Network segment planning method based on industrial internet platform and related equipment

Abstract

The invention provides a network segment planning method based on an industrial internet platform and related equipment, and the method comprises the steps: carrying out the network planning of the industrial internet platform according to a network scale, and obtaining an address space of the industrial internet platform; performing subnet planning on the address space, and determining a plurality of subnets and an independent network segment corresponding to any subnet; determining a network address of any network access device based on the address space, the subnets, the corresponding independent network segments and the number of the network access devices; configuring a corresponding routing strategy for any subnet, and binding the routing strategy and any independent network segment; configuring a firewall of the industrial internet platform, and determining an access control strategy of the network access equipment; and outputting pre-stored network segment early warning information according to the network state of the Internet platform. According to the invention, the efficiency of carrying out network segment planning on the industrial internet platform can be improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of equipment operation and maintenance, in particular to the technical field of network segment planning based on an industrial internet platform, and especially to a network segment planning method based on an industrial internet platform and related equipment. BACKGROUND

[0002] With the development of industrial technology, in order to improve the stability of the communication industrial internet platform in the running process, each enterprise or organization tends to plan the communication address of the network access equipment in the industrial internet platform, so as to improve the efficiency of maintaining the communication performance of the equipment in the industrial internet platform, ensure the failure rate of the industrial internet platform, and guarantee the stability of the operation of the industrial internet platform. At present, the network segment of the network access equipment in the industrial internet platform is usually planned based on a static address. Since the static network address and the corresponding subnet mask cannot adapt to the dynamic demand of temporary increase or decrease of equipment in the industrial scene or real-time access of operation and maintenance terminals, it is easy to cause the problems of waste or shortage of network addresses, and thus the efficiency of operation and planning of the network segment of the industrial internet platform is low. SUMMARY

[0003] In view of the above, it is necessary to propose a network segment planning method based on an industrial internet platform and related equipment to solve the technical problem of low efficiency of operation and planning of the network segment of the industrial internet platform. The related equipment includes a network segment planning device based on an industrial internet platform and an electronic device.

[0004] The present application provides a network segment planning method based on an industrial internet platform, which comprises: performing network planning on the industrial internet platform according to a preset network scale to obtain an address space of the industrial internet platform; wherein the network scale comprises the number of network access equipment; performing subnet planning on the address space according to a preset network demand to determine a plurality of subnets and an independent network segment corresponding to any one subnet; the network demand comprises the regional characteristics of the deployment area of the network access equipment; determining the network address of any one network access equipment based on the address space, the subnets and the corresponding independent network segments, and the number of network access equipment; configuring a corresponding routing strategy for any one subnet according to the network demand, binding the routing strategy and the independent network segment corresponding to the any one subnet; wherein the network demand comprises the number of network access equipment, communication demand, and bandwidth demand; configuring a firewall of the industrial internet platform based on the network address and port number of any one network access equipment; and determining the access control strategy of the network access equipment based on the configuration information of the firewall, the network address of the network access equipment, and the corresponding subnet mask; real-time acquiring the network state of the industrial internet platform, and outputting pre-stored network segment warning information in the case that there is network data fluctuation in the industrial internet platform.

[0005] In some embodiments, the network planning of the industrial internet platform according to the preset network scale to obtain the address space of the industrial internet platform comprises: determining the device type corresponding to the on-network device based on the attribute information of the on-network device in the industrial internet platform; determining the life cycle, communication demand and bandwidth demand of the on-network device based on the device type; determining the address space of the industrial internet platform based on the terminal density constraint corresponding to the device type, the life cycle, communication demand and bandwidth demand of the on-network device.

[0006] In some embodiments, the subnet planning of the address space according to the preset network demand to determine a plurality of subnets and the independent network segment corresponding to any one subnet comprises: determining the device group to which the on-network device belongs and the subnet corresponding to any one device group based on the regional features and the attribute information of the on-network device; determining the subnet capacity of the subnet corresponding to any one device group based on the number of on-network devices corresponding to any one device group; determining the subnet mask of the subnet corresponding to any one device group according to the address space and the subnet capacity of the subnet corresponding to any one device group; and dividing the network address corresponding to all on-network devices in any one device group based on the address space and the subnet mask to obtain the independent network segment corresponding to any one subnet.

[0007] In some embodiments, the configuration of the routing strategy corresponding to any one subnet according to the network demand, the binding of the routing strategy and the independent network segment corresponding to any one subnet comprises: determining the first routing priority of the on-network device based on the service type of the on-network device and the network demand; determining the second routing priority of any one subnet based on the first routing priority of all on-network devices corresponding to any one subnet; determining the routing strategy of any one subnet based on the first routing priority and the second routing priority; and binding the routing strategy and the independent network segment corresponding to any one subnet.

[0008] In some embodiments, the configuring the firewall of the industrial internet platform based on the network address and the port number of any one of the network devices comprises: determining a device security level of the any one of the network devices based on the port number of the any one of the network devices; determining a data transmission authority corresponding to the any one of the network devices based on the device security level; determining a communication white list of any one of the subnets based on the data transmission authorities of all the network devices corresponding to the any one of the subnets; the communication white list is used to indicate network addresses of other devices capable of being communicatively connected with any one of the network devices in the any one of the subnets; and configuring the firewall configuration information of the industrial internet platform according to the data transmission authority of the any one of the network devices and the communication white list of the any one of the subnets.

[0009] In some embodiments, the determining the access control policy of the network device according to the configuration information of the firewall, the network address of the network device, and the corresponding subnet mask comprises: determining an access scenario corresponding to any one of the network devices according to a time when the industrial internet receives an access request corresponding to the any one of the network devices; determining an access requirement corresponding to the any one of the network devices based on the access scenario; and updating the configuration information of the firewall based on the access requirement, the network address of the any one of the network devices, and the corresponding subnet mask to obtain the access control policy of the any one of the network devices.

[0010] In some embodiments, the method further comprises determining a fluctuation of network data of the industrial internet platform based on a real-time acquired network state of the industrial internet platform, comprising: determining a request response success rate of data transmission based on a first communication protocol in the industrial internet platform based on the network state; determining a delay rate and a packet loss rate of data transmission of any one of the network devices based on the network state; and determining that the network data of the industrial internet platform fluctuates in a case where the request response success rate meets a first constraint condition and the delay rate and the packet loss rate of data transmission of the any one of the network devices meet a second constraint condition.

[0011] The embodiment of the application further provides a network segment planning device based on an industrial internet platform, the device comprising: a first planning module configured to perform network planning on the industrial internet platform according to a preset network scale to obtain an address space of the industrial internet platform; wherein the network scale comprises the number of network access devices; a second planning module configured to perform subnet planning on the address space according to a preset network requirement to determine a plurality of subnets and an independent network segment corresponding to any one subnet; the network requirement comprises the regional characteristics of the deployment region of the network access devices; a determination module configured to determine the network address of any one network access device based on the address space, the subnets and the corresponding independent network segments, and the number of network access devices; the determination module is further configured to configure a corresponding routing strategy for any one subnet according to the network requirement, and bind the routing strategy and the independent network segment corresponding to the any one subnet; wherein the network requirement comprises the number of network access devices, communication requirement, and bandwidth requirement; a configuration module configured to configure a firewall of the industrial internet platform based on the network address and port number of any one network access device, and determine an access control strategy of the network access device according to the configuration information of the firewall, the network address of the network access device, and the corresponding subnet mask; and an early warning module configured to acquire the network state of the industrial internet platform in real time, and output pre-stored network segment early warning information in the case that there is network data fluctuation in the industrial internet platform.

[0012] The embodiment of the application further provides an electronic device, comprising: a memory configured to store at least one instruction; and a processor configured to execute the instruction stored in the memory to implement the network segment planning method based on the industrial internet platform.

[0013] The embodiment of the application further provides a computer readable storage medium, wherein the computer readable storage medium stores at least one instruction, and the at least one instruction is executed by a processor in an electronic device to implement the network segment planning method based on the industrial internet platform.

[0014] As can be seen from the above technical solutions, the embodiment of the application realizes dynamic adaptation through subnet elastic scaling, can automatically split or merge subnets according to the number of device access, can also divide exclusive subnets according to device types, and can improve network adaptability. Assigning high-bandwidth exclusive links to real-time control type services and enabling a routing preemption mechanism can improve the real-time performance of services. Through automatic configuration and fault self-recovery, operation and maintenance cost reduction and efficiency improvement are realized, subnets, routing, and security strategies are automatically generated according to the number of network access devices, the region to which the network access devices belong, and other parameters, and are one-key issued; for IP shortage, link failure, and other problems, subnet expansion, routing switching, and other repair operations are automatically triggered, without the need for manual intervention, and the operation and maintenance efficiency and the efficiency of network segment planning can be improved. BRIEF DESCRIPTION OF DRAWINGS

[0015] Figure 1 is an application scenario of a network segment planning method based on an industrial internet platform provided by an embodiment of the present application.

[0016] Figure 2 is a flowchart of a network segment planning method based on an industrial internet platform provided by an embodiment of the present application.

[0017] Figure 3 is a functional module diagram of a network segment planning device based on an industrial internet platform provided by an embodiment of the present application.

[0018] Figure 4 is a structural schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0019] In order to more clearly understand the purpose, features and advantages of the present application, the present application will be described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict. In the following description, a large number of specific details are set forth in order to facilitate a full understanding of the present application, and the described embodiments are only some of the embodiments of the present application, but not all the embodiments.

[0020] In addition, the terms "first", "second" are only for the purpose of description, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include one or more of the features. In the description of the present application, the meaning of "a plurality of" is two or more, unless otherwise specifically limited.

[0021] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present application belongs. The terms used in the specification of the present application are only for the purpose of describing the specific embodiments of the present application, and are not intended to limit the present application. The term "and / or" used herein includes any and all combinations of one or more of the related listed items.

[0022] The embodiment of the present application provides a network segment planning method based on an industrial internet platform, which can be applied to one or more electronic devices. The electronic device is a device capable of automatically performing numerical calculation and / or information processing according to pre-set or stored instructions. The hardware of the electronic device includes but is not limited to a microprocessor, an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA), a digital signal processor (DSP), an embedded device, and the like.

[0023] The electronic device can be any electronic product capable of human-computer interaction with a client, for example, a personal computer, a tablet computer, a smart phone, a personal digital assistant (PDA), a game console, an interactive internet protocol television (IPTV), a smart wearable device, and the like.

[0024] The electronic device can further include a network device and / or a client device. The network device includes but is not limited to a single network server, a server group composed of multiple network servers, or a cloud composed of a large number of hosts or network servers based on cloud computing.

[0025] The network in which the electronic device is located includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (VPN), and the like.

[0026] For example, the network segment planning method based on the industrial internet platform can be applied to a network device, a client device, or a combination of the network device and the client device. Figure 1As shown, the application provides a network segment planning method based on an industrial internet platform. The network segment planning method can be applied to an electronic device 100, which is in communication connection with a server 200. The electronic device 100 is configured to perform network planning on the industrial internet platform according to a preset network scale to obtain an address space of the industrial internet platform. The network scale includes the number of network access devices. The electronic device 100 is further configured to perform subnet planning on the address space according to a preset network requirement to determine a plurality of subnets and an independent network segment corresponding to any one subnet. The network requirement includes the area characteristics of the deployment area of the network access devices. The electronic device 100 is further configured to determine the network address of any one network access device based on the address space, the subnets and the corresponding independent network segments, and the number of network access devices. The electronic device 100 is further configured to configure a corresponding routing strategy for any one subnet according to the network requirement, bind the routing strategy and the independent network segment corresponding to the any one subnet, and configure a firewall of the industrial internet platform based on the network address and the port number of any one network access device. The electronic device 100 is further configured to determine the access control strategy of the network access device according to the configuration information of the firewall, the network address of the network access device, and the corresponding subnet mask. The electronic device 100 is further configured to obtain the network state of the industrial internet platform in real time from the server 200, and output pre-stored network segment warning information in the case that there is network data fluctuation in the industrial internet platform.

[0027] As shown in the Figure 2 The flowchart of the network segment planning method based on the industrial internet platform provided by an embodiment of the application is shown. The order of the steps in the flowchart can be changed according to different requirements, and some steps can be omitted. The network segment planning method based on the industrial internet platform provided by an embodiment of the application includes the following steps.

[0028] S20, network planning is performed on the industrial internet platform according to a preset network scale to obtain an address space of the industrial internet platform. The network scale includes the number of network access devices.

[0029] In an embodiment of the application, the network planning on the industrial internet platform according to the preset network scale to obtain the address space of the industrial internet platform includes: determining the device type corresponding to the network access device based on the attribute information of the network access device in the industrial internet platform; determining the life cycle, communication requirement, and bandwidth requirement of the network access device based on the device type; and determining the address space of the industrial internet platform based on the terminal density constraint corresponding to the device type, the life cycle, communication requirement, and bandwidth requirement of the network access device.

[0030] S21, subnet planning is performed on the address space according to preset network requirements, a plurality of subnets and an independent network segment corresponding to any one subnet are determined, and the network requirements include regional characteristics of a deployment region of the network access device.

[0031] In an embodiment of the present application, the subnet planning on the address space according to the preset network requirements, the determination of the plurality of subnets and the independent network segment corresponding to any one subnet include: determining a device group to which the network access device belongs and a subnet corresponding to any one device group based on the regional characteristics and attribute information of the network access device; determining a subnet capacity of the subnet corresponding to any one device group based on a quantity of network access devices corresponding to any one device group; determining a subnet mask of the subnet corresponding to any one device group according to the address space and the subnet capacity of the subnet corresponding to any one device group; and dividing network addresses corresponding to all network access devices in any one device group based on the address space and the subnet mask to obtain the independent network segment corresponding to any one subnet.

[0032] S22, determining a network address of any one network access device based on the address space, the subnets and the corresponding independent network segments, and the quantity of network access devices.

[0033] In an embodiment of the present application, when the network address of any one network access device is determined, the industrial internet platform can be subjected to resource verification first to ensure that the subnet and the quantity of devices are within the address space bearing range. Specifically, before the address is allocated, it is necessary to verify whether the subnet planning and the quantity of devices exceed the total resource upper limit of the address space to avoid the risk of no address available.

[0034] Specifically, in the process of allocating the address, the total bearing capacity of the address space can be calculated first. For example, the total available IP number of the address space = 2^(32-address space prefix length)-2. For example, the address space is 192.168.0.0 / 20 (prefix length 20), and the total available IP number = 2^(32-20)-2 = 4094.

[0035] Specifically, the total demand capacity of all subnets can also be calculated. The available IP number of each subnet is 2^(32-subnet prefix length)-2. The total demand capacity of all subnets is the sum of the quantity of network access devices in each subnet. In the case where the total demand capacity is less than or equal to the total bearing capacity of the address space, if the total demand capacity exceeds the upper limit of the address space, the address space needs to be adjusted or the subnet division needs to be optimized to ensure sufficient resources.

[0036] Specifically, the subnets of the industrial internet platform can be divided according to physical regions, business functions or device types, and the network segment boundary of the address of any one network access device can be locked after the subnet to which the network access device belongs is determined.

[0037] In the address allocation process, a unique network address can be allocated to the network access device in the independent network segment according to the network segment boundary. Specifically, after the independent network segment is locked, a unique network address can be allocated to the device by using a static allocation or a dynamic allocation mode in combination with the number of network access devices in the subnet, and a subnet mask and a gateway are configured to form a complete network address.

[0038] S23, configuring a corresponding routing strategy for any one subnet according to the network demand, and binding the routing strategy and the independent network segment corresponding to the any one subnet; wherein the network demand includes the number of network access devices, communication demand, and bandwidth demand.

[0039] In an embodiment of the present application, the step of configuring a corresponding routing strategy for any one subnet according to the network demand, and binding the routing strategy and the independent network segment corresponding to the any one subnet includes: determining a first routing priority of the network access device based on the service type of the network access device and the network demand; determining a second routing priority of the any one subnet based on the first routing priority of all network access devices corresponding to the any one subnet; determining a routing strategy of the any one subnet based on the first routing priority and the second routing priority; and binding the routing strategy and the independent network segment corresponding to the any one subnet.

[0040] S24, configuring a firewall of the industrial internet platform based on the network address and the port number of any one network access device; and determining an access control strategy of the network access device according to the configuration information of the firewall, the network address of the network access device, and the corresponding subnet mask.

[0041] In an embodiment of the present application, the step of configuring a firewall of the industrial internet platform based on the network address and the port number of any one network access device includes: determining a device security level of the any one network access device based on the port number of the any one network access device; determining a data transmission authority corresponding to the any one network access device based on the device security level; determining a communication white list of the any one subnet based on the data transmission authorities of all network access devices corresponding to the any one subnet; the communication white list is used to indicate the network address of other devices capable of being in communication connection with any one network access device in the any one subnet; and configuring the firewall configuration information of the industrial internet platform according to the data transmission authority of the any one network access device and the communication white list of the any one subnet.

[0042] In an embodiment of the present application, the method further comprises determining the access control policy of the industrial internet device according to the configuration information of the firewall, the network address and the corresponding subnet mask of the industrial internet device, comprising: determining the access scene corresponding to any one of the industrial internet devices according to the time when the industrial internet receives the access request corresponding to the any one of the industrial internet devices; determining the access requirement corresponding to the any one of the industrial internet devices based on the access scene; updating the configuration information of the firewall based on the access requirement, the network address and the corresponding subnet mask of the any one of the industrial internet devices, to obtain the access control policy of the any one of the industrial internet devices.

[0043] S25, acquiring the network state of the industrial internet platform in real time, and outputting the pre-stored network segment early warning information in the case that there is network data fluctuation in the industrial internet platform.

[0044] In an embodiment of the present application, the method further comprises determining the network data fluctuation of the industrial internet platform based on the network state of the industrial internet platform acquired in real time, comprising: determining the request response success rate of the data transmission based on the first communication protocol in the industrial internet platform based on the network state; determining the delay rate and the packet loss rate of the data transmission of any one of the industrial internet devices based on the network state; and determining that the network data of the industrial internet platform fluctuates in the case that the request response success rate meets the first constraint condition, and the delay rate and the packet loss rate of the data transmission of the any one of the industrial internet devices meet the second constraint condition.

[0045] From the above technical solutions, it can be seen that the embodiments of the present application realize dynamic adaptation through subnet elastic scaling, can automatically split or merge subnets according to the number of device access, can also divide exclusive subnets according to device types, and can improve network adaptability. Assigning high-bandwidth exclusive links to real-time control type services and enabling a routing preemption mechanism can improve the real-time performance of services. Through automatic configuration and fault self-healing, operation and maintenance cost reduction and efficiency improvement are realized, subnets, routes, and security policies are automatically generated according to the number of industrial internet devices, the region to which the industrial internet devices belong, and other parameters, and are one-key issued; for IP shortage, link failure and other problems, subnet expansion, route switching and other repair operations are automatically triggered, without manual intervention, which can improve operation and maintenance efficiency and network segment planning efficiency.

[0046] See Figure 3 , Figure 3is a functional module diagram of a network segment planning device based on an industrial internet platform provided by an embodiment of the present application. The network segment planning device 31 based on the industrial internet platform comprises a first planning module 310, a second planning module 311, a determination module 312, a configuration module 313 and a warning module 314. The module / unit referred to in the present application refers to a series of computer readable instruction segments capable of being executed by the processor 13 and capable of completing a fixed function, which are stored in the memory 12. In the present embodiment, the functions of each module / unit will be described in detail in subsequent embodiments.

[0047] The first planning module 310 is configured to perform network planning on the industrial internet platform according to a preset network scale, to obtain an address space of the industrial internet platform; wherein the network scale comprises the number of network access devices.

[0048] The second planning module 311 is configured to perform subnet planning on the address space according to a preset network demand, to determine a plurality of subnets and an independent network segment corresponding to any one subnet; the network demand comprises the regional characteristics of the deployment area of the network access device.

[0049] The determination module 312 is configured to determine the network address of any one network access device based on the address space, the subnets and the corresponding independent network segments, and the number of network access devices.

[0050] The determination module 312 is further configured to configure a corresponding routing strategy for any one subnet according to the network demand, and bind the routing strategy and the independent network segment corresponding to the any one subnet; wherein the network demand comprises the number of network access devices, communication demand and bandwidth demand.

[0051] The configuration module 313 is configured to configure a firewall of the industrial internet platform based on the network address and port number of any one network access device, and determine an access control strategy of the network access device according to the configuration information of the firewall, the network address of the network access device and the corresponding subnet mask.

[0052] The warning module 314 is configured to acquire the network state of the industrial internet platform in real time, and output pre-stored network segment warning information in the case that there is network data fluctuation in the industrial internet platform.

[0053] Please refer to Figure 4 is a structural schematic diagram of an electronic device provided by an embodiment of the present application. The electronic device 100 comprises a memory 12 and a processor 13. The memory 12 is configured to store computer readable instructions, and the processor 13 is configured to execute the computer readable instructions stored in the memory to implement the network segment planning method based on the industrial internet platform described in any one of the above embodiments.

[0054] In an embodiment of the present application, the electronic device 100 further comprises a bus, a computer program stored in the memory 12 and executable on the processor 13, for example, an industrial internet platform-based network segment planning program.

[0055] Figure 4 Only the electronic device 100 with the memory 12 and the processor 13 is shown, and those skilled in the art can understand that, Figure 4 The structure shown does not constitute a limitation on the electronic device 100, and can include fewer or more components than shown, or combine certain components, or different component arrangements.

[0056] In combination Figure 2 The memory 12 in the electronic device 100 stores a plurality of computer readable instructions to implement an industrial internet platform-based network segment planning method, and the processor 13 can execute the plurality of instructions to achieve: performing network planning on an industrial internet platform according to a preset network size to obtain an address space of the industrial internet platform; wherein the network size includes the number of devices connected to the network; performing subnet planning on the address space according to a preset network requirement to determine a plurality of subnets and an independent network segment corresponding to any one subnet; the network requirement includes the regional characteristics of the deployment area of the devices connected to the network; based on the address space, the subnets and the corresponding independent network segments, and the number of devices connected to the network, determining the network address of any one device connected to the network; configuring a corresponding routing strategy for any one subnet according to the network requirement, binding the routing strategy and the independent network segment corresponding to the any one subnet; wherein the network requirement includes the number of devices connected to the network, communication requirement, and bandwidth requirement; configuring a firewall of the industrial internet platform based on the network address and port number of any one device connected to the network; and determining an access control strategy of the device connected to the network according to the configuration information of the firewall, the network address of the device connected to the network, and the corresponding subnet mask; real-time acquisition of the network state of the industrial internet platform, in the case of network data fluctuation in the industrial internet platform, outputting pre-stored network segment warning information.

[0057] Specifically, the specific implementation method of the processor 13 on the above instructions can refer to Figure 2 The description of related steps in the corresponding embodiments is not repeated here.

[0058] Those skilled in the art can understand that the schematic diagram is only an example of the electronic device 100 and does not constitute a limitation on the electronic device 100, and the electronic device 100 can be a bus structure or a star structure, and the electronic device 100 can further include more or less other hardware or software than shown, or different component arrangements, for example, the electronic device 100 can further include an input / output device, a network access device, etc.

[0059] It should be noted that electronic device 100 is only an example. Other existing or future electronic products that are suitable for this application should also be included within the scope of protection of this application and are incorporated herein by reference.

[0060] The memory 12 includes at least one type of readable storage medium, which can be non-volatile or volatile. The readable storage medium includes flash memory, portable hard drives, multimedia cards, card-type memory (e.g., SD or DX memory), magnetic storage, magnetic disks, optical disks, etc. In some embodiments, the memory 12 can be an internal storage unit of the electronic device 100, such as the portable hard drive of the electronic device 100. In other embodiments, the memory 12 can also be an external storage device of the electronic device 100, such as a plug-in portable hard drive, smart media card (SMC), secure digital (SD) card, flash card, etc., equipped on the electronic device 100. The memory 12 can be used not only to store application software and various types of data installed on the electronic device 100, such as the code of a network segment planning program based on an industrial internet platform, but also to temporarily store data that has been output or will be output.

[0061] In some embodiments, the processor 13 may be composed of integrated circuits, such as a single packaged integrated circuit or multiple integrated circuits packaged with the same or different functions, including combinations of one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and various control chips. The processor 13 is the control unit of the electronic device 100, connecting various components of the electronic device 100 via various interfaces and lines. It executes programs or modules stored in the memory 12 (e.g., executing a network segment planning program based on an industrial internet platform) and calls data stored in the memory 12 to perform various functions and process data for the electronic device 100.

[0062] The processor 13 executes the operating system of the electronic device 100 and various installed applications. The processor 13 executes these applications to implement the steps described in the above embodiments of a network segment planning method based on an industrial internet platform, for example... Figure 2 The steps are shown.

[0063] The computer program can be divided into one or more modules / units, which are stored in the memory 12 and executed by the processor 13 to complete the present application. The one or more modules / units can be a series of computer-readable instruction segments capable of completing a specific function, which are used to describe the execution process of the computer program in the electronic device 100. For example, the computer program can be divided into a first planning module 310, a second planning module 311, a determination module 312, a configuration module 313, and a pre-warning module 314.

[0064] The integrated units in the form of software function modules described above can be stored in a computer-readable storage medium. The software function modules described above are stored in a storage medium, including a plurality of instructions for causing a computer device (which can be a personal computer, a computer device, or a network device, etc.) or a processor (Processor) to execute part of the industrial internet platform-based network segment planning method described in various embodiments of the present application.

[0065] The modules / units integrated in the electronic device 100, if realized in the form of software function units and sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the above-mentioned embodiments can also be instructed by a computer program to complete related hardware devices, and the computer program can be stored in a computer-readable storage medium. When the processor executes the computer program, the steps of the above-mentioned various method embodiments can be implemented.

[0066] The computer program includes computer program code, which can be in the form of source code, object code, executable files, or some intermediate forms, etc. The computer-readable medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory, and other memories, etc.

[0067] Further, the computer-readable storage medium can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required by a function, etc.; the data storage area can store data created according to the use of the blockchain node, etc.

[0068] The bus can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus or the like. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one arrow is shown in Figure 4

[0069] The embodiment of the present application further provides a computer readable storage medium (not shown in figure), which stores computer readable instructions, and the computer readable instructions are executed by a processor in an electronic device to implement the network segment planning method based on an industrial internet platform.

[0070] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other manners. For example, the above-described device embodiment is merely illustrative, and the division of the modules is merely a logical function division, and there can be another division manner in actual implementation.

[0071] The modules described as separated components can or can not be physically separated, and the components displayed as modules can or can not be physical units, i.e., can be located in one place or distributed on multiple network units. According to actual needs, some or all of the modules can be selected to achieve the purpose of the embodiment.

[0072] In addition, each functional module in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present separately, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of hardware plus software functional modules.

[0073] In addition, it is obvious that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. The plurality of units or devices stated in the specification can also be implemented by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any specific order.

[0074] ​Finally, it should be noted that the above examples are only used to illustrate the technical solutions of the present application and are not limiting. Although the present application has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present application can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present application.

Claims

1. A network segment planning method based on an industrial internet platform, characterized in that, The method includes: The industrial internet platform is network-planned according to a preset network scale to obtain the address space of the industrial internet platform; wherein, the network scale includes the number of network-connected devices; The address space is subnetted according to preset network requirements to determine multiple subnets and an independent network segment corresponding to any one subnet; the network requirements include the regional characteristics of the deployment area of ​​the network access device. Based on the address space, the subnet and the corresponding independent network segment, and the number of network access devices, determine the network address of any network access device; Configure a corresponding routing policy for any subnet according to the network requirements, and bind the routing policy to the independent network segment corresponding to the any subnet; wherein, the network requirements include the number of network-connected devices, communication requirements, and bandwidth requirements; Configure the firewall of the industrial internet platform based on the network address and port number of any network-connected device; and determine the access control policy of the network-connected device based on the firewall configuration information, the network address of the network-connected device and the corresponding subnet mask. The network status of the industrial internet platform is acquired in real time, and in the event of network data fluctuations in the industrial internet platform, pre-stored network segment warning information is output.

2. The network segment planning method based on an industrial internet platform as described in claim 1, characterized in that, The step of performing network planning for the industrial internet platform based on a preset network scale to obtain the address space of the industrial internet platform includes: Based on the attribute information of the network-connected devices in the industrial internet platform, the device type corresponding to the network-connected devices is determined; Based on the device type, determine the lifecycle, communication requirements, and bandwidth requirements of the network access device; The address space of the industrial internet platform is determined based on the terminal density constraints corresponding to the device type, the lifecycle of the network-connected device, its communication requirements, and its bandwidth requirements.

3. The network segment planning method based on an industrial internet platform as described in claim 2, characterized in that, The step of subnetting the address space according to preset network requirements, and determining multiple subnets and the independent network segment corresponding to any one subnet, includes: Based on the regional characteristics and the attribute information of the network access device, determine the device group to which the network access device belongs and the subnet corresponding to any device group; The subnet capacity of the subnet corresponding to any given device group is determined based on the number of network-connected devices in that device group. Based on the address space and the subnet capacity corresponding to any one of the device groups, determine the subnet mask of the subnet corresponding to the any one of the device groups; Based on the address space and the subnet mask, the network addresses corresponding to all network-connected devices in any one device group are divided to obtain an independent network segment corresponding to any one subnet.

4. The network segment planning method based on an industrial internet platform as described in claim 1, characterized in that, The step of configuring a corresponding routing policy for any subnet according to the network requirements, and binding the routing policy with the independent network segment corresponding to the any subnet, includes: Based on the service type of the network access device and the network requirements, the first routing priority of the network access device is determined; Based on the first routing priority of all network-connected devices corresponding to any given subnet, determine the second routing priority of that given subnet; Based on the first routing priority and the second routing priority, determine the routing policy for any one subnet; and bind the routing policy to the independent network segment corresponding to any one subnet.

5. The network segment planning method based on an industrial internet platform as described in claim 1, characterized in that, The configuration of the firewall of the industrial internet platform based on the network address and port number of any network-connected device includes: Based on the port number of any one of the network access devices, determine the device security level of any one of the network access devices; Based on the device security level, determine the data transmission permissions corresponding to any one of the network access devices; Based on the data transmission permissions of all network-connected devices corresponding to any subnet, a communication whitelist for that subnet is determined; the communication whitelist is used to indicate the network addresses of other devices that can communicate and connect with any network-connected device in that subnet. Configure the firewall configuration information of the industrial internet platform according to the data transmission permissions of any one of the network-connected devices and the communication whitelist of any one of the subnets.

6. The network segment planning method based on an industrial internet platform as described in claim 5, characterized in that, The step of determining the access control policy for the network access device based on the firewall configuration information, the network address of the network access device, and the corresponding subnet mask includes: Based on the time when the Industrial Internet receives an access request corresponding to any network-connected device, the access scenario corresponding to the any network-connected device is determined; Based on the access scenario, determine the access requirements corresponding to any one of the network access devices; Based on the access requirements, the network address of any one of the network-connected devices, and the corresponding subnet mask, the configuration information of the firewall is updated to obtain the access control policy for any one of the network-connected devices.

7. The network segment planning method based on an industrial internet platform as described in claim 1, characterized in that, The method further includes determining fluctuations in the network data of the industrial internet platform based on the real-time acquired network status of the industrial internet platform, including: Based on the network status, determine the request-response success rate of data transmission based on the first communication protocol in the industrial internet platform; Based on the network status, determine the latency and packet loss rate of data transmission for any network-connected device. If the success rate of the request response meets the first constraint condition, and the latency and packet loss rate of the data transmitted by any of the network-connected devices meet the second constraint condition, it is determined that the network data of the industrial internet platform is fluctuating.

8. A network segment planning device based on an industrial internet platform, characterized in that, The apparatus includes a module that implements a network segment planning method based on an industrial internet platform as described in any one of claims 1 to 7, and the apparatus includes: The first planning module is used to perform network planning for the industrial internet platform according to a preset network scale, and obtain the address space of the industrial internet platform; wherein, the network scale includes the number of network-connected devices; The second planning module is used to perform subnet planning on the address space according to preset network requirements, and to determine multiple subnets and independent network segments corresponding to any one subnet; the network requirements include the regional characteristics of the deployment area of ​​the network access device. The determination module is used to determine the network address of any network access device based on the address space, the subnet and the corresponding independent network segment, and the number of network access devices; The determining module is further configured to configure a corresponding routing policy for any subnet according to the network requirements, and bind the routing policy to the independent network segment corresponding to the any subnet; wherein, the network requirements include the number of network access devices, communication requirements, and bandwidth requirements; The configuration module is used to configure the firewall of the industrial internet platform based on the network address and port number of any network-connected device; and to determine the access control policy of the network-connected device according to the configuration information of the firewall, the network address of the network-connected device and the corresponding subnet mask. The early warning module is used to acquire the network status of the industrial internet platform in real time, and output pre-stored network segment early warning information when there are network data fluctuations in the industrial internet platform.

9. An electronic device, characterized in that, The electronic device includes a processor and a memory, wherein the processor is used to execute a computer program stored in the memory to implement a network segment planning method based on an industrial internet platform as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores at least one instruction, which is executed by a processor in an electronic device to implement a network segment planning method based on an industrial internet platform as described in any one of claims 1 to 7.

Images