Single-chain uplink evaluation method based on equipment network hierarchy and service relay

Abstract

The invention discloses a single-chain uplink evaluation method based on equipment network hierarchy and service relay, which takes a service equipment node with the highest network hierarchy as a root node, constructs a blood relationship graph based on the service equipment node and the service relay, performs rendering coloring and blood relationship information marking on a child node, and determines whether the child node is rendered for multiple times or not according to whether the child node is rendered for multiple times or not. Whether the leaf can be linked to the root node through the multi-service link is judged, so that the single-link uplink risk of the service equipment node is obtained; and according to the blood relationship recorded in the rendering process, judging whether the single equipment is only connected or not. According to the method, the defect that a large number of intermediate paths which do not meet the final requirement are searched out and participate in calculation in path search is overcome, the calculation amount is remarkably reduced, the analysis and evaluation efficiency is effectively improved, and the method has good practicability.

Description

Technical Field

[0001] The present invention belongs to the technical field of network communication security, and specifically relates to a single-chain uplink evaluation method based on device network hierarchy and service relay. Background Art

[0002] With the development of economy, the coming of cloud computing and the Internet of Things, people's production and life have higher and higher requirements for communication quality. At the same time, the market competition is becoming increasingly fierce. Only by continuously improving the operation and maintenance quality of the network and providing users with high-quality services can we better win the market. This makes the maintenance task of telecommunications networks more and more arduous, and there are more and more problems involved in network optimization, line cutover and fault repair. The security of telecommunications business bearers depends on the underlying physical layer. Under the condition of no dual routing and single chain uplink, equipment dragging is often caused by construction digging and cutover operations, which affects the business on a large scale and causes serious harm. Therefore, it is particularly important to analyze, warn and avoid possible hidden risks in advance. However, the telecommunications network is huge and complex. It is impossible for humans to clearly understand and grasp whether there is a real dual routing in the existing network and business circuit, and it is impossible to conduct single chain uplink evaluation on the business equipment nodes of important platforms and core networks, and it is impossible to provide early warning.

[0003] Based on the requirements for security assessment of some service equipment nodes in the operator network, the commonly used analysis method is: based on the access layer service equipment nodes, the complete path that can be reached to the core layer service equipment nodes through calculation search, and the robustness of the uplink from the access layer service equipment nodes to the core service equipment nodes. However, when using technologies such as breadth search, depth search, or gallery search, the evaluation process will face the problem of exponential growth in retrieval calculation and path data due to the increase in search depth. Due to the characteristics of the operator network architecture, a large number of paths pass through basically the same intermediate nodes, which not only increases the time for path search, but the increase in searched path data will actually increase the calculation amount for subsequent result evaluation, and the final result is that the evaluation takes a long time. Summary of the invention

[0004] The purpose of the present invention is to provide a single-chain uplink assessment method based on device network hierarchy and service relay, aiming to solve the above problems. The present invention focuses on putting maintenance tasks in advance, performing intelligent and fast single-chain uplink assessment on service equipment nodes of important platforms and core networks, providing hidden danger reports, and achieving early warning, which has good practicality.

[0005] The present invention is mainly achieved through the following technical solutions: A single-chain uplink assessment method based on device network hierarchy and business relay takes the business device node with the highest network hierarchy as the root node, builds a blood relationship map based on the business device node and business relay, renders and colors the child nodes and marks the blood relationship information. Based on whether the child node is rendered multiple times, it is judged whether the leaf can be connected to the root node through multiple business links, thereby deriving the risk of single-link uplink of the business device node; based on the blood relationship recorded in the rendering process, it is judged whether it is only connected to a single device.

[0006] In order to better implement the present invention, the following steps are further included: Step S1: extracting and marking service equipment nodes and service relays in the telecommunication network according to the network to which the equipment belongs; Step S2: According to the network layers where the business equipment nodes are located, the network topology diagram is hierarchically depicted; according to the network topology, the core layer at the top layer is clearly identified; Step S3: Starting from the core layer, take all the key nodes of the current layer as the root nodes, and take the nodes of the next layer with business relay to the current layer as the terminal nodes; take the root node as the starting point of bloodline analysis and rendering, build the bloodline relationship map of the root node and the terminal nodes layer by layer, render the terminal nodes layer by layer according to the rendering rules, until the bloodline path of the bloodline relationship map is rendered or all the terminal nodes are the target color, stop rendering; analyze the business equipment nodes of the single link uplink.

[0007] In order to better implement the present invention, further, in the rendering rule, the marking colors from primary to advanced are yellow, orange and green respectively; the target color is green, and when all the terminal nodes are green, the rendering is stopped; If the terminal node is rendered green, the upstream single-chain level of the business equipment node is non-single-chain; If the terminal node is rendered in orange, the business equipment node uplink single chain level is that the uplink path is not a single chain, and the uplink device is a single point; If the terminal node is rendered in yellow, the upstream single chain level of the service equipment node is an upstream path single chain.

[0008] In order to better implement the present invention, further, in step S3, the rendering rule is: For the terminal node, the nth rendering is yellow. When it is rendered for the (n+1)th time, if the root node remains unchanged, it is rendered orange. If the root node changes, it is rendered green. After the nth and n+1th renderings, if the terminal node has turned green, stop rendering the terminal node; In the (n+2)th rendering, if the terminal node is orange, if the root node is different from that in the (n)th rendering and (n+1)th rendering, it will be rendered green; if the root node is the same as that in the (n)th rendering and (n+1)th rendering, it will not be rendered; During the n+2th rendering, if the terminal node is yellow, if the root node is different from that of the nth rendering and the n+1th rendering, it is rendered green; if the root node is the same as that of the nth rendering and the n+1th rendering, it is rendered orange.

[0009] In order to better implement the present invention, further, in step S3, if the next level of the current level is the lowest level of the network topology, all service device nodes of the level are taken as terminal nodes.

[0010] In order to better implement the present invention, further, step S3 includes the following steps: Step S31: Analysis from the core layer to the convergence layer: construct a blood relationship map of key nodes from the core layer to the convergence layer; render the end nodes respectively according to the blood relationship path of the blood relationship map of the root node; Step S32: Analysis from the convergence layer to the access layer: The access layer is the most peripheral layer of the network hierarchy. All nodes in the access layer are regarded as peripheral nodes. A blood relationship map of the key nodes from the convergence layer to the access layer is constructed. According to the blood relationship path of the blood relationship map and based on the rendering result of step S31, the peripheral nodes are rendered according to the rendering rules.

[0011] In order to better implement the present invention, further, in the step S31, a blood relationship map of each root node of the core layer is established respectively; and then the overlay rendering is performed in sequence according to the order of the root nodes of the core layer.

[0012] The beneficial effects of the present invention are as follows: The present invention uses a graph database and constructs a network topology map based on the business equipment nodes and business link data of the telecommunications network. Different from the method of comparison and analysis after path search, the present invention uses a similar blood relationship analysis method to color and render the business equipment nodes, that is, recursively traverse from the root node and color all the nodes under the root node. For the child nodes that meet the business rules, the blood relationship information of the root node is marked, and the node is used as the root node to continue to render the lower-level child nodes and transfer the blood relationship. The present invention excludes the already safe business equipment nodes during the rendering process through coloring distinction, and solves the problem that the intermediate paths that do not meet the final requirements in the path search are searched out in large quantities and participate in the calculation. Compared with the existing path search method, which requires a full path search and then a comparison and analysis, the present invention reduces the paths and nodes to be calculated and compared, greatly reduces the amount of calculation, shortens the analysis time, improves the efficiency of the evaluation, and has good practicality. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 The telecommunication network topology diagram in Example 1; Figure 2 It is the blood relationship map from the business equipment node M1 in the core layer to the key nodes D1 to D3 in the aggregation layer; Figure 3 It is the blood relationship map from the business equipment node M3 in the core layer to the key nodes D2 and D3 in the aggregation layer; Figure 4 for Figure 2 Rendering diagram of key nodes D1 to D3; Figure 5 Based on Figure 4 Rendering results Figure 3 Rendering diagram of key nodes D2 and D3; Figure 6 It is the blood relationship map from the key node D1 to the key nodes A1 to A3 in the aggregation layer; Figure 7 It is the blood relationship map from the key node D2 to the key nodes A2 and A3 in the aggregation layer; Figure 8 The present invention is a flow chart of a single-link uplink evaluation method based on device network hierarchy and service relay. DETAILED DESCRIPTION

[0014] Embodiment 1: A single-chain uplink assessment method based on device network hierarchy and business relay takes the highest-level business device node in the network as the root node, builds a graph tree based on business device nodes and business relays, renders and colors child nodes and marks lineage information through technical processing, and determines whether the leaf node can be connected to the root node through multiple business links based on whether the leaf node is rendered multiple times, thereby deriving the risk of single-link uplink of the business device node; determines whether it is only connected to a single device based on the lineage relationship recorded during the rendering process.

[0015] Preferably, the method specifically comprises the following steps: 1. Extract the service equipment nodes and service relays in the telecommunications network according to the network to which the equipment belongs (metropolitan area network / IPRAN network / OTN, etc.), and mark each service equipment node and service relay. Figure 1 As shown, service equipment nodes M1, M3, D1, D2, D3, B1, B2, A1, A2, A3 and service relays F1-F12 are extracted.

[0016] 2. According to the network layer where the business equipment nodes are located, the network topology diagram is depicted in layers. According to the planning and construction of the network topology of the actual telecommunications network, it can be clearly defined that the core is the top layer, such as Figure 1 As shown in the figure, it is from core layer -> aggregation layer -> access layer.

[0017] 3. Start the analysis from the highest core level, taking all the key nodes of the current level as the root nodes, i.e. the starting point of the lineage analysis and rendering, and taking the nodes of the next level that have business relays with the current level as the terminal nodes (if the next level is the bottom level of the entire network topology, take all the business equipment nodes of this level), i.e. the focus of the analysis and rendering. Construct the lineage tree diagram of the root node and the terminal node layer by layer. By constructing and rendering layer by layer, the business equipment nodes of the single link uplink can be quickly analyzed.

[0018] Preferably, if Figure 8 The specific analysis process is as follows: (1) Analysis from the core layer to the aggregation layer: Figure 2 As shown in Figure 1, a blood relationship graph is constructed from the core layer M1 to the key nodes D1, D2, and D3 of the convergence layer. Figure 3 As shown, a blood relationship map from the core layer M3 to the key nodes D3 and D2 of the convergence layer is constructed. According to the path of the blood relationship map of the root node, the upstream single chain level of the terminal node is rendered and evaluated respectively.

[0019] The rendering rules are as follows: The first time the end node is rendered, it is yellow. The second time it is rendered, if the root node is unchanged, it is orange, if the root node is changed, it is green.

[0020] After the first and second rendering, if the node has turned green, stop the subsequent rendering of the node.

[0021] When rendering for the third time, if it is orange, if the root node is different from the first and second times, it will be rendered in green; if the root node is the same as the first and second times, it will not be rendered.

[0022] When rendering for the third time, if it is yellow, if the root node is different from the first and second times, it will be rendered in green, and if the root node is the same as the first and second times, it will be rendered in orange.

[0023] And so on, until the bloodline path of the bloodline relationship map is rendered or all terminal nodes are green, the rendering stops.

[0024] like Figure 4 As shown, the rendering path is marked with gray curved arrows. Figure 2 The blood relationship map in the game is rendered as follows: 1) The M1-D1 bloodline path renders D1 in yellow.

[0025] 2) The M1-D2 bloodline path renders D2 in yellow.

[0026] 3) The M1-D2-D3 bloodline path renders D3 in yellow.

[0027] like Figure 5 As shown, switch to the blood relationship map built based on the M3 node, according to Figure 3 In the blood relationship map, Figure 4 The key nodes D1, D2, and D3 have already been rendered, so continue rendering: 4) The M3-D2-D3 bloodline path renders D3 in green, and the root node undergoes a root change.

[0028] 3) The M3-D2 bloodline path renders D2 green, and the root node undergoes a root change.

[0029] 5) In the M3-D3 bloodline path, D3 is already green, so stop rendering.

[0030] 6) In the M3-D3-D2 bloodline path, D2 is already green, so stop rendering.

[0031] (2) Analysis from the aggregation layer to the access layer: Figure 1 As shown in the figure, the access layer is the most peripheral layer in the entire network hierarchy, so it is necessary to include all nodes in the analysis and build a blood relationship map from the key nodes D1 and D2 of the aggregation layer to all nodes A2, A3, and A1 of the access layer. Figure 6 As shown in , a blood relationship graph from the key node D1 to the key nodes (A3, A2, A1) at the aggregation layer is constructed. Figure 7 As shown, a blood relationship map from the key node D2 to the key nodes (A3, A2) of the aggregation layer is constructed.

[0032] Since the key node D3 is not linked to other business equipment nodes except D2, the blood relationship map from D3 to A3, A2, and A1 is basically the same as that of D2, so there is no need to build and render the terminal nodes.

[0033] According to the single-chain analysis and rendering algorithm from the core layer to the convergence layer, the final analysis and rendering results are: A1 green, A2 green, A3 green.

[0034] Among them, the uplink single-chain level of the business equipment node is as follows: Green, non-single-stranded.

[0035] Orange: the upstream path is not a single link, and the upstream device is a single point.

[0036] Yellow, single strand on the upward path.

[0037] The present invention analyzes the network level according to the network characteristics and determines whether the nodes at different network levels are core nodes. Figure 1As shown, the convergence layer does not analyze B1 and B2, but analyzes nodes D1 and D2 upstream to the core layer, which greatly reduces the number of network device nodes that need to be analyzed and improves the calculation efficiency. The present invention evaluates nodes with network hidden dangers by rendering and coloring, and judges by color marking. Nodes that have been rendered green, that is, nodes without network hidden dangers, do not need to be repeatedly marked, which reduces the paths and nodes for calculation and comparison, and shortens the analysis time.

[0038] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Any simple modification or equivalent change made to the above embodiment based on the technical essence of the present invention shall fall within the protection scope of the present invention.

Claims

1. A single-chain uplink evaluation method based on device network hierarchy and service relay, characterized in that: The highest-level service device node in the network is used as the root node. A blood relationship graph is constructed based on service device nodes and service relays. Child nodes are rendered and colored and their blood relationship information is marked. Based on whether a child node is rendered multiple times, it is determined whether the leaf can be connected to the root node through multiple service links, thereby determining the risk of single-link uplink of the service device node. Determine whether to connect to only one device based on the blood relationship recorded during the rendering process.

2. According to claim 1, a single-chain uplink evaluation method based on device network hierarchy and service relay is characterized in that: The following steps are involved: Step S1: extracting and marking service equipment nodes and service relays in the telecommunication network according to the network to which the equipment belongs; Step S2: According to the network layer where the service device nodes are located, a network topology diagram is drawn in layers; Identify the top-level core layer based on the network topology; Step S3: Starting from the core layer, take all the key nodes of the current layer as the root nodes, and take the nodes of the next layer with business relay to the current layer as the terminal nodes; take the root node as the starting point of bloodline analysis and rendering, build the bloodline relationship map of the root node and the terminal nodes layer by layer, render the terminal nodes layer by layer according to the rendering rules, until the bloodline path of the bloodline relationship map is rendered or all the terminal nodes are the target color, stop rendering; analyze the business equipment nodes of the single link uplink.

3. According to claim 2, a single-chain uplink evaluation method based on device network hierarchy and service relay is characterized in that: In the rendering rules, the marking colors from primary to advanced are yellow, orange and green respectively; the target color is green, and when all the terminal nodes are green, the rendering stops; If the terminal node is rendered green, the upstream single-chain level of the business equipment node is non-single-chain; If the terminal node is rendered in orange, the business equipment node uplink single chain level is that the uplink path is not a single chain, and the uplink device is a single point; If the terminal node is rendered in yellow, the upstream single chain level of the service equipment node is an upstream path single chain.

4. According to claim 3, a single-chain uplink evaluation method based on device network hierarchy and service relay is characterized in that: In step S3, the rendering rule is: For the terminal node, the nth rendering is yellow. When it is rendered for the (n+1)th time, if the root node remains unchanged, it is rendered orange. If the root node changes, it is rendered green. After the nth and n+1th renderings, if the terminal node has turned green, stop rendering the terminal node; In the (n+2)th rendering, if the terminal node is orange, if the root node is different from that in the (n)th rendering and (n+1)th rendering, it will be rendered green; if the root node is the same as that in the (n)th rendering and (n+1)th rendering, it will not be rendered; During the n+2th rendering, if the terminal node is yellow, if the root node is different from that of the nth rendering and the n+1th rendering, it is rendered green; if the root node is the same as that of the nth rendering and the n+1th rendering, it is rendered orange.

5. A single-link uplink evaluation method based on device network hierarchy and service relay according to any one of claims 2 to 4, characterized in that: In step S3, if the next level of the current level is the lowest level of the network topology, all service device nodes of the level are taken as terminal nodes.

6. A single-chain uplink evaluation method based on device network hierarchy and service relay according to claim 5, characterized in that: The step S3 comprises the following steps: Step S31: Analysis from the core layer to the convergence layer: construct a blood relationship map of key nodes from the core layer to the convergence layer; render the end nodes respectively according to the blood relationship path of the blood relationship map of the root node; Step S32: Analysis from the convergence layer to the access layer: The access layer is the most peripheral layer of the network hierarchy. All nodes in the access layer are regarded as peripheral nodes. A blood relationship map of the key nodes from the convergence layer to the access layer is constructed. According to the blood relationship path of the blood relationship map and based on the rendering result of step S31, the peripheral nodes are rendered according to the rendering rules.

7. A single-chain uplink evaluation method based on device network hierarchy and service relay according to claim 6, characterized in that: In the step S31, a blood relationship map of each root node of the core layer is established respectively; and then the root nodes of the core layer are overlaid and rendered in sequence.

Images