System for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms

Abstract

The invention belongs to the technical field of cloud platform management, and particularly relates to a system for realizing unified monitoring operation and maintenance management based on multiple edge cloud platforms, comprising a heterogeneous access layer used for collecting original data processing invalid information, accessing edge cloud platforms of different architectures, and converting data into a unified format; the intelligent fusion layer is used for fusing data and generating a global state portrait and abnormal early warning; the collaborative operation and maintenance layer is used for generating operation and maintenance tasks across the edge cloud platforms and executing the operation and maintenance tasks, and verifying configuration compliance of the edge cloud platforms; the security protection layer is used for analyzing threat data of the cross-edge cloud platform and triggering a cooperative defense operation; and the visual display layer is used for displaying the resource load, the service link and the abnormal node of each edge cloud platform in a topological graph form, and supporting the visual configuration of the operation and maintenance operation. The compatibility, accuracy, efficiency and safety of monitoring operation and maintenance of the multi-edge cloud platform are remarkably improved.

Description

Technical Field

[0001] The present invention belongs to the field of cloud platform management technology, and specifically relates to a system for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms. Background Art

[0002] The edge cloud is a cloud computing platform built on edge infrastructure, leveraging the core capabilities of cloud computing technology and edge computing. With the advancement of edge computing technology, edge cloud platforms are increasingly being used in fields such as industrial control, intelligent transportation, and healthcare. Enterprises often need to deploy multiple edge cloud platforms with different architectures to meet diverse business needs. However, existing monitoring and operation and maintenance (O&M) for edge cloud platforms often employ a decentralized management model, where monitoring tools, O&M processes, and security policies are configured separately for each platform. This model has gradually exposed numerous limitations in practical applications. Edge cloud platforms with different architectures employ varying communication protocols and data formats, making it difficult for existing monitoring systems to achieve unified access across heterogeneous platforms. Raw data often contains invalid information, such as duplicates and format errors, resulting in inefficient data transmission and processing. Furthermore, there is a lack of effective spatiotemporal alignment and correlation analysis mechanisms for cross-platform data, making it difficult to accurately understand the global state of the edge cloud. Consequently, a unified monitoring and O&M management system is needed to comprehensively control the operation and management of multiple edge cloud platforms. Summary of the Invention

[0003] In response to the above-mentioned deficiencies in the prior art, the present invention provides a system for unified monitoring, operation and maintenance management based on multiple edge cloud platforms to solve the problems in the above-mentioned background technology.

[0004] To solve the above technical problems, the present invention adopts the following technical solution: a system for unified monitoring, operation and maintenance management based on multiple edge cloud platforms, including a heterogeneous access layer, wherein the heterogeneous access layer includes a protocol adaptation module and a data standardization module for accessing edge cloud platforms with different architectures and converting the original monitoring data of each edge cloud platform into a unified format; An intelligent fusion layer connected to the heterogeneous access layer includes a multimodal data fusion module and an anomaly detection module for fusing basic resource data, service link data, and physical environment data to generate a global status profile and anomaly warning; A collaborative operation and maintenance layer, connected to the intelligent fusion layer, includes an operation and maintenance task scheduling module and a configuration consistency verification module, which is used to generate and execute operation and maintenance tasks across edge cloud platforms and verify the configuration compliance of each edge cloud platform; A security protection layer connected to the heterogeneous access layer and the intelligent fusion layer, the security protection layer including a threat log correlation module and a linkage defense module for analyzing threat data across edge cloud platforms and triggering coordinated defense operations; The visualization display layer is connected to the intelligent fusion layer and the collaborative operation and maintenance layer, and is used to display the resource load, business links and abnormal nodes of each edge cloud platform in the form of a topology diagram, and supports the visualization configuration of operation and maintenance operations, wherein the visualization configuration includes task parameter configuration, policy configuration and view configuration.

[0005] Furthermore, the heterogeneous access layer also includes a lightweight collection agent, which is deployed locally on each edge cloud platform to collect data and filter invalid information; The protocol adaptation module includes at least two protocol conversion units; The original monitoring data includes computing resource data, storage resource data, network resource data and system status data.

[0006] Furthermore, the invalid information filtered by the lightweight collection agent includes repeatedly reported identical status data, format error data, and non-business related redundant data.

[0007] Furthermore, the protocol adaptation module includes a container protocol conversion unit for the Kubernetes edge cluster and a lightweight protocol conversion unit for the embedded edge node.

[0008] Furthermore, the multimodal data fusion module includes a spatiotemporal alignment submodule, which is used to align the asynchronous data of each edge cloud platform according to timestamps and service links; The anomaly detection module includes a scenario-based rule library, which is used to preset association rules for different edge cloud application scenarios; The basic resource data includes computing resource data, storage resource data and network resource data.

[0009] Furthermore, the collaborative operation and maintenance layer also includes a digital twin simulation module, which is used to simulate operation effects and output risk assessment results before executing cross-edge cloud platform operation and maintenance tasks.

[0010] Furthermore, the operation and maintenance task scheduling module includes a priority sorting submodule, and the priority sorting submodule is used to determine the order of task execution according to the set business importance; The configuration consistency verification module regularly compares the actual configuration of each edge cloud platform with a preset baseline, outputs a deviation report and supports one-click repair. The preset baseline includes a security configuration baseline, a performance configuration baseline and a compliance configuration baseline.

[0011] Furthermore, the threat log association module includes an attack link restoration submodule, which is used to restore the cross-platform attack path by analyzing the logs of each edge cloud platform; The threat data across the edge cloud platform includes network attack logs, access exception logs, and malicious code logs.

[0012] Compared with the existing technology, the present invention has the following beneficial effects: the heterogeneous access layer is compatible with the access design and data filtering and standardized processing of different architecture platforms such as Kubernetes edge clusters and embedded edge nodes by virtue of the protocol adaptation module, breaking through the access barriers of heterogeneous edge clouds and improving data processing efficiency; with the help of cross-platform data fusion and scenario-based anomaly detection, the accuracy of anomaly identification and global state perception capabilities are improved; through operation and maintenance risk prediction, task priority scheduling and configuration compliance verification, the operation and maintenance operation risks are reduced and the operation and maintenance efficiency and compliance are improved; combined with cross-platform attack path restoration and linkage defense, the overall security protection level of the edge cloud is enhanced; at the same time, intuitive visual display and configuration support simplify operation and maintenance operations. The present invention as a whole realizes efficient control of the entire process from data collection to operation and maintenance execution, and significantly improves the compatibility, accuracy, efficiency and security of multi-edge cloud platform monitoring and operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a diagram showing the composition of a system for implementing unified monitoring, operation, and maintenance management based on multiple edge cloud platforms in the present invention; Figure 2 Schematic diagram of heterogeneous access layers in a system for achieving unified monitoring, operation, and maintenance management based on multiple edge cloud platforms according to the present invention; Figure 3 Schematic diagram of the intelligent fusion layer in a system for achieving unified monitoring, operation and maintenance management based on multiple edge cloud platforms in the present invention; Figure 4 Schematic diagram of the collaborative operation and maintenance layer in a system for implementing unified monitoring and operation and maintenance management based on multiple edge cloud platforms in the present invention; Figure 5 Schematic diagram of the security protection layer in a system for achieving unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to the present invention; DETAILED DESCRIPTION In order to enable those skilled in the art to better understand the present invention, the technical solution of the present invention is further described below with reference to the accompanying drawings and embodiments.

[0014] Among them, the drawings are only used for illustrative purposes and represent only schematic diagrams rather than actual pictures, and should not be understood as limiting this patent; in order to better illustrate the embodiments of the present invention, some parts of the drawings may be omitted, enlarged or reduced, and do not represent the size of the actual product; for those skilled in the art, it is understandable that some well-known structures and their descriptions in the drawings may be omitted.

[0015] The same or similar numbers in the drawings of the embodiments of the present invention correspond to the same or similar parts; in the description of the present invention, it should be understood that if the terms "upper", "lower", "left", "right", "inside", "outside" and the like indicate the orientation or position relationship, they are based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, the terms describing the position relationship in the drawings are only used for illustrative purposes and cannot be understood as limiting this patent. For ordinary technicians in this field, the specific meanings of the above terms can be understood according to specific circumstances.

[0016] In the description of the present invention, unless otherwise expressly specified or limited, when the term "connection" or the like appears to indicate a connection relationship between components, such term should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium; it can be internal communication between two components or an interaction between two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood in specific circumstances.

[0017] Example 1: like Figure 1-5 As shown, the present invention realizes a system for unified monitoring, operation and maintenance management based on multiple edge cloud platforms, including a heterogeneous access layer, which includes a lightweight collection agent, a protocol adaptation module and a data standardization module. The lightweight collection agent is deployed locally on each edge cloud platform to collect original data and filter invalid information such as repeatedly reported identical status data, format error data and non-business-related redundant data, which can reduce the communication bandwidth occupancy and storage resource consumption between edge nodes and central platforms, and improve the subsequent data processing efficiency. The protocol adaptation module is used to access edge cloud platforms with different architectures. The protocol adaptation module includes a container protocol conversion unit for Kubernetes edge clusters, which adapts to the CRI interface and supports the gRPC communication protocol, and a lightweight protocol conversion unit for embedded edge nodes, which adapts to the MQTTv5.0 protocol and supports QoS2 level message transmission. The data standardization module converts the original monitoring data of each edge cloud platform into a unified format, providing a compatible basis for subsequent cross-platform data fusion and analysis, and avoiding data processing faults caused by format differences.

[0018] Among them, the original monitoring data includes computing resource data, storage resource data, network resource data and system status data.

[0019] The intelligent fusion layer is connected to the heterogeneous access layer. The intelligent fusion layer includes a multimodal data fusion module and an anomaly detection module. The spatiotemporal alignment submodule in the multimodal data fusion module aligns the asynchronous data of each platform according to timestamps and business links, eliminating analysis errors caused by data silos. The scenario-based rule library in the anomaly detection module presets association rules for scenarios such as industrial control and intelligent transportation. By associating and analyzing basic resource data, business link data such as production order progress, and physical environment data such as vibration frequency and temperature, it identifies scenario-based anomalies, generates early warnings, and pushes them to the operation and maintenance terminal. Compared with single-dimensional monitoring, scenario-based association analysis improves the accuracy of anomaly detection and reduces false alarms and missed reports.

[0020] Among them, basic resource data includes computing resource data, storage resource data and network resource data.

[0021] The collaborative operation and maintenance layer is connected to the intelligent fusion layer. The collaborative operation and maintenance layer includes an operation and maintenance task scheduling module, a configuration consistency verification module, and a digital twin simulation module. Before executing cross-edge cloud platform operation and maintenance tasks, the digital twin simulation module simulates the operation effect based on the global state portrait and outputs the risk assessment result. Early simulation can reduce the risk of business interruption caused by blind operation. The priority sorting submodule of the operation and maintenance task scheduling module determines the order of task execution based on the importance of the business. The importance of the business is divided according to availability requirements, impact scope, and delay sensitivity to ensure that key businesses such as medical care and industrial control receive priority operation and maintenance responses; the configuration consistency verification module compares the security configuration baseline, performance configuration baseline, and compliance configuration baseline with the actual configuration, outputs deviation reports, and supports one-click repair to ensure configuration compliance and reduce manual verification costs.

[0022] The security protection layer is connected to the heterogeneous access layer and the intelligent fusion layer. The security protection layer includes a threat log correlation module and a linkage defense module, which are used to analyze threat data across edge cloud platforms and trigger collaborative defense operations. The linkage defense module automatically blocks access to the source IP to prevent the spread of attacks.

[0023] Among them, the threat log association module includes an attack link restoration sub-module, which is used to restore the cross-platform attack path by analyzing the logs of each edge cloud platform.

[0024] Among them, the linkage defense module triggers collaborative defense based on threat data from network attack logs, access exception logs, and malicious code logs.

[0025] The visualization display layer is connected to the intelligent fusion layer and the collaborative operation and maintenance layer. It is used to display the resource load, business links and abnormal nodes of each edge cloud platform in the form of a topology diagram, and supports visual operation and maintenance operations such as task parameter configuration, policy configuration and view configuration, reducing multi-system switching operations.

[0026] Working principle: The heterogeneous access layer accesses edge cloud platforms of different architectures through the protocol adapter module. The lightweight collection agent collects and filters the original monitoring data. The data standardization module converts the filtered original monitoring data into a unified format to provide a basis for subsequent processing; after the intelligent fusion layer receives the standardized data, the spatiotemporal alignment submodule aligns the asynchronous data. The anomaly detection module analyzes the basic resources, business links and physical environment data based on the scenario-based rule library to generate a global status portrait and anomaly warning; the collaborative operation and maintenance layer uses the global status portrait to predict the operation and maintenance operation risks by the digital twin simulation module. At the same time, the operation and maintenance task scheduling module sorts and executes tasks according to business importance, and the configuration consistency verification module ensures configuration compliance through preset baseline comparison; the security protection layer analyzes the threat data of network attacks, access anomalies, and malicious code logs through the attack link restoration submodule to restore the attack path, and the linkage defense module triggers the defense operation; the visualization display layer displays monitoring data and abnormal nodes, supports the visualization configuration of operation and maintenance operations, and realizes unified management and control from data collection to operation and maintenance execution.

[0027] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.

[0028] The above are only embodiments of the present invention, and the circuits, electronic components and modules involved are all prior art, which can be fully implemented by those skilled in the art. It is needless to say that the content protected by this application does not involve improvements to software and methods. Common knowledge such as the known specific structures and characteristics in the scheme is not described in detail here. Ordinary technicians in the field are aware of all the common technical knowledge in the technical field of the invention before the application date or priority date, can obtain all the prior art in the field, and have the ability to apply conventional experimental means before that date. Ordinary technicians in the field can improve and implement this scheme in combination with their own abilities under the inspiration given by this application. Some typical known structures or known methods should not become obstacles for ordinary technicians in the field to implement this application. It should be pointed out that for those skilled in the art, without departing from the structure of the present invention, several variations and improvements can be made, which should also be regarded as the scope of protection of the present invention. These will not affect the effect of the implementation of the present invention and the practicality of the patent.

Claims

1. A system that implements unified monitoring, operation, and maintenance management based on multiple edge cloud platforms, characterized by: include A heterogeneous access layer, which includes a protocol adaptation module and a data standardization module, is used to access edge cloud platforms of different architectures and convert the original monitoring data of each edge cloud platform into a unified format; An intelligent fusion layer connected to the heterogeneous access layer includes a multimodal data fusion module and an anomaly detection module for fusing basic resource data, service link data, and physical environment data to generate a global status profile and anomaly warning; A collaborative operation and maintenance layer, connected to the intelligent fusion layer, includes an operation and maintenance task scheduling module and a configuration consistency verification module, which is used to generate and execute operation and maintenance tasks across edge cloud platforms and verify the configuration compliance of each edge cloud platform; A security protection layer connected to the heterogeneous access layer and the intelligent fusion layer, the security protection layer including a threat log correlation module and a linkage defense module for analyzing threat data across edge cloud platforms and triggering coordinated defense operations; The visualization display layer is connected to the intelligent fusion layer and the collaborative operation and maintenance layer, and is used to display the resource load, business links and abnormal nodes of each edge cloud platform in the form of a topology diagram, and supports the visualization configuration of operation and maintenance operations, wherein the visualization configuration includes task parameter configuration, policy configuration and view configuration.

2. The system for implementing unified monitoring, operation, and maintenance management based on multiple edge cloud platforms according to claim 1, characterized in that: The heterogeneous access layer also includes a lightweight collection agent, which is deployed locally on each edge cloud platform to collect data and filter invalid information; The protocol adaptation module includes at least two protocol conversion units; The original monitoring data includes computing resource data, storage resource data, network resource data and system status data.

3. The system for implementing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 2, characterized in that: The invalid information filtered by the lightweight acquisition agent includes repeatedly reported identical status data, format error data, and non-business related redundant data.

4. The system for implementing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 3, characterized in that: The protocol adaptation module includes a container protocol conversion unit for the Kubernetes edge cluster and a lightweight protocol conversion unit for the embedded edge node.

5. The system for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 1, characterized in that: The multimodal data fusion module includes a spatiotemporal alignment submodule, which is used to align the asynchronous data of each edge cloud platform according to timestamps and service links; The anomaly detection module includes a scenario-based rule library, which is used to preset association rules for different edge cloud application scenarios; The basic resource data includes computing resource data, storage resource data and network resource data.

6. The system for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 1, characterized in that: The collaborative operation and maintenance layer also includes a digital twin simulation module, which is used to simulate operation effects and output risk assessment results before executing cross-edge cloud platform operation and maintenance tasks.

7. The system for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 1, characterized in that: The operation and maintenance task scheduling module includes a priority sorting submodule, which is used to determine the order of task execution according to the set business importance; The configuration consistency verification module regularly compares the actual configuration of each edge cloud platform with a preset baseline, outputs a deviation report and supports one-click repair. The preset baseline includes a security configuration baseline, a performance configuration baseline and a compliance configuration baseline.

8. The system for realizing unified monitoring, operation and maintenance management based on multiple edge cloud platforms according to claim 1, characterized in that: The threat log association module includes an attack link restoration submodule, which is used to restore the cross-platform attack path by analyzing the logs of each edge cloud platform; The threat data across the edge cloud platform includes network attack logs, access exception logs, and malicious code logs.

Images