record. If so, execute step S105; otherwise, return to execute step S101;

[0052] Step S105, read the protocol data in the data file according to the offset and length stored in the current line;

[0053] Step S106, determine whether the reading is successful. If so, execute step S107; otherwise, return to execute step S101;

[0054] Step S107, send the protocol data to the Xterm terminal emulator for rendering and return to execute step S101;

[0055] Step S108, playback ends.

[0056] Adopting this implementation, by retrieving and parsing the index file line by line, playback errors and omissions are avoided; through the starting offset and segment length in the data format, the operations of the operation and maintenance personnel can be accurately located, and the idle periods can be skipped during the long - time playback of the character protocol session, improving the playback efficiency.

[0057] Example 3:

[0058] This embodiment is further optimized on the basis of the above-mentioned Embodiment 2. In this embodiment, the method for security verification includes:

[0059] The terminal emulator receives a verification token for the corresponding session replay from the operation and maintenance audit system. After the terminal emulator establishes a connection with the replay module, the replay module sends the verification token to the operation and maintenance audit system to verify the legality of the verification token. If the legality verification of the verification token passes, the security verification is successful, and the replay module receives the index file and the data file path from the operation and maintenance audit system. Otherwise, the operation and maintenance audit system will disconnect the connection with the replay module.

[0060] Further, the replay module sends the verification token to the operation and maintenance audit system through an internal interface to request the operation and maintenance audit system to verify the legality of the verification token.

[0061] In an alternative embodiment, the method for character protocol replay based on the operation and maintenance audit system includes the following steps:

[0062] Step S201: The Xterm terminal emulator receives a token for the corresponding session replay from the operation and maintenance audit system.

[0063] Step S202: The Xterm terminal emulator establishes a websocket connection with the replay module and sends the token to the replay module.

[0064] Step S203: The replay module sends the token to the operation and maintenance audit system through an internal interface.

[0065] Step S204: When the token verification passes, the replay module receives the index file and the data file path from the operation and maintenance audit system.

[0066] Step S205: The replay module executes Steps S101 to S108 to complete the replay.

[0067] Adopting this embodiment can achieve secure transmission of replay data.

[0068] Embodiment 4

[0069] A system for character protocol replay based on the operation and maintenance audit system includes:

[0070] A replay module, which is used to identify the character protocol representing the target operation from the index file and the data file from the operation and maintenance audit system according to the target protocol format after the security verification is successful, and send the up and down data of the corresponding character protocol to the terminal emulator.

[0071] A terminal emulator, which is used to render the up and down data of the received corresponding character protocol to complete the replay.

[0072] Embodiment 5

[0073] A computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, it implements the method for character protocol playback based on an operation and maintenance auditing system described in any one of Embodiments 1 to 3.

[0074] As described above, the above are only the preferred embodiments of the present invention, and do not impose any form of limitation on the present invention. Any simple modification or equivalent change made to the above embodiments based on the technical essence of the present invention shall fall within the protection scope of the present invention.

Claims

1. A method for character protocol playback based on an operation and maintenance audit system, characterized in that: After the security verification is successful, the playback module identifies the character protocol representing the target operation from the index file and data file from the operation and maintenance audit system according to the target protocol format and sends the uplink and downlink data of the corresponding character protocol to the terminal simulator. The terminal simulator renders the received uplink and downlink data of the corresponding character protocol to complete the playback; The target protocol format is configured to characterize the starting offset and segment length of the target operation; The target operation is all operations generated by the operation and maintenance personnel in the playback session or the specified operations generated by the operation and maintenance personnel in the playback session. When the operation and maintenance audit system generates index files and data files, it uses the target protocol format to mark the target operation.

2. According to claim 1, the method for character protocol playback based on the operation and maintenance audit system is characterized in that: The playback module reads the index file line by line and parses the current line. If the parsed result of the current line is determined to be a character protocol, the upstream and downstream data of the corresponding character protocol are read from the data file based on the starting offset, fragment length and data file path from the operation and maintenance audit system stored in the current line. Otherwise, the next line of the index file is read line by line.

3. According to claim 2, the method for character protocol playback based on the operation and maintenance audit system is characterized in that: If reading the uplink and downlink data of the corresponding character protocol is successful, the uplink and downlink data of the corresponding character protocol are sent to the terminal emulator for rendering and after the rendering is completed, the next line of the index file is read line by line; if reading the uplink and downlink data of the corresponding character protocol fails, the next line of the index file is read line by line.

4. According to claim 1, the method for character protocol playback based on the operation and maintenance audit system is characterized in that: The terminal emulator is an Xterm terminal emulator, a MobaXterm terminal emulator, a SecureCRT terminal emulator, a WindTerm terminal emulator or a ModengTerm terminal emulator.

5. According to claim 1, the method for character protocol playback based on the operation and maintenance audit system is characterized in that: The terminal emulator and the playback module use the websocket protocol for communication.

6. According to claim 1, the method for character protocol playback based on the operation and maintenance audit system is characterized in that: Security verification methods include: The terminal emulator receives the verification token of the corresponding session playback from the operation and maintenance audit system. When the terminal emulator establishes a connection with the playback module, the playback module sends the verification token to the operation and maintenance audit system to verify the legitimacy of the verification token. If the legitimacy of the verification token is verified, the security verification is successful. The playback module receives the index file and data file path from the operation and maintenance audit system, otherwise the operation and maintenance audit system will disconnect the connection with the playback module.

7. The method for character protocol playback based on the operation and maintenance audit system according to claim 6 is characterized in that: The playback module sends the verification token to the operation and maintenance audit system through the internal interface to request the operation and maintenance audit system to verify the legitimacy of the verification token.

8. A character protocol playback system based on an operation and maintenance audit system, characterized in that: include: A playback module, which is used to identify the character protocol representing the target operation from the index file and the data file from the operation and maintenance audit system according to the target protocol format after the security verification is successful, and send the uplink and downlink data of the corresponding character protocol to the terminal simulator; A terminal simulator, wherein the terminal simulator is used to render the received uplink and downlink data of the corresponding character protocol to complete playback; The target protocol format is configured to characterize the starting offset and segment length of the target operation; The target operation is all operations generated by the operation and maintenance personnel in the playback session or the specified operations generated by the operation and maintenance personnel in the playback session. When the operation and maintenance audit system generates index files and data files, it uses the target protocol format to mark the target operation.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method for character protocol playback based on an operation and maintenance audit system described in any one of claims 1 to 7 is implemented.

Images