Authority management method and device, electronic equipment and computer readable storage medium

Abstract

The invention relates to the technical field of communication, and provides an authority management method and device, electronic equipment and a computer readable storage medium. The method comprises the following steps: acquiring an equipment health value and a network risk value of an operated and maintained device, and acquiring an operation similarity and an operation compliance value of an operation and maintenance device; and determining an initial trust value according to a preset weight coefficient, the equipment health value, the network risk value, the operation similarity and the operation compliance value. According to the initial trust value and the decay time interval, the decay trust value is determined, the decay trust value is in positive correlation with the initial trust value, the decay trust value is in negative correlation with the decay time interval, the starting moment of the decay time interval is the starting moment of the remote operation and maintenance operation, and the ending moment of the decay time interval is the current moment. And changing the remote operation and maintenance right of the operation and maintenance device according to the attenuation trust value. According to the technical scheme provided by the invention, the operation and maintenance authority can be flexibly adjusted in real time according to the operation and maintenance environment, and the operation reliability and safety of the operation and maintenance system are improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a rights management method, device, electronic device, and computer-readable storage medium. Background Art

[0002] In the power system, with the rapid advancement of the intelligent process, remote operation and maintenance technology has become a key means to ensure the stability of power system operation and effectively reduce operation and maintenance costs.

[0003] During remote operation and maintenance (O&M), the security of the permissions management mechanism directly determines the overall protection effectiveness of the system. However, traditional permission management methods generally rely on static authentication mechanisms, such as those based on usernames and passwords. This approach carries significant security risks. Once a password is leaked, any non-O&M personnel who obtains the password can gain persistent system access, potentially leading to major security incidents such as device misoperation and data tampering, impacting the stability and security of system operations. Summary of the Invention

[0004] The embodiments of the present application provide a permission management method, device, chip, electronic device and computer-readable storage medium, which can flexibly adjust operation and maintenance permissions in real time according to the operation and maintenance environment, thereby improving the stability and security of the system.

[0005] In the first aspect, the present application provides a permission management method, which is applied to a service management device, wherein the service management device is connected to an operation and maintenance device and an operated and maintained device respectively. The method includes: obtaining a device health value and a network risk value of the operated and maintained device, and obtaining an operation similarity and an operation compliance value of the operation and maintenance device. The device health value is used to characterize the operational safety of the operated and maintained device, the network risk value is used to characterize the security of the network environment in which the operated and maintained device is located, the operation similarity is used to characterize the similarity between the operation instructions received by the operation and maintenance device and the historical operation instructions, and the operation compliance value is used to characterize the standardization of the operation instructions. An initial trust value is determined based on a preset weight coefficient, a device health value, a network risk value, an operation similarity, and an operation compliance value. A decaying trust value is determined based on the initial trust value and a decaying time interval. The decaying trust value is positively correlated with the initial trust value, and negatively correlated with the decaying trust value. The starting time of the decaying time interval is the starting time of the remote operation and maintenance operation, and the ending time of the decaying time interval is the current time. According to the decaying trust value, the remote operation and maintenance authority of the operation and maintenance device is changed.

[0006] In some embodiments, the remote operation and maintenance permission is a high-trust permission, a medium-trust permission, or a low-trust permission, and the remote operation and maintenance permission of the operation and maintenance device is changed according to the attenuation trust value, including: if the attenuation trust value is greater than or equal to a first preset trust value, the remote operation and maintenance permission of the operation and maintenance device is changed to a high-trust permission. If the attenuation trust value is greater than or equal to a second preset trust value and less than the first preset trust value, the remote operation and maintenance permission of the operation and maintenance device is changed to a medium-trust permission, and the second preset trust value is less than the first preset trust value. If the attenuation trust value is less than the second preset trust value, the remote operation and maintenance permission of the operation and maintenance device is changed to a low-trust permission.

[0007] In some embodiments, when the remote operation and maintenance authority of the operation and maintenance device is a low-trust authority, the authority management method also includes: interrupting all operation permissions of the operation and maintenance device, and sending a secondary authentication instruction to the operation and maintenance device, and the secondary authentication instruction is used to instruct the operation and maintenance device to display the authentication prompt information corresponding to the secondary authentication instruction.

[0008] In some embodiments, the preset weight coefficients include a first weight coefficient, a second weight coefficient, a third weight coefficient, and a fourth weight coefficient. Determining an initial trust value based on the preset weight coefficients, a device health value, a network risk value, an operation similarity, and an operation compliance value includes: obtaining the first weight coefficient, the second weight coefficient, the third weight coefficient, and the fourth weight coefficient. Weighting the device health value according to the first weight coefficient to obtain a first weighted value. Weighting the network risk value according to the second weight coefficient to obtain a second weighted value. Weighting the operation similarity according to the third weight coefficient to obtain a third weighted value. Weighting the operation compliance value according to the fourth weight coefficient to obtain a fourth weighted value. Determining the sum of the first weighted value, the second weighted value, the third weighted value, and the fourth weighted value as the initial trust value.

[0009] In some embodiments, determining the decaying trust value based on the initial trust value and the decaying time interval includes: determining an exponential decay model based on the decaying time interval, and inputting the initial trust value into the exponential decay model to obtain the decaying trust value.

[0010] In some embodiments, before obtaining the device health value and network risk value of the operated and maintained device, the method further includes: in response to an authentication request sent by the operation and maintenance device, sending a first connection port and a first set of communication keys to the operation and maintenance device. In response to a service channel establishment request sent by the operation and maintenance device, monitoring the first connection port. In response to a connection request monitored through the first connection port, determining whether the connection request carries the first set of communication keys. If the connection request carries the first set of communication keys, establishing a connection with the operation and maintenance device.

[0011] In some embodiments, after monitoring the first connection port, the method further includes monitoring operation instructions of the operation and maintenance device through the first connection port, and if an abnormal operation instruction is monitored, changing the remote operation and maintenance authority of the operation and maintenance device to a low-trust authority.

[0012] In a second aspect, the present application provides a rights management device, wherein the rights management device is connected to an operation and maintenance device and an operated and maintained device, respectively, and the device includes:

[0013] Acquisition module: used to obtain the equipment health value and network risk value of the operated and maintained device, as well as the operation similarity and operation compliance value of the operated and maintained device. The equipment health value is used to characterize the operational safety level of the operated and maintained device, the network risk value is used to characterize the security level of the network environment in which the operated and maintained device is located, the operation similarity is used to characterize the similarity between the operation instructions received by the operation and maintenance device and the historical operation instructions, and the operation compliance value is used to characterize the standardization level of the operation instructions.

[0014] The processing module is used to determine the initial trust value based on the preset weight coefficient, the device health value, the network risk value, the operation similarity and the operation compliance value.

[0015] The processing module is also used to determine the decaying trust value based on the initial trust value and the decaying time interval. The decaying trust value is positively correlated with the initial trust value, and the decaying trust value is negatively correlated with the decaying time interval. The starting time of the decaying time interval is the starting time of the remote operation and maintenance operation, and the ending time of the decaying time interval is the current time.

[0016] The processing module is further used to change the remote operation and maintenance authority of the operation and maintenance device according to the attenuated trust value.

[0017] In a third aspect, the present application provides a chip, which is used to execute any method in the first aspect above.

[0018] In a fourth aspect, the present application provides an electronic device, comprising a processor and a memory, wherein the processor is configured to execute a computer program stored in the memory to implement the method as described in any one of the first aspects above. Alternatively,

[0019] The electronic device includes the chip according to the third aspect.

[0020] In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method as described in any one of the above-mentioned first aspects.

[0021] In the technical solution provided by this application, a service management device is connected to an operation and maintenance device and an operated device. The service management device first obtains the device health value and network risk value of the operated device, as well as the operation similarity and operation compliance value of the operation device. The device health value indicates the operational security of the operated device, the network risk value indicates the security of the network environment in which the operated device resides, the operation similarity indicates the similarity between the operation instructions received by the operation and maintenance device and historical operation instructions, and the operation compliance value indicates the degree of compliance with the operation instructions. An initial trust value is then determined based on preset weight coefficients, the device health value, the network risk value, the operation similarity, and the operation compliance value. A decaying trust value is then determined based on the initial trust value and a decaying time interval. The decaying trust value is positively correlated with the initial trust value and negatively correlated with the decaying time interval. The decaying time interval starts at the start time of the remote operation and maintenance operation, and ends at the current time. Finally, the remote operation and maintenance permissions of the operation and maintenance device are modified based on the decaying trust value. The service management device can flexibly adjust operation and maintenance permissions in real time based on the operation and maintenance environment, thereby improving the reliability and security of the operation and maintenance system. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the embodiments or descriptions of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0023] Figure 1 This is a schematic diagram of the remote operation and maintenance system architecture of a rights management method provided in an embodiment of the present application;

[0024] Figure 2 This is a flow chart of a connection establishment method provided in an embodiment of the present application;

[0025] Figure 3 This is a flowchart of a rights management method provided by an embodiment of the present application;

[0026] Figure 4 This is a schematic diagram of the structure of a rights management device provided in an embodiment of the present application;

[0027] Figure 5 This is a structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0028] In the following description, specific details such as specific system structures and technologies are provided for illustration rather than limitation to facilitate a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to avoid obstructing the description of the present application with unnecessary details.

[0029] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0030] It will also be understood that the term "and / or" used in this specification and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0031] As used in this specification and the appended claims, the term "if" can be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting," depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]," depending on the context.

[0032] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0033] References to "one embodiment" or "some embodiments" in this specification mean that a particular feature, structure, or characteristic described in conjunction with that embodiment is included in one or more embodiments of the present application. Thus, phrases such as "in one embodiment," "in some embodiments," "in other embodiments," and "in other embodiments" appearing in various places in this specification do not necessarily refer to the same embodiment, but rather mean "one or more but not all embodiments," unless otherwise specifically emphasized. The terms "including," "comprising," "having," and variations thereof all mean "including but not limited to," unless otherwise specifically emphasized.

[0034] In power systems, remote operation and maintenance (O&M) technology is a crucial tool for improving grid O&M efficiency and optimizing human resource allocation. During remote O&M, the O&M system typically uses static identity authentication to verify the identity of the operator, thereby determining whether to grant O&M permissions.

[0035] Specifically, the operation and maintenance personnel can enter static identity authentication data such as a username and password, a username and digital certificate, or a username and biometrics through a terminal device (such as a computer, personal computer, or PC). The terminal device responds to the static identity authentication data and sends it to the operation and maintenance system. After receiving the static identity authentication data, the operation and maintenance system performs a verification process on the static identity authentication data. If the verification passes, the operation and maintenance system grants operation and maintenance permissions to the terminal device.

[0036] However, this static authentication method has a high security risk. Once the static identity authentication data is leaked, any non-operation and maintenance personnel who obtains the static identity authentication data can obtain continuous system access rights, resulting in major security incidents such as equipment misoperation and data tampering, affecting the stability and security of system operation.

[0037] In addition, when there are security risks in the network environment, the static identity authentication method is difficult to cope with the complex network environment, and the security of the operation and maintenance of the operation and maintenance system will be affected by network security risks. The static identity authentication method is difficult to flexibly adjust the operation and maintenance permissions and cannot adapt to the security needs of diversified operation and maintenance scenarios.

[0038] In view of this, embodiments of the present application provide a rights management method, apparatus, electronic device, and computer-readable storage medium that can flexibly adjust operation and maintenance rights in real time according to the operation and maintenance environment, thereby improving the reliability and security of the operation and maintenance system.

[0039] The rights management method provided in the embodiment of the present application can be applied to a service management device, and the service management device is in a connected state with an operation and maintenance device and an operated and maintained device respectively.

[0040] For example, Figure 1 This is a schematic diagram of the remote operation and maintenance system architecture of a rights management method provided in an embodiment of the present application. Figure 1 As shown, the remote operation and maintenance system can include an operation and maintenance device (i.e., a remote operation and maintenance client), a service management device (i.e., a remote operation and maintenance trust management and service gateway center), and an operated and maintained device (i.e., a plant equipment). The operation and maintenance device can be located at the master station, and the operation and maintenance device and the service management device are in a connected state. Specifically, the operation and maintenance device can establish a communication connection with the service management device through an authentication channel. After the connection is successfully established, the operation and maintenance device can interact with the service management device through a business channel.

[0041] Figure 2 A flow chart of a connection establishment method provided in an embodiment of the present application. In an embodiment of the present application, the method for establishing a connection between the operation and maintenance device and the service management device may be:

[0042] Step 201: The operation and maintenance device sends an authentication request to the service management device.

[0043] In an embodiment of the present application, the authentication request may include a unique identifier such as the MAC address and / or IP information of the operation and maintenance device. This allows the service management device to verify the identity of the operation and maintenance device. The operation and maintenance device may send an authentication request to the service management device through an authentication channel.

[0044] Step 202: The service management device sends a first connection port and a first set of communication keys to the operation and maintenance device in response to the authentication request sent by the operation and maintenance device.

[0045] In the embodiment of the present application, the service management device can randomly assign a connection port and a set of communication keys to the operation and maintenance device.

[0046] Step 203: The operation and maintenance device sends a service channel establishment request to the operation and maintenance device through the first connection port in response to the received first connection port and the first group of communication keys.

[0047] The operation and maintenance device may send a service channel construction request to the service management device through the first connection port to facilitate construction of the service channel.

[0048] Step 204: The service management device monitors the first connection port in response to the service channel establishment request sent by the operation and maintenance device.

[0049] The service management device may monitor the first connection port according to the allocated first connection port, that is, establish TCP (Transmission Control Protocol) monitoring.

[0050] Step 205: The operation and maintenance device sends a connection request to the operation and maintenance device through the first connection port.

[0051] In an embodiment of the present application, the connection request carries a first set of communication keys to facilitate the service management device to authenticate the connection request.

[0052] Step 206: The service management device determines whether the connection request carries the first set of communication keys in response to the connection request monitored through the first connection port.

[0053] If the connection request carries the first set of communication keys, the service management device establishes a connection with the operation and maintenance device to build a secure encrypted channel to complete the remote operation and maintenance operation.

[0054] The service management device may include an access control module, a trust calculation and determination module, a behavior analysis module, a behavior and environment collection module, and an operation and maintenance service gateway.

[0055] The access control module is used to receive authentication requests from the operation and maintenance device through the authentication channel to establish a connection with the operation and maintenance device. The trust calculation and determination module is used to determine and modify the remote operation and maintenance permissions of the operation and maintenance device based on the device health value and network risk value, as well as the operation similarity and operation compliance value of the operation and maintenance device. The behavior and environment collection module is used to collect the operation similarity and operation compliance value of the operation and maintenance device. The behavior analysis module is used to perform data analysis based on the operation similarity and operation compliance value collected by the behavior and environment collection module to determine the corresponding quantitative data.

[0056] Continue to see Figure 1 In an embodiment of the present application, the service management device and the operated device are connected. Specifically, when the operated device first accesses the service management device, it may send a unique identifier to the service management device so that the service management device can store information about the operated device. Exemplary identifiers may include a MAC address or hardware serial number, etc., which are not limited in this application.

[0057] It should be understood that the service management device can be connected to multiple operated and maintained devices at the same time, so as to realize remote operation and maintenance and remote operation and maintenance authority management of multiple operated and maintained devices.

[0058] In this embodiment of the present application, when the service management device is connected to the operation and maintenance device and the operated device, the operation and maintenance device can apply to the service management device for remote operation and maintenance permissions through static identity authentication to facilitate remote operation and maintenance of the operated device. While the operation and maintenance device is executing the remote operation and maintenance process, the service management device can manage the permissions of the operation and maintenance device in real time.

[0059] like Figure 3 The figure is a flowchart of a rights management method provided by an embodiment of the present application. Figure 1 In the system architecture shown, the method for the service management device to perform rights management may include:

[0060] Step S301: Obtain the equipment health value and network risk value of the operated and maintained device, as well as obtain the operation similarity and operation compliance value of the operated and maintained device. The equipment health value is used to characterize the operational safety level of the operated and maintained device, the network risk value is used to characterize the security level of the network environment in which the operated and maintained device is located, the operation similarity is used to characterize the similarity between the operation instructions received by the operated and maintained device and the historical operation instructions, and the operation compliance value is used to characterize the degree of standardization of the operation instructions.

[0061] In an embodiment of the present application, the service management device can obtain the device health value (DH), network risk value (ER), operation similarity (UB) and operation compliance value (OC) of the operated and maintained device in real time. Exemplarily, the service management device can determine the device health value (DH) by one or more of the following three items: First, the service management device can monitor the process status of the security probe software and change the device health value based on whether the security probe software is running. If the security probe software is running, the value corresponding to DH is increased; if the security probe software is not running, the value corresponding to DH is decreased. Second, the service management device can also change the device health value based on the update frequency of the firewall log. If there is a firewall log record within a preset time period before the current moment, the value corresponding to DH is increased; if there is no firewall log record within the preset time period before the current moment, the value corresponding to DH is decreased. Third, the service management device can also change the device health value based on the unauthorized external connection attempt coefficient. If the unauthorized external connection attempt coefficient per minute is less than a preset number threshold (for example, the preset number threshold can be 1), the value corresponding to DH is increased; if the unauthorized external connection attempt coefficient per minute is greater than or equal to the preset number threshold, the value corresponding to DH is decreased.

[0062] The service management device can use the LSTM-Autoencoder model (a deep learning model that combines the long short-term memory network (LSTM) and the autoencoder) to extract the content in the firewall log.

[0063] The service management device can change the network risk value (ER) based on the network delay fluctuation range and / or the number of unauthorized (unauthorized service) accesses. Specifically, if the network delay fluctuation range ΔRTT (Round Trip Time) is less than a preset delay threshold (e.g., 50ms), the value corresponding to the ER is increased; if the network delay fluctuation range ΔRTT is greater than or equal to the preset delay threshold, the value corresponding to the ER is decreased. If the number of unauthorized accesses, such as SSH (Secure Shell), HTTP (HyperText Transfer Protocol), and / or HTTPS (HTTP Secure), is less than a preset threshold (e.g., 3 times), the value corresponding to the ER is increased; if the number of unauthorized accesses is greater than or equal to the preset threshold, the value corresponding to the ER is decreased.

[0064] The service management device can also change the network risk value (ER) according to the network access mode. Specifically, if the network topology switches from online access to single network, the service management device reduces the corresponding value of ER.

[0065] The service management device can determine the operation similarity (UB) based on the similarity (or deviation) between the operation and maintenance instructions issued by the operation and maintenance device and the historical operation and maintenance instructions. For example, if the historical operation and maintenance instructions issued by operation and maintenance account A are concentrated between 9:00 and 19:00, and the current operation and maintenance instruction is issued between 23:00 and 5:00, the service management device can determine that the similarity between the current operation and maintenance instruction and the historical operation and maintenance instruction is low (or the deviation is high), and the service management device will reduce the corresponding value of UB. In addition, if the frequency of operation and maintenance instructions between 23:00 and 5:00 is high (such as more than 10 operation and maintenance instructions within 5 minutes), the service management device will further reduce the corresponding value of UB.

[0066] The service management device can change the operational compliance value (OC) based on the consistency between the operation and maintenance instructions and the operation and maintenance objectives. For example, if the operation and maintenance instructions corresponding to operation and maintenance objective A are in the following order: parameter configuration → equipment debugging → report generation, and the service management device determines through the whitelist mechanism that the current operation and maintenance instructions are consistent with the operation and maintenance instructions corresponding to operation and maintenance objective A, the service management device can increase the value corresponding to the operational compliance value (OC), and vice versa.

[0067] The service management device can also change the operation compliance value (OC) based on the operation and maintenance instructions that are prohibited from being executed when the operated and maintained device is in a certain stage / state. For example, when the operated and maintained device is in the parameter configuration stage, the operation and maintenance instructions are prohibited from being executed. If the operation and maintenance device issues an operation and maintenance instruction when the operated and maintained device is in the parameter configuration stage, the service management device can reduce the value corresponding to the operation compliance value (OC). For another example, when the operated and maintained device is in the transformer temperature monitoring state, the reboot_device (restart device) operation and maintenance instruction is prohibited from being executed. If the operation and maintenance device issues a reboot_device operation and maintenance instruction when the operated and maintained device is in the transformer temperature monitoring state, the service management device can reduce the value corresponding to the operation compliance value (OC).

[0068] Step S302: Determine an initial trust value based on a preset weight coefficient, a device health value, a network risk value, an operation similarity, and an operation compliance value.

[0069] In an embodiment of the present application, the preset weight coefficients include a first weight coefficient, a second weight coefficient, a third weight coefficient, and a fourth weight coefficient. The method for the service management device to determine the initial trust value based on the preset weight coefficients, the device health value, the network risk value, the operation similarity, and the operation compliance value may include:

[0070] Step A1: Obtain a first weight coefficient, a second weight coefficient, a third weight coefficient, and a fourth weight coefficient.

[0071] In an embodiment of the present application, the first weight coefficient, the second weight coefficient, the third weight coefficient, and the fourth weight coefficient may be weight coefficients corresponding to the device health value, the network risk value, the operation similarity, and the operation compliance value, respectively. The first weight coefficient, the second weight coefficient, the third weight coefficient, and the fourth weight coefficient may be preset coefficient values, and the service management device may also change the corresponding weight coefficients based on the device health value, the network risk value, the operation similarity, and the operation compliance value, which is not limited in this application.

[0072] For example, the first weight coefficient may be 0.3, the second weight coefficient may be 0.25, the third weight coefficient may be 0.2, and the fourth weight coefficient may be 0.25.

[0073] Step A2: weighting the device health value according to the first weight coefficient to obtain a first weighted value.

[0074] In an embodiment of the present application, the first weighted value may be the product of the first weight coefficient and the device health value, or may be other values ​​that are positively correlated with the product of the first weight coefficient and the device health value, which is not limited in the present application.

[0075] Step A3: weighting the network risk value according to the second weight coefficient to obtain a second weighted value.

[0076] In an embodiment of the present application, the second weighted value may be the product of the second weight coefficient and the network risk value, or may be other values ​​that are positively correlated with the product of the second weight coefficient and the network risk value, which is not limited in the present application.

[0077] Step A4: performing weighted processing on the operation similarity according to the third weight coefficient to obtain a third weighted value.

[0078] In the embodiment of the present application, the third weighted value may be the product of the third weight coefficient and the operation similarity, or may be other values ​​that are positively correlated with the product of the third weight coefficient and the operation similarity, which is not limited in the present application.

[0079] Step A5: Perform weighted processing on the operation compliance value according to the fourth weight coefficient to obtain a fourth weighted value.

[0080] In an embodiment of the present application, the fourth weighted value may be the product of the fourth weight coefficient and the operation compliance value, or may be other values ​​that are positively correlated with the product of the fourth weight coefficient and the operation compliance value. This application does not limit this.

[0081] Step A6: Determine the sum of the first weighted value, the second weighted value, the third weighted value, and the fourth weighted value as the initial trust value.

[0082] The calculation formula of the initial trust value T can be:

[0083] T=a1*DH+a2*ER+a3*UB+a4*OC;

[0084] Where a1, a2, a3, and a4 are the first, second, third, and fourth weight coefficients, respectively. DH, ER, UB, and OC are the device health value, network risk value, operation similarity, and operation compliance value, respectively.

[0085] Step S303: Determine the decay trust value based on the initial trust value and the decay time interval. The decay trust value is positively correlated with the initial trust value, and negatively correlated with the decay time interval. The start time of the decay time interval is the start time of the remote operation and maintenance operation, and the end time of the decay time interval is the current time.

[0086] In the embodiment of the present application, the method for the service management device to determine the decaying trust value based on the initial trust value and the decay time interval may include:

[0087] First, an exponential decay model is determined according to the decay time interval, and then the initial trust value is input into the exponential decay model to obtain the decayed trust value.

[0088] For example, the exponential decay model can be T n =T*e -λt .

[0089] Among them, T n represents the decay trust value, T represents the initial trust value, t represents the decay time interval, λ represents the decay constant, and e represents the base of the natural logarithm.

[0090] Step S304: modifying the remote operation and maintenance authority of the operation and maintenance device according to the attenuated trust value.

[0091] In the embodiment of the present application, the remote operation and maintenance authority can be a high trust authority, a medium trust authority, or a low trust authority. The method for the service management device to change the remote operation and maintenance authority of the operation and maintenance device according to the decay trust value may include:

[0092] If the attenuated trust value is greater than or equal to the first preset trust value, the remote operation and maintenance authority of the operation and maintenance device is changed to a high-trust authority.

[0093] For example, the first preset trust value may be 80, that is, when T n When it is greater than or equal to 80, the service management device can change the remote operation and maintenance authority of the operation and maintenance device to a high-trust authority.

[0094] In the embodiment of the present application, when the remote operation and maintenance authority of the operation and maintenance device is a high-trust authority, the service management device can open all operation permissions of the operated and maintained device to the operation and maintenance device, such as remote operation permission and / or program upgrade permission.

[0095] If the attenuated trust value is greater than or equal to the second preset trust value and less than the first preset trust value, the remote operation and maintenance authority of the operation and maintenance device is changed to a medium trust authority, and the second preset trust value is less than the first preset trust value.

[0096] For example, the second preset trust value may be 40, that is, when T n When it is greater than or equal to 40 and less than 80, the service management device can change the remote operation and maintenance authority of the operation and maintenance device to a medium trust authority.

[0097] In the embodiment of the present application, when the remote operation and maintenance authority of the operation and maintenance device is a medium-trust authority, the service management device can grant the operation and maintenance device read-only authority and low-risk operation authority, such as log download authority and / or status query authority.

[0098] If the attenuated trust value is less than the second preset trust value, the remote operation and maintenance authority of the operation and maintenance device is changed to a low-trust authority.

[0099] When T n When it is less than 40, the service management device can change the remote operation and maintenance authority of the operation and maintenance device to a low-trust authority.

[0100] In an embodiment of the present application, when the remote operation and maintenance authority of the operation and maintenance device is low-trust authority, the service management device may suspend all operation permissions of the operation and maintenance device and send a secondary authentication instruction to the operation and maintenance device. The secondary authentication instruction is used to instruct the operation and maintenance device to display the authentication prompt information corresponding to the secondary authentication instruction. All write operations of the operation and maintenance device are prohibited until the secondary authentication of the operation and maintenance device is successful.

[0101] The service management device can also adjust the decay trust value in real time based on the secondary authentication result. For example, if the secondary authentication of the operation and maintenance device succeeds, the service management device can increase the decay trust value to 130% of the original value. If the secondary authentication of the operation and maintenance device fails, the service management device can decrease the decay trust value to 80% of the original value.

[0102] In the embodiment of the present application, the service management device can also monitor the operation instructions of the operation and maintenance device through the first connection port. If an abnormal operation instruction is monitored, the remote operation and maintenance authority of the operation and maintenance device is changed to a low-trust authority.

[0103] Abnormal operation instructions may be continuous high-risk instructions, or attempts to perform continuous high-risk instructions.

[0104] In an embodiment of the present application, the service management device can also record abnormal operation instructions of the operation and maintenance device, mark the abnormal operation instructions as negative samples, and adjust the first weight coefficient, the second weight coefficient, the third weight coefficient and the fourth weight coefficient according to the negative samples based on the gradient descent method. For example, the first weight coefficient, the second weight coefficient, the third weight coefficient and the fourth weight coefficient are updated once every 24 hours.

[0105] In the technical solution provided by the embodiments of the present application, a service management device is connected to an operation and maintenance device and an operated device. The service management device can first obtain the device health value and network risk value of the operated device, as well as the operation similarity and operation compliance value of the operation device. The device health value is used to indicate the operational security of the operated device, the network risk value is used to indicate the security of the network environment in which the operated device resides, the operation similarity is used to indicate the similarity between the operation instructions received by the operation and maintenance device and historical operation instructions, and the operation compliance value is used to indicate the degree of compliance of the operation instructions. An initial trust value is then determined based on a preset weight coefficient, the device health value, the network risk value, the operation similarity, and the operation compliance value. A decaying trust value is then determined based on the initial trust value and a decaying time interval. The decaying trust value is positively correlated with the initial trust value and negatively correlated with the decaying time interval. The decaying time interval starts at the start time of the remote operation and maintenance operation, and ends at the current time. Finally, the remote operation and maintenance permissions of the operation and maintenance device are modified based on the decaying trust value. The service management device can flexibly adjust operation and maintenance permissions in real time based on the operation and maintenance environment, thereby improving the reliability and security of the operation and maintenance system.

[0106] It should be understood that, provided there is no logical conflict, the above-mentioned embodiments can be combined with each other to meet actual application requirements. The specific embodiments or implementation plans obtained by these combinations still fall within the scope of protection of this application.

[0107] Corresponding to the permission management method in the above embodiment, an embodiment of the present application provides a permission management device, which is connected to the operation and maintenance device and the operated and maintained device respectively. The permission management device can be implemented by software, hardware or a combination of both to become part or all of a computer device, and is used to execute the steps in the permission management method in the above embodiment.

[0108] Figure 4 A structural diagram of a rights management device 40 provided in an embodiment of the present application is shown. For ease of explanation, only the parts related to the embodiment of the present application are shown.

[0109] Reference Figure 4 The device 40 includes an acquisition module 410 and a processing module 420.

[0110] Acquisition module 410 is used to obtain the equipment health value and network risk value of the operated and maintained device, as well as to obtain the operation similarity and operation compliance value of the operated and maintained device. The equipment health value is used to characterize the operational safety level of the operated and maintained device, the network risk value is used to characterize the security level of the network environment in which the operated and maintained device is located, the operation similarity is used to characterize the similarity between the operation instructions received by the operated and maintained device and the historical operation instructions, and the operation compliance value is used to characterize the standardization level of the operation instructions.

[0111] The processing module 420 is configured to determine an initial trust value based on a preset weight coefficient, a device health value, a network risk value, an operation similarity, and an operation compliance value.

[0112] The processing module 420 is also used to determine the decay trust value based on the initial trust value and the decay time interval. The decay trust value is positively correlated with the initial trust value, and the decay trust value is negatively correlated with the decay time interval. The starting time of the decay time interval is the starting time of the remote operation and maintenance operation, and the ending time of the decay time interval is the current time.

[0113] The processing module 420 is further configured to modify the remote operation and maintenance authority of the operation and maintenance device according to the attenuated trust value.

[0114] In some embodiments, the remote operation and maintenance permission is a high-trust permission, a medium-trust permission, or a low-trust permission, and the processing module 420 is specifically configured to: if the attenuation trust value is greater than or equal to a first preset trust value, change the remote operation and maintenance permission of the operation and maintenance device to a high-trust permission; if the attenuation trust value is greater than or equal to a second preset trust value and less than the first preset trust value, change the remote operation and maintenance permission of the operation and maintenance device to a medium-trust permission, and the second preset trust value is less than the first preset trust value; and if the attenuation trust value is less than the second preset trust value, change the remote operation and maintenance permission of the operation and maintenance device to a low-trust permission.

[0115] In some embodiments, when the remote operation and maintenance authority of the operation and maintenance device is a low-trust authority, the processing module 420 is specifically used to: interrupt all operation permissions of the operation and maintenance device, and send a secondary authentication instruction to the operation and maintenance device, and the secondary authentication instruction is used to instruct the operation and maintenance device to display the authentication prompt information corresponding to the secondary authentication instruction.

[0116] In some embodiments, the preset weight coefficients include a first weight coefficient, a second weight coefficient, a third weight coefficient, and a fourth weight coefficient, and the processing module 420 is specifically configured to: obtain the first weight coefficient, the second weight coefficient, the third weight coefficient, and the fourth weight coefficient. Weighting the device health value according to the first weight coefficient to obtain a first weighted value. Weighting the network risk value according to the second weight coefficient to obtain a second weighted value. Weighting the operation similarity according to the third weight coefficient to obtain a third weighted value. Weighting the operation compliance value according to the fourth weight coefficient to obtain a fourth weighted value. Determining the sum of the first weighted value, the second weighted value, the third weighted value, and the fourth weighted value as the initial trust value.

[0117] In some embodiments, the processing module 420 is specifically configured to: determine an exponential decay model according to the decay time interval, and input the initial trust value into the exponential decay model to obtain a decayed trust value.

[0118] In some embodiments, the processing module 420 is further configured to: in response to an authentication request sent by the operation and maintenance device, send a first connection port and a first set of communication keys to the operation and maintenance device; in response to a service channel establishment request sent by the operation and maintenance device, monitor the first connection port; in response to a connection request monitored through the first connection port, determine whether the connection request carries the first set of communication keys; and establish a connection with the operation and maintenance device if the connection request carries the first set of communication keys.

[0119] In some embodiments, after monitoring the first connection port, the processing module 420 is further configured to monitor operation instructions of the operation and maintenance device through the first connection port, and if an abnormal operation instruction is monitored, change the remote operation and maintenance authority of the operation and maintenance device to a low-trust authority.

[0120] It should be noted that the information interaction, execution process, etc. between the above-mentioned devices / units are based on the same concept as the method embodiment of this application. Their specific functions and technical effects can be found in the method embodiment section and will not be repeated here.

[0121] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0122] Based on the same inventive concept, an embodiment of the present application also provides an electronic device.

[0123] Figure 5 Schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 5 As shown, the electronic device 5 of this embodiment includes: at least one processor 510 ( Figure 5Only one is shown), memory 520, and communication module 540, memory 520 stores computer program 530 that may be run on processor 510. When processor 510 executes computer program 530, steps in the above-mentioned rights management method embodiment are implemented, such as Figure 3 301 to step 304. When the processor 510 executes the computer program 530, the functions of each module / unit in the above-mentioned device embodiments are realized, for example Figure 4 The functions of modules 410 to 420 are shown, and the communication module 540 can be a separate communication unit for communicating with an external server or terminal device.

[0124] The electronic device 5 may include, but is not limited to: a processor 510 and a memory 520. Those skilled in the art will appreciate that Figure 5 It is only an example of the electronic device 5 and does not constitute a limitation of the electronic device 5. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the electronic device 5 may also include an input sending device, a network access device, a bus, etc.

[0125] The processor 510 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor.

[0126] In some embodiments, the memory 520 may be an internal storage unit of the electronic device 5, such as a hard disk or memory of the electronic device 5. The memory 520 may also be an external storage device of the electronic device 5, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a flash memory card, etc. equipped on the electronic device 5. The memory 520 may also include both an internal storage unit of the electronic device 5 and an external storage device. The memory 520 is used to store an operating system, application programs, a boot loader, data, and other programs, such as the program code of the computer program 530. The memory 520 may also be used to temporarily store data that has been sent or is about to be sent.

[0127] In addition, those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units in the various embodiments of the present application can be integrated into a processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

[0128] An embodiment of the present application provides a computer-readable storage medium, which stores a computer program. When the computer program runs on an electronic device, the electronic device executes the steps in the above-mentioned method embodiments.

[0129] An embodiment of the present application provides a chip, which includes a processor and a memory. The memory stores a computer program, and when the computer program is executed by the processor, the steps in the above-mentioned method embodiments are implemented.

[0130] An embodiment of the present application provides a computer program product. When the computer program product is run on an electronic device, the electronic device executes the steps in the above-mentioned various method embodiments.

[0131] It should be understood that the processor mentioned in the embodiments of the present application may be a central processing unit (CPU), or may be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc.

[0132] It should also be understood that the memory mentioned in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DR RAM).

[0133] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0134] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant description of other embodiments.

[0135] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0136] In the embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the system embodiments described above are merely schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0137] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0138] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0139] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program, when executed by the processor, can implement the steps of the above-mentioned various method embodiments. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include at least: any entity or device capable of carrying the computer program code to a large-screen device, a recording medium, a computer memory, a read-only memory (ROM), a random access memory (RAM), an electric carrier signal, a telecommunication signal and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk. In some jurisdictions, according to legislation and patent practice, computer-readable media cannot be electric carrier signals and telecommunication signals.

[0140] Finally, it should be noted that the above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A rights management method, characterized in that: Applied to a service management device, the service management device is connected to an operation and maintenance device and an operated and maintained device respectively, and the method includes: Obtaining a device health value and a network risk value of the operated and maintained device, as well as an operation similarity and an operation compliance value of the operated and maintained device, wherein the device health value is used to characterize the operational safety of the operated and maintained device, the network risk value is used to characterize the security of the network environment in which the operated and maintained device is located, the operation similarity is used to characterize the similarity between an operation instruction received by the operated and maintained device and a historical operation instruction, and the operation compliance value is used to characterize the standardization of the operation instruction; Determining an initial trust value based on a preset weight coefficient, the device health value, the network risk value, the operation similarity, and the operation compliance value; Determine a decaying trust value according to the initial trust value and the decaying time interval, wherein the decaying trust value is positively correlated with the initial trust value and negatively correlated with the decaying time interval, wherein the start time of the decaying time interval is the start time of the remote operation and maintenance operation, and the end time of the decaying time interval is the current time; The remote operation and maintenance authority of the operation and maintenance device is changed according to the decaying trust value.

2. The rights management method according to claim 1, wherein: The remote operation and maintenance authority is a high-trust authority, a medium-trust authority, or a low-trust authority, and changing the remote operation and maintenance authority of the operation and maintenance device according to the attenuated trust value includes: If the attenuated trust value is greater than or equal to the first preset trust value, changing the remote operation and maintenance authority of the operation and maintenance device to the high trust authority; If the attenuated trust value is greater than or equal to a second preset trust value and less than the first preset trust value, then changing the remote operation and maintenance authority of the operation and maintenance device to the medium trust authority, and the second preset trust value is less than the first preset trust value; If the decay trust value is less than the second preset trust value, the remote operation and maintenance authority of the operation and maintenance device is changed to the low trust authority.

3. The rights management method according to claim 2, characterized in that: When the remote operation and maintenance authority of the operation and maintenance device is the low-trust authority, the authority management method further includes: All operation permissions of the operation and maintenance device are interrupted, and a secondary authentication instruction is sent to the operation and maintenance device, where the secondary authentication instruction is used to instruct the operation and maintenance device to display authentication prompt information corresponding to the secondary authentication instruction.

4. The rights management method according to claim 1, wherein: The preset weight coefficients include a first weight coefficient, a second weight coefficient, a third weight coefficient, and a fourth weight coefficient. Determining the initial trust value according to the preset weight coefficients, the device health value, the network risk value, the operation similarity, and the operation compliance value includes: Obtaining the first weight coefficient, the second weight coefficient, the third weight coefficient, and the fourth weight coefficient; Performing weighted processing on the device health value according to the first weight coefficient to obtain a first weighted value; performing weighted processing on the network risk value according to the second weight coefficient to obtain a second weighted value; performing weighted processing on the operation similarity according to the third weight coefficient to obtain a third weighted value; performing weighted processing on the operation compliance value according to the fourth weight coefficient to obtain a fourth weighted value; Determine the sum of the first weighted value, the second weighted value, the third weighted value, and the fourth weighted value as the initial trust value.

5. The rights management method according to claim 1, characterized in that: The determining, according to the initial trust value and the decay time interval, of the decay trust value includes: Determining an exponential decay model according to the decay time interval; The initial trust value is input into the exponential decay model to obtain the decayed trust value.

6. The rights management method according to any one of claims 1 to 5, characterized in that: Before the step of obtaining the device health value and the network risk value of the operated and maintained device, the method further includes: In response to the authentication request sent by the operation and maintenance device, sending a first connection port and a first set of communication keys to the operation and maintenance device; In response to the service channel establishment request sent by the operation and maintenance device, monitoring the first connection port; In response to a connection request monitored through the first connection port, determining whether the connection request carries the first group of communication keys; If the connection request carries the first group of communication keys, a connection is established with the operation and maintenance device.

7. The rights management method according to claim 6, characterized in that: After the step of monitoring the first connection port, the method further includes: monitoring operation instructions of the operation and maintenance device through the first connection port; If an abnormal operation instruction is monitored, the remote operation and maintenance authority of the operation and maintenance device is changed to a low-trust authority.

8. A rights management device, characterized in that: The rights management device is connected to the operation and maintenance device and the operated and maintained device respectively, and the device includes: Acquisition module: used to obtain the device health value and network risk value of the operated and maintained device, as well as the operation similarity and operation compliance value of the operated and maintained device. The device health value is used to characterize the operational safety of the operated and maintained device. The network risk value is used to characterize the security of the network environment in which the operated and maintained device is located. The operation similarity is used to characterize the similarity between the operation instructions received by the operation and maintenance device and the historical operation instructions. The operation compliance value is used to characterize the standardization of the operation instructions. a processing module, configured to determine an initial trust value based on a preset weight coefficient, the device health value, the network risk value, the operation similarity, and the operation compliance value; The processing module is further configured to determine a decaying trust value based on the initial trust value and the decaying time interval, wherein the decaying trust value is positively correlated with the initial trust value, the decaying trust value is negatively correlated with the decaying time interval, the start time of the decaying time interval is the start time of the remote operation and maintenance operation, and the end time of the decaying time interval is the current time; The processing module is further configured to change the remote operation and maintenance authority of the operation and maintenance device according to the attenuated trust value.

9. An electronic device, characterized in that: The system comprises a processor and a memory, wherein the processor is configured to execute a computer program stored in the memory to implement the rights management method as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the rights management method as described in any one of claims 1 to 7 is implemented.

Images