Multi-terminal remote equipment management method and system

Abstract

The invention relates to the technical field of equipment management, in particular to a multi-terminal remote equipment management method and system. The method comprises the following steps: acquiring equipment information of stock equipment; grouping the stock devices based on the device information, constructing a corresponding virtual network for each device group, and accessing each stock device to the corresponding virtual network; when an access request of the newly-added device is received, calling a preset device list, and verifying the newly-added device based on newly-added device information contained in the access request and the preset device list; and if the newly-added device passes the verification, loading a protocol adaptation plug-in based on the newly-added device information, and accessing the newly-added device to the corresponding virtual network based on the newly-added device information. According to the method and the device, the compatibility problem of different devices can be solved, and continuously changing device management requirements are met.

Description

Technical Field

[0001] This application relates to the technical field of device management, and in particular, to a multi-terminal remote device management method and system. Background Art

[0002] With the rapid development of the Internet of Things, industrial Internet, and intelligent terminals, the large-scale access of multi-source heterogeneous devices has become the core challenge of remote device management systems. Related device management solutions usually adopt static network architectures and single communication protocols. However, this method is difficult to adapt to the mixed networking requirements of devices from different manufacturers and different protocols, resulting in problems such as poor cross-platform compatibility, rigid resource allocation, and low expansion efficiency in the system. Especially in scenarios such as industrial control and smart cities, existing devices need to work together with newly added intelligent devices, but the related technologies lack a unified dynamic adaptation mechanism, leading to low device access efficiency and high management complexity. Summary of the Invention

[0003] To solve the problem of poor management compatibility of existing technologies for multi-source heterogeneous devices, this application provides a multi-terminal remote device management method and system.

[0004] In a first aspect, this application provides a multi-terminal remote device management method, adopting the following technical solution: A multi-terminal remote device management method includes: Obtaining device information of existing devices; Grouping the existing devices based on the device information, constructing a corresponding virtual network for each device group, and connecting each existing device to the corresponding virtual network; When receiving an access request from a newly added device, retrieving a preset device list, and verifying the newly added device based on the information of the newly added device included in the access request and the preset device list; If the newly added device passes the verification, loading a protocol adaptation plugin based on the information of the newly added device, and connecting the newly added device to the corresponding virtual network based on the information of the newly added device.

[0005] By adopting the above technical solutions, the existing devices are grouped based on device information, and corresponding virtual networks are constructed to achieve classified management and network isolation of the devices. On the one hand, the pertinence and efficiency of device management are improved. On the other hand, data security and stable transmission between different device groups are ensured through the virtual network. When an access request from a new device is received, a preset device list is retrieved for verification to strictly control the security of device access, effectively preventing illegal devices from accessing and enhancing the overall security of the system. If the new device passes the verification, a protocol adaptation plugin is loaded based on its information and it is connected to the corresponding virtual network, solving the compatibility problem of different devices and ensuring that the new device can smoothly integrate into the system and achieve interconnection and interoperability with other devices. Thus, the entire multi-terminal remote device management system has good compatibility and scalability on the premise of ensuring security, can operate efficiently and stably, and meet the ever-changing device management requirements.

[0006] In a preferred example, this application can be further configured as: constructing a corresponding virtual network for each device group, including: Obtain the historical traffic data of the existing devices, and estimate the estimated total traffic of each device group based on the historical traffic data; Based on the estimated total traffic of each device group, allocate bandwidth for each device group; Based on the bandwidth of each device group, construct a corresponding virtual network for each device group.

[0007] By adopting the above technical solutions, obtaining the historical traffic data of the existing devices and estimating the estimated total traffic of each device group based on this can accurately grasp the future traffic demand trend of the device group; allocating bandwidth for each device group based on the estimated total traffic ensures that each device group can obtain bandwidth resources that meet business requirements during operation; constructing a corresponding virtual network for each device group based on the allocated bandwidth enables each virtual network to have the bandwidth capacity to adapt to its own business traffic needs, guaranteeing the efficiency and stability of data transmission within the device group.

[0008] In a preferred example, this application can be further configured as: after connecting each existing device to the corresponding virtual network, the method further includes: Monitor the traffic index data of each virtual network, and determine the traffic congestion degree of each virtual network based on the traffic index data; Sort each virtual network from high to low according to the traffic congestion degree to obtain a virtual network list; Determine the congested virtual network and the smooth virtual network from the virtual network list, and formulate a traffic adjustment strategy according to the service priority level and traffic index data of the congested virtual network and the smooth virtual network; Among them, the traffic adjustment strategy for any congested virtual network is one of the following: widening the bandwidth, reducing the data transmission frequency, and traffic shaping; when the traffic adjustment strategy for any congested virtual network is widening the bandwidth, the traffic adjustment strategy for the smooth virtual network is reducing the bandwidth.

[0009] By adopting the above technical solution, monitoring the traffic index data of each virtual network and determining the traffic congestion degree can accurately identify the operating status of each virtual network; sorting the virtual networks according to the congestion degree to form a list, visually presenting the network congestion situation; formulating a traffic adjustment strategy based on the service priority levels and traffic index data of the congested and smooth virtual networks, making differential processing according to the service importance and actual traffic demand. When a high-priority congested network needs to widen the bandwidth, the bandwidth of the corresponding smooth virtual network is reduced accordingly, realizing the dynamic reallocation of network resources, effectively balancing the utilization of network resources, ensuring the stable operation of critical services, and avoiding the excessive occupation of network resources by low-priority services.

[0010] In a preferred example of this application, it can be further configured as follows: formulating a traffic adjustment strategy according to the service priority levels and traffic index data of the congested virtual network and the smooth virtual network, including: When the service priority level of the target congested virtual network is the high priority level, determine that the traffic adjustment strategy for the target congested virtual network is widening the bandwidth, and determine the bandwidth widening amount of the target congested virtual network, where the target congested virtual network is any congested virtual network; Calculate the sum of the bandwidth widening amounts of the congested virtual networks whose traffic adjustment strategy is widening the bandwidth, and determine the maximum bandwidth reduction amount of each smooth virtual network based on the traffic index data; determine the bandwidth reduction amount of each smooth virtual network based on the sum of the bandwidth widening amounts and the maximum bandwidth reduction amount; When the service priority level of the target congested virtual network is the medium priority level, determine that the traffic adjustment strategy for the target congested virtual network is reducing the data transmission frequency; When the service priority level of the target congested virtual network is the low priority level, determine that the traffic adjustment strategy for the target congested virtual network is traffic shaping.

[0011] By adopting the above technical solution, formulating a strategy according to the service priority level and traffic index data, widening the bandwidth of the high-priority congested virtual network to ensure the smooth operation of critical services, calculating the sum of its bandwidth widening amounts, and accordingly reducing the bandwidth of the smooth virtual network to achieve reasonable resource allocation, reducing the data transmission frequency of the medium-priority congested virtual network to relieve congestion without affecting the services, and performing traffic shaping on the low-priority congested virtual network to optimize the network performance.

[0012] In a preferred example, the present application can be further configured as follows: the preset device list includes a device whitelist and a device blacklist; the verification of the new device based on the new device information included in the access request and the preset device list includes: Matching the new device information with the preset device list; If the new device information matches the device whitelist successfully, it is determined that the new device passes the verification; if the new device information matches the device blacklist successfully, it is determined that the new device fails the verification; If the new device information does not match the preset device list, determine the new service priority level of the new device and determine the feature matching lower limit corresponding to the new service priority level; Compare the features of the new device information and the device information to determine the number of successfully matched features. If the number of features is not less than the feature matching lower limit, it is determined that the new device passes the verification.

[0013] By adopting the above technical solution, the new device information is matched with the preset device list. If the whitelist is successfully matched, the device passes the verification, allowing trusted devices to access quickly. If the blacklist is successfully matched, the device is rejected, directly intercepting illegal devices. When the new device information does not match the preset device list, the device features are compared, strictly restricting untrusted devices and flexibly admitting new devices that meet business requirements, effectively ensuring system security.

[0014] In a preferred example, the present application can be further configured as follows: the device information includes data association information and service type; the grouping of the existing devices based on the device information includes: Based on the service type, divide the existing device group into several initial device groups; where each initial device group corresponds to a service priority level.

[0015] For each initial device group, based on the data association information, divide the devices with data association in the initial device group into the same device group to obtain multiple device groups after the existing devices are divided.

[0016] By adopting the above technical solution, the existing devices are divided into initial device groups according to the service type and given service priority levels, determining the classified management of devices with different service attributes, facilitating the allocation of resources according to priorities. Then, based on the data association information, the devices with data association in the initial device group are further subdivided into the same device group, reducing the data transmission loss across groups and realizing the scientific grouping and efficient management of existing devices.

[0017] In a preferred example, the present application can be further configured as follows: the method further includes: Receive heartbeats periodically sent by a target device, where the target device is any access device of any virtual network; When heartbeats are not received for a preset number of consecutive cycles, it is determined that the target device is offline, a removal countdown is triggered, and a removal signal is sent to the terminal device of the system administrator; Before the removal countdown reaches zero, if a stop timing signal sent by the system administrator through the terminal device is not received, the target device is removed from the virtual network where it is located when the removal countdown reaches zero.

[0018] By adopting the above technical solution, receiving periodic heartbeats of the target device, monitoring the online status of the device in real time, being able to detect offline devices in a timely manner, triggering a removal countdown for the determined offline device and notifying the administrator, giving time for troubleshooting, and removing the device if no stop signal is received when the countdown ends, can automatically clean up invalid connections and release system resources.

[0019] In a second aspect, the present application provides a multi-terminal remote device management system, adopting the following technical solution: A multi-terminal remote device management system includes: an electronic device and an inventory device; The electronic device is used to control and manage the inventory device; The inventory device is used to collect data and send it to the electronic device, and perform data interaction among the inventory devices.

[0020] In a preferred example of the present application, it can be further configured that: the electronic device includes: One or more processors; A memory; At least one application program, where at least one application program is stored in the memory and is configured to be executed by at least one processor, and the at least one application program is configured to: execute the multi-terminal remote device management method described in any item of the first aspect.

[0021] In summary, the present application includes the following beneficial technical effects: This application groups existing devices based on device information and constructs corresponding virtual networks to achieve classified management and network isolation of devices. On the one hand, it improves the pertinence and efficiency of device management. On the other hand, it ensures the data security and stable transmission between different device groups through virtual networks. When receiving an access request from a new device, it retrieves a preset device list for verification, strictly controls the security of device access, effectively prevents illegal devices from accessing, and enhances the overall security of the system. If the new device passes the verification, it loads a protocol adaptation plugin based on its information and accesses the corresponding virtual network, solving the compatibility problem of different devices and ensuring that the new device can smoothly integrate into the system and achieve interconnection and interoperability with other devices. Thus, the entire multi-terminal remote device management system has good compatibility and scalability while ensuring security, can operate efficiently and stably, and meet the ever-changing device management requirements. Brief Description of the Drawings

[0022] Figure 1 is a schematic flowchart of a multi-terminal remote device management method provided by an embodiment of this application; Figure 2 is a schematic structural diagram of an electronic device provided by an embodiment of this application. Detailed Description of the Embodiment

[0023] The following will further elaborate on this application in conjunction with the attached Figure 1 - attached Figure 2 for a more detailed description of this application.

[0024] This specific embodiment is merely an interpretation of this application and does not limit this application. After reading this specification, those skilled in the art can make modifications to this embodiment without creative contributions as needed, but as long as they are within the scope of the claims of this application, they are protected by the patent law.

[0025] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of this application. Obviously, the described embodiments are some, but not all, of the embodiments of this application. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of this application.

[0026] In addition, the term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " in this article generally represents an "or" relationship between the associated objects before and after, unless otherwise specified.

[0027] It should be noted that in the optional embodiments of the present application, for relevant data such as object information, when the embodiments of the present application are applied to specific products or technologies, object permission or consent needs to be obtained, and the collection, use, and processing of relevant data need to comply with relevant laws, regulations, and standards of relevant countries and regions. That is to say, if the embodiments of the present application involve data related to an object, it needs to be obtained under the authorization and consent of the object, the authorization and consent of relevant departments, and compliance with relevant laws, regulations, and standards of the country and region. In the embodiments, if personal information is involved, the consent of the individual needs to be obtained for all personal information. If sensitive information is involved, the separate consent of the information subject needs to be obtained, and the embodiments also need to be implemented under the authorization and consent of the object.

[0028] An embodiment of the present application provides a multi-terminal remote device management system, including an electronic device and an inventory device.

[0029] The electronic device is used to control and manage the inventory device. As the master device, the electronic device receives data from the inventory device, analyzes and processes this data, and sends control instructions to the inventory device to achieve the management of the inventory device.

[0030] The inventory device is used to collect data and send it to the electronic device, and perform data interaction between inventory devices. The data collected by the inventory device can be of various types, such as temperature, humidity, video, audio, etc., depending on the type and application scenario of the inventory device. Data interaction can be performed between inventory devices, enabling collaborative work between devices.

[0031] An embodiment of the present application provides a multi-terminal remote device management method, as Figure 1 shown. The method provided in the embodiments of the present application is applied to a multi-terminal remote device management system and is executed by an electronic device. The electronic device can be a server or a terminal device. Among them, the server can be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The terminal device can be a smart phone, a tablet computer, a notebook computer, a desktop computer, etc., but is not limited thereto. The terminal device and the server can be directly or indirectly connected through wired or wireless communication methods. The embodiments of the present application do not limit this. The method includes steps S101 - step S104, where: S101. Obtain the device information of the inventory device.

[0032] Specifically, the existing devices refer to the devices that have been connected to the system and need to be managed, such as routers, sensors, etc. The device management protocol can be used to establish connections with each existing device, and then obtain the device information of the existing devices. The device information includes device configuration information, data association information, and the service type of each existing device. The data association information indicates the devices with data interaction. The device configuration information covers information such as the IP address, MAC address, device type, operating system, software version, etc. of the device.

[0033] S102. Group the existing devices based on the device information, construct a corresponding virtual network for each device group, and connect each existing device to the corresponding virtual network.

[0034] Specifically, the device information includes the service type of the device. Based on the service type of each device, the existing devices are divided into several initial device groups, and each obtained initial device group corresponds to a service priority level. Among them, the service priority level can be divided into high priority level, medium priority level, and low priority level. The higher the service priority level, the more important the data sent by the devices in the device group.

[0035] Furthermore, for each initial device group, based on the data association information, the devices with data association in the initial device group are divided into the same device group. Data association means that data interaction between devices is required. In each obtained device group, any device has data association with another device in the same device group, and there is no data association between devices in different device groups.

[0036] Furthermore, technologies such as virtual private network (VPN), software-defined network (SDN), or virtual local area network (VLAN) are used to construct an independent virtual network for each device group. By configuring the network parameters of the device, such as IP address, subnet mask, gateway, etc., each existing device is connected to the corresponding virtual network. The virtual network can achieve isolation and secure communication on the basis of the physical network.

[0037] S103. When receiving an access request from a new device, retrieve the preset device list, and verify the new device based on the new device information included in the access request and the preset device list.

[0038] The preset device list includes a device white list and a device black list. The device white list represents the pre-divided secure devices, and the device black list represents the pre-divided dangerous devices. Both the device white list and the device black list contain device unique identifiers, such as device serial number, MAC address, IMEI code, UUID (Universally Unique Identifier), etc.

[0039] The newly added device information also includes the unique identifier of the newly added device, and the newly added device information is matched with the preset device list. If the newly added device information matches the device whitelist successfully, it is determined that the newly added device passes the verification. If the newly added device information matches the device blacklist successfully, it is determined that the newly added device fails the verification. When the newly added device information does not match the preset device list, the newly added device information is matched with the device information of the existing devices. If the match is successful, it is determined that the newly added device passes the verification.

[0040] S104. If the newly added device passes the verification, load the protocol adaptation plug-in based on the newly added device information, and connect the newly added device to the corresponding virtual network based on the newly added device information.

[0041] Specifically, according to the device type and communication protocol of the newly added device, load the corresponding protocol adaptation plug-in from the plug-in library. The protocol adaptation plug-in is a software module that realizes the conversion of communication protocols between different devices and enables the electronic device to communicate compatibly with the newly added device.

[0042] According to the service type included in the newly added device information, determine the virtual network that matches the service type of the newly added device from the previously divided virtual networks, and configure the network parameters of the newly added device and access it to the virtual network.

[0043] In this embodiment, the existing devices are grouped based on the device information, and the corresponding virtual networks are constructed to realize the classified management and network isolation of the devices. On the one hand, it improves the pertinence and efficiency of device management. On the other hand, it ensures the data security and stable transmission between different device groups through the virtual network. When receiving the access request of the newly added device, the preset device list is retrieved for verification, strictly controlling the security of device access, effectively preventing the access of illegal devices, and improving the overall security of the system. If the newly added device passes the verification, load the protocol adaptation plug-in based on its information and connect it to the corresponding virtual network, solving the compatibility problem of different devices, ensuring that the newly added device can be smoothly integrated into the system, and realizing the interconnection and interoperability with other devices. Thus, the entire multi-terminal remote device management system has good compatibility and scalability on the premise of ensuring security, can operate efficiently and stably, and meet the ever-changing device management requirements.

[0044] In a possible implementation manner of the embodiment of the present application, the device information includes data association information and service type; grouping the existing devices based on the device information includes: Based on the service type, divide the existing groups into several initial device groups; where each initial device group corresponds to a service priority level; For each initial device group, based on the data association information, divide the devices with data association in the initial device group into the same device group to obtain multiple device groups after the existing devices are divided.

[0045] In this embodiment, the service type of the existing devices is retrieved. The service type represents the specific service function performed by the device. The corresponding relationship between the service type and the service priority level is pre-stored in the database of the electronic device. The higher the service priority level, the more important the data collected or processed by the device. Optionally, for devices related to security monitoring, their service priority level can be set to a high priority level; for auxiliary services, such as non-critical statistical data collection, it can be set to a medium priority level; for some data storage services, it can be set to a low priority level. The specific corresponding relationship between the service priority level and the service type can be set according to the actual application scenario, which is not limited in this embodiment.

[0046] For each device in each initial device group, check its data association information, find other devices in the same initial device group that have data association with it, and divide the devices with data association into the same device group. For example, if there is data transmission between device A and device B, then device A and device B are divided into the same initial device group. Repeat the above steps until all existing devices are divided into the corresponding device groups.

[0047] In this embodiment, the existing devices are divided into initial device groups according to the service type and given service priority levels, determining the classification management of devices with different service attributes, facilitating the allocation of resources according to the priority. Then, based on the data association information, the devices with data association within the initial device group are further subdivided into the same device group, reducing the cross-group data transmission loss, and realizing the scientific grouping and efficient management of the existing devices.

[0048] A possible implementation manner of the embodiment of this application is to construct a corresponding virtual network for each device group, including: Obtain the historical traffic data of the existing devices, and estimate the estimated total traffic of each device group based on the historical traffic data; Allocate bandwidth for each device group based on the estimated total traffic of each device group; Construct a corresponding virtual network for each device group based on the bandwidth of each device group.

[0049] In this embodiment, during the daily operation of the existing devices, the network traffic data of each device is continuously collected through a network traffic monitoring tool and stored in the database of the electronic device. The historical traffic data of each existing device is retrieved from the database and classified and summarized according to the device groups to which the devices belong.

[0050] For each device group, align the historical traffic data of each device in terms of time and calculate the historical total traffic, which represents the variation of the total historical traffic of each device in the device group over time. Furthermore, statistical analysis methods or machine learning algorithms can be used for traffic prediction to estimate the estimated total traffic of each device group in the next cycle. The cycle can be flexibly set by technicians. At the beginning of each cycle, the bandwidth can be re-allocated to each device group according to the method provided in this embodiment, dynamically adjust the bandwidth allocation and execute the traffic adjustment strategy, so that network resources can better adapt to the dynamic changes of traffic and avoid the situation of bandwidth waste or shortage.

[0051] Suppose there are N device groups, and the estimated total traffic of each device group (device group 1, device group 2,..., device group N) is successively represented as estimated total traffic 1, estimated total traffic 2,..., estimated total traffic N. Allocate bandwidth to each device group proportionally based on the estimated total traffic. For device group 1, its bandwidth is: estimated total traffic 1 / (estimated total traffic 1 + estimated total traffic 2 +... + estimated total traffic N) × total network bandwidth. For device group 2, its bandwidth is: estimated total traffic 2 / (estimated total traffic 1 + estimated total traffic 2 +... + estimated total traffic N) × total network bandwidth. The same applies to the remaining devices.

[0052] After determining the bandwidth of each device group, through the configuration interface of the network device or using network management software, assign the calculated bandwidth value to the corresponding device group to complete the bandwidth allocation. According to the actual network environment and requirements, select appropriate virtual network technologies, such as Virtual Local Area Network (VLAN), Virtual Private Network (VPN), Software Defined Network (SDN), etc. Use the selected virtual network technology, through the configuration tool of the network device or the network management platform, create the corresponding virtual network for each device group according to the adjusted bandwidth parameters of each device group. For example, when configuring VLAN, set the upper and lower limits of the bandwidth of each VLAN to ensure that it operates within the allocated bandwidth range; when using SDN technology, centrally manage and control the network traffic through the controller and allocate the corresponding bandwidth resources to the virtual network of each device group. Gradually connect the existing devices in the device group to the newly constructed virtual network, check indicators such as the network connection status and data transmission rate of the devices to ensure that the devices can operate normally under the allocated bandwidth resources, and complete the construction work of the virtual network.

[0053] In this embodiment, by obtaining the historical traffic data of the existing devices and estimating the estimated total traffic of each device group based on this, the future traffic demand trend of the device group can be accurately grasped; the bandwidth is allocated to each device group based on the estimated total traffic to ensure that each device group can obtain the bandwidth resources that meet the service requirements during operation; a corresponding virtual network is constructed for each device group based on the allocated bandwidth, so that each virtual network has the bandwidth capacity to adapt to its own service traffic requirements, ensuring the efficiency and stability of data transmission within the device group.

[0054] In a possible implementation manner of the embodiment of the present application, after each existing device is connected to the corresponding virtual network, the method further includes: Monitoring the traffic index data of each virtual network and determining the traffic congestion degree of each virtual network based on the traffic index data; Sorting each virtual network from high to low according to the traffic congestion degree to obtain a virtual network list; Determining a congested virtual network and a smooth virtual network from the virtual network list, and formulating a traffic adjustment strategy according to the service priority levels and traffic index data of the congested virtual network and the smooth virtual network; Among them, the traffic adjustment strategy for any congested virtual network is one of: expanding the bandwidth, reducing the data transmission frequency, and traffic shaping; when the traffic adjustment strategy for any congested virtual network is to expand the bandwidth, the traffic adjustment strategy for the smooth virtual network is to reduce the bandwidth.

[0055] In this embodiment, the traffic index data may include multiple index data, such as bandwidth utilization rate, packet loss rate, data delay, etc. Technicians can set weights for each index according to actual service requirements. For each virtual network, the weighted sum result of the respective index data of the virtual network is used as the traffic congestion degree.

[0056] After obtaining the virtual network list, the congested virtual network and the smooth virtual network can be selected proportionally (selecting the top 10% of the virtual networks from the virtual network list as the congested virtual networks and the last 10% of the networks as the smooth virtual networks), or the congested virtual network and the smooth virtual network can be selected according to a preset threshold (taking the virtual networks in the virtual network list whose traffic congestion degree exceeds the preset congestion threshold as the congested virtual networks and taking the virtual networks in the list whose traffic congestion degree is lower than the preset smooth threshold as the smooth virtual networks).

[0057] In this embodiment, by monitoring the traffic metric data of each virtual network and determining the degree of traffic congestion, the running state of each virtual network can be accurately identified; the virtual networks are sorted according to the degree of congestion to form a list, visually presenting the network congestion situation; based on the service priority levels and traffic metric data of the congested and smooth virtual networks, a traffic adjustment strategy is formulated, and differential processing is carried out according to the service importance and actual traffic demand. When a high-priority congested network needs to expand its bandwidth, the bandwidth of the smooth virtual network is correspondingly reduced, realizing the dynamic reallocation of network resources, effectively balancing the utilization of network resources, ensuring the stable operation of critical services, and avoiding the excessive occupation of network resources by low-priority services.

[0058] A possible implementation manner of the embodiment of the present application is to formulate a traffic adjustment strategy according to the service priority levels and traffic metric data of the congested virtual networks and the smooth virtual networks, including: When the service priority level of the target congested virtual network is a high priority level, determine that the traffic adjustment strategy of the target congested virtual network is to expand the bandwidth, and determine the bandwidth expansion amount of the target congested virtual network, where the target congested virtual network is any congested virtual network; Calculate the sum of the bandwidth expansion amounts of each congested virtual network whose traffic adjustment strategy is to expand the bandwidth, and determine the maximum bandwidth reduction amount of each smooth virtual network based on the traffic metric data; determine the bandwidth reduction amount of each smooth virtual network based on the sum of the bandwidth expansion amounts and the maximum bandwidth reduction amount; When the service priority level of the target congested virtual network is a medium priority level, determine that the traffic adjustment strategy of the target congested virtual network is to reduce the data transmission frequency; When the service priority level of the target congested virtual network is a low priority level, determine that the traffic adjustment strategy of the target congested virtual network is traffic shaping.

[0059] In a possible case, there is a virtual network with a high priority level among the congested virtual networks. A bandwidth adjustment difference can be preset to represent the upper limit of the available bandwidth expansion amount of each congested virtual network. Since the total network bandwidth is fixed, the bandwidth of the smooth virtual network is reduced.

[0060] Specifically, determine the number m of virtual networks with a high priority level among the congested virtual networks, the number of smooth virtual networks is n, and the bandwidth adjustment difference × m represents the sum of the bandwidth expansion amounts. Calculate the average bandwidth of each smooth virtual network in the previous period based on the traffic metric data, and use the difference between its allocated available bandwidth and the average bandwidth as the maximum bandwidth reduction amount. Calculate the sum of the maximum bandwidth reduction amounts of n smooth virtual networks, and compare the sum of the bandwidth expansion amounts with the sum of the maximum bandwidth reduction amounts.

[0061] When the sum of the bandwidth widening amounts is greater than the sum of the maximum bandwidth reduction amounts, it indicates that there is not enough bandwidth to be reduced for the congested virtual networks. At this time, calculate the result of the sum of the maximum bandwidth reduction amounts / m as the bandwidth widening amount of the virtual networks with high priority levels in each congested virtual network. The bandwidth reduction amount of each smooth virtual network is its corresponding maximum bandwidth reduction amount.

[0062] When the sum of the bandwidth widening amounts is not greater than the sum of the maximum bandwidth reduction amounts, it indicates that there is enough bandwidth to be reduced for the congested virtual networks. At this time, use the bandwidth adjustment difference as the bandwidth widening amount of the virtual networks with high priority levels in each congested virtual network. Calculate the ratio of the maximum bandwidth reduction amount of each smooth virtual network to the sum of the maximum bandwidth reduction amounts of all smooth virtual networks, and use the product of the ratio of each smooth virtual network and the sum of the bandwidth widening amounts as the bandwidth reduction amount of this smooth virtual network.

[0063] After determining the bandwidth adjustment amount, through the network device configuration interface or network management software, reduce or increase the bandwidth allocation value of the virtual network that needs to be adjusted to complete the traffic adjustment operation.

[0064] In another possible situation, when the service priority level of the target congested virtual network is the medium priority level, modify the time interval parameter of data transmission in the service application program or network configuration of the device of the target congested virtual network to reduce the data transmission frequency. Among them, the reduction value of the data transmission frequency can be preset as a fixed value or a fixed ratio, which is not limited in this embodiment.

[0065] In another possible situation, when the service priority level of the target congested virtual network is the low priority level, determine that the traffic adjustment strategy of the target congested virtual network is traffic shaping. Pre-configure traffic shaping rules on network devices (such as routers, firewalls) and enable the traffic shaping function.

[0066] This embodiment formulates strategies according to the service priority level and traffic index data, widens the bandwidth of the congested virtual networks with high priority to ensure the smooth operation of key services, calculates the sum of its bandwidth widening amounts, and accordingly reduces the bandwidth of the smooth virtual networks to achieve reasonable resource allocation. Reduce the data transmission frequency of the congested virtual networks with medium priority level to relieve congestion without affecting the services, and perform traffic shaping on the congested virtual networks with low priority level to optimize the network performance.

[0067] A possible implementation manner of the embodiment of this application, the preset device list includes a device white list and a device black list; based on the new device information included in the access request and the preset device list, verify the new device, including: Match the new device information with the preset device list; If the newly added device information matches the device whitelist successfully, it is determined that the newly added device passes the verification; if the newly added device information matches the device blacklist successfully, it is determined that the newly added device fails the verification; If the newly added device information does not match the preset device list, determine the priority level of the newly added service of the newly added device, and determine the lower limit of feature matching corresponding to the priority level of the newly added service; Compare the features of the newly added device information with the device information to determine the number of successfully matched features. If the number of features is not less than the lower limit of feature matching, it is determined that the newly added device passes the verification.

[0068] In this embodiment, when the newly added device information does not match the preset device list, compare the features of the newly added device information with the device information. The features include but are not limited to: hardware parameters, software version, IP address area, communication protocol. The lower limit of feature matching can be a quantity or a ratio. When the ratio of the number of successfully matched features to the number of features to be matched is not less than the ratio of the lower limit of feature matching, it is determined that the newly added device passes the verification.

[0069] In this embodiment, the newly added device information is matched with the preset device list. If the whitelist matches successfully, it passes the verification and quickly allows the trusted device to access. If the blacklist matches successfully, it is rejected and directly intercepts the illegal device. When the newly added device information does not match the preset device list, compare the device features, strictly restrict the untrusted device, and flexibly accept the new device that meets the business requirements, effectively ensuring the system security.

[0070] A possible implementation manner of the embodiment of the present application, the method further includes: Receive the heartbeat packet periodically sent by the target device, where the target device is any access device of any virtual network; When the heartbeat packet is not received for a preset number of consecutive cycles, it is determined that the target device is offline, trigger the removal countdown, and send a removal signal to the terminal device of the system administrator; Before the removal countdown reaches zero, if the stop timing signal sent by the system administrator through the terminal device is not received, then when the removal countdown reaches zero, remove the target device from the virtual network where it is located.

[0071] In this embodiment, when the target device sends a heartbeat packet, it will include its own unique identification information in the packet, such as device ID, MAC address, etc. After the electronic device receives the heartbeat packet, it accurately identifies the sending device according to these identification information. The technical personnel preset a threshold for the number of consecutive cycles without receiving the heartbeat packet according to the network environment and device characteristics. For example, if the heartbeat packet sending cycle of the device is 1 minute, the preset number can be set to 5, that is, subsequent processing is performed when the heartbeat packet is not received for 5 consecutive minutes.

[0072] Once it is determined that the target device is offline, the removal countdown is immediately triggered. The duration of the countdown can be set according to actual needs, such as 10 minutes. The electronic device sends a removal signal to the terminal device of the system administrator through a message push service (such as SMS, email, instant messaging software, etc.). The removal signal should include the identification information of the target device, the offline time, and the remaining duration of the removal countdown, etc. During the removal countdown, continuously monitor the stop timing signal sent by the system administrator through the terminal device. If a stop timing signal sent by the system administrator is received before the removal countdown reaches zero, immediately stop the removal countdown and mark the target device as a device to be observed. If the removal countdown reaches zero and no stop timing signal is received, perform the removal operation.

[0073] The electronic device communicates with network devices (such as routers, switches, etc.) in the virtual network where the target device is located, and removes the target device from the virtual network where it is located by modifying the network configuration. For example, delete the IP address allocation record of the target device, cancel its access permission in the virtual network, etc. And record the removal information of the target device in the system log, including device identification, removal time, removal reason, etc., which is helpful for subsequent network management and troubleshooting.

[0074] This embodiment receives periodic heartbeat packets of the target device, monitors the online status of the device in real time, can timely detect offline devices, trigger the removal countdown for the determined offline devices and notify the management personnel, giving time for troubleshooting. If no stop signal is received after the countdown ends, the device is removed, which can automatically clean up invalid connections and release system resources.

[0075] In the embodiment of the present application, an electronic device is provided, such as Figure 2 shown, Figure 2 The electronic device 200 shown includes: a processor 201 and a memory 203. Among them, the processor 201 and the memory 203 are connected, such as through a bus 202. Optionally, the electronic device 200 may further include a transceiver 204. It should be noted that in practical applications, the transceiver 204 is not limited to one, and the structure of the electronic device 200 does not constitute a limitation to the embodiment of the present application.

[0076] The processor 201 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It can implement or execute various exemplary logical blocks, modules, and circuits described in connection with the disclosure of this application. The processor 201 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0077] The bus 202 may include a path for transmitting information between the above components. The bus 202 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The bus 202 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 2 only a thick line is shown in the figure, but it does not mean that there is only one bus or one type of bus.

[0078] The memory 203 may be a ROM (Read Only Memory) or other type of static storage device that can store static information and instructions, a RAM (Random Access Memory) or other type of dynamic storage device that can store information and instructions, or it may also be an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory), or other optical disc storage, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic storage media, or other magnetic storage devices, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0079] The memory 203 is used to store the application program code for executing the solution of this application, and is controlled by the processor 201 to execute. The processor 201 is used to execute the application program code stored in the memory 203 to implement the content shown in the foregoing embodiments of the multi-terminal remote device management method.

[0080] Figure 2 The electronic device shown is only an example and should not impose any limitations on the functions and usage scope of the embodiments of this application.

[0081] It should be understood that although the steps in the flowchart of the accompanying drawings are shown in sequence according to the indication of the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise clearly stated in this document, there is no strict order restriction for the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order is not necessarily sequential, but can be executed alternately or in turn with at least a part of other steps or sub-steps or stages of other steps.

[0082] The above are only some implementation manners of this application. It should be noted that for those of ordinary skill in the art, without departing from the principle of this application, several improvements and refinements can be made, and these improvements and refinements should also be regarded as the protection scope of this application.

Claims

1. A multi-terminal remote device management method, characterized in that, Applied to a multi-terminal remote device management system and executed by an electronic device, the method includes: Obtain the device information of the existing devices; Group the existing devices based on the device information, construct a corresponding virtual network for each device group, and connect each existing device to the corresponding virtual network; When receiving an access request for a new device, retrieve a preset device list, and verify the new device based on the new device information included in the access request and the preset device list; If the new device passes the verification, load a protocol adaptation plugin based on the new device information, and connect the new device to the corresponding virtual network based on the new device information.

2. The multi-terminal remote device management method according to claim 1, wherein The constructing a corresponding virtual network for each device group includes: Obtain the historical traffic data of the existing devices, and estimate the estimated total traffic of each device group based on the historical traffic data; Allocate bandwidth for each device group based on the estimated total traffic of each device group; Construct a corresponding virtual network for each device group based on the bandwidth of each device group.

3. The multi-terminal remote device management method according to claim 1, wherein After connecting each existing device to the corresponding virtual network, the method further includes: Monitor the traffic metric data of each virtual network, and determine the traffic congestion degree of each virtual network based on the traffic metric data; Sort the virtual networks in descending order according to the traffic congestion degree to obtain a virtual network list; Determine congested virtual networks and smooth virtual networks from the virtual network list, and formulate a traffic adjustment strategy according to the service priority levels and traffic metric data of the congested virtual networks and the smooth virtual networks; Among them, the traffic adjustment strategy for any congested virtual network is one of: expanding the bandwidth, reducing the data transmission frequency, and traffic shaping; when the traffic adjustment strategy for any congested virtual network is expanding the bandwidth, the traffic adjustment strategy for the smooth virtual network is reducing the bandwidth.

4. The multi-terminal remote device management method according to claim 3, wherein The formulating a traffic adjustment strategy according to the service priority levels and traffic metric data of the congested virtual networks and the smooth virtual networks includes: When the service priority level of the target congested virtual network is the high priority level, determine that the traffic adjustment strategy for the target congested virtual network is expanding the bandwidth, and determine the bandwidth expansion amount of the target congested virtual network, where the target congested virtual network is any congested virtual network; Calculate the sum of the bandwidth expansion amounts of the congested virtual networks whose traffic adjustment strategy is expanding the bandwidth, and determine the maximum bandwidth reduction amount of each smooth virtual network based on the traffic metric data; determine the bandwidth reduction amount of each smooth virtual network based on the sum of the bandwidth expansion amounts and the maximum bandwidth reduction amount; When the service priority level of the target congested virtual network is the medium priority level, determine that the traffic adjustment strategy for the target congested virtual network is reducing the data transmission frequency; When the service priority level of the target congested virtual network is the low priority level, determine that the traffic adjustment strategy for the target congested virtual network is traffic shaping.

5. The multi-terminal remote device management method according to claim 1, wherein, The preset device list includes a device whitelist and a device blacklist; the verification of the new device based on the new device information included in the access request and the preset device list includes: Matching the new device information with the preset device list; If the new device information matches the device whitelist successfully, it is determined that the new device passes the verification; if the new device information matches the device blacklist successfully, it is determined that the new device fails the verification; If the new device information does not match the preset device list, determine the new service priority level of the new device and determine the feature matching lower limit corresponding to the new service priority level; Compare the features of the new device information with the device information to determine the number of successfully matched features. If the number of features is not less than the feature matching lower limit, it is determined that the new device passes the verification.

6. The multi-terminal remote device management method according to claim 1, characterized in that The device information includes data association information and service type; the grouping of the existing devices based on the device information includes: Based on the service type, divide the existing device group into several initial device groups; where each initial device group corresponds to a service priority level; For each initial device group, based on the data association information, divide the devices with data association in the initial device group into the same device group to obtain multiple device groups after the existing devices are divided.

7. The multi-terminal remote device management method according to claim 1, wherein The method further includes: Receiving a heartbeat packet periodically sent by a target device, where the target device is any access device of any virtual network; When the heartbeat packet is not received for a continuous preset number of cycles, it is determined that the target device is offline, trigger a removal countdown, and send a removal signal to the terminal device of the system administrator; Before the removal countdown reaches zero, if the stop timing signal sent by the system administrator through the terminal device is not received, when the removal countdown reaches zero, remove the target device from the virtual network where it is located.

8. A multi-terminal remote device management system, characterized in that, Including: An electronic device and existing devices; The electronic device is used to control and manage the existing devices; The existing devices are used to collect data and send it to the electronic device, and perform data interaction among the existing devices.

9. The multi-terminal remote device management system according to claim 8, wherein The electronic device includes: At least one processor; A memory; At least one application program, where at least one application program is stored in the memory and is configured to be executed by at least one processor. The at least one application program is configured to: execute the multi-terminal remote device management method according to any one of claims 1-7.

Images