Network management method suitable for integration among multiple application systems

Abstract

The invention belongs to the technical field of network management, and particularly relates to a network management method suitable for integration among multiple application systems. Creating a client data interface, wherein the data flow of the client data interface is input; configuring information of a client data interface, wherein the information at least comprises a client name, a service identifier and a client system interface address; compiling a first data template and a first conversion component corresponding to the client data interface, and converting data received through the client data interface into a data format defined in the first data template through the first conversion component for storage; creating an enterprise internal data interface, wherein the data flow direction of the enterprise internal data interface is output; configuring information of an enterprise internal data interface, wherein the information at least comprises a service identifier and an enterprise internal interface access path; and compiling a second data template and a second conversion component corresponding to the enterprise internal data interface, and converting the received data into a data format defined in the second data template through the second conversion component for storage.

Description

Technical Field

[0001] The invention belongs to the technical field of network management, and in particular relates to a network management method suitable for integration among multiple application systems. Background Art

[0002] In order to support the operation of enterprises, data integration often exists in application systems within or between enterprises to open up data links, avoid data silos, and enhance data analysis capabilities. However, in confidential networks, the integration between confidential application systems must meet confidentiality requirements. At this time, data transmission control needs to be considered during system integration to prevent confidential information leakage. Confidentiality requirements usually include confidentiality level identification and prohibition of "high-density low-transmission". When these requirements are implemented in system integration, on the one hand, it is required to ensure the control effect at the functional level, and on the other hand, it is also required to show good readability of the control results. Therefore, visual monitoring of integrated data links has become an important capability of confidential application systems. Summary of the invention

[0003] Technical problem solved by the present invention: The purpose of the present invention is to propose a network management method suitable for integration between multiple application systems, for managing the data transmission process.

[0004] The technical solution of the present invention:

[0005] A network management method suitable for integration between multiple application systems, creating a customer data interface, the data flow direction of the customer data interface is input; configuring the information of the customer data interface, at least including: customer name, business identifier, customer system interface address;

[0006] Compile a first data template and a first conversion component corresponding to the customer data interface, and convert the data received through the customer data interface into a data format defined in the first data template through the first conversion component for storage;

[0007] Create an internal data interface of the enterprise, the data flow direction of which is output; configure the information of the internal data interface of the enterprise, which at least includes: business identifier and access path of the internal interface of the enterprise;

[0008] A second data template and a second conversion component corresponding to the enterprise internal data interface are compiled, and the received data will be converted into a data format defined in the second data template by the second conversion component for storage.

[0009] Further:

[0010] After the transmission link is formed, the customer data interface receives data, stores the data based on the first data template, and converts the data format and content into data format and content that can be directly interpreted and stored by the enterprise internal interface through the conversion component. The enterprise internal data interface will call the enterprise internal application platform and transmit readable data.

[0011] Further:

[0012] Establish confidentiality control rules, and ensure that customer data interfaces and internal enterprise data interfaces have confidentiality attributes;

[0013] The confidentiality level of the customer data interface and the enterprise's internal data interface must be verified, and the confidentiality level of the customer data interface shall not be higher than that of the enterprise's internal data interface.

[0014] Further:

[0015] Data transmission instances and attachments are densely marked, and the confidentiality level shall not be higher than the corresponding interface confidentiality level.

[0016] Further:

[0017] When integrating different customers, if different customers are the same business objects, the data structure of each customer will be uniformly converted into a data template of the customer data interface, and then passed to the enterprise for direct storage.

[0018] Further:

[0019] Data transmission anomalies are visualized. Errors and abnormal results that occur during data transmission can be directly displayed, and code errors are fully displayed on the front-end page.

[0020] Further:

[0021] During the actual data transmission process, the data operation status is monitored by tracking the data flow.

[0022] Further:

[0023] Data transmission can be approved based on business needs and confidentiality requirements.

[0024] The advantages of the present invention are: in a multi-classification network environment, when confidential application system data is integrated and interacted, automated classification flow control can be achieved by configuring the classification attributes, and a three-level log management capability can be established. Based on the job task log recorded in the tracking chain, the operation status of the data integration link can be quickly checked and displayed to meet confidentiality requirements. DETAILED DESCRIPTION

[0025] The technical solution of the present invention is described in detail below.

[0026] The technical solution of the present invention is: with the help of information technology, a data transmission platform suitable for data integration and interaction in a multi-level network environment is constructed. In the data transmission platform, the data interaction process is divided into two internal and external data links, which respectively handle the two-end business of data reception and data processing. The external data link is connected to the external interface, responsible for quickly receiving and parsing data and temporarily storing it in an external temporary data storage medium. The internal data link is responsible for converting the converted external temporary data into a data structure that meets the requirements of internal applications through configurable data review and scheduling. When defining the internal and external data links, the confidentiality attributes of the transmitted data must be indicated. When the confidentiality levels of both parties match and there is an uncompliant data flow direction such as "high density and low flow", the confidentiality alarm is automatically triggered and the data interaction is terminated, so as to achieve automatic judgment and control of the data flow direction. Establish a three-level log management capability of audit logs, business execution logs (tracking chains) and code logs. Audit logs are used to record and track the user's manual operation records, including login users, IP addresses, terminal security levels, operation time, functional actions, etc. Business execution logs, also known as data tracking chains, record the execution of data transmission and interactive tasks, such as operation flow, input security level, input interface, sender, receiver, receiving security level, audit status, etc. Code logs mainly record the operating efficiency, bugs, exceptions and other operating information during the system operation process. Through the three-level log management capabilities, especially the log records of the data tracking chain, the execution process of data transmission tasks is visualized, and multi-dimensional log query and statistical analysis functions are provided to help management users accurately and effectively monitor the execution of data transmission tasks.

[0027] Specifically,

[0028] A data link monitoring method suitable for integrating multiple confidential application systems in a confidential network, comprising:

[0029] When a user logs in, the audit log record is triggered, and the user's functional operations or execution actions in the platform are recorded in the audit log library.

[0030] When the data exchange operation starts to execute, the data classification verification at both ends of the link is triggered first. If there is a situation where the data classification flow is not in compliance with the regulations, the classification abnormality alarm is automatically triggered and the execution of the data exchange operation is terminated;

[0031] After the data exchange job starts executing, the business execution log will automatically record the execution process information of the data exchange job.

[0032] As a basic component of system operation, code log runs automatically when the system starts, and records bugs or abnormal information that occurs during system operation.

[0033] In the log monitoring and analysis interface, multi-dimensional query and statistics log information are performed to visually present the monitoring data information of the data link.

[0034] The data link monitoring capability is associated with the log function of the application system to which it belongs, which can extract log information and then process and display it to improve the readability of the log.

[0035] The data link can expose / throw data transmission exceptions, such as interface function abnormalities, confidentiality verification failures, etc. The exception information contains both user-readable text descriptions and system-level logs of the code type required by development and operation personnel.

[0036] The calling status of this interface can be monitored from the interface dimension.

[0037] It can fully display the data transmission link information, including data flow direction, calling interface and its confidentiality level, data confidentiality level, attachment confidentiality level, interface record status, whether the flow requires an approval system, data flow status review status and other important information to support confidentiality management and review, so that confidential application systems meet better confidentiality requirements.

[0038] The technical solution of the present invention can completely record the information of each link and the result information in the data transmission process from input to output and store it in the bottom log.

[0039] The data transmission process of the technical solution of the present invention is visualized, which specifically includes interface information, interface confidentiality information, data flow information, data confidentiality information, success and failure information, etc.

[0040] The technical solution of the present invention visualizes data transmission anomalies, and errors and abnormal results occurring during transmission can be directly displayed, and code errors can be fully displayed on the front-end page, which is convenient for operation and maintenance personnel to quickly troubleshoot problems and avoid efficiency problems and leakage problems in troubleshooting linked servers in confidential environments.

[0041] The technical solution of the present invention provides data monitoring capability for a specific single interface, displaying the full-time operating status of the interface, transmission data confidentiality information, and attachment information.

[0042] Example

[0043] The first step is that when a user logs into the interactive platform, the audit log record is triggered, and the user's functional operations or execution actions in the platform are recorded in the audit log library.

[0044] Step 2: When the data exchange operation starts to execute, the data classification verification at both ends of the link is triggered first. When there is a situation where the data classification flow is not in compliance with the regulations, the classification abnormality alarm is automatically triggered and the execution of the data exchange operation is terminated;

[0045] Step 3: After the data interaction job starts executing, the business execution log will automatically record the execution process information of the data interaction job.

[0046] Step 4: Code log is the basic component of system operation. It runs automatically when the system starts and records the bugs or abnormal information that occur during the system operation.

[0047] Step 5. In the log monitoring and analysis interface, query and count log information in multiple dimensions, and visualize the monitoring data information of the data link.

[0048] Implementation Cases:

[0049] In a certain confidential R&D and manufacturing enterprise, the above solution was implemented to build a "Data Exchange Platform" to achieve design collaboration and supply chain collaboration with two customers.

[0050] In design collaboration, data is mainly transmitted in the form of attached data packets. There is no need to store and convert data during the transmission process. The data packets only need to be directly transmitted to the PDM system of the enterprise's internal network. Design collaboration business scenarios cover technical coordination orders, software and hardware ECP, etc.

[0051] In supply chain collaboration, data is mainly transmitted in JSON format without attachments. Upstream and downstream interfaces are required to complete data transmission and pass production supply chain business data to various business systems in the enterprise's internal network. Supply chain collaboration business scenarios cover orders, shipments, quality issues, etc.

[0052] When each interface actually transmits data, the transmission status of all data instances can be displayed in the data link, including data in various states such as normal, abnormal, and approved. At the same time, it provides monitoring of attachments, and monitors and controls problematic data / attachments. The system automatically rejects data / attachment transmission requests and records the reasons for the abnormality.

Claims

1. A network management method suitable for integration between multiple application systems, characterized in that: Create a customer data interface, the data flow direction of which is input; configure the information of the customer data interface, which at least includes: customer name, business ID, and customer's system interface address; Compile a first data template and a first conversion component corresponding to the customer data interface, and convert the data received through the customer data interface into a data format defined in the first data template through the first conversion component for storage; Create an internal data interface of the enterprise, the data flow direction of which is output; configure the information of the internal data interface of the enterprise, which at least includes: business identifier and access path of the internal interface of the enterprise; A second data template and a second conversion component corresponding to the enterprise internal data interface are compiled, and the received data will be converted into a data format defined in the second data template by the second conversion component for storage.

2. A network management method suitable for integration between multiple application systems according to claim 1, characterized in that: After the transmission link is formed, the customer data interface receives data, stores the data based on the first data template, and converts the data format and content into data format and content that can be directly interpreted and stored by the enterprise internal interface through the conversion component. The enterprise internal data interface will call the enterprise internal application platform and transmit readable data.

3. A network management method suitable for integration among multiple application systems according to claim 1, characterized in that: Establish confidentiality control rules, and ensure that customer data interfaces and internal enterprise data interfaces have confidentiality attributes; The confidentiality level of the customer data interface and the enterprise's internal data interface must be verified, and the confidentiality level of the customer data interface shall not be higher than that of the enterprise's internal data interface.

4. A network management method suitable for integration among multiple application systems according to claim 3, characterized in that: Data transmission instances and attachments are densely marked, and the confidentiality level shall not be higher than the corresponding interface confidentiality level.

5. A network management method suitable for integration among multiple application systems according to claim 1, characterized in that: When integrating different customers, if different customers are the same business objects, the data structure of each customer will be uniformly converted into a data template of the customer data interface, and then passed to the enterprise for direct storage.

6. A network management method suitable for integration among multiple application systems according to claim 1, characterized in that: Data transmission anomalies are visualized. Errors and abnormal results that occur during data transmission can be directly displayed, and code errors are fully displayed on the front-end page.

7. A network management method suitable for integration among multiple application systems according to claim 1, characterized in that: During the actual data transmission process, the data operation status is monitored by tracking the data flow.

8. A network management method suitable for integration among multiple application systems according to claim 1, characterized in that: Data transmission can be approved based on business needs and confidentiality requirements.