Multifunctional service integration platform of embedded system and method thereof

Abstract

The invention relates to the technical field of data integration, and discloses a multifunctional service integration platform of an embedded system and a method thereof, and the platform comprises a loading management module which is electrically connected with each program and is responsible for preprocessing a communication part and building a development environment; and the communication management module is connected with the loading management module, obtains registration information of each program, exchanges data among the programs, and obtains and sends change information when configuration is changed. And the user management module is connected with the communication management module, and merges and encrypts the user information of each program. And the program management module is connected with the communication management module, compares the program configuration information with the current configuration information, and determines whether to update the configuration information and send the configuration information to the program after signing. And the storage module is connected with the user management module and the program management module, performs clustering storage according to the user information, the registration information and the configuration information, and optimizes storage distribution. Through the modules, the performance, the data security and the maintainability of the embedded system are effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data integration, and more particularly, to a multi-functional service integration platform and method for an embedded system. Background Art

[0002] Embedded systems are widely used in fields such as smart homes, industrial control, and Internet of Things devices. Their core function is to complete specific tasks through the collaborative work of hardware resources and embedded software. In the prior art, most embedded systems adopt a modular design, and the system functions are extended and upgraded by loading different functional modules into the system in the form of programs. To meet the needs of different users, some systems have begun to support the coexistence and operation of multiple applications, and basic inter-service communication is achieved through a message bus. However, these systems mostly rely on a single management tool to operate on application programs, and the application management function is relatively simple, only supporting basic program loading and unloading, and unable to effectively manage complex multi-application environments.

[0003] Currently, although the prior art has achieved modularization and a certain degree of multi-application support, there are still many deficiencies. First, there is a lack of an efficient application management and update mechanism, resulting in users frequently encountering problems such as application installation conflicts, resource contention, and update failures in a multi-application environment. Second, due to the lack of a complete multi-application development environment and insufficient development tools and technical support, the development of new functions is complex and the development cycle is long. In addition, the resource allocation and management capabilities are weak. In the scenario of multi-application coexistence, it is easy to have unreasonable utilization of resources such as CPU and memory, seriously affecting the system performance. Finally, there are deficiencies in the design of user account management, data security, and configuration change notification, etc., and it is easy to have data leakage and unstable system operation. These problems limit the wide application of embedded systems in complex application scenarios. Summary of the Invention

[0004] In view of this, the present invention proposes a multi-functional service integration platform and method for an embedded system, aiming to solve the problems in the current technology that due to the lack of an efficient application management and update mechanism, a complete multi-application development environment, reasonable resource allocation and management capabilities, and a sound user account management and data security guarantee, the performance of the embedded system is limited, the operation is unstable, and the development is complex.

[0005] The present invention proposes a multi-functional service integration platform for an embedded system, including:

[0006] A loading management module, electrically connected to each program to be embedded. The loading management module is configured to preprocess the communication part of each program and build the development environment of each program;

[0007] A communication management module, electrically connected to the loading management module, is configured to obtain the registration information when each program starts; the communication management module is also configured to exchange data information between each program; the communication management module is further configured to obtain the change information of each program when the configuration of each program changes, and send the change information of the program.

[0008] A user management module, electrically connected to the communication management module, is configured to obtain each user information in each program, merge and file each user information, and encrypt each filed user information.

[0009] A program management module, electrically connected to the communication management module, is configured to determine whether to update the configuration information of each program according to the relationship between the configuration information of each program and the current configuration information of each program. Wherein, when it is determined to update the configuration information of the program, the program management module determines whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and sends the configuration information with a signature to the program for update.

[0010] A storage module, electrically connected to the user management module and the program management module respectively, is configured to perform clustering storage of each program according to each filed user information, the registration information of each program, and the configuration information of each program; the storage module is also configured to perform storage allocation and optimization on the clustering storage of each program.

[0011] Furthermore, the loading management module includes:

[0012] An initial unit, electrically connected to each program respectively, is configured to preprocess each communication part and the communication bus electrically connected to each communication part, wherein the preprocessing is initialization processing.

[0013] A loading basic unit, electrically connected to each program respectively, is configured with an SDK interface, document materials, an opkg tool, and an extension tool. The loading basic unit is configured to perform function management on each program, and is further configured to detect the conflict relationship when each program runs, and issue a recommended warning according to the conflict relationship.

[0014] Wherein, the function management includes: program packaging management, program installation management, program uninstallation management, viewing program static information management, and program running information management.

[0015] Furthermore, the communication management module includes:

[0016] An information collection unit, electrically connected to each of the programs respectively, and the information collection unit is configured to obtain the registration information of each of the programs when starting up, wherein the registration information includes the service name of the program, the version of the program, and the API of the program;

[0017] A communication unit, electrically connected to the communication bus, and the communication unit is configured to exchange data information between each of the programs based on the communication bus;

[0018] A notification unit, electrically connected to each of the programs, and the notification unit is configured to obtain the change information when the configuration of each of the programs changes, and send a prompt message based on the communication bus according to the change information.

[0019] Further, the program management module includes:

[0020] A configuration change unit, electrically connected to each of the programs respectively, wherein the configuration change unit is configured with an upload module, and the configuration change unit is configured to obtain the configuration information of each of the uploaded programs, and determine whether to update the configuration information of the program according to the relationship between the configuration information and the current configuration information of the program;

[0021] A signature unit, electrically connected to the configuration change unit, and the signature unit is configured to obtain the registration information of the configuration information when it is determined to update the configuration information of the program, and determine whether to sign the uploaded configuration information according to the relationship between the registration information of the configuration information and the registration information of the current configuration information.

[0022] Further, when the signature unit determines whether to sign the uploaded configuration information according to the relationship between the registration information of the configuration information and the registration information of the current configuration information, it includes:

[0023] The signature unit is further configured to determine whether to sign the uploaded configuration information according to the relationship between the service name of the configuration information and the API of the program and the service name and the API of the program in the current configuration information;

[0024] When the service name in the configuration information is consistent with the service name in the current configuration information, and the API of the program in the configuration information is inconsistent with the API of the program in the current configuration information, the signature unit does not sign the configuration information and generates an inquiry message to be sent based on the communication bus;

[0025] When the service name and the API of the program in the configuration information are both consistent with the service name and the API of the program in the current configuration information, the signature unit signs the configuration information;

[0026] When the service name and the API of the program in the configuration information are both inconsistent with the service name and the API of the program in the current configuration information, the signature unit does not sign the configuration information and generates an alarm message to be sent based on the communication bus.

[0027] Further, the user management module includes:

[0028] A user management unit, electrically connected to the communication unit, configured to obtain user information and user account information in each of the programs, and further configured to merge and file the user information and user account information in each of the programs;

[0029] An encryption unit, electrically connected to the user management unit, configured to encrypt the user information and user account information after filing.

[0030] Further, when the user management unit merges and files the user information and user account information in each of the programs, it includes:

[0031] The user management unit is further configured to remove duplicate data in each of the user information and user account information and generate a user profile;

[0032] The user management unit is further configured to obtain information permissions in the user account information and perform grouped management according to the information permissions.

[0033] Further, when the encryption unit is configured to encrypt the user information and user account information after filing, it includes:

[0034] The encryption unit is further configured to obtain the user profile and obtain each item information in the user profile, and determine the encryption processing method for each item information according to the relationship between the item information and the preset encrypted items pre-configured in the encryption unit:

[0035] When the item information is determined to be a high-sensitivity item, the encryption unit determines to perform isolated storage encryption on the item information;

[0036] When the item information is determined to be a low-sensitivity item, the encryption unit determines to perform authentication encryption on the item information;

[0037] When the genus information is determined to be non-sensitive, the encryption unit determines not to encrypt the genus information.

[0038] Further, the storage module includes:

[0039] A high-speed storage unit configured to store data with a high call frequency and / or low latency requirements;

[0040] A low-speed storage unit configured to store data with a low call frequency and no latency requirements;

[0041] An encrypted storage unit configured to store encrypted data;

[0042] A central control unit is electrically connected to the high-speed storage unit, the low-speed storage unit, the encrypted storage unit, the user management module, and the program management module respectively. The central control unit is configured to obtain the isolated storage encrypted information in the user management module, and the central control unit is further configured to control the encrypted storage unit to store the isolated storage encrypted information data; the central control unit is further configured to perform clustering and merging according to the service names in each of the user information, the registration information of each program, and the configuration information of each program, and generate a program file;

[0043] The central control unit is further configured to obtain the call frequency and latency requirements in each of the program files, and determine the storage unit of each of the program files according to the relationship between the call frequency and latency requirements and the preset call frequency and preset latency requirements pre-configured in the central control unit:

[0044] When the call frequency in the program file is higher than or equal to the preset call frequency, and / or the latency requirement is lower than the preset latency requirement, the central control unit determines that the program file is stored in the high-speed storage unit;

[0045] When the call frequency in the program file is lower than the preset call frequency, and / or the latency requirement is higher than or equal to the preset latency requirement, the central control unit determines that the program file is stored in the low-speed storage unit.

[0046] Compared with the prior art, the beneficial effects of the present invention are as follows: By means of the loading management module, preprocessing is carried out on the communication part of the program to be embedded. Meanwhile, a multi-application development environment is built to provide necessary basic support for the normal operation of other modules. This design not only ensures the smooth initial loading of each program, but also provides a unified environment for subsequent program development and operation, greatly simplifying the system deployment and development process. Secondly, the communication management module manages the communication tasks between each program. This module obtains and manages its registration information when the program starts, ensuring that all programs can be effectively identified. In addition, the communication management module also supports real-time data exchange between programs, providing efficient and stable data transmission capabilities through a message bus or a similar communication mechanism. Especially when the program configuration changes, the communication management module can actively obtain the change information and send it to the relevant program in a timely manner to ensure that the states of all parts of the system are consistent. The user management module, by obtaining user information from each program and merging and filing it, provides a centralized user management platform for the system. The user information will be encrypted after filing to ensure the security of sensitive data. Adopting this mechanism not only improves the access efficiency of user data, but also provides double protection for user privacy protection and data security through the combination of encryption algorithms and hierarchical storage. This design is particularly suitable for embedded system scenarios with high security requirements, such as industrial automation equipment or Internet of Things terminals. In addition, the program management module judges whether it is necessary to generate an update instruction by monitoring the difference between the current configuration and the registered configuration of the program. When the configuration needs to be updated, this module will sign the configuration data to verify the integrity and credibility of the data through digital signatures, ensuring that the updated data has not been tampered with during transmission and use. The updated configuration information is sent by the program management module to the relevant program, thus realizing the dynamic adjustment and secure update of the configuration. Finally, through the clustered storage of user information, program registration information and configuration information, the storage module can effectively reduce redundant data and improve storage utilization. At the same time, the storage module supports the optimization of storage allocation based on the clustering results. For example, by combining the hierarchical storage technology of SSD and HDD, it not only ensures the access speed of frequently accessed data, but also optimizes the use of storage space.

[0047] On the other hand, the present application also provides a multi-functional service integration method for an embedded system, including:

[0048] Preprocessing the communication part of each program and building the development environment of each said program;

[0049] Obtaining the registration information of each said program when it starts and pre-exchanging the data information between each said program;

[0050] Obtaining the change information of the program when the configuration of each said program changes and sending the change information of the program;

[0051] Obtain the user information in each of the programs, merge and file the user information, and encrypt the filed user information;

[0052] Determine whether to update the configuration information of each program according to the relationship between the configuration information of each program and the current configuration information of each program. Among them, when it is determined to update the configuration information of the program, then determine whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and send the configuration information with the signature to the program for update;

[0053] Perform clustering storage of each program according to the filed user information of each program, the registration information of each program, and the configuration information of each program, and perform storage allocation and optimization on the clustering storage of each program.

[0054] It can be understood that the multifunctional service integration platform and method of an embedded system in the above embodiments of the present invention have the same beneficial effects and will not be repeated. Description of the Drawings

[0055] By reading the detailed description of the preferred embodiments below, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only for the purpose of showing the preferred embodiments and are not considered to be a limitation of the present invention. Moreover, throughout the drawings, the same reference numerals are used to represent the same components. In the drawings:

[0056] Figure 1 It is a functional block diagram of the multifunctional service integration platform of the embedded system provided by the embodiment of the present invention;

[0057] Figure 2 It is a flow block diagram of the multifunctional service integration method of the embedded system provided by the embodiment of the present invention. Detailed Embodiments

[0058] Hereinafter, the exemplary embodiments of the present disclosure will be described in more detail with reference to the drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present disclosure can be completely conveyed to those skilled in the art. It should be noted that, without conflict, the embodiments in the present invention and the features in the embodiments can be combined with each other. Hereinafter, the present invention will be described in detail with reference to the drawings and in conjunction with the embodiments.

[0059] Such as Figure 1As shown, in some embodiments of the present application, this embodiment provides a multi-functional service integration platform for an embedded system, including: a loading management module, a communication management module, a user management module, a program management module, and a storage module.

[0060] Specifically, the loading management module is electrically connected to each program to be embedded. The loading management module is configured to preprocess the communication parts of each program and build the development environment of each program; the communication management module is electrically connected to the loading management module. The communication management module is configured to obtain the registration information when each program starts; the communication management module is also configured to exchange data information between each program; the communication management module is also configured to obtain the change information of each program when the configuration of each program changes, and send the change information of the program; the user management module is electrically connected to the communication management module. The user management module is configured to obtain each user information in each program, merge and file each user information, and encrypt each filed user information; the program management module is electrically connected to the communication management module. The program management module is configured to determine whether to issue an update instruction for the configuration information of each program according to the relationship between the configuration information of each program and the current configuration information of each program. Among them, when it is determined to issue an update instruction for the configuration information of the program, the program management module then determines whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and send the configuration information with the signature to the program for update; the storage module is electrically connected to the user management module and the program management module respectively. The storage module is configured to perform clustering storage of each program according to each filed user information, the registration information of each program, and the configuration information of each program; the storage module is also configured to perform storage allocation and optimization on the clustering storage of each program.

[0061] It can be understood that by preprocessing the communication parts of each program through the loading management module and building the development environment, it provides basic support for the operation of the program; the communication management module is responsible for obtaining the registration information when the program starts, supporting data exchange between programs, and timely obtaining and sending change information when the program configuration changes to ensure system state consistency; the user management module ensures the security of user data by obtaining user information in each program, merging and filing them, and using encryption technology; the program management module generates necessary update instructions through monitoring the status of program configuration information, and signs the configuration information to ensure the integrity and credibility of the updated data; the storage module efficiently stores and manages user information, program registration information, and configuration information through clustering storage and storage optimization technology, and combines the storage allocation optimization strategy to improve the resource utilization efficiency and access performance of the system.

[0062] Specifically, the loading management module includes: an initial unit and a loading basic unit. The initial unit is electrically connected to each program respectively, and the initial unit is configured to preprocess each communication unit and the communication bus electrically connected to each communication unit, where the preprocessing is initialization processing; the loading basic unit is electrically connected to each program respectively, the loading basic unit is configured with an SDK interface, documentation, an opkg tool, and an extension tool, the loading basic unit is configured to perform function management on each program, and the loading basic unit is further configured to detect the conflict relationships during the operation of each program and issue a recommended warning according to the conflict relationships; among them, the function management includes: program packaging management, program installation management, program uninstallation management, viewing program static information management, and program running information management.

[0063] It can be understood that the initial unit ensures the stability and compatibility of the program during loading and communication by performing initialization preprocessing on the communication units of each program and the communication bus connected to the communication units; the loading basic unit is configured with rich development and operation support tools (such as an SDK interface, documentation, an opkg tool, and an extension tool) for realizing the function management of the program, including packaging, installation, uninstallation, viewing static information, and running information management. At the same time, the loading basic unit has a conflict detection function, which can analyze potential conflict relationships during the operation of the program and issue corresponding recommended warnings, so as to provide operation optimization guidance for developers and avoid operation problems caused by resource contention or function conflicts. The overall technical principle enhances the intelligence and reliability of program loading through modular design and tool support, and provides an efficient loading and management mechanism for multi-application scenarios of embedded systems.

[0064] It can be seen that the initial unit performs initialization preprocessing on the communication parts of each program and their related communication buses. This preprocessing link not only ensures that the communication parts of each program can work properly, but also improves the stability and compatibility of communication by initializing the relevant parameters of the communication bus, thus laying a solid foundation for the subsequent program loading and operation. This initialization method is particularly applicable to complex embedded system environments with multiple programs running in parallel, effectively reducing the risks of communication conflicts and initialization failures. Secondly, the loading basic unit integrates rich tools and functional modules, including SDK interfaces, documentation, opkg tools, and extension tools. These tools provide comprehensive support for developers. The SDK interfaces and documentation provide necessary technical references for program development and debugging, while the opkg tools and extension tools simplify the processes of program installation, uninstallation, and update. In addition, the loading basic unit supports operations such as program packaging, installation, and uninstallation through a perfect function management mechanism, and also provides management functions for viewing program static information and running information. Through this function management, developers can easily master the status of the program and make necessary optimizations or adjustments. At the same time, the loading basic unit also has a conflict detection function. During the program operation, the loading basic unit can monitor the resource usage situations among multiple programs in real time, analyze possible conflict relationships, such as memory contention and I / O resource allocation conflicts. When detecting conflict risks, the system will issue a recommended warning in a timely manner, providing developers with feasible optimization solutions. This warning mechanism not only improves the stability of program operation, but also greatly reduces the risk of system crashes caused by resource competition or function conflicts, enhancing the robustness of the entire embedded system. Finally, the function management of the loading basic unit covers the full life cycle management of the program, from packaging to installation, from operation to uninstallation, ensuring the efficient operation of the program. Through the management functions of static information and running information, developers can comprehensively master the current status of the program, including the basic information of the program, version situation, and resource consumption during operation. These information provide important reference bases for developers to optimize program performance and troubleshoot potential problems.

[0065] Specifically, the communication management module includes: an information collection unit, a communication unit, and a notification unit. The information collection unit is electrically connected to each program respectively. The information collection unit is configured to obtain the registration information of each program at startup, where the registration information includes the service name of the program, the version of the program, and the API of the program; the communication unit is electrically connected to the communication bus. The communication unit is configured to exchange data information between each program based on the communication bus; the notification unit is electrically connected to each program. The notification unit is configured to obtain the change information when the configuration of each program changes, and send a prompt message based on the communication bus according to the change information.

[0066] It is understandable that the information collection unit obtains the registration information of each program at startup through electrical connection with each program, including the service name, version, and API of the program. This registration information provides basic data for subsequent communication management, ensuring that each program can be accurately identified and located. The communication unit is responsible for exchanging data between programs by connecting to the communication bus. This design allows for information sharing and data transmission between programs, ensuring the coordinated operation of multiple programs within the system. Finally, the notification unit issues prompt messages in a timely manner through the communication bus based on the configuration change information of each program, reminding relevant programs or users to make corresponding adjustments or updates, thereby achieving effective monitoring and feedback of configuration changes.

[0067] Specifically, the program management module includes: a configuration change unit and a signature unit. The configuration change unit is electrically connected to each program respectively. The configuration change unit is configured with an upload module and is configured to obtain the configuration information of each uploaded program and determine whether to issue an update instruction for the program's configuration information based on the relationship between the configuration information and the current configuration information of the program; the signature unit is electrically connected to the configuration change unit and is configured to, when it is determined to issue an update instruction for the program's configuration information, obtain the registration information of the configuration information and determine whether to sign the uploaded configuration information based on the relationship between the registration information of the configuration information and the registration information of the current configuration information.

[0068] Specifically, when the signature unit determines whether to sign the uploaded configuration information based on the relationship between the registration information of the configuration information and the registration information of the current configuration information, it includes: the signature unit is also configured to determine whether to sign the uploaded configuration information based on the relationship between the service name of the configuration information and the service name in the current configuration information, and the API of the program and the API of the program in the current configuration information: when the service name in the configuration information is consistent with the service name in the current configuration information, and the API of the program in the configuration information is inconsistent with the API of the program in the current configuration information, the signature unit does not sign the configuration information and generates inquiry information for transmission based on the communication bus; when the service name and the API of the program in the configuration information are both consistent with the service name and the API of the program in the current configuration information, the signature unit signs the configuration information; when the service name and the API of the program in the configuration information are both inconsistent with the service name and the API of the program in the current configuration information, the signature unit does not sign the configuration information and generates warning information for transmission based on the communication bus.

[0069] It is understandable that the configuration change unit determines whether an update instruction is required by obtaining the uploaded program configuration information and comparing it with the current configuration information. When a difference in the configuration information is detected, the signature unit decides whether to sign it based on the matching situation between the registration information and the current configuration information. Specifically, the signature unit determines whether to allow the update and signature of the configuration information by comparing the service name and API information. If the service names are the same but the APIs are different, the signature unit will not sign and generate inquiry information to notify the system or the user for handling; if both the service name and the API are the same, the signature unit signs the configuration information to ensure the validity of the configuration information; if both are different, an alarm message is generated to indicate a configuration anomaly and prevent the system from experiencing inconsistencies or potential risks.

[0070] Specifically, the user management module includes: a user management unit and an encryption unit. The user management unit is electrically connected to the communication unit. The user management unit is configured to obtain user information and user account information in each program, and the user management unit is also configured to merge and establish files based on the user information and user account information in each program; the encryption unit is electrically connected to the user management unit, and the encryption unit is configured to encrypt the user information and user account information after file establishment.

[0071] Specifically, when the user management unit merges and establishes files based on the user information and user account information in each program, it includes: the user management unit is also configured to remove duplicate data in each user information and user account information and generate a user file; the user management unit is also configured to obtain the information permissions in the user account information and perform grouped management according to the information permissions.

[0072] Specifically, when the encryption unit is configured to encrypt the user information and user account information after file establishment, it includes: the encryption unit is also configured to obtain the user file and obtain each item information in the user file, and determine the encryption processing method for each item information according to the relationship between the item information and the preset encryption items pre-configured in the encryption unit: when the item information is determined to be a high-sensitivity item, the encryption unit determines to perform isolated storage encryption on the item information; when the item information is determined to be a low-sensitivity item, the encryption unit determines to perform authentication encryption on the item information; when the item information is determined to be a non-sensitivity item, the encryption unit determines not to encrypt the item information.

[0073] It can be understood that the user management unit obtains user information and account information from each program, merges and files them, removes duplicate data, generates user profiles, and conducts grouped management according to information permissions for subsequent permission control and management. The encryption unit then encrypts these user profiles to ensure information security. The encryption process is differentially processed according to the sensitivity of each item of information in the user profile: for highly sensitive information, an isolated storage encryption method is used to ensure the independence and security of the data; for low-sensitive information, an authentication encryption method is used to increase the authentication level to ensure the secure transmission of information; and for non-sensitive information, no encryption is performed to reduce the performance overhead caused by encryption operations.

[0074] It can be seen that through the cooperation of the user management unit and the encryption unit, the user management module optimizes the system performance and response ability while ensuring the security of user information. First of all, the user management unit merges and files the user information and user account information in each program and removes duplicate data, ensuring the integrity and consistency of the information. In this process, the user management unit not only simply integrates the information, but also accurately identifies and manages the permissions of each user by analyzing the user account data in different programs. This can effectively avoid information redundancy, data conflicts or permission overlaps, ensuring that each user's file is unique and reliable. In addition, the user management unit can also dynamically allocate and manage permissions according to different application scenarios, program requirements and user permissions. Through the grouped management of information permissions, the system can flexibly adjust and optimize the operation permissions of each user in different programs, avoiding unnecessary permission conflicts or permission leakage problems. This permission management strategy not only increases the security of the system, but also makes the system more efficient and flexible when running in multiple application environments. Secondly, the encryption unit provides additional security for user information. According to the sensitivity of each item of information in different user files, a hierarchical encryption strategy is adopted. For highly sensitive information, such as the user's ID number, bank card number, etc., the isolation storage encryption method is used to ensure the independence and security of this information. Even if there is a leak during data storage or transmission, the harm to sensitive data can be minimized. For low-sensitive information, such as the user's contact information, historical operation records, etc., through authentication encryption technology, while ensuring information security, the performance burden caused by excessive encryption is avoided. This encryption strategy not only enhances data security, but also effectively optimizes the utilization of performance resources through differentiated processing methods. Finally, during the process of information encryption, the encryption unit also performs customized processing according to the sensitivity of each item of information in the user file. When the item of information is identified as a highly sensitive item, the encryption unit will isolate, store and encrypt it to ensure that this information is protected under any circumstances. For low-sensitive items, authentication encryption technology is adopted, so that the relevant data will only be decrypted and accessed when the user authentication is passed, which further improves the data security. For insensitive information, an unencrypted strategy is adopted to improve performance and response speed.

[0075] Specifically, the storage module includes: a high-speed storage unit, a low-speed storage unit, an encrypted storage unit, and a central control unit. The high-speed storage unit is configured to store data with a high call frequency and / or a low latency requirement; the low-speed storage unit is configured to store data with a low call frequency and no latency requirement; the encrypted storage unit is configured to store encrypted data; the central control unit is electrically connected to the high-speed storage unit, the low-speed storage unit, the encrypted storage unit, the user management module, and the program management module respectively. The central control unit is configured to obtain the isolated storage encryption information in the user management module, and the central control unit is further configured to control the encrypted storage unit to store the isolated storage encryption information data; the central control unit is further configured to perform clustering and merging based on the service names in each user information, each program's registration information, and each program's configuration information, and generate a program profile; the central control unit is further used to obtain the call frequency and latency requirement in each program profile, and determine the storage unit of each program profile according to the relationship between the call frequency and latency requirement and the preset call frequency and preset latency requirement pre-configured by the central control unit: when the call frequency in the program profile is higher than or equal to the preset call frequency and / or the latency requirement is lower than the preset latency requirement, the central control unit determines that the program profile is stored in the high-speed storage unit; when the call frequency in the program profile is lower than the preset call frequency and / or the latency requirement is higher than or equal to the preset latency requirement, the central control unit determines that the program profile is stored in the low-speed storage unit.

[0076] It can be understood that through the cooperation of the high-speed storage unit, the low-speed storage unit, the encrypted storage unit, and the central control unit, it is ensured that different types of data can be managed in the most suitable storage medium. The high-speed storage unit is dedicated to storing data with a relatively high call frequency and a relatively low latency requirement to ensure a fast response speed; the low-speed storage unit processes data with a relatively low call frequency and a relatively high latency requirement to optimize resource utilization. The encrypted storage unit is specifically used to store encrypted data to ensure data security. The central control unit, by obtaining the encrypted data in the user management module, controls the storage operation of the encrypted storage unit, and at the same time, by analyzing the call frequency and latency requirement in the program profile, dynamically decides to store the data in the high-speed storage unit or the low-speed storage unit. This storage scheduling mechanism based on data characteristics not only improves storage efficiency but also optimizes according to different data requirements to ensure the balance of storage performance and security.

[0077] In the above embodiments, the communication part of the program to be embedded is preprocessed by the loading management module, and at the same time, a multi-application development environment is built to provide necessary basic support for the normal operation of other modules. This design not only ensures the smooth initial loading of each program, but also provides a unified environment for subsequent program development and operation, greatly simplifying the system deployment and development process. Secondly, the communication management module manages the communication tasks between each program. This module obtains and manages its registration information when the program starts to ensure that all programs can be effectively identified. In addition, the communication management module also supports real-time data exchange between programs, providing efficient and stable data transmission capabilities through a message bus or similar communication mechanism. Especially when the program configuration changes, the communication management module can actively obtain the change information and send it to the relevant programs in a timely manner to ensure that the states of all parts of the system are consistent. The user management module provides a centralized user management platform for the system by obtaining user information from each program and merging and filing it. The user information will be encrypted after filing to ensure the security of sensitive data. Adopting this mechanism not only improves the access efficiency of user data, but also provides double protection for user privacy protection and data security through the combination of encryption algorithms and hierarchical storage. This design is particularly suitable for embedded system scenarios with high security requirements, such as industrial automation equipment or Internet of Things terminals. In addition, the program management module determines whether an update instruction needs to be generated by monitoring the difference between the current configuration and the registered configuration of the program. When the configuration needs to be updated, this module will sign the configuration data to verify the integrity and credibility of the data through digital signatures, ensuring that the updated data has not been tampered with during transmission and use. The updated configuration information is sent by the program management module to the relevant programs to achieve dynamic adjustment and secure update of the configuration. Finally, through the clustered storage of user information, program registration information, and configuration information, the storage module can effectively reduce redundant data and improve storage utilization. At the same time, the storage module supports optimization of storage allocation based on the clustering results. For example, by combining the hierarchical storage technology of SSD and HDD, it not only ensures the access speed of frequently accessed data, but also optimizes the use of storage space.

[0078] In another preferred manner based on the above embodiments, as Figure 2 shown, this embodiment provides a multi-functional service integration method for an embedded system, including:

[0079] Step S100, preprocess the communication part of each program and build the development environment of each program.

[0080] Step S200, obtain the registration information when each program starts and pre-exchange the data information between each program.

[0081] Step S300: Obtain the change information of the programs when each program configuration changes, and send the change information of the programs.

[0082] Step S400: Obtain each user information in each program, merge and file each user information, and encrypt each filed user information.

[0083] Step S500: Determine whether to issue an update instruction for the configuration information of each program according to the relationship between the configuration information of each program and the current configuration information of each program. Among them, when it is determined to issue an update instruction for the configuration information of the program, then determine whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and send the configuration information with the signature to the program for update.

[0084] Step S600: Perform clustering storage of each program according to the filed user information of each program, the registration information of each program, and the configuration information of each program, and perform storage allocation and optimization on the clustering storage of each program.

[0085] It can be understood that the multifunctional service integration platform and method of an embedded system in the above embodiments of the present invention have the same beneficial effects, which will not be repeated here.

[0086] Those skilled in the art should understand that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0087] The present application is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each flow and / or block in the flowchart and / or block diagram can be implemented by computer program instructions, and the combination of flows and / or blocks in the flowchart and / or block diagram. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate a machine for implementing the Figure 1 one flow or multiple flows and / or blocks Figure 1 device for the functions specified in one block or multiple blocks.

[0088] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to work in a particular manner, such that the instructions stored in the computer-readable memory produce a manufacture including an instruction device that implements the functions specified in one or more of the processes Figure 1 or blocks Figure 1 specified in one or more of the blocks.

[0089] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process, so that the instructions executed on the computer or other programmable apparatus provide steps for implementing the functions specified in one or more of the processes Figure 1 or blocks Figure 1 specified in one or more of the blocks.

[0090] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them. Although the present invention has been described in detail with reference to the above embodiments, those of ordinary skill in the art should understand that: modifications or equivalent replacements can still be made to the specific embodiments of the present invention, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention shall be covered by the protection scope of the claims of the present invention.

Claims

1. A multi-functional service integration platform for an embedded system, characterized in that Including: A loading management module, electrically connected to each program to be embedded. The loading management module is configured to preprocess the communication parts of each program and build the development environment of each program. A communication management module, electrically connected to the loading management module. The communication management module is configured to obtain the registration information when each program starts. The communication management module is also configured to exchange data information between each program. The communication management module is further configured to obtain the change information of each program when the configuration of each program changes, and send the change information of the program. A user management module, electrically connected to the communication management module. The user management module is configured to obtain each user information in each program, merge and file each user information, and encrypt each filed user information. A program management module, electrically connected to the communication management module. The program management module is configured to determine whether to issue an update instruction for the configuration information of each program according to the relationship between the configuration information of each program and the current configuration information of each program. Wherein, when it is determined to issue an update instruction for the configuration information of the program, the program management module then determines whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and send the configuration information with a signature to the program for update. A storage module, electrically connected to the user management module and the program management module respectively. The storage module is configured to perform clustering storage of each program according to each filed user information, the registration information of each program, and the configuration information of each program. The storage module is also configured to perform storage allocation and optimization on the clustering storage of each program.

2. The multi-functional service integration platform of the embedded system according to claim 1, characterized in that, The loading management module includes: An initial unit, electrically connected to each program respectively. The initial unit is configured to preprocess each communication part and the communication bus electrically connected to each communication part, wherein the preprocessing is initialization processing. A loading basic unit, electrically connected to each program respectively. The loading basic unit is configured with an SDK interface, document materials, an opkg tool, and an extension tool. The loading basic unit is configured to perform function management on each program. The loading basic unit is also configured to detect the conflict relationship when each program runs, and issue a suggestion warning according to the conflict relationship. Wherein, the function management includes: program packaging management, program installation management, program uninstallation management, viewing program static information management, and program running information management.

3. The multi-functional service integration platform of the embedded system according to claim 2, characterized in that, The communication management module includes: An information collection unit, electrically connected to each program respectively. The information collection unit is configured to obtain the registration information when each program starts, wherein the registration information includes the service name of the program, the version of the program, and the API of the program. A communication unit, electrically connected to the communication bus. The communication unit is configured to exchange data information between each program based on the communication bus. A notification unit, electrically connected to each of the programs, configured to obtain change information when there is a configuration change in each of the programs, and send a prompt message based on the communication bus according to the change information.

4. The multi-functional service integration platform of the embedded system according to claim 3, characterized in that, The program management module includes: A configuration change unit, electrically connected to each of the programs respectively, where the configuration change unit is configured with an upload module, and the configuration change unit is configured to obtain the configuration information of each of the uploaded programs, and determine whether to update the configuration information of the program according to the relationship between the configuration information and the current configuration information of the program; A signature unit, electrically connected to the configuration change unit, configured to obtain the registration information of the configuration information when it is determined to update the configuration information of the program, and determine whether to sign the uploaded configuration information according to the relationship between the registration information of the configuration information and the registration information of the current configuration information.

5. The multi-functional service integration platform of the embedded system according to claim 3, characterized in that, The user management module includes: A user management unit, electrically connected to the communication unit, configured to obtain user information and user account information in each of the programs, and the user management unit is also configured to merge and file according to the user information and user account information in each of the programs; An encryption unit, electrically connected to the user management unit, configured to encrypt the user information and user account information after filing.

6. The multifunctional service integration platform of the embedded system according to claim 5, characterized in that When the user management unit merges and files according to the user information and user account information in each of the programs, it includes: The user management unit is also configured to remove duplicate data in each of the user information and user account information and generate a user profile; The user management unit is also configured to obtain the information permissions in the user account information and perform grouped management according to the information permissions.

7. The multifunctional service integration platform of the embedded system according to claim 6, characterized in that, When the encryption unit is configured to encrypt the user information and user account information after filing, it includes: The encryption unit is also configured to obtain the user profile, and obtain each item information in the user profile, and determine the encryption processing method for each item information according to the relationship between the item information and the preset encryption items pre-configured in the encryption unit: When the item information is determined to be a high-sensitivity item, the encryption unit determines to perform isolated storage encryption on the item information; When the item information is determined to be a low-sensitivity item, the encryption unit determines to perform authentication encryption on the item information; When the item information is determined to be a non-sensitivity item, the encryption unit determines not to encrypt the item information.

8. The multi-functional service integration platform of the embedded system according to claim 4, characterized in that, When the signature unit determines whether to sign the uploaded configuration information according to the relationship between the registration information of the configuration information and the registration information of the current configuration information, it includes: The signature unit is also configured to determine whether to sign the uploaded configuration information according to the relationship between the service name of the configuration information and the API of the program and the service name and the API of the program in the current configuration information; When the service name in the configuration information is consistent with the service name in the current configuration information and the APIs of the programs in the configuration information are inconsistent with the APIs of the programs in the current configuration information, the signature unit does not sign the configuration information and generates inquiry information for transmission based on the communication bus; When the service name and the APIs of the programs in the configuration information are both consistent with the service name and the APIs of the programs in the current configuration information, the signature unit signs the configuration information; When the service name and the APIs of the programs in the configuration information are both inconsistent with the service name and the APIs of the programs in the current configuration information, the signature unit does not sign the configuration information and generates warning information for transmission based on the communication bus.

9. The multifunctional service integration platform of the embedded system according to claim 1, characterized in that The storage module includes: A high-speed storage unit configured to store data with high call frequency and / or low latency requirements; A low-speed storage unit configured to store data with low call frequency and no latency requirements; An encrypted storage unit configured to store encrypted data; A central control unit electrically connected to the high-speed storage unit, the low-speed storage unit, the encrypted storage unit, the user management module, and the program management module respectively. The central control unit is configured to obtain the isolated storage encryption information in the user management module. The central control unit is further configured to control the encrypted storage unit to store the isolated storage encryption information data; the central control unit is further configured to perform clustering and merging based on the service names in each user information, each program registration information, and each program configuration information, and generate program archives; The central control unit is further configured to obtain the call frequency and latency requirements in each program archive, and determine the storage unit of each program archive according to the relationship between the call frequency and latency requirements and the preset call frequency and preset latency requirements pre-configured in the central control unit: When the call frequency in the program archive is higher than or equal to the preset call frequency, and / or the latency requirement is lower than the preset latency requirement, the central control unit determines that the program archive is stored in the high-speed storage unit; When the call frequency in the program archive is lower than the preset call frequency, and / or the latency requirement is higher than or equal to the preset latency requirement, the central control unit determines that the program archive is stored in the low-speed storage unit.

10. A method for integrating multi-functional services in an embedded system, which uses the multi-functional service integration platform of the embedded system as described in any one of claims 1-9, characterized in that, Includes: Preprocess the communication parts of each program and build the development environment of each program; Obtain the registration information when each program starts and exchange the data information between each program in advance; Obtain the change information of the program when the configuration of each program changes and send the change information of the program; Obtain each user information in each program, merge and file each user information, and encrypt each filed user information; Determine whether to update the configuration information of each of the programs according to the relationship between the configuration information of each of the programs and the current configuration information of each of the programs. Among them, when it is determined to update the configuration information of the program, then determine whether to sign the configuration information of the program according to the relationship between the registration information and the registration information of the configuration information of the program, and send the configuration information with the signature to the program for update; Cluster and store each of the programs according to the established user information, the registration information of each of the programs, and the configuration information of each of the programs, and perform storage allocation and optimization on the clustered storage of each of the programs.

Images